jappie1976

Hoi,

Hij werkt wel iets sneller, maar het blijft nog steeds veel trager dan ik gewend ben. Heeft een grote schoonmaakbeurt ook effect? Want mijn computer staat vrijwel helemaal vol met foto's en video's. Heeft defragmentatie zin?

Goedenavond,

Mijn reactie duurde wat langer, maar ik ben weer terug van vakantie. Bijgevoegd het log bestandje.

Bedankt!

AdwCleaner[C0].txt

Mijn excuses. Ik had je laatste bericht over het hoofd gezien. Ik heb nu nogmaals de scan uitgevoerd. De bestanden zijn toegevoegd.

Hartelijk dank!

ZHPCleaner.txt

@abbs was dit voldoende of ben ik een stap vergeten? Alvast bedankt!

ZHPCleaner.txt

Goedemiddag,

Hierbij het logbestand.

Fijne middag en bedankt!

ZHPCleaner.txt

Oke, hartelijk dank. Ik ga met vakantie aanstaande dinsdag, dus ik hoop voor die tijd nog contact met jullie gehad te hebben.

Opnieuw bedankt!

Oke bedankt.... bij deze de twee bestanden

MVG

Jasper

Addition.txt

FRST.txt

Goedenavond digitale helden,

Ik zit nu in safe mode, want als ik mijn computer normaal opstart, dan zit ik er morgenochtend nog op te wachten. In het verleden hebben jullie mij al eens zeer adequaat geholpen, dus dacht, laat ik het via deze weg weer eens proberen. Ik ben alleen even kwijt hoe ik al die logjes enzo moet plaatsen. Wat waren hier de stappen voor? Bij voorbaat dank voor uw hulp!

Nee, het is echt een stuk minder. Bij opstarten neemt hij wel veel tijd, maar volgens mij moet ik wat programma's niet automatisch laten opstarten. Dat lijkt ook veel energie te kosten. Heel erg bedankt voor de hulp in ieder geval. Moet ik nogmaals een log maken om te checken of er nog andere zaken onder de leden zitten?

Oke, hier het logbestand. AdwCleanerC1.txt

Goedemorgen,

Ik vergeet inderdaad op toevoegen te drukken.... bij deze alsnog.

zoek-results.txt

Goedenavond,

Duidelijk. Ik heb het logbestand bijgevoegd.

Bedankt voor jullie hulp!

Groeten,

Jasper

Dit is het logje dat ik aangemaakt heb:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Sonia & Jasper at 2015-10-03 20:37:36
Microsoft Windows 7 Home Premium  Service Pack 1
System drive C: has 230 GB (34%) free of 669 GB
Total RAM: 8055 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:37:46 PM, on 10/3/2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18015)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\USB Camera\VM331_STI.EXE
C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe
C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
C:\PROGRA~2\Lenovo\LENOVO~2\CAPOSD.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
C:\Program Files (x86)\Citrix\Receiver\Receiver.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe
C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\SpotifyWebHelper.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe
C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\SpotifyCrashService.exe
C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe
C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe
C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
C:\Program Files (x86)\iTunes\iTunes.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe
C:\Program Files\trend micro\Sonia & Jasper.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL
O4 - HKLM\..\Run: [uSB3MON] "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331_STI.EXE
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [MuteSync] C:\Program Files (x86)\Lenovo\Lenovo MuteSync\MuteSync.exe
O4 - HKLM\..\Run: [intelligent Touchpad] C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
O4 - HKLM\..\Run: [updateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [updatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [CAPOSD] C:\PROGRA~2\Lenovo\LENOVO~2\CAPOSD.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [CitrixReceiver] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk"
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [Redirector] "C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Sonia & Jasper\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [spotify] "C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4724.0224] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4724.0224"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4726.0226] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4726.0226"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5907.0716] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5907.0716"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
O4 - HKCU\..\RunOnce: [uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5930.0814] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5930.0814"
O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Active File Monitor V12 (AdobeActiveFileMonitor12.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HTCMonitorService - Nero AG - C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel® ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Activation Service (McAWFwk) - McAfee, Inc. - c:\PROGRA~1\mcafee\msc\mcawfwk.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.11.163\McCHSvc.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\Windows\system32\mfevtps.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Fast boot service of lenovo (NSDSvc) - Unknown owner - C:\Windows\System32\NSDSvc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 25678 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files\Alwil Software\Avast5\AvastSvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe"
"C:\Windows\system32\mfevtps.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe"
"C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe"
"C:\Windows\system32\GWX\GWX.exe"
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
taskeng.exe {050C6CC0-6E3E-49EE-8DC5-B6F9C7375EC7}
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\spoolsv.exe
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
"C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe"
"C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe"
"C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files (x86)\USB Camera\VM331_STI.EXE"
"C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
"C:\Program Files (x86)\Lenovo\Lenovo MuteSync\MuteSync.exe"
"C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
adb fork-server server
"C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\PROGRA~2\Lenovo\LENOVO~2\CAPOSD.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup
"C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\Citrix\Receiver\Receiver.exe" -autoupdate -startplugins
"C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
"C:\Windows\system32\hkcmd.exe"
"C:\Windows\system32\igfxpers.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Program Files\Zune\ZuneLauncher.exe"
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe"
"C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe"
"C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding
"C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
"C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
"C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe"
"C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\SpotifyCrashService.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --channel="6192.0.724097443\1924096929" --no-sandbox --disable-d3d11 --enable-crash-reporter --lang=en-US --log-severity=disable --product-version=Spotify/1.0.14.124 --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,9,21,44 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2626 --enable-crash-reporter --lang=en-US --log-severity=disable --product-version=Spotify/1.0.14.124 /prefetch:822062411
"C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --no-sandbox --enable-deferred-image-decoding --lang=en-US --enable-crash-reporter --lang=en-US --log-severity=disable --product-version=Spotify/1.0.14.124 --disable-spell-checking --device-scale-factor=1 --font-cache-shared-mem-suffix=6192 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --use-image-texture-target=3553 --disable-accelerated-video-decode --channel="6192.1.245702314\1194201123" /prefetch:673131151
"C:\Windows\SYSTEM32\WISPTIS.EXE" /ManualLaunch;
"C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" "C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" -Embedding
"C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe" /McCoreSvc
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe"
"C:\Program Files\mcafee.com\agent\McUpdate.exe" /metroupload 9
"C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe"
"C:\Program Files (x86)\iTunes\iTunes.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe" --pipe \\.\pipe\30473732-423156130300227332 --parentPipe
\??\C:\Windows\system32\conhost.exe "1028455302-87130286321154234842044675393-24740875-380211281-20851971011976513664
"C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe"
\??\C:\Windows\system32\conhost.exe "-42504517-103189329-7552457481442769822-1167920110-1485757679-955715024-1981039294
"C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-92807fd1-a830-4ec1-8b73-50b4a53864b3 -SystemEventPortName:HostProcess-c2b32102-e005-4c2b-869c-3e9db0775216 -IoCancelEventPortName:HostProcess-5cd149b3-d946-4143-ab35-208f582e48fe -NonStateChangingEventPortName:HostProcess-b5f2a2e2-5856-4599-82cc-a9e85b07ae51 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:c23889bb-6037-418e-9935-52995de81f45 -DeviceGroupId:WpdFsGroup
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
WLIDSvcM.exe 8664
"C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe"
"C:\Program Files\McAfee.com\Agent\mcagent.exe" /shRequest
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe"
taskeng.exe {86B720A5-162C-4E84-9657-9C35226C59DC}
C:\Windows\system32\sppsvc.exe
"C:\Users\Sonia & Jasper\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe  
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1535155601-2421706697-1459365258-1001Core.job - C:\Users\Sonia & Jasper\AppData\Local\Facebook\Update\FacebookUpdate.exe  /c /nocrashserver
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1535155601-2421706697-1459365258-1001UA.job - C:\Users\Sonia & Jasper\AppData\Local\Facebook\Update\FacebookUpdate.exe  /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Sonia & Jasper\AppData\Roaming\Mozilla\Firefox\Profiles\ux8d25yj.default

prefs.js - "keyword.URL" -  "https://search.yahoo.com/search?fr=mcafee&type=C111US714D20140522&p="

"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe� Flash� Player 19.0.0.185 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1210150.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Citrix.com/npican]
"Description"=Citrix ICA Client Plugin
"Path"=C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe� Flash� Player 19.0.0.185 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10]
"Description"=McAfee Total Protection MIME Plugin
"Path"=c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll


C:\Program Files (x86)\Mozilla Firefox\components\
IICAClient.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
cgpcfg.dll
CgpCore.dll
confmgr.dll
ctxlogging.dll
ctxmui.dll
ICAClObj.class
icafile.dll
icalogon.dll
Microsoft.VC80.CRT.manifest
msvcm80.dll
msvcp80.dll
msvcr80.dll
npicaN.dll
nppdf32.dll
sslsdk_b.dll
TcpPServ.dll

C:\Users\Sonia & Jasper\AppData\Roaming\Mozilla\Firefox\Profiles\ux8d25yj.default\searchplugins\
McSiteAdvisor.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Skype for Business Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-08-04 219304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll [2015-07-20 655480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01 2133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-09-11 888432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-09-11 2340472]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-12-13 64672]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2015-07-20 559624]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01 1724032]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-09-12 710872]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-01-28 170264]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-01-28 398616]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-01-28 440600]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-12-13 792224]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-12-13 657568]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-01-31 12446824]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-11-15 1156712]
"SynLenovoGestureMgr"=C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [2011-11-10 408872]
"OnekeyStudio"=C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe [2012-05-30 789856]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-14 222504]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2012-05-30 8079408]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2012-05-30 6200368]
"Lenovo EE Boot Optimizer"=C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [2012-05-30 206176]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-02-25 3023600]
"Zune Launcher"=C:\Program Files\Zune\ZuneLauncher.exe [2011-08-05 163552]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-06-03 472984]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
"Spotify Web Helper"=C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2015-09-30 2025016]
"Facebook Update"=C:\Users\Sonia & Jasper\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-07-30 138096]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-08-27 22041192]
"OneDrive"=C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\OneDrive.exe [2015-09-15 405584]
"Spotify"=C:\Users\Sonia & Jasper\AppData\Roaming\Spotify\Spotify.exe [2015-09-30 7571000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4029.0217"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1165.0612"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1166.0618"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4724.0224\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4724.0224"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4726.0226\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.4726.0226"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5907.0716"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"=C:\Windows\system32\cmd.exe [2010-11-21 345088]
"Uninstall C:\Users\Sonia & Jasper\AppData\Local\Microsoft\OneDrive\17.3.5930.0814"=C:\Windows\system32\cmd.exe [2010-11-21 345088]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-01-27 291608]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331_STI.EXE [2011-11-24 548864]
"Dolby Home Theater v4"=C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2011-06-01 506712]
"MuteSync"=C:\Program Files (x86)\Lenovo\Lenovo MuteSync\MuteSync.exe [2012-02-04 343040]
"Intelligent Touchpad"=C:\Program Files\Lenovo\Intelligent Touchpad\TouchZone.exe [2011-12-08 291272]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-01-29 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [2011-01-29 228448]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2010-07-27 222504]
"VeriFaceManager"=C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2012-05-30 329056]
"mcui_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2013-03-13 1532992]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-14 222504]
"CAPOSD"=C:\PROGRA~2\Lenovo\LENOVO~2\CAPOSD.exe [2012-02-09 1876992]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-01-28 59720]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-02-20 152392]
"CitrixReceiver"=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk []
"ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2013-10-01 395656]
"Redirector"=C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [2013-10-01 153992]
"AvastUI.exe"=C:\Program Files\Alwil Software\Avast5\AvastUI.exe [2015-07-20 6109776]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.11.163\SSScheduler.exe
Microsoft Office.lnk - C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-01-19 430080]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefire]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableTaskMgr"=0
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux4"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux5"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux6"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux7"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux8"=wdmaud.drv
"aux9"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-10-03 20:37:37 ----D---- C:\Program Files\trend micro
2015-10-03 20:37:36 ----D---- C:\rsit
2015-10-03 19:54:24 ----HD---- C:\OneDriveTemp
2015-09-30 00:13:05 ----D---- C:\Program Files (x86)\SoulseekQt
2015-09-19 12:16:57 ----D---- C:\ProgramData\Package Cache
2015-09-11 10:31:44 ----D---- C:\8abaaf553665069b5707f3
2015-09-10 22:22:31 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-09-10 22:22:31 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-09-10 22:22:31 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-09-10 22:22:30 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-09-10 22:22:30 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-09-10 22:22:30 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-09-10 22:22:29 ----A---- C:\Windows\system32\ie4uinit.exe
2015-09-10 22:22:28 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-09-10 22:22:28 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-09-10 22:22:28 ----A---- C:\Windows\system32\iernonce.dll
2015-09-10 22:22:27 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-09-10 22:22:26 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-09-10 22:22:25 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-09-10 22:22:25 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-10 22:22:24 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-09-10 22:22:24 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-09-10 22:22:23 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-09-10 22:22:23 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-09-10 22:22:21 ----A---- C:\Windows\system32\iedkcs32.dll
2015-09-10 22:22:20 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-09-10 22:22:20 ----A---- C:\Windows\system32\urlmon.dll
2015-09-10 22:22:20 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-09-10 22:22:19 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-09-10 22:22:19 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-09-10 22:22:19 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-09-10 22:22:19 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-09-10 22:22:18 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-09-10 22:22:18 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-09-10 22:22:18 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-09-10 22:22:18 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-10 22:22:18 ----A---- C:\Windows\system32\msfeeds.dll
2015-09-10 22:22:18 ----A---- C:\Windows\system32\dxtrans.dll
2015-09-10 22:22:17 ----A---- C:\Windows\system32\iesetup.dll
2015-09-10 22:22:17 ----A---- C:\Windows\system32\ieapfltr.dll
2015-09-10 22:22:15 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-09-10 22:22:15 ----A---- C:\Windows\system32\iertutil.dll
2015-09-10 22:22:14 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-09-10 22:22:14 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-09-10 22:22:14 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-09-10 22:22:14 ----A---- C:\Windows\system32\vbscript.dll
2015-09-10 22:22:14 ----A---- C:\Windows\system32\jsproxy.dll
2015-09-10 22:22:14 ----A---- C:\Windows\system32\ieUnatt.exe
2015-09-10 22:22:13 ----A---- C:\Windows\system32\ieui.dll
2015-09-10 22:22:13 ----A---- C:\Windows\system32\ieframe.dll
2015-09-10 22:22:13 ----A---- C:\Windows\system32\dxtmsft.dll
2015-09-10 22:22:12 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-09-10 22:22:12 ----A---- C:\Windows\system32\mshtmled.dll
2015-09-10 22:22:12 ----A---- C:\Windows\system32\jscript9diag.dll
2015-09-10 22:22:12 ----A---- C:\Windows\system32\jscript.dll
2015-09-10 22:22:11 ----A---- C:\Windows\system32\wininet.dll
2015-09-10 22:22:11 ----A---- C:\Windows\system32\jscript9.dll
2015-09-10 22:22:10 ----A---- C:\Windows\system32\msrating.dll
2015-09-10 22:22:10 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-09-10 22:22:09 ----A---- C:\Windows\system32\mshtml.dll
2015-09-10 22:15:33 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-09-10 22:15:33 ----A---- C:\Windows\system32\InkEd.dll
2015-09-10 22:15:31 ----A---- C:\Windows\system32\jnwmon.dll
2015-09-10 22:15:28 ----A---- C:\Windows\system32\schedsvc.dll
2015-09-10 22:15:20 ----A---- C:\Windows\SYSWOW64\tzres.dll
2015-09-10 22:15:20 ----A---- C:\Windows\system32\tzres.dll
2015-09-10 22:13:37 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-09-10 22:13:37 ----A---- C:\Windows\system32\dwmcore.dll
2015-09-10 22:13:37 ----A---- C:\Windows\system32\dwmapi.dll
2015-09-10 22:13:36 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2015-09-10 22:13:27 ----A---- C:\Windows\system32\UtcResources.dll
2015-09-10 22:13:27 ----A---- C:\Windows\system32\diagtrack.dll
2015-09-10 22:13:26 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-09-10 22:13:26 ----A---- C:\Windows\system32\ntdll.dll
2015-09-10 22:13:25 ----A---- C:\Windows\system32\tdh.dll
2015-09-10 22:13:25 ----A---- C:\Windows\system32\kernel32.dll
2015-09-10 22:13:24 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-09-10 22:13:23 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-09-10 22:13:23 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-09-10 22:13:23 ----A---- C:\Windows\system32\KernelBase.dll
2015-09-10 22:13:22 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-09-10 22:13:22 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-09-10 22:13:22 ----A---- C:\Windows\system32\advapi32.dll
2015-09-10 22:13:21 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-09-10 22:13:21 ----A---- C:\Windows\system32\lsasrv.dll
2015-09-10 22:13:19 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-09-10 22:13:19 ----A---- C:\Windows\system32\wow64.dll
2015-09-10 22:13:19 ----A---- C:\Windows\system32\srcore.dll
2015-09-10 22:13:19 ----A---- C:\Windows\system32\rstrui.exe
2015-09-10 22:13:19 ----A---- C:\Windows\system32\rpcrt4.dll
2015-09-10 22:13:18 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-09-10 22:13:18 ----A---- C:\Windows\system32\winsrv.dll
2015-09-10 22:13:18 ----A---- C:\Windows\system32\kerberos.dll
2015-09-10 22:13:18 ----A---- C:\Windows\system32\csrsrv.dll
2015-09-10 22:13:18 ----A---- C:\Windows\system32\conhost.exe
2015-09-10 22:13:17 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-09-10 22:13:17 ----A---- C:\Windows\system32\wdigest.dll
2015-09-10 22:13:17 ----A---- C:\Windows\system32\smss.exe
2015-09-10 22:13:17 ----A---- C:\Windows\system32\schannel.dll
2015-09-10 22:13:17 ----A---- C:\Windows\system32\msv1_0.dll
2015-09-10 22:13:16 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-09-10 22:13:16 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-09-10 22:13:16 ----A---- C:\Windows\system32\sspicli.dll
2015-09-10 22:13:16 ----A---- C:\Windows\system32\ncrypt.dll
2015-09-10 22:13:16 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-09-10 22:13:16 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-09-10 22:13:15 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-09-10 22:13:15 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-09-10 22:13:15 ----A---- C:\Windows\system32\TSpkg.dll
2015-09-10 22:13:15 ----A---- C:\Windows\system32\lsass.exe
2015-09-10 22:13:06 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-09-10 22:13:06 ----A---- C:\Windows\system32\auditpol.exe
2015-09-10 22:12:42 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-09-10 22:12:29 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-09-10 22:12:29 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-09-10 22:12:29 ----A---- C:\Windows\system32\srclient.dll
2015-09-10 22:12:29 ----A---- C:\Windows\system32\secur32.dll
2015-09-10 22:12:29 ----A---- C:\Windows\system32\ntvdm64.dll
2015-09-10 22:12:29 ----A---- C:\Windows\system32\cryptbase.dll
2015-09-10 22:12:28 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-09-10 22:12:28 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-09-10 22:12:28 ----A---- C:\Windows\system32\wow64win.dll
2015-09-10 22:12:28 ----A---- C:\Windows\system32\sspisrv.dll
2015-09-10 22:12:28 ----A---- C:\Windows\system32\credssp.dll
2015-09-10 22:12:27 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-09-10 22:12:27 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-09-10 22:12:27 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-09-10 22:12:27 ----A---- C:\Windows\system32\wow64cpu.dll
2015-09-10 22:12:27 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-09-10 22:12:27 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-09-10 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-10 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-10 22:12:26 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-10 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-10 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-10 22:12:26 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-10 22:12:26 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-09-10 22:12:26 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-09-10 22:12:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-10 22:12:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-10 22:12:25 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-10 22:12:25 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-10 22:12:25 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-10 22:12:25 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-10 22:12:25 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-10 22:12:25 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-10 22:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-10 22:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-10 22:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-10 22:12:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-10 22:12:24 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-10 22:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-10 22:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-10 22:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-10 22:12:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-10 22:12:23 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-10 22:12:23 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-10 22:12:23 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-10 22:12:23 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-10 22:12:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-10 22:12:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-10 22:12:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-10 22:12:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-10 22:12:22 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-10 22:12:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-10 22:12:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-10 22:12:21 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-10 22:12:21 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-10 22:12:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-10 22:12:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-10 22:12:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-10 22:12:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-10 22:12:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-10 22:12:20 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-10 22:12:20 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-10 22:12:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-10 22:12:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-10 22:12:19 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-10 22:12:04 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-09-10 22:12:04 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-09-10 22:12:04 ----A---- C:\Windows\system32\apisetschema.dll
2015-09-10 22:12:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-10 22:12:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-10 22:12:03 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-10 22:12:03 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-10 22:12:02 ----A---- C:\Windows\SYSWOW64\user.exe
2015-09-10 22:12:02 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-09-10 22:12:02 ----A---- C:\Windows\system32\adtschema.dll
2015-09-10 22:12:01 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-09-10 22:12:01 ----A---- C:\Windows\system32\msaudite.dll
2015-09-10 22:11:59 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-09-10 22:11:59 ----A---- C:\Windows\system32\msobjs.dll
2015-09-10 22:11:30 ----A---- C:\Windows\system32\authui.dll
2015-09-10 22:11:29 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-09-10 22:11:29 ----A---- C:\Windows\system32\consent.exe
2015-09-10 22:11:28 ----A---- C:\Windows\system32\appinfo.dll
2015-09-10 22:11:17 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-09-10 22:11:17 ----A---- C:\Windows\system32\msxml6.dll
2015-09-10 22:11:17 ----A---- C:\Windows\system32\msxml3.dll
2015-09-10 22:11:16 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-09-10 22:11:16 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-09-10 22:11:16 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-09-10 22:11:16 ----A---- C:\Windows\system32\msxml6r.dll
2015-09-10 22:11:16 ----A---- C:\Windows\system32\msxml3r.dll
2015-09-10 22:10:57 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-09-10 22:10:55 ----A---- C:\Windows\system32\appidsvc.dll
2015-09-10 22:10:55 ----A---- C:\Windows\system32\appidapi.dll
2015-09-10 22:10:53 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-09-10 22:10:49 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-09-10 22:10:47 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-09-10 22:10:46 ----A---- C:\Windows\system32\drivers\appid.sys
2015-09-10 22:10:08 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-09-10 22:10:08 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-09-10 22:10:08 ----A---- C:\Windows\system32\win32k.sys
2015-09-10 22:10:08 ----A---- C:\Windows\system32\lpk.dll
2015-09-10 22:10:08 ----A---- C:\Windows\system32\atmlib.dll
2015-09-10 22:10:08 ----A---- C:\Windows\system32\atmfd.dll
2015-09-10 22:10:07 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-09-10 22:10:07 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-09-10 22:10:07 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-09-10 22:10:07 ----A---- C:\Windows\system32\fontsub.dll
2015-09-10 22:10:07 ----A---- C:\Windows\system32\dciman32.dll
2015-09-10 22:10:02 ----A---- C:\Windows\system32\wucltux.dll
2015-09-10 22:10:02 ----A---- C:\Windows\system32\wuaueng.dll
2015-09-10 22:10:01 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-09-10 22:10:01 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-09-10 22:10:01 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-09-10 22:10:01 ----A---- C:\Windows\system32\wuwebv.dll
2015-09-10 22:10:01 ----A---- C:\Windows\system32\wuapi.dll
2015-09-10 22:10:01 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-09-10 22:10:00 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-09-10 22:10:00 ----A---- C:\Windows\system32\wups2.dll
2015-09-10 22:10:00 ----A---- C:\Windows\system32\wudriver.dll
2015-09-10 22:10:00 ----A---- C:\Windows\system32\wuauclt.exe
2015-09-10 22:10:00 ----A---- C:\Windows\system32\wuapp.exe
2015-09-10 22:09:59 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-09-10 22:09:59 ----A---- C:\Windows\system32\wups.dll
2015-09-10 22:09:59 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-09-10 08:58:25 ----HD---- C:\$Windows.~BT
2015-09-07 10:28:01 ----SD---- C:\Windows\SYSWOW64\Microsoft

======List of files/folders modified in the last 1 month======

2015-10-03 20:37:40 ----D---- C:\Windows\Temp
2015-10-03 20:37:37 ----D---- C:\Program Files
2015-10-03 20:00:35 ----D---- C:\Windows\inf
2015-10-03 20:00:35 ----AD---- C:\Windows\System32
2015-10-03 20:00:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-10-03 19:59:14 ----D---- C:\Users\Sonia & Jasper\AppData\Roaming\Spotify
2015-10-03 19:55:08 ----A---- C:\Windows\SYSWOW64\log.txt
2015-10-03 19:53:35 ----D---- C:\Windows\Prefetch
2015-10-03 19:52:56 ----D---- C:\ProgramData\VeriFace
2015-10-03 10:13:23 ----D---- C:\Windows\system32\config
2015-10-01 23:45:29 ----SHD---- C:\Windows\Installer
2015-10-01 23:45:09 ----SHD---- C:\System Volume Information
2015-10-01 22:52:30 ----D---- C:\Users\Sonia & Jasper\AppData\Roaming\Skype
2015-10-01 22:29:14 ----D---- C:\Windows\rescache
2015-09-30 00:17:20 ----D---- C:\Users\Sonia & Jasper\AppData\Roaming\uTorrent
2015-09-30 00:13:26 ----D---- C:\Users\Sonia & Jasper\AppData\Roaming\vlc
2015-09-30 00:13:05 ----RD---- C:\Program Files (x86)
2015-09-28 15:39:17 ----D---- C:\Windows\system32\drivers
2015-09-23 22:57:16 ----D---- C:\Windows\SysWOW64
2015-09-23 22:57:10 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-09-23 10:23:27 ----SHD---- C:\Config.Msi
2015-09-23 10:23:07 ----RSD---- C:\Windows\assembly
2015-09-23 10:23:02 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-09-23 10:20:54 ----D---- C:\Program Files\Microsoft Office 15
2015-09-19 13:58:49 ----D---- C:\Windows\Panther
2015-09-19 12:19:47 ----D---- C:\Users\Sonia & Jasper\AppData\Roaming\Origin
2015-09-19 12:19:46 ----D---- C:\ProgramData\Origin
2015-09-19 12:18:34 ----D---- C:\Program Files (x86)\Origin
2015-09-19 12:16:57 ----HD---- C:\ProgramData
2015-09-18 07:40:13 ----D---- C:\Windows\Tasks
2015-09-14 13:09:21 ----D---- C:\Windows\Microsoft.NET
2015-09-14 11:19:09 ----D---- C:\Windows\system32\Tasks
2015-09-13 12:41:26 ----D---- C:\Windows\winsxs
2015-09-13 12:38:33 ----D---- C:\Program Files\Windows Journal
2015-09-11 11:15:24 ----D---- C:\Windows\SYSWOW64\en-US
2015-09-11 11:15:24 ----D---- C:\Windows\system32\en-US
2015-09-11 11:15:24 ----D---- C:\Windows\ehome
2015-09-11 11:15:21 ----D---- C:\Program Files\Internet Explorer
2015-09-11 11:15:16 ----D---- C:\Windows\PolicyDefinitions
2015-09-11 11:15:12 ----D---- C:\Program Files (x86)\Internet Explorer
2015-09-11 11:14:50 ----D---- C:\Windows\AppPatch
2015-09-11 11:14:36 ----D---- C:\Windows\system32\Boot
2015-09-11 10:31:53 ----D---- C:\Windows\system32\MRT
2015-09-10 22:09:37 ----D---- C:\Windows\system32\catroot2
2015-09-05 00:19:18 ----D---- C:\Windows\system32\catroot
2015-09-04 10:26:29 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-09-04 10:26:29 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-07-20 65224]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-07-20 274808]
R0 fbfmon;fbfmon; C:\Windows\system32\drivers\fbfmon.sys [2012-05-30 57952]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-11-30 568600]
R0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-01-27 16152]
R0 LHDmgr;LHDmgr; C:\Windows\System32\DRIVERS\LhdX64.sys [2012-05-30 39008]
R0 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2013-02-19 771536]
R0 mfewfpk;McAfee Inc. mfewfpk; C:\Windows\system32\drivers\mfewfpk.sys [2013-02-19 340216]
R0 NSD;NSD; C:\Windows\system32\drivers\nsd.sys [2011-12-24 24160]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2012-10-08 30056]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\drivers\PxHlpa64.sys [2013-07-19 56336]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-07-20 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-07-20 1048856]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-07-20 447944]
R1 BPntDrv;BPntDrv; C:\Windows\system32\drivers\BPntDrv.sys [2012-05-30 13408]
R1 ctxusbm;Citrix USB Monitor Driver; C:\Windows\system32\DRIVERS\ctxusbm.sys [2013-09-24 97768]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-03-20 283200]
R1 Nsdfltr;Nsdfltr; C:\Windows\system32\drivers\Nsdfltr.sys [2011-12-22 59488]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-07-20 28656]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-07-20 90968]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-07-20 150160]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\Windows\system32\DRIVERS\AcpiVpc.sys [2012-05-30 30816]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-10-22 2791424]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-12-13 29344]
R3 cfwids;McAfee Inc. cfwids; C:\Windows\system32\drivers\cfwids.sys [2013-02-19 70112]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2011-01-29 31088]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-01-19 14658688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-01-31 4739304]
R3 IntcDAud;Intel® Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264]
R3 iusb3hub;Intel® USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-01-27 356120]
R3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-01-27 787736]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 MEIx64;Intel® Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2011-11-10 60184]
R3 mfeapfk;McAfee Inc. mfeapfk; C:\Windows\system32\drivers\mfeapfk.sys [2013-02-19 179280]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [2013-02-19 309840]
R3 mfefirek;McAfee Inc. mfefirek; C:\Windows\system32\drivers\mfefirek.sys [2013-02-19 515968]
R3 mfesapsn;McAfee Process Start Notification Service; \??\C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [2015-09-22 37960]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-08-23 565352]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2013-02-25 470256]
R3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-12-13 36000]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-12-13 259744]
S3 btath_avdt;Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys [2011-12-13 109216]
S3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-12-13 166048]
S3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-12-13 59040]
S3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-12-13 283296]
S3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2011-12-13 290464]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-10-10 80384]
S3 HipShieldK;McAfee Inc. HipShieldK; C:\Windows\system32\drivers\HipShieldK.sys [2012-04-20 196440]
S3 HTCAND64;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-11-02 33736]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2012-12-07 36928]
S3 HtcVCom32;HTC Diagnostic Port; C:\Windows\system32\DRIVERS\HtcVComV64.sys [2010-03-08 121800]
S3 KMWDFILTER;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 30208]
S3 mfeavfk01;McAfee Inc.; C:\Windows\system32\drivers\mfeavfk01.sys []
S3 mferkdet;McAfee Inc. mferkdet; C:\Windows\system32\drivers\mferkdet.sys [2013-02-19 106552]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys [2011-10-24 313960]
S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor12.0;Adobe Active File Monitor V12; C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [2013-09-03 181152]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-12-13 106144]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2015-07-20 146600]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-05-01 1394816]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-05-01 1772672]
R2 ClickToRunSvc;Microsoft Office ClickToRun Service; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2015-09-11 2774104]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 HTCMonitorService;HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [2013-11-18 87368]
R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-03 628448]
R2 Intel® ME Service;Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [2012-02-08 128280]
R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [2012-02-08 161560]
R2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2012-02-08 277784]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [2015-09-22 157928]
R2 McMPFSvc;McAfee Personal Firewall Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-08-31 201304]
R2 mcmscsvc;McAfee Services; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-08-31 201304]
R2 McNaiAnn;McAfee VirusScan Announcer; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-08-31 201304]
R2 McNASvc;McAfee Network Agent; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-08-31 201304]
R2 McProxy;McAfee Proxy Service; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-08-31 201304]
R2 McShield;McAfee McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [2013-02-19 241456]
R2 mfefire;McAfee Firewall Core Service; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [2013-02-19 218760]
R2 mfevtp;McAfee Validation Trust Protection Service; C:\Windows\system32\mfevtps.exe [2013-02-19 182752]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-10-02 891240]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-12-07 167424]
R2 UNS;Intel® Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-02-08 363800]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-02-20 641352]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S2 NSDSvc;Fast boot service of lenovo; C:\Windows\System32\NSDSvc.exe [2011-12-24 120160]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-08 1258856]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-23 269000]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 cphs;Intel® Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-01-28 276248]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-08-15 114688]
S3 McAWFwk;McAfee Activation Service; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [2011-01-28 225216]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.11.163\McCHSvc.exe [2015-07-31 289256]
S3 McODS;McAfee Scanner; C:\Program Files\mcafee\VirusScan\mcods.exe [2013-02-26 384048]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-08-30 149160]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-09-19 2057736]
S3 ose;Office  Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-12-13 150600]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2014-12-13 5132888]
S4 McOobeSv;McAfee OOBE Service; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-08-31 201304]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------
 

Goedemiddag,

Ik heb al een tijdlang last van het feit dat mijn computer vastloopt, nadat ik hem een aantal minuten niet in gebruik heb en mijn computer automatisch op de screensaver gaat. Als ik hem, nadat mijn scherm zwart is, weer activeer, dan kan ik even met mijn muis bewegen, maar vervolgens loopt hij volledig vast en blijft mijn computer laden tot ik een ons weeg. Ik moet mijn computer dan uitzetten door de aan/uit knop langer dan 5 seconden ingedrukt te houden. Over het algemeen vind ik mijn computer ook een stuk trager dan voorheen. Wat kan ik het beste doen?

Met vriendelijke groeten en bij voorbaat dank,

Jasper

Ik Ben er mee bezig ja. Kost wat tijd, omdat de schijf erg onstabiel is. Kan dit topic nu wel sluiten, want weet wat het probleem is. Erg bedankt voor alle hulp die jullie geboden hebben!

Sorry, maar is de HDD de hard disc drive? En waarom zou deze vervangen moeten worden?

Nee. Helaas heb ik deze computer gekocht bij Computerland en hebben zij niet de originele cd bijgeleverd. Ik ga morgen eens met hen praten wat ik hiermee kan doen. Ik ga sowieso een externe harde schijf halen om alles op te kunnen zetten, zodat ik de computer compleet kan herinstalleren. Lijkt me in dit geval de beste optie. Zie geen andere mogelijkheden meer.

Hoi! Ik begrijp dat ik hem moet afsluiten. Ik ben alleen nog niet helemaal klaar, want het lijkt erop dat het probleem nog steeds niet helemaal opgelost is. Computer valt nog steeds uit met blauw scherm. Het gaat wel een stuk beter, maar probleem blijft wel bestaan. Ik ga toch nog eens de systeemcontrole uitvoeren om te kijken of deze iets vindt of iets kan herstellen.

Helaas heb ik geen overzicht gezien m.b.t. de systeemcontrole. Ik heb mijn computer vanochtend aangezet en heb de systeemcontrole gedaan. Het duurde zodanig lang, dat ik weg ben gegaan. Toen ik vanmiddag terug kwam, zag ik geen resultaat, maar de computer lijkt wel weer gewoon te werken! Hij heeft het in ieder geval nog niet zo lang zo goed gedaan de laatste week. Ik ben jullie heel erg dankbaar dat jullie bereid zijn digibeten zoals mij wilt helpen!! Heel erg bedankt daarvoor en zet dit goede werk voort! Ik zal deze discussie nog tot na het weekend open laten staan. Mocht hij het dan nog steeds goed doen, dan zal ik deze discussie aanmerken als opgelost!

Met die andere harddisk is ook niets aan de hand. Helemaal groen!

Het resultaat is dat eigenlijk alle blokjes groen zijn op eentje na. Ik heb alleen de grote harddisk gescand 750 gb en geeft aan dat er 0,0% damaged blocks zijn. Kan ik verder nog wat zien? Ik scan nu ook nog even een andere harddisk. Ik zal de resultaten later posten.

Nogmaals bedankt!

Het resultaat is dat eigenlijk alle blokjes groen zijn op eentje na. Ik heb alleen de grote harddisk gescand 750 gb en geeft aan dat er 0,0% damaged blocks zijn. Kan ik verder nog wat zien? Ik scan nu ook nog even een andere harddisk. Ik zal de resultaten later posten.

Nogmaals bedankt!

[ATTACH]20198[/ATTACH]

sfcdetails.txt

Upload niet gelukt. Ik kreeg het bestand niet op mijn bureaublad, maar wist dat hij onder C:/windows/log/cbs stond en heb hem vanaf die locatie proberen te uploaden. Schijnbaar werkt dit niet. Ik zal het morgen nog eens proberen. Nu tijd voor wat nachtrust. Bedankt voor je hulp!