blacklover2

zoek resultaat zoek exe

ik gebruik momenteel avast en hitman pro staat er op zijn up to date

hallo leden dit is het log rsitLogfile of random's system information tool 1.09 (written by random/random) Run by daniel at 2014-04-13 22:46:55 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 406 GB (89%) free of 457 GB Total RAM: 3691 MB (59% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 22:47:04, on 13-4-2014 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17041) Boot mode: Normal Running processes: C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe C:\Windows\SysWOW64\RunDll32.exe C:\Program Files\WIDCOMM\Bluetooth Software\Bluetooth Headset Helper.exe C:\Program Files\trend micro\daniel.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll O3 - Toolbar: (no name) - {41564952-412D-5637-4300-7A786E7484D7} - (no file) O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing) O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [HPQuickWebProxy] "C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: Bluetooth.lnk = ? O8 - Extra context menu item: Afbeelding verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Pagina verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing) O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing) O9 - Extra button: Verzenden naar Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: Verzenden naar &Bluetooth-apparaat... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe O23 - Service: HitmanPro Scheduler (HitmanProScheduler) - SurfRight B.V. - C:\Program Files\HitmanPro\hmpsched.exe O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11295 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe winlogon.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs "C:\Program Files\HitmanPro\hmpsched.exe" C:\Windows\system32\svchost.exe -k NetworkService "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" C:\Windows\system32\WLANExt.exe 5191376 \??\C:\Windows\system32\conhost.exe "7793037541845083618-13922296464324879046724589608234171901340757907-581068474 C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe" "C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService "C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe" C:\Windows\SysWOW64\ezSharedSvcHost.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe" "C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe" "C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe" "C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe" "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe" "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe" WLIDSvcM.exe 2356 C:\Windows\system32\wbem\wmiprvse.exe "C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE" C:\Windows\system32\svchost.exe -k bthsvcs C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted atieclxx "taskhost.exe" "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE "C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s taskeng.exe {D269F684-70F3-4B77-A82C-51B985D923B8} "C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe" "C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar2.exe" "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun "C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe" "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe" "C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe" "C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE" "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui "C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" "C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe" "C:\Windows\SysWOW64\RunDll32.exe" "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook "C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe" "C:\Program Files\WIDCOMM\Bluetooth Software\Bluetooth Headset Helper.exe" "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0 C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7} C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe "C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe" "C:\Users\daniel\Downloads\RSITx64.exe" C:\Windows\system32\wbem\wmiprvse.exe ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\HPCeeScheduleForDANIEL-HP$.job C:\Windows\tasks\HPCeeScheduleFordaniel.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-04-10 724512] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-10 597816] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Aanmeldhulp voor Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}] Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {41564952-412D-5637-4300-7A786E7484D7} {8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll [2012-06-11 1307728] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2011-01-11 6602856] "SetDefault"=C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [2011-06-27 42808] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "NCPluginUpdater"=C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [2014-04-08 21720] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584] "Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-02-10 20922016] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-07-05 336384] "HPQuickWebProxy"=C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [2011-06-28 168504] "Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2013-12-18 40312] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904] "Easybits Recovery"=C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [2011-05-17 61112] "AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-10 3854640] "HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2012-03-05 578944] "HPOSD"=C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [2011-08-19 379960] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2011-07-26 52920] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] "notification packages"=scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37Crusader] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37CrusaderBoot] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 "EnableShellExecuteHooks"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2014-04-13 22:46:55 ----D---- C:\rsit 2014-04-13 22:46:55 ----D---- C:\Program Files\trend micro 2014-04-13 22:23:31 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2014-04-13 22:23:30 ----A---- C:\Windows\system32\mstscax.dll 2014-04-13 22:09:14 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-04-13 22:09:05 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-04-13 22:09:05 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-04-13 22:09:04 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys 2014-04-13 22:09:02 ----A---- C:\Windows\SYSWOW64\tsgqec.dll 2014-04-13 22:09:02 ----A---- C:\Windows\system32\wksprtPS.dll 2014-04-13 22:09:02 ----A---- C:\Windows\system32\tsgqec.dll 2014-04-13 22:09:01 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll 2014-04-13 22:09:01 ----A---- C:\Windows\SYSWOW64\mstsc.exe 2014-04-13 22:09:01 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll 2014-04-13 22:09:01 ----A---- C:\Windows\system32\wksprt.exe 2014-04-13 22:09:01 ----A---- C:\Windows\system32\TSWbPrxy.exe 2014-04-13 22:09:01 ----A---- C:\Windows\system32\mstsc.exe 2014-04-13 22:09:01 ----A---- C:\Windows\system32\MsRdpWebAccess.dll 2014-04-13 22:08:59 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll 2014-04-13 22:08:59 ----A---- C:\Windows\system32\rdvidcrl.dll 2014-04-13 22:08:13 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-04-13 22:08:08 ----A---- C:\Windows\system32\drivers\TsUsbGD.sys 2014-04-13 22:08:08 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys 2014-04-13 22:08:02 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll 2014-04-13 22:08:02 ----A---- C:\Windows\system32\rdpudd.dll 2014-04-13 22:08:01 ----A---- C:\Windows\system32\rdpendp_winip.dll 2014-04-13 22:08:00 ----A---- C:\Windows\system32\rdpcorets.dll 2014-04-13 22:03:41 ----A---- C:\Windows\SYSWOW64\qdvd.dll 2014-04-13 22:03:41 ----A---- C:\Windows\system32\qdvd.dll 2014-04-13 22:03:37 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll 2014-04-13 22:03:37 ----A---- C:\Windows\system32\TSWorkspace.dll 2014-04-13 14:06:32 ----D---- C:\Users\daniel\AppData\Roaming\Panda Security 2014-04-13 14:06:02 ----D---- C:\ProgramData\Panda Security 2014-04-13 14:06:02 ----D---- C:\Program Files (x86)\Panda Security 2014-04-12 17:04:35 ----D---- C:\ProgramData\F-Secure 2014-04-12 14:42:06 ----D---- C:\Windows\Minidump 2014-04-12 11:43:43 ----D---- C:\Users\daniel\AppData\Roaming\CyberLink 2014-04-11 16:36:59 ----D---- C:\ProgramData\Synaptics 2014-04-11 16:29:39 ----D---- C:\Users\daniel\AppData\Roaming\Windows Live Writer 2014-04-11 16:11:32 ----A---- C:\Windows\system32\ieui.dll 2014-04-11 16:11:31 ----A---- C:\Windows\SYSWOW64\ieui.dll 2014-04-11 16:11:17 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2014-04-11 16:11:17 ----A---- C:\Windows\system32\vbscript.dll 2014-04-11 16:10:48 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-11 16:10:48 ----A---- C:\Windows\system32\iernonce.dll 2014-04-11 16:10:48 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2014-04-11 16:10:48 ----A---- C:\Windows\system32\ie4uinit.exe 2014-04-11 16:10:42 ----A---- C:\Windows\system32\jscript9diag.dll 2014-04-11 16:10:41 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2014-04-11 16:10:41 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2014-04-11 16:10:41 ----A---- C:\Windows\system32\dxtrans.dll 2014-04-11 16:10:41 ----A---- C:\Windows\system32\dxtmsft.dll 2014-04-11 16:10:40 ----A---- C:\Windows\SYSWOW64\msrating.dll 2014-04-11 16:10:40 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2014-04-11 16:10:40 ----A---- C:\Windows\system32\msrating.dll 2014-04-11 16:10:40 ----A---- C:\Windows\system32\jsproxy.dll 2014-04-11 16:10:39 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2014-04-11 16:10:39 ----A---- C:\Windows\system32\msfeeds.dll 2014-04-11 16:10:37 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2014-04-11 16:10:37 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2014-04-11 16:10:37 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2014-04-11 16:10:37 ----A---- C:\Windows\system32\ieUnatt.exe 2014-04-11 16:10:37 ----A---- C:\Windows\system32\iesetup.dll 2014-04-11 16:10:34 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll 2014-04-11 16:10:32 ----A---- C:\Windows\system32\mshtml.dll 2014-04-11 16:10:27 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2014-04-11 16:10:27 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2014-04-11 16:10:26 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2014-04-11 16:10:26 ----A---- C:\Windows\system32\ieapfltr.dll 2014-04-11 16:10:25 ----A---- C:\Windows\system32\ieetwproxystub.dll 2014-04-11 16:10:24 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-11 16:10:24 ----A---- C:\Windows\system32\ieetwcollector.exe 2014-04-11 16:10:20 ----A---- C:\Windows\SYSWOW64\wininet.dll 2014-04-11 16:10:20 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2014-04-11 16:10:20 ----A---- C:\Windows\system32\iertutil.dll 2014-04-11 16:10:19 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2014-04-11 16:10:19 ----A---- C:\Windows\system32\wininet.dll 2014-04-11 16:10:19 ----A---- C:\Windows\system32\urlmon.dll 2014-04-11 16:10:16 ----A---- C:\Windows\system32\ieframe.dll 2014-04-11 16:10:15 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2014-04-11 16:10:13 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2014-04-11 16:10:12 ----A---- C:\Windows\system32\jscript9.dll 2014-04-11 16:10:11 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2014-04-11 14:58:04 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll 2014-04-11 14:58:04 ----A---- C:\Windows\system32\WMPhoto.dll 2014-04-11 14:58:03 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll 2014-04-11 14:58:03 ----A---- C:\Windows\system32\d3d10warp.dll 2014-04-11 14:58:02 ----A---- C:\Windows\system32\d2d1.dll 2014-04-11 14:58:01 ----A---- C:\Windows\SYSWOW64\d2d1.dll 2014-04-11 14:56:11 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS 2014-04-11 14:56:11 ----A---- C:\Windows\system32\drivers\bthport.sys 2014-04-11 14:56:08 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll 2014-04-11 14:56:08 ----A---- C:\Windows\system32\WindowsCodecs.dll 2014-04-11 14:56:06 ----A---- C:\Windows\system32\spoolsv.exe 2014-04-11 14:56:05 ----A---- C:\Windows\splwow64.exe 2014-04-11 10:05:15 ----D---- C:\Program Files (x86)\Microsoft.NET 2014-04-11 10:05:10 ----D---- C:\Windows\Migration 2014-04-11 00:05:21 ----A---- C:\Windows\system32\IEUDINIT.EXE 2014-04-10 23:54:48 ----A---- C:\Windows\SYSWOW64\elshyph.dll 2014-04-10 23:54:39 ----A---- C:\Windows\SYSWOW64\url.dll 2014-04-10 23:54:39 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe 2014-04-10 23:54:39 ----A---- C:\Windows\SYSWOW64\msls31.dll 2014-04-10 23:54:39 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll 2014-04-10 23:54:39 ----A---- C:\Windows\SYSWOW64\licmgr10.dll 2014-04-10 23:54:39 ----A---- C:\Windows\SYSWOW64\jsIntl.dll 2014-04-10 23:54:39 ----A---- C:\Windows\SYSWOW64\inseng.dll 2014-04-10 23:54:39 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2014-04-10 23:54:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat 2014-04-10 23:54:39 ----A---- C:\Windows\SYSWOW64\icardie.dll 2014-04-10 23:54:39 ----A---- C:\Windows\system32\elshyph.dll 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\wextract.exe 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\webcheck.dll 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\pngfilt.dll 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\occache.dll 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\mshtmler.dll 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\mshta.exe 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\jscript.dll 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\imgutil.dll 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\iexpress.exe 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\iesysprep.dll 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\iepeers.dll 2014-04-10 23:54:38 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll 2014-04-10 23:54:38 ----A---- C:\Windows\system32\SetIEInstalledDate.exe 2014-04-10 23:54:38 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe 2014-04-10 23:54:38 ----A---- C:\Windows\system32\msls31.dll 2014-04-10 23:54:38 ----A---- C:\Windows\system32\mshtmler.dll 2014-04-10 23:54:38 ----A---- C:\Windows\system32\msfeedssync.exe 2014-04-10 23:54:38 ----A---- C:\Windows\system32\msfeedsbs.dll 2014-04-10 23:54:38 ----A---- C:\Windows\system32\jsIntl.dll 2014-04-10 23:54:38 ----A---- C:\Windows\system32\iesysprep.dll 2014-04-10 23:54:38 ----A---- C:\Windows\system32\ieapfltr.dat 2014-04-10 23:54:38 ----A---- C:\Windows\system32\IEAdvpack.dll 2014-04-10 23:54:38 ----A---- C:\Windows\system32\icardie.dll 2014-04-10 23:54:37 ----A---- C:\Windows\system32\wextract.exe 2014-04-10 23:54:37 ----A---- C:\Windows\system32\webcheck.dll 2014-04-10 23:54:37 ----A---- C:\Windows\system32\url.dll 2014-04-10 23:54:37 ----A---- C:\Windows\system32\pngfilt.dll 2014-04-10 23:54:37 ----A---- C:\Windows\system32\occache.dll 2014-04-10 23:54:37 ----A---- C:\Windows\system32\mshtmlmedia.dll 2014-04-10 23:54:37 ----A---- C:\Windows\system32\mshtmled.dll 2014-04-10 23:54:37 ----A---- C:\Windows\system32\MshtmlDac.dll 2014-04-10 23:54:37 ----A---- C:\Windows\system32\mshta.exe 2014-04-10 23:54:37 ----A---- C:\Windows\system32\licmgr10.dll 2014-04-10 23:54:37 ----A---- C:\Windows\system32\jscript.dll 2014-04-10 23:54:37 ----A---- C:\Windows\system32\inseng.dll 2014-04-10 23:54:37 ----A---- C:\Windows\system32\imgutil.dll 2014-04-10 23:54:37 ----A---- C:\Windows\system32\iexpress.exe 2014-04-10 23:54:37 ----A---- C:\Windows\system32\iepeers.dll 2014-04-10 23:54:37 ----A---- C:\Windows\system32\iedkcs32.dll 2014-04-10 23:51:27 ----D---- C:\Windows\SYSWOW64\Wat 2014-04-10 23:51:26 ----D---- C:\Windows\system32\Wat 2014-04-10 23:11:46 ----A---- C:\Windows\system32\wmploc.DLL 2014-04-10 23:11:45 ----A---- C:\Windows\SYSWOW64\wmploc.DLL 2014-04-10 23:11:44 ----A---- C:\Windows\SYSWOW64\wmp.dll 2014-04-10 23:11:41 ----A---- C:\Windows\system32\wmp.dll 2014-04-10 23:04:43 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2014-04-10 23:04:33 ----D---- C:\Windows\system32\Macromed 2014-04-10 22:50:55 ----D---- C:\Program Files (x86)\IncrediMail 2014-04-10 22:39:21 ----D---- C:\Users\daniel\AppData\Roaming\Skype 2014-04-10 22:39:05 ----RD---- C:\Program Files (x86)\Skype 2014-04-10 22:39:00 ----D---- C:\ProgramData\Skype 2014-04-10 21:38:24 ----D---- C:\Program Files (x86)\Photo Notifier and Animation Creator 2014-04-10 21:38:20 ----D---- C:\ProgramData\Photo Notifier and Animation Creator 2014-04-10 21:36:12 ----D---- C:\ProgramData\IncrediMail 2014-04-10 21:36:12 ----D---- C:\ProgramData\IM 2014-04-10 20:04:42 ----SHD---- C:\Config.Msi 2014-04-10 20:04:39 ----D---- C:\414de51348fbc241d5a7 2014-04-10 18:50:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-04-10 18:50:03 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-04-10 18:50:03 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll 2014-04-10 18:50:03 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll 2014-04-10 18:50:03 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll 2014-04-10 18:50:03 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll 2014-04-10 18:50:03 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll 2014-04-10 18:50:03 ----A---- C:\Windows\SYSWOW64\dxgi.dll 2014-04-10 18:50:03 ----A---- C:\Windows\SYSWOW64\DWrite.dll 2014-04-10 18:50:03 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll 2014-04-10 18:50:03 ----A---- C:\Windows\SYSWOW64\d3d10core.dll 2014-04-10 18:50:03 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll 2014-04-10 18:50:03 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll 2014-04-10 18:50:03 ----A---- C:\Windows\SYSWOW64\d3d10.dll 2014-04-10 18:50:03 ----A---- C:\Windows\system32\XpsPrint.dll 2014-04-10 18:50:03 ----A---- C:\Windows\system32\XpsGdiConverter.dll 2014-04-10 18:50:03 ----A---- C:\Windows\system32\WindowsCodecsExt.dll 2014-04-10 18:50:03 ----A---- C:\Windows\system32\UIAnimation.dll 2014-04-10 18:50:03 ----A---- C:\Windows\system32\msmpeg2vdec.dll 2014-04-10 18:50:03 ----A---- C:\Windows\system32\FntCache.dll 2014-04-10 18:50:03 ----A---- C:\Windows\system32\dxgi.dll 2014-04-10 18:50:03 ----A---- C:\Windows\system32\DWrite.dll 2014-04-10 18:50:03 ----A---- C:\Windows\system32\d3d10level9.dll 2014-04-10 18:50:03 ----A---- C:\Windows\system32\d3d10core.dll 2014-04-10 18:50:03 ----A---- C:\Windows\system32\d3d10_1core.dll 2014-04-10 18:50:03 ----A---- C:\Windows\system32\d3d10_1.dll 2014-04-10 18:50:03 ----A---- C:\Windows\system32\d3d10.dll 2014-04-10 18:31:04 ----A---- C:\Windows\system32\browserchoice.exe 2014-04-10 18:07:15 ----A---- C:\Windows\system32\drivers\WUDFRd.sys 2014-04-10 18:07:15 ----A---- C:\Windows\system32\drivers\WUDFPf.sys 2014-04-10 18:07:13 ----A---- C:\Windows\system32\WUDFSvc.dll 2014-04-10 18:07:13 ----A---- C:\Windows\system32\WUDFPlatform.dll 2014-04-10 18:07:11 ----A---- C:\Windows\system32\WUDFCoinstaller.dll 2014-04-10 18:07:10 ----A---- C:\Windows\system32\WUDFx.dll 2014-04-10 18:07:10 ----A---- C:\Windows\system32\WUDFHost.exe 2014-04-10 17:55:28 ----D---- C:\Windows\system32\MRT 2014-04-10 17:55:21 ----A---- C:\Windows\system32\MRT.exe 2014-04-10 17:53:56 ----D---- C:\ProgramData\VirtualizedApplications 2014-04-10 17:50:03 ----A---- C:\Windows\system32\drivers\fs_rec.sys 2014-04-10 17:50:02 ----A---- C:\Windows\SYSWOW64\wmi.dll 2014-04-10 17:50:02 ----A---- C:\Windows\system32\wmi.dll 2014-04-10 17:45:56 ----D---- C:\Program Files\Microsoft Silverlight 2014-04-10 17:45:55 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2014-04-10 16:23:37 ----A---- C:\Windows\SYSWOW64\cdosys.dll 2014-04-10 16:23:36 ----A---- C:\Windows\system32\cdosys.dll 2014-04-10 16:23:17 ----A---- C:\Windows\system32\wintrust.dll 2014-04-10 16:23:16 ----A---- C:\Windows\SYSWOW64\wintrust.dll 2014-04-10 16:22:12 ----A---- C:\Windows\system32\wwansvc.dll 2014-04-10 16:22:12 ----A---- C:\Windows\system32\wwanprotdim.dll 2014-04-10 16:21:24 ----A---- C:\Windows\SYSWOW64\dhcpcsvc6.dll 2014-04-10 16:21:24 ----A---- C:\Windows\SYSWOW64\dhcpcore6.dll 2014-04-10 16:21:24 ----A---- C:\Windows\system32\dhcpcsvc6.dll 2014-04-10 16:21:24 ----A---- C:\Windows\system32\dhcpcore6.dll 2014-04-10 16:21:01 ----A---- C:\Windows\SYSWOW64\poqexec.exe 2014-04-10 16:21:01 ----A---- C:\Windows\system32\poqexec.exe 2014-04-10 16:20:59 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll 2014-04-10 16:20:59 ----A---- C:\Windows\SYSWOW64\odbccr32.dll 2014-04-10 16:20:59 ----A---- C:\Windows\system32\odbctrac.dll 2014-04-10 16:20:59 ----A---- C:\Windows\system32\odbccu32.dll 2014-04-10 16:20:59 ----A---- C:\Windows\system32\odbccr32.dll 2014-04-10 16:20:59 ----A---- C:\Windows\system32\odbccp32.dll 2014-04-10 16:20:58 ----A---- C:\Windows\SYSWOW64\odbctrac.dll 2014-04-10 16:20:58 ----A---- C:\Windows\SYSWOW64\odbccu32.dll 2014-04-10 16:20:58 ----A---- C:\Windows\SYSWOW64\odbccp32.dll 2014-04-10 16:20:54 ----A---- C:\Windows\SYSWOW64\comctl32.dll 2014-04-10 16:20:54 ----A---- C:\Windows\system32\comctl32.dll 2014-04-10 16:20:52 ----A---- C:\Windows\SYSWOW64\xmllite.dll 2014-04-10 16:20:52 ----A---- C:\Windows\system32\xmllite.dll 2014-04-10 16:20:51 ----A---- C:\Windows\SYSWOW64\d3d11.dll 2014-04-10 16:20:51 ----A---- C:\Windows\system32\d3d11.dll 2014-04-10 16:20:50 ----A---- C:\Windows\SYSWOW64\msieftp.dll 2014-04-10 16:20:50 ----A---- C:\Windows\system32\msieftp.dll 2014-04-10 16:20:46 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe 2014-04-10 16:20:46 ----A---- C:\Windows\system32\RMActivate_isv.exe 2014-04-10 16:20:46 ----A---- C:\Windows\system32\RMActivate.exe 2014-04-10 16:20:45 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe 2014-04-10 16:20:45 ----A---- C:\Windows\SYSWOW64\RMActivate.exe 2014-04-10 16:20:45 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe 2014-04-10 16:20:45 ----A---- C:\Windows\system32\RMActivate_ssp.exe 2014-04-10 16:20:44 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll 2014-04-10 16:20:44 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe 2014-04-10 16:20:44 ----A---- C:\Windows\system32\secproc_isv.dll 2014-04-10 16:20:44 ----A---- C:\Windows\system32\secproc.dll 2014-04-10 16:20:44 ----A---- C:\Windows\system32\msdrm.dll 2014-04-10 16:20:43 ----A---- C:\Windows\SYSWOW64\secproc.dll 2014-04-10 16:20:43 ----A---- C:\Windows\SYSWOW64\msdrm.dll 2014-04-10 16:20:43 ----A---- C:\Windows\system32\secproc_ssp_isv.dll 2014-04-10 16:20:43 ----A---- C:\Windows\system32\secproc_ssp.dll 2014-04-10 16:20:42 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll 2014-04-10 16:20:42 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll 2014-04-10 16:19:58 ----A---- C:\Windows\system32\Wdfres.dll 2014-04-10 16:19:58 ----A---- C:\Windows\system32\drivers\WdfLdr.sys 2014-04-10 16:19:57 ----A---- C:\Windows\system32\drivers\Wdf01000.sys 2014-04-10 16:18:47 ----A---- C:\Windows\system32\ntoskrnl.exe 2014-04-10 16:18:45 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2014-04-10 16:18:44 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2014-04-10 16:18:44 ----A---- C:\Windows\system32\advapi32.dll 2014-04-10 16:18:43 ----A---- C:\Windows\SYSWOW64\tdh.dll 2014-04-10 16:18:43 ----A---- C:\Windows\SYSWOW64\ntdll.dll 2014-04-10 16:18:43 ----A---- C:\Windows\system32\tdh.dll 2014-04-10 16:18:43 ----A---- C:\Windows\system32\ntdll.dll 2014-04-10 16:18:42 ----A---- C:\Windows\SYSWOW64\advapi32.dll 2014-04-10 16:18:28 ----A---- C:\Windows\system32\Wpc.dll 2014-04-10 16:18:28 ----A---- C:\Windows\system32\gameux.dll 2014-04-10 16:18:27 ----A---- C:\Windows\SYSWOW64\Wpc.dll 2014-04-10 16:18:27 ----A---- C:\Windows\SYSWOW64\gameux.dll 2014-04-10 16:17:59 ----A---- C:\Windows\system32\smss.exe 2014-04-10 16:17:59 ----A---- C:\Windows\system32\csrsrv.dll 2014-04-10 16:17:54 ----A---- C:\Windows\SYSWOW64\apisetschema.dll 2014-04-10 16:17:54 ----A---- C:\Windows\system32\apisetschema.dll 2014-04-10 16:17:32 ----A---- C:\Windows\system32\drivers\tcpip.sys 2014-04-10 16:17:32 ----A---- C:\Windows\system32\drivers\netio.sys 2014-04-10 16:17:27 ----A---- C:\Windows\SYSWOW64\ncsi.dll 2014-04-10 16:17:27 ----A---- C:\Windows\system32\nlasvc.dll 2014-04-10 16:17:27 ----A---- C:\Windows\system32\netcorehc.dll 2014-04-10 16:17:27 ----A---- C:\Windows\system32\ncsi.dll 2014-04-10 16:17:27 ----A---- C:\Windows\system32\iphlpsvc.dll 2014-04-10 16:17:26 ----A---- C:\Windows\SYSWOW64\nlaapi.dll 2014-04-10 16:17:26 ----A---- C:\Windows\SYSWOW64\netcorehc.dll 2014-04-10 16:17:26 ----A---- C:\Windows\system32\drivers\tcpipreg.sys 2014-04-10 16:17:25 ----A---- C:\Windows\SYSWOW64\netevent.dll 2014-04-10 16:17:25 ----A---- C:\Windows\system32\nlaapi.dll 2014-04-10 16:17:25 ----A---- C:\Windows\system32\netevent.dll 2014-04-10 16:17:11 ----A---- C:\Windows\system32\mswsock.dll 2014-04-10 16:17:10 ----A---- C:\Windows\SYSWOW64\mswsock.dll 2014-04-10 16:15:56 ----A---- C:\Windows\system32\kernel32.dll 2014-04-10 16:15:55 ----A---- C:\Windows\SYSWOW64\kernel32.dll 2014-04-10 16:15:55 ----A---- C:\Windows\system32\wow64win.dll 2014-04-10 16:15:55 ----A---- C:\Windows\system32\wow64.dll 2014-04-10 16:15:55 ----A---- C:\Windows\system32\winsrv.dll 2014-04-10 16:15:55 ----A---- C:\Windows\system32\KernelBase.dll 2014-04-10 16:15:54 ----A---- C:\Windows\SYSWOW64\setup16.exe 2014-04-10 16:15:54 ----A---- C:\Windows\SYSWOW64\KernelBase.dll 2014-04-10 16:15:54 ----A---- C:\Windows\system32\ntvdm64.dll 2014-04-10 16:15:54 ----A---- C:\Windows\system32\conhost.exe 2014-04-10 16:15:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2014-04-10 16:15:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll 2014-04-10 16:15:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2014-04-10 16:15:53 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2014-04-10 16:15:53 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2014-04-10 16:15:53 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2014-04-10 16:15:53 ----A---- C:\Windows\SYSWOW64\wow32.dll 2014-04-10 16:15:53 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll 2014-04-10 16:15:53 ----A---- C:\Windows\SYSWOW64\instnm.exe 2014-04-10 16:15:53 ----A---- C:\Windows\system32\wow64cpu.dll 2014-04-10 16:15:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2014-04-10 16:15:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll 2014-04-10 16:15:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2014-04-10 16:15:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll 2014-04-10 16:15:52 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2014-04-10 16:15:52 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2014-04-10 16:15:52 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2014-04-10 16:15:52 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2014-04-10 16:15:52 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2014-04-10 16:15:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll 2014-04-10 16:15:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-04-10 16:15:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll 2014-04-10 16:15:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2014-04-10 16:15:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2014-04-10 16:15:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll 2014-04-10 16:15:51 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2014-04-10 16:15:51 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2014-04-10 16:15:51 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2014-04-10 16:15:51 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2014-04-10 16:15:51 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2014-04-10 16:15:51 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2014-04-10 16:15:51 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2014-04-10 16:15:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll 2014-04-10 16:15:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2014-04-10 16:15:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll 2014-04-10 16:15:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll 2014-04-10 16:15:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll 2014-04-10 16:15:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll 2014-04-10 16:15:50 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2014-04-10 16:15:50 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2014-04-10 16:15:50 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2014-04-10 16:15:50 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2014-04-10 16:15:50 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2014-04-10 16:15:50 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2014-04-10 16:15:49 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2014-04-10 16:15:48 ----A---- C:\Windows\SYSWOW64\user.exe 2014-04-10 16:15:47 ----A---- C:\Windows\system32\rpcrt4.dll 2014-04-10 16:15:46 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll 2014-04-10 16:15:27 ----A---- C:\Windows\system32\consent.exe 2014-04-10 16:15:27 ----A---- C:\Windows\system32\appinfo.dll 2014-04-10 16:15:13 ----A---- C:\Windows\system32\drivers\ntfs.sys 2014-04-10 16:15:04 ----A---- C:\Windows\SYSWOW64\certutil.exe 2014-04-10 16:15:04 ----A---- C:\Windows\system32\certutil.exe 2014-04-10 16:15:02 ----A---- C:\Windows\SYSWOW64\certenc.dll 2014-04-10 16:15:02 ----A---- C:\Windows\system32\certenc.dll 2014-04-10 16:14:47 ----D---- C:\Users\daniel\AppData\Roaming\AVAST Software 2014-04-10 16:14:44 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll 2014-04-10 16:14:44 ----A---- C:\Windows\system32\cryptdlg.dll 2014-04-10 16:14:29 ----A---- C:\Windows\system32\tquery.dll 2014-04-10 16:14:29 ----A---- C:\Windows\system32\SearchIndexer.exe 2014-04-10 16:14:29 ----A---- C:\Windows\system32\mssrch.dll 2014-04-10 16:14:28 ----A---- C:\Windows\SYSWOW64\tquery.dll 2014-04-10 16:14:28 ----A---- C:\Windows\SYSWOW64\mssrch.dll 2014-04-10 16:14:28 ----A---- C:\Windows\system32\SearchProtocolHost.exe 2014-04-10 16:14:27 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe 2014-04-10 16:14:26 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe 2014-04-10 16:14:26 ----A---- C:\Windows\SYSWOW64\mssph.dll 2014-04-10 16:14:26 ----A---- C:\Windows\system32\SearchFilterHost.exe 2014-04-10 16:14:26 ----A---- C:\Windows\system32\mssvp.dll 2014-04-10 16:14:26 ----A---- C:\Windows\system32\mssphtb.dll 2014-04-10 16:14:26 ----A---- C:\Windows\system32\mssph.dll 2014-04-10 16:14:25 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe 2014-04-10 16:14:25 ----A---- C:\Windows\SYSWOW64\mssvp.dll 2014-04-10 16:14:25 ----A---- C:\Windows\SYSWOW64\mssphtb.dll 2014-04-10 16:14:25 ----A---- C:\Windows\SYSWOW64\msscntrs.dll 2014-04-10 16:14:25 ----A---- C:\Windows\system32\msscntrs.dll 2014-04-10 16:14:23 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL 2014-04-10 16:14:23 ----A---- C:\Windows\system32\WMVDECOD.DLL 2014-04-10 16:14:20 ----A---- C:\Windows\SYSWOW64\schannel.dll 2014-04-10 16:14:20 ----A---- C:\Windows\system32\schannel.dll 2014-04-10 16:14:20 ----A---- C:\Windows\system32\drivers\cng.sys 2014-04-10 16:14:19 ----A---- C:\Windows\SYSWOW64\ncrypt.dll 2014-04-10 16:14:19 ----A---- C:\Windows\system32\sspicli.dll 2014-04-10 16:14:19 ----A---- C:\Windows\system32\ncrypt.dll 2014-04-10 16:14:19 ----A---- C:\Windows\system32\lsass.exe 2014-04-10 16:14:19 ----A---- C:\Windows\system32\lsasrv.dll 2014-04-10 16:14:19 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2014-04-10 16:14:19 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2014-04-10 16:14:18 ----A---- C:\Windows\SYSWOW64\sspicli.dll 2014-04-10 16:14:18 ----A---- C:\Windows\SYSWOW64\secur32.dll 2014-04-10 16:14:18 ----A---- C:\Windows\system32\sspisrv.dll 2014-04-10 16:14:18 ----A---- C:\Windows\system32\secur32.dll 2014-04-10 16:14:12 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS 2014-04-10 16:14:12 ----A---- C:\Windows\system32\drivers\aswVmm.sys 2014-04-10 16:14:12 ----A---- C:\Windows\system32\drivers\aswStm.sys 2014-04-10 16:14:11 ----A---- C:\Windows\system32\drivers\aswSP.sys 2014-04-10 16:14:11 ----A---- C:\Windows\system32\drivers\aswSnx.sys 2014-04-10 16:14:11 ----A---- C:\Windows\system32\drivers\aswRvrt.sys 2014-04-10 16:14:11 ----A---- C:\Windows\system32\drivers\aswRdr2.sys 2014-04-10 16:14:11 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys 2014-04-10 16:14:09 ----A---- C:\Windows\system32\aswBoot.exe 2014-04-10 16:14:05 ----A---- C:\Windows\SYSWOW64\msi.dll 2014-04-10 16:14:05 ----A---- C:\Windows\system32\msi.dll 2014-04-10 16:14:05 ----A---- C:\Windows\avastSS.scr 2014-04-10 16:13:58 ----A---- C:\Windows\system32\drivers\usb8023.sys 2014-04-10 16:13:53 ----A---- C:\Windows\SYSWOW64\ntshrui.dll 2014-04-10 16:13:53 ----A---- C:\Windows\system32\ntshrui.dll 2014-04-10 16:13:41 ----A---- C:\Windows\system32\shell32.dll 2014-04-10 16:13:39 ----A---- C:\Windows\SYSWOW64\shell32.dll 2014-04-10 16:13:39 ----A---- C:\Windows\SYSWOW64\shdocvw.dll 2014-04-10 16:13:39 ----A---- C:\Windows\system32\shdocvw.dll 2014-04-10 16:13:33 ----A---- C:\Windows\system32\WebClnt.dll 2014-04-10 16:13:32 ----A---- C:\Windows\SYSWOW64\WebClnt.dll 2014-04-10 16:13:32 ----A---- C:\Windows\SYSWOW64\davclnt.dll 2014-04-10 16:13:32 ----A---- C:\Windows\system32\drivers\mrxdav.sys 2014-04-10 16:13:32 ----A---- C:\Windows\system32\davclnt.dll 2014-04-10 16:13:24 ----A---- C:\Windows\SYSWOW64\crypt32.dll 2014-04-10 16:13:24 ----A---- C:\Windows\system32\cryptsvc.dll 2014-04-10 16:13:24 ----A---- C:\Windows\system32\crypt32.dll 2014-04-10 16:13:23 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll 2014-04-10 16:13:23 ----A---- C:\Windows\SYSWOW64\cryptnet.dll 2014-04-10 16:13:23 ----A---- C:\Windows\system32\cryptnet.dll 2014-04-10 16:13:11 ----A---- C:\Windows\system32\win32k.sys 2014-04-10 16:13:10 ----A---- C:\Windows\system32\msxml6.dll 2014-04-10 16:13:09 ----A---- C:\Windows\SYSWOW64\msxml6.dll 2014-04-10 16:13:04 ----A---- C:\Windows\SYSWOW64\webio.dll 2014-04-10 16:13:04 ----A---- C:\Windows\system32\webio.dll 2014-04-10 16:12:54 ----A---- C:\Windows\SYSWOW64\authui.dll 2014-04-10 16:12:54 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll 2014-04-10 16:12:54 ----A---- C:\Windows\system32\authui.dll 2014-04-10 16:12:53 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll 2014-04-10 16:12:53 ----A---- C:\Windows\SYSWOW64\credui.dll 2014-04-10 16:12:53 ----A---- C:\Windows\system32\credui.dll 2014-04-10 16:12:45 ----A---- C:\Windows\system32\OxpsConverter.exe 2014-04-10 16:12:42 ----A---- C:\Windows\system32\msxml3.dll 2014-04-10 16:12:41 ----A---- C:\Windows\SYSWOW64\msxml3r.dll 2014-04-10 16:12:41 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2014-04-10 16:12:41 ----A---- C:\Windows\system32\msxml3r.dll 2014-04-10 16:12:32 ----A---- C:\Windows\SYSWOW64\tzres.dll 2014-04-10 16:12:32 ----A---- C:\Windows\system32\tzres.dll 2014-04-10 16:12:28 ----D---- C:\Program Files\AVAST Software 2014-04-10 16:12:16 ----A---- C:\Windows\system32\drivers\storport.sys 2014-04-10 16:12:16 ----A---- C:\Windows\system32\drivers\msiscsi.sys 2014-04-10 16:12:15 ----A---- C:\Windows\SYSWOW64\iologmsg.dll 2014-04-10 16:12:15 ----A---- C:\Windows\system32\iologmsg.dll 2014-04-10 16:12:15 ----A---- C:\Windows\system32\drivers\Diskdump.sys 2014-04-10 16:12:07 ----A---- C:\Windows\SYSWOW64\quartz.dll 2014-04-10 16:12:07 ----A---- C:\Windows\system32\quartz.dll 2014-04-10 16:12:03 ----A---- C:\Windows\SYSWOW64\atmlib.dll 2014-04-10 16:12:03 ----A---- C:\Windows\SYSWOW64\atmfd.dll 2014-04-10 16:12:03 ----A---- C:\Windows\system32\dciman32.dll 2014-04-10 16:12:03 ----A---- C:\Windows\system32\atmlib.dll 2014-04-10 16:12:03 ----A---- C:\Windows\system32\atmfd.dll 2014-04-10 16:12:02 ----A---- C:\Windows\SYSWOW64\lpk.dll 2014-04-10 16:12:02 ----A---- C:\Windows\SYSWOW64\fontsub.dll 2014-04-10 16:12:02 ----A---- C:\Windows\SYSWOW64\dciman32.dll 2014-04-10 16:12:02 ----A---- C:\Windows\system32\lpk.dll 2014-04-10 16:12:02 ----A---- C:\Windows\system32\fontsub.dll 2014-04-10 16:12:01 ----A---- C:\Windows\system32\drivers\RNDISMP.sys 2014-04-10 16:12:01 ----A---- C:\Windows\system32\drivers\ndis.sys 2014-04-10 16:11:54 ----A---- C:\Windows\SYSWOW64\wer.dll 2014-04-10 16:11:54 ----A---- C:\Windows\system32\wer.dll 2014-04-10 16:11:53 ----A---- C:\Windows\system32\drivers\ataport.sys 2014-04-10 16:11:50 ----A---- C:\Windows\system32\drivers\usbvideo.sys 2014-04-10 16:11:49 ----A---- C:\Windows\system32\drivers\usbcir.sys 2014-04-10 16:11:47 ----A---- C:\Windows\system32\imagehlp.dll 2014-04-10 16:11:46 ----A---- C:\Windows\SYSWOW64\imagehlp.dll 2014-04-10 16:11:45 ----A---- C:\Windows\SYSWOW64\kerberos.dll 2014-04-10 16:11:45 ----A---- C:\Windows\system32\kerberos.dll 2014-04-10 16:11:43 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys 2014-04-10 16:11:41 ----A---- C:\Windows\system32\drivers\usbport.sys 2014-04-10 16:11:41 ----A---- C:\Windows\system32\drivers\usbhub.sys 2014-04-10 16:11:41 ----A---- C:\Windows\system32\drivers\usbehci.sys 2014-04-10 16:11:41 ----A---- C:\Windows\system32\drivers\usbd.sys 2014-04-10 16:11:41 ----A---- C:\Windows\system32\drivers\usbccgp.sys 2014-04-10 16:11:40 ----A---- C:\Windows\system32\drivers\usbohci.sys 2014-04-10 16:11:39 ----A---- C:\Windows\system32\drivers\afd.sys 2014-04-10 16:11:35 ----A---- C:\Windows\SYSWOW64\EncDec.dll 2014-04-10 16:11:35 ----A---- C:\Windows\system32\EncDec.dll 2014-04-10 16:11:34 ----A---- C:\Windows\system32\umpnpmgr.dll 2014-04-10 16:11:33 ----A---- C:\Windows\SYSWOW64\drvinst.exe 2014-04-10 16:11:33 ----A---- C:\Windows\SYSWOW64\devrtl.dll 2014-04-10 16:11:33 ----A---- C:\Windows\SYSWOW64\devobj.dll 2014-04-10 16:11:33 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll 2014-04-10 16:11:32 ----A---- C:\Windows\system32\mcupdate_AuthenticAMD.dll 2014-04-10 16:11:31 ----A---- C:\Windows\system32\rdrmemptylst.exe 2014-04-10 16:11:31 ----A---- C:\Windows\system32\rdpwsx.dll 2014-04-10 16:11:31 ----A---- C:\Windows\system32\rdpcorekmts.dll 2014-04-10 16:11:20 ----D---- C:\ProgramData\AVAST Software 2014-04-10 16:11:19 ----A---- C:\Windows\system32\psisdecd.dll 2014-04-10 16:11:18 ----A---- C:\Windows\SYSWOW64\psisdecd.dll 2014-04-10 16:11:16 ----A---- C:\Windows\system32\drivers\hidparse.sys 2014-04-10 16:11:16 ----A---- C:\Windows\system32\drivers\hidclass.sys 2014-04-10 16:11:15 ----A---- C:\Windows\system32\drivers\portcls.sys 2014-04-10 16:11:15 ----A---- C:\Windows\system32\drivers\drmk.sys 2014-04-10 16:11:14 ----A---- C:\Windows\system32\dpnet.dll 2014-04-10 16:11:13 ----A---- C:\Windows\SYSWOW64\dpnet.dll 2014-04-10 16:11:11 ----A---- C:\Windows\system32\usp10.dll 2014-04-10 16:11:10 ----A---- C:\Windows\SYSWOW64\usp10.dll 2014-04-10 16:11:09 ----A---- C:\Windows\system32\drivers\tssecsrv.sys 2014-04-10 16:11:06 ----A---- C:\Windows\system32\gdi32.dll 2014-04-10 16:11:05 ----A---- C:\Windows\SYSWOW64\gdi32.dll 2014-04-10 16:11:04 ----A---- C:\Windows\SYSWOW64\win32spl.dll 2014-04-10 16:11:04 ----A---- C:\Windows\system32\win32spl.dll 2014-04-10 16:11:03 ----A---- C:\Windows\SYSWOW64\netapi32.dll 2014-04-10 16:11:03 ----A---- C:\Windows\SYSWOW64\browcli.dll 2014-04-10 16:11:03 ----A---- C:\Windows\system32\netapi32.dll 2014-04-10 16:11:03 ----A---- C:\Windows\system32\browser.dll 2014-04-10 16:11:03 ----A---- C:\Windows\system32\browcli.dll 2014-04-10 16:11:01 ----A---- C:\Windows\system32\srcore.dll 2014-04-10 16:11:00 ----A---- C:\Windows\SYSWOW64\srclient.dll 2014-04-10 16:10:59 ----A---- C:\Windows\system32\taskhost.exe 2014-04-10 16:10:58 ----A---- C:\Windows\SYSWOW64\qedit.dll 2014-04-10 16:10:58 ----A---- C:\Windows\system32\qedit.dll 2014-04-10 16:10:57 ----A---- C:\Windows\SYSWOW64\synceng.dll 2014-04-10 16:10:57 ----A---- C:\Windows\system32\synceng.dll 2014-04-10 16:10:56 ----A---- C:\Windows\system32\profsvc.dll 2014-04-10 16:10:55 ----A---- C:\Windows\system32\drivers\partmgr.sys 2014-04-10 16:10:54 ----A---- C:\Windows\system32\drivers\fvevol.sys 2014-04-10 16:10:52 ----A---- C:\Windows\SYSWOW64\msvcrt.dll 2014-04-10 16:10:52 ----A---- C:\Windows\system32\msvcrt.dll 2014-04-10 16:10:51 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys 2014-04-10 16:10:50 ----A---- C:\Windows\system32\drivers\dxgmms1.sys 2014-04-10 16:10:50 ----A---- C:\Windows\system32\cdd.dll 2014-04-10 16:10:49 ----A---- C:\Windows\SYSWOW64\wscript.exe 2014-04-10 16:10:49 ----A---- C:\Windows\SYSWOW64\scrrun.dll 2014-04-10 16:10:49 ----A---- C:\Windows\system32\wscript.exe 2014-04-10 16:10:49 ----A---- C:\Windows\system32\scrrun.dll 2014-04-10 16:10:49 ----A---- C:\Windows\system32\cscript.exe 2014-04-10 16:10:48 ----A---- C:\Windows\SYSWOW64\cscript.exe 2014-04-10 16:10:47 ----A---- C:\Windows\SYSWOW64\oleacc.dll 2014-04-10 16:10:47 ----A---- C:\Windows\system32\oleacc.dll 2014-04-10 16:10:46 ----A---- C:\Windows\SYSWOW64\oleaut32.dll 2014-04-10 16:10:46 ----A---- C:\Windows\system32\oleaut32.dll 2014-04-10 16:10:42 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-04-10 16:10:42 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-04-10 16:10:41 ----A---- C:\Windows\system32\localspl.dll 2014-04-10 16:10:38 ----A---- C:\Windows\system32\drivers\rdpwd.sys 2014-04-10 16:06:07 ----A---- C:\Windows\system32\IKEEXT.DLL 2014-04-10 16:06:07 ----A---- C:\Windows\system32\FWPUCLNT.DLL 2014-04-10 16:06:06 ----A---- C:\Windows\SYSWOW64\nshwfp.dll 2014-04-10 16:06:06 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL 2014-04-10 16:06:06 ----A---- C:\Windows\system32\nshwfp.dll 2014-04-10 15:57:06 ----D---- C:\Program Files\HitmanPro 2014-04-10 15:43:05 ----D---- C:\Users\daniel\AppData\Roaming\SoftGrid Client 2014-04-10 15:42:01 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI 2014-04-10 15:41:47 ----D---- C:\Program Files\Microsoft Office 2014-04-10 15:41:46 ----D---- C:\Program Files (x86)\Microsoft Application Virtualization Client 2014-04-10 15:41:27 ----D---- C:\Users\daniel\AppData\Roaming\TP 2014-04-10 15:37:22 ----A---- C:\Windows\system32\scavengeui.dll 2014-04-10 15:36:07 ----A---- C:\Windows\SYSWOW64\packager.dll 2014-04-10 15:36:07 ----A---- C:\Windows\system32\packager.dll 2014-04-10 15:03:05 ----D---- C:\ProgramData\HitmanPro 2014-04-10 14:57:38 ----D---- C:\Users\daniel\AppData\Roaming\Macromedia 2014-04-10 14:57:38 ----D---- C:\Users\daniel\AppData\Roaming\Adobe 2014-04-10 12:04:03 ----A---- C:\Windows\SYSWOW64\rdpcore.dll 2014-04-10 12:04:03 ----A---- C:\Windows\system32\rdpcore.dll 2014-04-10 12:04:03 ----A---- C:\Windows\system32\drivers\tdtcp.sys 2014-04-10 12:04:02 ----D---- C:\Users\daniel\AppData\Roaming\ATI 2014-04-10 12:03:01 ----D---- C:\Users\daniel\AppData\Roaming\Synaptics 2014-04-10 12:03:00 ----D---- C:\Users\daniel\AppData\Roaming\hpqLog 2014-04-10 12:02:22 ----D---- C:\Users\daniel\AppData\Roaming\Identities 2014-04-10 11:57:10 ----D---- C:\Users\daniel\AppData\Roaming\Hewlett-Packard 2014-04-10 11:57:00 ----D---- C:\Windows\SYSWOW64\%COREALLUSERPATH% 2014-04-10 11:56:00 ----A---- C:\Windows\system32\wups2.dll 2014-04-10 11:56:00 ----A---- C:\Windows\system32\wucltux.dll 2014-04-10 11:56:00 ----A---- C:\Windows\system32\wuaueng.dll 2014-04-10 11:56:00 ----A---- C:\Windows\system32\wuauclt.exe 2014-04-10 11:55:53 ----A---- C:\Windows\system32\wups.dll 2014-04-10 11:55:53 ----A---- C:\Windows\system32\wudriver.dll 2014-04-10 11:55:53 ----A---- C:\Windows\system32\wuapi.dll 2014-04-10 11:55:42 ----A---- C:\Windows\system32\wuwebv.dll 2014-04-10 11:55:42 ----A---- C:\Windows\system32\wuapp.exe 2014-04-10 11:55:36 ----SD---- C:\Users\daniel\AppData\Roaming\Microsoft 2014-04-10 11:55:36 ----D---- C:\Users\daniel\AppData\Roaming\Media Center Programs 2014-04-10 11:55:27 ----SHD---- C:\ProgramData\Sjablonen 2014-04-10 11:55:27 ----SHD---- C:\ProgramData\Menu Start 2014-04-10 11:55:27 ----SHD---- C:\ProgramData\Favorieten 2014-04-10 11:55:27 ----SHD---- C:\ProgramData\Documenten 2014-04-10 11:55:27 ----SHD---- C:\ProgramData\Bureaublad 2014-04-10 11:44:30 ----SHD---- C:\System Volume Information 2014-04-10 11:44:30 ----ASH---- C:\pagefile.sys 2014-04-10 11:44:26 ----ASH---- C:\hiberfil.sys ======List of files/folders modified in the last 1 month====== 2014-04-13 22:46:59 ----D---- C:\Windows\Temp 2014-04-13 22:46:55 ----RD---- C:\Program Files 2014-04-13 22:34:06 ----D---- C:\Windows\winsxs 2014-04-13 22:34:03 ----D---- C:\Windows\SYSWOW64\nl-NL 2014-04-13 22:34:03 ----D---- C:\Windows\SYSWOW64\en-US 2014-04-13 22:34:03 ----D---- C:\Windows\SysWOW64 2014-04-13 22:34:03 ----D---- C:\Windows\system32\nl-NL 2014-04-13 22:34:03 ----D---- C:\Windows\system32\en-US 2014-04-13 22:34:03 ----D---- C:\Windows\System32 2014-04-13 22:32:50 ----D---- C:\Windows\system32\config 2014-04-13 22:21:10 ----D---- C:\Windows\system32\catroot 2014-04-13 22:21:08 ----D---- C:\Windows\system32\catroot2 2014-04-13 22:21:02 ----D---- C:\Windows\system32\drivers 2014-04-13 22:17:03 ----A---- C:\Windows\system32\PerfStringBackup.INI 2014-04-13 22:17:02 ----D---- C:\Windows\inf 2014-04-13 22:10:24 ----D---- C:\Windows\SYSWOW64\wbem 2014-04-13 22:10:24 ----D---- C:\Windows\system32\drivers\en-US 2014-04-13 22:10:23 ----D---- C:\Windows\system32\wbem 2014-04-13 22:10:23 ----D---- C:\Windows\system32\drivers\nl-NL 2014-04-13 22:10:23 ----D---- C:\Windows\PolicyDefinitions 2014-04-13 22:10:22 ----D---- C:\Windows\system32\DriverStore 2014-04-13 22:07:57 ----D---- C:\Windows 2014-04-13 22:07:45 ----SHD---- C:\Windows\Installer 2014-04-13 17:30:58 ----RD---- C:\Program Files (x86) 2014-04-13 17:30:58 ----HD---- C:\ProgramData 2014-04-13 14:35:29 ----RSD---- C:\Windows\Fonts 2014-04-13 13:37:44 ----D---- C:\Windows\Microsoft.NET 2014-04-13 13:18:13 ----RSD---- C:\Windows\assembly 2014-04-13 10:18:51 ----D---- C:\Windows\system32\Tasks 2014-04-13 10:18:50 ----D---- C:\Windows\Tasks 2014-04-13 00:39:36 ----D---- C:\Windows\SYSWOW64\zh-TW 2014-04-13 00:39:36 ----D---- C:\Windows\SYSWOW64\zh-HK 2014-04-13 00:39:36 ----D---- C:\Windows\SYSWOW64\zh-CN 2014-04-13 00:39:36 ----D---- C:\Windows\SYSWOW64\tr-TR 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\sv-SE 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\ru-RU 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\pt-PT 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\pt-BR 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\pl-PL 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\nb-NO 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\migration 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\ko-KR 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\ja-JP 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\it-IT 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\hu-HU 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\fr-FR 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\fi-FI 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\es-ES 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\el-GR 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\de-DE 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\da-DK 2014-04-13 00:39:35 ----D---- C:\Windows\SYSWOW64\cs-CZ 2014-04-13 00:39:35 ----D---- C:\Windows\system32\zh-TW 2014-04-13 00:39:35 ----D---- C:\Windows\system32\zh-HK 2014-04-13 00:39:34 ----D---- C:\Windows\system32\zh-CN 2014-04-13 00:39:34 ----D---- C:\Windows\system32\tr-TR 2014-04-13 00:39:34 ----D---- C:\Windows\system32\sv-SE 2014-04-13 00:39:34 ----D---- C:\Windows\system32\ru-RU 2014-04-13 00:39:34 ----D---- C:\Windows\system32\pt-PT 2014-04-13 00:39:34 ----D---- C:\Windows\system32\pt-BR 2014-04-13 00:39:34 ----D---- C:\Windows\system32\pl-PL 2014-04-13 00:39:33 ----D---- C:\Windows\system32\nb-NO 2014-04-13 00:39:32 ----D---- C:\Windows\system32\migration 2014-04-13 00:39:32 ----D---- C:\Windows\system32\ko-KR 2014-04-13 00:39:32 ----D---- C:\Windows\system32\ja-JP 2014-04-13 00:39:32 ----D---- C:\Windows\system32\it-IT 2014-04-13 00:39:32 ----D---- C:\Windows\system32\hu-HU 2014-04-13 00:39:32 ----D---- C:\Windows\system32\fr-FR 2014-04-13 00:39:32 ----D---- C:\Windows\system32\fi-FI 2014-04-13 00:39:32 ----D---- C:\Windows\system32\es-ES 2014-04-13 00:39:32 ----D---- C:\Windows\system32\el-GR 2014-04-13 00:39:32 ----D---- C:\Windows\system32\de-DE 2014-04-13 00:39:32 ----D---- C:\Windows\system32\da-DK 2014-04-13 00:39:32 ----D---- C:\Windows\system32\cs-CZ 2014-04-13 00:39:31 ----D---- C:\Windows\L2Schemas 2014-04-13 00:39:31 ----D---- C:\Windows\ehome 2014-04-13 00:39:31 ----D---- C:\Windows\AppPatch 2014-04-13 00:39:31 ----D---- C:\Program Files\Windows Media Player 2014-04-13 00:39:31 ----D---- C:\Program Files\Windows Mail 2014-04-13 00:39:31 ----D---- C:\Program Files\Windows Defender 2014-04-13 00:39:31 ----D---- C:\Program Files\Internet Explorer 2014-04-13 00:39:31 ----D---- C:\Program Files\Common Files\System 2014-04-13 00:39:31 ----D---- C:\Program Files (x86)\Windows Media Player 2014-04-13 00:39:31 ----D---- C:\Program Files (x86)\Windows Mail 2014-04-13 00:39:31 ----D---- C:\Program Files (x86)\Windows Defender 2014-04-13 00:39:31 ----D---- C:\Program Files (x86)\Internet Explorer 2014-04-13 00:37:16 ----D---- C:\Windows\system32\wfp 2014-04-13 00:37:15 ----D---- C:\Windows\system32\Msdtc 2014-04-13 00:37:14 ----D---- C:\Windows\system32\CodeIntegrity 2014-04-13 00:36:36 ----D---- C:\Windows\servicing 2014-04-13 00:36:36 ----D---- C:\Windows\schemas 2014-04-13 00:36:36 ----D---- C:\Windows\Offline Web Pages 2014-04-13 00:35:51 ----D---- C:\Windows\AppCompat 2014-04-13 00:35:33 ----D---- C:\ProgramData\Norton 2014-04-13 00:35:27 ----D---- C:\Program Files\Common Files\Microsoft Shared 2014-04-13 00:34:25 ----D---- C:\Program Files (x86)\Hewlett-Packard 2014-04-13 00:34:25 ----D---- C:\Program Files (x86)\EasyBits For Kids 2014-04-13 00:34:24 ----D---- C:\Program Files (x86)\Common Files 2014-04-13 00:33:23 ----D---- C:\Windows\registration 2014-04-13 00:24:05 ----D---- C:\Windows\SYSWOW64\Macromed 2014-04-13 00:23:37 ----D---- C:\Windows\system32\wdi 2014-04-13 00:14:47 ----D---- C:\SWSetup 2014-04-13 00:14:45 ----SD---- C:\ProgramData\Microsoft 2014-04-13 00:14:36 ----D---- C:\ProgramData\Hewlett-Packard 2014-04-13 00:14:10 ----D---- C:\Program Files\Common Files 2014-04-13 00:12:27 ----D---- C:\Program Files (x86)\Microsoft Office 2014-04-13 00:05:13 ----D---- C:\Windows\system32\LogFiles 2014-04-12 15:41:30 ----D---- C:\Windows\Downloaded Program Files 2014-04-12 15:01:47 ----D---- C:\Windows\system32\NDF 2014-04-12 13:50:12 ----D---- C:\Program Files\Synaptics 2014-04-11 13:24:31 ----D---- C:\Windows\Logs 2014-04-10 17:55:27 ----D---- C:\Windows\debug 2014-04-10 16:25:17 ----D---- C:\ProgramData\Adobe 2014-04-10 15:00:32 ----D---- C:\Windows\Prefetch 2014-04-10 12:40:58 ----D---- C:\Users\daniel\AppData\Roaming\Template 2014-04-10 12:04:54 ----D---- C:\Windows\SoftwareDistribution 2014-04-10 12:04:05 ----D---- C:\Windows\system32\restore 2014-04-10 12:02:18 ----SHD---- C:\$Recycle.Bin 2014-04-10 11:56:58 ----RD---- C:\Program Files\Online Services 2014-04-10 11:56:58 ----RD---- C:\Program Files (x86)\Online Services 2014-04-10 11:56:51 ----D---- C:\Program Files\Windows Sidebar 2014-04-10 11:56:51 ----D---- C:\Program Files (x86)\Windows Sidebar 2014-04-10 11:56:34 ----HD---- C:\SYSTEM.SAV 2014-04-10 11:55:35 ----RD---- C:\Users 2014-04-10 11:55:28 ----SHD---- C:\Recovery 2014-04-10 11:55:27 ----D---- C:\Windows\system32\Recovery 2014-04-10 11:55:27 ----D---- C:\Program Files\Windows NT 2014-04-10 11:48:42 ----D---- C:\Windows\rescache 2014-04-10 11:44:56 ----D---- C:\Windows\Panther 2014-03-31 09:35:08 ----A---- C:\Windows\system32\MpSigStub.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 amd_sata;amd_sata; C:\Windows\system32\DRIVERS\amd_sata.sys [2011-04-16 79488] R0 amd_xata;amd_xata; C:\Windows\system32\DRIVERS\amd_xata.sys [2011-04-16 40064] R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-04-10 65776] R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-04-10 208928] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888] R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-04-10 93568] R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-04-10 1039096] R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-04-10 423240] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-04-10 79184] R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136] R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-07-06 9359872] R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-07-06 309760] R3 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-04-10 84816] R3 bcbtums;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2011-06-16 133160] R3 BCM43XX;Stuurprogramma voor de Broadcom 802.11-netwerkadapter; C:\Windows\system32\DRIVERS\bcmwl664.sys [2012-03-16 4729408] R3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984] R3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384] R3 btwampfl;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2011-06-15 620584] R3 btwaudio;Bluetooth-audioapparaat; C:\Windows\system32\drivers\btwaudio.sys [2011-06-15 165416] R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2011-06-15 178728] R3 BTWDPAN;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\btwdpan.sys [2011-05-21 89640] R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2011-02-14 39976] R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2011-06-15 21544] R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2010-07-28 31088] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-01-12 2709224] R3 RFCOMM;Bluetooth-apparaat (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720] R3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys [2011-02-15 335464] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240] R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144] R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576] R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840] R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848] R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2010-11-30 44672] R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920] S3 BthPan;Bluetooth-apparaat (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784] S3 BTHPORT;Stuurprogramma voor Bluetooth-poort; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960] S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056] S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864] S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312] S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832] S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432] R2 AERTFilters;Andrea RT Filters Service; C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208] R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-07-06 204288] R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-07-05 365568] R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-10 50344] R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2011-06-16 1083680] R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504] R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232] R2 HitmanProScheduler;HitmanPro Scheduler; C:\Program Files\HitmanPro\hmpsched.exe [2014-04-10 127752] R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-06-21 85560] R2 HPClientSvc;HP Client Services; C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168] R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2012-09-06 197536] R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2012-03-05 35200] R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2010-12-28 1817088] R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976] R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe [2012-06-11 240208] R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-09-06 1001376] R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528] S2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe [2012-06-11 193616] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-12 257712] S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-10 1255736] S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184] -----------------EOF-----------------

ben al paar keer geblokeerd van internet door provider omdat ik besmetting op pc of laptop zou hebben terwijl alle updates gewoon gedaan worden virusscanner avast aanstaat ook hitman pro steeds bij opstart draait en deze week alles hersteld naar fabrieks instellingen wordt ik toch nog steeds geblokeerd telkens iemand goed idee wat hier tegen te doen heb al diverse viruscanners laten lopen maar vinden niks bijzonders zat nu te denken aan combofix iemand hier ervaring mee want wordt dit echt wel beu nu steeds geblokeerd te worden en ze dan verlangen dat je pc en laptop naar reparatie bedrijf moet laten schoonmaken lijkt mij gewoon geld uit je zak kloppen of niet

ok dan zal ik ze wel kwijt zijn want back up niet gemaakt dacht dat die mappen er op bleven staan ook bij incredimail maar niet dus heb alles naar fabrieks instellingen gezet dit ivm besmeting en blokadde door internet provider

heb een systeem herstel gedaan dus laptop is weer als of hij uit de fabriek komt nu na het instaleren terug van incredimail ben ik al mijn mappen kwijt somige met best wel belangrijke gegevens weet iemand in eenvoudige taal of deze zijn terug te halen of ben je die voor goed kwijt alvast bedankt

hallo ik heb nu een samsung monte s5620 gekocht en had nog de oudere sgh-d500 deze was vorige week flink gevallen en nu is het display daar van kapot helemaal wit kan dus niks meer met doen nu staan er nog fotos en video op die telefoon die ik er uit wil halen heb na advies zon datakabeltje gekocht in gsm en pc aangesloten maar er gebeurt niks en op die telefoon kan ik dus niks meer zien denk dat je er ook een progama moet voor downloaden maar weet niet precies en ook niet waar ik dat progamma kan vinden of moet ik die gsm laten repareren eerst voor ik de info er uit kan halen wie weet oplossing