antivirus.startpagina.nl

En toch is Renate's lappie weer erg traag

  • Anonymous avatar

    rudi

    Opstarten duurt een eeuwigheid, openen van :)IE met name ook

    Het apparaat wordt nauwelijks gebruikt, vaak alleen maar door kleinzoon (9) voor allerlei spelletjes sites

    Mbam liet niets zien.

    Als jullie nog weer een keer zouden willen kijken :(

    Adwcleaner wel:# AdwCleaner v3.000 - Report created 21/08/2013 at 13:56:13

    # Updated 20/08/2013 by Xplode

    # Operating System : Windows 8 (64 bits)

    # Username : renate - RENATE50

    # Running from : C:\Users\renate\Downloads\adwcleaner.exe

    # Option : Clean

    ***** *****

    ***** *****

    ***** *****

    ***** *****

    Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows - C:\PROGRA~3\Wincert\WIN32C~1.DLL

    Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows - C:\PROGRA~3\Wincert\WIN32C~1.DLL

    Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows - C:\PROGRA~3\Wincert\WIN32C~1.DLL

    Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows - C:\PROGRA~3\Wincert\WIN32C~1.DLL

    Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows - C:\PROGRA~3\Wincert\WIN64C~1.DLL

    ***** *****

    -\\ Internet Explorer v10.0.9200.16660

    *************************

    AdwCleaner.txt - -

    AdwCleaner.txt - -

    ########## EOF - C:\AdwCleaner\AdwCleaner.txt - ##########

    21/08/2013 14:22:52

    mbam-log-2013-08-21 (14-22-52).txt

    Scan type: Snelle scan

    Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM

    Uitgeschakelde scan opties: P2P

    Objecten gescand: 239086

    Verstreken tijd: 7 minuut/minuten, 17 seconde(n)

    Geheugenprocessen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Geheugenmodulen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registersleutels gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerwaarden gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerdata gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Mappen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Bestanden gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    (einde)

    Bij de Rsit wordt de tekst weer te lang om hem te kunnen plaatsen. Wat doe ik verkeerd??

  • Anonymous avatar

    rudi

    Logfile of random's system information tool 1.09 (written by random/random)

    Run by renate at 2013-08-21 19:14:51

    Microsoft Windows 8

    System drive C: has 75 GB (61%) free of 122 GB

    Total RAM: 3982 MB (59% free)

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 19:14:55, on 21/08/2013

    Platform: Unknown Windows (WinNT 6.02.1008)

    MSIE: Internet Explorer v10.0 (10.00.9200.16660)

    Boot mode: Normal

    Running processes:

    C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

    C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

    C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

    C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe

    C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

    C:\Windows\SysWOW64\ACEngSvr.exe

    C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

    C:\Program Files\AVAST Software\Avast\AvastUI.exe

    C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

    C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe

    C:\Program Files\trend micro\renate.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    F2 - REG:system.ini: UserInit=userinit.exe

    O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe”

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

    O4 - HKLM\..\Run: “C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe”

    O4 - HKLM\..\Run: C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe /S

    O4 - HKLM\..\Run: “C:\Program Files\AVAST Software\Avast\avastUI.exe” /nogui

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe” /DelayServices

    O4 - HKLM\..\Run: C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon

    O4 - HKCU\..\Run: “C:\Users\renate\AppData\Roaming\Spotify\Spotify.exe” /uri spotify:autostart

    O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe

    O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra ‘Tools’ menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O9 - Extra ‘Tools’ menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O11 - Options group: Accelerated graphics

    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll

    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

    O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe

    O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

    O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe

    O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

    O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

    O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

  • Anonymous avatar

    fazantje

    Hoi Rudi,

    Logje van Rsit kun je in 2 of 3 delen posten, dus gewoon 2 of 3 berichten achter elkaar.

    Is die lappie op een bepaald moment klaar of de gehele tijd?

    Groetjes Huib;)

  • Anonymous avatar

    rudi

    Dank Huib,

    ik ga hem ff weer helemaal doen

  • Anonymous avatar

    rudi

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 19:27:10, on 21/08/2013

    Platform: Unknown Windows (WinNT 6.02.1008)

    MSIE: Internet Explorer v10.0 (10.00.9200.16660)

    Boot mode: Normal

    Running processes:

    C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

    C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

    C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

    C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe

    C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

    C:\Windows\SysWOW64\ACEngSvr.exe

    C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

    C:\Program Files\AVAST Software\Avast\AvastUI.exe

    C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

    C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

    C:\Windows\SysWOW64\NOTEPAD.EXE

    C:\Program Files\trend micro\renate.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    F2 - REG:system.ini: UserInit=userinit.exe

    O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe”

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

    O4 - HKLM\..\Run: “C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe”

    O4 - HKLM\..\Run: C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe /S

    O4 - HKLM\..\Run: “C:\Program Files\AVAST Software\Avast\avastUI.exe” /nogui

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe” /DelayServices

    O4 - HKLM\..\Run: C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon

    O4 - HKCU\..\Run: “C:\Users\renate\AppData\Roaming\Spotify\Spotify.exe” /uri spotify:autostart

    O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe

    O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra ‘Tools’ menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O9 - Extra ‘Tools’ menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O11 - Options group: Accelerated graphics

    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll

    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

    O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe

    O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

    O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe

    O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

    O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

    O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    –

    End of file - 9724 bytes

    ======Listing Processes======

    \SystemRoot\System32\smss.exe

    %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

    wininit.exe

    %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

    winlogon.exe

    C:\Windows\system32\services.exe

    C:\Windows\system32\lsass.exe

    C:\Windows\system32\svchost.exe -k DcomLaunch

    C:\Windows\system32\nvvsvc.exe

    C:\Windows\system32\svchost.exe -k RPCSS

    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    “dwm.exe”

    C:\Windows\system32\svchost.exe -k netsvcs

    C:\Windows\system32\svchost.exe -k LocalService

    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\Windows\system32\svchost.exe -k NetworkService

    “C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe”

    “C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe”

    “C:\Program Files\AVAST Software\Avast\AvastSvc.exe”

    C:\Windows\System32\spoolsv.exe

    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

    “C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe”

    “C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe”

    “C:\Program Files\Intel\iCLS Client\HeciServer.exe”

    dashost.exe {f852a040-8646-4160-a8153d1e6f9a1421}

    “C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe”

    “C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe”

    “C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe”

    C:\Windows\system32\svchost.exe -k imgsvc

    “C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe”

    C:\Windows\system32\nvvsvc.exe -session -first

    taskhostex.exe

    C:\Windows\Explorer.EXE

    “C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe”

    “C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe”

    “C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnCfg.exe”

    “C:\Program Files\ASUS\P4G\BatteryLife.exe”

    “C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe”

    “C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe” /starttray

    KBFiltr.exe

    “C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4406.1205_x64__8wekyb3d8bbwe\LiveComm.exe” -ServerName:Microsoft.WindowsLive.Platform.Server

    “C:/Program Files/NVIDIA Corporation/Display/nvtray.exe” -user_has_logged_in 1

    “C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe”

    “C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe”

    C:\Windows\system32\SearchIndexer.exe /Embedding

    “C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe”

    “C:\Windows\System32\igfxtray.exe”

    “C:\Windows\System32\hkcmd.exe”

    “C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe” -s

    “C:\Program Files (x86)\ASUS\Splendid\ACMON.exe”

    “C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE” /logon

    C:\Windows\SysWOW64\ACEngSvr.exe -Embedding

    C:\Windows\System32\RuntimeBroker.exe -Embedding

    “C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe”

    “C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe”

    “C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe”

    “C:\Program Files\AVAST Software\Avast\AvastUI.exe” /nogui

    “C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe”

    “C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE” /logon

    “C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe”

    “C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe”

    “C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe”

    C:\Windows\splwow64.exe 8192

    “C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe”

    C:\Windows\system32\wbem\wmiprvse.exe

    “C:\Program Files\Internet Explorer\iexplore.exe” -ServerName:DefaultBrowserServer

    “C:\Program Files\Internet Explorer\iexplore.exe” SCODEF:4976 CREDAT:267777 /prefetch:1

    “C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe”

    “C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe”

    “C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe” -Embedding

    “C:\Program Files\Internet Explorer\iexplore.exe” SCODEF:4976 CREDAT:4003370 /prefetch:1

    “C:\Program Files\Internet Explorer\iexplore.exe” SCODEF:4976 CREDAT:1578590 /prefetch:1

    “C:\Windows\system32\NOTEPAD.EXE” C:\rsit\log.txt

    “C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe”

    “C:\Windows\system32\NOTEPAD.EXE” C:\Users\renate\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-2013-08-21 (14-22-52).txt

    “C:\Windows\system32\NOTEPAD.EXE” C:\Users\renate\Documents\AdwCleaner.txt

    “C:\Windows\system32\SearchProtocolHost.exe” Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1782918206-1260622963-1387706355-10029_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1782918206-1260622963-1387706355-10029 1 -2147483646 “Software\Microsoft\Windows Search” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)” “C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc” “DownLevelDaemon” “1”

    “C:\Program Files\Internet Explorer\iexplore.exe” SCODEF:4976 CREDAT:2889278 /prefetch:1

    “C:\Windows\system32\SearchFilterHost.exe” 0 584 588 596 65536 592

    “C:\Windows\system32\SearchProtocolHost.exe” Global\UsGthrFltPipeMssGthrPipe10_ Global\UsGthrCtrlFltPipeMssGthrPipe10 1 -2147483646 “Software\Microsoft\Windows Search” “Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)” “C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc” “DownLevelDaemon”

    C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

    C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

    “C:\Users\renate\Downloads\RSITx64 (2).exe”

    C:\Windows\system32\wbem\wmiprvse.exe

  • Anonymous avatar

    rudi

    ======Scheduled tasks folder======

    C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

    C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

    ======Registry dump======

    avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll

    Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL

    Canon Easy-WebPrint EX BHO - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll

    avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

    {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll

    {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll

    “IgfxTray”=C:\Windows\system32\igfxtray.exe

    “HotKeysCmds”=C:\Windows\system32\hkcmd.exe

    “RTHDVCPL”=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

    “ACMON”=C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

    “CanonMyPrinter”=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe

    “Spotify”=C:\Users\renate\AppData\Roaming\Spotify\Spotify.exe

    “Adobe Reader Speed Launcher”=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe

    “Adobe ARM”=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

    “RemoteControl10”=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

    “ASUSWebStorage”=C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe

    “avast”=C:\Program Files\AVAST Software\Avast\avastUI.exe

    “BCSSync”=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe

    “CanonSolutionMenuEx”=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

    AsusVibeLauncher.lnk - C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe

    “AppInit_DLLs”=“ C:\Windows\SysWOW64\nvinit.dll C:\Windows\SysWOW64\nvinit.dll C:\Windows\SysWOW64\nvinit.dll C:\Windows\SysWOW64\nvinit.dll C:\Windows\system32\nvinitx.dll”

    C:\Windows\system32\igfxdev.dll

    WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

    “SecurityProviders”=credssp.dll

  • Anonymous avatar

    rudi

    “ConsentPromptBehaviorAdmin”=5

    “EnableUIADesktopToggle”=0

    “EnableCursorSuppression”=1

    “ConsentPromptBehaviorUser”=3

    “dontdisplaylastusername”=0

    “legalnoticecaption”=

    “legalnoticetext”=

    “shutdownwithoutlogon”=1

    “undockwithoutlogon”=1

    “EnableSecureUIAPath”=1

    “ForceActiveDesktopOn”=0

    “NoActiveDesktopChanges”=1

    “NoActiveDesktop”=1

    “msacm.l3acm”=C:\Windows\System32\l3codeca.acm

    “VIDC.YUY2”=msyuv.dll

    “vidc.i420”=iyuv_32.dll

    “msacm.msgsm610”=msgsm32.acm

    “msacm.msg711”=msg711.acm

    “VIDC.YVYU”=msyuv.dll

    “VIDC.YVU9”=tsbyuv.dll

    “wavemapper”=msacm32.drv

    “midimapper”=midimap.dll

    “VIDC.UYVY”=msyuv.dll

    “VIDC.IYUV”=iyuv_32.dll

    “vidc.mrle”=msrle32.dll

    “msacm.imaadpcm”=imaadp32.acm

    “msacm.msadpcm”=msadp32.acm

    “vidc.msvc”=msvidc32.dll

    “MSVideo8”=VfWWDM32.dll

    “wave1”=wdmaud.drv

    “midi1”=wdmaud.drv

    “mixer1”=wdmaud.drv

    “aux1”=wdmaud.drv

    “wave”=wdmaud.drv

    “midi”=wdmaud.drv

    “mixer”=wdmaud.drv

    “aux”=wdmaud.drv

    ======File associations======

    .js - edit - C:\Windows\System32\Notepad.exe %1

    .js - open - C:\Windows\System32\WScript.exe “%1” %*

    ======List of files/folders created in the last 1 month======

    2013-08-21 15:35:54 —-D—- C:\rsit

    2013-08-21 15:00:07 —-D—- C:\Program Files (x86)\ESET

    2013-08-21 13:55:23 —-D—- C:\AdwCleaner

    2013-08-21 13:43:49 —-A—- C:\Windows\system32\FNTCACHE.DAT

    2013-08-21 13:34:53 —-D—- C:\Windows\system32\MRT

    2013-08-15 09:11:07 —-A—- C:\Windows\SYSWOW64\rpcrt4.dll

    2013-08-15 09:11:07 —-A—- C:\Windows\system32\rpcrt4.dll

    2013-08-15 09:10:47 —-A—- C:\Windows\system32\drivers\tcpip.sys

    2013-08-15 09:10:43 —-A—- C:\Windows\SYSWOW64\iernonce.dll

    2013-08-15 09:10:43 —-A—- C:\Windows\system32\uxtheme.dll

    2013-08-15 09:10:43 —-A—- C:\Windows\system32\UXInit.dll

    2013-08-15 09:10:42 —-A—- C:\Windows\SYSWOW64\UXInit.dll

    2013-08-15 09:10:42 —-A—- C:\Windows\SYSWOW64\urlmon.dll

    2013-08-15 09:10:42 —-A—- C:\Windows\SYSWOW64\iesetup.dll

    2013-08-15 09:10:41 —-A—- C:\Windows\SYSWOW64\uxtheme.dll

    2013-08-15 09:10:41 —-A—- C:\Windows\SYSWOW64\jsproxy.dll

    2013-08-15 09:10:40 —-A—- C:\Windows\SYSWOW64\msfeeds.dll

    2013-08-15 09:10:40 —-A—- C:\Windows\SYSWOW64\ieframe.dll

    2013-08-15 09:10:37 —-A—- C:\Windows\system32\iernonce.dll

    2013-08-15 09:10:37 —-A—- C:\Windows\system32\ie4uinit.exe

    2013-08-15 09:10:36 —-A—- C:\Windows\SYSWOW64\wininet.dll

    2013-08-15 09:10:36 —-A—- C:\Windows\SYSWOW64\iesysprep.dll

    2013-08-15 09:10:36 —-A—- C:\Windows\system32\jsproxy.dll

    2013-08-15 09:10:35 —-A—- C:\Windows\system32\urlmon.dll

    2013-08-15 09:10:35 —-A—- C:\Windows\system32\msfeeds.dll

    2013-08-15 09:10:34 —-A—- C:\Windows\system32\iesetup.dll

    2013-08-15 09:10:33 —-A—- C:\Windows\system32\wininet.dll

    2013-08-15 09:10:33 —-A—- C:\Windows\system32\iesysprep.dll

    2013-08-15 09:10:29 —-A—- C:\Windows\system32\ieframe.dll

    2013-08-15 09:10:25 —-A—- C:\Windows\system32\jscript.dll

    2013-08-15 09:10:21 —-A—- C:\Windows\system32\mshtml.dll

    2013-08-15 09:09:58 —-A—- C:\Windows\SYSWOW64\jscript.dll

    2013-08-15 09:09:58 —-A—- C:\Windows\system32\jscript9.dll

    2013-08-15 09:09:58 —-A—- C:\Windows\system32\iertutil.dll

    2013-08-15 09:09:56 —-A—- C:\Windows\SYSWOW64\iertutil.dll

    2013-08-15 09:09:46 —-A—- C:\Windows\SYSWOW64\jscript9.dll

    2013-08-15 09:09:44 —-A—- C:\Windows\SYSWOW64\mshtml.dll

    2013-08-15 09:09:31 —-A—- C:\Windows\SYSWOW64\crypt32.dll

    2013-08-15 09:09:31 —-A—- C:\Windows\system32\crypt32.dll

    2013-08-15 09:09:30 —-A—- C:\Windows\SYSWOW64\wintrust.dll

    2013-08-15 09:09:30 —-A—- C:\Windows\system32\wintrust.dll

    2013-08-15 09:09:29 —-A—- C:\Windows\SYSWOW64\apprepapi.dll

    2013-08-15 09:09:29 —-A—- C:\Windows\system32\cryptsvc.dll

    2013-08-15 09:09:29 —-A—- C:\Windows\system32\apprepapi.dll

    2013-08-15 09:09:28 —-A—- C:\Windows\SYSWOW64\apprepsync.dll

    2013-08-15 09:09:28 —-A—- C:\Windows\system32\apprepsync.dll

    ======List of files/folders modified in the last 1 month======

    2013-08-21 19:27:09 —-D—- C:\Program Files\trend micro

    2013-08-21 19:27:06 —-D—- C:\Windows\Prefetch

    2013-08-21 19:00:00 —-D—- C:\Windows\system32\sru

    2013-08-21 18:47:17 —-D—- C:\Windows\rescache

    2013-08-21 18:43:52 —-D—- C:\Windows\WinSxS

    2013-08-21 18:42:01 —-D—- C:\Windows\system32\config

    2013-08-21 18:42:00 —-D—- C:\Windows\Temp

    2013-08-21 17:27:45 —-A—- C:\Windows\SYSWOW64\log.txt

    2013-08-21 17:20:13 —-D—- C:\Windows\debug

    2013-08-21 16:54:37 —-D—- C:\Windows\CbsTemp

    2013-08-21 16:24:50 —-D—- C:\Windows\AUInstallAgent

    2013-08-21 16:18:25 —-HD—- C:\Program Files\WindowsApps

    2013-08-21 15:56:55 —-SHD—- C:\System Volume Information

    2013-08-21 15:45:08 —-RSD—- C:\Windows\assembly

    2013-08-21 15:45:08 —-D—- C:\Windows\Microsoft.NET

    2013-08-21 15:18:43 —-AD—- C:\ProgramData\Temp

    2013-08-21 15:18:37 —-D—- C:\Program Files (x86)\SpywareBlaster

    2013-08-21 15:16:24 —-D—- C:\Program Files\CCleaner

    2013-08-21 15:00:07 —-RD—- C:\Program Files (x86)

    2013-08-21 14:55:51 —-D—- C:\Windows\system32\catroot2

    2013-08-21 14:38:38 —-SHD—- C:\Windows\Installer

    2013-08-21 14:36:26 —-D—- C:\Windows\SysWOW64

    2013-08-21 14:35:46 —-D—- C:\ProgramData\Adobe

    2013-08-21 13:43:49 —-RD—- C:\Windows\System32

    2013-08-21 13:37:31 —-D—- C:\Windows\system32\Drivers

    2013-08-21 13:37:29 —-D—- C:\Program Files (x86)\Internet Explorer

    2013-08-21 13:37:19 —-D—- C:\Program Files\Internet Explorer

    2013-08-21 13:37:12 —-D—- C:\Windows\SYSWOW64\nl-NL

    2013-08-21 13:37:11 —-D—- C:\Windows\system32\nl-NL

    2013-08-21 13:34:44 —-A—- C:\Windows\system32\MRT.exe

    2013-08-16 08:49:23 —-D—- C:\Windows\system32\wdi

    2013-08-12 08:49:28 —-D—- C:\Windows\system32\NDF

    2013-07-30 16:53:01 —-D—- C:\Windows\LiveKernelReports

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R0 ACPI;@acpi.inf,%ACPI.SvcDesc%;Microsoft ACPI Driver; C:\Windows\System32\drivers\ACPI.sys

    R0 acpiex;Microsoft ACPIEx Driver; C:\Windows\System32\Drivers\acpiex.sys

    R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys

    R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys

    R0 CLFS;@%SystemRoot%\system32\drivers\clfs.sys,-100; C:\Windows\System32\drivers\CLFS.sys

    R0 CNG;CNG; C:\Windows\System32\Drivers\cng.sys

    R0 disk;@disk.inf,%disk_ServiceDesc%;Disk Driver; C:\Windows\System32\drivers\disk.sys

    R0 EhStorClass;@%SystemRoot%\system32\drivers\EhStorClass.sys,-100; C:\Windows\System32\drivers\EhStorClass.sys

    R0 FileInfo;@%SystemRoot%\system32\drivers\fileinfo.sys,-100; C:\Windows\System32\drivers\fileinfo.sys

    R0 FltMgr;@%SystemRoot%\system32\drivers\fltmgr.sys,-10001; C:\Windows\system32\drivers\fltmgr.sys

    R0 fvevol;@%SystemRoot%\system32\drivers\fvevol.sys,-100; C:\Windows\System32\DRIVERS\fvevol.sys

    R0 iaStorA;iaStorA; C:\Windows\System32\drivers\iaStorA.sys

    R0 KSecDD;KSecDD; C:\Windows\System32\Drivers\ksecdd.sys

    R0 KSecPkg;KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys

    R0 mountmgr;@%SystemRoot%\system32\drivers\mountmgr.sys,-100; C:\Windows\System32\drivers\mountmgr.sys

    R0 msisadrv;msisadrv; C:\Windows\System32\drivers\msisadrv.sys

    R0 Mup;@%systemroot%\system32\drivers\mup.sys,-101; C:\Windows\System32\Drivers\mup.sys

    R0 NDIS;@%SystemRoot%\system32\drivers\ndis.sys,-200; C:\Windows\system32\drivers\ndis.sys

    R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys

    R0 partmgr;@%SystemRoot%\system32\drivers\partmgr.sys,-100; C:\Windows\System32\drivers\partmgr.sys

    R0 pci;@machine.inf,%pci_svcdesc%;PCI Bus Driver; C:\Windows\System32\drivers\pci.sys

    R0 pcw;Performance Counters for Windows Driver; C:\Windows\System32\drivers\pcw.sys

    R0 pdc;@%SystemRoot%\system32\drivers\pdc.sys,-100; C:\Windows\system32\drivers\pdc.sys

    R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys

    R0 spaceport;@spaceport.inf,%Spaceport_ServiceDesc%;Storage Spaces Driver; C:\Windows\System32\drivers\spaceport.sys

    R0 Tcpip;@%SystemRoot%\system32\tcpipcfg.dll,-50003; C:\Windows\System32\drivers\tcpip.sys

    R0 vdrvroot;@vdrvroot.inf,%vdrvroot_svcdesc%;Microsoft Virtual Drive Enumerator; C:\Windows\System32\drivers\vdrvroot.sys

    R0 volmgr;@volmgr.inf,%volmgr_svcdesc%;Volume Manager Driver; C:\Windows\System32\drivers\volmgr.sys

    R0 volmgrx;@%SystemRoot%\system32\drivers\volmgrx.sys,-100; C:\Windows\System32\drivers\volmgrx.sys

    R0 volsnap;@volume.inf,%VolumeClassName%;Storage volumes; C:\Windows\System32\drivers\volsnap.sys

    R0 Wdf01000;@%SystemRoot%\system32\drivers\Wdf01000.sys,-1000; C:\Windows\system32\drivers\Wdf01000.sys

    R0 WFPLWFS;@%SystemRoot%\System32\drivers\wfplwfs.sys,-6000; C:\Windows\system32\DRIVERS\wfplwfs.sys

    R1 AFD;@%systemroot%\system32\drivers\afd.sys,-1000; C:\Windows\system32\drivers\afd.sys

    R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys

    R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys

    R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys

    R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys

    R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys

    R1 BasicDisplay;BasicDisplay; C:\Windows\System32\drivers\BasicDisplay.sys

    R1 BasicRender;BasicRender; C:\Windows\System32\drivers\BasicRender.sys

    R1 Beep;Beep; C:\Windows\system32\drivers\Beep.sys

    R1 cdrom;@cdrom.inf,%cdrom_ServiceDesc%;CD-ROM Driver; C:\Windows\System32\drivers\cdrom.sys

    R1 Dfsc;@%systemroot%\system32\wkssvc.dll,-1008; C:\Windows\System32\Drivers\dfsc.sys

    R1 discache;@%systemroot%\system32\drivers\discache.sys,-102; C:\Windows\System32\drivers\discache.sys

    R1 Msfs;Msfs; C:\Windows\system32\drivers\Msfs.sys

    R1 mssmbios;@mssmbios.inf,%mssmbios_svcdesc%;Microsoft System Management BIOS Driver; C:\Windows\System32\drivers\mssmbios.sys

    R1 NetBIOS;@netnb.inf,%NetBIOS_Desc%;NetBIOS Interface; C:\Windows\system32\DRIVERS\netbios.sys

    R1 NetBT;@%SystemRoot%\system32\drivers\netbt.sys,-2; C:\Windows\System32\DRIVERS\netbt.sys

    R1 Npfs;Npfs; C:\Windows\system32\drivers\Npfs.sys

    R1 npsvctrig;@npsvctrig.inf,%NPSVCTRIG.SvcDisplayName%;Named pipe service trigger provider; C:\Windows\System32\drivers\npsvctrig.sys

    R1 nsiproxy;@%SystemRoot%\system32\drivers\nsiproxy.sys,-2; C:\Windows\system32\drivers\nsiproxy.sys

    R1 Null;Null; C:\Windows\system32\drivers\Null.sys

    R1 Psched;@%SystemRoot%\System32\drivers\pacer.sys,-101; C:\Windows\system32\DRIVERS\pacer.sys

    R1 rdbss;@%systemroot%\system32\wkssvc.dll,-1000; C:\Windows\system32\DRIVERS\rdbss.sys

    R1 tdx;@%SystemRoot%\system32\tcpipcfg.dll,-50004; C:\Windows\system32\DRIVERS\tdx.sys

    R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys

    R1 Wanarpv6;@%systemroot%\system32\rascfg.dll,-32012; C:\Windows\system32\DRIVERS\wanarp.sys

    R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys

    R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys

    R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys

    R2 lltdio;@%SystemRoot%\system32\lltdres.dll,-6; C:\Windows\system32\DRIVERS\lltdio.sys

    R2 luafv;@%systemroot%\system32\drivers\luafv.sys,-100; C:\Windows\system32\drivers\luafv.sys

    R2 NativeWifiP;@%SystemRoot%\System32\drivers\nwifi.sys,-101; C:\Windows\system32\DRIVERS\nwifi.sys

    R2 Ndu;@%SystemRoot%\system32\drivers\Ndu.sys,-10001; C:\Windows\system32\drivers\Ndu.sys

    R2 PEAUTH;PEAUTH; C:\Windows\system32\drivers\peauth.sys

    R2 rspndr;@%SystemRoot%\system32\lltdres.dll,-5; C:\Windows\system32\DRIVERS\rspndr.sys

    R2 secdrv;Security Driver; C:\Windows\system32\drivers\secdrv.sys

    R2 tcpipreg;TCP/IP Registry Compatibility; C:\Windows\System32\drivers\tcpipreg.sys

    R3 AiCharger;ASUS Charger Driver; C:\Windows\system32\DRIVERS\AiCharger.sys

    R3 athr;@oem12.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athw8x.sys

    R3 ATP;@oem10.inf,%PS2.DeviceDesc%;ASUS PS/2 Port Input Device; C:\Windows\System32\drivers\AsusTP.sys

    R3 bowser;@%systemroot%\system32\browser.dll,-102; C:\Windows\system32\DRIVERS\bowser.sys

    R3 CmBatt;@cmbatt.inf,%CmBatt.SvcDesc%;Microsoft ACPI Control Method Battery Driver; C:\Windows\System32\drivers\CmBatt.sys

    R3 CompositeBus;@CompositeBus.inf,%CompositeBus.SVCDESC%;Composite Bus Enumerator Driver; C:\Windows\System32\drivers\CompositeBus.sys

    R3 condrv;Console Driver; C:\Windows\System32\drivers\condrv.sys

    R3 DXGKrnl;LDDM Graphics Subsystem; C:\Windows\System32\drivers\dxgkrnl.sys

    R3 fastfat;FAT12/16/32 File System Driver; C:\Windows\system32\drivers\fastfat.sys

    R3 HDAudBus;@hdaudbus.inf,%HDAudBus.SVCDESC%;Microsoft UAA Bus Driver for High Definition Audio; C:\Windows\System32\drivers\HDAudBus.sys

    R3 HIDSwitch;@oem14.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\Windows\System32\drivers\AsHIDSwitch64.sys

    R3 HidUsb;@input.inf,%HID.SvcDesc%;Microsoft HID Class Driver; C:\Windows\System32\drivers\hidusb.sys

    R3 HTTP;@%SystemRoot%\system32\drivers\http.sys,-1; C:\Windows\system32\drivers\HTTP.sys

    R3 i8042prt;@msmouse.inf,%i8042prt.SvcDesc%;Stuurprogramma voor PS/2-toetsenbord en -muispoort; C:\Windows\System32\drivers\i8042prt.sys

    R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys

    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys

    R3 IntcDAud;@oem6.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys

    R3 intelppm;@cpu.inf,%IntelPPM.SvcDesc%;Intel Processor Driver; C:\Windows\System32\drivers\intelppm.sys

    R3 kbdclass;@keyboard.inf,%kbdclass.SvcDesc%;Stuurprogramma voor verschillende toetsenbordtypen; C:\Windows\System32\drivers\kbdclass.sys

    R3 kbfiltr;@oem13.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\Windows\System32\drivers\kbfiltr.sys

    R3 kdnic;@kdnic.inf,%KdNic.Service.DispName%;Microsoft Kernel Debug Network Miniport (NDIS 6.20); C:\Windows\system32\DRIVERS\kdnic.sys

    R3 ksthunk;Kernel Streaming Thunks; C:\Windows\system32\drivers\ksthunk.sys

    R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys

    R3 MEIx64;@oem4.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\HECIx64.sys

    R3 monitor;@monitor.inf,%Monitor.SVCDESC%;Microsoft Monitor Class Function Driver Service; C:\Windows\System32\drivers\monitor.sys

    R3 mouclass;@msmouse.inf,%mouclass.SvcDesc%;Stuurprogramma voor muistypen; C:\Windows\System32\drivers\mouclass.sys

    R3 mouhid;@msmouse.inf,%MOUHID.SvcDesc%;Mouse HID Driver; C:\Windows\System32\drivers\mouhid.sys

    R3 mpsdrv;@%SystemRoot%\system32\FirewallAPI.dll,-23092; C:\Windows\System32\drivers\mpsdrv.sys

    R3 mrxsmb;@%systemroot%\system32\wkssvc.dll,-1002; C:\Windows\system32\DRIVERS\mrxsmb.sys

    R3 mrxsmb10;@%systemroot%\system32\wkssvc.dll,-1004; C:\Windows\system32\DRIVERS\mrxsmb10.sys

    R3 mrxsmb20;@%systemroot%\system32\wkssvc.dll,-1006; C:\Windows\system32\DRIVERS\mrxsmb20.sys

    R3 NdisTapi;@%systemroot%\system32\rascfg.dll,-32001; C:\Windows\system32\DRIVERS\ndistapi.sys

    R3 Ndisuio;@ndisuio.inf,%NDISUIO_Desc%;NDIS Usermode I/O Protocol; C:\Windows\system32\DRIVERS\ndisuio.sys

    R3 NdisWan;@%systemroot%\system32\rascfg.dll,-32002; C:\Windows\system32\DRIVERS\ndiswan.sys

    R3 NDProxy;NDIS Proxy; C:\Windows\system32\drivers\NDProxy.sys

    R3 Ntfs;Ntfs; C:\Windows\system32\drivers\Ntfs.sys

    R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys

    R3 PptpMiniport;@%systemroot%\system32\rascfg.dll,-32006; C:\Windows\system32\DRIVERS\raspptp.sys

    R3 RasAgileVpn;@netavpna.inf,%Svc-Mp-AgileVpn-DispName%;WAN Miniport (IKEv2); C:\Windows\system32\DRIVERS\AgileVpn.sys

    R3 Rasl2tp;@%systemroot%\system32\rascfg.dll,-32005; C:\Windows\system32\DRIVERS\rasl2tp.sys

    R3 RasPppoe;@%systemroot%\system32\rascfg.dll,-32007; C:\Windows\system32\DRIVERS\raspppoe.sys

    R3 RasSstp;@%systemroot%\system32\sstpsvc.dll,-202; C:\Windows\system32\DRIVERS\rassstp.sys

    R3 rdpbus;@rdpbus.inf,%rdpbus_svcdesc%;Remote Desktop Device Redirector Bus Driver; C:\Windows\System32\drivers\rdpbus.sys

    R3 RSBASTOR;@oem9.inf,%Rts5208%;Realtek PCIE CardReader Driver - BA; C:\Windows\system32\DRIVERS\RtsBaStor.sys

    R3 RTL8168;@oem11.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys

    R3 srv;@%systemroot%\system32\srvsvc.dll,-102; C:\Windows\System32\DRIVERS\srv.sys

    R3 srv2;@%systemroot%\system32\srvsvc.dll,-104; C:\Windows\System32\DRIVERS\srv2.sys

    R3 srvnet;srvnet; C:\Windows\System32\DRIVERS\srvnet.sys

    R3 swenum;@swenum.inf,%SWENUM.SVCDESC%;Software Bus Driver; C:\Windows\System32\drivers\swenum.sys

    R3 tunnel;@nettun.inf,%TUNNEL.Service.DisplayName%;Stuurprogramma voor Microsoft IPv6 Tunnel-minipoortadapter; C:\Windows\system32\DRIVERS\tunnel.sys

    R3 UCX01000;USB Controller Extension; C:\Windows\System32\drivers\ucx01000.sys

    R3 umbus;@umbus.inf,%umbus.SVCDESC%;UMBus Enumerator Driver; C:\Windows\System32\drivers\umbus.sys

    R3 usbccgp;@usb.inf,%GenericParent.SvcDesc%;Microsoft USB Generic Parent Driver; C:\Windows\System32\drivers\usbccgp.sys

    R3 usbehci;@usbport.inf,%EHCIMP.SvcDesc%;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\Windows\System32\drivers\usbehci.sys

    R3 usbhub;@usbport.inf,%ROOTHUB.SvcDesc%;Stuurprogramma voor Microsoft USB Standaard-hub; C:\Windows\System32\drivers\usbhub.sys

    R3 USBHUB3;@usbhub3.inf,%UsbHub3.SVCDESC%;SuperSpeed Hub; C:\Windows\System32\drivers\UsbHub3.sys

    R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys

    R3 USBXHCI;@usbxhci.inf,%PCI\CC_0C0330.DeviceDesc%;USB xHCI Compliant Host Controller; C:\Windows\System32\drivers\USBXHCI.SYS

    R3 vwifibus;@%SystemRoot%\System32\drivers\vwifibus.sys,-257; C:\Windows\System32\drivers\vwifibus.sys

    R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys

    R3 WmiAcpi;@wmiacpi.inf,%WMIMAP.SvcDesc%;Microsoft Windows Management Interface for ACPI; C:\Windows\System32\drivers\wmiacpi.sys

    S0 3ware;3ware; C:\Windows\System32\drivers\3ware.sys

    S0 adp94xx;adp94xx; C:\Windows\System32\drivers\adp94xx.sys

    S0 adpahci;adpahci; C:\Windows\System32\drivers\adpahci.sys

    S0 adpu320;adpu320; C:\Windows\System32\drivers\adpu320.sys

    S0 agp440;@machine.inf,%agp440_svcdesc%;Intel AGP Bus Filter; C:\Windows\System32\drivers\agp440.sys

    S0 amdsata;amdsata; C:\Windows\System32\drivers\amdsata.sys

    S0 amdsbs;amdsbs; C:\Windows\System32\drivers\amdsbs.sys

    S0 amdxata;amdxata; C:\Windows\System32\drivers\amdxata.sys

    S0 arc;arc; C:\Windows\System32\drivers\arc.sys

    S0 arcsas;@arcsas.inf,%arcsas_ServiceName%;Adaptec SAS/SATA-II RAID Windows Inbox Miniport Driver; C:\Windows\System32\drivers\arcsas.sys

    S0 atapi;@mshdc.inf,%idechannel.DeviceDesc%;IDE Channel; C:\Windows\System32\drivers\atapi.sys

    S0 b06bdrv;@netbvbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II VBD; C:\Windows\System32\drivers\bxvbda.sys

    S0 ebdrv;@netevbda.inf,%vbd_srv_desc%;Broadcom NetXtreme II 10 GigE VBD; C:\Windows\System32\drivers\evbda.sys

    S0 EhStorTcgDrv;@ehstortcgdrv.inf,%EhStorTcgDrv.Desc%;Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols; C:\Windows\System32\drivers\EhStorTcgDrv.sys

    S0 gagp30kx;@agp.inf,%gagp30kx_svcdesc%;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms; C:\Windows\System32\drivers\gagp30kx.sys

    S0 HpSAMD;HpSAMD; C:\Windows\System32\drivers\HpSAMD.sys

    S0 hwpolicy;@%systemroot%\system32\drivers\hwpolicy.sys,-101; C:\Windows\System32\drivers\hwpolicy.sys

    S0 iaStorV;@iastorv.inf,%*PNP0600.DeviceDesc%;Intel RAID Controller Windows 7; C:\Windows\System32\drivers\iaStorV.sys

    S0 iirsp;iirsp; C:\Windows\System32\drivers\iirsp.sys

    S0 intelide;intelide; C:\Windows\System32\drivers\intelide.sys

    S0 isapnp;isapnp; C:\Windows\System32\drivers\isapnp.sys

    S0 LSI_SAS;LSI_SAS; C:\Windows\System32\drivers\lsi_sas.sys

    S0 LSI_SAS2;LSI_SAS2; C:\Windows\System32\drivers\lsi_sas2.sys

    S0 LSI_SCSI;LSI_SCSI; C:\Windows\System32\drivers\lsi_scsi.sys

    S0 LSI_SSS;LSI_SSS; C:\Windows\System32\drivers\lsi_sss.sys

    S0 megasas;megasas; C:\Windows\System32\drivers\megasas.sys

    S0 MegaSR;MegaSR; C:\Windows\System32\drivers\MegaSR.sys

    S0 mvumis;mvumis; C:\Windows\System32\drivers\mvumis.sys

    S0 nfrd960;nfrd960; C:\Windows\System32\drivers\nfrd960.sys

    S0 nv_agp;@machine.inf,%agpnvidia_svcdesc%;NVIDIA nForce AGP Bus Filter; C:\Windows\System32\drivers\nv_agp.sys

    S0 nvraid;nvraid; C:\Windows\System32\drivers\nvraid.sys

    S0 nvstor;nvstor; C:\Windows\System32\drivers\nvstor.sys

    S0 pciide;pciide; C:\Windows\System32\drivers\pciide.sys

    S0 pcmcia;pcmcia; C:\Windows\System32\drivers\pcmcia.sys

    S0 sbp2port;@sbp2.inf,%sbp2_ServiceDesc%;SBP-2 Transport/Protocol Bus Driver; C:\Windows\System32\drivers\sbp2port.sys

    S0 SiSRaid2;SiSRaid2; C:\Windows\System32\drivers\SiSRaid2.sys

    S0 SiSRaid4;SiSRaid4; C:\Windows\System32\drivers\sisraid4.sys

    S0 stexstor;stexstor; C:\Windows\System32\drivers\stexstor.sys

    S0 storahci;@mshdc.inf,%storahci_ServiceDescription%;Microsoft Standard SATA AHCI Driver; C:\Windows\System32\drivers\storahci.sys

    S0 storflt;@%SystemRoot%\system32\vmstorfltres.dll,-1000; C:\Windows\system32\DRIVERS\vmstorfl.sys

    S0 storvsc;storvsc; C:\Windows\System32\drivers\storvsc.sys

    S0 uagp35;@agp.inf,%uagp35_svcdesc%;Microsoft AGPv3.5 Filter; C:\Windows\System32\drivers\uagp35.sys

    S0 uliagpkx;@machine.inf,%uliagpkx_svcdesc%;Uli AGP Bus Filter; C:\Windows\System32\drivers\uliagpkx.sys

    S0 viaide;viaide; C:\Windows\System32\drivers\viaide.sys

    S0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\System32\drivers\vmbus.sys

    S0 vsmraid;vsmraid; C:\Windows\System32\drivers\vsmraid.sys

    S0 VSTXRAID;@vstxraid.inf,%Driver.DeviceDesc%;VIA StorX Storage Controller Windows Driver; C:\Windows\System32\drivers\vstxraid.sys

    S0 Wd;@wd.inf,%WdServiceDisplayName%;Microsoft Watchdog Timer Driver; C:\Windows\System32\drivers\wd.sys

    S1 dam;@%SystemRoot%\system32\drivers\dam.sys,-100; C:\Windows\system32\drivers\dam.sys

    S3 1394ohci;@1394.inf,%PCI\CC_0C0010.DeviceDesc%;1394 OHCI Compliant Host Controller; C:\Windows\System32\drivers\1394ohci.sys

    S3 acpipagr;@acpipagr.inf,%SvcDesc%;ACPI Processor Aggregator Driver; C:\Windows\System32\drivers\acpipagr.sys

    S3 AcpiPmi;@acpipmi.inf,%AcpiPmi.SvcDesc%;ACPI Power Meter Driver; C:\Windows\System32\drivers\acpipmi.sys

    S3 acpitime;@acpitime.inf,%AcpiTime.SvcDesc%;ACPI Wake Alarm Driver; C:\Windows\System32\drivers\acpitime.sys

    S3 AgereSoftModem;@mdmags64.inf,%FullProductName%;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys

    S3 AmdK8;@cpu.inf,%AmdK8.SvcDesc%;AMD K8 Processor Driver; C:\Windows\System32\drivers\amdk8.sys

    S3 AmdPPM;@cpu.inf,%AmdPPM.SvcDesc%;AMD Processor Driver; C:\Windows\System32\drivers\amdppm.sys

    S3 AppID;@%systemroot%\system32\appidsvc.dll,-102; C:\Windows\system32\drivers\appid.sys

    S3 AsyncMac;@%systemroot%\system32\rascfg.dll,-32000; C:\Windows\system32\DRIVERS\asyncmac.sys

    S3 BthAvrcpTg;@bthaudhid.inf,%BthAvrcpTg_SvcDesc%;Bluetooth Audio/Video Remote Control HID; C:\Windows\System32\drivers\BthAvrcpTg.sys

    S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\Windows\System32\drivers\BthEnum.sys

    S3 BthHFEnum;@bthhfenum.inf,%BthHFEnum.SVCDESC%;Bluetooth Hands-Free Audio and Call Control HID Enumerator; C:\Windows\System32\drivers\bthhfenum.sys

    S3 bthhfhid;@bthaudhid.inf,%BthAudioHFHid.SVCDESC%;Bluetooth Hands-Free Call Control HID; C:\Windows\System32\drivers\BthHFHid.sys

    S3 BTHMODEM;@bthspp.inf,%BthSerial.DisplayName%;Bluetooth Serial Communications Driver; C:\Windows\System32\drivers\bthmodem.sys

    S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys

    S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys

    S3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys

    S3 circlass;@circlass.inf,%circlass.SVCDESC%;Consumer IR Devices; C:\Windows\System32\drivers\circlass.sys

    S3 dmvsc;dmvsc; C:\Windows\System32\drivers\dmvsc.sys

    S3 drmkaud;@wdmaudio.inf,%drmkaud.SvcDesc%;Microsoft Trusted Audio Drivers; C:\Windows\system32\drivers\drmkaud.sys

    S3 e1iexpress;@net1ic64.inf,%E1IExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver I; C:\Windows\system32\DRIVERS\e1i63x64.sys

    S3 ErrDev;@errdev.inf,%ERRDEV.SvcDesc%;Microsoft Hardware Error Device Driver; C:\Windows\System32\drivers\errdev.sys

    S3 exfat;exFAT File System Driver; C:\Windows\system32\drivers\exfat.sys

    S3 fdc;@fdc.inf,%fdc_ServiceDesc%;Floppy Disk Controller Driver; C:\Windows\System32\drivers\fdc.sys

    S3 Filetrace;@%SystemRoot%\system32\drivers\filetrace.sys,-10001; C:\Windows\system32\drivers\filetrace.sys

    S3 flpydisk;@flpydisk.inf,%floppy_ServiceDesc%;Floppy Disk Driver; C:\Windows\System32\drivers\flpydisk.sys

    S3 FsDepends;@%SystemRoot%\system32\drivers\fsdepends.sys,-10001; C:\Windows\System32\drivers\FsDepends.sys

    S3 FxPPM;@cpu.inf,%FxPPM.SvcDesc%;Power Framework Processor Driver; C:\Windows\System32\drivers\fxppm.sys

    S3 gencounter;@wgencounter.inf,%GenCounter.SVCDESC%;Microsoft Hyper-V Generation Counter; C:\Windows\System32\drivers\vmgencounter.sys

    S3 GPIOClx0101;Microsoft GPIO Class Extension Driver; C:\Windows\System32\Drivers\msgpioclx.sys

    S3 HdAudAddService;@hdaudio.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys

    S3 HidBatt;@hidbatt.inf,%HidBatt.SvcDesc%;HID UPS Battery Driver; C:\Windows\System32\drivers\HidBatt.sys

    S3 HidBth;@hidbth.inf,%HIDBTH.SvcDesc%;Microsoft Bluetooth HID Miniport; C:\Windows\System32\drivers\hidbth.sys

    S3 hidi2c;@hidi2c.inf,%hidi2c.SVCDESC%;Microsoft I2C HID Miniport Driver; C:\Windows\System32\drivers\hidi2c.sys

    S3 HidIr;@hidir.inf,%HIDIR.SvcDesc%;Microsoft Infrared HID Driver; C:\Windows\System32\drivers\hidir.sys

    S3 hyperkbd;hyperkbd; C:\Windows\System32\drivers\hyperkbd.sys

    S3 HyperVideo;HyperVideo; C:\Windows\system32\DRIVERS\HyperVideo.sys

    S3 IpFilterDriver;@%systemroot%\system32\rascfg.dll,-32013; C:\Windows\system32\DRIVERS\ipfltdrv.sys

    S3 IPMIDRV;IPMIDRV; C:\Windows\System32\drivers\IPMIDrv.sys

    S3 IPNAT;IP Network Address Translator; C:\Windows\System32\drivers\ipnat.sys

    S3 IRENUM;@%SystemRoot%\system32\drivers\irenum.sys,-100; C:\Windows\system32\drivers\irenum.sys

    S3 iScsiPrt;@iscsi.inf,%iScsiPortName%;iScsiPort Driver; C:\Windows\System32\drivers\msiscsi.sys

    S3 kbdhid;@keyboard.inf,%KBDHID.SvcDesc%;Keyboard HID Driver; C:\Windows\System32\drivers\kbdhid.sys

    S3 Modem;Modem; C:\Windows\system32\drivers\modem.sys

    S3 MRxDAV;@%systemroot%\system32\webclnt.dll,-104; C:\Windows\system32\drivers\mrxdav.sys

    S3 MsBridge;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys

    S3 msgpiowin32;@msgpiowin32.inf,%GPIO.SvcDesc%;GPIO Buttons Driver; C:\Windows\System32\drivers\msgpiowin32.sys

    S3 mshidkmdf;@%SystemRoot%\system32\drivers\mshidkmdf.sys,-100; C:\Windows\System32\drivers\mshidkmdf.sys

    S3 mshidumdf;@%SystemRoot%\system32\drivers\mshidumdf.sys,-100; C:\Windows\System32\drivers\mshidumdf.sys

    S3 MSKSSRV;@ksfilter.inf,%MSKSSRV.DeviceDesc%;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys

    S3 MsLldp;@C:\Windows\system32\DRIVERS\mslldp.sys,-200; C:\Windows\system32\DRIVERS\mslldp.sys

    S3 MSPCLOCK;@ksfilter.inf,%MSPCLOCK.DeviceDesc%;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys

    S3 MSPQM;@ksfilter.inf,%MSPQM.DeviceDesc%;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys

    S3 MsRPC;MsRPC; C:\Windows\system32\drivers\MsRPC.sys

    S3 MSTEE;@ksfilter.inf,%MSTEE.DeviceDesc%;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys

    S3 MTConfig;@mtconfig.inf,%MTConfig.SVCDESC%;Microsoft Input Configuration Driver; C:\Windows\System32\drivers\MTConfig.sys

    S3 NdisCap;@%SystemRoot%\System32\drivers\ndiscap.sys,-5000; C:\Windows\system32\DRIVERS\ndiscap.sys

    S3 NdisImPlatform;@%SystemRoot%\System32\drivers\ndisimplatform.sys,-501; C:\Windows\system32\DRIVERS\NdisImPlatform.sys

    S3 NDISWANLEGACY;@%systemroot%\system32\rascfg.dll,-32014; C:\Windows\system32\DRIVERS\ndiswan.sys

    S3 NETwNs64;@netwns64.inf,___ %NIC_Service_DispName_WIN7_64%;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys

    S3 Parport;@msports.inf,%Parport.SVCDESC%;Parallel port driver; C:\Windows\System32\drivers\parport.sys

    S3 Processor;@cpu.inf,%Processor.SvcDesc%;Processor Driver; C:\Windows\System32\drivers\processr.sys

    S3 QWAVEdrv;@%SystemRoot%\system32\drivers\qwavedrv.sys,-1; C:\Windows\system32\drivers\qwavedrv.sys

    S3 RasAcd;Remote Access Auto Connection Driver; C:\Windows\System32\DRIVERS\rasacd.sys

    S3 RDPDR;@%SystemRoot%\System32\DRIVERS\rdpdr.sys,-100; C:\Windows\System32\drivers\rdpdr.sys

    S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys

    S3 RDPWD;RDP Winstation Driver; C:\Windows\system32\drivers\RDPWD.sys

    S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys

    S3 s3cap;s3cap; C:\Windows\System32\drivers\vms3cap.sys

    S3 scfilter;@%SystemRoot%\System32\drivers\scfilter.sys,-11; C:\Windows\System32\DRIVERS\scfilter.sys

    S3 sdbus;sdbus; C:\Windows\System32\drivers\sdbus.sys

    S3 sdstor;@sdstor.inf,%sdstor_ServiceDesc%;SD Storage Port Driver; C:\Windows\System32\drivers\sdstor.sys

    S3 SerCx;Serial UART Support Library; C:\Windows\system32\drivers\SerCx.sys

    S3 Serenum;@msports.inf,%Serenum.SVCDESC%;Serenum Filter Driver; C:\Windows\System32\drivers\serenum.sys

    S3 Serial;@msports.inf,%Serial.SVCDESC%;Serial port driver; C:\Windows\System32\drivers\serial.sys

    S3 sermouse;@msmouse.inf,%sermouse.SvcDesc%;Serial Mouse Driver; C:\Windows\System32\drivers\sermouse.sys

    S3 sfloppy;@flpydisk.inf,%sfloppy_devdesc%;High-Capacity Floppy Disk Drive; C:\Windows\System32\drivers\sfloppy.sys

    S3 SpbCx;Simple Peripheral Bus Support Library; C:\Windows\system32\drivers\SpbCx.sys

    S3 TCPIP6;@netip6.inf,%MS_TCPIP6.TCPIP6.ServiceDescription%;Microsoft IPv6 Protocol Driver; C:\Windows\system32\DRIVERS\tcpip.sys

    S3 terminpt;@termmou.inf,%TermInpt.SVCDESC%;Microsoft Remote Desktop Input Driver; C:\Windows\System32\drivers\terminpt.sys

    S3 TPM;@tpm.inf,%TPM%;TPM; C:\Windows\system32\drivers\tpm.sys

    S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys

    S3 TsUsbGD;@tsgenericusbdriver.inf,%TsUsbGD.DeviceDesc.Generic%;Remote Desktop Generic USB Device; C:\Windows\System32\drivers\TsUsbGD.sys

    S3 UASPStor;@uaspstor.inf,%UASPortName%;USB Attached SCSI (UAS) Driver; C:\Windows\System32\drivers\uaspstor.sys

    S3 UmPass;@umpass.inf,%UmPass.SVCDESC%;Microsoft UMPass Driver; C:\Windows\System32\drivers\umpass.sys

    S3 usbcir;@usbcir.inf,%usbcir.SVCDESC%;eHome Infrared Receiver (USBCIR); C:\Windows\System32\drivers\usbcir.sys

    S3 usbohci;@usbport.inf,%OHCIMP.SvcDesc%;Microsoft USB Open Host Controller Miniport Driver; C:\Windows\System32\drivers\usbohci.sys

    S3 usbprint;@usbprint.inf,%USBPRINT.SvcDesc%;Microsoft USB PRINTER Class; C:\Windows\System32\drivers\usbprint.sys

    S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys

    S3 USBSTOR;@usbstor.inf,%USBSTOR.SvcDesc%;USB Mass Storage Driver; C:\Windows\System32\drivers\USBSTOR.SYS

    S3 usbuhci;@usbport.inf,%UHCIMP.SvcDesc%;Microsoft USB Universal Host Controller Miniport Driver; C:\Windows\System32\drivers\usbuhci.sys

    S3 VerifierExt;@%SystemRoot%\system32\drivers\VerifierExt.sys,-1000; C:\Windows\system32\drivers\VerifierExt.sys

    S3 vhdmp;vhdmp; C:\Windows\System32\drivers\vhdmp.sys

    S3 VMBusHID;VMBusHID; C:\Windows\System32\drivers\VMBusHID.sys

    S3 vpci;@wvpci.inf,%vpci.SVCDESC%;Microsoft Hyper-V Virtual PCI Bus; C:\Windows\System32\drivers\vpci.sys

    S3 WacomPen;@hiddigi.inf,%WacomPen.SVCDESC%;Wacom Serial Pen HID Driver; C:\Windows\System32\drivers\wacompen.sys

    S3 Wanarp;@%systemroot%\system32\rascfg.dll,-32011; C:\Windows\system32\DRIVERS\wanarp.sys

    S3 WdBoot;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-390; C:\Windows\system32\drivers\WdBoot.sys

    S3 WdFilter;@%ProgramFiles%\Windows Defender\MpAsDesc.dll,-330; C:\Windows\system32\drivers\WdFilter.sys

    S3 WIMMount;WIMMount; C:\Windows\system32\drivers\wimmount.sys

    S3 WinUsb;@WUDFUsbccidDriver.inf,%WinUsb_Service_DisplayName%;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys

    S4 cdfs;CD/DVD File System Reader; C:\Windows\system32\DRIVERS\cdfs.sys

    S4 udfs;udfs; C:\Windows\system32\DRIVERS\udfs.sys

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

    R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

    R2 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe

    R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

    R2 AudioEndpointBuilder;@%SystemRoot%\system32\AudioEndpointBuilder.dll,-204; C:\Windows\System32\svchost.exe

    R2 Audiosrv;@%SystemRoot%\system32\audiosrv.dll,-200; C:\Windows\System32\svchost.exe

    R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    R2 BFE;@%SystemRoot%\system32\bfe.dll,-1001; C:\Windows\system32\svchost.exe

    R2 BITS;@%SystemRoot%\system32\qmgr.dll,-1000; C:\Windows\System32\svchost.exe

    R2 BrokerInfrastructure;@%windir%\system32\bisrv.dll,-100; C:\Windows\system32\svchost.exe

    R2 CertPropSvc;@%SystemRoot%\System32\certprop.dll,-11; C:\Windows\system32\svchost.exe

    R2 CryptSvc;@%SystemRoot%\system32\cryptsvc.dll,-1001; C:\Windows\system32\svchost.exe

    R2 DcomLaunch;@combase.dll,-5012; C:\Windows\system32\svchost.exe

    R2 DeviceAssociationService;@%SystemRoot%\system32\das.dll,-100; C:\Windows\system32\svchost.exe

    R2 Dhcp;@%SystemRoot%\system32\dhcpcore.dll,-100; C:\Windows\system32\svchost.exe

    R2 Dnscache;@%SystemRoot%\System32\dnsapi.dll,-101; C:\Windows\system32\svchost.exe

    R2 DPS;@%systemroot%\system32\dps.dll,-500; C:\Windows\System32\svchost.exe

    R2 EventLog;@%SystemRoot%\system32\wevtsvc.dll,-200; C:\Windows\System32\svchost.exe

    R2 EventSystem;@comres.dll,-2450; C:\Windows\system32\svchost.exe

    R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe

    R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

    R2 IKEEXT;@%SystemRoot%\system32\ikeext.dll,-501; C:\Windows\system32\svchost.exe

    R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe

    R2 iphlpsvc;@%SystemRoot%\system32\iphlpsvc.dll,-500; C:\Windows\System32\svchost.exe

    R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

    R2 LanmanServer;@%systemroot%\system32\srvsvc.dll,-100; C:\Windows\system32\svchost.exe

    R2 LanmanWorkstation;@%systemroot%\system32\wkssvc.dll,-100; C:\Windows\System32\svchost.exe

    R2 lmhosts;@%SystemRoot%\system32\lmhsvc.dll,-101; C:\Windows\system32\svchost.exe

    R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

    R2 LSM;@%windir%\system32\lsm.dll,-1001; C:\Windows\system32\svchost.exe

    R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    R2 MMCSS;@%systemroot%\system32\mmcss.dll,-100; C:\Windows\system32\svchost.exe

    R2 MpsSvc;@%SystemRoot%\system32\FirewallAPI.dll,-23090; C:\Windows\system32\svchost.exe

    R2 NlaSvc;@%SystemRoot%\System32\nlasvc.dll,-1; C:\Windows\System32\svchost.exe

    R2 nsi;@%SystemRoot%\system32\nsisvc.dll,-200; C:\Windows\system32\svchost.exe

    R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe

    R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

    R2 PcaSvc;@%SystemRoot%\system32\pcasvc.dll,-1; C:\Windows\system32\svchost.exe

    R2 Power;@%SystemRoot%\system32\umpo.dll,-100; C:\Windows\system32\svchost.exe

    R2 ProfSvc;@%systemroot%\system32\profsvc.dll,-300; C:\Windows\system32\svchost.exe

    R2 RpcEptMapper;@%windir%\system32\RpcEpMap.dll,-1001; C:\Windows\system32\svchost.exe

    R2 RpcSs;@combase.dll,-5010; C:\Windows\system32\svchost.exe

    R2 SamSs;@%SystemRoot%\system32\samsrv.dll,-1; C:\Windows\system32\lsass.exe

    R2 Schedule;@%SystemRoot%\system32\schedsvc.dll,-100; C:\Windows\system32\svchost.exe

    R2 SENS;@%SystemRoot%\system32\Sens.dll,-200; C:\Windows\system32\svchost.exe

    R2 ShellHWDetection;@%SystemRoot%\System32\shsvcs.dll,-12288; C:\Windows\System32\svchost.exe

    R2 Spooler;@%systemroot%\system32\spoolsv.exe,-1; C:\Windows\System32\spoolsv.exe

    R2 stisvc;@%SystemRoot%\system32\wiaservc.dll,-9; C:\Windows\system32\svchost.exe

    R2 SysMain;@%SystemRoot%\system32\sysmain.dll,-1000; C:\Windows\system32\svchost.exe

    R2 Themes;@%SystemRoot%\System32\themeservice.dll,-8192; C:\Windows\System32\svchost.exe

    R2 TrkWks;@%SystemRoot%\system32\trkwks.dll,-1; C:\Windows\System32\svchost.exe

    R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

    R2 Wcmsvc;@%SystemRoot%\System32\wcmsvc.dll,-4097; C:\Windows\system32\svchost.exe

    R2 Winmgmt;@%Systemroot%\system32\wbem\wmisvc.dll,-205; C:\Windows\system32\svchost.exe

    R2 WlanSvc;@%SystemRoot%\System32\wlansvc.dll,-257; C:\Windows\system32\svchost.exe

    R3 AeLookupSvc;@%SystemRoot%\system32\aelupsvc.dll,-1; C:\Windows\system32\svchost.exe

    R3 Appinfo;@%systemroot%\system32\appinfo.dll,-100; C:\Windows\system32\svchost.exe

    R3 fdPHost;@%systemroot%\system32\fdPHost.dll,-100; C:\Windows\system32\svchost.exe

    R3 FDResPub;@%systemroot%\system32\fdrespub.dll,-100; C:\Windows\system32\svchost.exe

    R3 hidserv;@%SystemRoot%\System32\hidserv.dll,-101; C:\Windows\system32\svchost.exe

    R3 HomeGroupProvider;@%SystemRoot%\System32\provsvc.dll,-100; C:\Windows\System32\svchost.exe

    R3 NcdAutoSetup;@%SystemRoot%\system32\NcdAutoSetup.dll,-100; C:\Windows\System32\svchost.exe

    R3 Netman;@%SystemRoot%\system32\netman.dll,-109; C:\Windows\System32\svchost.exe

    R3 netprofm;@%SystemRoot%\system32\netprofmsvc.dll,-202; C:\Windows\System32\svchost.exe

    R3 PlugPlay;@%SystemRoot%\system32\umpnpmgr.dll,-200; C:\Windows\system32\svchost.exe

    R3 seclogon;@%SystemRoot%\system32\seclogon.dll,-7001; C:\Windows\system32\svchost.exe

    R3 SSDPSRV;@%systemroot%\system32\ssdpsrv.dll,-100; C:\Windows\system32\svchost.exe

    R3 SystemEventsBroker;@%windir%\system32\SystemEventsBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe

    R3 TimeBroker;@%windir%\system32\TimeBrokerServer.dll,-1001; C:\Windows\system32\svchost.exe

    R3 VaultSvc;@%SystemRoot%\system32\vaultsvc.dll,-1003; C:\Windows\system32\lsass.exe

    R3 WdiServiceHost;@%systemroot%\system32\wdi.dll,-502; C:\Windows\System32\svchost.exe

    R3 WdiSystemHost;@%systemroot%\system32\wdi.dll,-500; C:\Windows\System32\svchost.exe

    R3 WinHttpAutoProxySvc;@%SystemRoot%\system32\winhttp.dll,-100; C:\Windows\system32\svchost.exe

    S2 gpsvc;@gpapi.dll,-112; C:\Windows\system32\svchost.exe

    S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    S2 SCardSvr;@%SystemRoot%\System32\SCardSvr.dll,-1; C:\Windows\system32\svchost.exe

    S2 sppsvc;@%SystemRoot%\system32\sppsvc.exe,-101; C:\Windows\system32\sppsvc.exe

    S3 ALG;@%SystemRoot%\system32\Alg.exe,-112; C:\Windows\System32\alg.exe

    S3 AllUserInstallAgent;@%SystemRoot%\System32\AUInstallAgent.dll,-101; C:\Windows\System32\svchost.exe

    S3 AppIDSvc;@%systemroot%\system32\appidsvc.dll,-100; C:\Windows\system32\svchost.exe

    S3 AxInstSV;@%SystemRoot%\system32\AxInstSV.dll,-103; C:\Windows\system32\svchost.exe

    S3 BDESVC;@%SystemRoot%\system32\bdesvc.dll,-100; C:\Windows\System32\svchost.exe

    S3 Browser;@%systemroot%\system32\browser.dll,-100; C:\Windows\System32\svchost.exe

    S3 bthserv;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe

    S3 COMSysApp;@comres.dll,-947; C:\Windows\system32\dllhost.exe

    S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe

    S3 defragsvc;@%SystemRoot%\system32\defragsvc.dll,-101; C:\Windows\system32\svchost.exe

    S3 DeviceInstall;@%SystemRoot%\system32\umpnpmgr.dll,-100; C:\Windows\system32\svchost.exe

    S3 dot3svc;@%systemroot%\system32\dot3svc.dll,-1102; C:\Windows\system32\svchost.exe

    S3 DsmSvc;@%SystemRoot%\system32\DeviceSetupManager.dll,-1000; C:\Windows\system32\svchost.exe

    S3 Eaphost;@%systemroot%\system32\eapsvc.dll,-1; C:\Windows\System32\svchost.exe

    S3 EFS;@%SystemRoot%\system32\efssvc.dll,-100; C:\Windows\System32\lsass.exe

    S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe

    S3 fhsvc;@%systemroot%\system32\fhsvc.dll,-101; C:\Windows\system32\svchost.exe

    S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

    S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    S3 hkmsvc;@%SystemRoot%\system32\kmsvc.dll,-6; C:\Windows\System32\svchost.exe

    S3 HomeGroupListener;@%SystemRoot%\System32\ListSvc.dll,-100; C:\Windows\System32\svchost.exe

    S3 KeyIso;@keyiso.dll,-100; C:\Windows\system32\lsass.exe

    S3 KtmRm;@comres.dll,-2946; C:\Windows\System32\svchost.exe

    S3 lltdsvc;@%SystemRoot%\system32\lltdres.dll,-1; C:\Windows\System32\svchost.exe

    S3 MSDTC;@comres.dll,-2797; C:\Windows\System32\msdtc.exe

    S3 MSiSCSI;@%SystemRoot%\system32\iscsidsc.dll,-5000; C:\Windows\system32\svchost.exe

    S3 msiserver;@%SystemRoot%\system32\msimsg.dll,-27; C:\Windows\system32\msiexec.exe

    S3 napagent;@%SystemRoot%\system32\qagentrt.dll,-6; C:\Windows\System32\svchost.exe

    S3 NcaSvc;@%SystemRoot%\system32\ncasvc.dll,-3009; C:\Windows\System32\svchost.exe

    S3 Netlogon;@%SystemRoot%\System32\netlogon.dll,-102; C:\Windows\system32\lsass.exe

    S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

    S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

    S3 p2pimsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8004; C:\Windows\System32\svchost.exe

    S3 p2psvc;@%SystemRoot%\system32\p2psvc.dll,-8006; C:\Windows\System32\svchost.exe

    S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe

    S3 pla;@%systemroot%\system32\pla.dll,-500; C:\Windows\System32\svchost.exe

    S3 PNRPAutoReg;@%SystemRoot%\system32\pnrpauto.dll,-8002; C:\Windows\System32\svchost.exe

    S3 PNRPsvc;@%SystemRoot%\system32\pnrpsvc.dll,-8000; C:\Windows\System32\svchost.exe

    S3 PolicyAgent;@%SystemRoot%\System32\polstore.dll,-5010; C:\Windows\system32\svchost.exe

    S3 PrintNotify;@C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll,-1; C:\Windows\system32\svchost.exe

    S3 QWAVE;@%SystemRoot%\system32\qwave.dll,-1; C:\Windows\system32\svchost.exe

    S3 RasAuto;@%Systemroot%\system32\rasauto.dll,-200; C:\Windows\System32\svchost.exe

    S3 RasMan;@%Systemroot%\system32\rasmans.dll,-200; C:\Windows\System32\svchost.exe

    S3 RpcLocator;@%systemroot%\system32\Locator.exe,-2; C:\Windows\system32\locator.exe

    S3 SCPolicySvc;@%SystemRoot%\System32\certprop.dll,-13; C:\Windows\system32\svchost.exe

    S3 SDRSVC;@%SystemRoot%\system32\sdrsvc.dll,-107; C:\Windows\system32\svchost.exe

    S3 SensrSvc;@%SystemRoot%\System32\sensrsvc.dll,-1000; C:\Windows\system32\svchost.exe

    S3 SessionEnv;@%SystemRoot%\System32\SessEnv.dll,-1026; C:\Windows\System32\svchost.exe

    S3 SNMPTRAP;@%SystemRoot%\system32\snmptrap.exe,-3; C:\Windows\System32\snmptrap.exe

    S3 SstpSvc;@%SystemRoot%\system32\sstpsvc.dll,-200; C:\Windows\system32\svchost.exe

    S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe

    S3 svsvc;@%SystemRoot%\system32\svsvc.dll,-101; C:\Windows\system32\svchost.exe

    S3 swprv;@%SystemRoot%\System32\swprv.dll,-103; C:\Windows\System32\svchost.exe

    S3 TabletInputService;@%SystemRoot%\system32\TabSvc.dll,-100; C:\Windows\System32\svchost.exe

    S3 TapiSrv;@%SystemRoot%\system32\tapisrv.dll,-10100; C:\Windows\System32\svchost.exe

    S3 TermService;@%SystemRoot%\System32\termsrv.dll,-268; C:\Windows\System32\svchost.exe

    S3 THREADORDER;@%systemroot%\system32\mmcss.dll,-102; C:\Windows\system32\svchost.exe

    S3 TrustedInstaller;@%SystemRoot%\servicing\TrustedInstaller.exe,-100; C:\Windows\servicing\TrustedInstaller.exe

    S3 UI0Detect;@%SystemRoot%\system32\ui0detect.exe,-101; C:\Windows\system32\UI0Detect.exe

    S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe

    S3 upnphost;@%systemroot%\system32\upnphost.dll,-213; C:\Windows\system32\svchost.exe

    S3 vds;@%SystemRoot%\system32\vds.exe,-100; C:\Windows\System32\vds.exe

    S3 vmicheartbeat;@%systemroot%\system32\vmicres.dll,-101; C:\Windows\system32\svchost.exe

    S3 vmickvpexchange;@%systemroot%\system32\vmicres.dll,-201; C:\Windows\system32\svchost.exe

  • Anonymous avatar

    rudi

    Een paar weken geleden had hij dus problemen en was het dankzij jullie weer heel snel voor elkaar. Renate doet er nauwelijks iets mee, behalve een beetje mail, een beetje internet, maar da's sporadisch. Vanmiddag was onze kleinzoon er en die mag dan oma's lappie gebruiken voor een paar spelletjes-sites. Het ding sloeg op een gegeven moment vast en opstarten daarna duurde zeker een kwartier. IE was nauwelijks meer aan de gang te krijgen. Ik heb adw en mbam gedaan en ccleaner (spywarebl is up-to-date)…Eset heb ik ook gedraaid maar die vond ook helemaal niets. Hij is inmiddels wel weer iets sneller, maar ik vind het huilen met de pet.

    Het zit vermoedelijk gewoon in die spelletjes-sites. Heb Renate ervoor gewaarschuwd, maar ja….. oma's en kleinzoons ;)

    Het ding is volgens mij volledig beveiligd zoals jullie aanraden:

    Avast

    Spywareblaster

    Mbam (had ik zondag gedraaid)

    Opruimingen via ccleaner

  • Anonymous avatar

    fazantje

    Hoi Rudi,

    Rsit ziet er goed uit(tu)

    We gaan ff verder kijken.

    Download zoek.exe naar het bureaublad.

    Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze in conflict komen met zoek.exe

    Dubbelklik op Zoek.exe om de tool te starten.

    Kopieer nu het onderstaande vet gedrukte code en plak die in het grote invulvenster.

    Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkwaardig probleem.

    firefoxlook;

    chromelook;

    standardsearch;

    filesrcm;

    autoclean;

    startupall;

    Klik nu op de knop “Run script”.

    Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze nodig is).

    Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.

    Post nu de inhoud van het geopende logje in het volgende bericht.

    Succes,

    Huib;)

  • Anonymous avatar

    rudi

    Hierbij Huib…hij start overigens alweer veel sneller op en dat geldt ook voor IE X(

    Zoek.exe Version 4.0.0.4 Updated 19-08-2013

    Tool run by renate on 21/08/2013 at 21:02:22.42.

    Microsoft Windows 8 6.2.9200 x64

    Running in: Normal Mode Internet Access Detected

    Launched: C:\Users\renate\Downloads\zoek (1).exe

    ==== System Restore Info ======================

    21/08/2013 21:02:35 Zoek.exe System Restore Point Created Succesfully.

    ==== Deleting CLSID Registry Keys ======================

    ==== Deleting CLSID Registry Values ======================

    ==== Running Processes ======================

    C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

    C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

    C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

    C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe

    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

    C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

    C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

    C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

    C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

    C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe

    C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

    C:\Windows\SysWOW64\ACEngSvr.exe

    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

    C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

    C:\Program Files\AVAST Software\Avast\AvastUI.exe

    C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

    C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

    C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe

    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

    C:\Users\renate\Downloads\zoek (1).exe

    C:\Users\renate\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CPBGZ7LU\zoek.exe

    C:\Users\renate\Downloads\zoek.exe

    C:\Users\renate\Downloads\zoek.exe

    C:\Users\renate\Downloads\zoek (1).exe

    C:\Windows\SysWOW64\ctfmon.exe

    C:\Users\renate\Downloads\zoek (1).exe

    C:\Windows\SysWOW64\cmd.exe

    C:\Windows\SysWOW64\cmd.exe

    C:\Windows\SysWOW64\cmd.exe

    ==== Deleting Services ======================

    ==== System Specs ======================

    Windows: Windows Version 6.2 (Build 9200)

    Memory (RAM): 3982 MB

    CPU Info: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz

    CPU Speed: 2498.7 MHz

    Sound Card: Speakers (Realtek High Definiti |

    Display Adapters: Intel(R) HD Graphics 4000 | Intel(R) HD Graphics 4000 | Intel(R) HD Graphics 4000 | NVIDIA GeForce 610M

    Monitors: 1x; Generic PnP Monitor |

    Screen Resolution: 1366 X 768 - 32 bit

    Network: Network Present

    Network Adapters: Microsoft Wi-Fi Direct Virtual Adapter | Realtek PCIe GBE Family Controller | Qualcomm Atheros AR9485 Wireless Network Adapter

    CD / DVD Drives: 1x (E: | ) E: Slimtype DVD A

    Ports: COM Ports NOT Present. LPT Port NOT Present.

    Mouse: 16 Button Wheel Mouse Present

    Hard Disks: C: 119.2GB | D: 157.9GB

    Hard Disks - Free: C: 74.6GB | D: 157.5GB

    Manufacturer *: American Megatrends Inc.

    BIOS Info: AT/AT COMPATIBLE | | _ASUS_ - 1072009

    Time Zone: West-Europa (standaardtijd)

    Motherboard *: ASUSTeK COMPUTER INC. K55VD

    Internet Explorer Version: 10.0.9200.16660

    Sun Java version: No Java Installed?

    Country: United Kingdom

    Language: ENG

    ==== Files Recently Created / Modified ======================

    ====== C:\Windows ====

    ====== C:\Users\renate\AppData\Local\Temp ====

    2013-08-11 18:41:23 4681E5744AD0338A02603B9E3FBE122F 327903 —-a-w- C:\Users\renate\AppData\Local\Temp\Quarantine.exe

    ====== C:\Windows\SysWOW64 =====

    2013-08-15 07:11:07 B4CB5AE28AD921DBB2BB5D0A6D1FDD9D 694272 —-a-w- C:\Windows\SysWOW64\rpcrt4.dll

    2013-08-15 07:10:43 8A5BD908D421BEE82941EF8ABD8B4F09 33280 —-a-w- C:\Windows\SysWOW64\iernonce.dll

    2013-08-15 07:10:42 AF6A6C16ACAD816B48714AE7A4082D89 61440 —-a-w- C:\Windows\SysWOW64\iesetup.dll

    2013-08-15 07:10:42 4977F0BB1027C38230C254A61ED736D7 44032 —-a-w- C:\Windows\SysWOW64\UXInit.dll

    2013-08-15 07:10:42 059FC59F97A6220C46A612A9470A00B3 1141248 —-a-w- C:\Windows\SysWOW64\urlmon.dll

    2013-08-15 07:10:41 A484F9DB744849C0B32DD1CE73A94F62 2706432 —-a-w- C:\Windows\SysWOW64\mshtml.tlb

    2013-08-15 07:10:41 49EB7DE3A1CCCE9D0873DE9114810113 39936 —-a-w- C:\Windows\SysWOW64\jsproxy.dll

    2013-08-15 07:10:41 22F3B243134A31FCDAA2DC3B4AE6D06C 534528 —-a-w- C:\Windows\SysWOW64\uxtheme.dll

    2013-08-15 07:10:40 E9BCB6728DD04412BF87F03DB00DE1CF 13761024 —-a-w- C:\Windows\SysWOW64\ieframe.dll

    2013-08-15 07:10:40 45C118A1E03182365CB568F99B81A473 493056 —-a-w- C:\Windows\SysWOW64\msfeeds.dll

    2013-08-15 07:10:36 DAA3903F06116AE9EE7AC1D1B93684A4 1767936 —-a-w- C:\Windows\SysWOW64\wininet.dll

    2013-08-15 07:10:36 37730C04B543536D971B3F157415EFF5 109056 —-a-w- C:\Windows\SysWOW64\iesysprep.dll

    2013-08-15 07:09:58 1C83426A51AD83B5E788B6CF143B48D8 690688 —-a-w- C:\Windows\SysWOW64\jscript.dll

    2013-08-15 07:09:56 D0E0086BA353C379DCFE8624E8B8F17A 2048512 —-a-w- C:\Windows\SysWOW64\iertutil.dll

    2013-08-15 07:09:46 AC8C3591D536D1CCB62EDCBEA88140B3 2877440 —-a-w- C:\Windows\SysWOW64\jscript9.dll

    2013-08-15 07:09:44 E631B408882F8320739F6E0CAF444397 14329344 —-a-w- C:\Windows\SysWOW64\mshtml.dll

    2013-08-15 07:09:31 186EF39B997ACB482C5092AD0079B5A3 1568256 —-a-w- C:\Windows\SysWOW64\crypt32.dll

    2013-08-15 07:09:30 F7A43B51E2C1D7C332FB17D0A804AF60 261120 —-a-w- C:\Windows\SysWOW64\wintrust.dll

    2013-08-15 07:09:29 3674D14E4B7D4700BFF7D06DC608334E 87040 —-a-w- C:\Windows\SysWOW64\apprepapi.dll

    2013-08-15 07:09:28 AA4D1D67CFC5C9BC17163FA619A070FA 74240 —-a-w- C:\Windows\SysWOW64\apprepsync.dll

    ====== C:\Windows\SysWOW64\drivers =====

    ====== C:\Windows\Sysnative =====

    2013-08-21 11:43:49 25995A8CFF94161693C5E9496C6925CE 356776 —-a-w- C:\Windows\Sysnative\FNTCACHE.DAT

    2013-08-15 07:11:07 6BDCC68E85A386414E4E028DEB768350 1314816 —-a-w- C:\Windows\Sysnative\rpcrt4.dll

    2013-08-15 07:10:43 E4C853E60734B3F6067B7F17FC178E8E 915968 —-a-w- C:\Windows\Sysnative\uxtheme.dll

    2013-08-15 07:10:43 BBFE238B22F808C88AF039EF83BABAD6 53760 —-a-w- C:\Windows\Sysnative\UXInit.dll

    2013-08-15 07:10:42 3A2FD42F11CD325A4ACAFE7FB0EEA83A 2706432 —-a-w- C:\Windows\Sysnative\mshtml.tlb

    2013-08-15 07:10:37 6C8BDC9F16943D626DFE8A987BCCFD20 51712 —-a-w- C:\Windows\Sysnative\ie4uinit.exe

    2013-08-15 07:10:37 622C7C8D39609FCEACE3508715D48C7F 39936 —-a-w- C:\Windows\Sysnative\iernonce.dll

    2013-08-15 07:10:36 04DE09B1E287F6DC5C7FD655B6E84AB9 53760 —-a-w- C:\Windows\Sysnative\jsproxy.dll

    2013-08-15 07:10:35 8C12653BEA781902AA60E4A855A55D5C 603136 —-a-w- C:\Windows\Sysnative\msfeeds.dll

    2013-08-15 07:10:35 289C5E0A386E7B6CA9539D66D15E22CC 1365504 —-a-w- C:\Windows\Sysnative\urlmon.dll

    2013-08-15 07:10:34 963B29E0EFB20D66436214DB7C43D7F7 67072 —-a-w- C:\Windows\Sysnative\iesetup.dll

    2013-08-15 07:10:33 D8CC9A20C517A54678363C4C77B930A4 136704 —-a-w- C:\Windows\Sysnative\iesysprep.dll

    2013-08-15 07:10:33 AC155DD9BD1E6D3B740826A4D1C68AAE 2241024 —-a-w- C:\Windows\Sysnative\wininet.dll

    2013-08-15 07:10:29 677A1C1B0F254EC918D84A7FE29274CA 15405056 —-a-w- C:\Windows\Sysnative\ieframe.dll

    2013-08-15 07:10:25 16FE878530FDFC9AB08B7FFC32335958 855552 —-a-w- C:\Windows\Sysnative\jscript.dll

    2013-08-15 07:10:21 396889142BD839DB8A055A0BE0AD2F79 19239424 —-a-w- C:\Windows\Sysnative\mshtml.dll

    2013-08-15 07:09:58 65546D87F7A78AB31841A536456CB94D 2647040 —-a-w- C:\Windows\Sysnative\iertutil.dll

    2013-08-15 07:09:58 5A7FA01EEC393A3E0D0F3EBAA1FD959E 3958784 —-a-w- C:\Windows\Sysnative\jscript9.dll

    2013-08-15 07:09:31 B6FCC2BB7D1044EA0FC4B573951BE8DC 1889280 —-a-w- C:\Windows\Sysnative\crypt32.dll

    2013-08-15 07:09:30 74466D77EE8588C04B95AE9DBC693EF8 337408 —-a-w- C:\Windows\Sysnative\wintrust.dll

    2013-08-15 07:09:29 F68F697F5B4E74217159C38FFFD37964 124416 —-a-w- C:\Windows\Sysnative\apprepapi.dll

    2013-08-15 07:09:29 5CE2742F063731EC10C1B2EE386A2C08 68096 —-a-w- C:\Windows\Sysnative\cryptsvc.dll

    2013-08-15 07:09:28 E4E889A9CA3E8CCEE6FB5D1B4F94296F 98304 —-a-w- C:\Windows\Sysnative\apprepsync.dll

    ====== C:\Windows\Sysnative\drivers =====

    2013-08-15 07:10:47 1794C43A000A47D92B3304FC1E3E512A 2233168 —-a-w- C:\Windows\Sysnative\drivers\tcpip.sys

    ====== C:\Windows\Tasks ======

    ====== C:\Windows\Temp ======

    ======= C:\Program Files =====

    ======= C:\Program Files (x86) =====

    2013-08-21 13:00:07 ——– d—–w- C:\Program Files (x86)\ESET

    ======= C: =====

    ====== C:\Users\renate\AppData\Roaming ======

    2013-08-18 11:14:55 ——– d—–w- C:\users\renate\AppData\Local\Diagnostics

    ====== C:\Users\renate ======

    2013-08-21 17:26:42 662C39FC1E27131551D557862CEC47F0 935175 —-a-w- C:\Users\renate\Downloads\RSITx64 (2).exe

    2013-08-21 17:14:10 662C39FC1E27131551D557862CEC47F0 935175 —-a-w- C:\Users\renate\Downloads\RSITx64 (1).exe

    2013-08-21 13:34:51 662C39FC1E27131551D557862CEC47F0 935175 —-a-w- C:\Users\renate\Downloads\RSITx64.exe

    2013-08-21 13:15:46 C748C104BA13A9456496D264C4161E7C 4429440 —-a-w- C:\Users\renate\Downloads\ccsetup404.exe

    2013-08-21 11:55:09 583AF618F49B77824627A7B45CCF9FF9 975858 —-a-w- C:\Users\renate\Downloads\adwcleaner.exe

    ====== C: exe-files ==

    2013-08-21 17:26:42 662C39FC1E27131551D557862CEC47F0 935175 —-a-w- C:\Users\renate\Downloads\RSITx64 (2).exe

    2013-08-21 17:14:10 662C39FC1E27131551D557862CEC47F0 935175 —-a-w- C:\Users\renate\Downloads\RSITx64 (1).exe

    2013-08-21 15:30:33 E8D3E34FFDAF21DF7C09CBBBA5763237 2347384 —-a-w- C:\Users\renate\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VL9H1264\esetsmartinstaller_enu.exe

    2013-08-21 13:45:24 1E597DD801ED8CD423B4F6791DA3210C 3612160 —-a-w- C:\Users\renate\AppData\Local\Packages\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe\AC\Microsoft\CLR_v4.0_32\NativeImages\Solitaire\ab48841442d9f9be9c323d4b7bd7a3fa\Solitaire.ni.exe

    2013-08-21 13:45:12 BED27D26977C98BA29302CDEEE569E54 141824 —-a-w- C:\Users\renate\AppData\Local\Packages\B9ECED6F.TheWorldClock_qmba6cd70vzyy\AC\Microsoft\CLR_v4.0_32\NativeImages\The World Clock\b3b0592c01d12316656fbfa0bd505df4\The World Clock.ni.exe

    2013-08-21 13:34:51 662C39FC1E27131551D557862CEC47F0 935175 —-a-w- C:\Users\renate\Downloads\RSITx64.exe

    2013-08-21 13:15:46 C748C104BA13A9456496D264C4161E7C 4429440 —-a-w- C:\Users\renate\Downloads\ccsetup404.exe

    2013-08-21 13:00:11 6D4ED8A5C071F29730A6F0B943FEEA3A 122584 —-a-w- C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe

    2013-08-21 12:36:15 88F161F0976B37F3FF0EDF9FFFC93837 353912 —-a-w- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe

    2013-08-21 11:55:09 583AF618F49B77824627A7B45CCF9FF9 975858 —-a-w- C:\Users\renate\Downloads\adwcleaner.exe

    2013-08-18 11:10:23 F1DF028D5686DFB7716309F656298F16 344656 —-a-w- C:\ProgramData\NVIDIA\Updatus\Packages\000047db\updatus.16672114_RUNASUSER.exe

    2013-08-15 07:10:41 7BA1862B8A5698DC5FCFDFF3BC359DE9 770648 —-a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe

    2013-08-15 07:10:37 6C8BDC9F16943D626DFE8A987BCCFD20 51712 —-a-w- C:\Windows\System32\ie4uinit.exe

    2013-08-15 07:10:33 133CEF30905806A35606652D409EEEBA 775256 —-a-w- C:\Program Files\Internet Explorer\iexplore.exe

    2013-08-15 06:57:30 F40651C68D199CB7CA6067CDCB2C64DD 344064 —-a-w- C:\ProgramData\NVIDIA\Updatus\Packages\00004736\updatus.16656409_RUNASUSER.exe

    === C: other files ==

    2013-08-15 07:10:47 1794C43A000A47D92B3304FC1E3E512A 2233168 —-a-w- C:\Windows\System32\Drivers\tcpip.sys

    ==== Startup Registry Enabled ======================

    “Spotify”=“C:\Users\renate\AppData\Roaming\Spotify\Spotify.exe /uri spotify:autostart”

    “Adobe Reader Speed Launcher”=“C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe”

    “Adobe ARM”=“C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

    “RemoteControl10”=“C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe”

    “ASUSWebStorage”=“C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe /S”

    “avast”=“C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui”

    “BCSSync”=“C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe /DelayServices”

    “CanonSolutionMenuEx”=“C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon”

    “Spotify”=“C:\Users\renate\AppData\Roaming\Spotify\Spotify.exe /uri spotify:autostart”

    ==== Startup Registry Enabled x64 ======================

    “IgfxTray”=“C:\Windows\system32\igfxtray.exe”

    “HotKeysCmds”=“C:\Windows\system32\hkcmd.exe”

    “RTHDVCPL”=“C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s”

    “ACMON”=“C:\Program Files (x86)\ASUS\Splendid\ACMON.exe”

    “CanonMyPrinter”=“C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon”

    ==== Startup Folders ======================

    2012-10-15 16:41:40 2062 —-a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk

    ==== Task Scheduler Jobs ======================

    C:\Windows\tasks\GoogleUpdateTaskMachineCore.job –a——–

    C:\Windows\tasks\GoogleUpdateTaskMachineUA.job –a——– C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    ==== Set IE to Default ======================

    Old Values:

    “Start Page”=“http://www.google.com”

    New Values:

    “Start Page”=“http://www.google.com”

    ==== All HKCU SearchScopes ======================

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

    “DefaultScope”=“{0633EE93-D776-472f-A0FF-E1416B8B2E3A}”

    {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url=“http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR”

    {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url=“http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}”

    ==== HijackThis Entries ======================

    F2 - REG:system.ini: UserInit=userinit.exe

    O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe”

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

    O4 - HKLM\..\Run: “C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe”

    O4 - HKLM\..\Run: C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe /S

    O4 - HKLM\..\Run: “C:\Program Files\AVAST Software\Avast\avastUI.exe” /nogui

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe” /DelayServices

    O4 - HKLM\..\Run: C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon

    O4 - HKCU\..\Run: “C:\Users\renate\AppData\Roaming\Spotify\Spotify.exe” /uri spotify:autostart

    O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe

    O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra ‘Tools’ menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O9 - Extra ‘Tools’ menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O11 - Options group: Accelerated graphics

    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll

    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

    O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe

    O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

    O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe

    O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

    O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

    O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    ==== Empty IE Cache ======================

    C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\renate\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

    C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\renate\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CPBGZ7LU will be deleted at reboot

    ==== Empty FireFox Cache ======================

    No FireFox Profiles found

    ==== Empty Chrome Cache ======================

    No Chrome User Data found

    ==== Empty All Flash Cache ======================

    Flash Cache Emptied Successfully

    ==== Empty All Java Cache ======================

    No Java Cache Found

    ==== After Reboot ======================

    ==== Empty Temp Folders ======================

    C:\Windows\Temp successfully emptied

    C:\Users\renate\AppData\Local\Temp successfully emptied

    ==== Empty Recycle Bin ======================

    C:\$RECYCLE.BIN successfully emptied

    ==== Deleting Files / Folders ======================

    “C:\Users\renate\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CPBGZ7LU” not found

    ==== EOF on 21/08/2013 at 21:09:59.94 ======================

Dit topic is gesloten, er kunnen geen reacties meer worden geplaatst.