So today i started browsings, and suddenly alot of strange adds popped. When clicking on a webpage, either a pop-up will show or a new tab will open. Also, there are alot of weird ads showing on website that usually dont have adds. (Edit: Oo yea! I cant open Google Chrome anymore. Gotta browse with Firefox now. I dont know if thats part of the malware.)
I've no clue how to get rid of it! I hope you guys can help me out!
Thanks in advance!
Richard.
Ps. English is not my first language, sorry if i made a few mistakes there!
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-12-2014
Ran by Churdt (administrator) on CHURDT-PC on 30-12-2014 13:08:13
Running from C:\Users\Churdt\Downloads
Loaded Profile: Churdt (Available profiles: Churdt & Administrator & DefaultAppPool)
Platform: Windows 8.1 Pro (X64) OS Language: Engels (Verenigd Koninkrijk)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\40.0.2214.44\remoting_host.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\40.0.2214.44\remoting_host.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
() C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Spotify Ltd) C:\Users\Churdt\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\Churdt\AppData\Roaming\Spotify\spotify.exe
() C:\Users\Churdt\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Churdt\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Churdt\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Churdt\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Churdt\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Dropbox, Inc.) C:\Users\Churdt\AppData\Roaming\Dropbox\bin\Dropbox.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Power Software Ltd) C:\Program Files\PowerISO\PWRISOVM.EXE
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-06] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-11] (Adobe Systems Incorporated)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2478888 2010-11-19] (Synaptics Incorporated)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [12697368 2014-10-14] (Logitech Inc.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2014-02-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5188112 2014-11-07] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-08] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2099200 2014-04-13] (Dominik Reichl)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [408888 2014-06-27] (Power Software Ltd)
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\Run: [Spotify Web Helper] => C:\Users\Churdt\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-14] (Spotify Ltd)
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\Run: [Neubot] => C:\Users\Churdt\AppData\Local\Neubot\0.004016009\neubotw.exe [34816 2013-10-23] ()
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55360 2014-05-15] (Raptr, Inc)
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\Run: [Spotify] => C:\Users\Churdt\AppData\Roaming\Spotify\spotify.exe [6737976 2014-12-14] (Spotify Ltd)
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\Run: [GoogleChromeAutoLaunch_25577F6C285D37966D38431096154BC0] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.)
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-30] (Piriform Ltd)
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22869088 2014-10-21] (Google)
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\MountPoints2: {39eece94-f2e2-11e3-beaf-206a8a782708} - "F:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\MountPoints2: {7a2416e4-37f0-11e4-bf22-206a8a782708} - "G:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\MountPoints2: {eb7eb917-9f1f-11e3-9129-b94ab4b31c12} - "F:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\MountPoints2: {f16e7247-1da2-11e4-bede-206a8a782708} - "E:\HTC_Sync_Manager_PC.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files (x86)\LOLReplay\LOLRecorder.exe (LOL Replay)
Startup: C:\Users\Churdt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk
ShortcutTarget: Curse.lnk -> C:\Users\Churdt\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
Startup: C:\Users\Churdt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Churdt\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Churdt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://mysearch.avg.com?cid={1868372B-D201-4BE6-B138-D83FE77B535B}&mid=a5b3b321802947d29dddf123cc9ccefb-6b39f031e3a07e401dc23c6a5296402e560d8f0d&lang=nl&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-02-10 13:17:59&v=17.3.1.91&pid=safeguard&sg=&sap=hp
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://nl.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 213.46.228.196 62.179.104.196
FireFox:
========
FF ProfilePath: C:\Users\Churdt\AppData\Roaming\Mozilla\Firefox\Profiles\w2rfs78i.default
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @threeships.nl/TSHelper;version=2.0.0.3 -> C:\Program Files (x86)\Common Files\ThreeShips Shared\Dll\\npTSHelper.dll (Three Ships)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: uunuisaleas - C:\Users\Churdt\AppData\Roaming\Mozilla\Firefox\Profiles\w2rfs78i.default\Extensions\Mweg4xX9h@E.com [2014-12-29]
FF Extension: FireShot - C:\Users\Churdt\AppData\Roaming\Mozilla\Firefox\Profiles\w2rfs78i.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2014-12-30]
FF Extension: Adblock Plus - C:\Users\Churdt\AppData\Roaming\Mozilla\Firefox\Profiles\w2rfs78i.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-30]
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Churdt\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs Offline Background Page) - C:\Users\Churdt\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-20]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Churdt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-11-20]
CHR Extension: (Google Agenda) - C:\Users\Churdt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2014-11-25]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Churdt\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2014-11-20]
CHR Extension: (Itaku Twitch Chat) - C:\Users\Churdt\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdnidodmidifoacnnchcckomafiojblb [2014-11-20]
CHR Extension: (AdBlock) - C:\Users\Churdt\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-11-20]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Churdt\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2014-11-27]
CHR Extension: (Google Wallet) - C:\Users\Churdt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-26]
CHR Extension: (uunuisaleas) - C:\ProgramData\mmmjmcfjkhmlkhnknklbcckfomgkgeij\ [2014-10-26]
CHR HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - No Path
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3247120 2014-11-07] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [289328 2014-11-07] (AVG Technologies CZ, s.r.o.)
R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-31] (Broadcom Corp.) [File not signed]
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\40.0.2214.44\remoting_host.exe [56648 2014-12-15] (Google Inc.)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [25600 2014-04-02] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [76800 2014-04-02] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [546304 2014-04-02] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [32768 2010-04-29] (Google Inc)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3905536 2014-08-22] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices)
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [20496 2013-09-05] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [152344 2014-06-30] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [244504 2014-07-21] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [237848 2014-10-24] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [328984 2014-06-17] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-10-29] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-17] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [52000 2014-12-10] (AVG Technologies)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [270104 2014-06-30] (AVG Technologies CZ, s.r.o.)
R3 droidpad; C:\Windows\System32\drivers\droidpad.sys [21320 2013-04-18] (Windows (R) Win 7 DDK provider)
R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [173568 2014-04-02] (Microsoft Corporation)
S3 qcusbser; C:\Windows\system32\DRIVERS\qcusbser.sys [242688 2013-04-24] (QUALCOMM Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
U3 idsvc; No ImagePath
S2 SPDRIVER_1.37.0.1409; \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.1409\jsdrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-30 13:04 - 2014-12-30 13:04 - 00688992 _____ (Swearware) C:\Users\Churdt\Downloads\dds.com
2014-12-30 12:59 - 2014-12-30 12:59 - 00688992 _____ (Swearware) C:\Users\Churdt\Desktop\dds.scr
2014-12-30 12:12 - 2014-12-30 12:12 - 00000000 ____D () C:\Users\Churdt\AppData\Roaming\FireShot
2014-12-30 12:00 - 2014-12-30 12:00 - 00001114 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-30 11:59 - 2014-12-30 11:59 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Churdt\Downloads\mbam-setup-2.0.4.1028.exe
2014-12-30 11:54 - 2014-12-30 11:54 - 00041644 _____ () C:\Users\Churdt\Downloads\Addition.txt
2014-12-30 11:52 - 2014-12-30 13:08 - 00019788 _____ () C:\Users\Churdt\Downloads\FRST.txt
2014-12-30 11:52 - 2014-12-30 13:08 - 00000000 ____D () C:\FRST
2014-12-30 11:49 - 2014-12-30 10:25 - 156272515 _____ () C:\Users\Churdt\Desktop\Emailing Brunel.psd.zip
2014-12-30 11:45 - 2014-12-30 11:45 - 02123264 _____ (Farbar) C:\Users\Churdt\Downloads\FRST64.exe
2014-12-30 11:44 - 2014-12-30 11:44 - 02173952 _____ () C:\Users\Churdt\Downloads\adwcleaner_4.106.exe
2014-12-28 16:10 - 2014-12-28 16:10 - 00000000 __SHD () C:\Users\Churdt\AppData\Local\EmieBrowserModeList
2014-12-28 15:56 - 2014-12-28 15:56 - 00000000 ____D () C:\Users\Churdt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Popcorn Time
2014-12-28 15:56 - 2014-12-28 15:56 - 00000000 ____D () C:\Users\Churdt\AppData\Local\Popcorn Time
2014-12-28 15:54 - 2014-12-28 15:54 - 23190512 _____ (Popcorn Official) C:\Users\Churdt\Downloads\Popcorn-Time-0.3.6-Setup.exe
2014-12-26 08:19 - 2014-12-26 08:19 - 00000911 _____ () C:\Users\Churdt\Desktop\Afbeeldingen - Snelkoppeling.lnk
2014-12-26 01:31 - 2014-12-26 01:31 - 00000000 ____D () C:\Users\Churdt\Desktop\system
2014-12-26 01:31 - 2014-12-26 01:31 - 00000000 ____D () C:\Users\Churdt\Desktop\recovery
2014-12-26 01:31 - 2014-04-29 20:18 - 57591296 ____N () C:\Users\Churdt\Desktop\NON-HLOS.bin
2014-12-26 01:29 - 2014-12-26 01:29 - 09620767 _____ (Snoop05) C:\Users\Churdt\Downloads\adb-setup-1.4.2.exe
2014-12-26 01:29 - 2014-12-26 01:29 - 00004458 _____ () C:\WINDOWS\DPINST.LOG
2014-12-26 01:29 - 2014-12-26 01:29 - 00000000 ____D () C:\Program Files\DIFX
2014-12-26 01:21 - 2014-12-26 01:20 - 484289780 _____ () C:\Users\Churdt\Desktop\cm-11.0-XNPH25R-bacon-signed.zip
2014-12-26 01:18 - 2014-12-26 01:20 - 484289780 _____ () C:\Users\Churdt\Downloads\cm-11.0-XNPH25R-bacon-signed.zip
2014-12-26 01:00 - 2014-12-26 01:02 - 00000000 ____D () C:\Users\Churdt\Desktop\android-sdk-windows
2014-12-26 01:00 - 2014-12-26 01:00 - 139473113 _____ () C:\Users\Churdt\Downloads\android-sdk_r24.0.2-windows.zip
2014-12-26 00:58 - 2014-12-26 00:58 - 00000000 ____D () C:\Users\Churdt\AppData\Roaming\JetBrains
2014-12-26 00:57 - 2014-12-26 00:57 - 00000000 ____D () C:\Users\Churdt\.AndroidStudio
2014-12-26 00:57 - 2014-12-26 00:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Studio
2014-12-26 00:53 - 2014-12-26 00:53 - 00000000 ____D () C:\Users\Churdt\AppData\Local\Android
2014-12-26 00:53 - 2014-12-26 00:53 - 00000000 ____D () C:\Program Files\Android
2014-12-26 00:53 - 2014-12-26 00:52 - 00319912 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-12-26 00:53 - 2014-12-26 00:52 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-12-26 00:53 - 2014-12-26 00:52 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-12-26 00:53 - 2014-12-26 00:52 - 00111016 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2014-12-26 00:52 - 2014-12-26 00:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2014-12-26 00:52 - 2014-12-26 00:52 - 00000000 ____D () C:\Program Files\Java
2014-12-26 00:51 - 2014-12-26 00:52 - 135815584 _____ (Oracle Corporation) C:\Users\Churdt\Downloads\jdk-7u71-windows-x64.exe
2014-12-26 00:48 - 2014-12-26 00:49 - 15644672 _____ () C:\Users\Churdt\Downloads\openrecovery-twrp-2.7.0.0-bacon.img
2014-12-26 00:48 - 2014-12-26 00:48 - 04000729 _____ () C:\Users\Churdt\Downloads\UPDATE-SuperSU-v2.40.zip
2014-12-26 00:46 - 2014-12-26 00:50 - 868344232 _____ (Google Inc.) C:\Users\Churdt\Downloads\android-studio-bundle-135.1641136.exe
2014-12-26 00:44 - 2014-12-28 15:56 - 00000000 ____D () C:\Program Files (x86)\uunuisaleas
2014-12-26 00:44 - 2014-12-28 15:56 - 00000000 ____D () C:\Program Files (x86)\uNisoales
2014-12-26 00:43 - 2014-12-26 00:43 - 00000000 ____D () C:\ProgramData\mmmjmcfjkhmlkhnknklbcckfomgkgeij
2014-12-25 23:37 - 2014-12-25 23:38 - 251110688 _____ () C:\Users\Churdt\Downloads\aosp-One-ota-20140817.zip
2014-12-25 23:22 - 2014-12-25 23:22 - 15477848 _____ (SAMSUNG Electronics Co., Ltd.) C:\Users\Churdt\Downloads\SAMSUNG_USB_Driver_for_Mobile_Phones_v1.5.33.0 (1).exe
2014-12-25 23:22 - 2014-12-25 23:22 - 02229658 _____ () C:\Users\Churdt\Downloads\Windows8.1-KB2917929-x64.msu
2014-12-25 22:56 - 2014-12-25 22:56 - 00000000 ____D () C:\Program Files\SAMSUNG
2014-12-25 22:55 - 2014-12-25 22:55 - 15477848 _____ (SAMSUNG Electronics Co., Ltd.) C:\Users\Churdt\Downloads\SAMSUNG_USB_Driver_for_Mobile_Phones_v1.5.33.0.exe
2014-12-25 22:51 - 2014-12-11 07:40 - 00000000 ____D () C:\OPO
2014-12-25 22:47 - 2014-12-26 00:18 - 00000000 ____D () C:\Users\Churdt\Desktop\Tasker
2014-12-25 22:47 - 2014-12-25 22:50 - 494320574 _____ () C:\Users\Churdt\Downloads\OPO.exe
2014-12-25 22:45 - 2014-12-26 01:23 - 00016565 _____ () C:\WINDOWS\setupact.log
2014-12-25 22:45 - 2014-12-25 22:45 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-12-25 13:26 - 2014-12-25 13:26 - 00000000 ____D () C:\Users\Churdt\Downloads\win81-10.0.0.298-whql
2014-12-25 13:26 - 2014-08-22 09:00 - 03905536 _____ (Qualcomm Atheros Communications, Inc.) C:\WINDOWS\system32\Drivers\athwbx.sys
2014-12-25 13:25 - 2014-12-25 13:26 - 02281694 _____ () C:\Users\Churdt\Downloads\win81-10.0.0.298-whql.zip
2014-12-24 20:37 - 2014-12-28 15:56 - 00002260 _____ () C:\Users\Churdt\Desktop\Popcorn Time.lnk
2014-12-24 20:36 - 2014-12-24 20:36 - 22926008 _____ (Popcorn Official) C:\Users\Churdt\Downloads\Popcorn-Time-0.3.5.3-Setup.exe
2014-12-24 19:38 - 2014-12-24 19:48 - 00000000 ____D () C:\Users\Churdt\AppData\Roaming\Curse Client
2014-12-24 19:38 - 2014-12-24 19:38 - 00001086 _____ () C:\Users\Churdt\Desktop\Curse.lnk
2014-12-24 19:38 - 2014-12-24 19:38 - 00001072 _____ () C:\Users\Churdt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse.lnk
2014-12-24 19:36 - 2014-12-24 19:36 - 32691072 _____ (Curse) C:\Users\Churdt\Downloads\CurseClientSetup.exe
2014-12-19 22:57 - 2014-12-19 22:57 - 00016417 _____ () C:\Users\Churdt\Desktop\Uurregistratie 2014 (November - December).xlsx
2014-12-19 22:54 - 2014-12-19 22:54 - 00016235 _____ () C:\Users\Churdt\Downloads\Uurregistratie 2014 (Oktober-november).xlsx
2014-12-17 17:30 - 2014-12-17 19:22 - 113355430 _____ () C:\Users\Churdt\Desktop\Untitled-1.ai
2014-12-17 16:27 - 2014-12-17 16:27 - 00009112 _____ () C:\Users\Churdt\Downloads\badaboom_bb.zip
2014-12-16 11:37 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-12-16 11:37 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-12-14 16:41 - 2014-02-28 05:37 - 00001201 _____ () C:\Users\Churdt\Desktop\Hearthstone.lnk
2014-12-10 20:47 - 2014-12-10 20:47 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2014-12-10 19:40 - 2014-12-10 19:40 - 00000000 ____D () C:\Users\Churdt\AppData\Local\AVG Web TuneUp
2014-12-10 19:39 - 2014-12-10 19:39 - 00000000 ____D () C:\ProgramData\AVG Web TuneUp
2014-12-10 19:39 - 2014-12-10 19:39 - 00000000 ____D () C:\Program Files\AVG Web TuneUp
2014-12-10 19:39 - 2014-12-10 19:39 - 00000000 ____D () C:\Program Files (x86)\AVG Web TuneUp
2014-12-10 13:03 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2014-12-10 13:03 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-10 13:03 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2014-12-10 13:03 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2014-12-10 12:56 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-12-10 12:56 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-12-10 12:55 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-12-10 12:55 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-12-10 12:55 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2014-12-10 12:55 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-12-10 12:55 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-12-10 12:55 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-12-10 12:55 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-12-10 12:55 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-12-10 12:55 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2014-12-10 12:55 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2014-12-10 12:55 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-12-10 12:55 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-12-10 12:55 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-12-10 12:55 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2014-12-10 12:55 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-12-10 12:55 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2014-12-10 12:55 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-12-10 12:55 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-12-10 12:55 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-12-10 12:55 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-12-10 12:55 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-12-10 12:55 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-12-10 12:55 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2014-12-10 12:55 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-12-10 12:55 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-12-10 12:55 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2014-12-10 12:55 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-12-10 12:55 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2014-12-10 12:55 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-12-10 12:55 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-12-10 12:55 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-12-10 12:55 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-12-10 12:55 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-12-10 12:55 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-12-10 12:55 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-12-10 12:55 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-12-10 12:55 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-12-10 12:55 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-12-10 12:55 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-12-10 12:54 - 2014-12-04 00:37 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-12-10 12:54 - 2014-12-04 00:09 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2014-12-10 12:54 - 2014-12-03 00:09 - 01083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-12-10 12:54 - 2014-12-03 00:09 - 00740864 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2014-12-10 12:54 - 2014-12-03 00:09 - 00412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2014-12-10 12:54 - 2014-12-03 00:09 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-12-10 12:54 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-12-10 12:54 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-12-10 12:54 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2014-12-10 12:54 - 2014-10-13 03:43 - 00238912 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2014-12-10 12:54 - 2014-10-13 03:43 - 00153920 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2014-12-10 12:54 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-12-10 12:54 - 2014-10-13 03:43 - 00039744 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2014-12-02 13:18 - 2014-12-16 12:41 - 00000000 ____D () C:\Users\Churdt\Desktop\Desk
2014-12-02 13:17 - 2014-12-02 13:17 - 00008505 _____ () C:\Users\Churdt\Downloads\Desk.zip
2014-12-02 11:23 - 2014-12-02 11:23 - 00000388 _____ () C:\WINDOWS\LkmdfCoInst.log
2014-12-01 19:38 - 2014-12-01 19:38 - 06116024 _____ () C:\Users\Churdt\Downloads\Peercoach poster 1 (1).zip
2014-11-30 16:12 - 2014-11-30 16:12 - 00629594 _____ () C:\Users\Churdt\Downloads\Adament.zip
2014-11-30 12:46 - 2014-12-24 20:29 - 00000000 ____D () C:\Program Files (x86)\LSI
2014-11-30 12:46 - 2014-11-30 12:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LSI - LoL Summoner Information
2014-11-30 12:45 - 2014-11-30 12:46 - 10188516 _____ (Aequus Gaming Ltd. ) C:\Users\Churdt\Downloads\LoL Summoner Information (v4.1.5) Setup.exe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-30 13:07 - 2014-04-14 18:56 - 00876758 _____ () C:\WINDOWS\system32\perfh013.dat
2014-12-30 13:07 - 2014-04-14 18:56 - 00188608 _____ () C:\WINDOWS\system32\perfc013.dat
2014-12-30 13:07 - 2014-04-02 17:25 - 00000000 __RDO () C:\Users\Churdt\SkyDrive
2014-12-30 13:07 - 2014-03-26 13:36 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1285004736-3130037103-180532040-1000
2014-12-30 13:07 - 2013-11-14 13:43 - 02051312 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-12-30 13:03 - 2014-11-27 16:34 - 00000000 ___RD () C:\Users\Churdt\Google Drive
2014-12-30 13:03 - 2014-05-18 16:48 - 00000000 ___RD () C:\Users\Churdt\Dropbox
2014-12-30 13:03 - 2014-05-18 16:47 - 00000000 ____D () C:\Users\Churdt\AppData\Roaming\Dropbox
2014-12-30 13:02 - 2014-09-11 19:45 - 00003758 _____ () C:\WINDOWS\System32\Tasks\AutoKMS
2014-12-30 13:02 - 2014-04-26 07:43 - 00000394 _____ () C:\WINDOWS\Tasks\AVG-Secure-Search-Update_0414c_rmv.job
2014-12-30 13:02 - 2014-04-26 07:43 - 00000394 _____ () C:\WINDOWS\Tasks\AVG-Secure-Search-Update_0414c_rel.job
2014-12-30 13:02 - 2014-03-05 00:13 - 00000000 ____D () C:\Users\Churdt\AppData\Roaming\Spotify
2014-12-30 13:02 - 2014-02-27 06:22 - 00001080 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-30 13:00 - 2014-11-20 14:15 - 00008808 _____ () C:\WINDOWS\PFRO.log
2014-12-30 13:00 - 2014-11-20 11:40 - 00000000 ____D () C:\AdwCleaner
2014-12-30 13:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-12-30 13:00 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-12-30 13:00 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2014-12-30 12:53 - 2014-02-27 06:22 - 00001084 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-30 12:35 - 2014-09-03 19:05 - 00000132 _____ () C:\Users\Churdt\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-12-30 12:35 - 2014-03-31 09:48 - 01268736 ___SH () C:\Users\Churdt\Desktop\Thumbs.db
2014-12-30 12:01 - 2014-11-20 11:32 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2014-12-30 12:01 - 2014-03-05 19:40 - 00000000 ____D () C:\Users\Churdt\AppData\Local\Adobe
2014-12-30 12:00 - 2014-11-20 11:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-30 12:00 - 2014-11-20 11:32 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-30 11:50 - 2014-11-21 18:29 - 01277299 _____ () C:\WINDOWS\WindowsUpdate.log
2014-12-30 11:42 - 2014-02-27 20:10 - 00000000 ____D () C:\ProgramData\MFAData
2014-12-30 11:42 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-12-29 18:54 - 2014-05-18 16:22 - 00000000 ____D () C:\Users\Churdt\AppData\Roaming\KeePass
2014-12-29 18:54 - 2014-04-06 15:15 - 00003934 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5F496ACE-F769-4B56-9C75-C48A28E9AC6E}
2014-12-29 18:52 - 2014-03-05 00:14 - 00000000 ____D () C:\Users\Churdt\AppData\Local\Spotify
2014-12-28 18:19 - 2014-10-17 20:09 - 00000000 ____D () C:\Users\Churdt\AppData\Local\Popcorn-Time
2014-12-28 15:56 - 2014-02-27 20:13 - 00000000 ____D () C:\ProgramData\AVG2014
2014-12-26 00:58 - 2014-03-19 13:11 - 00000000 ____D () C:\Users\Churdt\.android
2014-12-26 00:57 - 2014-04-02 16:26 - 00000000 ____D () C:\Users\Churdt
2014-12-25 22:55 - 2014-02-27 06:52 - 00000000 ____D () C:\ProgramData\Samsung
2014-12-25 14:58 - 2014-04-21 16:21 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-25 14:48 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-12-25 13:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-12-20 16:53 - 2014-02-27 06:22 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-20 11:23 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-12-19 22:54 - 2014-03-26 13:26 - 00000000 ____D () C:\Users\Churdt\AppData\Local\Packages
2014-12-17 18:04 - 2013-08-22 15:44 - 05254024 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-12-16 11:33 - 2014-05-18 16:47 - 00000000 ____D () C:\Users\Churdt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-12-15 08:59 - 2014-02-28 05:36 - 00000000 ____D () C:\Users\Churdt\AppData\Local\Battle.net
2014-12-14 19:09 - 2014-04-02 15:30 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-14 14:53 - 2014-02-28 05:36 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-12-12 20:31 - 2014-04-02 16:26 - 00000000 ____D () C:\Users\Administrator
2014-12-10 21:30 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-12-10 20:47 - 2014-07-11 18:00 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-12-10 20:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\en-GB
2014-12-10 20:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\en-GB
2014-12-10 20:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-12-10 20:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2014-12-10 20:46 - 2014-06-10 20:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-10 19:39 - 2014-03-03 05:24 - 00052000 _____ (AVG Technologies) C:\WINDOWS\system32\Drivers\avgtpx64.sys
2014-12-10 17:43 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2014-12-10 17:43 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2014-12-10 17:42 - 2014-09-11 19:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-12-10 17:40 - 2014-03-11 10:40 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-12-10 17:36 - 2014-03-11 10:40 - 112710672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-12-10 15:24 - 2014-02-28 05:37 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2014-12-10 12:51 - 2014-03-12 10:51 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-02 11:23 - 2014-11-03 10:54 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
Some content of TEMP:
====================
C:\Users\Churdt\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfpyemv.dll
C:\Users\Churdt\AppData\Local\Temp\dufgmr4c.exe
C:\Users\Churdt\AppData\Local\Temp\jke476d.exe
C:\Users\Churdt\AppData\Local\Temp\Quarantine.exe
C:\Users\Churdt\AppData\Local\Temp\soiygu3.exe
C:\Users\Churdt\AppData\Local\Temp\sqlite3.dll
C:\Users\Churdt\AppData\Local\Temp\vpbypc35.exe
C:\Users\Churdt\AppData\Local\Temp\xmlUpdater.exe
C:\Users\Churdt\AppData\Local\Temp\ytdieamo_amodc_setup.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-25 11:17
==================== End Of Log ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-12-2014
Ran by Churdt at 2014-12-30 13:09:12
Running from C:\Users\Churdt\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Aangifte inkomstenbelasting 2013 (HKLM-x32\...\Aangifte inkomstenbelasting 2013) (Version: - Belastingdienst)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.4.1.351 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Illustrator CS6 (HKLM-x32\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated)
Adobe InDesign CS6 (HKLM-x32\...\{CFB770D7-8D43-1014-922B-CC2715FADE3F}) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.3 64-bit (HKLM\...\{2DD71ACB-552D-402C-9529-7906ACB95C30}) (Version: 5.3.1 - Adobe Systems Incorporated)
Adobe Premiere Pro CS6 (HKLM-x32\...\{7176B973-6011-43C1-AEBC-2D73FE7C6982}) (Version: 6.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Adobe Update Management Tool (HKLM-x32\...\{534A7A1A-7102-4AF6-23EA-7CD279C7B625}_is1) (Version: 6.2 - PainteR)
Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 3.4.0 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{DDC218E1-E342-62E5-EDE9-4838A6574085}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
Android Studio (HKLM\...\Android Studio) (Version: 1.0 - Google Inc.)
Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4794 - AVG Technologies)
AVG 2014 (Version: 14.0.4253 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4794 - AVG Technologies) Hidden
AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.0.5.7 - AVG Technologies)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.100.235.19 - Broadcom Corporation)
Broadcom Card Reader Driver Installer (HKLM\...\{F0A7DF2F-0BE0-470F-B137-D7A19F977189}) (Version: 15.4.8.1 - Broadcom Corporation)
Broadcom Gigabit NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.6.1.3 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.19 - Piriform)
Chrome Remote Desktop Host (HKLM-x32\...\{6FC79C95-F54F-4515-8012-01F33D894492}) (Version: 40.0.2214.44 - Google Inc.)
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.) Hidden
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.) Hidden
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.) Hidden
Curse (HKLM-x32\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 6.0.0.0 - Curse)
De Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.0.732.20 - Electronic Arts Inc.)
Desktop Plagiarism Checker versie 1.11 (HKLM-x32\...\Desktop Plagiarism Checker_is1) (Version: 1.11 - Plagiarisma.Net)
Dropbox (HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.)
ETDWare PS/2-X64 8.0.6.3_WHQL (HKLM\...\Elantech) (Version: 8.0.6.3 - ELAN Microelectronic Corp.)
Evernote v. 5.7 (HKLM-x32\...\{94049072-5FE7-11E4-8AF1-00163E98E7D6}) (Version: 5.7.0.5492 - Evernote Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Drive (HKLM-x32\...\{C60F3836-333A-4AE2-B526-CFDBA143A9BA}) (Version: 1.18.7821.2489 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
HP Deskjet 1050 J410 series Basic Device Software (HKLM\...\{F294770E-F869-400F-81C3-614B5F13CA54}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
inSSIDer Home (HKLM-x32\...\{9E54E4AE-B67A-4925-8E92-0E1F9817FD73}) (Version: 3.1.2.1 - MetaGeek, LLC)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417071FF}) (Version: 7.0.710 - Oracle)
Java SE Development Kit 7 Update 71 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170710}) (Version: 1.7.0.710 - Oracle)
KeePass Password Safe 2.26 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.26 - Dominik Reichl)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
Logitech Gaming Software 8.57 (HKLM\...\Logitech Gaming Software) (Version: 8.57.145 - Logitech Inc.)
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.5.2 - http://www.leaguereplays.com)
Malwarebytes Anti-Malware versie 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft Office Language Pack 2013 - Dutch/Nederlands (HKLM\...\Office15.OMUI.nl-nl) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 33.1.1 (x86 nl) (HKLM-x32\...\Mozilla Firefox 33.1.1 (x86 nl)) (Version: 33.1.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Neubot 0.4.16.9 (HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\Neubot) (Version: - )
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
Origin (HKLM-x32\...\Origin) (Version: 9.4.6.2792 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
PowerISO (HKLM-x32\...\PowerISO) (Version: 6.0 - Power Software Ltd)
Raptr (HKLM-x32\...\Raptr) (Version: - )
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.3.0 - Samsung Electronics)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.33.0 - SAMSUNG Electronics Co., Ltd.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden
Sid Meier's Civilization: Beyond Earth (HKLM-x32\...\Steam App 65980) (Version: - Firaxis Games)
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts)
Speccy (HKLM\...\Speccy) (Version: 1.25 - Piriform)
Spelunky (HKLM-x32\...\Steam App 239350) (Version: - )
Spotify (HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.2.0 - Synaptics Incorporated)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
ThreeShipsPluginSetup (HKLM-x32\...\{954AED8D-F8FD-46AC-ABDF-A624C1B41803}) (Version: 2.0.0.3 - Three Ships)
Uninstall LSI (HKLM-x32\...\{62B332E9-239D-4692-BDE2-0CC1CF2833DA}_is1) (Version: v4.1.5 - Aequus Gaming Ltd.)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Vuze (HKLM-x32\...\8461-7759-5462-8226) (Version: 5.4.0.0 - Azureus Software, Inc.)
Watch Dogs (HKLM-x32\...\Watch Dogs_R.G. Mechanics_is1) (Version: - R.G. Mechanics, spider91)
Widevine Media Optimizer Chrome 6.0.0 (HKLM-x32\...\optimizer_chrome) (Version: 6.0.0.12442 - Widevine Technologies)
Widevine Media Optimizer Chrome 6.0.0 (HKU\.DEFAULT\...\optimizer_chrome) (Version: 6.0.0.12757 - Widevine Technologies)
Widevine Media Optimizer Chrome 6.0.0 (HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\optimizer_chrome) (Version: 6.0.0.12442 - Widevine Technologies)
Windows-stuurprogrammapakket - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
WinSCP 5.5.5 (HKLM-x32\...\winscp3_is1) (Version: 5.5.5 - Martin Prikryl)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1285004736-3130037103-180532040-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Churdt\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1285004736-3130037103-180532040-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Churdt\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1285004736-3130037103-180532040-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Churdt\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1285004736-3130037103-180532040-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Churdt\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1285004736-3130037103-180532040-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Churdt\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1285004736-3130037103-180532040-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Churdt\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1285004736-3130037103-180532040-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Churdt\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1285004736-3130037103-180532040-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Churdt\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1285004736-3130037103-180532040-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Churdt\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
==================== Restore Points =========================
10-12-2014 17:27:55 Windows Update
14-12-2014 19:08:24 Windows Update
20-12-2014 11:21:49 Windows Update
26-12-2014 00:52:11 Installed Java SE Development Kit 7 Update 71 (64-bit)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {06E147F3-70CA-4521-835A-A1FB66AC15A7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-27] (Google Inc.)
Task: {0841A70E-3BAE-4C0E-9884-D77EB7777CF1} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {264D41E1-EC6E-446F-BE4D-08511F197086} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-richard-koorevaar@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {2692EEF6-A38C-48EA-83C1-5507E431AB0A} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {2A8EA38B-69D4-4AE4-BDC1-F6DD36D68546} - System32\Tasks\{6D22264B-A98D-4686-89EE-B7435CE6882C} => pcalua.exe -a "C:\Users\Churdt\AppData\Local\Temp\Temp1_Lan_Broadcom_14.6.1.0_W7x64_A (1).zip\LAN_Broadcom_14.6.1.0_W7x64\DrvInst\NL_K57\IA32\setup.exe"
Task: {2C6ACC15-41E0-42EB-84EB-4A0067F5D0CC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {2CC86421-375C-4046-9599-EF26DA774E5B} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {3B4CBAD2-5AFB-4529-91F8-E00BF2F0ED80} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {45C889CC-3091-4352-923F-3A1E98301850} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {49FB11C6-AEF7-4F9E-AC0C-3AD35801C88E} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {4E372FBF-9737-4FFB-9137-5818A9153797} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {5175793E-2AFC-4644-82FB-308E1C6365DC} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-12-10] (Microsoft Corporation)
Task: {51B39637-D419-474D-874F-F9781E72D619} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {535CF438-EFEE-4A64-89FA-2E0DEE4F31B1} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {5F7E73F9-A4BB-4B3B-8D5D-E5B79B504F97} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS\AutoKMS.exe [2014-09-11] ()
Task: {68513FEA-3E6F-4202-BC4F-2DF26E5999D8} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {73C43EC1-CC5C-4A36-8CEE-412F890B1723} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {79636691-2EC9-47BE-84AD-8CADEEA9ED48} - \SPBIW_UpdateTask_Time_313134363737373931372d23787845322a5b3434322d57 No Task File <==== ATTENTION
Task: {8D2226FA-736F-4DD5-B097-87AA6F2A3A0C} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {9123BFB5-8ADD-48D3-89F6-079B373BB2F3} - System32\Tasks\AVG-Secure-Search-Update_0414c_rmv => C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe [2014-04-27] ()
Task: {958BB9F3-E3F8-42F5-BB4E-6D73B3449B68} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {9B663FE5-9B55-4AA1-94DE-3C6CBC7C84A9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-27] (Google Inc.)
Task: {A16386EA-F647-4A0E-8BAF-3E4B24C842CE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {A2ED291C-2821-4622-AC36-C85C0A8F7CA0} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {A4641181-77E0-4818-869E-7209F361A7FD} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
Task: {B1BC5C53-C8F2-4A72-A8B7-497A8FC59439} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {B66ED47E-B85F-4306-81F1-CB81EEBA5ED8} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {B8B7FBB7-CA4C-4B83-83B5-012FD8BA4072} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {CC290FD2-FB11-4B0F-9A4D-D71B261CDECC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {CF5CD26F-1682-45BB-A4FC-ADC3774478C3} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {D08728DB-17B5-488C-B978-AD0165D47269} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {D37755E5-0EBD-4880-9F42-82A1801473A5} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {DCFB9772-2BA7-4343-BBD9-90B43B61B978} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {E60C7F54-679D-4C98-A3DB-BE579D4BD327} - System32\Tasks\AVG-Secure-Search-Update_0414c_rel => C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe [2014-04-27] ()
Task: {E9C98D05-21CB-45E0-85C9-38E455581799} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-10-30] (Piriform Ltd)
Task: {EDC6D886-812B-4079-A119-30927F7A834D} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {F368B2C1-C81C-48B8-BA28-CE5A697D4B68} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {F644E3E6-533F-46EA-A49A-9818A7249684} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {FC40B8C6-6F22-4B29-BA26-79C9CF40DFB6} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {FCA73D35-844D-4FC3-B23E-3F58774B07E2} - System32\Tasks\AdobeAAMUpdater-1.0-Churdt-PC-Churdt => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-12-11] (Adobe Systems Incorporated)
Task: C:\WINDOWS\Tasks\AVG-Secure-Search-Update_0414c_rel.job => C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe
Task: C:\WINDOWS\Tasks\AVG-Secure-Search-Update_0414c_rmv.job => C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-02-11 12:21 - 2014-02-11 12:21 - 00644464 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
2014-04-26 07:43 - 2014-04-27 08:36 - 02725912 _____ () C:\Program Files (x86)\Avg Secure Update\AVG-Secure-Search-Update_0414c.exe
2014-09-18 08:23 - 2014-09-18 08:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2014-10-14 19:51 - 2014-10-14 19:51 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-09-18 08:23 - 2014-09-18 08:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2014-10-14 19:51 - 2014-10-14 19:51 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2014-03-05 00:14 - 2014-12-14 14:52 - 00374840 _____ () C:\Users\Churdt\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
2014-03-05 00:14 - 2014-12-14 14:52 - 36966968 _____ () C:\Users\Churdt\AppData\Roaming\Spotify\Data\libcef.dll
2014-07-20 13:39 - 2014-12-14 14:52 - 00867896 _____ () C:\Users\Churdt\AppData\Roaming\Spotify\Data\ffmpegsumo.dll
2014-03-05 00:14 - 2014-12-14 14:52 - 00886840 _____ () C:\Users\Churdt\AppData\Roaming\Spotify\Data\libglesv2.dll
2014-03-05 00:14 - 2014-12-14 14:52 - 00108600 _____ () C:\Users\Churdt\AppData\Roaming\Spotify\Data\libegl.dll
2014-12-30 13:02 - 2014-12-30 13:02 - 00098816 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\win32api.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00110080 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\pywintypes27.dll
2014-12-30 13:02 - 2014-12-30 13:02 - 00364544 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\pythoncom27.dll
2014-12-30 13:02 - 2014-12-30 13:02 - 00045568 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\_socket.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 01160704 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\_ssl.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00320512 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\win32com.shell.shell.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00713216 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\_hashlib.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 01175040 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\wx._core_.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00805888 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\wx._gdi_.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00811008 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\wx._windows_.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 01062400 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\wx._controls_.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00735232 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\wx._misc_.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00128512 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\_elementtree.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00127488 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\pyexpat.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00557056 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\pysqlite2._sqlite.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00087552 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\_ctypes.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00119808 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\win32file.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00108544 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\win32security.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00007168 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\hashobjs_ext.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00167936 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\win32gui.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00018432 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\win32event.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00038912 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\win32inet.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00011264 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\win32crypt.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00070656 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\wx._html2.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00027136 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\_multiprocessing.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00035840 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\win32process.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00686080 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\unicodedata.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00122368 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\wx._wizard.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00024064 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\win32pipe.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00025600 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\win32pdh.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00525640 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\windows._lib_cacheinvalidation.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00010240 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\select.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00017408 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\win32profile.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00022528 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\win32ts.pyd
2014-12-30 13:02 - 2014-12-30 13:02 - 00078336 _____ () C:\Users\Churdt\AppData\Local\Temp\_MEI49842\wx._animate.pyd
2014-10-22 01:22 - 2014-10-22 01:22 - 00750080 _____ () C:\Users\Churdt\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2014-12-30 13:02 - 2014-12-30 13:02 - 00043008 _____ () c:\users\churdt\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfpyemv.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00047616 _____ () C:\Users\Churdt\AppData\Roaming\Dropbox\bin\libEGL.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00863744 _____ () C:\Users\Churdt\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2014-10-22 01:22 - 2014-10-22 01:22 - 00200704 _____ () C:\Users\Churdt\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2014-10-29 22:17 - 2014-10-29 22:17 - 00436576 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2014-10-29 22:17 - 2014-10-29 22:17 - 00318304 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2014-11-16 23:33 - 2014-11-16 23:33 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\Churdt\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\Churdt\Desktop\Emailing Brunel.psd.zip:com.dropbox.attributes
AlternateDataStreams: C:\Users\Churdt\AppData\Local:PrT4n0r73i2xwvzlJw0hB1nMj
AlternateDataStreams: C:\Users\Churdt\AppData\Local\JcKD7mzYIsPct:UUkEH8mq12JDc37v8i29R8itS0lv
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^Users^Churdt^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Magician.lnk => C:\Windows\pss\Samsung Magician.lnk.Startup
HKLM\...\StartupApproved\StartupFolder: => "LOLRecorder.lnk"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "BCSSync"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKLM\...\StartupApproved\Run32: => "vProt"
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\StartupApproved\StartupFolder: => "Curse.lnk"
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\StartupApproved\Run: => "Neubot"
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\StartupApproved\Run: => "Raptr"
HKU\S-1-5-21-1285004736-3130037103-180532040-1000\...\StartupApproved\Run: => "CCleaner Monitoring"
========================= Accounts: ==========================
Administrator (S-1-5-21-1285004736-3130037103-180532040-500 - Administrator - Disabled) => C:\Users\Administrator
Churdt (S-1-5-21-1285004736-3130037103-180532040-1000 - Administrator - Enabled) => C:\Users\Churdt
Guest (S-1-5-21-1285004736-3130037103-180532040-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1285004736-3130037103-180532040-1007 - Limited - Enabled)
==================== Faulty Device Manager Devices =============
Name: Synaptics PS/2 Port TouchPad
Description: Synaptics PS/2 Port TouchPad
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Synaptics
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (12/25/2014 11:17:23 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Het volume Door systeem gereserveerd is niet geoptimaliseerd, omdat er een fout is opgetreden: The parameter is incorrect. (0x80070057)
Error: (12/24/2014 08:59:19 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Het volume Door systeem gereserveerd is niet geoptimaliseerd, omdat er een fout is opgetreden: The parameter is incorrect. (0x80070057)
Error: (12/24/2014 08:35:31 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT AUTHORITY)
Description: There was an error with the Windows Location Provider database
Error: (12/24/2014 07:43:50 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4
Error: (12/24/2014 07:43:50 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4
Error: (12/24/2014 07:43:49 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description:
Error: (12/24/2014 07:43:49 PM) (Source: Perflib) (EventID: 1018) (User: )
Description: Outlook
Error: (12/24/2014 07:43:49 PM) (Source: Perflib) (EventID: 1022) (User: )
Description: Outlook4
Error: (12/24/2014 07:43:49 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\WINDOWS\system32\msdtcuiu.DLL4
Error: (12/24/2014 07:43:49 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\System32\Secur32.dll4
System errors:
=============
Error: (12/30/2014 01:00:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: De SPDRIVER_1.37.0.1409-service kan vanwege de volgende fout niet worden gestart:
%%3
Error: (12/30/2014 01:00:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: De AODDriver4.2.0-service kan vanwege de volgende fout niet worden gestart:
%%3
Error: (12/30/2014 00:23:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: De SPDRIVER_1.37.0.1409-service kan vanwege de volgende fout niet worden gestart:
%%3
Error: (12/30/2014 00:23:33 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: De AODDriver4.2.0-service kan vanwege de volgende fout niet worden gestart:
%%3
Error: (12/30/2014 11:50:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: De SPDRIVER_1.37.0.1409-service kan vanwege de volgende fout niet worden gestart:
%%3
Error: (12/30/2014 11:50:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: De AODDriver4.2.0-service kan vanwege de volgende fout niet worden gestart:
%%3
Error: (12/30/2014 11:50:13 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: De Net.Pipe Listener Adapter-service is onverwacht gestopt. Dit is 1 keer gebeurd. De volgende herstelbewerking zal over 120000 milliseconden worden uitgevoerd: Restart the service.
Error: (12/30/2014 11:50:13 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: De Net.Msmq Listener Adapter-service is onverwacht gestopt. Dit is 1 keer gebeurd. De volgende herstelbewerking zal over 120000 milliseconden worden uitgevoerd: Restart the service.
Error: (12/30/2014 11:50:13 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: De Message Queuing-service is onverwacht gestopt. Dit is 1 keer gebeurd. De volgende herstelbewerking zal over 120000 milliseconden worden uitgevoerd: Restart the service.
Error: (12/30/2014 11:50:13 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: De Chrome Remote Desktop Service-service is onverwacht gestopt. Dit is 1 keer gebeurd. De volgende herstelbewerking zal over 60000 milliseconden worden uitgevoerd: Restart the service.
Microsoft Office Sessions:
=========================
Error: (12/25/2014 11:17:23 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Door systeem gereserveerdThe parameter is incorrect. (0x80070057)
Error: (12/24/2014 08:59:19 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Door systeem gereserveerdThe parameter is incorrect. (0x80070057)
Error: (12/24/2014 08:35:31 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT AUTHORITY)
Description: -2147024883
Error: (12/24/2014 07:43:50 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\WINDOWS\system32\wbem\wmiaprpl.dll4
Error: (12/24/2014 07:43:50 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: rdyboost4
Error: (12/24/2014 07:43:49 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description:
Error: (12/24/2014 07:43:49 PM) (Source: Perflib) (EventID: 1018) (User: )
Description: Outlook
Error: (12/24/2014 07:43:49 PM) (Source: Perflib) (EventID: 1022) (User: )
Description: Outlook4
Error: (12/24/2014 07:43:49 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\WINDOWS\system32\msdtcuiu.DLL4
Error: (12/24/2014 07:43:49 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\System32\Secur32.dll4
CodeIntegrity Errors:
===================================
Date: 2014-11-13 21:59:16.777
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll that did not meet the Microsoft signing level requirements.
Date: 2014-11-13 21:59:16.545
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll that did not meet the Microsoft signing level requirements.
Date: 2014-11-13 21:59:16.387
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll that did not meet the Microsoft signing level requirements.
Date: 2014-11-13 21:59:16.096
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll that did not meet the Microsoft signing level requirements.
Date: 2014-11-13 21:59:15.928
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll that did not meet the Microsoft signing level requirements.
Date: 2014-11-13 21:59:15.764
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll that did not meet the Microsoft signing level requirements.
Date: 2014-11-13 21:59:14.224
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
Date: 2014-11-13 21:59:13.779
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements.
Date: 2014-11-13 21:57:45.298
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.stdformat.dll that did not meet the Microsoft signing level requirements.
Date: 2014-11-13 21:57:45.072
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\adodb.dll that did not meet the Microsoft signing level requirements.
==================== Memory info ===========================
Processor: AMD A6-3420M APU with Radeon(tm) HD Graphics
Percentage of memory in use: 29%
Total physical RAM: 7654.11 MB
Available physical RAM: 5386.72 MB
Total Pagefile: 8166.11 MB
Available Pagefile: 5811.02 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:232.35 GB) (Free:60.31 GB) NTFS
Drive e: (EOS_DIGITAL) (Removable) (Total:29.71 GB) (Free:20.04 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or
(Size: 232.9 GB) (Disk ID: FD771CB1)Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.3 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 29.7 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
==================== End Of Log ============================
