Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 02-07-2017 Gestart door gregs (Beheerder) op DESKTOP-Q2O3B6P (02-07-2017 19:06:55) Gestart vanaf C:\Users\gregs\Desktop\frst Geladen Profielen: gregs (Beschikbare Profielen: gregs & Administrator) Platform: Windows 10 Home Versie 1607 (X64) Taal: Nederlands (Nederland) Internet Explorer Versie 11 (Standaardbrowser: FF) Boot Modus: Normal Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.) (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.23\aaHMSvc.exe () C:\Program Files (x86)\Blackmagic Design\Blackmagic Desktop Video\DesktopVideoHelper.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe () C:\Windows\System32\PnkBstrA.exe (Windows (R) Win 7 DDK provider) C:\Windows\System32\AdminService.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe (M-Audio) C:\Program Files (x86)\M-Audio\Fast Track Ultra\AudioDevMon.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHostIntegrationAgent.exe (Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.08.15\AsusFanControlService.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe (Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe () C:\Windows\Temp\g7E69.tmp.exe (Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeHost.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe () C:\Program Files (x86)\Blackmagic Design\Blackmagic Desktop Video\BMDStreamingServer.exe (Blackmagic Design) C:\Program Files (x86)\Blackmagic Design\Blackmagic Desktop Video\CheckVersionPCI.exe (RME) C:\Windows\System32\firefaceusb.exe (RME) C:\Windows\System32\TotalMixFX.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Unified Intents AB) C:\Program Files (x86)\Unified Remote 3\RemoteServerWin.exe (nerds.de) C:\Program Files (x86)\nerds.de\LoopBe1\loopBeMon.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\seccenter.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\bdwtxag.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender Device Management\dmiface.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2017\odscanui.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.12990.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe (Tixati Software Inc.) C:\Program Files\tixati\tixati.exe (MPC-HC Team) C:\Program Files (x86)\K-Lite Codec Pack\MPC-HC64\mpc-hc64.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Register (gefilterd) ==================== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [Blackmagic Streaming Server] => C:\Program Files (x86)\Blackmagic Design\Blackmagic Desktop Video\BMDStreamingServer.exe [995840 2016-10-24] () HKLM\...\Run: [Blackmagic CheckVersion PCI] => C:\Program Files (x86)\Blackmagic Design\Blackmagic Desktop Video\CheckVersionPCI.exe [159743536 2016-10-24] (Blackmagic Design) HKLM\...\Run: [FirefaceUsbTray1] => C:\WINDOWS\system32\firefaceusb.exe [400368 2017-02-24] (RME) HKLM\...\Run: [FirefaceMixTray2] => C:\WINDOWS\system32\TotalMixFX.exe [23955544 2017-02-24] (RME) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-04-28] (Adobe Systems Incorporated) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-05-09] (Apple Inc.) HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] => C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2013-01-28] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [AO Link Server] => C:\Program Files (x86)\ASUS\AI Suite III\Mobo Connect\ALRun.exe -start HKLM-x32\...\Run: [Corsair Utility Engine] => C:\Program Files (x86)\Corsair\Corsair Utility Engine\CUE.exe [12447440 2016-08-23] (Corsair Components, Inc.) HKLM-x32\...\Run: [Blackmagic CheckVersion] => C:\Program Files (x86)\Blackmagic Design\Blackmagic Desktop Video\CheckVersion.exe HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation) HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-2296426734-4234570832-937735285-1004\...\Run: [Unified Remote V3] => C:\Program Files (x86)\Unified Remote 3\RemoteServerWin.exe [3155712 2017-01-30] (Unified Intents AB) HKU\S-1-5-21-2296426734-4234570832-937735285-1004\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_24_0_0_194_Plugin.exe [1269336 2017-02-04] (Adobe Systems Incorporated) ShellExecuteHooks: Geen Naam - {5F51FFFE-7463-4220-B711-E5B9ACB8EDFE} - C:\Windows\C_02iu47.dat [2001920 2017-07-02] (Micrasaft Carparation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LoopBe1 Monitor.lnk [2016-11-06] ShortcutTarget: LoopBe1 Monitor.lnk -> C:\Program Files (x86)\nerds.de\LoopBe1\loopBeMon.exe (nerds.de) Startup: C:\Users\gregs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE XTREME GAMING ENGINE.lnk [2017-01-28] ShortcutTarget: GIGABYTE XTREME GAMING ENGINE.lnk -> C:\Program Files (x86)\GIGABYTE\XTREME GAMING ENGINE\autorun.exe () BootExecute: autocheck autochk * bddel.exe GroupPolicy: Restrictie - Windows Defender <==== AANDACHT ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.) Hosts: Er zijn meer dan één item in Hosts. Zie Hosts deel van Addition.txt Tcpip\Parameters: [DhcpNameServer] 195.130.131.2 195.130.130.2 Tcpip\..\Interfaces\{15880416-58cc-44ff-b4f3-52bfcce0c4e8}: [DhcpNameServer] 195.130.131.2 195.130.130.2 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-2296426734-4234570832-937735285-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www-searching.com/?pid=s&s=H72zltpbl1BU,cf9d06eb-20aa-442d-9eda-925e057a7f54,&vp=ch&prd=set_ie HKU\S-1-5-21-2296426734-4234570832-937735285-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/nl-be/?ocid=iehp SearchScopes: HKU\S-1-5-21-2296426734-4234570832-937735285-1004 -> {F60FC7B7-D36E-49B1-8ADC-9DCDDE4903DD} URL = hxxp://www-searching.com/s.ashx?prd=opensearch&q={searchTerms}&s=H72zltpbl1BU,cf9d06eb-20aa-442d-9eda-925e057a7f54, BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-04-20] (Bitdefender) BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2017-04-20] (Bitdefender) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-07-02] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-07-02] (Oracle Corporation) Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\pmbxie.dll [2017-04-20] (Bitdefender) Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2017\Antispam32\pmbxie.dll [2017-04-20] (Bitdefender) FireFox: ======== FF DefaultProfile: k4eg9eig.default-1499000293534 FF ProfilePath: C:\Users\gregs\AppData\Roaming\Mozilla\Firefox\Profiles\k4eg9eig.default-1499000293534 [2017-07-02] FF Extension: (Belgium eID) - C:\Program Files (x86)\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be [2017-05-27] FF Extension: (Adblocker for Youtube™) - C:\Program Files (x86)\Mozilla Firefox\browser\features\{5C3FD6D1-9185-4195-B5E1-FAB622427F59} [2017-07-02] [ niet getekend] FF Extension: (TSearch) - C:\Program Files (x86)\Mozilla Firefox\browser\features\{D29DBC80-E8B5-4116-AB62-ECD8ED032A33} [2017-07-02] [ niet getekend] FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\antispam32\bdwteff FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2017\antispam32\bdwteff [2017-05-25] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext [2017-05-25] [ niet getekend] FF HKLM-x32\...\Firefox\Extensions: [belgiumeid@eid.belgium.be] - C:\Program Files (x86)\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\antispam32\bdwteff FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2017\bdtbext FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-02-04] () FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-02-04] () FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-07-02] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-07-02] (Oracle Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-04-01] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-04-01] (NVIDIA Corporation) FF Plugin-x32: @qq.com/QQlive -> C:\Program Files (x86)\Tencent\QQLive\10.0.126.0\npQQLive.dll [Geen bestand] FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems) Chrome: ======= CHR HKU\S-1-5-21-2296426734-4234570832-937735285-1004\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] - hxxps://clients2.google.com/service/update2/crx ==================== Services (gefilterd) ==================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-04-03] (Apple Inc.) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2015-09-17] () R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.23\aaHMSvc.exe [963536 2016-04-18] (ASUSTeK Computer Inc.) R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2016-03-07] () [Bestand niet getekend] R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.08.15\AsusFanControlService.exe [419288 2016-05-27] (ASUSTeK Computer Inc.) R2 AtherosSvc; C:\WINDOWS\system32\AdminService.exe [355760 2016-10-26] (Windows (R) Win 7 DDK provider) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1536520 2017-06-08] () R2 DevMgmtService; C:\Program Files\Bitdefender\Bitdefender Device Management\DevMgmtService.exe [104096 2017-05-18] (Bitdefender) S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1468608 2016-10-06] (Disc Soft Ltd) R2 dvhlp; C:\Program Files (x86)\Blackmagic Design\Blackmagic Desktop Video\DesktopVideoHelper.exe [26624 2016-10-24] () [Bestand niet getekend] S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [382504 2017-05-21] (EasyAntiCheat Ltd) R2 FastTrackUltraAudioDevMon; C:\Program Files (x86)\M-Audio\Fast Track Ultra\AudioDevMon.exe [1700584 2014-09-22] (M-Audio) R2 NIHostIntegrationAgent; C:\Program Files\Common Files\Native Instruments\Hardware\NIHostIntegrationAgent.exe [10091120 2017-03-09] (Native Instruments GmbH) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-04-01] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [427064 2017-04-01] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-11-27] (Electronic Arts) R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2180624 2016-11-27] (Electronic Arts) R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76152 2016-10-26] () R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2016-10-26] () R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1254736 2017-04-11] (Bitdefender) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2017\updatesrv.exe [218416 2017-04-20] (Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2017\vsserv.exe [1442896 2017-05-25] (Bitdefender) R2 vsservp; C:\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe [524872 2016-08-25] (Bitdefender) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-04-28] (Microsoft Corporation) R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [19192 2015-09-21] (Intel(R) Corporation) S2 mediatek_86; "C:\WINDOWS\TEMP\WS\mediatek_86.exe" [X] S2 QQLiveService; C:\Program Files (x86)\Tencent\QQLive\10.0.126.0\LiveService.dll [X] S4 SMUpd; C:\Program Files\Common Files\Noobzo\GNUpdate\smu.exe /service [X] <==== AANDACHT ===================== Drivers (gefilterd) ====================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2013-01-28] (ASUSTek Computer Inc.) R3 AndroidAFD; C:\Windows\SysWow64\drivers\AndroidAFDx64.sys [22192 2015-10-19] (ASUSTek Computer Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2015-09-17] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-24] () R0 avc3; C:\WINDOWS\System32\DRIVERS\avc3.sys [1612648 2017-04-19] (BitDefender) R3 avckf; C:\WINDOWS\System32\DRIVERS\avckf.sys [879600 2017-04-19] (BitDefender) S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23672 2016-03-14] (Bitdefender) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [128400 2016-06-24] (BitDefender LLC) R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender) R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [47840 2016-07-05] (Corsair) R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21728 2016-07-05] (Corsair) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.) R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-10-25] (Disc Soft Ltd) R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-10-25] (Disc Soft Ltd) R3 e1dexpress; C:\WINDOWS\system32\DRIVERS\e1d65x64.sys [559080 2016-10-25] (Intel Corporation) R3 firefaceu64; C:\WINDOWS\system32\drivers\fireface_usb_64.sys [123800 2017-02-24] (RME) S3 gbxavs; C:\WINDOWS\System32\Drivers\gbxavs.sys [357968 2011-07-07] (Native Instruments GmbH) S3 gbxusb_svc; C:\WINDOWS\System32\Drivers\gbxusb.sys [68688 2011-07-07] (Native Instruments GmbH) R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [182944 2016-10-29] (BitDefender LLC) R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2017-01-22] (REALiX(tm)) R0 Ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [305120 2017-03-15] (Bitdefender) S3 iLokDrvr; C:\WINDOWS\System32\drivers\iLokDrvr.sys [33504 2017-07-01] () R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [30224 2015-09-21] (Intel Corporation) S3 libusb0; C:\WINDOWS\system32\DRIVERS\libusb0.sys [52832 2014-01-04] (hxxp://libusb-win32.sourceforge.net) R3 LoopBeMidi1; C:\WINDOWS\system32\drivers\loopbe1.sys [13824 2011-04-09] (nerds.de) S3 MAUSBFASTTRACKULTRA; C:\WINDOWS\system32\DRIVERS\MAudioFastTrackUltra.sys [180456 2014-09-22] (M-Audio) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () S3 nikkbdmidi; C:\WINDOWS\System32\Drivers\nikkbdmidi.sys [349944 2015-09-04] (Native Instruments GmbH) S3 nikkbdusb; C:\WINDOWS\system32\DRIVERS\nikkbdusb.sys [101192 2015-09-04] (Native Instruments GmbH) R3 nikz2audio; C:\WINDOWS\System32\Drivers\nikz2audio.sys [384440 2015-08-29] (Native Instruments GmbH) R3 nikz2usb; C:\WINDOWS\system32\DRIVERS\nikz2usb.sys [102240 2015-08-29] (Native Instruments GmbH) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_e69a53b8ddde469c\nvlddmkm.sys [14841784 2017-04-03] (NVIDIA Corporation) R3 Qcamain10x64; C:\WINDOWS\System32\drivers\Qcamain10x64.sys [2336768 2016-07-16] (Qualcomm Atheros, Inc.) R3 SMUpdd; C:\Program Files\Common Files\Noobzo\GNUpdate\smw.sys [52992 2017-07-02] () <==== AANDACHT S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [520032 2016-06-22] (BitDefender S.R.L.) R3 uvhid; C:\WINDOWS\System32\drivers\uvhid.sys [27064 2017-01-30] (Windows (R) Win 7 DDK provider) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een Maand Aangemaakt bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2017-07-02 18:27 - 2017-07-02 18:27 - 00000993 _____ C:\Users\gregs\Downloads\fixlist.txt 2017-07-02 14:58 - 2017-07-02 14:58 - 00000000 ____D C:\Users\gregs\Desktop\Old Firefox Data 2017-07-02 14:45 - 2017-07-02 14:45 - 00027624 _____ C:\WINDOWS\system32\bddel.exe 2017-07-02 14:45 - 2017-07-02 14:45 - 00001864 _____ C:\WINDOWS\system32\bddel.dat 2017-07-02 14:30 - 2017-07-02 14:30 - 00000788 _____ C:\bdlog.txt 2017-07-02 14:05 - 2017-04-21 23:53 - 00029376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll 2017-07-02 14:05 - 2017-04-21 23:53 - 00018600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr100_clr0400.dll 2017-07-02 14:05 - 2017-04-21 23:50 - 00030912 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll 2017-07-02 14:05 - 2017-04-21 23:50 - 00018592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100_clr0400.dll 2017-07-02 14:05 - 2017-04-11 20:27 - 00690008 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll 2017-07-02 14:05 - 2017-03-15 20:15 - 00485576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll 2017-07-02 14:04 - 2017-07-02 14:04 - 00000000 ____D C:\Users\gregs\AppData\Temp 2017-07-02 14:04 - 2017-04-11 20:27 - 00993632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll 2017-07-02 14:04 - 2017-03-15 20:15 - 00987840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll 2017-07-02 14:02 - 2017-07-02 14:16 - 00003406 _____ C:\WINDOWS\System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C 2017-07-02 14:02 - 2017-07-02 14:02 - 00438918 _____ C:\ProgramData\cl.1498996745.bdinstall.bin 2017-07-02 14:02 - 2017-07-02 14:02 - 00056298 _____ C:\ProgramData\dm.1498996942.bdinstall.bin 2017-07-02 14:02 - 2017-07-02 14:02 - 00041244 _____ C:\ProgramData\dm.update.1498996958.bdinstall.bin 2017-07-02 14:02 - 2017-07-02 14:02 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml 2017-07-02 14:02 - 2017-07-02 14:02 - 00000000 ____D C:\ProgramData\Bitdefender Device Management 2017-07-02 14:00 - 2017-07-02 14:00 - 00002299 _____ C:\Users\Public\Desktop\Bitdefender 2017.lnk 2017-07-02 14:00 - 2017-07-02 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2017 2017-07-02 14:00 - 2017-07-02 14:00 - 00000000 ____D C:\ProgramData\BDLogging 2017-07-02 14:00 - 2016-03-14 22:04 - 00023672 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bdelam.sys 2017-07-02 14:00 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll 2017-07-02 13:59 - 2017-07-02 14:02 - 00000000 ____D C:\Users\gregs\AppData\Roaming\Bitdefender 2017-07-02 13:59 - 2017-04-19 07:19 - 01612648 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys 2017-07-02 13:59 - 2017-04-19 07:19 - 00879600 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avckf.sys 2017-07-02 13:59 - 2017-03-15 08:03 - 00305120 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\ignis.sys 2017-07-02 13:59 - 2015-12-04 19:27 - 00087912 _____ (BitDefender) C:\WINDOWS\system32\Drivers\bdvedisk.sys 2017-07-02 13:57 - 2017-07-02 13:57 - 00031105 _____ C:\ProgramData\agent.update.1498996639.bdinstall.bin 2017-07-02 13:56 - 2017-07-02 13:56 - 00021617 _____ C:\ProgramData\agent.uninstall.1498996562.bdinstall.bin 2017-07-02 13:26 - 2017-07-02 14:02 - 00000000 ____D C:\Program Files\Bitdefender 2017-07-02 13:26 - 2017-07-02 14:01 - 00000000 ____D C:\ProgramData\Bitdefender 2017-07-02 13:26 - 2017-07-02 13:26 - 00000000 ____D C:\Users\gregs\AppData\Roaming\QuickScan 2017-07-02 13:26 - 2016-10-29 09:54 - 00182944 ____N (BitDefender LLC) C:\WINDOWS\system32\Drivers\gzflt.sys 2017-07-02 13:26 - 2016-06-22 15:40 - 00520032 _____ (BitDefender S.R.L.) C:\WINDOWS\system32\Drivers\trufos.sys 2017-07-02 13:25 - 2017-07-02 13:26 - 00000000 ____D C:\Program Files\Common Files\Bitdefender 2017-07-02 13:24 - 2017-07-02 13:24 - 09915560 _____ C:\Users\gregs\Downloads\bitdefender_windows_8380e2bb-f5ce-41e4-923b-25b1ced4dc01.exe 2017-07-02 13:12 - 2017-07-02 19:06 - 00000000 ____D C:\Users\gregs\Desktop\frst 2017-07-02 13:03 - 2017-07-02 13:03 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\StardewValley 2017-07-02 13:03 - 2017-07-02 13:03 - 00000000 ____D C:\Users\Administrator\AppData\LocalLow\DreamSail Games 2017-07-02 13:02 - 2017-07-02 13:04 - 00000000 ____D C:\Users\Administrator\Documents\My Games 2017-07-02 13:02 - 2017-07-02 13:03 - 00000000 ____D C:\Users\Administrator\Documents\The Witcher 3 2017-07-02 13:02 - 2017-07-02 13:02 - 00000000 ____D C:\Users\Administrator\Documents\nbgi 2017-07-02 13:02 - 2017-07-02 13:02 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Sun 2017-07-02 13:02 - 2017-07-02 13:02 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Factorio 2017-07-02 13:02 - 2017-07-02 13:02 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Doublefine 2017-07-02 13:02 - 2017-07-02 13:02 - 00000000 ____D C:\Users\Administrator\AppData\LocalLow\Sun 2017-07-02 13:02 - 2017-07-02 13:02 - 00000000 ____D C:\Users\Administrator\AppData\LocalLow\David OReilly 2017-07-02 13:01 - 2017-07-02 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\Steam 2017-07-02 13:01 - 2017-07-02 13:01 - 00000000 ____D C:\Users\Administrator\AppData\Local\CEF 2017-07-02 12:59 - 2017-07-02 12:59 - 00003798 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 2017-07-02 12:58 - 2017-07-02 12:58 - 00000000 ____D C:\Users\Administrator\AppData\Local\NVIDIA Corporation 2017-07-02 12:57 - 2017-07-02 18:39 - 00000000 ____D C:\Program Files\Bitdefender Agent 2017-07-02 12:57 - 2017-07-02 13:06 - 00000000 ____D C:\Users\Administrator\AppData\Local\TotalMixFX 2017-07-02 12:57 - 2017-07-02 12:57 - 00049713 _____ C:\ProgramData\agent.1498993059.bdinstall.bin 2017-07-02 12:57 - 2017-07-02 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Skype 2017-07-02 12:57 - 2017-07-02 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Apple Computer 2017-07-02 12:57 - 2017-07-02 12:57 - 00000000 ____D C:\Users\Administrator\AppData\Local\Adobe 2017-07-02 12:57 - 2017-07-02 12:57 - 00000000 ____D C:\ProgramData\Bitdefender Agent 2017-07-02 12:56 - 2017-07-02 13:02 - 00000000 ____D C:\Users\Administrator\AppData\Local\ConnectedDevicesPlatform 2017-07-02 12:56 - 2017-07-02 12:56 - 00000262 __RSH C:\Users\Administrator\ntuser.pol 2017-07-02 12:56 - 2017-07-02 12:56 - 00000020 ___SH C:\Users\Administrator\ntuser.ini 2017-07-02 12:51 - 2017-07-02 12:51 - 09915560 _____ C:\Users\gregs\Downloads\bitdefender_windows_6379d9f2-9770-42a5-ba84-c8080c63e119.exe 2017-07-02 12:48 - 2017-07-02 12:48 - 09915560 _____ C:\Users\gregs\Downloads\bitdefender_windows_1b295913-ae10-4f66-aef5-3ccf0481971a.exe 2017-07-02 12:44 - 2017-07-02 12:45 - 09915560 _____ C:\Users\gregs\Downloads\bitdefender_windows_3b7b3a36-46cf-4fdd-928e-26b8e9e99de8.exe 2017-07-02 12:43 - 2017-07-02 12:43 - 03662426 _____ C:\Users\gregs\Downloads\bitdefender_9c6d75e4-f347-4f4b-8819-4bc03ab462d1.pkg 2017-07-02 12:36 - 2017-07-02 13:11 - 00137455 _____ C:\Users\gregs\Downloads\Addition.txt 2017-07-02 12:35 - 2017-07-02 19:06 - 00000000 ____D C:\FRST 2017-07-02 12:35 - 2017-07-02 13:11 - 00069648 _____ C:\Users\gregs\Downloads\FRST.txt 2017-07-02 12:31 - 2017-07-02 12:31 - 00000000 ____D C:\ProgramData\SearchModule 2017-07-02 12:22 - 2017-07-02 12:25 - 09915560 _____ C:\Users\gregs\Downloads\bitdefender_windows_fa50300e-342b-4ba5-8ec9-d8cd07e17a2e.exe 2017-07-02 10:46 - 2017-07-02 10:46 - 05103792 _____ (Enigma Software Group USA, LLC.) C:\Users\gregs\Downloads\SpyHunter-Installer.exe 2017-07-02 10:46 - 2017-07-02 10:46 - 00000000 _____ C:\autoexec.bat 2017-07-02 10:21 - 2017-07-02 10:21 - 00000000 ____D C:\Users\gregs\AppData\Local\AdvinstAnalytics 2017-07-02 10:19 - 2017-07-02 10:25 - 00000000 ___HD C:\448604c9611dfd3021725bdc366ab85e 2017-07-02 10:18 - 2017-07-02 10:19 - 00000000 ____D C:\Users\gregs\AppData\Roaming\xonnwbvroqx 2017-07-02 10:18 - 2017-07-02 10:19 - 00000000 ____D C:\Users\gregs\AppData\Roaming\mqgpc3bpb0y 2017-07-02 10:18 - 2017-07-02 10:18 - 00000262 __RSH C:\Users\gregs\ntuser.pol 2017-07-02 10:17 - 2017-07-02 10:19 - 00000000 ____D C:\Users\gregs\AppData\Local\TubeTime 2017-07-02 10:17 - 2017-07-02 10:17 - 00930816 _____ C:\Users\gregs\AppData\Local\test_db_cara.db 2017-07-02 10:17 - 2017-07-02 10:17 - 00187904 _____ C:\WINDOWS\rsrcs.dll 2017-07-02 10:17 - 2017-07-02 10:17 - 00004422 _____ C:\WINDOWS\System32\Tasks\SMW_UpdateTask_Time_343039393733373830342d3737555a416c503257344a41 2017-07-02 10:17 - 2017-07-02 10:17 - 00002505 _____ C:\Users\gregs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯视频.lnk 2017-07-02 10:17 - 2017-07-02 10:17 - 00000000 ____H C:\WINDOWS\system32\BIT642A.tmp 2017-07-02 10:17 - 2017-07-02 10:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\腾讯软件 2017-07-02 10:17 - 2017-07-02 10:17 - 00000000 ____D C:\Program Files\Common Files\Noobzo 2017-07-02 10:16 - 2017-07-02 14:13 - 00000000 ____D C:\ProgramData\WindowsVideoErrorReporting 2017-07-02 10:16 - 2017-07-02 10:18 - 01705984 _____ C:\Users\gregs\AppData\Local\po.db 2017-07-02 10:16 - 2017-07-02 10:18 - 00000004 _____ C:\ProgramData\_lg.3sap 2017-07-02 10:16 - 2017-07-02 10:18 - 00000000 ____D C:\Users\gregs\AppData\Roaming\uq5nareb00d 2017-07-02 10:16 - 2017-07-02 10:18 - 00000000 ____D C:\Users\gregs\AppData\Roaming\uhdvzeo4ic1 2017-07-02 10:16 - 2017-07-02 10:18 - 00000000 ____D C:\Users\gregs\AppData\Roaming\gzbmihdhkoo 2017-07-02 10:16 - 2017-07-02 10:16 - 00140800 _____ C:\Users\gregs\AppData\Local\installer.dat 2017-07-02 10:16 - 2017-07-02 10:16 - 00011568 _____ C:\Users\gregs\AppData\Local\InstallationConfiguration.xml 2017-07-02 10:16 - 2017-07-02 10:16 - 00000000 ____D C:\Users\gregs\AppData\Roaming\UCChannel 2017-07-02 10:16 - 2017-07-02 10:16 - 00000000 ____D C:\Users\gregs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TubeTime 2017-07-02 10:16 - 2017-07-02 01:40 - 02001920 ___SH (Micrasaft Carparation) C:\WINDOWS\C_02iu47.dat 2017-07-02 10:16 - 2017-06-08 03:59 - 00158920 _____ (Tencent) C:\WINDOWS\SysWOW64\MMInstaller.dll 2017-07-02 10:16 - 2017-01-12 21:49 - 02235392 _____ C:\WINDOWS\SysWOW64\cuda_tromp_75.dll 2017-07-02 10:16 - 2017-01-12 21:49 - 00045056 _____ C:\WINDOWS\SysWOW64\cpu_tromp_SSE2.dll 2017-07-02 10:16 - 2017-01-12 21:48 - 02235392 _____ C:\WINDOWS\SysWOW64\cuda_tromp.dll 2017-07-02 10:16 - 2017-01-12 21:48 - 00044032 _____ C:\WINDOWS\SysWOW64\cpu_tromp_AVX.dll 2017-07-02 10:16 - 2017-01-12 19:18 - 00986112 _____ C:\WINDOWS\SysWOW64\cuda_djezo.dll 2017-07-02 10:16 - 2016-09-05 15:51 - 00366016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\cudart64_80.dll 2017-07-02 10:16 - 2016-09-05 15:51 - 00297408 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\cudart32_80.dll 2017-07-02 10:16 - 2015-08-16 01:21 - 00360736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\cudart64_75.dll 2017-07-02 10:16 - 2015-08-16 01:21 - 00291632 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\cudart32_75.dll 2017-07-02 10:15 - 2017-07-02 10:18 - 00000000 ____D C:\Users\gregs\AppData\Roaming\eif1unkdth3 2017-07-02 10:15 - 2017-07-02 10:15 - 01761781 _____ C:\HEADERS 2017-07-02 10:15 - 2017-07-02 10:15 - 00000019 _____ C:\END 2017-07-01 18:57 - 2017-07-01 18:57 - 00000000 ____D C:\Users\gregs\AppData\Roaming\Io Interactive 2017-07-01 18:54 - 2017-07-01 18:54 - 00000000 ____D C:\Users\gregs\AppData\Local\IO Interactive 2017-07-01 17:20 - 2017-07-01 17:20 - 00000222 _____ C:\Users\gregs\Desktop\HITMAN.url 2017-07-01 16:54 - 2017-07-01 16:54 - 00015449 _____ C:\Users\gregs\Downloads\Mexico.mid 2017-07-01 10:53 - 2017-07-01 10:53 - 00002074 _____ C:\Users\Public\Desktop\iLok License Manager.lnk 2017-07-01 10:52 - 2017-07-01 10:52 - 102081890 _____ C:\Users\gregs\Downloads\LicenseSupportInstallerWin64(1).zip 2017-07-01 10:52 - 2017-07-01 10:52 - 00000000 ____D C:\Users\gregs\Downloads\LicenseSupportInstallerWin64(1) 2017-06-28 20:37 - 2017-06-28 20:37 - 00000000 ____D C:\Users\Public\Documents\Steam 2017-06-28 20:11 - 2017-06-28 20:11 - 00001219 _____ C:\Users\gregs\Desktop\Prey.lnk 2017-06-28 20:11 - 2017-06-28 20:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\by.xatab 2017-06-26 19:47 - 2017-06-26 19:47 - 00001875 _____ C:\Users\Public\Desktop\Little Nightmares.lnk 2017-06-23 08:05 - 2017-06-23 08:08 - 00000000 ____D C:\Users\gregs\AppData\Roaming\Apple Computer 2017-06-23 08:05 - 2017-06-23 08:05 - 00001822 _____ C:\Users\Public\Desktop\iTunes.lnk 2017-06-23 08:05 - 2017-06-23 08:05 - 00000000 ____D C:\Users\gregs\AppData\Local\Apple Computer 2017-06-23 08:05 - 2017-06-23 08:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2017-06-23 08:05 - 2017-06-23 08:05 - 00000000 ____D C:\ProgramData\Apple Computer 2017-06-23 08:05 - 2017-06-23 08:05 - 00000000 ____D C:\Program Files\iTunes 2017-06-23 08:05 - 2017-06-23 08:05 - 00000000 ____D C:\Program Files\iPod 2017-06-23 08:04 - 2017-06-23 08:04 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2017-06-23 08:04 - 2017-06-23 08:04 - 00000000 ____D C:\Users\gregs\AppData\Local\Apple 2017-06-23 08:04 - 2017-06-23 08:04 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2017-06-23 08:03 - 2017-06-23 08:04 - 00000000 ____D C:\Program Files\Common Files\Apple 2017-06-23 08:03 - 2017-06-23 08:04 - 00000000 ____D C:\Program Files\Bonjour 2017-06-23 08:03 - 2017-06-23 08:04 - 00000000 ____D C:\Program Files (x86)\Bonjour 2017-06-23 08:01 - 2017-06-23 08:03 - 259195720 _____ (Apple Inc.) C:\Users\gregs\Downloads\iTunes64Setup.exe 2017-06-23 08:00 - 2017-06-23 08:00 - 00002256 _____ C:\Users\Public\Desktop\4Media iPad to PC Transfer.lnk 2017-06-23 08:00 - 2017-06-23 08:00 - 00000000 ____D C:\Users\gregs\Documents\4Media 2017-06-23 08:00 - 2017-06-23 08:00 - 00000000 ____D C:\Users\gregs\AppData\Roaming\4Media 2017-06-23 08:00 - 2017-06-23 08:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4Media 2017-06-23 08:00 - 2017-06-23 08:00 - 00000000 ____D C:\ProgramData\4Media 2017-06-23 08:00 - 2017-06-23 08:00 - 00000000 ____D C:\Program Files (x86)\4Media 2017-06-23 07:54 - 2017-06-23 07:57 - 76500808 _____ C:\Users\gregs\Downloads\m-ipad-to-pc-transfer-cnet.exe 2017-06-22 22:10 - 2017-06-22 22:10 - 00000872 _____ C:\Users\gregs\Desktop\Tony Hawk's Underground 2.lnk 2017-06-22 22:10 - 2017-06-22 22:10 - 00000000 ____D C:\Users\gregs\AppData\Roaming\Tony Hawk's Underground 2 2017-06-22 19:39 - 2017-06-22 19:39 - 00000000 ____D C:\WINDOWS\Panther 2017-06-18 21:20 - 2017-06-18 21:20 - 00000000 ____D C:\Users\gregs\AppData\Roaming\Doublefine 2017-06-17 17:33 - 2017-06-17 17:33 - 00553628 _____ C:\WINDOWS\Minidump\061717-7421-01.dmp 2017-06-14 21:58 - 2017-06-14 21:58 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2 2017-06-14 18:54 - 2017-06-03 12:50 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2017-06-14 18:54 - 2017-06-03 12:50 - 00192856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2017-06-14 18:54 - 2017-06-03 12:16 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2017-06-14 18:54 - 2017-06-03 12:14 - 01564512 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2017-06-14 18:54 - 2017-06-03 12:14 - 01214816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-06-14 18:54 - 2017-06-03 12:14 - 00629088 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2017-06-14 18:54 - 2017-06-03 12:14 - 00544096 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2017-06-14 18:54 - 2017-06-03 12:14 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-06-14 18:54 - 2017-06-03 12:14 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2017-06-14 18:54 - 2017-06-03 12:14 - 00334176 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2017-06-14 18:54 - 2017-06-03 12:14 - 00233824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2017-06-14 18:54 - 2017-06-03 12:14 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2017-06-14 18:54 - 2017-06-03 12:14 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll 2017-06-14 18:54 - 2017-06-03 12:14 - 00096608 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2017-06-14 18:54 - 2017-06-03 12:14 - 00034648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2017-06-14 18:54 - 2017-06-03 12:11 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2017-06-14 18:54 - 2017-06-03 12:11 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2017-06-14 18:54 - 2017-06-03 12:09 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-06-14 18:54 - 2017-06-03 12:08 - 07783256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-06-14 18:54 - 2017-06-03 12:06 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2017-06-14 18:54 - 2017-06-03 12:01 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2017-06-14 18:54 - 2017-06-03 11:59 - 01181024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2017-06-14 18:54 - 2017-06-03 11:59 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll 2017-06-14 18:54 - 2017-06-03 11:59 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2017-06-14 18:54 - 2017-06-03 11:58 - 00340832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-06-14 18:54 - 2017-06-03 11:55 - 00780640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2017-06-14 18:54 - 2017-06-03 11:54 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2017-06-14 18:54 - 2017-06-03 11:53 - 00404824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-06-14 18:54 - 2017-06-03 11:52 - 01021784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll 2017-06-14 18:54 - 2017-06-03 11:52 - 00607072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2017-06-14 18:54 - 2017-06-03 11:52 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2017-06-14 18:54 - 2017-06-03 11:51 - 02187104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-06-14 18:54 - 2017-06-03 11:51 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-06-14 18:54 - 2017-06-03 11:50 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2017-06-14 18:54 - 2017-06-03 11:50 - 00381792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2017-06-14 18:54 - 2017-06-03 11:49 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-06-14 18:54 - 2017-06-03 11:49 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-06-14 18:54 - 2017-06-03 11:49 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2017-06-14 18:54 - 2017-06-03 11:48 - 01112416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2017-06-14 18:54 - 2017-06-03 11:48 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2017-06-14 18:54 - 2017-06-03 11:48 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2017-06-14 18:54 - 2017-06-03 11:48 - 00857952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2017-06-14 18:54 - 2017-06-03 11:48 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2017-06-14 18:54 - 2017-06-03 11:45 - 22220864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-06-14 18:54 - 2017-06-03 11:44 - 01600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-06-14 18:54 - 2017-06-03 11:44 - 01412640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2017-06-14 18:54 - 2017-06-03 11:44 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2017-06-14 18:54 - 2017-06-03 11:40 - 01566552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-06-14 18:54 - 2017-06-03 11:40 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-06-14 18:54 - 2017-06-03 11:39 - 05686272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2017-06-14 18:54 - 2017-06-03 11:39 - 02532192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2017-06-14 18:54 - 2017-06-03 11:39 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-06-14 18:54 - 2017-06-03 11:33 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll 2017-06-14 18:54 - 2017-06-03 11:32 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2017-06-14 18:54 - 2017-06-03 11:31 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll 2017-06-14 18:54 - 2017-06-03 11:31 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2017-06-14 18:54 - 2017-06-03 11:28 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll 2017-06-14 18:54 - 2017-06-03 11:28 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll 2017-06-14 18:54 - 2017-06-03 11:26 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2017-06-14 18:54 - 2017-06-03 11:26 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBrokerUI.dll 2017-06-14 18:54 - 2017-06-03 11:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2017-06-14 18:54 - 2017-06-03 11:22 - 07217152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-06-14 18:54 - 2017-06-03 11:22 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll 2017-06-14 18:54 - 2017-06-03 11:22 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcorehc.dll 2017-06-14 18:54 - 2017-06-03 11:22 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll 2017-06-14 18:54 - 2017-06-03 11:20 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2017-06-14 18:54 - 2017-06-03 11:19 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe 2017-06-14 18:54 - 2017-06-03 11:18 - 22569984 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-06-14 18:54 - 2017-06-03 11:16 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2017-06-14 18:54 - 2017-06-03 11:16 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-06-14 18:54 - 2017-06-03 11:16 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2017-06-14 18:54 - 2017-06-03 11:15 - 19414016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-06-14 18:54 - 2017-06-03 11:15 - 18364928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-06-14 18:54 - 2017-06-03 11:15 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-06-14 18:54 - 2017-06-03 11:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2017-06-14 18:54 - 2017-06-03 11:15 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-06-14 18:54 - 2017-06-03 11:14 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2017-06-14 18:54 - 2017-06-03 11:14 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2017-06-14 18:54 - 2017-06-03 11:14 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2017-06-14 18:54 - 2017-06-03 11:14 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-06-14 18:54 - 2017-06-03 11:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdProxy.dll 2017-06-14 18:54 - 2017-06-03 11:11 - 00353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2017-06-14 18:54 - 2017-06-03 11:10 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll 2017-06-14 18:54 - 2017-06-03 11:10 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll 2017-06-14 18:54 - 2017-06-03 11:10 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll 2017-06-14 18:54 - 2017-06-03 11:09 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2017-06-14 18:54 - 2017-06-03 11:09 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll 2017-06-14 18:54 - 2017-06-03 11:09 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll 2017-06-14 18:54 - 2017-06-03 11:08 - 12187648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2017-06-14 18:54 - 2017-06-03 11:08 - 02643968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2017-06-14 18:54 - 2017-06-03 11:08 - 01221120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll 2017-06-14 18:54 - 2017-06-03 11:08 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-06-14 18:54 - 2017-06-03 11:08 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2017-06-14 18:54 - 2017-06-03 11:08 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-06-14 18:54 - 2017-06-03 11:07 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2017-06-14 18:54 - 2017-06-03 11:07 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll 2017-06-14 18:54 - 2017-06-03 11:07 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\HNetCfgClient.dll 2017-06-14 18:54 - 2017-06-03 11:06 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2017-06-14 18:54 - 2017-06-03 11:06 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2017-06-14 18:54 - 2017-06-03 11:05 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2017-06-14 18:54 - 2017-06-03 11:05 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetcfg.dll 2017-06-14 18:54 - 2017-06-03 11:04 - 06042624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-06-14 18:54 - 2017-06-03 11:04 - 02006528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2017-06-14 18:54 - 2017-06-03 11:04 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2017-06-14 18:54 - 2017-06-03 11:03 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2017-06-14 18:54 - 2017-06-03 11:03 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-06-14 18:54 - 2017-06-03 11:02 - 02997760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-06-14 18:54 - 2017-06-03 11:01 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll 2017-06-14 18:54 - 2017-06-03 11:00 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-06-14 18:54 - 2017-06-03 10:58 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll 2017-06-14 18:54 - 2017-06-03 10:56 - 13091840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-06-14 18:54 - 2017-06-03 10:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll 2017-06-14 18:54 - 2017-06-03 10:53 - 08125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-06-14 18:54 - 2017-06-03 10:52 - 03403264 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2017-06-14 18:54 - 2017-06-03 10:52 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2017-06-14 18:54 - 2017-06-03 10:52 - 00975872 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe 2017-06-14 18:54 - 2017-06-03 10:52 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll 2017-06-14 18:54 - 2017-06-03 10:51 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe 2017-06-14 18:54 - 2017-06-03 10:51 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2017-06-14 18:54 - 2017-06-03 10:50 - 04744704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-06-14 18:54 - 2017-06-03 10:50 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2017-06-14 18:54 - 2017-06-03 10:49 - 03615744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-06-14 18:54 - 2017-06-03 10:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2017-06-14 18:54 - 2017-06-03 10:49 - 02475520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2017-06-14 18:54 - 2017-06-03 10:49 - 02318848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-06-14 18:54 - 2017-06-03 10:49 - 01845248 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2017-06-14 18:54 - 2017-06-03 10:49 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-06-14 18:54 - 2017-06-03 10:49 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2017-06-14 18:54 - 2017-06-03 10:49 - 00351744 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll 2017-06-14 18:54 - 2017-06-03 10:48 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-06-14 18:54 - 2017-06-03 10:48 - 01131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2017-06-14 18:54 - 2017-06-03 10:48 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2017-06-14 18:54 - 2017-06-03 10:48 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-06-14 18:54 - 2017-06-03 10:46 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-06-14 18:54 - 2017-06-03 10:40 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll 2017-06-14 18:54 - 2017-06-03 08:08 - 00080078 _____ C:\WINDOWS\system32\normidna.nls 2017-06-14 18:54 - 2017-05-25 07:56 - 00038752 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe 2017-06-14 18:54 - 2017-03-04 08:22 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-06-14 18:54 - 2017-03-04 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2017-06-14 18:54 - 2017-03-04 08:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll 2017-06-14 18:54 - 2017-03-04 08:16 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll 2017-06-14 18:54 - 2016-09-07 06:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll 2017-06-13 20:58 - 2017-06-13 20:58 - 00035069 _____ C:\Users\gregs\Downloads\the-third-man-english-yify-54231.zip 2017-06-11 12:19 - 2017-06-11 12:19 - 00000000 __HDC C:\ProgramData\{992D615F-F386-4F33-BBB7-37B6DAD18413} 2017-06-11 12:18 - 2017-06-11 12:18 - 00001167 _____ C:\Users\Public\Desktop\Controller Editor.lnk 2017-06-11 12:18 - 2017-06-11 12:18 - 00001097 _____ C:\Users\Public\Desktop\Maschine 2.lnk 2017-06-11 12:18 - 2017-06-11 12:18 - 00000000 __HDC C:\ProgramData\{B49C92CB-1A73-4A41-A84C-5091582E7AA8} 2017-06-11 12:18 - 2017-06-11 12:18 - 00000000 __HDC C:\ProgramData\{8EFC8AA0-E84B-4411-A092-D7C967C4194A} 2017-06-11 12:18 - 2017-06-11 12:18 - 00000000 __HDC C:\ProgramData\{8DB01EBA-372E-4223-9BC2-5FA5C1D27D2D} 2017-06-11 12:15 - 2017-06-11 12:15 - 00000000 __HDC C:\ProgramData\{EB48B20D-290B-4639-B2DC-3530B250BA92} 2017-06-11 12:15 - 2017-06-11 12:15 - 00000000 __HDC C:\ProgramData\{998FE7B9-57BF-4E55-8B09-95CA25685C07} 2017-06-11 12:14 - 2017-06-11 12:14 - 00000000 __HDC C:\ProgramData\{F5EDF9D3-E8DD-4F8E-8BD2-4BC06701CEA0} 2017-06-11 12:13 - 2017-06-11 12:13 - 00001127 _____ C:\Users\Public\Desktop\Native Access.lnk 2017-06-08 22:21 - 2017-06-08 22:21 - 00000000 ____D C:\Users\gregs\AppData\Roaming\UFFMod 2017-06-08 21:09 - 2017-06-08 21:09 - 00466456 _____ (Creative Labs) C:\WINDOWS\system32\wrap_oal.dll 2017-06-08 21:09 - 2017-06-08 21:09 - 00444952 _____ (Creative Labs) C:\WINDOWS\SysWOW64\wrap_oal.dll 2017-06-08 21:09 - 2017-06-08 21:09 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\system32\OpenAL32.dll 2017-06-08 21:09 - 2017-06-08 21:09 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\WINDOWS\SysWOW64\OpenAL32.dll 2017-06-08 21:09 - 2017-06-08 21:09 - 00000000 ____D C:\Program Files (x86)\OpenAL 2017-06-08 21:04 - 2017-07-01 10:53 - 00033504 _____ C:\WINDOWS\system32\Drivers\iLokDrvr.sys 2017-06-08 21:04 - 2017-06-08 21:04 - 01490656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01007.dll 2017-06-07 20:07 - 2017-06-10 18:52 - 00000000 ____D C:\Users\gregs\AppData\Roaming\TS3Client 2017-06-07 20:07 - 2017-06-07 20:07 - 00001008 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2017-06-07 20:07 - 2017-06-07 20:07 - 00000970 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk 2017-06-07 20:07 - 2017-06-07 20:07 - 00000000 ____D C:\Users\gregs\.TeamSpeak 3 2017-06-07 20:07 - 2017-06-07 20:07 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client 2017-06-07 20:06 - 2017-06-07 20:06 - 77604984 _____ (TeamSpeak Systems GmbH) C:\Users\gregs\Downloads\TeamSpeak3-Client-win64-3.1.4.exe 2017-06-05 21:48 - 2017-06-05 21:48 - 00008560 _____ C:\Users\gregs\Downloads\twin.peaks.s01.e03.part.3.(2017).eng.1cd.(6989263).zip 2017-06-05 10:54 - 2017-06-05 10:59 - 00000000 ____D C:\Users\gregs\AppData\LocalLow\Daybreak Game Company 2017-06-05 10:54 - 2017-06-05 10:54 - 00000000 ____D C:\Users\gregs\AppData\Local\SCE 2017-06-05 10:54 - 2017-06-05 10:54 - 00000000 ____D C:\Users\gregs\AppData\Local\Daybreak Game Company 2017-06-05 00:37 - 2017-06-05 00:37 - 00000222 _____ C:\Users\gregs\Desktop\PlanetSide 2.url 2017-06-03 12:40 - 2017-06-03 12:40 - 00000000 ____D C:\Users\gregs\AppData\Local\Apps\2.0 ==================== Een Maand Gewijzigd bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2017-07-02 19:05 - 2016-10-30 10:44 - 00000000 ____D C:\Users\gregs\AppData\Roaming\tixati 2017-07-02 18:24 - 2016-11-19 00:18 - 00000000 ____D C:\Users\gregs\AppData\LocalLow\Mozilla 2017-07-02 16:44 - 2016-11-19 21:29 - 00000000 ____D C:\ProgramData\Oracle 2017-07-02 15:35 - 2016-11-06 00:24 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-07-02 14:53 - 2016-11-19 21:29 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2017-07-02 14:53 - 2016-11-19 21:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2017-07-02 14:53 - 2016-11-19 21:28 - 00000000 ____D C:\Program Files (x86)\Java 2017-07-02 14:45 - 2016-07-16 08:04 - 00000000 ____D C:\Program Files\ExamWeb 2017-07-02 14:35 - 2016-10-25 07:56 - 03558152 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-07-02 14:35 - 2016-07-17 00:15 - 01295924 _____ C:\WINDOWS\system32\perfh013.dat 2017-07-02 14:35 - 2016-07-17 00:15 - 00327386 _____ C:\WINDOWS\system32\perfc013.dat 2017-07-02 14:35 - 2016-07-16 08:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM 2017-07-02 14:31 - 2016-11-06 00:35 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-07-02 14:31 - 2016-11-06 00:25 - 00000000 ____D C:\ProgramData\NVIDIA 2017-07-02 14:30 - 2016-07-16 08:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI 2017-07-02 14:13 - 2016-07-16 08:04 - 00000000 ____D C:\Program Files\ShareakGuePass 2017-07-02 14:07 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-07-02 14:02 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF 2017-07-02 14:01 - 2016-11-06 00:27 - 00000000 ____D C:\Users\Nano S Greg 2017-07-02 13:30 - 2016-11-06 00:27 - 00000000 ____D C:\Users\Administrator 2017-07-02 13:12 - 2016-10-25 20:57 - 00001410 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2017-07-02 13:12 - 2016-10-25 20:57 - 00001398 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2017-07-02 13:03 - 2016-10-25 07:51 - 00000000 ____D C:\Program Files (x86)\Steam 2017-07-02 13:01 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-07-02 12:58 - 2016-10-27 18:51 - 00000000 ____D C:\Users\Administrator\AppData\Local\Packages 2017-07-02 12:57 - 2016-10-27 18:54 - 00002452 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-07-02 12:57 - 2016-10-27 18:54 - 00000000 ___RD C:\Users\Administrator\OneDrive 2017-07-02 12:56 - 2016-10-25 07:44 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-07-02 12:32 - 2017-05-20 08:50 - 00000000 ____D C:\ProgramData\Unified Remote 2017-07-02 11:05 - 2016-11-06 00:27 - 00000000 ____D C:\Users\gregs 2017-07-02 10:19 - 2016-10-27 19:02 - 00000000 ____D C:\Users\gregs\AppData\Local\VirtualStore 2017-07-02 10:18 - 2016-11-12 18:37 - 00000000 ____D C:\Users\gregs\AppData\Local\CrashDumps 2017-07-02 10:16 - 2017-01-14 22:14 - 00000262 __RSH C:\ProgramData\ntuser.pol 2017-07-02 10:16 - 2016-10-25 08:01 - 00000000 ____D C:\ProgramData\Package Cache 2017-07-02 10:16 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2017-07-02 09:44 - 2017-02-04 19:58 - 00000000 ____D C:\Users\gregs\AppData\Local\Adobe 2017-07-02 00:12 - 2017-01-21 23:29 - 00000000 ____D C:\Users\gregs\AppData\Roaming\Audacity 2017-07-02 00:12 - 2016-10-30 20:22 - 00000000 ____D C:\Users\gregs\AppData\Roaming\vlc 2017-07-01 22:17 - 2017-01-21 18:42 - 00000000 ____D C:\ProgramData\ValhallaShimmer 2017-07-01 12:38 - 2017-01-21 18:42 - 00000000 ____D C:\ProgramData\ValhallaRoom 2017-07-01 12:29 - 2016-12-31 12:24 - 00000000 ____D C:\ProgramData\boost_interprocess 2017-07-01 11:08 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps 2017-07-01 10:54 - 2016-11-18 21:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-07-01 10:54 - 2016-10-25 20:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-07-01 10:53 - 2017-01-17 20:02 - 00000000 ____D C:\Program Files (x86)\iLok License Manager 2017-07-01 10:53 - 2017-01-14 20:15 - 00002086 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iLok License Manager.lnk 2017-07-01 10:53 - 2016-10-25 07:54 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2017-07-01 10:49 - 2017-01-21 18:42 - 00000000 ____D C:\ProgramData\ValhallaVintageVerb 2017-06-28 20:24 - 2017-02-03 20:02 - 00000000 ____D C:\WINDOWS\SysWOW64\directx 2017-06-28 20:08 - 2016-10-26 19:04 - 00000000 ____D C:\Games 2017-06-23 08:04 - 2017-01-14 20:14 - 00000000 ____D C:\ProgramData\Apple 2017-06-22 19:43 - 2016-12-13 19:54 - 00003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-06-22 19:43 - 2016-10-27 19:03 - 00002428 _____ C:\Users\gregs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-06-22 19:43 - 2016-10-27 19:03 - 00000000 ___RD C:\Users\gregs\OneDrive 2017-06-21 08:03 - 2017-01-18 20:46 - 00005632 _____ C:\Users\gregs\PaceKeyChain 2017-06-19 21:46 - 2016-11-25 21:39 - 00000000 ____D C:\Users\gregs\Documents\DuckGame 2017-06-17 17:33 - 2017-04-14 08:11 - 00000000 ____D C:\WINDOWS\Minidump 2017-06-15 19:34 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache 2017-06-15 18:25 - 2016-11-06 00:24 - 04863376 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-06-14 21:58 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-06-14 21:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-06-14 21:58 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-06-14 21:51 - 2016-10-30 11:37 - 00000000 ____D C:\Users\gregs\AppData\Local\Battle.net 2017-06-14 18:59 - 2016-10-25 19:31 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-06-14 18:58 - 2016-10-25 19:31 - 133627792 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-06-14 18:41 - 2016-10-25 19:53 - 00000000 ____D C:\Program Files (x86)\Battle.net 2017-06-11 19:23 - 2017-04-08 11:32 - 00722472 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys 2017-06-11 12:19 - 2017-04-21 20:20 - 00001087 _____ C:\Users\Public\Desktop\Kontakt 5.lnk 2017-06-11 12:19 - 2016-10-25 21:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments 2017-06-11 12:19 - 2016-10-25 21:05 - 00000000 ____D C:\Program Files\Native Instruments 2017-06-11 12:18 - 2016-12-31 12:18 - 00000000 ____D C:\Program Files\Common Files\Native Instruments 2017-06-10 22:43 - 2016-04-30 01:54 - 00000000 ____D C:\Program Files (x86)\Overwatch 2017-06-08 20:35 - 2017-03-16 21:51 - 00000000 ____D C:\Users\gregs\AppData\Local\sportsfriends 2017-06-03 08:36 - 2016-07-16 13:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-06-03 08:36 - 2016-07-16 13:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl ==================== Bestanden in de root van sommige mappen ======= 2017-07-02 10:16 - 2017-07-02 10:16 - 0011568 _____ () C:\Users\gregs\AppData\Local\InstallationConfiguration.xml 2017-07-02 10:16 - 2017-07-02 10:16 - 0140800 _____ () C:\Users\gregs\AppData\Local\installer.dat 2017-07-02 10:16 - 2017-07-02 10:18 - 1705984 _____ () C:\Users\gregs\AppData\Local\po.db 2017-02-02 20:24 - 2017-02-02 20:24 - 0005005 _____ () C:\Users\gregs\AppData\Local\soulseek-client.dat.1486059867090 2017-02-10 19:35 - 2017-02-10 19:35 - 0005005 _____ () C:\Users\gregs\AppData\Local\soulseek-client.dat.1486748112309 2017-07-02 10:17 - 2017-07-02 10:17 - 0930816 _____ () C:\Users\gregs\AppData\Local\test_db_cara.db 2017-07-02 12:57 - 2017-07-02 12:57 - 0049713 _____ () C:\ProgramData\agent.1498993059.bdinstall.bin 2017-07-02 13:56 - 2017-07-02 13:56 - 0021617 _____ () C:\ProgramData\agent.uninstall.1498996562.bdinstall.bin 2017-07-02 13:57 - 2017-07-02 13:57 - 0031105 _____ () C:\ProgramData\agent.update.1498996639.bdinstall.bin 2017-07-02 14:02 - 2017-07-02 14:02 - 0438918 _____ () C:\ProgramData\cl.1498996745.bdinstall.bin 2017-07-02 14:02 - 2017-07-02 14:02 - 0056298 _____ () C:\ProgramData\dm.1498996942.bdinstall.bin 2017-07-02 14:02 - 2017-07-02 14:02 - 0041244 _____ () C:\ProgramData\dm.update.1498996958.bdinstall.bin 2017-03-25 18:43 - 2017-03-25 18:43 - 0000134 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc 2016-11-11 16:55 - 2016-11-11 16:55 - 0000016 _____ () C:\ProgramData\mntemp 2017-07-02 10:16 - 2017-07-02 10:18 - 0000004 _____ () C:\ProgramData\_lg.3sap Sommige bestanden in TEMP: ==================== 2017-07-02 10:16 - 2017-07-02 10:16 - 4015032 _____ (Easeware ) C:\Users\gregs\AppData\Local\Temp\5361.tmp.exe 2017-07-02 10:16 - 2017-07-02 10:18 - 0355840 _____ () C:\Users\gregs\AppData\Local\Temp\AppHelperV2.exe 2017-07-02 10:15 - 2017-07-02 10:15 - 1167787 _____ ( ) C:\Users\gregs\AppData\Local\Temp\avboost.exe 2017-07-02 10:16 - 2017-07-02 10:16 - 0609127 _____ (3G3WB510zBRxihjMRunR ) C:\Users\gregs\AppData\Local\Temp\browmodule.exe 2017-07-02 10:15 - 2017-07-02 10:15 - 1761781 _____ () C:\Users\gregs\AppData\Local\Temp\FullVersion.exe 2017-07-02 10:16 - 2017-07-02 10:16 - 0694991 _____ (VideoBox ) C:\Users\gregs\AppData\Local\Temp\ivbs.exe 2017-07-02 14:49 - 2017-07-02 14:49 - 0739904 _____ (Oracle Corporation) C:\Users\gregs\AppData\Local\Temp\jre-8u131-windows-au.exe 2017-07-02 10:16 - 2017-07-02 10:16 - 0328160 _____ (WeMonetize ) C:\Users\gregs\AppData\Local\Temp\K8GXO90.exe 2016-10-25 08:02 - 2016-12-29 14:43 - 0860776 _____ (NVIDIA Corporation) C:\Users\gregs\AppData\Local\Temp\nvSCPAPI64.dll 2016-11-06 11:04 - 2016-12-29 14:43 - 0351680 _____ (NVIDIA Corporation) C:\Users\gregs\AppData\Local\Temp\nvStInst.exe 2017-07-02 10:16 - 2017-07-02 10:16 - 0386600 _____ ( ) C:\Users\gregs\AppData\Local\Temp\Setup.exe 2017-07-02 10:24 - 2017-07-02 10:24 - 0053760 _____ (W6) C:\Users\gregs\AppData\Local\Temp\SPM7X5358AEN.exe 2017-07-02 10:16 - 2017-07-02 10:16 - 1199825 _____ () C:\Users\gregs\AppData\Local\Temp\unins000.exe 2017-05-28 09:36 - 2017-05-28 09:36 - 30950664 _____ () C:\Users\gregs\AppData\Local\Temp\vlc-2.2.6-win32.exe 2017-07-02 10:16 - 2017-07-02 10:16 - 4611795 _____ ( ) C:\Users\gregs\AppData\Local\Temp\Yeadesktop.exe 2017-07-02 10:16 - 2017-07-02 10:16 - 2582103 _____ () C:\Users\gregs\AppData\Local\Temp\ytab_m_1_big.exe ==================== Bamital & volsnap ====================== (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) C:\WINDOWS\system32\winlogon.exe => Bestand is getekend C:\WINDOWS\system32\wininit.exe => Bestand is getekend C:\WINDOWS\explorer.exe => Bestand is getekend C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend C:\WINDOWS\system32\svchost.exe => Bestand is getekend C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend C:\WINDOWS\system32\services.exe => Bestand is getekend C:\WINDOWS\system32\User32.dll => Bestand is getekend C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend C:\WINDOWS\system32\userinit.exe => Bestand is getekend C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend C:\WINDOWS\system32\rpcss.dll => Bestand is getekend C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend LastRegBack: 2017-06-28 21:45 ==================== Eind van FRST.txt ============================