[Axel Varenhorst]

Hey guys,

 

there already has been a blog about this virus but because I am not allowed to respond on this blog somehow, I start this again.

After accidentally downloading Hola.com strange things were happening on my computer, my firewall give me continue notifications about some spyware, there were things downloaded on my computer and sometimes my laptop didnt start anymore

 

I unistalled hola.com, YAC and eAHPeNhIUJ, the last one is the big problem; it makes you use this one instead of google chrome. Thereby, it's not easy to uninstall it completely. and that's why I'm asking you for tips;

It seems that every time when I restart my laptop (after I uninstalled the virus eAHPeNhIUJ), this virus eAHPeNhIUJ is again installed on my laptop.

I already reported it at the (paid) firewall/spyscanner etc. software I'm using (KPN Veilig) but in their answer so far, they used this blogsite as reference; they don't know that much about this virus so far I guess

I guess that this virus give a task that when I restart my laptop, the virus will install itself again.

 

Can anyone give me tips about how to stop this, if I'm right with my assumption and/or that they have the same problem?

 

APV

Edited by Axel Varenhorst, 20 April 2016 - 01:42 PM.

[Advertisements]

Hi first thing to do is take a look at the system

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Select additions at the bottom
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please attach both logs generated.

[Essexboy]

Hi first thing to do is take a look at the system

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Select additions at the bottom
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please attach both logs generated.

[Axel Varenhorst]

i received some information but i don't understand it at all

Edited by Axel Varenhorst, 21 April 2016 - 03:59 AM.

[Essexboy]

Could you post the two logs that were generated by FRST as I will use those to create a fix for you

[Axel Varenhorst]

they are partly in Dutch...

 

Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie:18-04-2016

Gestart door Gebruiker (Beheerder) op LAPTOP-S32169KS (21-04-2016 08:24:34)

Gestart vanaf C:\Users\Gebruiker\Downloads

Geladen Profielen: Gebruiker (Beschikbare Profielen: Gebruiker)

Platform: Windows 10 Home Versie 1511 (X64) Taal: Nederlands (Nederland)

Internet Explorer Versie 11 (Standaardbrowser: Chrome)

Boot Modus: Normal

Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processen (gefilterd) =================

 

(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)

 

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Winzipper Pvt Ltd.) C:\Program Files (x86)\WinZipper\winzipersvc.exe

(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(F-Secure Corporation) C:\Program Files (x86)\KPN Veilig\fshoster32.exe

(F-Secure Corporation) C:\Program Files (x86)\KPN Veilig\apps\CCF_Reputation\fsorsp.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe

(Lenovo) C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe

() C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

() C:\Program Files\update\UpdateAgent.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(WFini LIMITED) C:\ProgramData\WwinpW\WFini.exe

(F-Secure Corporation) C:\Program Files (x86)\KPN Veilig\apps\ComputerSecurity\Anti-Virus\fsgk32.exe

(F-Secure Corporation) C:\Program Files (x86)\KPN Veilig\apps\ComputerSecurity\Common\FSMA32.EXE

(F-Secure Corporation) C:\Program Files (x86)\KPN Veilig\apps\ComputerSecurity\Anti-Virus\fssm32.exe

(F-Secure Corporation) C:\Program Files (x86)\KPN Veilig\apps\ComputerSecurity\Common\FSHDLL64.EXE

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDIntelligent.exe

() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

() C:\Windows\System32\igfxTray.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe

() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

() C:\Program Files\Lenovo\LenovoUtility\utility.exe

() C:\Windows\SysWOW64\UMonit64.exe

(Spotify Ltd) C:\Users\Gebruiker\AppData\Roaming\Spotify\SpotifyWebHelper.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Spotify Ltd) C:\Users\Gebruiker\AppData\Roaming\Spotify\Spotify.exe

(Spotify Ltd) C:\Users\Gebruiker\AppData\Roaming\Spotify\SpotifyCrashService.exe

(Spotify Ltd) C:\Users\Gebruiker\AppData\Roaming\Spotify\Spotify.exe

(Spotify Ltd) C:\Users\Gebruiker\AppData\Roaming\Spotify\Spotify.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(F-Secure Corporation) C:\Program Files (x86)\KPN Veilig\fshoster32.exe

(F-Secure Corporation) C:\Program Files (x86)\KPN Veilig\apps\ComputerSecurity\Common\FSM32.EXE

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE

(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe

(Lenovo) C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe

(Lenovo) C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe

(Intel Corporation) C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

(Lenovo) C:\Program Files (x86)\Lenovo\CCSDK\WinGather.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(VideoLAN) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe

(Winzipper Pvt Ltd.) C:\Program Files (x86)\WinZipper\winziper.exe

(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe

(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.exe

 

 

==================== Register (gefilterd) ===========================

 

(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16403712 2015-08-13] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1403136 2015-08-13] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_LENOVO_DOLBYDRAGON] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1403136 2015-08-13] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1403136 2015-08-13] (Realtek Semiconductor)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3763432 2015-12-17] (ELAN Microelectronics Corp.)

HKLM\...\Run: [LenovoUtility] => C:\Program Files\Lenovo\LenovoUtility\utility.exe [791848 2015-11-18] ()

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-24] (Intel Corporation)

HKLM\...\Run: [UMonit] => C:\WINDOWS\SysWOW64\UMonit64.exe [53832 2015-07-15] ()

HKLM-x32\...\Run: [F-Secure Hoster (4582601)] => C:\Program Files (x86)\KPN Veilig\fshoster32.exe [193064 2015-08-17] (F-Secure Corporation)

HKLM-x32\...\Run: [F-Secure Manager] => C:\Program Files (x86)\KPN Veilig\apps\ComputerSecurity\Common\FSM32.EXE [306216 2015-10-07] (F-Secure Corporation)

HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [23248560 2016-04-08] (Dropbox, Inc.)

HKU\S-1-5-21-3814133488-4276050448-1606433261-1001\...\Run: [Spotify Web Helper] => C:\Users\Gebruiker\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1525360 2016-04-14] (Spotify Ltd)

HKU\S-1-5-21-3814133488-4276050448-1606433261-1001\...\Run: [Spotify] => C:\Users\Gebruiker\AppData\Roaming\Spotify\Spotify.exe [6855280 2016-04-14] (Spotify Ltd)

HKU\S-1-5-21-3814133488-4276050448-1606433261-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50676864 2016-03-01] (Skype Technologies S.A.)

HKU\S-1-5-21-3814133488-4276050448-1606433261-1001\...\RunOnce: [Uninstall C:\Users\Gebruiker\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Gebruiker\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64"

HKU\S-1-5-21-3814133488-4276050448-1606433261-1001\...\RunOnce: [Uninstall C:\Users\Gebruiker\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Gebruiker\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64"

HKU\S-1-5-21-3814133488-4276050448-1606433261-1001\...\MountPoints2: {fd77d36b-e891-11e5-9be0-e094674182e0} - "G:\autorun.exe" 

ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.30.dll [2016-04-08] (Dropbox, Inc.)

 

==================== Internet (gefilterd) ====================

 

(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)

 

Tcpip\Parameters: [DhcpNameServer] 84.255.209.79 84.255.210.79

Tcpip\..\Interfaces\{0a89d559-41b2-4ccd-8529-817a3aa73019}: [DhcpNameServer] 172.168.130.2

Tcpip\..\Interfaces\{d6d2f0aa-0710-46ad-97ce-b0d78f99d514}: [DhcpNameServer] 84.255.209.79 84.255.210.79

 

Internet Explorer:

==================

HKU\S-1-5-21-3814133488-4276050448-1606433261-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://lenovo15.msn.com/?pc=LCTE

HKU\S-1-5-21-3814133488-4276050448-1606433261-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo15.msn.com/?pc=LCTE

HKU\S-1-5-21-3814133488-4276050448-1606433261-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com

HKU\S-1-5-21-3814133488-4276050448-1606433261-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://mystart.lenovo.com

SearchScopes: HKU\S-1-5-21-3814133488-4276050448-1606433261-1001 -> DefaultScope {3057F738-551D-4E6F-826B-BB79D51861EF} URL = 

SearchScopes: HKU\S-1-5-21-3814133488-4276050448-1606433261-1001 -> {3057F738-551D-4E6F-826B-BB79D51861EF} URL = 

BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-04-03] (Microsoft Corporation)

BHO: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\KPN Veilig\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https64.dll [2016-04-04] (F-Secure Corporation)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-04-03] (Microsoft Corporation)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-04-03] (Microsoft Corporation)

BHO-x32: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\KPN Veilig\apps\CCF_Scanning\bin\browser\install\fs_ie_https\fs_ie_https.dll [2016-04-04] (F-Secure Corporation)

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-04-03] (Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-03] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-03] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-03] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-03] (Microsoft Corporation)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

 

Edge: 

======

Edge HomeButtonPage: HKU\S-1-5-21-3814133488-4276050448-1606433261-1001 -> hxxp://www.google.nl/

 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_182.dll [2016-03-13] ()

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_182.dll [2016-03-13] ()

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-04-03] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-04-03] (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-14] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-04-14] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-3814133488-4276050448-1606433261-1001: @hola.org/FlashPlayer -> C:\Users\Gebruiker\AppData\Local\Hola\firefox_hola\app\flash\NPSWF32_18_0_0_232.dll [2016-04-06] ()

FF Plugin HKU\S-1-5-21-3814133488-4276050448-1606433261-1001: @hola.org/vlc -> C:\Users\Gebruiker\AppData\Local\Hola\firefox_hola\app\vlc\npvlc.dll [2016-04-06] (Hola)

FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\KPN Veilig\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi

FF Extension: Browsing Protection by F-Secure - C:\Program Files (x86)\KPN Veilig\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi [2016-04-04]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\KPN Veilig\apps\CCF_Scanning\bin\browser\install\fs_firefox_https\fs_firefox_https.xpi

 

Chrome: 

=======

CHR DefaultSearchKeyword: Default -> safe

CHR Profile: C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Presentaties) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-30]

CHR Extension: (Google Documenten) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-30]

CHR Extension: (Google Drive) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-30]

CHR Extension: (YouTube) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-30]

CHR Extension: (Google Search) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-30]

CHR Extension: (Google Spreadsheets) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-30]

CHR Extension: (Delete & Edit Multiple Google Calendar Events) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffdjmcngemnnneohednoalbppmimjiee [2016-02-23]

CHR Extension: (Offline Documenten) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-14]

CHR Extension: (Browsing Protection by F-Secure) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmjjnhpacphpjmnnlnccpfmhkcloaade [2016-04-12]

CHR Extension: (Skype) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-04-20]

CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-13]

CHR Extension: (Gmail) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-30]

CHR HKU\S-1-5-21-3814133488-4276050448-1606433261-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gkmikccifolokanfakbeadbmgchomeli] - C:\Program Files (x86)\KPN Veilig\apps\SafeSearch\Chrome\main.crx [2015-11-04]

CHR HKLM-x32\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] - C:/Program Files (x86)/KPN Veilig/apps/CCF_Scanning/bin/browser/install/fs_chrome_https/fs_chrome_https.crx [2015-06-03]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]

 

==================== Services (gefilterd) ========================

 

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

 

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)

R2 CCSDK; C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [650680 2015-07-29] (Lenovo)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2838768 2016-04-03] (Microsoft Corporation)

S3 cplspcon; C:\Windows\system32\IntelCpHDCPSvc.exe [623072 2016-03-09] (Intel Corporation)

S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-01-02] (Dropbox, Inc.)

S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-01-02] (Dropbox, Inc.)

S2 eAHPeNhIUJ_download; C:\Users\Gebruiker\AppData\Local\Temp\123.exe [285584 2016-03-31] ()

R2 ETDService; C:\Program Files\Elantech\ETDService.exe [134888 2015-12-17] (ELAN Microelectronics Corp.)

R2 FastbootService; C:\Program Files (x86)\Lenovo\LenovoPortal\FastBoot\FbService.exe [288768 2015-11-18] (Lenovo) [Bestand niet getekend]

R2 fshoster; C:\Program Files (x86)\KPN Veilig\fshoster32.exe [193064 2015-08-17] (F-Secure Corporation)

R3 FSMA; C:\Program Files (x86)\KPN Veilig\apps\ComputerSecurity\Common\FSMA32.EXE [216104 2015-10-07] (F-Secure Corporation)

R2 FSORSPClient; C:\Program Files (x86)\KPN Veilig\apps\CCF_Reputation\fsorsp.exe [60456 2015-12-30] (F-Secure Corporation)

R2 GDCAgent; C:\Program Files (x86)\Lenovo\GDCAgentSetupRed\GDCAgent.exe [1155512 2015-07-30] (Lenovo)

S2 ggbugreport; C:\Program Files (x86)\SearchesToYesbnd\bugreport.exe [1593872 2016-02-26] ()

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-24] (Intel Corporation)

R2 ibtsiva; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [165104 2015-07-14] (Intel Corporation)

R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373728 2016-03-09] (Intel Corporation)

R2 ImControllerService; c:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [36808 2016-01-29] (Lenovo Group Limited)

R2 LenovoPortalService; C:\Program Files (x86)\Lenovo\LenovoPortal\LenovoPortalService.exe [24312 2015-11-18] ()

S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [271296 2015-07-18] (Lenovo)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-06-12] ()

S3 ShareItSvc; C:\Program Files (x86)\Lenovo\SHAREit\Shareit.Service.exe [31192 2016-02-02] (SHAREit Technologies Co.Ltd)

R2 UpdateAgentService; C:\Program Files\update\UpdateAgent.exe [226216 2015-11-18] ()

R2 WdMan; C:\ProgramData\WwinpW\WFini.exe [576184 2016-04-19] (WFini LIMITED)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [705688 2016-04-11] (Winzipper Pvt Ltd.) <==== AANDACHT

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831200 2015-06-12] (Intel® Corporation)

 

===================== Drivers (gefilterd) ==========================

 

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

 

R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [165376 2015-10-30] (Microsoft Corporation)

R3 BthHFAud; C:\Windows\system32\DRIVERS\BthHfAud.sys [36864 2015-10-30] (Microsoft Corporation)

S3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-03-13] (Disc Soft Ltd)

S3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-03-13] (Disc Soft Ltd)

R3 ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [30808 2015-12-17] (ELAN Microelectronic Corp.)

R3 F-Secure Gatekeeper; C:\Program Files (x86)\KPN Veilig\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [219128 2015-12-30] (F-Secure Corporation)

R1 F-Secure HIPS; C:\Program Files (x86)\KPN Veilig\apps\ComputerSecurity\HIPS\drivers\fshs.sys [106696 2016-04-20] (F-Secure Corporation)

R0 Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [67608 2015-11-18] (Windows ® Win 7 DDK provider) [Bestand niet getekend]

R0 FBFsmon; C:\Windows\System32\DRIVERS\FBFsmon.sys [39448 2015-11-18] (Windows ® Win 7 DDK provider) [Bestand niet getekend]

R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [75448 2016-01-12] ()

R3 fsni; C:\Program Files (x86)\KPN Veilig\apps\CCF_Scanning\bin\fsni64.sys [110272 2016-04-04] (F-Secure Corporation)

R1 FusionMon; C:\Windows\System32\DRIVERS\FusionMon.sys [38208 2016-04-02] (Lenovo)

S3 GeneStor; C:\Windows\system32\DRIVERS\GeneStor.sys [115704 2015-07-15] (GenesysLogic)

R3 iaLPSS2_GPIO2; C:\Windows\System32\drivers\iaLPSS2_GPIO2.sys [84264 2015-06-16] (Intel Corporation)

R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [257776 2015-07-14] (Intel Corporation)

R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [184608 2015-07-08] (Intel Corporation)

S3 NETwNe64; C:\Windows\System32\drivers\NETwew01.sys [3354384 2015-07-10] (Intel Corporation)

R3 Netwtw02; C:\Windows\System32\drivers\Netwtw02.sys [7030000 2015-08-03] (Intel Corporation)

R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-06-18] (Realtek                                            )

R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [3059416 2015-06-11] (Realtek Semiconductor Corp.)

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

 

==================== NetSvcs (gefilterd) ===================

 

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

 

 

==================== Een Maand Aangemaakt bestanden en mappen ========

 

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

 

2016-04-21 08:24 - 2016-04-21 08:24 - 00027061 _____ C:\Users\Gebruiker\Downloads\FRST.txt

2016-04-21 08:23 - 2016-04-21 08:24 - 00000000 ____D C:\FRST

2016-04-21 08:23 - 2016-04-21 08:23 - 02375680 _____ (Farbar) C:\Users\Gebruiker\Downloads\FRST64.exe

2016-04-20 21:13 - 2016-04-20 21:14 - 00000000 ____D C:\Program Files (x86)\eAHPeNhIUJ

2016-04-20 21:11 - 2016-04-20 21:11 - 00000000 ___HD C:\OneDriveTemp

2016-04-20 15:39 - 2016-04-20 15:39 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\eCyber

2016-04-19 14:36 - 2016-04-19 14:36 - 00000000 ____D C:\ProgramData\WwinpW

2016-04-15 19:01 - 2016-04-15 19:02 - 00000000 ____D C:\Users\Gebruiker\Downloads\VA-Kontor_Sunset_Chill_2015-3CD-2015-VOiCE

2016-04-15 18:55 - 2016-04-15 18:55 - 00000000 ____D C:\Users\Gebruiker\AppData\LocalLow\uTorrent

2016-04-14 15:08 - 2016-04-14 15:08 - 00002363 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2016-04-14 15:05 - 2016-04-21 08:10 - 00001094 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2016-04-14 15:05 - 2016-04-20 21:11 - 00001090 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2016-04-14 15:05 - 2016-04-14 15:05 - 00004152 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2016-04-14 15:05 - 2016-04-14 15:05 - 00003920 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2016-04-14 15:04 - 2016-04-14 15:05 - 00987728 _____ (Google Inc.) C:\Users\Gebruiker\Downloads\ChromeSetup.exe

2016-04-14 14:58 - 2016-04-14 15:08 - 00002375 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-04-14 13:47 - 2016-04-14 20:23 - 00002393 _____ C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-04-14 13:37 - 2016-04-14 13:37 - 00283492 _____ C:\WINDOWS\Minidump\041416-6703-01.dmp

2016-04-14 09:49 - 2016-04-14 09:49 - 00000000 ___RD C:\Users\Gebruiker\3D Objects

2016-04-13 22:56 - 2016-04-13 22:56 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\eAHPeNhIUJ

2016-04-13 22:52 - 2016-04-13 22:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox

2016-04-13 18:45 - 2016-03-29 12:20 - 07474016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2016-04-13 18:45 - 2016-03-29 12:20 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll

2016-04-13 18:45 - 2016-03-29 12:18 - 02152280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2016-04-13 18:45 - 2016-03-29 11:37 - 01862008 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2016-04-13 18:45 - 2016-03-29 10:41 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2016-04-13 18:45 - 2016-03-29 10:06 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll

2016-04-13 18:45 - 2016-03-29 10:01 - 00541304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2016-04-13 18:45 - 2016-03-29 09:58 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll

2016-04-13 18:45 - 2016-03-29 09:58 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2016-04-13 18:45 - 2016-03-29 09:46 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll

2016-04-13 18:45 - 2016-03-29 09:36 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll

2016-04-13 18:45 - 2016-03-29 09:19 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll

2016-04-13 18:45 - 2016-03-29 09:15 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2016-04-13 18:45 - 2016-03-29 09:12 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll

2016-04-13 18:45 - 2016-03-29 09:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2016-04-13 18:45 - 2016-03-29 09:07 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2016-04-13 18:45 - 2016-03-29 09:02 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll

2016-04-13 18:45 - 2016-03-29 08:42 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2016-04-13 18:45 - 2016-03-29 08:37 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2016-04-13 18:45 - 2016-03-29 08:32 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2016-04-13 18:45 - 2016-03-29 08:31 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2016-04-13 18:45 - 2016-03-29 08:26 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2016-04-13 18:45 - 2016-03-29 08:05 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2016-04-13 18:45 - 2016-03-29 08:05 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2016-04-13 18:45 - 2016-03-29 08:02 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2016-04-13 18:45 - 2016-03-29 07:51 - 22378496 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2016-04-13 18:45 - 2016-03-29 07:41 - 24602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2016-04-13 18:45 - 2016-03-29 07:41 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2016-04-13 18:45 - 2016-03-29 07:39 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2016-04-13 18:45 - 2016-03-29 07:38 - 18673664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2016-04-13 18:45 - 2016-03-29 07:37 - 19340800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2016-04-13 18:44 - 2016-04-02 06:13 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe

2016-04-13 18:44 - 2016-04-02 06:10 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll

2016-04-13 18:44 - 2016-04-02 05:29 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll

2016-04-13 18:44 - 2016-04-02 05:26 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll

2016-04-13 18:44 - 2016-04-02 05:21 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll

2016-04-13 18:44 - 2016-04-02 05:19 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2016-04-13 18:44 - 2016-04-02 05:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll

2016-04-13 18:44 - 2016-04-02 05:15 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2016-04-13 18:44 - 2016-04-02 05:14 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2016-04-13 18:44 - 2016-04-02 05:09 - 01832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2016-04-13 18:44 - 2016-04-02 05:07 - 03575296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll

2016-04-13 18:44 - 2016-04-02 05:07 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2016-04-13 18:44 - 2016-04-02 05:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll

2016-04-13 18:44 - 2016-03-29 12:22 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2016-04-13 18:44 - 2016-03-29 12:22 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2016-04-13 18:44 - 2016-03-29 12:20 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2016-04-13 18:44 - 2016-03-29 12:20 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2016-04-13 18:44 - 2016-03-29 12:11 - 00686976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll

2016-04-13 18:44 - 2016-03-29 12:05 - 01152864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2016-04-13 18:44 - 2016-03-29 12:02 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi

2016-04-13 18:44 - 2016-03-29 11:56 - 01297752 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll

2016-04-13 18:44 - 2016-03-29 11:28 - 00696664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll

2016-04-13 18:44 - 2016-03-29 11:28 - 00535080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll

2016-04-13 18:44 - 2016-03-29 11:25 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys

2016-04-13 18:44 - 2016-03-29 11:19 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll

2016-04-13 18:44 - 2016-03-29 11:17 - 00300104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe

2016-04-13 18:44 - 2016-03-29 11:13 - 00986976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll

2016-04-13 18:44 - 2016-03-29 11:11 - 00605440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys

2016-04-13 18:44 - 2016-03-29 11:08 - 00358752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll

2016-04-13 18:44 - 2016-03-29 11:08 - 00261376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe

2016-04-13 18:44 - 2016-03-29 10:44 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll

2016-04-13 18:44 - 2016-03-29 10:44 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll

2016-04-13 18:44 - 2016-03-29 10:32 - 00253088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe

2016-04-13 18:44 - 2016-03-29 10:26 - 02403680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2016-04-13 18:44 - 2016-03-29 10:26 - 01089888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys

2016-04-13 18:44 - 2016-03-29 10:24 - 00294752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll

2016-04-13 18:44 - 2016-03-29 10:21 - 00378208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS

2016-04-13 18:44 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll

2016-04-13 18:44 - 2016-03-29 10:02 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll

2016-04-13 18:44 - 2016-03-29 09:57 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll

2016-04-13 18:44 - 2016-03-29 09:51 - 00181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys

2016-04-13 18:44 - 2016-03-29 09:51 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll

2016-04-13 18:44 - 2016-03-29 09:50 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll

2016-04-13 18:44 - 2016-03-29 09:42 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll

2016-04-13 18:44 - 2016-03-29 09:39 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2016-04-13 18:44 - 2016-03-29 09:38 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll

2016-04-13 18:44 - 2016-03-29 09:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2016-04-13 18:44 - 2016-03-29 09:34 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2016-04-13 18:44 - 2016-03-29 09:30 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll

2016-04-13 18:44 - 2016-03-29 09:30 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll

2016-04-13 18:44 - 2016-03-29 09:28 - 00460288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll

2016-04-13 18:44 - 2016-03-29 09:27 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll

2016-04-13 18:44 - 2016-03-29 09:26 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll

2016-04-13 18:44 - 2016-03-29 09:23 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll

2016-04-13 18:44 - 2016-03-29 09:23 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll

2016-04-13 18:44 - 2016-03-29 09:22 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll

2016-04-13 18:44 - 2016-03-29 09:20 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll

2016-04-13 18:44 - 2016-03-29 09:20 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll

2016-04-13 18:44 - 2016-03-29 09:19 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll

2016-04-13 18:44 - 2016-03-29 09:17 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll

2016-04-13 18:44 - 2016-03-29 09:17 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll

2016-04-13 18:44 - 2016-03-29 09:16 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll

2016-04-13 18:44 - 2016-03-29 09:16 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll

2016-04-13 18:44 - 2016-03-29 09:15 - 01714688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll

2016-04-13 18:44 - 2016-03-29 09:14 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll

2016-04-13 18:44 - 2016-03-29 09:14 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2016-04-13 18:44 - 2016-03-29 09:14 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll

2016-04-13 18:44 - 2016-03-29 09:13 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll

2016-04-13 18:44 - 2016-03-29 09:12 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll

2016-04-13 18:44 - 2016-03-29 09:11 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll

2016-04-13 18:44 - 2016-03-29 09:11 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll

2016-04-13 18:44 - 2016-03-29 09:11 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll

2016-04-13 18:44 - 2016-03-29 09:10 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2016-04-13 18:44 - 2016-03-29 09:10 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll

2016-04-13 18:44 - 2016-03-29 09:09 - 01239552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll

2016-04-13 18:44 - 2016-03-29 09:07 - 01902592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll

2016-04-13 18:44 - 2016-03-29 09:06 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll

2016-04-13 18:44 - 2016-03-29 09:06 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2016-04-13 18:44 - 2016-03-29 09:05 - 01395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2016-04-13 18:44 - 2016-03-29 09:02 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll

2016-04-13 18:44 - 2016-03-29 09:02 - 01211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll

2016-04-13 18:44 - 2016-03-29 09:00 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll

2016-04-13 18:44 - 2016-03-29 09:00 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll

2016-04-13 18:44 - 2016-03-29 08:59 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll

2016-04-13 18:44 - 2016-03-29 08:56 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll

2016-04-13 18:44 - 2016-03-29 08:56 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll

2016-04-13 18:44 - 2016-03-29 08:55 - 01052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll

2016-04-13 18:44 - 2016-03-29 08:48 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll

2016-04-13 18:44 - 2016-03-29 08:44 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll

2016-04-13 18:44 - 2016-03-29 08:43 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AccountsRt.dll

2016-04-13 18:44 - 2016-03-29 08:42 - 01410560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll

2016-04-13 18:44 - 2016-03-29 08:40 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll

2016-04-13 18:44 - 2016-03-29 08:39 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll

2016-04-13 18:44 - 2016-03-29 08:38 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll

2016-04-13 18:44 - 2016-03-29 08:37 - 01444352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll

2016-04-13 18:44 - 2016-03-29 08:37 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll

2016-04-13 18:44 - 2016-03-29 08:36 - 03351040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll

2016-04-13 18:44 - 2016-03-29 08:36 - 00649728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll

2016-04-13 18:44 - 2016-03-29 08:35 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll

2016-04-13 18:44 - 2016-03-29 08:34 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll

2016-04-13 18:44 - 2016-03-29 08:34 - 00682496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll

2016-04-13 18:44 - 2016-03-29 08:34 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll

2016-04-13 18:44 - 2016-03-29 08:32 - 01588224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll

2016-04-13 18:44 - 2016-03-29 08:32 - 01098240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll

2016-04-13 18:44 - 2016-03-29 08:32 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll

2016-04-13 18:44 - 2016-03-29 08:31 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2016-04-13 18:44 - 2016-03-29 08:31 - 01117184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll

2016-04-13 18:44 - 2016-03-29 08:30 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2016-04-13 18:44 - 2016-03-29 08:29 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll

2016-04-13 18:44 - 2016-03-29 08:29 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll

2016-04-13 18:44 - 2016-03-29 08:28 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll

2016-04-13 18:44 - 2016-03-29 08:28 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll

2016-04-13 18:44 - 2016-03-29 08:27 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll

2016-04-13 18:44 - 2016-03-29 08:27 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll

2016-04-13 18:44 - 2016-03-29 08:27 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll

2016-04-13 18:44 - 2016-03-29 08:23 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll

2016-04-13 18:44 - 2016-03-29 08:22 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll

2016-04-13 18:44 - 2016-03-29 08:19 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2016-04-13 18:44 - 2016-03-29 08:17 - 00765952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2016-04-13 18:44 - 2016-03-29 08:14 - 01072128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll

2016-04-13 18:44 - 2016-03-29 08:13 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll

2016-04-13 18:44 - 2016-03-29 08:10 - 03671040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll

2016-04-13 18:44 - 2016-03-29 08:05 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll

2016-04-13 18:44 - 2016-03-29 08:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2016-04-13 18:44 - 2016-03-29 08:05 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll

2016-04-13 18:44 - 2016-03-29 08:04 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll

2016-04-13 18:44 - 2016-03-29 08:01 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2016-04-13 18:44 - 2016-03-29 07:58 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2016-04-13 18:44 - 2016-03-29 07:56 - 16985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2016-04-13 18:44 - 2016-03-29 07:52 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2016-04-13 18:44 - 2016-03-29 07:51 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2016-04-13 18:44 - 2016-03-29 07:49 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll

2016-04-13 18:44 - 2016-03-29 07:45 - 03078144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll

2016-04-13 18:44 - 2016-03-29 07:43 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2016-04-13 18:44 - 2016-03-29 07:38 - 02798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2016-04-13 18:44 - 2016-03-29 07:36 - 02722816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll

2016-04-13 18:44 - 2016-03-29 07:27 - 07836160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2016-04-13 18:44 - 2016-03-29 07:27 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2016-04-13 18:44 - 2016-03-29 07:26 - 00958976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll

2016-04-13 18:44 - 2016-03-29 07:25 - 00712704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll

2016-04-13 18:43 - 2016-04-02 06:10 - 00770640 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll

2016-04-13 18:43 - 2016-04-02 06:10 - 00374008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe

2016-04-13 18:43 - 2016-04-02 05:30 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll

2016-04-13 18:43 - 2016-04-02 05:29 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll

2016-04-13 18:43 - 2016-04-02 05:25 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll

2016-04-13 18:43 - 2016-04-02 05:25 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll

2016-04-13 18:43 - 2016-04-02 05:23 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll

2016-04-13 18:43 - 2016-04-02 05:23 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll

2016-04-13 18:43 - 2016-04-02 05:08 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2016-04-13 18:43 - 2016-04-02 05:03 - 04774912 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2016-04-13 18:43 - 2016-03-29 12:23 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys

2016-04-13 18:43 - 2016-03-29 12:15 - 00100232 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll

2016-04-13 18:43 - 2016-03-29 12:02 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll

2016-04-13 18:43 - 2016-03-29 11:28 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll

2016-04-13 18:43 - 2016-03-29 11:25 - 00058400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll

2016-04-13 18:43 - 2016-03-29 11:18 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys

2016-04-13 18:43 - 2016-03-29 11:11 - 00074424 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe

2016-04-13 18:43 - 2016-03-29 11:10 - 00110584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll

2016-04-13 18:43 - 2016-03-29 11:09 - 00078040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll

2016-04-13 18:43 - 2016-03-29 11:07 - 00081144 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll

2016-04-13 18:43 - 2016-03-29 10:41 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll

2016-04-13 18:43 - 2016-03-29 10:26 - 00073872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll

2016-04-13 18:43 - 2016-03-29 10:25 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll

2016-04-13 18:43 - 2016-03-29 10:23 - 00069744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netapi32.dll

2016-04-13 18:43 - 2016-03-29 10:17 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll

2016-04-13 18:43 - 2016-03-29 10:16 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys

2016-04-13 18:43 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll

2016-04-13 18:43 - 2016-03-29 10:07 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2016-04-13 18:43 - 2016-03-29 10:07 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll

2016-04-13 18:43 - 2016-03-29 10:07 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsdchngr.dll

2016-04-13 18:43 - 2016-03-29 10:06 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll

2016-04-13 18:43 - 2016-03-29 10:00 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe

2016-04-13 18:43 - 2016-03-29 10:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll

2016-04-13 18:43 - 2016-03-29 10:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll

2016-04-13 18:43 - 2016-03-29 09:59 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe

2016-04-13 18:43 - 2016-03-29 09:57 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe

2016-04-13 18:43 - 2016-03-29 09:57 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll

2016-04-13 18:43 - 2016-03-29 09:57 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\browcli.dll

2016-04-13 18:43 - 2016-03-29 09:55 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll

2016-04-13 18:43 - 2016-03-29 09:55 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serial.sys

2016-04-13 18:43 - 2016-03-29 09:55 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll

2016-04-13 18:43 - 2016-03-29 09:54 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll

2016-04-13 18:43 - 2016-03-29 09:54 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys

2016-04-13 18:43 - 2016-03-29 09:53 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll

2016-04-13 18:43 - 2016-03-29 09:52 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe

2016-04-13 18:43 - 2016-03-29 09:51 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll

2016-04-13 18:43 - 2016-03-29 09:50 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll

2016-04-13 18:43 - 2016-03-29 09:50 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll

2016-04-13 18:43 - 2016-03-29 09:50 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll

2016-04-13 18:43 - 2016-03-29 09:50 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll

2016-04-13 18:43 - 2016-03-29 09:49 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthLEEnum.sys

2016-04-13 18:43 - 2016-03-29 09:49 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2016-04-13 18:43 - 2016-03-29 09:48 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll

2016-04-13 18:43 - 2016-03-29 09:48 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll

2016-04-13 18:43 - 2016-03-29 09:46 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll

2016-04-13 18:43 - 2016-03-29 09:44 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll

2016-04-13 18:43 - 2016-03-29 09:36 - 00530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys

2016-04-13 18:43 - 2016-03-29 09:35 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll

2016-04-13 18:43 - 2016-03-29 09:35 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll

2016-04-13 18:43 - 2016-03-29 09:34 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2016-04-13 18:43 - 2016-03-29 09:34 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys

2016-04-13 18:43 - 2016-03-29 09:34 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll

2016-04-13 18:43 - 2016-03-29 09:33 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll

2016-04-13 18:43 - 2016-03-29 09:32 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2016-04-13 18:43 - 2016-03-29 09:32 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe

2016-04-13 18:43 - 2016-03-29 09:23 - 00694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys

2016-04-13 18:43 - 2016-03-29 09:21 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2016-04-13 18:43 - 2016-03-29 09:20 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll

2016-04-13 18:43 - 2016-03-29 09:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsdchngr.dll

2016-04-13 18:43 - 2016-03-29 09:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacchooks.dll

2016-04-13 18:43 - 2016-03-29 09:18 - 00676352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll

2016-04-13 18:43 - 2016-03-29 09:17 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll

2016-04-13 18:43 - 2016-03-29 09:14 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS

2016-04-13 18:43 - 2016-03-29 09:11 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe

2016-04-13 18:43 - 2016-03-29 09:11 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll

2016-04-13 18:43 - 2016-03-29 09:11 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browcli.dll

2016-04-13 18:43 - 2016-03-29 09:09 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll

2016-04-13 18:43 - 2016-03-29 09:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll

2016-04-13 18:43 - 2016-03-29 09:08 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll

2016-04-13 18:43 - 2016-03-29 09:08 - 00841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll

2016-04-13 18:43 - 2016-03-29 09:08 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll

2016-04-13 18:43 - 2016-03-29 09:06 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe

2016-04-13 18:43 - 2016-03-29 09:05 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll

2016-04-13 18:43 - 2016-03-29 09:04 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll

2016-04-13 18:43 - 2016-03-29 09:03 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys

2016-04-13 18:43 - 2016-03-29 09:00 - 00235008 _____ C:\WINDOWS\system32\MTF.dll

2016-04-13 18:43 - 2016-03-29 09:00 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll

2016-04-13 18:43 - 2016-03-29 08:59 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll

2016-04-13 18:43 - 2016-03-29 08:59 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe

2016-04-13 18:43 - 2016-03-29 08:53 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll

2016-04-13 18:43 - 2016-03-29 08:53 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll

2016-04-13 18:43 - 2016-03-29 08:52 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2016-04-13 18:43 - 2016-03-29 08:52 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll

2016-04-13 18:43 - 2016-03-29 08:49 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll

2016-04-13 18:43 - 2016-03-29 08:42 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2016-04-13 18:43 - 2016-03-29 08:41 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll

2016-04-13 18:43 - 2016-03-29 08:39 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll

2016-04-13 18:43 - 2016-03-29 08:39 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll

2016-04-13 18:43 - 2016-03-29 08:34 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll

2016-04-13 18:43 - 2016-03-29 08:32 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll

2016-04-13 18:43 - 2016-03-29 08:32 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll

2016-04-13 18:43 - 2016-03-29 08:32 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll

2016-04-13 18:43 - 2016-03-29 08:32 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll

2016-04-13 18:43 - 2016-03-29 08:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2016-04-13 18:43 - 2016-03-29 08:27 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll

2016-04-13 18:43 - 2016-03-29 08:27 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll

2016-04-13 18:43 - 2016-03-29 08:06 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll

2016-04-13 18:43 - 2016-03-29 08:05 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll

2016-04-13 18:43 - 2016-03-29 08:04 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll

2016-04-13 18:43 - 2016-03-29 08:01 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL

2016-04-13 18:43 - 2016-03-29 08:00 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll

2016-04-13 18:43 - 2016-03-29 07:45 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll

2016-04-13 18:43 - 2016-03-29 07:43 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll

2016-04-13 18:43 - 2016-03-29 07:35 - 00821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll

2016-04-13 18:43 - 2016-03-29 07:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll

2016-04-13 18:43 - 2016-03-29 07:27 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL

2016-04-13 18:43 - 2016-03-29 07:26 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL

2016-04-13 18:43 - 2016-03-29 07:25 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL

2016-04-13 18:43 - 2016-03-29 07:21 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll

2016-04-12 17:16 - 2016-04-12 17:16 - 00000000 ____D C:\Users\Gebruiker\Downloads\SHAREit

2016-04-12 17:11 - 2016-04-12 17:11 - 00000000 ____D C:\WINDOWS\SysWOW64\sda

2016-04-12 17:11 - 2015-07-15 12:54 - 05632512 _____ (Genesys) C:\WINDOWS\system32\GeneIcon.dll

2016-04-12 17:11 - 2015-07-15 12:54 - 00053832 _____ () C:\WINDOWS\SysWOW64\UMonit64.exe

2016-04-10 13:32 - 2016-04-10 13:32 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\Mozilla

2016-04-10 13:32 - 2016-04-10 13:32 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108

2016-04-10 13:28 - 2016-04-21 04:31 - 00004208 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{49C4317E-9DF1-4910-93D1-11954DB5763E}

2016-04-09 19:06 - 2016-04-09 19:06 - 00000000 ____D C:\WINDOWS\Firmware

2016-04-08 17:50 - 2016-04-08 17:50 - 00000000 ____D C:\Program Files (x86)\ghokswa

2016-04-06 21:36 - 2016-04-06 21:36 - 00665984 _____ (Hola Networks Ltd.) C:\Users\Gebruiker\Downloads\Hola-Setup (1).exe

2016-04-06 21:33 - 2016-04-06 21:33 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\Chromium

2016-04-06 21:31 - 2016-04-14 13:43 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\Hola

2016-04-06 21:31 - 2016-04-06 21:31 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\Hola

2016-04-06 21:31 - 2016-04-06 21:31 - 00000000 ____D C:\Program Files\Hola

2016-04-06 21:28 - 2016-04-06 21:28 - 00665984 _____ (Hola Networks Ltd.) C:\Users\Gebruiker\Downloads\Hola-Setup.exe

2016-04-03 22:48 - 2016-04-03 22:48 - 00015496 _____ C:\Users\Gebruiker\Downloads\0d4512d7d7ce067775f56bbc1864a4f7f4af8010.torrent

2016-04-02 09:09 - 2016-04-03 00:05 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\LenovoAssistant

2016-04-02 09:09 - 2016-04-02 09:09 - 00038208 _____ (Lenovo) C:\WINDOWS\system32\Drivers\FusionMon.sys

2016-04-02 09:09 - 2016-04-02 09:09 - 00002163 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo REACHit.lnk

2016-04-02 09:09 - 2016-04-02 09:09 - 00002151 _____ C:\Users\Public\Desktop\Lenovo REACHit.lnk

2016-04-02 09:09 - 2016-04-02 09:09 - 00000000 ____D C:\Users\Default.migrated\AppData\Local\Lenovo

2016-04-01 18:48 - 2016-04-01 18:48 - 00000000 ____D C:\Users\Public\Documents\eAHPeNhIUJ

2016-03-29 14:34 - 2016-03-29 14:34 - 00000000 ____D C:\WINDOWS\system32\log

2016-03-24 14:01 - 2016-03-24 14:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip

2016-03-24 14:00 - 2016-04-20 21:13 - 00000000 ____D C:\Program Files (x86)\WinZipper

2016-03-24 13:59 - 2016-04-12 11:58 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\WinZiper

2016-03-24 13:53 - 2016-04-19 14:35 - 00009426 _____ C:\WINDOWS\System32\Tasks\Browser Updater Task(Core)

2016-03-24 13:53 - 2016-03-24 13:53 - 00000000 ____D C:\Program Files (x86)\QQBrowser

 

==================== Een Maand Gewijzigd bestanden en mappen ========

 

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

 

2016-04-21 08:24 - 2016-01-05 12:03 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\Skype

2016-04-21 07:54 - 2016-01-02 16:49 - 00001052 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job

2016-04-21 03:49 - 2015-12-30 18:33 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\Spotify

2016-04-20 21:14 - 2015-10-30 20:05 - 00819896 _____ C:\WINDOWS\system32\perfh013.dat

2016-04-20 21:14 - 2015-10-30 20:05 - 00160008 _____ C:\WINDOWS\system32\perfc013.dat

2016-04-20 21:14 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF

2016-04-20 21:14 - 2015-07-16 17:54 - 01850926 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2016-04-20 21:12 - 2015-10-30 09:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2016-04-20 21:11 - 2016-01-02 16:51 - 00000000 ___RD C:\Users\Gebruiker\Dropbox

2016-04-20 21:11 - 2015-12-30 18:34 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\Spotify

2016-04-20 21:11 - 2015-12-11 17:10 - 00000000 ___RD C:\Users\Gebruiker\OneDrive

2016-04-20 21:11 - 2015-11-18 22:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2016-04-20 21:10 - 2016-03-13 23:00 - 00000000 ____D C:\Program Files (x86)\SearchesToYesbnd

2016-04-20 21:10 - 2016-01-18 05:01 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-04-20 21:10 - 2016-01-18 04:56 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

2016-04-20 21:10 - 2016-01-02 16:49 - 00001048 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job

2016-04-20 21:10 - 2015-12-11 17:08 - 00000000 __SHD C:\Users\Gebruiker\IntelGraphicsProfiles

2016-04-20 21:09 - 2016-01-09 13:50 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\uTorrent

2016-04-20 21:09 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI

2016-04-20 20:57 - 2015-12-11 17:08 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\Packages

2016-04-20 16:27 - 2016-01-09 14:02 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\vlc

2016-04-20 15:38 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness

2016-04-19 14:40 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps

2016-04-15 18:51 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\NDF

2016-04-14 20:23 - 2016-01-18 04:57 - 00000000 ____D C:\Users\Gebruiker

2016-04-14 15:08 - 2015-12-30 16:32 - 00000000 ____D C:\Program Files (x86)\Google

2016-04-14 14:53 - 2015-12-30 16:18 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\FSDART

2016-04-14 13:50 - 2016-02-29 18:00 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\Pajek2016

2016-04-14 13:37 - 2016-01-31 14:48 - 00000000 ____D C:\WINDOWS\Minidump

2016-04-14 13:37 - 2016-01-03 13:53 - 836266585 _____ C:\WINDOWS\MEMORY.DMP

2016-04-14 13:16 - 2016-01-18 04:55 - 00330704 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2016-04-14 13:15 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2016-04-14 13:15 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser

2016-04-14 13:15 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2016-04-14 13:15 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr

2016-04-14 09:47 - 2015-12-11 17:09 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\CyberLink

2016-04-14 09:28 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp

2016-04-14 09:17 - 2015-12-30 16:56 - 00000000 ____D C:\WINDOWS\system32\MRT

2016-04-14 02:37 - 2015-12-30 16:56 - 135176864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2016-04-13 22:52 - 2016-01-02 16:49 - 00000000 ____D C:\Program Files (x86)\Dropbox

2016-04-13 22:50 - 2016-01-02 16:49 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\Dropbox

2016-04-13 18:11 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports

2016-04-10 13:32 - 2016-03-13 23:00 - 00000262 __RSH C:\ProgramData\ntuser.pol

2016-04-06 20:32 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2016-04-06 20:32 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2016-04-03 21:05 - 2016-01-05 12:03 - 00000000 ___RD C:\Program Files (x86)\Skype

2016-04-03 21:05 - 2016-01-05 12:03 - 00000000 ____D C:\ProgramData\Skype

2016-04-02 09:09 - 2015-12-30 16:18 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\Downloaded Installations

2016-04-02 09:09 - 2015-12-11 17:09 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\Lenovo

2016-04-02 09:09 - 2015-11-18 22:15 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo

2016-04-02 09:09 - 2015-11-18 22:15 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo

2016-04-01 18:49 - 2015-12-30 16:15 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\F-Secure

2016-03-24 13:53 - 2016-03-13 23:00 - 00015252 _____ C:\WINDOWS\System32\Tasks\WinTaske

 

==================== Bestanden in de root van sommige mappen =======

 

2016-01-18 04:56 - 2016-01-18 04:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

 

Sommige bestanden in TEMP:

====================

C:\Users\Gebruiker\AppData\Local\Temp\123.exe

C:\Users\Gebruiker\AppData\Local\Temp\Hola-Setup-x64-1.12.816.exe

 

 

==================== Bamital & volsnap =================

 

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

 

C:\WINDOWS\system32\winlogon.exe => Bestand is getekend

C:\WINDOWS\system32\wininit.exe => Bestand is getekend

C:\WINDOWS\explorer.exe => Bestand is getekend

C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend

C:\WINDOWS\system32\svchost.exe => Bestand is getekend

C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend

C:\WINDOWS\system32\services.exe => Bestand is getekend

C:\WINDOWS\system32\User32.dll => Bestand is getekend

C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend

C:\WINDOWS\system32\userinit.exe => Bestand is getekend

C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend

C:\WINDOWS\system32\rpcss.dll => Bestand is getekend

C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend

C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend

C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend

 

 

LastRegBack: 2016-04-05 15:33

 

==================== Eind van FRST.txt ============================

[Essexboy]

There should be another log file called additions.. Could you post that

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
S2 eAHPeNhIUJ_download; C:\Users\Gebruiker\AppData\Local\Temp\123.exe [285584 2016-03-31] ()
S2 ggbugreport; C:\Program Files (x86)\SearchesToYesbnd\bugreport.exe [1593872 2016-02-26] ()
R2 UpdateAgentService; C:\Program Files\update\UpdateAgent.exe [226216 2015-11-18] ()
R2 WdMan; C:\ProgramData\WwinpW\WFini.exe [576184 2016-04-19] (WFini LIMITED)
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [705688 2016-04-11] (Winzipper Pvt Ltd.) <==== AANDACHT
2016-04-20 21:13 - 2016-04-20 21:14 - 00000000 ____D C:\Program Files (x86)\eAHPeNhIUJ
2016-04-20 15:39 - 2016-04-20 15:39 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\eCyber
2016-04-19 14:36 - 2016-04-19 14:36 - 00000000 ____D C:\ProgramData\WwinpW
2016-04-13 22:56 - 2016-04-13 22:56 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\eAHPeNhIUJ
2016-04-12 17:16 - 2016-04-12 17:16 - 00000000 ____D C:\Users\Gebruiker\Downloads\SHAREit
2016-04-10 13:32 - 2016-04-10 13:32 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
2016-04-08 17:50 - 2016-04-08 17:50 - 00000000 ____D C:\Program Files (x86)\ghokswa
2016-04-06 21:36 - 2016-04-06 21:36 - 00665984 _____ (Hola Networks Ltd.) C:\Users\Gebruiker\Downloads\Hola-Setup (1).exe
2016-04-06 21:33 - 2016-04-06 21:33 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\Chromium
2016-04-06 21:31 - 2016-04-14 13:43 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\Hola
2016-04-06 21:31 - 2016-04-06 21:31 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\Hola
2016-04-06 21:31 - 2016-04-06 21:31 - 00000000 ____D C:\Program Files\Hola
2016-04-06 21:28 - 2016-04-06 21:28 - 00665984 _____ (Hola Networks Ltd.) C:\Users\Gebruiker\Downloads\Hola-Setup.exe
2016-04-03 22:48 - 2016-04-03 22:48 - 00015496 _____ C:\Users\Gebruiker\Downloads\0d4512d7d7ce067775f56bbc1864a4f7f4af8010.torrent
2016-04-01 18:48 - 2016-04-01 18:48 - 00000000 ____D C:\Users\Public\Documents\eAHPeNhIUJ
2016-03-24 14:01 - 2016-03-24 14:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2016-03-24 14:00 - 2016-04-20 21:13 - 00000000 ____D C:\Program Files (x86)\WinZipper
2016-03-24 13:59 - 2016-04-12 11:58 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\WinZiper
2016-03-24 13:53 - 2016-04-19 14:35 - 00009426 _____ C:\WINDOWS\System32\Tasks\Browser Updater Task(Core)
2016-03-24 13:53 - 2016-03-24 13:53 - 00000000 ____D C:\Program Files (x86)\QQBrowser
2016-03-24 13:53 - 2016-03-13 23:00 - 00015252 _____ C:\WINDOWS\System32\Tasks\WinTaske
C:\Program Files\update
C:\Program Files (x86)\WinZipper
C:\Users\Gebruiker\AppData\Local\Temp\123.exe
C:\Program Files (x86)\SearchesToYesbnd
C:\ProgramData\WwinpW
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click on Scan.
• After the scan is complete click on "Clean"
• Confirm each time with Ok.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next answer.
• You can find the logfile at C:\AdwCleaner[S0].txt as well.

[Essexboy]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.