Logfile of random's system information tool 1.09 (written by random/random) Run by Carl at 2013-11-19 17:58:37 Microsoft Windows 7 Professional System drive C: has 40 GB (66%) free of 60 GB Total RAM: 2013 MB (73% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 17:58:55, on 19-11-2013 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\PROGRA~1\McAfee.com\Agent\mcagent.exe C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe C:\Program Files\Acer\Acer PowerSaver\PowerSaverTray.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\WavXDocMgr.exe C:\Program Files\Wave Systems Corp\SecureUpgrade.exe C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe C:\Windows\system32\SearchProtocolHost.exe C:\Users\Carl\Desktop\RSIT.exe C:\Program Files\trend micro\Carl.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=veriton_m275&r=17051113r806pe415u245z4654r44r R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=veriton_m275&r=17051113r806pe415u245z4654r44r R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=veriton_m275&r=17051113r806pe415u245z4654r44r R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - C:\Program Files\McAfee\MSK\MskAPBho.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k O4 - HKLM\..\Run: [AutoLockProcess] C:\Program Files\Acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe O4 - HKLM\..\Run: [Acer PowerSaver] C:\Program Files\Acer\Acer PowerSaver\PowerSaverTray.exe O4 - HKLM\..\Run: [Acer SmartBoot] C:\Program Files\Acer\Acer SmartBoot\ASLTray.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey O4 - HKLM\..\Run: [WavXMgr] "C:\Program Files\Wave Systems Corp\Services Manager\Docmgr\bin\WavXDocMgr.exe" O4 - HKLM\..\Run: [SecureUpgrade] "C:\Program Files\Wave Systems Corp\SecureUpgrade.exe" O4 - HKLM\..\Run: [EmbassySecurityCheck] ";C:\Program Files\Wave Systems Corp\EMBASSY Security Setup\EMBASSYSecurityCheck.exe" O4 - HKLM\..\Run: [RemoteControl8] "C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe" O4 - HKCU\..\Run: [Global Registration] "C:\Program Files\Acer\Registration\GREG.exe" BOOT O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll O23 - Service: Acer SmartBoot Service (ASLSvc) - Acer Incorporated - C:\Program Files\Acer\Acer SmartBoot\ASLSvc.exe O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Program Files\Acer\Empowering Technology\eLock\Service\eLockServ.exe O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files\Acer\Registration\GregHSRW.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\Partner.exe O23 - Service: SecureStorageService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe O23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe -- End of file - 8424 bytes ======Scheduled tasks folder====== C:\Windows\tasks\McDefragTask.job C:\Windows\tasks\McQcTask.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}] McAfee Phishing Filter - C:\Program Files\McAfee\MSK\MskAPBho.dll [2009-04-10 246800] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}] scriptproxy - C:\Program Files\McAfee\VirusScan\scriptsn.dll [2009-06-18 62784] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}] Partner BHO Class - C:\ProgramData\Partner\Partner.dll [2009-12-11 433648] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-11 256112] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2009-12-11 761840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}] McAfee SiteAdvisor BHO - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-11-23 204048] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}] Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-12-11 458736] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-11 256112] {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2009-11-23 204048] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "BackupManagerTray"=C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2009-11-18 261888] "AutoLockProcess"=C:\Program Files\Acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe [2009-02-17 446464] "Acer PowerSaver"=C:\Program Files\Acer\Acer PowerSaver\PowerSaverTray.exe [2009-04-17 434176] "Acer SmartBoot"=C:\Program Files\Acer\Acer SmartBoot\ASLTray.exe [2009-05-13 376832] "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696] "NortonOnlineBackupReminder"=C:\Program Files\Symantec\Norton Online Backup\Activation\NobuActivation.exe [2009-07-25 588648] "IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-11-13 141848] "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-11-13 175128] "Persistence"=C:\Windows\system32\igfxpers.exe [2009-11-13 166424] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-11-17 8092192] "mcagent_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2009-07-23 645328] "WavXMgr"=C:\Program Files\Wave Systems Corp\Services Manager\Docmgr\bin\WavXDocMgr.exe [2009-10-09 134656] "SecureUpgrade"=C:\Program Files\Wave Systems Corp\SecureUpgrade.exe [2009-10-15 656696] "EmbassySecurityCheck"=;C:\Program Files\Wave Systems Corp\EMBASSY Security Setup\EMBASSYSecurityCheck.exe [] "RemoteControl8"=C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [2009-04-15 91432] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Global Registration"=C:\Program Files\Acer\Registration\GREG.exe [2009-08-28 2846240] "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-12-11 39408] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\Windows\system32\igfxdev.dll [2009-11-06 226304] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] "authentication packages"=msv1_0 wvauth [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "vidc.cvid"=iccvid.dll "MSVideo8"=VfWWDM32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2013-11-20 00:16:05 ----A---- C:\Windows\system32\perfi013.dat 2013-11-20 00:16:05 ----A---- C:\Windows\system32\perfh013.dat 2013-11-20 00:16:05 ----A---- C:\Windows\system32\perfd013.dat 2013-11-20 00:16:05 ----A---- C:\Windows\system32\perfc013.dat 2013-11-20 00:15:44 ----D---- C:\Windows\system32\nl 2013-11-20 00:15:44 ----D---- C:\Windows\system32\0413 2013-11-20 00:15:44 ----D---- C:\Windows\nl-NL 2013-11-20 00:15:43 ----D---- C:\Windows\system32\XPSViewer 2013-11-20 00:11:48 ----D---- C:\Windows\NAPP_Dism_Log 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\zh-TW 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\zh-CN 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\tr-TR 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\th-TH 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\sv-SE 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\ru-RU 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\ro-RO 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\pt-PT 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\pt-BR 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\pl-PL 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\nl-NL 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\nb-NO 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\ko-KR 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\ja-JP 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\it-IT 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\hu-HU 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\he-IL 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\fr-FR 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\fi-FI 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\es-ES 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\el-GR 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\de-DE 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\da-DK 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\cs-CZ 2013-11-20 00:10:25 ----D---- C:\Windows\system32\drivers\ar-SA 2013-11-20 00:10:25 ----D---- C:\Program Files\Windows Virtual PC 2013-11-20 00:10:14 ----A---- C:\Windows\system32\VPCWizard.exe 2013-11-20 00:10:14 ----A---- C:\Windows\system32\VPCSettings.exe 2013-11-20 00:10:14 ----A---- C:\Windows\system32\vpchbuspipe.dll 2013-11-20 00:10:14 ----A---- C:\Windows\system32\vpc.exe 2013-11-20 00:10:14 ----A---- C:\Windows\system32\VMWindow.exe 2013-11-20 00:10:14 ----A---- C:\Windows\system32\vmsal.exe 2013-11-20 00:10:14 ----A---- C:\Windows\system32\VMCPropertyHandler.dll 2013-11-20 00:10:14 ----A---- C:\Windows\system32\drivers\vpcvmm.sys 2013-11-20 00:10:14 ----A---- C:\Windows\system32\drivers\vpcusb.sys 2013-11-20 00:10:14 ----A---- C:\Windows\system32\drivers\vpcnfltr.sys 2013-11-20 00:10:14 ----A---- C:\Windows\system32\drivers\vpchbus.sys 2013-11-19 17:58:37 ----D---- C:\rsit 2013-11-19 17:58:37 ----D---- C:\Program Files\trend micro 2013-11-19 16:21:19 ----D---- C:\Users\Carl\AppData\Roaming\Adobe 2013-11-19 16:21:09 ----D---- C:\Users\Carl\AppData\Roaming\Google 2013-11-19 16:08:28 ----D---- C:\Users\Carl\AppData\Roaming\Macromedia 2013-11-19 16:06:04 ----D---- C:\Program Files\Microsoft Small Business 2013-11-19 16:03:30 ----D---- C:\Program Files\Microsoft SQL Server 2013-11-19 16:02:32 ----D---- C:\Program Files\Common Files\CyberLink 2013-11-19 16:02:07 ----D---- C:\Program Files\CyberLink 2013-11-19 16:01:51 ----A---- C:\Windows\system32\msxml3a.dll 2013-11-19 16:01:41 ----D---- C:\ProgramData\Temp 2013-11-19 15:57:17 ----A---- C:\Windows\system32\TSP1.dll 2013-11-19 15:56:31 ----D---- C:\Program Files\Fingerprint Sensor 2013-11-19 15:56:09 ----D---- C:\Windows\system32\BioAPIFFDB 2013-11-19 15:56:09 ----A---- C:\Windows\system32\bioapi100.dll.bak 2013-11-19 15:56:09 ----A---- C:\Windows\system32\bioapi100.dll 2013-11-19 15:56:09 ----A---- C:\Windows\system32\bioapi_mds300.dll.bak 2013-11-19 15:56:09 ----A---- C:\Windows\system32\bioapi_mds300.dll 2013-11-19 15:55:47 ----D---- C:\Users\Carl\AppData\Roaming\Wave Systems Corp 2013-11-19 15:55:39 ----D---- C:\Program Files\Wave Systems Corp 2013-11-19 15:55:28 ----D---- C:\Windows\system32\Test 2013-11-19 15:55:14 ----D---- C:\ProgramData\Wave Systems Corp 2013-11-19 15:53:04 ----D---- C:\Program Files\Microsoft Visual Studio 8 2013-11-19 15:49:35 ----AD---- C:\Program Files\Virtual Windows XP 2013-11-19 15:49:01 ----AD---- C:\book 2013-11-19 15:48:36 ----D---- C:\Users\Carl\AppData\Roaming\Identities 2013-11-19 15:40:28 ----D---- C:\Program Files\Acer Accessory Store 2013-11-19 15:40:00 ----D---- C:\Windows\system32\Lang 2013-11-19 15:40:00 ----A---- C:\Windows\system32\TVWizudlg.exe 2013-11-19 15:40:00 ----A---- C:\Windows\system32\igfxtvcx.dll 2013-11-19 15:39:44 ----SD---- C:\Users\Carl\AppData\Roaming\Microsoft 2013-11-19 15:39:44 ----D---- C:\Users\Carl\AppData\Roaming\Media Center Programs 2013-11-19 15:39:20 ----SHD---- C:\Recovery 2013-11-19 15:39:20 ----SHD---- C:\ProgramData\Sjablonen 2013-11-19 15:39:20 ----SHD---- C:\ProgramData\Menu Start 2013-11-19 15:39:20 ----SHD---- C:\ProgramData\Favorieten 2013-11-19 15:39:20 ----SHD---- C:\ProgramData\Documenten 2013-11-19 15:39:20 ----SHD---- C:\ProgramData\Bureaublad 2013-11-19 15:35:26 ----A---- C:\Windows\system32\PLD_Framework.cmd 2013-11-19 15:33:10 ----D---- C:\Windows\system32\RTCOM 2013-11-19 15:33:02 ----A---- C:\Windows\system32\WavesLib.dll 2013-11-19 15:33:02 ----A---- C:\Windows\system32\SRSWOW.dll 2013-11-19 15:33:02 ----A---- C:\Windows\system32\SRSTSXT.dll 2013-11-19 15:33:02 ----A---- C:\Windows\system32\SRSTSHD.dll 2013-11-19 15:33:02 ----A---- C:\Windows\system32\SRSHP360.dll 2013-11-19 15:33:02 ----A---- C:\Windows\system32\RtkPgExt.dll 2013-11-19 15:33:02 ----A---- C:\Windows\system32\RtkCoInst.dll 2013-11-19 15:33:02 ----A---- C:\Windows\system32\RtkApoApi.dll 2013-11-19 15:33:02 ----A---- C:\Windows\system32\RtkAPO.dll 2013-11-19 15:33:02 ----A---- C:\Windows\system32\RTEEP32A.dll 2013-11-19 15:33:02 ----A---- C:\Windows\system32\RTEEL32A.dll 2013-11-19 15:33:02 ----A---- C:\Windows\system32\RTEEG32A.dll 2013-11-19 15:33:02 ----A---- C:\Windows\system32\RTEED32A.dll 2013-11-19 15:33:02 ----A---- C:\Windows\system32\drivers\RTKVHDA.sys 2013-11-19 15:33:01 ----HD---- C:\Program Files\Temp 2013-11-19 15:33:01 ----D---- C:\Program Files\Realtek 2013-11-19 15:33:01 ----A---- C:\Windows\system32\RP3DHT32.dll 2013-11-19 15:33:01 ----A---- C:\Windows\system32\RP3DAA32.dll 2013-11-19 15:33:01 ----A---- C:\Windows\system32\MaxxAudioEQ.dll 2013-11-19 15:33:01 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll 2013-11-19 15:33:01 ----A---- C:\Windows\system32\MaxxAudioAPO.dll 2013-11-19 15:33:01 ----A---- C:\Windows\system32\FMAPO.dll 2013-11-19 15:33:01 ----A---- C:\Windows\system32\AERTARen.dll 2013-11-19 15:33:01 ----A---- C:\Windows\system32\AERTACap.dll 2013-11-19 15:33:01 ----A---- C:\Windows\RtlExUpd.dll 2013-11-19 15:32:59 ----D---- C:\Program Files\Common Files\InstallShield 2013-11-19 15:29:43 ----A---- C:\Windows\ATIDetect.txt 2013-11-19 15:28:39 ----D---- C:\Program Files\Common Files\Intel 2013-11-19 15:26:41 ----D---- C:\Windows\SoftwareDistribution 2013-11-19 15:24:18 ----D---- C:\Windows\CSC 2013-11-19 15:23:32 ----SHD---- C:\System Volume Information 2013-11-19 15:23:32 ----ASH---- C:\pagefile.sys 2013-11-19 15:23:32 ----ASH---- C:\hiberfil.sys ======List of files/folders modified in the last 1 month====== 2013-11-20 00:18:10 ----D---- C:\Windows\system32\en-US 2013-11-20 00:18:10 ----D---- C:\Windows\system32\drivers\en-US 2013-11-20 00:18:10 ----D---- C:\Windows\servicing 2013-11-20 00:18:10 ----D---- C:\Windows\IME 2013-11-20 00:18:09 ----D---- C:\Windows\system32\Dism 2013-11-20 00:15:45 ----D---- C:\Program Files\Windows Sidebar 2013-11-20 00:15:45 ----D---- C:\Program Files\Windows Photo Viewer 2013-11-20 00:15:45 ----D---- C:\Program Files\Windows Media Player 2013-11-20 00:15:45 ----D---- C:\Program Files\Windows Mail 2013-11-20 00:15:45 ----D---- C:\Program Files\Windows Journal 2013-11-20 00:15:45 ----D---- C:\Program Files\Windows Defender 2013-11-20 00:15:45 ----D---- C:\Program Files\Internet Explorer 2013-11-20 00:15:45 ----D---- C:\Program Files\DVD Maker 2013-11-20 00:15:45 ----D---- C:\Program Files\Common Files\System 2013-11-20 00:15:44 ----D---- C:\Windows\system32\winrm 2013-11-20 00:15:44 ----D---- C:\Windows\system32\sysprep 2013-11-20 00:15:44 ----D---- C:\Windows\system32\slmgr 2013-11-20 00:15:44 ----D---- C:\Windows\system32\oobe 2013-11-20 00:15:44 ----D---- C:\Windows\system32\migwiz 2013-11-20 00:15:44 ----D---- C:\Windows\system32\Boot 2013-11-20 00:15:44 ----D---- C:\Windows\PolicyDefinitions 2013-11-20 00:15:44 ----D---- C:\Windows\ehome 2013-11-20 00:15:44 ----D---- C:\Windows\DigitalLocker 2013-11-20 00:15:43 ----D---- C:\Windows\system32\WinBioPlugIns 2013-11-20 00:15:43 ----D---- C:\Windows\system32\WCN 2013-11-20 00:15:43 ----D---- C:\Windows\system32\Setup 2013-11-20 00:15:43 ----D---- C:\Windows\system32\Printing_Admin_Scripts 2013-11-20 00:15:43 ----D---- C:\Windows\system32\MUI 2013-11-20 00:15:43 ----D---- C:\Windows\system32\migration 2013-11-20 00:15:43 ----D---- C:\Windows\system32\drivers\UMDF 2013-11-20 00:15:42 ----D---- C:\Windows\system32\wbem 2013-11-20 00:15:42 ----D---- C:\Windows\system32\com 2013-11-20 00:15:42 ----D---- C:\Windows\AppPatch 2013-11-20 00:10:26 ----D---- C:\Windows\system32\zh-TW 2013-11-20 00:10:26 ----D---- C:\Windows\system32\tr-TR 2013-11-20 00:10:26 ----D---- C:\Windows\system32\ro-RO 2013-11-20 00:10:26 ----D---- C:\Windows\system32\pt-PT 2013-11-20 00:10:26 ----D---- C:\Windows\system32\pt-BR 2013-11-20 00:10:26 ----D---- C:\Windows\system32\nb-NO 2013-11-20 00:10:26 ----D---- C:\Windows\system32\ja-JP 2013-11-20 00:10:26 ----D---- C:\Windows\system32\it-IT 2013-11-20 00:10:26 ----D---- C:\Windows\system32\fr-FR 2013-11-20 00:10:26 ----D---- C:\Windows\system32\fi-FI 2013-11-20 00:10:26 ----D---- C:\Windows\system32\el-GR 2013-11-20 00:10:26 ----D---- C:\Windows\system32\de-DE 2013-11-20 00:10:26 ----D---- C:\Windows\system32\cs-CZ 2013-11-20 00:10:25 ----D---- C:\Windows\system32\zh-CN 2013-11-20 00:10:25 ----D---- C:\Windows\system32\th-TH 2013-11-20 00:10:25 ----D---- C:\Windows\system32\sv-SE 2013-11-20 00:10:25 ----D---- C:\Windows\system32\ru-RU 2013-11-20 00:10:25 ----D---- C:\Windows\system32\pl-PL 2013-11-20 00:10:25 ----D---- C:\Windows\system32\ko-KR 2013-11-20 00:10:25 ----D---- C:\Windows\system32\hu-HU 2013-11-20 00:10:25 ----D---- C:\Windows\system32\he-IL 2013-11-20 00:10:25 ----D---- C:\Windows\system32\es-ES 2013-11-20 00:10:25 ----D---- C:\Windows\system32\da-DK 2013-11-20 00:10:25 ----D---- C:\Windows\system32\ar-SA 2013-11-19 17:58:50 ----D---- C:\Windows\Prefetch 2013-11-19 17:58:44 ----D---- C:\Windows\Temp 2013-11-19 17:58:37 ----RD---- C:\Program Files 2013-11-19 17:52:17 ----D---- C:\Windows\system32\wdi 2013-11-19 16:45:20 ----RSD---- C:\Windows\assembly 2013-11-19 16:45:20 ----D---- C:\Windows\Microsoft.NET 2013-11-19 16:23:32 ----D---- C:\Windows\System32 2013-11-19 16:23:32 ----D---- C:\Windows\inf 2013-11-19 16:23:32 ----A---- C:\Windows\system32\PerfStringBackup.INI 2013-11-19 16:19:28 ----D---- C:\Windows\system 2013-11-19 16:18:53 ----D---- C:\Program Files\McAfee 2013-11-19 16:17:36 ----D---- C:\Windows\winsxs 2013-11-19 16:17:22 ----HD---- C:\OEM 2013-11-19 16:17:05 ----AD---- C:\Windows 2013-11-19 16:16:53 ----D---- C:\Windows\system32\OEM 2013-11-19 16:08:49 ----D---- C:\Windows\Help 2013-11-19 16:08:27 ----D---- C:\Program Files\Acer 2013-11-19 16:07:24 ----SHD---- C:\Windows\Installer 2013-11-19 16:06:48 ----SD---- C:\ProgramData\Microsoft 2013-11-19 16:06:45 ----D---- C:\Windows\system32\nl-NL 2013-11-19 16:06:09 ----D---- C:\Program Files\Common Files\microsoft shared 2013-11-19 16:06:08 ----D---- C:\Program Files\Microsoft Office 2013-11-19 16:04:29 ----D---- C:\Program Files\Microsoft.NET 2013-11-19 16:04:05 ----D---- C:\Windows\Registration 2013-11-19 16:02:42 ----D---- C:\Windows\system32\Tasks 2013-11-19 16:02:32 ----D---- C:\Program Files\Common Files 2013-11-19 16:02:31 ----HD---- C:\Program Files\InstallShield Installation Information 2013-11-19 16:01:41 ----HD---- C:\ProgramData 2013-11-19 16:01:29 ----A---- C:\Windows\system32\msvcr71.dll 2013-11-19 16:01:29 ----A---- C:\Windows\system32\msvcp71.dll 2013-11-19 15:58:30 ----D---- C:\Windows\system32\drivers 2013-11-19 15:56:34 ----D---- C:\Windows\system32\DriverStore 2013-11-19 15:56:34 ----D---- C:\Windows\system32\catroot 2013-11-19 15:55:14 ----D---- C:\Windows\Downloaded Installations 2013-11-19 15:54:19 ----D---- C:\Windows\system32\config 2013-11-19 15:54:08 ----D---- C:\ProgramData\Microsoft Help 2013-11-19 15:52:57 ----D---- C:\Windows\ShellNew 2013-11-19 15:52:48 ----A---- C:\Windows\win.ini 2013-11-19 15:51:32 ----D---- C:\Windows\system32\restore 2013-11-19 15:49:29 ----AD---- C:\Windows\DeployWinRE2 2013-11-19 15:48:33 ----SHD---- C:\$Recycle.Bin 2013-11-19 15:42:15 ----D---- C:\ProgramData\McAfee 2013-11-19 15:41:07 ----D---- C:\Windows\Tasks 2013-11-19 15:40:50 ----D---- C:\ProgramData\OEM 2013-11-19 15:40:00 ----D---- C:\Program Files\Intel 2013-11-19 15:39:52 ----D---- C:\Windows\rescache 2013-11-19 15:39:41 ----RD---- C:\Users 2013-11-19 15:39:31 ----D---- C:\Windows\Panther 2013-11-19 15:39:20 ----D---- C:\Program Files\Windows NT 2013-11-19 15:38:41 ----D---- C:\Windows\debug 2013-11-19 15:35:36 ----D---- C:\Windows\system32\catroot2 2013-11-19 15:28:24 ----D---- C:\Intel ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 eLock2BurnerLockDriver;Disk Performance Monitor Filter Driver; C:\Windows\system32\DRIVERS\eLock2BurnerLockDriver.sys [2008-03-12 22560] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584] R1 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2009-06-18 214024] R1 MPFP;MPFP; C:\Windows\System32\Drivers\Mpfp.sys [2009-04-09 130424] R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2013-11-20 55040] R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2013-11-20 294912] R2 eLock2FSCTLDriver;eLock2FSCTLDriver; C:\Windows\system32\DRIVERS\eLock2FSCTLDriver.sys [2008-03-12 87072] R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704] R2 tvicport;tvicport; \??\C:\Windows\system32\drivers\tvicport.sys [2009-02-05 14544] R2 WavxDMgr;WavxDMgr; C:\Windows\system32\DRIVERS\WavxDMgr.sys [2009-10-09 205824] R2 zntport;zntport; \??\C:\Windows\system32\drivers\zntport.sys [2009-02-05 6080] R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2007-11-15 274984] R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-11-06 6229504] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-11-17 2807392] R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [2009-06-18 79816] R3 mfebopk;McAfee Inc. mfebopk; C:\Windows\system32\drivers\mfebopk.sys [2009-06-18 35272] R3 mfesmfk;McAfee Inc. mfesmfk; C:\Windows\system32\drivers\mfesmfk.sys [2009-06-18 40552] R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-06 15360] R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-06 14336] R3 vpcbus;Hostbusservice voor Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2013-11-20 165376] R3 vpcusb;Connectorservice voor USB-virtualisatie; C:\Windows\system32\DRIVERS\vpcusb.sys [2013-11-20 78336] S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720] S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312] S3 mferkdk;McAfee Inc. mferkdk; C:\Windows\system32\drivers\mferkdk.sys [2009-06-18 34248] S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120] S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632] S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304] S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224] S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328] S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736] S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824] S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 ASLSvc;Acer SmartBoot Service; C:\Program Files\Acer\Acer SmartBoot\ASLSvc.exe [2009-05-13 417792] R2 BcmSqlStartupSvc;Opstartservice voor SQL Server voor Business Contact Manager; C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2008-01-16 30312] R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 eLockService;eLock Service; C:\Program Files\Acer\Empowering Technology\eLock\Service\eLockServ.exe [2009-02-17 24576] R2 ETService;Empowering Technology Service; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [2009-02-18 24576] R2 Greg_Service;GRegService; C:\Program Files\Acer\Registration\GregHSRW.exe [2009-08-28 1150496] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\McAfee\SiteAdvisor\McSACore.exe [2009-12-08 93320] R2 mcmscsvc;McAfee Services; C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe [2009-07-23 865832] R2 McNASvc;McAfee Network Agent; c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe [2009-04-09 2482848] R2 McProxy;McAfee Proxy Service; c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe [2009-04-09 359952] R2 McShield;McAfee Real-time Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [2009-06-18 144704] R2 MpfService;McAfee Personal Firewall Service; C:\Program Files\McAfee\MPF\MPFSrv.exe [2009-07-22 894136] R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\McAfee\MSK\MskSrver.exe [2009-04-10 26640] R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-11-18 255744] R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-11-24 87904] R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160] R3 McSysmon;McAfee SystemGuards; C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe [2009-06-17 606736] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992] S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-12-11 182768] S3 McODS;McAfee Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe [2009-06-17 365072] S3 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2008-11-24 29263712] S3 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-08-25 935208] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 Partner Service;Partner Service; C:\ProgramData\Partner\Partner.exe [2009-12-11 332272] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 SecureStorageService;SecureStorageService; C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe [2009-06-03 1019904] S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2008-11-24 45408] S4 SQLBrowser;SQL Server-browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-11-24 239968] -----------------EOF-----------------