Logfile of random's system information tool 1.10 (written by random/random) Run by Felix at 2014-05-25 15:20:55 Microsoft Windows 7 Professional Service Pack 1 System drive C: has 232 GB (49%) free of 477 GB Total RAM: 2554 MB (37% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 15:21:10, on 25-5-2014 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17041) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Program Files\Norton Utilities 15\Tools\Disk Doctor\DiskDoctorSrvProxy.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\ASRock Utility\InstantBoot\InstantBoot.exe C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe C:\Program Files\AVG SafeGuard toolbar\vprot.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\NVIDIA Corporation\Display\nvtray.exe C:\Program Files\Norton Internet Security\Engine\21.3.0.12\NIS.exe C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe C:\Users\Felix\AppData\Roaming\Spotify\spotify.exe C:\Users\Felix\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE C:\Program Files\Norton Utilities 15\Tools\SpeedDisk\SpeedDiskSrvProxy.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\Felix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Felix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Felix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\PROGRA~1\Raptr\raptr.exe C:\PROGRA~1\Raptr\raptr_im.exe C:\Users\Felix\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Windows\system32\NOTEPAD.EXE C:\Users\Felix\Downloads\RSIT.exe C:\Program Files\trend micro\Felix.exe C:\Windows\system32\DllHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2865317 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - (no file) O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: IB Updater Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: uTorrentBar_NL - {87775fdb-6972-41f9-ae51-8326e38cb206} - (no file) O2 - BHO: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.1.5.512\AVG SafeGuard toolbar_toolbar.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - (no file) O3 - Toolbar: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\18.1.5.512\AVG SafeGuard toolbar_toolbar.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe" O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG SafeGuard toolbar\vprot.exe" O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe" MSRun O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start O4 - HKCU\..\Run: [Google Update] "C:\Users\Felix\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Raptr] C:\PROGRA~1\Raptr\raptrstub.exe --startup O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe" O4 - HKCU\..\Run: [Spotify] "C:\Users\Felix\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Felix\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_9E0E8FB6AB9E32E413BF1FD50A17F104] "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-2656376448-397107024-246631922-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser') O4 - HKUS\S-1-5-21-2656376448-397107024-246631922-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser') O4 - Startup: OneNote 2010 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000 O8 - Extra context menu item: Klant openen op monitor &1 - C:\Windows\web\AOpenClient.htm O8 - Extra context menu item: Klant openen op monitor &7 - C:\Windows\web\AOpenClient.htm O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.5\ViProtocol.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe O23 - Service: Norton Disk Doctor Service (DiskDoctorService) - Symantec Corporation - C:\Program Files\Norton Utilities 15\Tools\Disk Doctor\DiskDoctorSrv.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\NIS.exe O23 - Service: Pure Networks Platform Service (nmservice) - Cisco Systems, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe O23 - Service: RadeonPro Support Service - Mr. John aka japamd - C:\Program Files\RadeonPro\RadeonProSupport.exe O23 - Service: RzKLService - Razer Inc. - C:\Program Files\Razer\Razer Game Booster\RzKLService.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: Norton SpeedDisk Service (SpeedDiskService) - Symantec Corporation - C:\Program Files\Norton Utilities 15\Tools\SpeedDisk\SpeedDiskSrv.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: vToolbarUpdater18.1.5 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.5\ToolbarUpdater.exe -- End of file - 12013 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2656376448-397107024-246631922-1000Core.job - C:\Users\Felix\AppData\Local\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2656376448-397107024-246631922-1000UA.job - C:\Users\Felix\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\NUSchedule.job - C:\Program Files\Norton Utilities 15\nu.exe /F ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}] MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll [2014-01-16 96128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08 77424] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}] IB Updater - C:\Program Files\IB Updater\Extension32.dll [2013-01-29 170840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}] Norton Identity Protection - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll [2014-04-28 654176] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}] Norton Vulnerability Protection - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL [2014-02-21 392344] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-04-14 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{87775fdb-6972-41f9-ae51-8326e38cb206}] uTorrentBar_NL Toolbar [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] AVG SafeGuard toolbar - C:\Program Files\AVG SafeGuard toolbar\18.1.5.512\AVG SafeGuard toolbar_toolbar.dll [2014-05-08 3592728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 562904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-04-14 171944] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {87775fdb-6972-41f9-ae51-8326e38cb206} - {95B7759C-8C7F-4BF1-B163-73684A933233} - AVG SafeGuard toolbar - C:\Program Files\AVG SafeGuard toolbar\18.1.5.512\AVG SafeGuard toolbar_toolbar.dll [2014-05-08 3592728] {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll [2014-04-28 654176] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "nmctxth"=C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe [2009-07-07 647216] "vProt"=C:\Program Files\AVG SafeGuard toolbar\vprot.exe [2014-05-08 2561560] "BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184] "SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336] "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2013-05-08 41056] "Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576] "StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [2014-04-17 748256] "LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2014-05-13 3814736] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Google Update"=C:\Users\Felix\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-12 116648] "Raptr"=C:\PROGRA~1\Raptr\raptrstub.exe [2014-05-15 55360] "HydraVisionDesktopManager"=C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [2011-05-24 393216] "Spotify"=C:\Users\Felix\AppData\Roaming\Spotify\spotify.exe [2014-05-14 6170168] "Spotify Web Helper"=C:\Users\Felix\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-05-14 1176632] "GoogleChromeAutoLaunch_9E0E8FB6AB9E32E413BF1FD50A17F104"=C:\Program Files\Google\Chrome\Application\chrome.exe [2014-05-14 860488] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Clownfish] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM] C:\Program Files\Origin\Origin.exe [2014-05-08 3588952] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update] C:\Users\Felix\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-12 116648] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HydraVisionDesktopManager] C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [2011-05-24 393216] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe [2013-05-15 152392] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn GUI] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2014-05-13 3814736] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nmapp] C:\Program Files\Pure Networks\Network Magic\nmapp.exe [2009-07-08 472112] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ProfilerU] C:\Program Files\SmartTechnology\Software\ProfilerU.exe [2012-10-15 327680] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2000-01-01 10996368] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SaiMfd] C:\Program Files\SmartTechnology\Software\SaiMfd.exe [2012-10-15 122880] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SaitekInstall] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SaiVolume] C:\Program Files\Saitek\CyborgKeyboard\SaiVolume.exe [2008-01-18 126976] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion] C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [2013-03-18 448736] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] C:\Program Files\Steam\Steam.exe [2014-05-21 1775808] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\XFastUsb] C:\Program Files\XFastUsb\XFastUsb.exe [2013-01-20 4942336] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Felix^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip] [] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup OneNote 2010 Schermopname en Snel starten.lnk - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 4171480] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "vidc.uyvy"=msyuv.dll "vidc.yuy2"=msyuv.dll "vidc.yvyu"=msyuv.dll "vidc.iyuv"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "vidc.yvu9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "vidc.cvid"=iccvid.dll "msacm.l3codecp"=l3codecp.acm "msacm.divxa32"=msaud32_divx.acm "wave6"=wdmaud.drv "midi6"=wdmaud.drv "mixer6"=wdmaud.drv "aux2"=wdmaud.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave5"=wdmaud.drv "midi5"=wdmaud.drv "mixer5"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "wave3"=wdmaud.drv "midi3"=wdmaud.drv "mixer3"=wdmaud.drv "wave4"=wdmaud.drv "midi4"=wdmaud.drv "mixer4"=wdmaud.drv "aux1"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 3 months====== 2014-05-25 15:16:17 ----D---- C:\Program Files\trend micro 2014-05-25 15:15:47 ----D---- C:\rsit 2014-05-14 12:45:41 ----D---- C:\Program Files\LogMeIn Hamachi 2014-05-14 12:39:41 ----D---- C:\Program Files\Common Files\DESIGNER 2014-05-14 12:30:12 ----A---- C:\Windows\system32\mshtmled.dll 2014-05-14 12:30:09 ----A---- C:\Windows\system32\mshtml.dll 2014-05-14 11:29:22 ----A---- C:\Windows\system32\aepdu.dll 2014-05-14 11:29:21 ----A---- C:\Windows\system32\aeinv.dll 2014-05-14 11:29:07 ----A---- C:\Windows\system32\ntoskrnl.exe 2014-05-14 11:29:07 ----A---- C:\Windows\system32\ntkrnlpa.exe 2014-05-14 11:29:07 ----A---- C:\Windows\system32\kerberos.dll 2014-05-14 11:29:06 ----A---- C:\Windows\system32\winlogon.exe 2014-05-14 11:29:06 ----A---- C:\Windows\system32\msv1_0.dll 2014-05-14 11:29:06 ----A---- C:\Windows\system32\lsasrv.dll 2014-05-14 11:29:05 ----A---- C:\Windows\system32\wdigest.dll 2014-05-14 11:29:05 ----A---- C:\Windows\system32\TSpkg.dll 2014-05-14 11:29:05 ----A---- C:\Windows\system32\schannel.dll 2014-05-14 11:29:05 ----A---- C:\Windows\system32\objsel.dll 2014-05-14 11:29:05 ----A---- C:\Windows\system32\KernelBase.dll 2014-05-14 11:29:05 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2014-05-14 11:29:05 ----A---- C:\Windows\system32\dimsroam.dll 2014-05-14 11:29:05 ----A---- C:\Windows\system32\cngprovider.dll 2014-05-14 11:29:05 ----A---- C:\Windows\system32\adprovider.dll 2014-05-14 11:29:04 ----A---- C:\Windows\system32\wincredprovider.dll 2014-05-14 11:29:04 ----A---- C:\Windows\system32\sspisrv.dll 2014-05-14 11:29:04 ----A---- C:\Windows\system32\sspicli.dll 2014-05-14 11:29:04 ----A---- C:\Windows\system32\secur32.dll 2014-05-14 11:29:04 ----A---- C:\Windows\system32\lsass.exe 2014-05-14 11:29:04 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2014-05-14 11:29:04 ----A---- C:\Windows\system32\dpapiprovider.dll 2014-05-14 11:29:04 ----A---- C:\Windows\system32\credssp.dll 2014-05-14 11:29:04 ----A---- C:\Windows\system32\capiprovider.dll 2014-05-14 11:28:19 ----A---- C:\Windows\system32\shell32.dll 2014-05-08 23:13:32 ----D---- C:\ProgramData\AVG Secure Search 2014-05-06 21:06:15 ----SD---- C:\Windows\system32\CompatTel 2014-04-29 18:50:04 ----D---- C:\Users\Felix\AppData\Roaming\Spotify 2014-04-29 15:22:56 ----A---- C:\Windows\system32\javaws.exe 2014-04-29 15:22:50 ----A---- C:\Windows\system32\WindowsAccessBridge.dll 2014-04-29 15:22:50 ----A---- C:\Windows\system32\javaw.exe 2014-04-29 15:22:50 ----A---- C:\Windows\system32\java.exe 2014-04-29 14:54:19 ----A---- C:\Windows\system32\vbscript.dll 2014-04-29 14:54:16 ----A---- C:\Windows\system32\ieui.dll 2014-04-29 14:54:05 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2014-04-29 14:54:05 ----A---- C:\Windows\system32\ieapfltr.dll 2014-04-29 14:54:04 ----A---- C:\Windows\system32\msrating.dll 2014-04-29 14:54:04 ----A---- C:\Windows\system32\msfeeds.dll 2014-04-29 14:54:03 ----A---- C:\Windows\system32\jsproxy.dll 2014-04-29 14:54:01 ----A---- C:\Windows\system32\dxtrans.dll 2014-04-29 14:54:01 ----A---- C:\Windows\system32\dxtmsft.dll 2014-04-29 14:54:00 ----A---- C:\Windows\system32\ieUnatt.exe 2014-04-29 14:54:00 ----A---- C:\Windows\system32\iesetup.dll 2014-04-29 14:54:00 ----A---- C:\Windows\system32\iernonce.dll 2014-04-29 14:54:00 ----A---- C:\Windows\system32\ie4uinit.exe 2014-04-29 14:53:59 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-29 14:53:58 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-29 14:53:58 ----A---- C:\Windows\system32\jscript9diag.dll 2014-04-29 14:53:58 ----A---- C:\Windows\system32\ieetwproxystub.dll 2014-04-29 14:53:58 ----A---- C:\Windows\system32\ieetwcollector.exe 2014-04-29 14:53:53 ----A---- C:\Windows\system32\iertutil.dll 2014-04-29 14:53:52 ----A---- C:\Windows\system32\wininet.dll 2014-04-29 14:53:51 ----A---- C:\Windows\system32\urlmon.dll 2014-04-29 14:53:48 ----A---- C:\Windows\system32\ieframe.dll 2014-04-29 14:53:46 ----A---- C:\Windows\system32\jscript9.dll 2014-04-28 14:07:18 ----D---- C:\ProgramData\ATI 2014-04-27 14:29:22 ----D---- C:\Program Files\AMD AVT 2014-04-25 14:02:33 ----D---- C:\Program Files\McAfee Security Scan 2014-04-22 14:33:14 ----D---- C:\ProgramData\McAfee Security Scan 2014-04-22 14:33:09 ----D---- C:\ProgramData\McAfee 2014-04-18 04:43:04 ----A---- C:\Windows\system32\atimpc32.dll 2014-04-18 04:43:04 ----A---- C:\Windows\system32\amdpcom32.dll 2014-04-18 04:42:58 ----A---- C:\Windows\system32\atiuxpag.dll 2014-04-18 04:42:42 ----A---- C:\Windows\system32\atidxx32.dll 2014-04-18 04:39:04 ----A---- C:\Windows\system32\drivers\amdacpksd.sys 2014-04-18 04:35:20 ----A---- C:\Windows\system32\drivers\atikmdag.sys 2014-04-18 04:23:02 ----A---- C:\Windows\system32\clinfo.exe 2014-04-18 04:22:48 ----A---- C:\Windows\system32\OpenVideo.dll 2014-04-18 04:22:38 ----A---- C:\Windows\system32\OVDecode.dll 2014-04-18 04:19:54 ----A---- C:\Windows\system32\amdocl.dll 2014-04-18 04:17:24 ----A---- C:\Windows\system32\OpenCL.dll 2014-04-18 04:13:10 ----A---- C:\Windows\system32\mantle32.dll 2014-04-18 03:58:32 ----A---- C:\Windows\system32\amdmantle32.dll 2014-04-18 03:51:44 ----A---- C:\Windows\system32\atioglxx.dll 2014-04-18 03:46:34 ----A---- C:\Windows\system32\atiapfxx.exe 2014-04-18 03:46:24 ----A---- C:\Windows\system32\aticalrt.dll 2014-04-18 03:46:18 ----A---- C:\Windows\system32\aticalcl.dll 2014-04-18 03:45:46 ----A---- C:\Windows\system32\mantleaxl32.dll 2014-04-18 03:42:52 ----A---- C:\Windows\system32\aticaldd.dll 2014-04-18 03:33:02 ----A---- C:\Windows\system32\amdmmcl.dll 2014-04-18 03:30:14 ----A---- C:\Windows\system32\atidemgy.dll 2014-04-18 03:29:58 ----A---- C:\Windows\system32\atimuixx.dll 2014-04-18 03:29:40 ----A---- C:\Windows\system32\atieclxx.exe 2014-04-18 03:29:16 ----A---- C:\Windows\system32\atiesrxx.exe 2014-04-18 03:28:24 ----A---- C:\Windows\system32\atitmmxx.dll 2014-04-18 03:21:26 ----A---- C:\Windows\system32\coinst_14.100.dll 2014-04-18 03:08:56 ----A---- C:\Windows\system32\atiadlxx.dll 2014-04-18 03:07:46 ----A---- C:\Windows\system32\atiglpxx.dll 2014-04-18 03:07:20 ----A---- C:\Windows\system32\atigktxx.dll 2014-04-18 03:06:30 ----A---- C:\Windows\system32\drivers\atikmpag.sys 2014-04-18 03:04:24 ----A---- C:\Windows\system32\drivers\ati2erec.dll 2014-04-17 22:28:30 ----A---- C:\Windows\system32\kdbsdk32.dll 2014-04-13 19:48:02 ----D---- C:\Program Files\Common Files\Skype 2014-04-13 19:48:00 ----RD---- C:\Program Files\Skype 2014-04-10 19:58:46 ----A---- C:\Windows\system32\ativce02.dat 2014-04-10 10:22:24 ----A---- C:\Windows\system32\iologmsg.dll 2014-04-10 10:22:24 ----A---- C:\Windows\system32\drivers\storport.sys 2014-04-10 10:22:24 ----A---- C:\Windows\system32\drivers\msiscsi.sys 2014-04-10 10:22:24 ----A---- C:\Windows\system32\drivers\Diskdump.sys 2014-04-10 10:22:21 ----A---- C:\Windows\system32\drivers\ntfs.sys 2014-04-10 10:22:20 ----A---- C:\Windows\system32\kernel32.dll 2014-04-01 00:06:22 ----A---- C:\Windows\system32\ativvaxy_cik.dat 2014-04-01 00:04:42 ----A---- C:\Windows\system32\ativvaxy_cik_nd.dat 2014-03-28 14:37:23 ----D---- C:\Windows\Minidump 2014-03-13 17:14:41 ----A---- C:\Windows\system32\qedit.dll 2014-03-13 17:14:33 ----A---- C:\Windows\system32\wwansvc.dll 2014-03-13 17:14:32 ----A---- C:\Windows\system32\win32k.sys 2014-03-13 17:14:30 ----A---- C:\Windows\system32\WindowsCodecs.dll 2014-03-13 17:14:26 ----A---- C:\Windows\system32\wer.dll 2014-02-27 23:14:29 ----D---- C:\Windows\Migration ======List of files/folders modified in the last 3 months====== 2014-05-25 15:20:24 ----D---- C:\Windows\Temp 2014-05-25 15:18:03 ----D---- C:\Windows\Prefetch 2014-05-25 15:16:40 ----D---- C:\Windows\system32\config 2014-05-25 15:16:17 ----RD---- C:\Program Files 2014-05-25 15:10:45 ----AD---- C:\ProgramData\Temp 2014-05-25 15:05:17 ----D---- C:\Users\Felix\AppData\Roaming\Raptr 2014-05-24 15:41:02 ----SHD---- C:\System Volume Information 2014-05-24 15:40:33 ----D---- C:\Windows\system32\drivers 2014-05-24 15:39:00 ----D---- C:\ProgramData\NVIDIA 2014-05-24 11:52:36 ----D---- C:\Program Files\Steam 2014-05-24 11:29:14 ----D---- C:\Program Files\Raptr 2014-05-23 19:28:43 ----D---- C:\Program Files\Common Files\Steam 2014-05-22 16:36:04 ----D---- C:\Windows\system32\Tasks 2014-05-22 16:34:48 ----D---- C:\Windows\system32\drivers\NIS 2014-05-21 15:52:26 ----A---- C:\Windows\system32\FlashPlayerApp.exe 2014-05-20 23:31:20 ----SHD---- C:\Windows\Installer 2014-05-20 23:31:19 ----D---- C:\Users\Felix\AppData\Roaming\Mozilla 2014-05-19 19:02:54 ----D---- C:\Windows\rescache 2014-05-14 12:56:18 ----D---- C:\Windows\Microsoft.NET 2014-05-14 12:54:59 ----RSD---- C:\Windows\assembly 2014-05-14 12:45:08 ----D---- C:\Windows\winsxs 2014-05-14 12:43:01 ----D---- C:\Windows\System32 2014-05-14 12:43:00 ----D---- C:\Windows\system32\nl-NL 2014-05-14 12:43:00 ----D---- C:\Windows\PolicyDefinitions 2014-05-14 12:41:44 ----D---- C:\ProgramData\Microsoft Help 2014-05-14 12:39:41 ----D---- C:\Program Files\Common Files 2014-05-14 12:39:10 ----D---- C:\Windows\system32\MRT 2014-05-14 12:36:28 ----A---- C:\Windows\system32\MRT.exe 2014-05-14 12:30:35 ----D---- C:\Windows\system32\catroot 2014-05-14 11:28:04 ----D---- C:\Windows\system32\catroot2 2014-05-14 00:24:24 ----D---- C:\Users\Felix\AppData\Roaming\BitTorrent 2014-05-08 23:13:32 ----HD---- C:\ProgramData 2014-05-08 23:12:48 ----D---- C:\Program Files\AVG SafeGuard toolbar 2014-05-08 15:36:19 ----D---- C:\ProgramData\Origin 2014-05-08 15:35:23 ----D---- C:\Program Files\Origin 2014-05-06 20:50:33 ----D---- C:\Users\Felix\AppData\Roaming\Skype 2014-04-29 15:32:49 ----D---- C:\ProgramData\Oracle 2014-04-29 15:22:50 ----D---- C:\Program Files\Java 2014-04-29 15:12:11 ----D---- C:\Windows\system32\en-US 2014-04-29 15:12:10 ----D---- C:\Program Files\Internet Explorer 2014-04-28 20:36:07 ----D---- C:\Windows 2014-04-27 23:57:42 ----D---- C:\ProgramData\AMD 2014-04-27 14:27:44 ----D---- C:\Program Files\ATI Technologies 2014-04-27 14:27:00 ----D---- C:\Windows\LiveKernelReports 2014-04-27 14:22:46 ----D---- C:\Windows\inf 2014-04-27 14:22:44 ----D---- C:\Windows\system32\DriverStore 2014-04-25 14:08:44 ----D---- C:\Windows\Tasks 2014-04-23 13:48:22 ----RD---- C:\Users 2014-04-18 04:42:56 ----A---- C:\Windows\system32\atiu9pag.dll 2014-04-18 04:42:52 ----A---- C:\Windows\system32\aticfx32.dll 2014-04-18 04:42:38 ----A---- C:\Windows\system32\atiumdva.dll 2014-04-18 04:42:34 ----A---- C:\Windows\system32\atiumdag.dll 2014-04-16 17:23:11 ----D---- C:\Windows\Logs 2014-04-13 19:48:45 ----D---- C:\ProgramData\Skype 2014-04-10 23:31:49 ----D---- C:\Windows\system32\NDF 2014-04-02 11:44:31 ----SD---- C:\Users\Felix\AppData\Roaming\Microsoft 2014-03-31 15:25:46 ----A---- C:\Windows\system32\PerfStringBackup.INI 2014-03-27 18:38:28 ----D---- C:\Program Files\RadeonPro 2014-03-23 17:24:59 ----D---- C:\Program Files\Norton Utilities 15 2014-03-13 23:21:25 ----D---- C:\Program Files\Microsoft Silverlight 2014-03-12 19:17:11 ----D---- C:\Program Files\World of Warcraft 2014-03-02 14:48:21 ----D---- C:\Windows\system32\wdi 2014-02-27 23:14:29 ----SD---- C:\ProgramData\Microsoft ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440] R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NIS\1503000.00C\SYMDS.SYS [2013-09-10 367704] R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NIS\1503000.00C\SYMEFA.SYS [2014-03-04 936152] R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360] R1 AsrAppCharger;AsrAppCharger; C:\Windows\system32\DRIVERS\AsrAppCharger.sys [2011-05-10 15656] R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx86.sys [2014-05-08 42784] R1 BHDrvx86;BHDrvx86; \??\C:\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140510.001\BHDrvx86.sys [2014-05-10 1101616] R1 ccSet_NIS;NIS Settings Manager; C:\Windows\system32\drivers\NIS\1503000.00C\ccSetx86.sys [2013-09-26 127064] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096] R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2013-12-23 376920] R1 FNETURPX;FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [2013-01-20 14656] R1 IDSVix86;IDSVix86; \??\C:\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140523.001\IDSvix86.sys [2014-03-26 395992] R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\Windows\system32\drivers\NIS\1503000.00C\SRTSPX.SYS [2013-09-10 32344] R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NIS\1503000.00C\Ironx86.SYS [2013-09-27 206936] R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NIS\1503000.00C\SYMNETS.SYS [2014-02-18 447704] R2 AODDriver4.2.0;AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2014-02-11 50400] R2 pnarp;Pure Networks Device Discovery Driver; C:\Windows\system32\DRIVERS\pnarp.sys [2009-07-07 26672] R2 purendis;Pure Networks Wireless Driver; C:\Windows\system32\DRIVERS\purendis.sys [2009-07-07 27696] R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-04-18 13515264] R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-04-18 512000] R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2011-03-04 100328] R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2011-03-04 309224] R3 AsrIbDrv;AsrIbDrv; \??\C:\Windows\system32\Drivers\AsrIbDrv.sys [] R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2013-12-19 77824] R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-12-23 108120] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840] R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2000-01-01 3240400] R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt32.sys [2000-01-01 24664] R3 NAVENG;NAVENG; \??\C:\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140524.016\NAVENG.SYS [2013-12-23 93272] R3 NAVEX15;NAVEX15; \??\C:\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140524.016\NAVEX15.SYS [2013-12-23 1612376] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2000-01-01 154400] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-04-21 381032] R3 SaiK0728;SaiK0728; C:\Windows\system32\DRIVERS\SaiK0728.sys [2000-01-01 130568] R3 SaiK0CD7;SaiK0CD7; C:\Windows\system32\DRIVERS\SaiK0CD7.sys [2012-09-20 145216] R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2012-10-15 22760] R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2012-10-15 46184] R3 SaiU0CD7;SaiU0CD7; C:\Windows\system32\DRIVERS\SaiU0CD7.sys [2012-09-20 41280] R3 SRTSP;Symantec Real Time Storage Protection; C:\Windows\System32\Drivers\NIS\1503000.00C\SRTSP.SYS [2014-02-13 664280] R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2013-11-12 142936] R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2012-08-28 45736] S2 AODDriver4.3;AODDriver4.3; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2014-02-11 50400] S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704] S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720] S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312] S3 amdiox86;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox86.sys [] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888] S3 FNETTBOH_305;FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [2013-01-20 29248] S3 HTCAND32;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-10-26 25088] S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2012-12-07 23040] S3 lmimirr;lmimirr; C:\Windows\system32\DRIVERS\lmimirr.sys [] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848] S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632] S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304] S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032] S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2014-02-11 13464] S3 SymDSMon;SymDSMon; \??\C:\Windows\system32\drivers\SymDSMon.sys [2010-11-30 128248] S3 SYMSpeedDisk;SYMSpeedDisk; \??\C:\Windows\system32\drivers\SymSpeedDisk.sys [2010-11-30 108800] S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 49664] S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2012-12-13 45056] S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328] S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736] S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920] S3 vmci;VMware VMCI Bus Driver; C:\Windows\system32\DRIVERS\vmci.sys [] S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\Windows\system32\DRIVERS\vmnetadapter.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-04-18 208896] R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2014-04-17 276992] R2 DiskDoctorService;Norton Disk Doctor Service; C:\Program Files\Norton Utilities 15\Tools\Disk Doctor\DiskDoctorSrv.exe [2010-11-30 1029480] R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-04-15 375056] R2 NIS;Norton Internet Security; C:\Program Files\Norton Internet Security\Engine\21.3.0.12\NIS.exe [2014-05-11 276376] R2 nmservice;Pure Networks Platform Service; C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe [2009-07-07 647216] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-06-21 640288] R2 PassThru Service;Internet Pass-Through Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [2012-12-07 167424] R2 RzKLService;RzKLService; C:\Program Files\Razer\Razer Game Booster\RzKLService.exe [2013-09-18 106472] R2 SpeedDiskService;Norton SpeedDisk Service; C:\Program Files\Norton Utilities 15\Tools\SpeedDisk\SpeedDiskSrv.exe [2010-11-30 1037672] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-06-21 413472] R2 vToolbarUpdater18.1.5;vToolbarUpdater18.1.5; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.5\ToolbarUpdater.exe [2014-05-08 1801752] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 gupdate;Google Update-service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-20 116648] S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2014-05-13 1682768] S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2000-01-01 1266464] S2 RadeonPro Support Service;RadeonPro Support Service; C:\Program Files\RadeonPro\RadeonProSupport.exe [2013-04-13 20608] S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992] S3 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688] S3 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-20 116648] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 108032] S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-05-15 553288] S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [2014-01-16 235696] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2014-05-21 564416] S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-01-24 1343400] S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-21 257712] S4 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008] S4 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 390504] S4 HTCMonitorService;HTCMonitorService; C:\Program Files\HTC\HTC Sync Manager\HSMServiceEntry.exe [2013-01-29 87368] S4 IB Updater;IB Updater; C:\Program Files\IB Updater\ExtensionUpdaterService.exe [2013-01-29 188760] S4 IBUpdaterService;IBUpdaterService; C:\Windows\system32\dmwu.exe [2013-04-07 1156400] S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 Sony PC Companion;Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824] -----------------EOF-----------------