Logfile of random's system information tool 1.10 (written by random/random)
Run by SATURN at 2014-06-21 15:30:21
Microsoft Windows 8.1 
System drive C: has 749 GB (83%) free of 905 GB
Total RAM: 8053 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:30:24, on 21/06/2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\USB Camera\VM331STI.EXE
C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.1 Home Edition\bin\EpmNews.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\OpenOffice.org 3\program\swriter.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files\trend micro\SATURN.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [MuteSync] C:\Program Files (x86)\Lenovo\Lenovo MuteSync\MuteSync.exe
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [EaseUS EPM tray] C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.1 Home Edition\bin\EpmNews.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Starter] C:\Program Files (x86)\Driver-Soft\DriverGenius\StarterW3i.exe
O4 - HKLM\..\Run: [TkBellExe] "c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot
O4 - HKLM\..\Run: [G Data AntiVirus Tray] C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
O4 - HKLM\..\Run: [GDFirewallTray] C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - HKCU\..\Run: [Spybot-S&D Cleaning] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean
O4 - HKUS\S-1-5-21-3044803408-375196487-3353611470-1001\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser')
O4 - Startup: OneNote 2010 Schermopname en Snel starten.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O4 - Startup: OpenOffice.org 3.4.1.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: G Data AntiVirus Proxy (AVKProxy) - G Data Software AG - C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
O23 - Service: G Data Scheduler (AVKService) - G Data Software AG - C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
O23 - Service: G Data Bestandssysteembewaker (AVKWCtl) - G Data Software AG - C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe
O23 - Service: @oem34.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\WINDOWS\system32\BtwRSupportService.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: G Data Personal Firewall (GDFwSvc) - G Data Software AG - C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
O23 - Service: G Data Scanner (GDScan) - G Data Software AG - C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NitroPDFReaderDriverCreatorReadSpool3 (NitroReaderDriverReadSpool3) - Nitro PDF Software - C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 14345 bytes

======Listing Processes======





wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
"C:\windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe"
"C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\WLANExt.exe 908502819296
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe"
"C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe"
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
dashost.exe {6e9910fa-14bc-47d1-b031db77f84f3a6f}
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe"
"C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe"
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
"C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-6b265316-4903-426e-a932-c113edeb55c0 -SystemEventPortName:HostProcess-3bd2ff68-0a1a-4035-828b-3faf790d12f2 -IoCancelEventPortName:HostProcess-f0e12d8c-5236-417e-bae5-06063e6b8bc1 -NonStateChangingEventPortName:HostProcess-ae005f15-cde6-4cdd-8aca-509f7b85d58d -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:ee72c569-9a00-4667-933c-37eb790927dc -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe" -Embedding
taskhost.exe $(Arg0)

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
 -hiberboot
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
"\Program Files\Synaptics\SynTP\SynTPEnh.exe" 
taskhostex.exe 
C:\WINDOWS\Explorer.EXE
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE" 
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE4
"C:\Windows\System32\igfxtray.exe" 
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe" 
"C:\Windows\System32\igfxpers.exe" 
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" 
"C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m
"C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe" 
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe" 
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe" 
"C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE" 
"C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\USB Camera\VM331STI.EXE" 
"C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
"C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe" 
"C:\Program Files (x86)\Lenovo\Lenovo MuteSync\MuteSync.exe" 
"C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.1 Home Edition\bin\EpmNews.exe" 
"C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe" -osboot
"C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe" 
"C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe"
"C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe" 
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" 
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" 
"C:\Program Files (x86)\OpenOffice.org 3\program\swriter.exe" -o "C:\rsit\info.txt"
"C:\Program Files (x86)\OpenOffice.org 3\program\swriter.exe" -o "C:\rsit\info.txt" -writer
"C:\Program Files (x86)\OpenOffice.org 3\program\swriter.exe" "-o" "C:\rsit\info.txt" "-writer" "-env:OOO_CWD=2C:\\WINDOWS\\SYSWOW64\\drivers"
C:\WINDOWS\splwow64.exe 12288

"C:\Users\SATURN\Downloads\RSITx64.exe" 
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\ReclaimerUpdateFiles_SATURN.job - C:\Users\SATURN\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.01\agent\rnupgagent.exe /UpdateFiles
C:\WINDOWS\tasks\ReclaimerUpdateXML_SATURN.job - C:\Users\SATURN\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.01\agent\rnupgagent.exe /UpdateXML
C:\WINDOWS\tasks\RNUpgradeHelperLogonPrompt_SATURN.job - C:\Users\SATURN\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.01\agent\rnupgagent.exe /prompt os_boot
C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 

=========Mozilla firefox=========

ProfilePath - C:\Users\SATURN\AppData\Roaming\Mozilla\Firefox\Profiles\x9nwfa44.default-1400014748703

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 13.0.0.214 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nitropdf.com/NitroPDF]
"Description"=NitroPDF Web Browser Plugin
"Path"=C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3]
"Description"=RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In
"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3]
"Description"=RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In
"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3]
"Description"=RealNetworks(tm) RealDownloader Peppe rFlash Video Shim Plug-In
"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51]
"Description"=RealPlayer Download Plugin
"Path"=c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@realnetworks.com/npdlplugin;version=1]
"Description"=RealDownloader Plugin
"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 13.0.0.214 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL


C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
nppl3260.dll
nppl3260.xpt
nprpplugin.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealNetworks Download and Record Plugin for Internet Explorer - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14 542376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-07-27 12937872]
"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2012-07-10 1214608]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-04 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-04 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-04 769496]
"SynLenovoGestureMgr"=C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [2012-08-16 665400]
"OnekeyStudio"=C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [2012-08-10 4196432]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2012-10-14 17079376]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2012-10-14 191568]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-08-16 2916152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OfficeSyncProcess"=C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [2013-04-22 720064]
"Spybot-S&D Cleaning"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [2013-09-20 3666224]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331STI.EXE [2012-05-01 548864]
"Dolby Home Theater v4"=C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2012-07-26 508656]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2012-07-27 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2012-07-27 167024]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2012-04-19 217088]
"RemoteControl10"=C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [2012-03-29 91432]
"Intel AppUp(SM) center"=C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2012-07-12 155488]
"MuteSync"=C:\Program Files (x86)\Lenovo\Lenovo MuteSync\MuteSync.exe [2012-02-04 343040]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"EaseUS EPM tray"=C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.1 Home Edition\bin\EpmNews.exe [2012-11-29 2086984]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"Starter"=C:\Program Files (x86)\Driver-Soft\DriverGenius\StarterW3i.exe []
"TkBellExe"=c:\program files (x86)\real\realplayer\Update\realsched.exe [2013-12-17 295512]
"G Data AntiVirus Tray"=C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe [2013-08-21 1444472]
"GDFirewallTray"=C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [2013-03-22 1854928]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2013-07-25 5624784]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

C:\Users\SATURN\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OneNote 2010 Schermopname en Snel starten.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
OpenOffice.org 3.4.1.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-04 623616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"HideFastUserSwitching"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera]
"Debugger="tasklist.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-06-21 15:18:20 ----D---- C:\rsit
2014-06-21 15:18:20 ----D---- C:\Program Files\trend micro
2014-06-19 10:15:48 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-06-12 19:10:26 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-06-12 19:10:25 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-06-12 19:10:24 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-06-12 19:10:23 ----A---- C:\WINDOWS\SYSWOW64\gdi32.dll
2014-06-12 19:10:23 ----A---- C:\WINDOWS\system32\gdi32.dll
2014-06-12 19:10:22 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-06-12 19:10:21 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-06-12 19:10:21 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-06-12 19:10:21 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-06-12 19:10:21 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-06-12 19:10:20 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-06-12 19:10:20 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-06-12 19:10:20 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-06-12 19:10:19 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-06-12 19:10:18 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-06-12 19:10:18 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-06-12 19:10:18 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-06-12 19:10:18 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-06-12 19:10:17 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-06-12 19:10:17 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-06-12 19:10:16 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-06-12 19:10:16 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-06-12 19:10:15 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-06-12 19:10:15 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-06-12 19:10:15 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-06-12 19:10:15 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-06-12 19:10:14 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-06-12 19:10:14 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-06-12 19:10:13 ----A---- C:\WINDOWS\system32\wininet.dll
2014-06-12 19:10:12 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-06-12 19:10:10 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-06-12 19:10:10 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-06-12 19:10:07 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-06-12 19:10:07 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-06-12 19:10:06 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2014-06-12 19:10:04 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-06-12 19:10:04 ----A---- C:\WINDOWS\system32\WSReset.exe
2014-06-12 19:10:04 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-12 19:10:03 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-06-12 19:10:03 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-12 19:09:49 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-06-12 19:09:48 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-06-12 19:09:48 ----A---- C:\WINDOWS\system32\twinui.dll
2014-06-12 19:09:47 ----A---- C:\WINDOWS\system32\shell32.dll
2014-06-12 19:09:45 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-06-12 19:09:44 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2014-06-12 19:09:44 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-06-12 19:09:43 ----A---- C:\WINDOWS\system32\Windows.Data.Pdf.dll
2014-06-12 19:09:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Data.Pdf.dll
2014-06-12 19:09:41 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-06-12 19:09:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-06-12 19:09:40 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-06-12 19:09:39 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-06-12 19:09:38 ----A---- C:\WINDOWS\SYSWOW64\d3d9.dll
2014-06-12 19:09:38 ----A---- C:\WINDOWS\system32\gpsvc.dll
2014-06-12 19:09:38 ----A---- C:\WINDOWS\system32\d3d9.dll
2014-06-12 19:09:34 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-06-12 19:09:32 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-06-12 19:09:32 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-06-12 19:09:32 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-06-12 19:09:31 ----A---- C:\WINDOWS\system32\mfcore.dll
2014-06-12 19:09:30 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2014-06-12 19:09:30 ----A---- C:\WINDOWS\system32\win32k.sys
2014-06-12 19:09:29 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-06-12 19:09:29 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-06-12 19:09:28 ----A---- C:\WINDOWS\system32\localspl.dll
2014-06-12 19:09:27 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2014-06-12 19:09:27 ----A---- C:\WINDOWS\SYSWOW64\mfmpeg2srcsnk.dll
2014-06-12 19:09:27 ----A---- C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-06-12 19:09:27 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-06-12 19:09:26 ----AC---- C:\WINDOWS\system32\drivers\bthport.sys
2014-06-12 19:09:26 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2014-06-12 19:09:26 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2014-06-12 19:09:26 ----A---- C:\WINDOWS\system32\winmde.dll
2014-06-12 19:09:26 ----A---- C:\WINDOWS\system32\mfsvr.dll
2014-06-12 19:09:25 ----A---- C:\WINDOWS\SYSWOW64\mfsvr.dll
2014-06-12 19:09:25 ----A---- C:\WINDOWS\system32\wmpmde.dll
2014-06-12 19:09:24 ----AC---- C:\WINDOWS\system32\drivers\volsnap.sys
2014-06-12 19:09:24 ----A---- C:\WINDOWS\SYSWOW64\XpsGdiConverter.dll
2014-06-12 19:09:24 ----A---- C:\WINDOWS\SYSWOW64\GeofenceMonitorService.dll
2014-06-12 19:09:24 ----A---- C:\WINDOWS\system32\XpsGdiConverter.dll
2014-06-12 19:09:24 ----A---- C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-06-12 19:09:24 ----A---- C:\WINDOWS\system32\srvsvc.dll
2014-06-12 19:09:24 ----A---- C:\WINDOWS\system32\services.exe
2014-06-12 19:09:24 ----A---- C:\WINDOWS\system32\MDEServer.exe
2014-06-12 19:09:24 ----A---- C:\WINDOWS\system32\GeofenceMonitorService.dll
2014-06-12 19:09:24 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2014-06-12 19:09:24 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2014-06-12 19:09:24 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2014-06-12 19:09:24 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2014-06-12 19:09:24 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-06-12 19:09:23 ----AC---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2014-06-12 19:09:23 ----A---- C:\WINDOWS\SYSWOW64\winmde.dll
2014-06-12 19:09:23 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.Streaming.dll
2014-06-12 19:09:23 ----A---- C:\WINDOWS\SYSWOW64\rdpencom.dll
2014-06-12 19:09:23 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2014-06-12 19:09:23 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-06-12 19:09:23 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-06-12 19:09:23 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-06-12 19:09:23 ----A---- C:\WINDOWS\system32\swprv.dll
2014-06-12 19:09:23 ----A---- C:\WINDOWS\system32\resutils.dll
2014-06-12 19:09:23 ----A---- C:\WINDOWS\system32\rdpencom.dll
2014-06-12 19:09:23 ----A---- C:\WINDOWS\system32\ploptin.dll
2014-06-12 19:09:23 ----A---- C:\WINDOWS\system32\MFCaptureEngine.dll
2014-06-12 19:09:23 ----A---- C:\WINDOWS\system32\dwmapi.dll
2014-06-12 19:09:23 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2014-06-12 19:09:23 ----A---- C:\WINDOWS\system32\drivers\fvevol.sys
2014-06-12 19:09:23 ----A---- C:\WINDOWS\system32\drivers\Classpnp.sys
2014-06-12 19:09:23 ----A---- C:\WINDOWS\system32\defragsvc.dll
2014-06-12 19:09:23 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-06-12 19:09:22 ----AC---- C:\WINDOWS\system32\drivers\spaceport.sys
2014-06-12 19:09:22 ----AC---- C:\WINDOWS\system32\drivers\msiscsi.sys
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\wintrust.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\tlscsp.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\rpchttp.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\resutils.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\MSVideoDSP.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\MFCaptureEngine.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\mf.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\gpapi.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\d3d8thk.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\wscsvc.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\wintrust.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\VSSVC.exe
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\tlscsp.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\srcore.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\rpchttp.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\propsys.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\MSVideoDSP.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\mispace.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\mfps.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\mfpmp.exe
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\mfplat.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\mf.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\gpapi.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\energyprov.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\drivers\storport.sys
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\clusapi.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\BootMenuUX.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-06-12 19:09:22 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-06-12 19:09:21 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\SYSWOW64\wlanhlp.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\SYSWOW64\srclient.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\system32\wlansvc.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\system32\wlansec.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\system32\wlanhlp.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\system32\wlanapi.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\system32\tsgqec.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\system32\srclient.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-06-12 19:09:21 ----A---- C:\WINDOWS\system32\rstrui.exe
2014-06-12 19:09:21 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2014-06-12 19:09:21 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-06-12 19:09:06 ----A---- C:\WINDOWS\SYSWOW64\drvinst.exe
2014-06-12 19:09:06 ----A---- C:\WINDOWS\system32\DWrite.dll
2014-06-12 19:09:06 ----A---- C:\WINDOWS\system32\drvinst.exe
2014-06-12 19:09:06 ----A---- C:\WINDOWS\system32\drvcfg.exe
2014-06-12 19:09:05 ----A---- C:\WINDOWS\SYSWOW64\DWrite.dll
2014-06-12 19:09:05 ----A---- C:\WINDOWS\system32\FntCache.dll
2014-06-12 19:08:54 ----A---- C:\WINDOWS\SYSWOW64\Wpc.dll
2014-06-12 19:08:54 ----A---- C:\WINDOWS\system32\WpcWebSync.dll
2014-06-12 19:08:54 ----A---- C:\WINDOWS\system32\WpcMon.exe
2014-06-12 19:08:54 ----A---- C:\WINDOWS\system32\wpccpl.dll
2014-06-12 19:08:54 ----A---- C:\WINDOWS\system32\Wpc.dll
2014-06-12 19:08:54 ----A---- C:\WINDOWS\system32\drivers\wpcfltr.sys
2014-06-12 19:07:43 ----A---- C:\WINDOWS\SYSWOW64\tsgqec.dll
2014-06-12 19:07:02 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-06-12 19:07:02 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-06-12 19:06:59 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-06-12 19:06:59 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-06-12 19:06:59 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-06-12 19:06:59 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-06-12 19:06:59 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-06-12 19:06:59 ----A---- C:\WINDOWS\system32\ieetwcollectorres.dll
2014-06-12 19:06:59 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-06-12 19:06:58 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-06-12 19:06:58 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-06-12 19:06:57 ----A---- C:\WINDOWS\system32\msrating.dll
2014-06-11 20:46:04 ----D---- C:\WINDOWS\nl
2014-06-11 20:45:14 ----D---- C:\Program Files\Windows Live
2014-06-11 20:45:06 ----D---- C:\Program Files (x86)\Windows Live
2014-06-11 20:44:40 ----A---- C:\WINDOWS\SYSWOW64\XAudio2_7.dll
2014-06-11 20:44:40 ----A---- C:\WINDOWS\SYSWOW64\XAPOFX1_5.dll
2014-06-11 20:44:40 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_43.dll
2014-06-11 20:44:40 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2014-06-11 20:44:40 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2014-06-11 20:44:40 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2014-06-11 20:44:39 ----A---- C:\WINDOWS\SYSWOW64\d3dx11_43.dll
2014-06-11 20:44:39 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2014-06-11 20:44:22 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_42.dll
2014-06-11 20:44:22 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2014-06-11 20:43:58 ----A---- C:\WINDOWS\SYSWOW64\d3dx9_32.dll
2014-06-11 20:43:58 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2014-06-11 20:43:20 ----D---- C:\ProgramData\Microsoft OneDrive
2014-05-29 22:56:04 ----ASH---- C:\hiberfil.sys
2014-05-29 22:53:27 ----A---- C:\WINDOWS\system32\sh4native.exe
2014-05-25 14:53:32 ----A---- C:\autoexec.bat
2014-05-25 14:53:14 ----A---- C:\WINDOWS\system32\drivers\EsgScanner.sys
2014-05-25 14:53:10 ----D---- C:\sh4ldr
2014-05-25 14:53:10 ----D---- C:\Program Files\Enigma Software Group
2014-05-25 14:52:53 ----D---- C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-05-25 11:21:09 ----D---- C:\Program Files (x86)\Trend Micro
2014-05-24 09:54:10 ----D---- C:\Users\SATURN\AppData\Roaming\WinRAR
2014-05-24 09:53:07 ----D---- C:\Program Files (x86)\WinRAR

======List of files/folders modified in the last 1 month======

2014-06-21 15:30:08 ----D---- C:\WINDOWS\Temp
2014-06-21 15:26:16 ----D---- C:\WINDOWS\Prefetch
2014-06-21 15:18:20 ----RD---- C:\Program Files
2014-06-21 15:00:00 ----D---- C:\WINDOWS\system32\sru
2014-06-21 14:58:22 ----D---- C:\WINDOWS\system32\Tasks
2014-06-20 17:54:06 ----D---- C:\WINDOWS\Tasks
2014-06-20 16:46:48 ----D---- C:\WINDOWS\AppReadiness
2014-06-20 15:28:46 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-20 15:28:39 ----RD---- C:\Program Files (x86)
2014-06-20 15:25:15 ----D---- C:\WINDOWS\Inf
2014-06-19 09:56:50 ----D---- C:\WINDOWS\Microsoft.NET
2014-06-19 00:48:25 ----D---- C:\Users\SATURN\AppData\Roaming\Nitro PDF
2014-06-19 00:48:21 ----D---- C:\WINDOWS\system32\FxsTmp
2014-06-17 06:48:22 ----SHD---- C:\System Volume Information
2014-06-17 06:47:59 ----D---- C:\WINDOWS\system32\config
2014-06-17 02:52:00 ----D---- C:\WINDOWS\system32\DriverStore
2014-06-16 09:46:46 ----D---- C:\WINDOWS\WinSxS
2014-06-16 07:31:20 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2014-06-16 07:27:54 ----D---- C:\WINDOWS\Minidump
2014-06-16 07:27:45 ----D---- C:\Windows
2014-06-15 20:31:43 ----SHD---- C:\WINDOWS\Installer
2014-06-15 20:31:43 ----D---- C:\Program Files (x86)\Common Files
2014-06-15 20:31:36 ----D---- C:\WINDOWS\SysWOW64
2014-06-14 14:57:16 ----HD---- C:\Program Files\WindowsApps
2014-06-12 22:40:56 ----D---- C:\WINDOWS\rescache
2014-06-12 22:28:59 ----RD---- C:\WINDOWS\System32
2014-06-12 22:28:59 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-06-12 21:53:02 ----D---- C:\WINDOWS\system32\catroot2
2014-06-12 21:27:37 ----D---- C:\Program Files\Internet Explorer
2014-06-12 21:27:37 ----D---- C:\Program Files (x86)\Internet Explorer
2014-06-12 21:27:36 ----RD---- C:\WINDOWS\ToastData
2014-06-12 21:27:36 ----D---- C:\WINDOWS\WinStore
2014-06-12 21:27:36 ----D---- C:\WINDOWS\system32\drivers
2014-06-12 21:27:35 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-06-12 21:27:35 ----D---- C:\WINDOWS\system32\oobe
2014-06-12 21:27:35 ----D---- C:\WINDOWS\system32\drivers\nl-NL
2014-06-12 21:25:43 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-06-12 21:25:43 ----D---- C:\WINDOWS\system32\nl-NL
2014-06-12 21:25:42 ----D---- C:\WINDOWS\system32\wbem
2014-06-12 21:25:42 ----D---- C:\WINDOWS\system32\migration
2014-06-12 19:24:12 ----D---- C:\WINDOWS\CbsTemp
2014-06-12 19:23:29 ----D---- C:\ProgramData\Microsoft Help
2014-06-12 19:19:40 ----D---- C:\WINDOWS\system32\MRT
2014-06-12 19:16:19 ----A---- C:\WINDOWS\system32\MRT.exe
2014-06-12 19:15:12 ----RSD---- C:\WINDOWS\assembly
2014-06-11 20:46:37 ----SD---- C:\Users\SATURN\AppData\Roaming\Microsoft
2014-06-11 20:45:39 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-06-11 20:45:12 ----D---- C:\Program Files\Common Files\microsoft shared
2014-06-11 20:43:55 ----D---- C:\WINDOWS\Logs
2014-06-11 20:43:20 ----HD---- C:\ProgramData
2014-06-11 20:41:00 ----SD---- C:\ProgramData\Microsoft
2014-06-11 20:30:43 ----D---- C:\WINDOWS\tracing
2014-06-07 08:29:10 ----D---- C:\WINDOWS\system32\NDF
2014-06-02 23:57:28 ----D---- C:\Users\SATURN\AppData\Roaming\vlc
2014-05-31 07:13:24 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-05-29 23:48:19 ----D---- C:\Program Files (x86)\PokerStars.BE
2014-05-29 22:55:19 ----D---- C:\Program Files (x86)\Settings Manager

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 GDBehave;GDBehave; C:\WINDOWS\system32\drivers\GDBehave.sys [2014-02-23 60248]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-07-09 645952]
R0 LHDmgr;LHDmgr; C:\WINDOWS\System32\DRIVERS\LhdX64.sys [2012-10-14 39008]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2013-09-05 30496]
R1 GDMnIcpt;GDMnIcpt; \??\C:\WINDOWS\system32\drivers\MiniIcpt.sys [2014-02-23 130392]
R1 gdwfpcd;G Data WFP CD; C:\WINDOWS\system32\drivers\gdwfpcd64.sys [2014-02-23 68440]
R1 GRD;G Data Rootkit Detector Driver; \??\C:\WINDOWS\system32\drivers\GRD.sys [2014-02-23 106272]
R1 HookCentre;HookCentre; \??\C:\WINDOWS\system32\drivers\HookCentre.sys [2014-02-23 65368]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2013-08-22 71680]
R3 ACPIVPC;@oem20.inf,%ACPIVPC.SvcDesc%;Lenovo Virtual Power Controller Driver; C:\WINDOWS\System32\drivers\AcpiVpc.sys [2012-10-14 33560]
R3 bcbtums;@oem34.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\WINDOWS\system32\drivers\bcbtums.sys [2013-09-04 170712]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;USB-stuurprogramma voor Bluetooth-radio; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-01-31 81920]
R3 btwampfl;@oem34.inf,%btwampfl.ServiceName%;btwampfl; C:\WINDOWS\system32\DRIVERS\btwampfl.sys [2013-09-04 166104]
R3 GDPkIcpt;GDPkIcpt; \??\C:\WINDOWS\system32\drivers\PktIcpt.sys [2014-02-23 64856]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-04 4185600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-07-31 4102928]
R3 IntcDAud;@oem30.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-06-19 342528]
R3 iwdbus;@oem33.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-09-26 27032]
R3 MEIx64;@oem28.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-03 62784]
R3 NETwNe64;@netwew00.inf,___ %NIC_Service_DispName_WIN8_64%;___ Stuurprogramma voor Intel(R) Wireless WiFi Link 5000 Series-adapter voor 64-bits Windows 8; C:\WINDOWS\system32\DRIVERS\NETwew00.sys [2013-07-08 3344352]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2013-09-05 11273504]
R3 RSUSBVSTOR;@oem9.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUVStor.sys [2012-06-15 315536]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT-stuurprogramma; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2012-08-16 43832]
R3 SynTP;@oem11.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2012-08-16 447800]
R3 vm331avs;@oem13.inf,%USBCamera.DeviceDesc2%;Digital Camera 1; C:\WINDOWS\System32\Drivers\vm331avs.sys [2012-08-23 975104]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2013-08-22 36864]
S2 EsgScanner;EsgScanner; C:\WINDOWS\system32\DRIVERS\EsgScanner.sys [2012-06-22 22704]
S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth-apparaat (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2013-08-22 118272]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Stuurprogramma voor Bluetooth-poort; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-04-11 1200128]
S3 btwaudio;@oem3.inf,%btaudio.SvcDesc%;Bluetooth-audioapparaat; C:\WINDOWS\system32\drivers\btwaudio.sys [2012-07-26 186680]
S3 btwavdt;@oem3.inf,%btwavdt.SvcDesc%;Bluetooth AVDT; C:\WINDOWS\System32\drivers\btwavdt.sys [2012-07-26 212792]
S3 btwl2cap;@oem6.inf,%btwl2cap.SVCDESC%;Bluetooth L2CAP Service; C:\WINDOWS\system32\DRIVERS\btwl2cap.sys [2012-07-27 40248]
S3 btwrchid;btwrchid; C:\WINDOWS\System32\drivers\btwrchid.sys [2012-07-26 22328]
S3 dot4;@oem24.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2012-10-19 151968]
S3 Dot4Print;@oem25.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\WINDOWS\System32\drivers\Dot4Prt.sys [2012-10-19 27040]
S3 dot4usb;@oem24.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2012-10-19 49056]
S3 epmntdrv;epmntdrv; \??\C:\WINDOWS\syswow64\epmntdrv.sys [2012-12-21 14920]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [2014-01-07 14872]
S3 EuGdiDrv;EuGdiDrv; \??\C:\WINDOWS\syswow64\EuGdiDrv.sys [2012-12-21 9160]
S3 intaud_WaveExtensible;@oem32.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-09-26 39320]
S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-01-27 167424]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Stuurprogramma voor USB-scanner; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVKProxy;G Data AntiVirus Proxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2013-08-26 1970296]
R2 AVKService;G Data Scheduler; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [2013-08-21 635000]
R2 AVKWCtl;G Data Bestandssysteembewaker; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [2013-10-15 2562208]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2012-08-17 953720]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2012-07-18 627504]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2012-07-13 2451456]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-07-18 128896]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-18 165760]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-18 276864]
R2 NitroReaderDriverReadSpool3;NitroPDFReaderDriverCreatorReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [2013-03-26 230416]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2013-08-30 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-09-05 1364256]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [2013-08-14 39056]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2012-07-18 149296]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2013-10-15 3921880]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2013-09-20 1042272]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2013-09-13 171416]
R2 SpyHunter 4 Service;SpyHunter 4 Service; C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [2014-01-09 1025408]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-18 364416]
R3 GDFwSvc;G Data Personal Firewall; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2013-10-17 2942808]
R3 GDScan;G Data Scanner; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [2013-08-22 695416]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 BcmBtRSupport;@oem34.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\WINDOWS\system32\BtwRSupportService.exe [2013-09-04 2252504]
S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-17 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-13 257712]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-04 279000]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-03-17 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-06-19 119408]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2012-07-18 272176]
S3 ose;Office  Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]

-----------------EOF-----------------