Logfile of random's system information tool 1.10 (written by random/random)
Run by Ricardo at 2014-07-27 23:35:09
Microsoft Windows 7 Professional  Service Pack 1
System drive C: has 171 GB (58%) free of 295 GB
Total RAM: 2942 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:35:14, on 27-7-2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG2013\avgui.exe
C:\Program Files\Trusteer\Rapport\bin\RapportService.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
C:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE
C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
C:\Program Files\WinZip\zipsendservice.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\program files\plus-hd-v1.5\plus-hd-v1.5-bg.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Windows\system32\Macromed\Flash\FlashUtil32_14_0_0_145_ActiveX.exe
C:\Windows\System32\MsSpellCheckingFacility.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Ricardo\Desktop\pc\RSIT.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\trend micro\Ricardo.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll
O2 - BHO: CrossriderApp0059562 - {11111111-1111-1111-1111-110511951162} - C:\Program Files\Plus-HD-V1.5\Plus-HD-V1.5-bho.dll
O2 - BHO: Wondershare Player 1.6.0 - {43D9786F-A485-683B-9B5B-ACC97ABC17FC} - C:\ProgramData\Wondershare\Player\WSBrowserAppMgr.dll
O2 - BHO: Linkey - {4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} - C:\Users\Ricardo\AppData\Local\Linkey\IEEXTE~1\iedll.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
O4 - HKLM\..\Run: [DelaypluginInstall] C:\ProgramData\Wondershare\Player\DelayPluginI.exe
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - (no file)
O18 - Protocol: WSIEChrome - {6D02ED5F-FD0D-4C4C - (no file)
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Users\Ricardo\AppData\Local\Linkey\IEEXTE~1\iedll.dll 
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
O23 - Service: Rapport Management Service (RapportMgmtService) - Trusteer Ltd. - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 9837 bytes

======Scheduled tasks folder======

C:\Windows\tasks\1a865e51-8d7f-47ac-a7cc-49d250e98ec8-1.job - C:\Program Files\Plus-HD-V1.5\Plus-HD-V1.5-codedownloader.exe  /WHlKt /FTjVrg=task /Tslqtz='Plus-HD-V1.5' /sXvLS=59562 /sXpxq='001690' /jAErLa='0' /RsOnpaMiX='0' /gZLMO=B446689414E34783AE6FF62AB72A0A14IE /eHTOvF=4fd7ea51e81f3e77fc4171c19a0a6e45 /UvyZbFWfj=1_34_06_10 /jNWHyHawn=1.34.6.10 /yFIPXHM=1403728818 /QGQNPkKYM=http://stats.datagenserv.com /gxkGk=http://errors.datagenserv.com /SqYoDeZx=http://js.datagenserv.com /MlWHEFwVW=ie /ZnpqwPR=http://js.clientdemocloud.com /zTlKDOn /lWWiCcsy='{"asw":[1, 8388609, 0]}' /gWZbpO='http://update.datagenserv.com/ie_code_agent_updates/{CAMP_ID}/update.json' /FTjVrg='task' /pVTnMrrL='' 
C:\Windows\tasks\1a865e51-8d7f-47ac-a7cc-49d250e98ec8-11.job - C:\Program Files\Plus-HD-V1.5\1a865e51-8d7f-47ac-a7cc-49d250e98ec8-11.exe  /XwFCMrok=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 
C:\Windows\tasks\1a865e51-8d7f-47ac-a7cc-49d250e98ec8-2.job - C:\Program Files\Plus-HD-V1.5\1a865e51-8d7f-47ac-a7cc-49d250e98ec8-2.exe  /bRXuUn /Tslqtz='Plus-HD-V1.5' /sXvLS=59562 /sXpxq='001690' /jAErLa='0' /RsOnpaMiX='0' /gZLMO=B446689414E34783AE6FF62AB72A0A14IE /eHTOvF=4fd7ea51e81f3e77fc4171c19a0a6e45 /UvyZbFWfj=1_34_06_10 /yFIPXHM=1403728818 /QGQNPkKYM=http://stats.datagenserv.com /gxkGk=http://errors.datagenserv.com /wNQhIi=11111111-1111-1111-1111-110511951162 /MlWHEFwVW=ie /eeiRG /zTlKDOn /gWZbpO='http://update.datagenserv.com/ie_enable_agent_updates/{CAMP_ID}/update.json' /FTjVrg='task' /pVTnMrrL='' 
C:\Windows\tasks\1a865e51-8d7f-47ac-a7cc-49d250e98ec8-3.job - C:\Program Files\Plus-HD-V1.5\1a865e51-8d7f-47ac-a7cc-49d250e98ec8-3.exe  /XwFCMrok=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 
C:\Windows\tasks\1a865e51-8d7f-47ac-a7cc-49d250e98ec8-4.job - C:\Program Files\Plus-HD-V1.5\1a865e51-8d7f-47ac-a7cc-49d250e98ec8-4.exe  /nnpqzAL /Tslqtz='Plus-HD-V1.5' /psCFJxWE='C:\Program Files\Plus-HD-V1.5\59562.xpi' /sXvLS=59562 /sXpxq='001690' /jAErLa='0' /RsOnpaMiX='0' /gZLMO=B446689414E34783AE6FF62AB72A0A14IE /eHTOvF=4fd7ea51e81f3e77fc4171c19a0a6e45 /UvyZbFWfj=1_34_06_10 /jNWHyHawn=1.34.6.10 /yFIPXHM=1403728818 /QGQNPkKYM=http://stats.datagenserv.com /gxkGk=http://errors.datagenserv.com /KHILDCqN=300 /XQgyEst=809710cc-b432-49dc-9140-7828943a0e27@84b67896-5412-4e3f-a6d3-fa7dc6e439e3.com /aiFjXgPBF=0.94 /XlPlpbW=a809710ccb43249dc91407828943a0e2784b6789654124e3fa6d3fa7dc6e439e3com59562 /hAEaKYUOo=https://w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/59562.rdf /HASuxAmKm='Plus-HD-V1.5' /XfoJF='Turn YouTube videos to High Definition by default' /BEgWi='Plus-HD-V1.5' /MlWHEFwVW=ie /lWWiCcsy='{"asw":[1, 8388609, 0]}' /zTlKDOn /ABIwhz /nzuCxSnaK /gWZbpO='http://update.datagenserv.com/ff_agent_updates/{CAMP_ID}/update.json' /FTjVrg='task' /pVTnMrrL='' 
C:\Windows\tasks\1a865e51-8d7f-47ac-a7cc-49d250e98ec8-5.job - C:\Program Files\Plus-HD-V1.5\1a865e51-8d7f-47ac-a7cc-49d250e98ec8-5.exe  /qEVKuN /Tslqtz='Plus-HD-V1.5' /sXvLS=59562 /sXpxq='001690' /jAErLa='0' /RsOnpaMiX='0' /gZLMO=B446689414E34783AE6FF62AB72A0A14IE /eHTOvF=4fd7ea51e81f3e77fc4171c19a0a6e45 /UvyZbFWfj=1_34_06_10 /yFIPXHM=1403728818 /QGQNPkKYM=http://stats.datagenserv.com /gxkGk=http://errors.datagenserv.com /MMAHfXhXJ=http://ipgeoapi.com/ /Lqpjr=http://update.datagenserv.com /qPTtcuuqI=2 /QCpKW=http://logs.datagenserv.com /gWZbpO='http://update.datagenserv.com/updater_agent_updates/{CAMP_ID}/update.json' /FTjVrg='task' /pVTnMrrL='' 
C:\Windows\tasks\1a865e51-8d7f-47ac-a7cc-49d250e98ec8-6.job - C:\Program Files\Plus-HD-V1.5\Plus-HD-V1.5-novainstaller.exe  /lsApTW /Tslqtz='Plus-HD-V1.5' /sXvLS=59562 /sXpxq='001690' /jAErLa='0' /RsOnpaMiX='0' /gZLMO=B446689414E34783AE6FF62AB72A0A14IE /eHTOvF=4fd7ea51e81f3e77fc4171c19a0a6e45 /UvyZbFWfj=1_34_06_10 /jNWHyHawn=1.34.6.10 /yFIPXHM=1403728818 /QGQNPkKYM=http://stats.datagenserv.com /gxkGk=http://errors.datagenserv.com /SqYoDeZx=http://js.datagenserv.com /MlWHEFwVW=ie /EkgeIU /VtDJGirtN='nova' /ZnpqwPR=http://js.clientdemocloud.com /lWWiCcsy='{"asw":[1, 8388609, 0]}' /FTjVrg=task /gWZbpO='http://update.datagenserv.com/novacode/{CAMP_ID}/update.json' /FTjVrg='task' /pVTnMrrL='' 
C:\Windows\tasks\1a865e51-8d7f-47ac-a7cc-49d250e98ec8-7.job - C:\Program Files\Plus-HD-V1.5\Plus-HD-V1.5-nova.exe  /Tslqtz='Plus-HD-V1.5' /sXvLS=59562 /sXpxq='001690' /jAErLa='0' /RsOnpaMiX='0' /gZLMO=B446689414E34783AE6FF62AB72A0A14IE /eHTOvF=4fd7ea51e81f3e77fc4171c19a0a6e45 /UvyZbFWfj=1_34_06_10 /jNWHyHawn=1.34.6.10 /yFIPXHM=1403728818 /QGQNPkKYM=http://stats.datagenserv.com /gxkGk=http://errors.datagenserv.com /SqYoDeZx=http://js.datagenserv.com /MlWHEFwVW=ie /EkgeIU /VtDJGirtN='nova' /ZnpqwPR=http://js.clientdemocloud.com /lWWiCcsy='{"asw":[1, 8388609, 0]}' /gWZbpO='http://update.datagenserv.com/novarun/{CAMP_ID}/update.json' /FTjVrg='task' /pVTnMrrL='' 
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe  
C:\Windows\tasks\ea727281-8281-467f-bafd-cf5fb6f1777a-1.job - C:\Program Files\The weDownload Manager\The weDownload Manager-codedownloader.exe  /zUIWYxHPv /tViKnPt=task /xQuGqOftY='The weDownload Manager' /DZzxQFcD=49074 /TdQZcHWR='000898' /rbBZTdiDY='verticals-' /ZmEYwF='0' /mGGRaIid=B446689414E34783AE6FF62AB72A0A14IE /WwMdIO=4fd7ea51e81f3e77fc4171c19a0a6e45 /NSHCoQ=1_34_3_28 /hkowLX=1.34.3.28 /qutyT=1398555875 /UKuAqxp=http://stats.clientdataservice.com /lULIESRR=http://errors.clientdataservice.com /qKlsrhiY=http://js.clientdataservice.com /IsnvtF=ie /wVQcpJB /hdMfoFC='http://update.clientdataservice.com/ie_code_agent_updates/{CAMP_ID}/update.json' /tViKnPt='task' /CtLpxQU='' 
C:\Windows\tasks\ea727281-8281-467f-bafd-cf5fb6f1777a-3.job - C:\Program Files\The weDownload Manager\ea727281-8281-467f-bafd-cf5fb6f1777a-3.exe  /wdEdVPGKD=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 
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files\globalUpdate\Update\GoogleUpdate.exe  /c 
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files\globalUpdate\Update\GoogleUpdate.exe  /ua /installsource scheduler 
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe  /c 
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe  /ua /installsource scheduler 

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09 96128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511951162}]
Plus-HD-V1.5 - C:\Program Files\Plus-HD-V1.5\Plus-HD-V1.5-bho.dll [2014-06-25 611312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{43D9786F-A485-683B-9B5B-ACC97ABC17FC}]
Wondershare Player 1.6.0 - C:\ProgramData\Wondershare\Player\WSBrowserAppMgr.dll [2013-09-28 621640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}]
Linkey - C:\Users\Ricardo\AppData\Local\Linkey\IEEXTE~1\iedll.dll [2014-06-01 175632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-28 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-28 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG_UI"=C:\Program Files\AVG\AVG2013\avgui.exe [2014-01-21 4411952]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2008-03-17 1848648]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2008-12-11 722256]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-06-18 1537320]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2014-02-21 152392]
"Wondershare Helper Compact.exe"=C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2014-02-20 1994752]
"DelaypluginInstall"=C:\ProgramData\Wondershare\Player\DelayPluginI.exe [2013-09-28 1960008]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]
"PopUpStopperFreeEdition"=C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe [2003-10-29 524288]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2013-03-31 39408]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2013-11-14 20584608]
"OfficeSyncProcess"=C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [2013-04-22 720064]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Users\Ricardo\AppData\Local\Linkey\IEEXTE~1\iedll.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe]
"Debugger="tasklist.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe]
"Debugger="tasklist.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 month======

2014-07-21 23:19:11 ----A---- C:\Windows\system32\WPShellExt32.dll
2014-07-21 23:18:57 ----D---- C:\ProgramData\Wondershare Player
2014-07-21 23:18:57 ----D---- C:\ProgramData\Wondershare
2014-07-09 17:02:02 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 17:02:01 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-07-09 17:02:00 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-07-09 17:01:53 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 17:01:52 ----A---- C:\Windows\system32\iernonce.dll
2014-07-09 17:01:50 ----A---- C:\Windows\system32\urlmon.dll
2014-07-09 17:01:47 ----A---- C:\Windows\system32\iedkcs32.dll
2014-07-09 17:01:46 ----A---- C:\Windows\system32\jsproxy.dll
2014-07-09 17:01:46 ----A---- C:\Windows\system32\ieUnatt.exe
2014-07-09 17:01:44 ----A---- C:\Windows\system32\dxtmsft.dll
2014-07-09 17:01:43 ----A---- C:\Windows\system32\ieapfltr.dll
2014-07-09 17:01:42 ----A---- C:\Windows\system32\msfeeds.dll
2014-07-09 17:01:37 ----A---- C:\Windows\system32\msrating.dll
2014-07-09 17:01:37 ----A---- C:\Windows\system32\ie4uinit.exe
2014-07-09 17:01:36 ----A---- C:\Windows\system32\iesetup.dll
2014-07-09 17:01:34 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 17:01:33 ----A---- C:\Windows\system32\wininet.dll
2014-07-09 17:01:29 ----A---- C:\Windows\system32\dxtrans.dll
2014-07-09 17:01:27 ----A---- C:\Windows\system32\ieui.dll
2014-07-09 17:01:26 ----A---- C:\Windows\system32\ieframe.dll
2014-07-09 17:01:23 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-07-09 17:01:23 ----A---- C:\Windows\system32\mshtmled.dll
2014-07-09 17:01:22 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-07-09 17:01:21 ----A---- C:\Windows\system32\iertutil.dll
2014-07-09 17:01:19 ----A---- C:\Windows\system32\jscript9diag.dll
2014-07-09 17:01:18 ----A---- C:\Windows\system32\mshtml.dll
2014-07-09 17:01:16 ----A---- C:\Windows\system32\vbscript.dll
2014-07-09 17:01:15 ----A---- C:\Windows\system32\jscript9.dll
2014-07-09 17:01:05 ----A---- C:\Windows\system32\win32k.sys
2014-07-09 17:01:04 ----A---- C:\Windows\system32\osk.exe
2014-07-09 17:00:58 ----A---- C:\Windows\system32\drivers\afd.sys
2014-07-09 17:00:57 ----A---- C:\Windows\system32\qedit.dll
2014-07-09 17:00:08 ----A---- C:\Windows\system32\kerberos.dll
2014-07-09 17:00:07 ----A---- C:\Windows\system32\schannel.dll
2014-07-09 17:00:06 ----A---- C:\Windows\system32\msv1_0.dll
2014-07-09 17:00:05 ----A---- C:\Windows\system32\wdigest.dll
2014-07-09 17:00:05 ----A---- C:\Windows\system32\ncrypt.dll
2014-07-09 17:00:04 ----A---- C:\Windows\system32\TSpkg.dll
2014-07-09 17:00:01 ----A---- C:\Windows\system32\credssp.dll
2014-07-09 16:59:43 ----A---- C:\Windows\system32\aepdu.dll
2014-07-09 16:59:35 ----A---- C:\Windows\system32\aeinv.dll
2014-07-09 16:59:28 ----A---- C:\Windows\system32\lsasrv.dll

======List of files/folders modified in the last 1 month======

2014-07-27 23:35:12 ----D---- C:\Program Files\trend micro
2014-07-27 23:35:10 ----D---- C:\Windows\Temp
2014-07-27 23:32:27 ----D---- C:\Windows\Prefetch
2014-07-27 23:24:57 ----D---- C:\Users\Ricardo\AppData\Roaming\Skype
2014-07-27 23:24:53 ----D---- C:\ProgramData\MFAData
2014-07-27 13:18:10 ----D---- C:\Windows\system32\config
2014-07-26 15:14:14 ----SHD---- C:\System Volume Information
2014-07-25 09:43:57 ----D---- C:\Windows\System32
2014-07-25 09:43:57 ----D---- C:\Windows\inf
2014-07-25 09:43:57 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-07-25 09:39:00 ----D---- C:\Windows
2014-07-25 09:38:50 ----D---- C:\Program Files\Microsoft Silverlight
2014-07-24 16:05:21 ----SHD---- C:\Windows\Installer
2014-07-23 14:54:10 ----D---- C:\Windows\system32\FxsTmp
2014-07-21 23:18:57 ----HD---- C:\ProgramData
2014-07-21 23:18:57 ----D---- C:\Program Files\Wondershare
2014-07-21 00:26:58 ----D---- C:\Windows\debug
2014-07-10 13:50:24 ----D---- C:\Windows\rescache
2014-07-10 13:06:14 ----D---- C:\Windows\winsxs
2014-07-10 13:01:45 ----D---- C:\Windows\system32\en-US
2014-07-10 13:01:45 ----D---- C:\Program Files\Windows Journal
2014-07-10 13:01:42 ----D---- C:\Program Files\Internet Explorer
2014-07-10 13:01:39 ----D---- C:\Windows\ehome
2014-07-10 13:01:37 ----D---- C:\Windows\system32\Dism
2014-07-10 13:01:36 ----D---- C:\Windows\system32\drivers
2014-07-10 13:01:35 ----D---- C:\Windows\system32\nl-NL
2014-07-10 13:01:33 ----SD---- C:\Windows\system32\CompatTel
2014-07-10 12:31:21 ----D---- C:\ProgramData\Microsoft Help
2014-07-10 12:25:28 ----D---- C:\Windows\system32\MRT
2014-07-10 12:20:39 ----A---- C:\Windows\system32\MRT.exe
2014-07-09 16:59:03 ----D---- C:\Windows\system32\catroot2
2014-07-09 16:59:03 ----D---- C:\Windows\system32\catroot
2014-07-08 23:43:41 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2014-07-06 18:56:30 ----D---- C:\Program Files\Plus-HD-V1.5
2014-07-02 02:14:00 ----D---- C:\Windows\Minidump
2014-07-02 02:14:00 ----D---- C:\Windows\Logs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2013-07-20 60216]
R0 Avglogx;AVG Logging Driver; C:\Windows\system32\DRIVERS\avglogx.sys [2013-07-20 246072]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2013-07-01 96568]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2013-10-23 39224]
R0 RapportKELL;RapportKELL; C:\Windows\System32\Drivers\RapportKELL.sys [2014-06-23 123544]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6x.sys [2012-09-04 50296]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2013-11-25 208184]
R1 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2013-10-23 22328]
R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2013-07-20 171320]
R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2014-04-15 182072]
R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx86.sys [2013-12-06 37664]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 RapportCerberus_69108;RapportCerberus_69108; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus32_69108.sys [2014-06-30 358040]
R1 RapportEI;RapportEI; \??\C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys [2014-06-23 171000]
R1 RapportPG;RapportPG; \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys [2014-06-23 249688]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 athr;Stuurprogramma Atheros Extensible draadloze LAN-apparaat; C:\Windows\system32\DRIVERS\athr.sys [2009-07-14 1096704]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 k57nd60x;Broadcom NetLink Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60x.sys [2009-07-14 229888]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-14 207360]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-14 980992]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-14 661504]
R3 stdriver;SoundTap Upper Filter Driver v6.07.00; C:\Windows\system32\DRIVERS\stdriverx86.sys [2014-01-26 43344]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-06-18 212400]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 athur;Atheros AR9271 Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athur.sys [2010-01-05 1500160]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2013-03-18 45056]
S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-02-12 43336]
R2 avgfws;AVG Firewall; C:\Program Files\AVG\AVG2013\avgfws.exe [2013-10-23 1432080]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2013\avgidsagent.exe [2013-07-04 4939312]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2013\avgwdsvc.exe [2013-11-20 283136]
R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 RapportMgmtService;Rapport Management Service; C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe [2014-06-23 1886488]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904]
R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-21 553288]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-06-25 68608]
S2 gupdate;Google Update-service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-31 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08 262320]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-03-31 654848]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-06-25 68608]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-31 136176]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2013-03-31 194032]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-06-19 108032]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-04-09 235696]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 ose;Office  Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-03-31 1343400]
S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------