Logfile of random's system information tool 1.10 (written by random/random)
Run by Yolan at 2014-11-06 18:54:52
Microsoft Windows 8.1 Pro 
System drive C: has 447 GB (44%) free of 1007 GB
Total RAM: 12286 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:55:25 PM, on 06/11/2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17344)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\N360.exe
C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
C:\Users\Yolan\AppData\Roaming\uTorrent\uTorrent.exe
C:\Users\Yolan\AppData\Roaming\Spotify\spotify.exe
C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Users\Yolan\AppData\Local\Viber\Viber.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Yolan\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\PuTTY\pageant.exe
D:\PandaCoin\pandacoin-qt.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe
C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\PremiumSoft\Navicat Premium\navicat.exe
D:\Games\World of Warcraft 3.3.5a\Wow.exe
C:\Program Files (x86)\PuTTY\putty.exe
C:\Program Files (x86)\WinSCP\WinSCP.exe
C:\Users\Yolan\Downloads\MIRC.v7.32.Cracked-EAT\Crack\mIRC.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\WINDOWS\SysWOW64\cmd.exe
C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.9\ScriptHelper.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Yolan\Downloads\chromeinstall-8u25.exe
C:\Program Files\trend micro\Yolan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 168.235.67.185 irc.cg
O1 - Hosts: 192.95.29.215 logon.cg
O1 - Hosts: 168.235.67.18 ts.cg
O1 - Hosts: 167.114.68.183 web.cg
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Microsoft Web Test Recorder 12.0 Helper - {432dd630-7e03-4c97-9d62-b99f52df4fc2} - C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\IPS\IPSBHO.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: PrivDogExtension - {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll
O3 - Toolbar: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.9.799\AVG SafeGuard toolbar_toolbar.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\coIEPlg.dll
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [vmware-tray.exe] "C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PrivDogService] "C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe"
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Yolan\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Spotify] "C:\Users\Yolan\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [HP Photosmart 6520 series (NET)] "C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2841525R05TZ:NW" -scfn "HP Photosmart 6520 series (NET)" -AutoStart 1
O4 - HKCU\..\Run: [MyImgur] C:\MyImgur\MyImgur x64.exe
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Viber] "C:\Users\Yolan\AppData\Local\Viber\Viber.exe" StartMinimized
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - Startup: CurseClientStartup.ccip
O4 - Startup: Dropbox.lnk = Yolan\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: Monitor Ink Alerts - HP Photosmart 6520 series (Network).lnk = ?
O4 - Startup: pageant.exe - Shortcut.lnk = C:\Program Files (x86)\PuTTY\pageant.exe
O4 - Startup: Pandacoin.lnk = D:\PandaCoin\pandacoin-qt.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\vsocklib.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{02C3C160-474A-494D-8F35-4FF1935A5074}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{07C0C14F-F721-4F77-A9E7-9FA3F0BD1741}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{DAD22863-A341-4293-899A-E5D69087E952}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\..\{02C3C160-474A-494D-8F35-4FF1935A5074}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000 (c2wts) - Unknown owner - C:\Program Files (x86)\Windows Identity Foundation\v3.5\c2wtshost.exe (file missing)
O23 - Service: COMODO Dragon Update Service (DragonUpdater) - Unknown owner - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\N360.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: OpenVPN Service (OpenVPNService) - The OpenVPN Project - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe
O23 - Service: VMware Workstation Server (VMwareHostd) - Unknown owner - C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater18.1.9 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 17011 bytes

======Listing Processes======





wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"C:\WINDOWS\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe"
dashost.exe {dae60e0a-7a9b-43d2-be5fc20596b5ca08}
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe"
"c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
"C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe" -sMSSQLSERVER
"C:\Program Files\MySQL\MySQL Server 5.5\bin\mysqld" --defaults-file="C:\Program Files\MySQL\MySQL Server 5.5\my.ini" MySQL
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss c19ffd17-9aa9-4934-87c6-a826c3e9cce1 1
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe"
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"
C:\WINDOWS\SysWOW64\vmnat.exe
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe"
C:\WINDOWS\SysWOW64\vmnetdhcp.exe
"C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe"
"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties"
"C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe" -s MSSQL11.MSSQLSERVER
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\fdhost.exe" "MSSQL11.MSSQLSERVERD0a19141bf74f6f45d6f8cacf9486db6c84d74fd3" "MSSQL11.MSSQLSERVER" "MSSQL11.MSSQLSERVER" "12" "" "16384" "M" "0" "" "" "" 
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ea286237-0ff0-4a61-a8b5-0cd4e7361624 -SystemEventPortName:HostProcess-824c3465-55bc-4e39-afe4-e08dbe07453e -IoCancelEventPortName:HostProcess-f53dacdb-c313-48c6-8b03-616ddbe3bfc3 -NonStateChangingEventPortName:HostProcess-fdb75c95-e049-4c6e-9b51-0f4ecc5e38c9 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:0993824a-c189-4dbf-aeb1-ce799f2522d7 -DeviceGroupId:WpdFsGroup
C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-92810e95-371a-4106-af5b-720817f507f9 -SystemEventPortName:HostProcess-c28ca494-f427-420c-995e-1d990ee49121 -IoCancelEventPortName:HostProcess-5baf91e2-e81a-4371-8a93-124b4eeaff63 -NonStateChangingEventPortName:HostProcess-e1f830cf-193a-4e92-9835-7f4ad35abc24 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d760df6b-b346-4187-a712-397f8f79a3b3 -DeviceGroupId:WudfDefaultDevicePool
C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\N360.exe" /s "N360" /m "C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\diMaster.dll" /prefetch:1
C:\WINDOWS\SysWOW64\PnkBstrA.exe

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
 -hiberboot
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\system32\nvvsvc.exe -session
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
taskhostex.exe 
"C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\N360.exe" /c /a /s UserSession
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe" --action hooks  --log C:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log  
"C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe" --action hooks  --log C:\Program Files (x86)\TeamViewer\Version9\TeamViewer9_Logfile.log  
C:\Windows\System32\skydrive.exe -Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE15\CSISYN~1.EXE" -Embedding
"C:\Program Files\Logitech Gaming Software\LCore.exe" /minimized
"C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe" 
"C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe" 
"C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe" 
"C:\Program Files\Logitech Gaming Software\Applets\LCDPop3.exe" 
"C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe" 
"C:\Users\Yolan\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
"C:\Users\Yolan\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
"C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2841525R05TZ:NW" -scfn "HP Photosmart 6520 series (NET)" -AutoStart 1
"C:\MyImgur\MyImgur x64.exe" 
"C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" 
"C:\Users\Yolan\AppData\Local\Viber\Viber.exe" StartMinimized
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Users\Yolan\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\PuTTY\pageant.exe" C:\Users\Yolan\Dropbox\privkey.ppk C:\Users\Yolan\Dropbox\respen.ppk
"D:\PandaCoin\pandacoin-qt.exe" -min
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" 
"C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="16260.0.806020018\1994795692" /prefetch:673131151
"C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="16260.1.1545905224\998143452" /prefetch:673131151
"C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="16260.2.698117968\1128486701" /prefetch:673131151
"C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="16260.3.416948447\1539150166" /prefetch:673131151
"C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=gpu-process --channel="16260.4.1087303968\634905149" --no-sandbox --lang=en-US --log-severity=disable --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,19,22 --gpu-vendor-id=0x10de --gpu-device-id=0x1244 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4052 --lang=en-US --log-severity=disable /prefetch:822062411
"C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPNetworkCommunicator.exe"
"C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe" 
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" 
"C:\Program Files (x86)\iTunes\iTunesHelper.exe" 
"C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe" 
"C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe" 
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto

C:\WINDOWS\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
"C:\Program Files (x86)\PremiumSoft\Navicat Premium\navicat.exe" 
"D:\Games\World of Warcraft 3.3.5a\Wow.exe" 
"C:\Program Files (x86)\PuTTY\putty.exe" 
"C:\Program Files (x86)\WinSCP\WinSCP.exe" 
"C:\WINDOWS\system32\taskmgr.exe" /4
"C:\Users\Yolan\Downloads\MIRC.v7.32.Cracked-EAT\Crack\mIRC.exe" 
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe265_ Global\UsGthrCtrlFltPipeMssGthrPipe265 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" 
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\WINDOWS\system32\cmd.exe" 
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="17280.0.1696444134\297201775" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,16,44 --gpu-vendor-id=0x10de --gpu-device-id=0x1244 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4052 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/None/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="17280.2.959352405\224941041" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/None/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="17280.3.1408950457\194558554" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/None/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="17280.4.920224989\608505847" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/None/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="17280.5.617270887\797542576" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/None/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="17280.6.561589816\32397839" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/None/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="17280.7.1298782632\1695343125" /prefetch:673131151
C:\WINDOWS\system32\cmd.exe /c "C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.9\ScriptHelper.exe" --parent-window=0 chrome-extension://ndibdjnfmopecpmkdieinmbadjfpblof/ < \\.\pipe\chrome.nativeMessaging.in.b49266c2cc92e8a8 > \\.\pipe\chrome.nativeMessaging.out.b49266c2cc92e8a8
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\18.1.9\ScriptHelper.exe"  --parent-window=0 chrome-extension://ndibdjnfmopecpmkdieinmbadjfpblof/ 
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/None/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="17280.14.1836097917\25583880" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/disable/EmbeddedSearch/Group18 pct:1i stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/None/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/Preperiod_A2_StableBookmarksIndexURLs/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_24/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --channel="17280.16.1224958947\1383096737" /prefetch:673131151
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 556 560 568 65536 564 
"C:\Users\Yolan\Downloads\chromeinstall-8u25.exe" 
C:\WINDOWS\system32\msiexec.exe /V
C:\WINDOWS\system32\vssvc.exe
C:\WINDOWS\System32\svchost.exe -k swprv
"C:\Users\Yolan\Downloads\RSITx64.exe" 
C:\WINDOWS\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:45
\??\C:\WINDOWS\system32\conhost.exe 0x4
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Yolan\AppData\Roaming\Mozilla\Firefox\Profiles\c6tzdwag.default

prefs.js - "browser.search.useDBForOrder" -  true
prefs.js - "browser.startup.homepage" -  "http://mysearch.avg.com?pid=safeguard&sg=&cid=%7B87e861bb-f700-4ed9-b9e5-2d6163da081e%7D&mid=cf287e8616b447d2a1d4252442f079db-4d4e250b3fbff50b28e323856c7698c1c7fa8840&ds=AVG&coid=avgtbavg&cmpid=&v=18.1.8.643&lang=en&pr=fr&d=2014-08-11%2019%3A07%3A51&sap=hp"
prefs.js - "keyword.URL" -  ""

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.1.9\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.65.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.65.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@live.heroesandgenerals.com/npretox]
"Description"=Heroes & Generals downloader
"Path"=C:\Program Files (x86)\Heroes & Generals\live\npretox-1.0.6.1\npretoxlive-1.0.6.1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0]
"Description"=Microsoft Lync Plug-in for Firefox
"Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.55.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL


C:\Program Files (x86)\Mozilla Firefox\plugins\
npMeetingJoinPluginOC.dll
NPOFF12.DLL
nppdf32.dll

C:\Users\Yolan\AppData\Roaming\Mozilla\Firefox\Profiles\c6tzdwag.default\searchplugins\
avg-secure-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-09-25 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton 360\Engine64\21.6.0.32\coIEPlg.dll [2014-09-20 917856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-07-22 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2014-09-16 2334416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-07-22 211368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FB16E5C3-A9E2-47A2-8EFC-319E775E62CC}]
PrivDog Extension - C:\Program Files\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll [2014-06-17 1093800]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-09-25 153240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{432dd630-7e03-4c97-9d62-b99f52df4fc2}]
Microsoft Web Test Recorder 12.0 Helper - C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05 71520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Norton Identity Protection - C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\coIEPlg.dll [2014-09-20 655200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Norton Vulnerability Protection - C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\IPS\IPSBHO.DLL [2014-08-26 392336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-11 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2014-09-16 1729232]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-11 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FB16E5C3-A9E2-47A2-8EFC-319E775E62CC}]
PrivDog Extension - C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedads.dll [2014-06-17 937128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG SafeGuard toolbar - C:\Program Files\AVG SafeGuard toolbar\18.1.9.799\AVG SafeGuard toolbar_toolbar.dll [2014-08-25 6431768]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton 360\Engine64\21.6.0.32\coIEPlg.dll [2014-09-20 917856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG SafeGuard toolbar - C:\Program Files (x86)\AVG SafeGuard toolbar\18.1.9.799\AVG SafeGuard toolbar_toolbar.dll [2014-08-25 3627032]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\coIEPlg.dll [2014-09-20 655200]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-09-17 2460488]
"ShadowPlay"=C:\WINDOWS\system32\nvspcap64.dll [2014-09-17 2799784]
"Launch LCore"=C:\Program Files\Logitech Gaming Software\LCore.exe [2014-04-15 10396440]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]
"InstallerLauncher"=C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe /run:C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\Installer.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Users\Yolan\AppData\Roaming\uTorrent\uTorrent.exe [2014-10-25 1385808]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Spotify"=C:\Users\Yolan\AppData\Roaming\Spotify\Spotify.exe [2014-10-03 6553144]
"HP Photosmart 6520 series (NET)"=C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe [2012-10-17 2573416]
"MyImgur"=C:\MyImgur\MyImgur x64.exe [2014-05-13 7548416]
"AdobeBridge"= []
"Spotify Web Helper"=C:\Users\Yolan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-10-03 1514040]
"Viber"=C:\Users\Yolan\AppData\Local\Viber\Viber.exe [2014-07-24 936656]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-10-01 22065760]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-07-03 43816]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28 49208]
""= []
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]
"vmware-tray.exe"=C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [2013-10-18 111696]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-11 256896]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-07-08 152392]
"PrivDogService"=C:\Program Files (x86)\AdTrustMedia\PrivDog\2.2.0.14\trustedadssvc.exe [2014-06-17 662184]
"vProt"=C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2014-08-25 2640408]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]

C:\Users\Yolan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
CurseClientStartup.ccip
Dropbox.lnk - C:\Users\Yolan\AppData\Roaming\Dropbox\bin\Dropbox.exe
Monitor Ink Alerts - HP Photosmart 6520 series (Network).lnk - C:\WINDOWS\system32\RunDll32.exe
pageant.exe - Shortcut.lnk - C:\Program Files (x86)\PuTTY\pageant.exe
Pandacoin.lnk - D:\PandaCoin\pandacoin-qt.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=0
"EnableLUA"=0
"ConsentPromptBehaviorAdmin"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux3"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS6\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 month======

2014-11-06 18:54:54 ----D---- C:\Program Files\trend micro
2014-11-06 18:54:52 ----D---- C:\rsit
2014-11-05 23:16:26 ----D---- C:\NVIDIA Corporation
2014-11-05 19:42:13 ----D---- C:\Program Files (x86)\HeroesAndGenerals
2014-11-02 19:28:25 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrB.exe
2014-11-02 19:28:17 ----A---- C:\WINDOWS\SYSWOW64\PnkBstrA.exe
2014-11-02 19:28:17 ----A---- C:\WINDOWS\SYSWOW64\pbsvc_bc2.exe
2014-11-02 19:25:10 ----D---- C:\Program Files (x86)\Electronic Arts
2014-11-02 19:25:02 ----A---- C:\WINDOWS\SYSWOW64\d3dx10_40.dll
2014-11-02 19:25:02 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_40.dll
2014-11-02 19:25:02 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2014-11-02 19:25:02 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2014-11-02 19:25:00 ----A---- C:\WINDOWS\SYSWOW64\D3DX9_40.dll
2014-11-02 19:25:00 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2014-11-02 18:07:29 ----D---- C:\Program Files\Speccy
2014-11-02 04:37:22 ----D---- C:\Users\Yolan\AppData\Roaming\CodeBlocks
2014-11-01 17:35:27 ----D---- C:\Users\Yolan\AppData\Roaming\HeroesAndGeneralsDesktop
2014-10-31 17:23:10 ----D---- C:\Users\Yolan\AppData\Roaming\GameRanger
2014-10-31 16:52:44 ----D---- C:\ProgramData\Age of Empires 3
2014-10-31 16:46:52 ----D---- C:\Program Files (x86)\Microsoft Games
2014-10-30 16:22:54 ----D---- C:\mysql_lib
2014-10-30 16:22:08 ----D---- C:\Program Files (x86)\CMake 2.8
2014-10-30 04:08:09 ----D---- C:\Program Files\MySQL
2014-10-30 04:07:44 ----D---- C:\Program Files\ZeroMQ 4.0.4
2014-10-30 01:50:30 ----D---- C:\local
2014-10-29 17:13:45 ----D---- C:\Program Files (x86)\Brackets
2014-10-25 18:00:19 ----A---- C:\WINDOWS\ntbtlog.txt
2014-10-25 17:55:10 ----A---- C:\WINDOWS\system32\drivers\SYMEVENT64x86.SYS
2014-10-25 17:55:08 ----D---- C:\Program Files\Common Files\Symantec Shared
2014-10-25 17:54:06 ----D---- C:\WINDOWS\system32\drivers\N360x64
2014-10-25 17:54:04 ----D---- C:\ProgramData\Norton
2014-10-25 17:54:04 ----D---- C:\Program Files (x86)\Norton 360
2014-10-25 17:51:38 ----D---- C:\ProgramData\NortonInstaller
2014-10-25 17:51:38 ----D---- C:\Program Files (x86)\NortonInstaller
2014-10-23 20:45:28 ----A---- C:\WINDOWS\system32\shell32.dll
2014-10-23 20:45:27 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-10-23 20:45:26 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-10-23 20:45:24 ----A---- C:\WINDOWS\system32\twinui.dll
2014-10-23 20:45:24 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-10-23 20:45:24 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-10-23 20:45:23 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-10-23 20:45:23 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-10-23 20:45:23 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll
2014-10-23 20:45:23 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-10-23 20:45:23 ----A---- C:\WINDOWS\system32\localspl.dll
2014-10-23 20:45:22 ----AC---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2014-10-23 20:45:22 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll
2014-10-23 20:45:22 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-10-23 20:45:22 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2014-10-23 20:45:22 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2014-10-23 20:45:22 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll
2014-10-23 20:45:22 ----A---- C:\WINDOWS\system32\WsmSvc.dll
2014-10-23 20:45:22 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-10-23 20:45:22 ----A---- C:\WINDOWS\system32\schannel.dll
2014-10-23 20:45:22 ----A---- C:\WINDOWS\system32\puiobj.dll
2014-10-23 20:45:22 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2014-10-23 20:45:22 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-10-23 20:45:22 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-10-23 20:45:21 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll
2014-10-23 20:45:21 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-10-23 20:45:21 ----A---- C:\WINDOWS\system32\untfs.dll
2014-10-23 20:45:21 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll
2014-10-23 20:45:21 ----A---- C:\WINDOWS\system32\FXSAPI.dll
2014-10-23 20:45:21 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS
2014-10-23 20:45:21 ----A---- C:\WINDOWS\system32\certcli.dll
2014-10-23 20:45:20 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll
2014-10-23 17:26:19 ----A---- C:\WINDOWS\SYSWOW64\perf-ReportServer-rsctr11.2.5058.0.dll
2014-10-23 17:26:19 ----A---- C:\WINDOWS\system32\perf-ReportServer-rsctr11.2.5058.0.dll
2014-10-23 17:26:14 ----A---- C:\WINDOWS\SYSWOW64\perf-MSSQL11.MSSQLSERVER-sqlagtctr.dll
2014-10-23 17:26:13 ----A---- C:\WINDOWS\system32\perf-MSSQL11.MSSQLSERVER-sqlagtctr.dll
2014-10-23 17:25:56 ----A---- C:\WINDOWS\SYSWOW64\perf-MSSQLSERVER-sqlctr11.2.5058.0.dll
2014-10-23 17:25:56 ----A---- C:\WINDOWS\system32\perf-MSSQLSERVER-sqlctr11.2.5058.0.dll
2014-10-23 17:25:49 ----A---- C:\WINDOWS\system32\fssres.dll
2014-10-23 17:25:47 ----A---- C:\WINDOWS\system32\hadrres.dll
2014-10-20 19:11:46 ----A---- C:\WINDOWS\system32\win32k.sys
2014-10-20 19:11:42 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-10-20 19:11:42 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-10-20 19:11:39 ----A---- C:\WINDOWS\system32\winbici.dll
2014-10-20 19:10:44 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-10-20 19:10:43 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-10-20 19:10:36 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-10-20 19:10:34 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-10-20 19:10:33 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-10-20 19:10:32 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-10-20 19:10:31 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-10-20 19:10:31 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-10-20 19:10:31 ----A---- C:\WINDOWS\system32\wininet.dll
2014-10-20 19:10:31 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-10-20 19:10:31 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-10-20 19:10:30 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-10-20 19:10:30 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-10-20 19:10:30 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-10-20 19:10:29 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-10-20 19:10:29 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-10-20 19:10:29 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-10-20 19:10:28 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-10-20 19:10:28 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-10-20 19:10:27 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-10-20 19:10:27 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-10-20 19:10:27 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-10-20 19:10:27 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-10-20 19:10:27 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-10-20 19:10:26 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-10-20 19:10:26 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-10-20 19:10:26 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-10-20 19:10:26 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-10-20 19:09:25 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-10-20 19:09:25 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-10-20 19:09:25 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-10-20 19:09:24 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll
2014-10-20 19:09:24 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-10-20 19:09:24 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe
2014-10-20 19:09:24 ----A---- C:\WINDOWS\system32\wuwebv.dll
2014-10-20 19:09:24 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-10-20 19:09:24 ----A---- C:\WINDOWS\system32\wups2.dll
2014-10-20 19:09:24 ----A---- C:\WINDOWS\system32\wups.dll
2014-10-20 19:09:24 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-10-20 19:09:24 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-10-20 19:09:24 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-10-20 19:09:24 ----A---- C:\WINDOWS\system32\wuapp.exe
2014-10-20 19:09:16 ----A---- C:\WINDOWS\SYSWOW64\packager.dll
2014-10-20 19:09:16 ----A---- C:\WINDOWS\system32\packager.dll
2014-10-20 19:09:10 ----A---- C:\WINDOWS\SYSWOW64\rastls.dll
2014-10-20 19:09:10 ----A---- C:\WINDOWS\system32\rastls.dll
2014-10-20 19:09:07 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-10-20 19:09:06 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-10-20 19:09:06 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-10-20 19:09:06 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-10-20 19:09:05 ----A---- C:\WINDOWS\system32\SyncEngine.dll
2014-10-20 19:09:04 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-10-20 19:09:04 ----A---- C:\WINDOWS\system32\ntdll.dll
2014-10-20 19:09:04 ----A---- C:\WINDOWS\system32\KernelBase.dll
2014-10-20 19:09:03 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll
2014-10-20 19:09:03 ----A---- C:\WINDOWS\system32\propsys.dll
2014-10-20 19:09:02 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-10-20 19:09:01 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-10-20 19:09:01 ----A---- C:\WINDOWS\SYSWOW64\Wldap32.dll
2014-10-20 19:09:01 ----A---- C:\WINDOWS\SYSWOW64\SearchFolder.dll
2014-10-20 19:09:01 ----A---- C:\WINDOWS\SYSWOW64\KernelBase.dll
2014-10-20 19:09:01 ----A---- C:\WINDOWS\system32\Wldap32.dll
2014-10-20 19:09:01 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2014-10-20 19:09:00 ----A---- C:\WINDOWS\SYSWOW64\SkyDriveShell.dll
2014-10-20 19:09:00 ----A---- C:\WINDOWS\SYSWOW64\propsys.dll
2014-10-20 19:09:00 ----A---- C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-10-20 19:09:00 ----A---- C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-10-20 19:09:00 ----A---- C:\WINDOWS\system32\SkyDriveShell.dll
2014-10-20 19:09:00 ----A---- C:\WINDOWS\system32\SkyDrive.exe
2014-10-20 19:09:00 ----A---- C:\WINDOWS\system32\ProximityService.dll
2014-10-20 19:09:00 ----A---- C:\WINDOWS\system32\pcsvDevice.dll
2014-10-20 19:09:00 ----A---- C:\WINDOWS\system32\httpprxm.dll
2014-10-20 19:09:00 ----A---- C:\WINDOWS\system32\bisrv.dll
2014-10-20 19:09:00 ----A---- C:\WINDOWS\system32\adhsvc.dll
2014-10-20 19:08:59 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-20 19:08:59 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-10-20 19:06:51 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-10-20 19:06:51 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-10-20 19:06:51 ----A---- C:\WINDOWS\system32\msi.dll
2014-10-20 19:06:51 ----A---- C:\WINDOWS\system32\authui.dll
2014-10-20 19:06:51 ----A---- C:\WINDOWS\system32\appinfo.dll

======List of files/folders modified in the last 1 month======

2014-11-06 18:55:11 ----D---- C:\Users\Yolan\AppData\Roaming\uTorrent
2014-11-06 18:54:54 ----RD---- C:\Program Files
2014-11-06 18:54:42 ----SHD---- C:\System Volume Information
2014-11-06 18:52:05 ----D---- C:\Users\Yolan\AppData\Roaming\VMware
2014-11-06 18:51:37 ----D---- C:\Users\Yolan\AppData\Roaming\Pandacoin
2014-11-06 18:50:08 ----D---- C:\WINDOWS\Prefetch
2014-11-06 18:47:48 ----D---- C:\Users\Yolan\AppData\Roaming\mIRC
2014-11-06 18:45:30 ----D---- C:\Users\Yolan\AppData\Roaming\Spotify
2014-11-06 18:43:27 ----D---- C:\Users\Yolan\AppData\Roaming\Skype
2014-11-06 18:26:35 ----SD---- C:\Users\Yolan\AppData\Roaming\Microsoft
2014-11-06 18:26:35 ----SD---- C:\ProgramData\Microsoft
2014-11-06 18:22:44 ----D---- C:\WINDOWS\Temp
2014-11-06 18:02:00 ----D---- C:\WINDOWS\system32\sru
2014-11-06 17:46:45 ----D---- C:\Users\Yolan\AppData\Roaming\vlc
2014-11-06 17:00:53 ----D---- C:\WINDOWS\Microsoft.NET
2014-11-06 16:41:14 ----D---- C:\Users\Yolan\AppData\Roaming\Dropbox
2014-11-06 16:40:55 ----D---- C:\Users\Yolan\AppData\Roaming\ViberPC
2014-11-05 23:16:26 ----D---- C:\NVIDIA
2014-11-05 21:19:33 ----D---- C:\Program Files (x86)\Steam
2014-11-05 19:44:30 ----RD---- C:\Program Files (x86)
2014-11-05 17:22:24 ----D---- C:\WINDOWS\AppReadiness
2014-11-05 17:22:23 ----HD---- C:\Program Files\WindowsApps
2014-11-04 21:14:13 ----D---- C:\Users\Yolan\AppData\Roaming\TS3Client
2014-11-04 21:01:09 ----D---- C:\WINDOWS\System32
2014-11-04 21:01:09 ----D---- C:\WINDOWS\Inf
2014-11-04 21:01:09 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-04 20:17:11 ----D---- C:\WINDOWS\system32\config
2014-11-04 19:49:02 ----D---- C:\WINDOWS\system32\DriverStore
2014-11-04 17:14:24 ----D---- C:\WINDOWS\WinSxS
2014-11-03 22:16:20 ----D---- C:\Users\Yolan\AppData\Roaming\MultiDoge
2014-11-03 21:57:47 ----D---- C:\Users\Yolan\AppData\Roaming\Dogecoin
2014-11-02 22:26:19 ----D---- C:\ProgramData\VMware
2014-11-02 22:10:12 ----D---- C:\WINDOWS\SysWOW64
2014-11-02 20:48:09 ----D---- C:\WINDOWS\LiveKernelReports
2014-11-02 19:28:14 ----D---- C:\WINDOWS\system32\LogFiles
2014-11-02 19:27:58 ----SHD---- C:\WINDOWS\Installer
2014-11-02 19:27:58 ----SHD---- C:\Config.Msi
2014-11-02 19:24:33 ----RSD---- C:\WINDOWS\assembly
2014-11-02 04:27:58 ----D---- C:\Users\Yolan\AppData\Roaming\VisualAssist
2014-10-31 16:52:44 ----HD---- C:\ProgramData
2014-10-31 16:51:51 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-10-31 01:04:21 ----D---- C:\ProgramData\boost_interprocess
2014-10-31 01:00:32 ----D---- C:\ProgramData\NVIDIA
2014-10-31 01:00:11 ----D---- C:\WINDOWS\ELAMBKUP
2014-10-30 14:13:49 ----D---- C:\WINDOWS\system32\Tasks
2014-10-30 14:12:31 ----D---- C:\Users\Yolan\AppData\Roaming\.minecraft
2014-10-30 04:08:08 ----D---- C:\ProgramData\MySQL
2014-10-30 04:06:42 ----D---- C:\WINDOWS\system32\appmgmt
2014-10-30 02:09:42 ----D---- C:\Program Files (x86)\Git
2014-10-29 18:42:34 ----D---- C:\Program Files (x86)\mIRC
2014-10-27 11:07:16 ----D---- C:\Users\Yolan\AppData\Roaming\Curse Client
2014-10-25 21:06:09 ----D---- C:\WINDOWS\rescache
2014-10-25 20:42:38 ----D---- C:\Program Files (x86)\PuTTY
2014-10-25 18:09:31 ----D---- C:\Program Files (x86)\Common Files
2014-10-25 18:00:19 ----D---- C:\Windows
2014-10-25 18:00:16 ----D---- C:\ProgramData\AVG2014
2014-10-25 17:55:14 ----D---- C:\WINDOWS\system32\drivers
2014-10-25 17:55:08 ----D---- C:\Program Files\Common Files
2014-10-25 17:53:56 ----D---- C:\ProgramData\MFAData
2014-10-25 17:40:14 ----D---- C:\ProgramData\Skype
2014-10-24 18:06:05 ----D---- C:\Program Files (x86)\Battle.net
2014-10-24 17:18:06 ----RD---- C:\WINDOWS\ToastData
2014-10-24 17:18:05 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-10-24 17:18:05 ----D---- C:\WINDOWS\apppatch
2014-10-23 20:45:49 ----D---- C:\WINDOWS\CbsTemp
2014-10-23 17:31:47 ----RD---- C:\Users
2014-10-23 17:24:37 ----D---- C:\Program Files (x86)\Microsoft Office
2014-10-23 17:23:12 ----D---- C:\Program Files (x86)\MSBuild
2014-10-23 17:21:56 ----D---- C:\Program Files\Microsoft SQL Server
2014-10-23 17:17:49 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 10.0
2014-10-23 17:14:24 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2014-10-21 22:18:56 ----D---- C:\WINDOWS\WinStore
2014-10-21 22:18:56 ----D---- C:\WINDOWS\SYSWOW64\en-US
2014-10-21 22:18:56 ----D---- C:\WINDOWS\system32\en-US
2014-10-21 22:18:56 ----D---- C:\WINDOWS\MediaViewer
2014-10-21 22:18:56 ----D---- C:\WINDOWS\FileManager
2014-10-21 22:18:56 ----D---- C:\WINDOWS\Camera
2014-10-21 22:18:56 ----D---- C:\Program Files\Internet Explorer
2014-10-21 22:18:56 ----D---- C:\Program Files (x86)\Internet Explorer
2014-10-21 17:50:18 ----D---- C:\ProgramData\Microsoft Help
2014-10-21 17:50:16 ----A---- C:\WINDOWS\win.ini
2014-10-21 17:45:58 ----D---- C:\WINDOWS\system32\MRT
2014-10-21 17:35:13 ----A---- C:\WINDOWS\system32\MRT.exe
2014-10-21 17:28:41 ----RSD---- C:\WINDOWS\Fonts
2014-10-21 14:24:07 ----D---- C:\WINDOWS\Tasks
2014-10-20 19:04:37 ----D---- C:\WINDOWS\system32\catroot2
2014-10-08 22:21:16 ----D---- C:\Users\Yolan\AppData\Roaming\.purple

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 SymDS;Symantec Data Store; C:\WINDOWS\system32\drivers\N360x64\1506000.020\SYMDS64.SYS [2013-10-30 493656]
R0 SymEFA;Symantec Extended File Attributes; C:\WINDOWS\system32\drivers\N360x64\1506000.020\SYMEFA64.SYS [2014-03-04 1148120]
R0 vmci;@oem32.inf,%vmci.Service.DispName%;VMware VMCI Bus Driver; C:\WINDOWS\System32\drivers\vmci.sys [2013-10-08 85584]
R1 avgtp;avgtp; \??\C:\WINDOWS\system32\drivers\avgtpx64.sys [2014-08-12 50976]
R1 BHDrvx64;BHDrvx64; \??\C:\Program Files (x86)\Norton 360\NortonData\21.4.0.13\Definitions\BASHDefs\20141030.001\BHDrvx64.sys [2014-10-16 1587416]
R1 ccSet_N360;N360 Settings Manager; C:\WINDOWS\system32\drivers\N360x64\1506000.020\ccSetx64.sys [2014-02-21 162392]
R1 dtsoftbus01;@oem16.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-05-30 283064]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2014-10-24 487216]
R1 IDSVia64;IDSVia64; \??\C:\Program Files (x86)\Norton 360\NortonData\21.4.0.13\Definitions\IPSDefs\20141105.001\IDSvia64.sys [2014-10-24 633560]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\WINDOWS\system32\drivers\N360x64\1506000.020\SRTSPX64.SYS [2014-08-26 37592]
R1 SymIRON;Symantec Iron Driver; C:\WINDOWS\system32\drivers\N360x64\1506000.020\Ironx64.SYS [2014-08-06 266968]
R1 SymNetS;Symantec Network Security WFP Driver; C:\WINDOWS\System32\Drivers\N360x64\1506000.020\SYMNETS.SYS [2014-02-18 593112]
R2 hcmon;VMware hcmon; \??\C:\WINDOWS\system32\drivers\hcmon.sys [2013-10-09 53816]
R3 anvsnddrv;@oem18.inf,%anvsnddrv.SvcDesc%;AnvSoft Virtual Sound Device; C:\WINDOWS\system32\drivers\anvsnddrv.sys [2011-11-28 33872]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2014-10-24 142640]
R3 EuMusDesignVirtualAudioCableWdm;@oem39.inf,%DeviceName% (WDM);Virtual Audio Cable (WDM); C:\WINDOWS\system32\DRIVERS\vrtaucbl.sys [2014-08-10 98464]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 LGBusEnum;@oem28.inf,%LGBusEnum.SVCDESC%;Logitech GamePanel Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\LGBusEnum.sys [2009-11-24 22408]
R3 LGVirHid;@oem29.inf,%LGVirHid.SVCDESC%;Logitech Gamepanel Virtual HID Device Driver; C:\WINDOWS\system32\drivers\LGVirHid.sys [2009-11-24 16008]
R3 MTsensor;@oem12.inf,%ASACPI.DisplayName%;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2013-05-17 17280]
R3 NAVENG;NAVENG; \??\C:\Program Files (x86)\Norton 360\NortonData\21.4.0.13\Definitions\VirusDefs\20141105.035\ENG64.SYS [2014-10-24 129752]
R3 NAVEX15;NAVEX15; \??\C:\Program Files (x86)\Norton 360\NortonData\21.4.0.13\Definitions\VirusDefs\20141105.035\EX64.SYS [2014-10-24 2137304]
R3 netr28ux;@oem7.inf,%Generic.Service.DispName%;Linksys USB Wireless LAN Card Driver for Vista; C:\WINDOWS\system32\DRIVERS\netr28ux.sys [2011-06-08 1600064]
R3 NVHDA;@oem9.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda64v.sys [2014-05-20 197408]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2014-07-02 12866008]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-09-17 19272]
R3 nvvad_WaveExtensible;@oem43.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2014-09-04 38048]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]
R3 SensorsSimulatorDriver;@oem18.inf,%WudfSensorsSimulatorDriverDisplayName%;UMDF Reflector service for SensorsSimulatorDriver; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [2014-05-31 227840]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\WINDOWS\System32\Drivers\N360x64\1506000.020\SRTSP64.SYS [2014-08-26 876248]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Still Serial Digital Camera Driver; C:\WINDOWS\system32\DRIVERS\serscan.sys [2013-08-22 11776]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [2014-10-25 177752]
R3 tap0901;@oem3.inf,%DeviceDescription%;TAP-Windows Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2013-08-22 40664]
R3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2014-03-18 121088]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
S0 SymELAM;Symantec ELAM Driver; C:\WINDOWS\system32\drivers\N360x64\1506000.020\SymELAM.sys [2013-10-30 23568]
S3 dg_ssudbus;@oem8.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 ssudmdm;@oem41.inf,%ssud.Service.Name%;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 tapoas;@oem33.inf,%DeviceDescription%;TAP Adapter OAS NDIS 6.0; C:\WINDOWS\system32\DRIVERS\tapoas.sys [2014-05-07 26624]
S3 USBAAPL64;@oem34.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2013-03-18 54784]
S4 RsFx0153;RsFx0153 Driver; C:\WINDOWS\system32\DRIVERS\RsFx0153.sys [2014-07-10 322736]
S4 RsFx0201;RsFx0201 Driver; C:\WINDOWS\system32\DRIVERS\RsFx0201.sys [2014-05-15 337088]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-06-12 43336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 DragonUpdater;COMODO Dragon Update Service; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2014-05-21 2135232]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2014-09-17 1148744]
R2 IpOverUsbSvc;Windows Phone IP over USB Transport (IpOverUsbSvc); C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [2014-04-17 22768]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2014-07-10 62379184]
R2 MSSQLSERVER;SQL Server (MSSQLSERVER); C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [2014-05-15 194240]
R2 MySQL;MySQL; C:\Program Files\MySQL\MySQL Server 5.5\bin\mysqld --defaults-file=C:\Program Files\MySQL\MySQL Server 5.5\my.ini MySQL []
R2 N360;Norton 360; C:\Program Files (x86)\Norton 360\Engine\21.6.0.32\N360.exe [2014-09-21 265040]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-09-17 1795912]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-09-17 19439944]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2014-07-02 935368]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\syswow64\PnkBstrA.exe [2014-11-02 75064]
R2 ReportServer;SQL Server Reporting Services (MSSQLSERVER); C:\Program Files\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe [2014-05-15 2454720]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2014-05-15 130240]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2014-07-02 411936]
R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-09-12 4799760]
R2 VMAuthdService;VMware Authorization Service; C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [2013-10-18 86096]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-07-08 641352]
R3 MSSQLFDLauncher;SQL Full-text Filter Daemon Launcher (MSSQLSERVER); C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\fdlauncher.exe [2014-05-15 50368]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-30 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-09 267440]
S3 aspnet_state;@%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\aspnet_rc.dll,-1; C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-08-10 50784]
S3 c2wts;@%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [2014-05-30 5632]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 fussvc;Windows App Certification Kit Fast User Switching Utility Service; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [2014-02-19 142336]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-30 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-26 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 OpenVPNService;OpenVPN Service; C:\Program Files\OpenVPN\bin\openvpnserv.exe [2014-06-05 37176]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 178760]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-07-12 542912]
S3 SwitchBoard;Adobe SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 Te.Service;Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [2013-08-22 119808]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2010-04-03 59744]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2014-07-10 442536]
S4 SQLBrowser;SQL Server Browser; c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2012-02-11 269912]
S4 SQLSERVERAGENT;SQL Server Agent (MSSQLSERVER); C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [2014-05-15 613056]

-----------------EOF-----------------