Logfile of random's system information tool 1.10 (written by random/random)
Run by rita at 2014-11-17 20:43:30
Microsoft Windows 8.1 
System drive C: has 387 GB (85%) free of 454 GB
Total RAM: 3658 MB (35% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:43:56, on 17/11/2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe
C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
C:\Users\rita\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\rita\AppData\Local\pricehorse\pricehorse\1.3.13.12\pricehorse.exe
C:\Program Files (x86)\BrytonBridge2\BrytonBridge2.exe
C:\Users\rita\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Salus\Salus.exe
C:\Program Files (x86)\Universal Updater\CrashMon.exe
C:\Users\rita\AppData\Local\ConvertAd\ConvertAd.exe
C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
C:\WINDOWS\SysWOW64\DllHost.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingBar.exe
C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingSurrogate.exe
C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingSurrogate.exe
C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingSurrogate.exe
C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingSurrogate.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\syswow64\wwahost.exe
C:\Users\rita\AppData\Local\pricehorse\pricehorse\1.3.13.12\playsetup.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\syswow64\backgroundTaskHost.exe
C:\Users\rita\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe
C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
C:\Users\rita\AppData\Local\pricehorse\pricehorse\1.3.13.12\pricehorse.exe
C:\Program Files\trend micro\rita.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1408906748&from=tugs&uid=ST500LT012-9WS142_S0V5E7ASXXXXS0V5E7AS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fR3s5PAVMZpZbM61lWNTdgwQHuH_g0KpmHQlPAOcVFJMXPHhRQyW3_NO86tcf-dt-8q6Ty_jOUbbRNExSZ16rrpzbqgWA47doZls9PmCpm9fMcPIebuL24dm-6NRl1K4clVV0mq1Pf817cKqAHufl7677BWO1vbxGHu2W3Fs&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fR3s5PAVMZpZbM61lWNTdgwQHuH_g0KpmHQlPAOcVFJMXPHhRQyW3_NO86tcf-dt-8q6Ty_jOUbbRNExSZ16rrpzbqgWA47doZls9PmCpm9fMcPIebuL24dm-6NRl1K4clVV0mq1Pf817cKqAHufl7677BWO1vbxGHu2W3Fs&q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fR3s5PAVMZpZbM61lWNTdgwQHuH_g0KpmHQlPAOcVFJMXPHhRQyW3_NO86tcf-dt-8q6Ty_jOUbbRNExSZ16rrpzbqgWA47doZls9PmCpm9fMcPIebuL24dm-6NRl1K4clVV0mq1Pf817cKqAHufl7677BWO1vbxGHu2W3Fs&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fR3s5PAVMZpZbM61lWNTdgwQHuH_g0KpmHQlPAOcVFJMXPHhRQyW3_NO86tcf-dt-8q6Ty_jOUbbRNExSZ16rrpzbqgWA47doZls9PmCpm9fMcPIebuL24dm-6NRl1K4clVV0mq1Pf817cKqAHufl7677BWO1vbxGHu2W3Fs&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll
O2 - BHO: HostSecurePlugin BHO - {2B0183D6-3C22-4F0B-F62F-58AF52F66606} - C:\Program Files (x86)\HostSecurePlugin\bho32.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: DefaultTabBHO - {7F6AFBF1-E065-4627-A2FD-810366367D01} - (no file)
O2 - BHO: MyStart Toolbar - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} - C:\Program Files (x86)\mystarttb\mystartDx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll
O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)
O3 - Toolbar: MyStart Toolbar - {ccb24e92-62c4-4c53-95d2-65f9eed476bc} - C:\Program Files (x86)\mystarttb\mystartDx.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Salus] C:\Program Files (x86)\Salus\Salus.exe
O4 - HKLM\..\Run: [Salus CrashMon] "C:\Program Files (x86)\Salus\CrashMon.exe" "Salus.exe" "http://log.data-url.com/salus/crash"
O4 - HKLM\..\Run: [CrashMon] "C:\Program Files (x86)\Universal Updater\CrashMon.exe" "UniversalUpdater" "http://log.data-url.com/crash/"
O4 - HKLM\..\Run: [ConvertAd] C:\Users\rita\AppData\Local\ConvertAd\ConvertAd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Avira Systray] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\rita\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [HP Officejet 4620 series (NET)] "C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe" -deviceID "TH38P140FY05S1:NW" -scfn "HP Officejet 4620 series (NET)" -AutoStart 1
O4 - HKCU\..\Run: [Yahoo! Search] C:\Users\rita\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [AviraSpeedup] "C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe" -autorun
O4 - HKCU\..\Run: [Price-Horse] C:\Users\rita\AppData\Local\pricehorse\pricehorse\1.3.13.12\pricehorse.exe
O4 - HKUS\S-1-5-18\..\Run: [AviraSpeedup] "C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe" -autorun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AviraSpeedup] "C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe" -autorun (User 'Default user')
O4 - Startup: Dropbox.lnk = rita\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: HostSecurePlugin.lnk = C:\Program Files (x86)\Host Secure\HostSecure.exe
O4 - Global Startup: BrytonBridge2.lnk = C:\Program Files (x86)\BrytonBridge2\BrytonBridge2.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{A57513EA-3FA5-4418-8B52-F88F33C94C7A}: NameServer = 31.168.224.100,5.135.12.56
O17 - HKLM\System\CCS\Services\Tcpip\..\{CCEF640C-E12A-4F3E-9947-EC0EB061D6AA}: NameServer = 31.168.224.100,5.135.12.56
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avira Service Host (Avira.OE.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
O23 - Service: Bryton Bridge Service (BBService) - Unknown owner - C:\Program Files (x86)\BrytonBridge2\BBService.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Search Protect Service (CltMngSvc) - Search Protect - C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
O23 - Service: Conexant Audio Message Service (CxAudMsg) - Unknown owner - C:\Windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: Device Fast-lane Service (DeviceFastLaneService) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
O23 - Service: FastPlayer Updater Service (FastPlayerUpdaterService) - Unknown owner - C:\Program Files (x86)\FastPlayer\FastPlayerUpdaterService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Dritek RF Button Command Service (RfButtonDriverService) - Dritek System INC. - C:\Windows\RfBtnSvc64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Wlan Agent - Atheros - C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe

--
End of file - 15677 bytes

======Listing Processes======





wininit.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
C:\WINDOWS\system32\atiesrxx.exe
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\BrytonBridge2\BBService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
C:\Windows\system32\CxAudMsg64.exe
dashost.exe {b4038d2d-43de-45c5-948403841fd7d7e7}
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files (x86)\FastPlayer\FastPlayerUpdaterService.exe"
C:\Windows\RfBtnSvc64.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe"
"C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe"
C:\WINDOWS\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000005ec
taskeng.exe {866F1382-9239-404D-91B5-E7A78F4BA390}
"C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe" /c
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
"C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe"
"C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe"
"C:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe"
"BBDaemon.exe"
"C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe"

C:\WINDOWS\System32\WinLogon.exe -SpecialSession
 -hiberboot
atieclxx
C:\PROGRA~2\SearchProtect\SearchProtect\bin\cltmng.exe
C:\PROGRA~2\SearchProtect\UI\bin\cltmngui.exe
"C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}" --enable-wmi-window --enable-setforeground-window --enable-kbhook-window
taskhostex.exe 
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server
 {1F8BB149-2B1D-45C6-9224-A21150393CEF}
C:\Windows\System32\skydrive.exe -Embedding
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe" -autorun
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files\Apoint2K\Apoint.exe" 
"C:\Program Files\Apoint2K\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files\Apoint2K\HidFind.exe" 
"Apntex.exe"
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" -tray
"C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe" -deviceID "TH38P140FY05S1:NW" -scfn "HP Officejet 4620 series (NET)" -AutoStart 1
"C:\Users\rita\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe" 
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Users\rita\AppData\Local\pricehorse\pricehorse\1.3.13.12\pricehorse.exe" 
"C:\Program Files (x86)\BrytonBridge2\BrytonBridge2.exe" 
"C:\Users\rita\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe" 
"C:\Program Files (x86)\Salus\Salus.exe" 
"C:\Program Files (x86)\Universal Updater\CrashMon.exe" "UniversalUpdater" "http://log.data-url.com/crash/"
"C:\Users\rita\AppData\Local\ConvertAd\ConvertAd.exe" 
"C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe" 
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\WINDOWS\SysWOW64\DllHost.exe /Processid:{3187A87B-2274-4924-A644-2E2BB36C6271}
 {E70ECEE6-5020-47E7-B1A3-9C5CB9DE3F5E}
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\WINDOWS\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding
C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:4276 CREDAT:267521 /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"  --user-data-dir="C:\Users\rita\AppData\Roaming\Extensions" --enable-easy-off-store-extension-install --load-extension="C:\Users\rita\AppData\Roaming\Extensions\HostSecurePlugin"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"  --user-data-dir="C:\Users\rita\AppData\Roaming\Extensions" --enable-easy-off-store-extension-install --load-extension="C:\Users\rita\AppData\Roaming\Extensions\HostSecurePlugin"
"C:\Program Files\Internet Explorer\iexplore.exe" http://www.istartsurf.com/?type=sc&ts=1408906748&from=tugs&uid=ST500LT012-9WS142_S0V5E7ASXXXXS0V5E7AS
"C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingBar.exe" -Embedding
"C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingSurrogate.exe" -Embedding
"C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingSurrogate.exe" -Embedding
"C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingSurrogate.exe" -Embedding
"C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingSurrogate.exe" -Embedding
"C:\Users\rita\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe" 
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:8136 CREDAT:1774989 /prefetch:2

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:8136 CREDAT:201997 /prefetch:2
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:8136 CREDAT:3937640 /prefetch:2
"C:\WINDOWS\system32\wwahost.exe" -ServerName:App.wwa
"C:\WINDOWS\syswow64\wwahost.exe" -ServerName:App.wwa
C:\Users\rita\AppData\Local\pricehorse\pricehorse\1.3.13.12\playsetup.exe 
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" 
"C:\WINDOWS\syswow64\backgroundTaskHost.exe" -ServerName:MicrosoftMahjong.AppXjhcy0kcdbf976z3xkpqyaq3jpqksz0xh.mca
"C:\Program Files\HP\HP Officejet 4620 series\Bin\HPCustPartic.exe" /UA 10.5 /DDV 0x0a00
"C:\Users\rita\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe" 
"C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe" 
C:\Users\rita\AppData\Local\pricehorse\pricehorse\1.3.13.12\pricehorse.exe 
C:\WINDOWS\System32\svchost.exe -k WerSvcGroup
"C:\Users\rita\AppData\Local\Microsoft\Windows\INetCache\IE\810128PF\RSITx64.exe" 
"C:\WINDOWS\system32\RunDll32.exe" "C:\WINDOWS\system32\WerConCpl.dll", LaunchErcApp -queuereporting
C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\57e9e8c1-3c15-4082-b51c-72ca43308bf2-1.job - C:\Program Files (x86)\videos MediaPlay-Air\videos MediaPlay-Air-codedownloader.exe /reinstallapp /runfrom=task /agentregpath='videos MediaPlay-Air' /appid=61799 /srcid='001673' /subid='verticals-shopping' /zdata='0' /bic=6D1C817ADF5A45FEAE2CF0BF5CDBEDC6IE /verifier=3ba256fb7b0926ed918213bd4d4a52d0 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408907008 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /codedownloaddomain=http://js.inputgenserv.com /defbro=ch /crregname='videos MediaPlay-Air' /fbcodedownloaddomain=http://js.clientdemocloud.com /allusers /addinfojson='{"asw":[32772, -2147483387, 16782336],"browser_name":"__BROWSER_NAME__"}' /autoupdateulr='http://update.inputgenserv.com/ie_code_agent_updates/{CAMP_ID}/update.json' /runfrom='task' /externallog=''
C:\WINDOWS\tasks\57e9e8c1-3c15-4082-b51c-72ca43308bf2-11.job - C:\Program Files (x86)\videos MediaPlay-Air\57e9e8c1-3c15-4082-b51c-72ca43308bf2-11.exe /rawdata=S2wt28odaIvTtqHWaONVUUqYLlDotlcTq4j2SC88AwSht+v6l2lOnnxsIZUkTTli/jiPWQDK11pfQc4P5jXE3brBHFplzLpxy3wtIWfyR3VIvSeLIMT3Z+0665nHftVXvSQaNpW4nmuBi3Dwq7Uh0SIY8HHiIyhkxgx45tip2pe6gRuebxDyQRZ/aZ8bazBaqjkCF4svJ/ZklbmEFY23xC8+x7r0uAQhA7/gnreFBSIUHIaAo1yaMQ/C3klvCeeTbZzoMlzVrRASYiuV6IK4TaeJ7qVIMJVJZHKA+H1lHH2ruM7zvoUdglZS0Yr/bJNyywEMe8wIJckx4W6tFWrqVaY+rKmI+to/eFboJ61MqASwzswvgQgwRvzhYVfdOhOW1hmXzrVwmtyXeg0XHhY9iRl/bAk8e4dxIcN/DA5WitgT8CmvUyhVcHn1AEmyz4X4t9gSod/jZUGX4ye7XJOdrJicP4AySFvS8QrdzrB+CHUsthr7DN9RenphKhS6IpQ0aLiwzRtZcWDsFMlWde/usQmRpLX8Bb8ug5AN6qcWMCnp4e80EjKM5OdV1K400j0dPK8aljt/pGJ+82RsBAzlj243bgaCKGn7CAPcD5sC8dAcwxrdx1vesk89IQV3yHLQPnMdrn6w1I9M6GqugxVToLl/mpluC30CD/ZFwSIrdac4xb2f5G/QPGTkw60O+rNmTqRcEk4oK0NTMFDlrqSJkRIa3GaJa/zVNuBRIa3aaMAJNM1xtCrqKblgd6OAzc5AzyGNK6c2gJj/toDTEXPgRF87/ZHseaLIFH3Rs177kBrk9fXk/P0ESuYtfbrZzqQ2PID2Pddwywd9TKJuTxRso2XE6JVnRZvCJYlgekd3K6Oc5TGiKukACZS1bsRcpPvpRgJAaIj73ZOL8Eo2pZKTLqWSRWemUq0ZYTkdZQQsJRdgTA0Ld3PM/pH+tSCHHfWOaY3e6c+A8+I60RJh+ZRmwdPw2KrtYsUOE/mkqh9tEEXy/rfUKFqVXqRcT73UkZOjtqBCh4fw7kdCd19uzWlc51xo+msB5nanwOwZjplCRqTqrDt1fHRHGtmzWI4MErsavJUAiag916NuCiyID3jHF67HNE/3ond7rnOlK5CACuVMDSDShJ2EishrfcQJUY0nrQy01AJclfZA3RbiWaHc9jdLdygL+ibfXUSjIyTLbem1AORn245YbZuJhTzzU+b+ZYZun1Qp5PUHOWbP2/+8Fbaf7EmscdYVze6BcSpfoPykby26OByLRRNZa3BdQnIVDwsMCIKw+7hF3aEVLh8eWPWe9LP9h+z+HzRH+K6z4bBE7tKay+aMO/5bf+qOD+ZgIr9MUHXBr2PzEftbBZ9Vowphx0tHOR4Y0ljsReqqXM4Hr1g+kEZeU1mdbt28q5Z8O5pvGA2ZsU+2wcnEEAvAVXQjaZZQMBOVWWnLcz5uiJjumYyLSrsXij8wOTbOUrdwJgcWB9EfrmDRcFhkUsV8gX17bC9Y2JEeWdP70OjqvZFCYmGIbujwJ9UJghBk7g5LNCEHAhrFVDPAjrGmwoOePUNua/nnW6G1daQnp0Aw1AbhMe16IfJmTwqIBj8lHraZtBHeawQl8PLzDPyxQh750qrRDao6hFNmcQAgJqdk+Y+7z+9fH3qsb9BxI7+8oEP4rBy2lUTv+fIPSZxVesQ7RAdws/54cQr0LIWXqqslsy8rNI16fSEfaiWM2nWjxBV3qtCKhTz925HLeMhchfJ+zFbiAwf011TCDCemKj/kb8aZ/c3i7msBRxq3Ycb2AdPi8CBHsmZH0QLGdnPThMfgKpIiZUE/e/64wQtZ9exYsboYs/tNYPgWRZQ3TK6f9AlmZe0bBfSySRiuOQAdruW0ECOCwrac9gAltyhJBaAZ25fL0eIi66FyiiJQdNggukEziofD90r386HBNRPudCKuI9HK6mWrc7OazaeuoJtUkld9gA4RDPfP9CEFthjBn93bicvKzI+olL/ep7e1kzStFCqAKwLtqQ5DcIDQB7AwL6S/BJqzqXPbT5qdXu/GjkQO
C:\WINDOWS\tasks\57e9e8c1-3c15-4082-b51c-72ca43308bf2-2.job - C:\Program Files (x86)\videos MediaPlay-Air\57e9e8c1-3c15-4082-b51c-72ca43308bf2-2.exe /enablebho /agentregpath='videos MediaPlay-Air' /appid=61799 /srcid='001673' /subid='verticals-shopping' /zdata='0' /bic=6D1C817ADF5A45FEAE2CF0BF5CDBEDC6IE /verifier=3ba256fb7b0926ed918213bd4d4a52d0 /installerversion=1_34_08_12 /installationtime=1408907008 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /bhoguid=11111111-1111-1111-1111-110611171199 /defbro=ch /useiepol /allusers /autoupdateulr='http://update.inputgenserv.com/ie_enable_agent_updates/{CAMP_ID}/update.json' /runfrom='task' /externallog=''
C:\WINDOWS\tasks\57e9e8c1-3c15-4082-b51c-72ca43308bf2-3.job - C:\Program Files (x86)\videos MediaPlay-Air\57e9e8c1-3c15-4082-b51c-72ca43308bf2-3.exe /rawdata=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
C:\WINDOWS\tasks\57e9e8c1-3c15-4082-b51c-72ca43308bf2-4.job - C:\Program Files (x86)\videos MediaPlay-Air\57e9e8c1-3c15-4082-b51c-72ca43308bf2-4.exe /installxpi /agentregpath='videos MediaPlay-Air' /extensionfilepath='C:\Program Files (x86)\videos MediaPlay-Air\57e9e8c1-3c15-4082-b51c-72ca43308bf2.xpi' /appid=61799 /srcid='001673' /subid='verticals-shopping' /zdata='0' /bic=6D1C817ADF5A45FEAE2CF0BF5CDBEDC6IE /verifier=3ba256fb7b0926ed918213bd4d4a52d0 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408907008 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /waitforbrowser=300 /extensionid=5c8764929678437cbd90994a5a82@ac863d978ade40948f4c7f15bb3c4.com /extensionversion=0.95 /prefsbranch=a5c8764929678437cbd90994a5a82ac863d978ade40948f4c7f15bb3c4com61799 /updateurl=https://w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/61799.rdf /extensionname='videos MediaPlay-Air' /extensiondesc='MediaPlayerEnhance Extension' /publishername='enter' /defbro=ch /sid=S-1-5-21-455634102-3971962441-1493714179-1001 /addinfojson='{"asw":[32772, -2147483387, 16782336],"browser_name":"__BROWSER_NAME__"}' /allusers /allprofiles /checkfflist /autoupdateulr='http://update.inputgenserv.com/ff_agent_updates/{CAMP_ID}/update.json' /runfrom='task' /externallog=''
C:\WINDOWS\tasks\57e9e8c1-3c15-4082-b51c-72ca43308bf2-5.job - C:\Program Files (x86)\videos MediaPlay-Air\57e9e8c1-3c15-4082-b51c-72ca43308bf2-5.exe /runupdater /agentregpath='videos MediaPlay-Air' /appid=61799 /srcid='001673' /subid='verticals-shopping' /zdata='0' /bic=6D1C817ADF5A45FEAE2CF0BF5CDBEDC6IE /verifier=3ba256fb7b0926ed918213bd4d4a52d0 /installerversion=1_34_08_12 /installationtime=1408907008 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /geoserviceurl=http://ipgeoapi.com/ /updatejsondomain=http://update.inputgenserv.com /sid=S-1-5-21-455634102-3971962441-1493714179-1001 /updaterversion=6 /monetizationdomain=http://logs.inputgenserv.com /autoupdateulr='http://update.inputgenserv.com/updater_agent_updates/{CAMP_ID}/update.json' /runfrom='task' /externallog=''
C:\WINDOWS\tasks\57e9e8c1-3c15-4082-b51c-72ca43308bf2-5_user.job - C:\Program Files (x86)\videos MediaPlay-Air\57e9e8c1-3c15-4082-b51c-72ca43308bf2-5.exe /runupdater /agentregpath='videos MediaPlay-Air' /appid=61799 /srcid='001673' /subid='verticals-shopping' /zdata='0' /bic=6D1C817ADF5A45FEAE2CF0BF5CDBEDC6IE /verifier=3ba256fb7b0926ed918213bd4d4a52d0 /installerversion=1_34_08_12 /installationtime=1408907008 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /geoserviceurl=http://ipgeoapi.com/ /updatejsondomain=http://update.inputgenserv.com /sid=S-1-5-21-455634102-3971962441-1493714179-1001 /updaterversion=6 /monetizationdomain=http://logs.inputgenserv.com /autoupdateulr='http://update.inputgenserv.com/updater_agent_updates/{CAMP_ID}/update.json' /usertask /runfrom='task' /externallog=''
C:\WINDOWS\tasks\57e9e8c1-3c15-4082-b51c-72ca43308bf2-6.job - C:\Program Files (x86)\videos MediaPlay-Air\57e9e8c1-3c15-4082-b51c-72ca43308bf2-6.exe /agentregpath='videos MediaPlay-Air-nv' /appid=61799 /srcid='001673' /subid='verticals-shopping' /zdata='0' /bic=6D1C817ADF5A45FEAE2CF0BF5CDBEDC6IE /verifier=3ba256fb7b0926ed918213bd4d4a52d0 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408907008 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /codedownloaddomain=http://js.inputgenserv.com /defbro=ch /DllName32ToInjectToChrome='3e9804fb-0bbe-45b6-b305-5deafa356009.dll' /DllName64ToInjectToChrome='a9577b8f-a728-4515-be84-2aa74aa17879.dll' /nova64bitexe='57e9e8c1-3c15-4082-b51c-72ca43308bf2-64.exe' /browsername='nova' /usehklm /crregname='videos MediaPlay-Air' /fbcodedownloaddomain=http://js.clientdemocloud.com /addinfojson='{"asw":[32772, -2147483387, 16782336],"browser_name":"__BROWSER_NAME__"}' /autoupdateulr='http://update.inputgenserv.com/novarun/{CAMP_ID}/update.json' /runfrom='task' /externallog=''
C:\WINDOWS\tasks\57e9e8c1-3c15-4082-b51c-72ca43308bf2-7.job - C:\Program Files (x86)\videos MediaPlay-Air\57e9e8c1-3c15-4082-b51c-72ca43308bf2-7.exe /updateapp /agentregpath='videos MediaPlay-Air-nv' /appid=61799 /srcid='001673' /subid='verticals-shopping' /zdata='0' /bic=6D1C817ADF5A45FEAE2CF0BF5CDBEDC6IE /verifier=3ba256fb7b0926ed918213bd4d4a52d0 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1408907008 /statsdomain=http://stats.inputgenserv.com /errorsdomain=http://errors.inputgenserv.com /codedownloaddomain=http://js.inputgenserv.com /defbro=ch /DllName32ToInjectToChrome='3e9804fb-0bbe-45b6-b305-5deafa356009.dll' /DllName64ToInjectToChrome='a9577b8f-a728-4515-be84-2aa74aa17879.dll' /nova64bitexe='57e9e8c1-3c15-4082-b51c-72ca43308bf2-64.exe' /browsername='nova' /usehklm /crregname='videos MediaPlay-Air' /fbcodedownloaddomain=http://js.clientdemocloud.com /addinfojson='{"asw":[32772, -2147483387, 16782336],"browser_name":"__BROWSER_NAME__"}' /runfrom=task /autoupdateulr='http://update.inputgenserv.com/novacode/{CAMP_ID}/update.json' /runfrom='task' /externallog=''
C:\WINDOWS\tasks\adfff4f0-00bc-4c1a-a4e3-cee3a27f62b0.job - C:\Program Files (x86)\videos MediaPlay-Air\57e9e8c1-3c15-4082-b51c-72ca43308bf2-4.exe /rawdata=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
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 
C:\WINDOWS\tasks\APSnotifierPP1.job - C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe --notifier2 B
C:\WINDOWS\tasks\APSnotifierPP2.job - C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe --notifier 4
C:\WINDOWS\tasks\APSnotifierPP3.job - C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe --notifier 6
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-455634102-3971962441-1493714179-1001Core.job - C:\Users\rita\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-455634102-3971962441-1493714179-1001UA.job - C:\Users\rita\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Lyrics Say Update.job - C:\Program Files (x86)\LyricsWOW\wowupd.exe /update

=========Mozilla firefox=========

ProfilePath - C:\Users\rita\AppData\Roaming\Mozilla\Firefox\Profiles\fz89lp0l.default

prefs.js - "browser.search.useDBForOrder" -  true
prefs.js - "browser.startup.homepage" -  "http://www.msn.com/nl-be/?pc=U207&ocid=U207DHP|http://www.trovi.com/?gd=&ctid=CT3324332&octid=EB_ORIGINAL_CTID&ISID=MDFE6B482-F1E4-4FD0-89D0-02479BB58F78&SearchSource=55&CUI=&UM=6&UP=SP2F0D5959-658F-4AD5-850C-7C456828025E&SSPV="
prefs.js - "keyword.URL" -  "http://www.bing.com/search?FORM=U207DF&PC=U207&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.223 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.71.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10]
"Description"=globalUpdate Update
"Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4]
"Description"=globalUpdate Update
"Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App V2 Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.223 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
belgiumeid@eid.belgium.be

C:\Users\rita\AppData\Roaming\Mozilla\Firefox\Profiles\fz89lp0l.default\extensions\
5c8764929678437cbd90994a5a82@ac863d978ade40948f4c7f15bb3c4.com
abs@avira.com
faststartff@gmail.com
pagerank-client@koeniglich.ch
{607b689f-7600-45e4-b8e5-887f72dab15c}

C:\Users\rita\AppData\Roaming\Mozilla\Firefox\Profiles\fz89lp0l.default\searchplugins\
bingp.xml
trovi-search.xml
Web Search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11 1154720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2B0183D6-3C22-4F0B-F62F-58AF52F66606}]
HostSecurePlugin - C:\Program Files\HostSecurePlugin\bho64.dll [2014-09-04 1035432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11 1431712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2B0183D6-3C22-4F0B-F62F-58AF52F66606}]
HostSecurePlugin - C:\Program Files (x86)\HostSecurePlugin\bho32.dll [2014-09-04 832168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-09-26 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}]
DefaultTab Browser Helper

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ccb24e92-62c4-4c53-95d2-65f9eed476bc}]
MyStart Toolbar - C:\Program Files (x86)\mystarttb\mystartDx.dll [2014-06-04 114952]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-09-26 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{eec0f710-38b5-4aba-99bf-ec87564a4e13} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11 1154720]
{ae07101b-46d4-4a98-af68-0333ea26e113}
{ccb24e92-62c4-4c53-95d2-65f9eed476bc} - MyStart Toolbar - C:\Program Files (x86)\mystarttb\mystartDx64.dll [2014-06-04 127240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{eec0f710-38b5-4aba-99bf-ec87564a4e13} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11 1431712]
{ae07101b-46d4-4a98-af68-0333ea26e113}
{ccb24e92-62c4-4c53-95d2-65f9eed476bc} - MyStart Toolbar - C:\Program Files (x86)\mystarttb\mystartDx.dll [2014-06-04 114952]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2012-11-09 661400]
"HostSecurePlugin"=C:\Program Files (x86)\Host Secure\HostSecure.exe [2014-09-12 31408]
"HostSecurePlugin3"=C:\Program Files (x86)\Host Secure\HostSecure.exe [2014-09-12 31408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=C:\Users\rita\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-10-19 138096]
""= []
"NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2013-10-02 1090912]
"HP Officejet 4620 series (NET)"=C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe [2012-10-17 2573416]
"Yahoo! Search"=C:\Users\rita\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.8.2\dsrlte.exe [2014-06-16 535472]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-10-01 22065760]
"AviraSpeedup"=C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe [2014-10-01 5395192]
"Price-Horse"=C:\Users\rita\AppData\Local\pricehorse\pricehorse\1.3.13.12\pricehorse.exe [2014-10-07 627560]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-08-30 766208]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-10-11 60712]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2014-10-14 703736]
"fst_be_76"= []
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []
"Salus"=C:\Program Files (x86)\Salus\Salus.exe [2014-09-29 981840]
"Salus CrashMon"=C:\Program Files (x86)\Salus\CrashMon.exe [2014-09-23 404992]
"CrashMon"=C:\Program Files (x86)\Universal Updater\CrashMon.exe [2014-09-23 404992]
"ConvertAd"=C:\Users\rita\AppData\Local\ConvertAd\ConvertAd.exe [2014-10-21 2097152]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-09-26 271744]
"Avira Systray"=C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [2014-10-22 124208]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-10-15 157480]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-10-02 421888]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
BrytonBridge2.lnk - C:\Program Files (x86)\BrytonBridge2\BrytonBridge2.exe

C:\Users\rita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\rita\AppData\Roaming\Dropbox\bin\Dropbox.exe
HostSecurePlugin.lnk - C:\Program Files (x86)\Host Secure\HostSecure.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-17 20:43:33 ----D---- C:\Program Files\trend micro
2014-11-17 20:43:30 ----D---- C:\rsit
2014-11-15 13:29:35 ----D---- C:\Program Files (x86)\QuickTime
2014-11-12 13:46:11 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-11-12 13:46:10 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll
2014-11-12 13:45:38 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-11-12 13:45:36 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-11-12 13:45:36 ----A---- C:\WINDOWS\system32\drivers\cng.sys
2014-11-12 13:45:36 ----A---- C:\WINDOWS\system32\certcli.dll
2014-11-12 13:45:35 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll
2014-11-12 13:45:35 ----A---- C:\WINDOWS\system32\rfxvmt.dll
2014-11-12 13:45:35 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys
2014-11-12 13:45:35 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys
2014-11-12 13:45:35 ----A---- C:\WINDOWS\system32\adtschema.dll
2014-11-12 13:45:34 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll
2014-11-12 13:45:34 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-11-12 13:45:34 ----A---- C:\WINDOWS\system32\msaudite.dll
2014-11-12 13:41:30 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll
2014-11-12 13:41:30 ----A---- C:\WINDOWS\system32\msxml3.dll
2014-11-12 13:41:00 ----A---- C:\WINDOWS\system32\audiosrv.dll
2014-11-12 13:40:59 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll
2014-11-12 13:40:59 ----A---- C:\WINDOWS\system32\AudioSes.dll
2014-11-12 13:40:59 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll
2014-11-12 13:40:58 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll
2014-11-12 13:40:58 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll
2014-11-12 13:40:58 ----A---- C:\WINDOWS\system32\audiodg.exe
2014-11-12 13:40:57 ----A---- C:\WINDOWS\system32\EncDump.dll
2014-11-12 13:40:57 ----A---- C:\WINDOWS\system32\AudioEng.dll
2014-11-12 13:40:57 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-11-12 13:40:38 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-11-12 13:40:34 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-11-12 13:25:18 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-11-12 13:23:00 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-11-12 13:21:40 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-11-12 13:21:26 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-11-12 13:21:14 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-11-12 13:21:12 ----A---- C:\WINDOWS\system32\inetcomm.dll
2014-11-12 13:21:10 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll
2014-11-12 13:21:07 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll
2014-11-12 13:21:06 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-11-12 13:21:06 ----A---- C:\WINDOWS\system32\jscript.dll
2014-11-12 13:21:05 ----A---- C:\WINDOWS\system32\ieui.dll
2014-11-12 13:21:03 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-11-12 13:21:03 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-11-12 13:21:02 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-11-12 13:21:02 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll
2014-11-12 13:21:02 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-11-12 13:21:01 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-11-12 13:21:00 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-11-12 13:20:58 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-11-12 13:20:58 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-11-12 13:20:58 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-11-12 13:20:57 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-11-12 13:20:57 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-11-12 13:20:55 ----A---- C:\WINDOWS\system32\webcheck.dll
2014-11-12 13:20:53 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll
2014-11-12 13:20:52 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-11-12 13:20:50 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll
2014-11-12 13:20:50 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-11-12 13:20:49 ----A---- C:\WINDOWS\system32\hlink.dll
2014-11-12 13:20:48 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-11-12 13:20:48 ----A---- C:\WINDOWS\SYSWOW64\inseng.dll
2014-11-12 13:20:48 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll
2014-11-12 13:20:48 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-11-12 13:20:48 ----A---- C:\WINDOWS\system32\iepeers.dll
2014-11-12 13:20:48 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-11-12 13:20:47 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-11-12 13:20:47 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll
2014-11-12 13:20:47 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2014-11-12 13:20:47 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-11-12 13:20:47 ----A---- C:\WINDOWS\system32\inseng.dll
2014-11-12 13:20:47 ----A---- C:\WINDOWS\system32\iesysprep.dll
2014-11-12 13:20:46 ----A---- C:\WINDOWS\SYSWOW64\occache.dll
2014-11-12 13:20:46 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-11-12 13:20:46 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll
2014-11-12 13:20:46 ----A---- C:\WINDOWS\SYSWOW64\IEAdvpack.dll
2014-11-12 13:20:46 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-11-12 13:20:46 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-11-12 13:20:46 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-11-12 13:20:46 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-11-12 13:20:45 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-11-12 13:20:45 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-12 13:20:45 ----A---- C:\WINDOWS\SYSWOW64\iexpress.exe
2014-11-12 13:20:45 ----A---- C:\WINDOWS\system32\msrating.dll
2014-11-12 13:20:45 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-11-12 13:20:43 ----A---- C:\WINDOWS\SYSWOW64\imgutil.dll
2014-11-12 13:20:43 ----A---- C:\WINDOWS\system32\occache.dll
2014-11-12 13:20:42 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-11-12 13:20:42 ----A---- C:\WINDOWS\system32\imgutil.dll
2014-11-12 13:20:41 ----A---- C:\WINDOWS\SYSWOW64\pngfilt.dll
2014-11-12 13:20:41 ----A---- C:\WINDOWS\SYSWOW64\licmgr10.dll
2014-11-12 13:20:41 ----A---- C:\WINDOWS\system32\pngfilt.dll
2014-11-12 13:20:41 ----A---- C:\WINDOWS\system32\licmgr10.dll
2014-11-12 13:20:40 ----A---- C:\WINDOWS\SYSWOW64\wextract.exe
2014-11-12 13:20:40 ----A---- C:\WINDOWS\SYSWOW64\url.dll
2014-11-12 13:20:40 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-11-12 13:20:40 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-11-12 13:20:40 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-11-12 13:20:40 ----A---- C:\WINDOWS\system32\url.dll
2014-11-12 13:20:39 ----A---- C:\WINDOWS\SYSWOW64\mshta.exe
2014-11-12 13:20:39 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe
2014-11-12 13:20:39 ----A---- C:\WINDOWS\system32\wextract.exe
2014-11-12 13:20:39 ----A---- C:\WINDOWS\system32\mshta.exe
2014-11-12 13:20:39 ----A---- C:\WINDOWS\system32\msfeedssync.exe
2014-11-12 13:20:39 ----A---- C:\WINDOWS\system32\iexpress.exe
2014-11-12 13:20:39 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-11-12 13:20:39 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-11-12 13:20:39 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-11-12 13:20:39 ----A---- C:\WINDOWS\system32\IEAdvpack.dll
2014-11-12 13:20:25 ----A---- C:\WINDOWS\system32\win32k.sys
2014-11-12 13:20:24 ----A---- C:\WINDOWS\SYSWOW64\packager.dll
2014-11-12 13:20:24 ----A---- C:\WINDOWS\system32\packager.dll
2014-11-10 21:03:38 ----D---- C:\ProgramData\2355320829
2014-11-10 12:23:43 ----D---- C:\Program Files\iPod
2014-11-10 12:23:40 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2014-11-10 12:23:40 ----D---- C:\Program Files\iTunes
2014-11-10 12:23:40 ----D---- C:\Program Files (x86)\iTunes
2014-11-05 20:59:27 ----D---- C:\ProgramData\mystarttb
2014-11-05 20:50:38 ----D---- C:\Users\rita\AppData\Roaming\Extensions
2014-11-05 20:50:34 ----D---- C:\Program Files (x86)\HostSecurePlugin
2014-11-05 20:50:20 ----D---- C:\Program Files\HostSecurePlugin
2014-11-05 20:49:44 ----D---- C:\Program Files (x86)\CloudGuard
2014-11-05 20:49:41 ----D---- C:\Program Files (x86)\Host Secure
2014-10-25 19:04:35 ----D---- C:\Users\rita\AppData\Roaming\VOPackage
2014-10-25 19:04:35 ----D---- C:\Program Files (x86)\SearchProtect
2014-10-21 19:33:01 ----A---- C:\WINDOWS\SYSWOW64\javaws.exe
2014-10-21 19:32:40 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2014-10-21 19:32:40 ----A---- C:\WINDOWS\SYSWOW64\javaw.exe
2014-10-21 19:32:39 ----A---- C:\WINDOWS\SYSWOW64\java.exe
2014-10-21 11:14:11 ----SHD---- C:\Users\rita\AppData\Roaming\AnyProtectEx
2014-10-21 11:01:53 ----D---- C:\Users\rita\AppData\Roaming\QuickScan
2014-10-21 10:52:41 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-10-21 10:36:49 ----D---- C:\Program Files (x86)\FastPlayer
2014-10-19 10:14:10 ----A---- C:\WINDOWS\SYSWOW64\msi.dll
2014-10-19 10:14:10 ----A---- C:\WINDOWS\system32\msi.dll
2014-10-19 10:14:06 ----A---- C:\WINDOWS\system32\generaltel.dll
2014-10-19 10:14:06 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-10-19 10:14:04 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-10-19 10:13:58 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll
2014-10-19 10:13:58 ----A---- C:\WINDOWS\system32\MrmCoreR.dll
2014-10-19 10:13:52 ----A---- C:\WINDOWS\system32\winbici.dll

======List of files/folders modified in the last 1 month======

2014-11-17 20:44:01 ----D---- C:\WINDOWS\Temp
2014-11-17 20:43:33 ----RD---- C:\Program Files
2014-11-17 20:33:30 ----D---- C:\Users\rita\AppData\Roaming\Skype
2014-11-17 20:02:10 ----D---- C:\WINDOWS\system32\sru
2014-11-17 19:35:10 ----D---- C:\Users\rita\AppData\Roaming\Dropbox
2014-11-17 16:20:19 ----D---- C:\WINDOWS\CbsTemp
2014-11-17 16:14:23 ----D---- C:\WINDOWS\WinSxS
2014-11-17 16:02:07 ----SHD---- C:\System Volume Information
2014-11-17 16:00:40 ----D---- C:\WINDOWS\system32\config
2014-11-17 15:51:24 ----D---- C:\WINDOWS\Prefetch
2014-11-17 15:51:09 ----D---- C:\WINDOWS\system32\drivers
2014-11-17 15:51:04 ----D---- C:\WINDOWS\apppatch
2014-11-16 20:12:14 ----D---- C:\WINDOWS\system32\MRT
2014-11-16 20:12:10 ----A---- C:\WINDOWS\system32\MRT.exe
2014-11-16 20:09:05 ----D---- C:\WINDOWS\Microsoft.NET
2014-11-15 15:46:25 ----RD---- C:\WINDOWS\System32
2014-11-15 15:46:25 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-11-15 15:46:24 ----D---- C:\WINDOWS\Inf
2014-11-15 13:37:18 ----SHD---- C:\WINDOWS\Installer
2014-11-15 13:29:35 ----RD---- C:\Program Files (x86)
2014-11-15 13:29:35 ----D---- C:\WINDOWS\SysWOW64
2014-11-15 13:20:11 ----D---- C:\WINDOWS\system32\catroot2
2014-11-15 13:12:14 ----D---- C:\WINDOWS\SYSWOW64\nl-NL
2014-11-15 13:12:14 ----D---- C:\WINDOWS\system32\nl-NL
2014-11-15 13:12:12 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-11-15 13:12:12 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-15 13:12:10 ----D---- C:\WINDOWS\system32\migration
2014-11-15 13:12:09 ----D---- C:\Program Files\Internet Explorer
2014-11-15 13:12:01 ----D---- C:\WINDOWS\system32\wbem
2014-11-15 13:12:01 ----D---- C:\Windows
2014-11-15 13:10:31 ----D---- C:\WINDOWS\Tasks
2014-11-15 13:10:19 ----D---- C:\ProgramData\BrytonBridge
2014-11-15 13:07:14 ----HD---- C:\Program Files\WindowsApps
2014-11-15 12:58:41 ----D---- C:\WINDOWS\registration
2014-11-15 12:58:08 ----D---- C:\WINDOWS\system32\Sysprep
2014-11-15 12:37:40 ----D---- C:\WINDOWS\Logs
2014-11-15 09:42:12 ----D---- C:\WINDOWS\LiveKernelReports
2014-11-15 00:11:27 ----D---- C:\WINDOWS\rescache
2014-11-14 21:25:32 ----D---- C:\WINDOWS\AppReadiness
2014-11-10 21:04:43 ----D---- C:\Program Files\TotalSystemCare
2014-11-10 21:04:36 ----D---- C:\WINDOWS\system32\Tasks
2014-11-10 21:03:38 ----HD---- C:\ProgramData
2014-11-10 21:03:38 ----D---- C:\ProgramData\374311380
2014-11-10 12:23:42 ----D---- C:\Program Files\Common Files\Apple
2014-11-10 12:23:21 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-11-10 12:14:22 ----D---- C:\WINDOWS\system32\NDF
2014-11-04 19:45:07 ----D---- C:\ProgramData\Package Cache
2014-11-04 19:44:49 ----D---- C:\Program Files (x86)\Avira
2014-11-04 12:17:49 ----D---- C:\ProgramData\Skype
2014-11-04 12:17:36 ----RD---- C:\Program Files (x86)\Skype
2014-10-30 01:55:02 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-10-25 18:29:37 ----D---- C:\WINDOWS\MediaViewer
2014-10-25 18:29:37 ----D---- C:\WINDOWS\FileManager
2014-10-25 18:29:37 ----D---- C:\WINDOWS\Camera
2014-10-23 21:22:01 ----D---- C:\WINDOWS\system32\catroot
2014-10-21 21:33:05 ----RSD---- C:\WINDOWS\assembly
2014-10-21 19:34:05 ----D---- C:\ProgramData\Oracle
2014-10-21 19:32:39 ----D---- C:\Program Files (x86)\Java
2014-10-21 19:16:03 ----SD---- C:\WINDOWS\system32\CompatTel
2014-10-21 10:55:03 ----SD---- C:\ProgramData\Microsoft
2014-10-19 20:11:07 ----D---- C:\Users\rita\AppData\Roaming\Probit Software
2014-10-19 20:11:07 ----D---- C:\Program Files (x86)\Probit Software
2014-10-19 01:27:42 ----RD---- C:\WINDOWS\ToastData
2014-10-19 01:27:35 ----D---- C:\WINDOWS\WinStore
2014-10-19 01:27:20 ----D---- C:\WINDOWS\system32\DriverStore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2014-10-14 131608]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2014-02-25 28600]
R1 Salus;Salus; C:\WINDOWS\system32\drivers\Salus.sys [2014-09-29 52048]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2014-10-14 119272]
R3 amdkmdag;amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [2013-06-06 12503552]
R3 amdkmdap;amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [2013-06-06 616960]
R3 ApfiltrService;@oem15.inf,%Filter.SvcDesc%;Alps Pointing-device Filter Driver; C:\WINDOWS\system32\DRIVERS\Apfiltr.sys [2012-11-13 452472]
R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]
R3 AtiHDAudioService;@oem7.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdW86.sys [2013-07-05 129536]
R3 CnxtHdAudService;@oem3.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2012-09-20 1609376]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS-minipoortstuurprogramma voor Qualcomm Atheros AR81xx PCI-E Ethernet-controller; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 Ps2Kb2Hid;@oem14.inf,%Ps2Kb2Hid.SVCDESC%;PS/2 Keyboard to HID Driver; C:\WINDOWS\System32\drivers\aPs2Kb2Hid.sys [2013-03-22 26736]
R3 SPPD;SPPD; \??\C:\WINDOWS\system32\drivers\SPPD.sys []
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Stuurprogramma voor seriële digitale fotocamera; C:\WINDOWS\system32\DRIVERS\serscan.sys [2013-08-22 11776]
R3 usbfilter;AMD USB Filter Driver; C:\WINDOWS\system32\DRIVERS\usbfilter.sys [2012-06-18 57000]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB-videoapparaat (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S0 amdkmafd;@oem5.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\WINDOWS\System32\drivers\amdkmafd.sys [2012-09-23 21160]
S1 ccSet_NARA;NARA Settings Manager; C:\WINDOWS\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [2012-05-26 168608]
S3 dg_ssudbus;@oem33.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 nmwcd;@oem1.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]
S3 nmwcdc;@oem23.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]
S3 RSPCIESTOR;@oem2.inf,%Rts5208%;Realtek PCIE CardReader Driver; C:\WINDOWS\system32\DRIVERS\RtsPStor.sys [2012-08-03 340112]
S3 ssudmdm;@oem35.inf,%ssud.Service.Name%;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Stuurprogramma voor USB-scanner; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-08-22 44544]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2013-08-22 33280]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [2013-02-21 240640]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-08-30 344064]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2014-10-14 431920]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2014-10-14 431920]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-10-07 60744]
R2 Avira.OE.ServiceHost;Avira Service Host; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [2014-10-22 164656]
R2 BBService;Bryton Bridge Service; C:\Program Files (x86)\BrytonBridge2\BBService.exe [2014-03-03 68096]
R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 CltMngSvc;Search Protect Service; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2014-11-10 3056960]
R2 CxAudMsg;Conexant Audio Message Service; C:\Windows\system32\CxAudMsg64.exe [2012-06-08 201376]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2012-12-10 350544]
R2 FastPlayerUpdaterService;FastPlayer Updater Service; C:\Program Files (x86)\FastPlayer\FastPlayerUpdaterService.exe [2014-09-30 11776]
R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2013-09-06 240736]
R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-07-24 2457232]
R2 NAUpdate;Nero Update; C:\Program Files (x86)\Nero\Update\NASvc.exe [2011-11-26 687400]
R2 RfButtonDriverService;Dritek RF Button Command Service; C:\Windows\RfBtnSvc64.exe [2013-03-22 93296]
R3 ePowerSvc;ePower Service; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2012-10-23 658064]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-08-24 68608]
S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-10 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-12 267440]
S3 DeviceFastLaneService;Device Fast-lane Service; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [2012-11-16 469648]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-08-24 68608]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-10 116648]
S3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2014-10-15 643880]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-08-24 119408]
S3 ose;Office  Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-12-04 150600]
S4 AntiVirWebService;Avira Web Protection; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [2014-10-14 994096]

-----------------EOF-----------------