Logfile of random's system information tool 1.10 (written by random/random)
Run by Soaleban at 2014-11-29 12:12:51
Microsoft® Windows Vista™ Home Premium  Service Pack 2
System drive C: has 685 GB (72%) free of 954 GB
Total RAM: 3521 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:13:35, on 29-11-2014
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16592)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe
C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\Program Files\Citrix\ICA Client\concentr.exe
C:\Program Files\Citrix\ICA Client\redirector.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Soaleban\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Users\Soaleban\AppData\Roaming\Spotify\spotify.exe
C:\Users\Soaleban\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Users\Soaleban\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\Citrix\Receiver\Receiver.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Citrix\SelfServicePlugin\SelfServicePlugin.exe
C:\Program Files\Citrix\ICA Client\wfcrun32.exe
C:\Users\Soaleban\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Soaleban\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Soaleban\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Soaleban\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Soaleban\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Users\Soaleban\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Steam\bin\steamwebhelper.exe
C:\Program Files\Steam\bin\steamwebhelper.exe
C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.229\deploy\LoLLauncher.exe
C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.13\deploy\LoLPatcher.exe
C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.119\deploy\LolClient.exe
C:\Users\Soaleban\AppData\Local\Popcorn Time\node-webkit\Popcorn Time.exe
C:\Users\Soaleban\AppData\Local\Popcorn Time\node-webkit\Popcorn Time.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Soaleban\Downloads\RSIT (1).exe
C:\Program Files\trend micro\Soaleban.exe
C:\Windows\system32\taskeng.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: savinshop - {87d92fb0-ec3d-4e93-8de8-e99c9e60c9bb} - C:\ProgramData\savinshop\NHT5iNf5vo4dzq.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll
O2 - BHO: greatsaving - {dcb19fe0-a847-4117-8542-caf5bf931a7a} - C:\ProgramData\greatsaving\iNkFZ0vXJyNZnH.dll (file missing)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [BullGuard] "C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe" -boot
O4 - HKLM\..\Run: [BullGuardUpdate2] c:\program files\bullguard ltd\bullguard\BullGuardUpdate2.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [CanonQuickMenu] C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE /logon
O4 - HKLM\..\Run: [IJNetworkScannerSelectorEX] C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
O4 - HKLM\..\Run: [CitrixReceiver] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk"
O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files\Citrix\ICA Client\concentr.exe" /startup
O4 - HKLM\..\Run: [Redirector] "C:\Program Files\Citrix\ICA Client\redirector.exe" /startup
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Soaleban\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [Optimizer Pro] C:\Program Files\Optimizer Pro\OptProLauncher.exe
O4 - HKCU\..\Run: [Spotify] "C:\Users\Soaleban\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Soaleban\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O9 - Extra button: Report to BullGuard - {27FD17FB-CF63-486b-B2BE-8D8781CBEA01} - C:\Program Files\BullGuard Ltd\BullGuard\Antiphishing\IE\BGAntiphishingIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: BullGuard Behavioural Detection (BsBhvScan) - BullGuard Ltd. - C:\Program Files\BullGuard Ltd\BullGuard\BullGuardBhvScanner.exe
O23 - Service: BullGuard scanning service (BsScanner) - BullGuard Ltd. - C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe
O23 - Service: BullGuard update service (BsUpdate) - BullGuard Ltd. - C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Overwolf Updater Windows SCM (OverwolfUpdater) - Overwolf LTD - C:\Program Files\Overwolf\OverwolfUpdater.exe
O23 - Service: Reimage Real Time Protector (ReimageRealTimeProtector) - Reimage® - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe

--
End of file - 11391 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe 
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Soaleban\AppData\Roaming\Mozilla\Firefox\Profiles\61i8ksur.default

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"antiphishing@bullguard"=C:\Program Files\BullGuard Ltd\BullGuard\Antiphishing\FF\antiphishing@bullguard\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.239 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon My Image Garden
"Path"=C:\Program Files\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Citrix.com/npican]
"Description"=Citrix ICA Client Plugin
"Path"=C:\Program Files\Citrix\ICA Client\npicaN.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Users\Soaleban\AppData\Roaming\Mozilla\Firefox\Profiles\61i8ksur.default\extensions\
b@24o.com
staged

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07 176736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-10-30 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{87d92fb0-ec3d-4e93-8de8-e99c9e60c9bb}]
savinshop - C:\ProgramData\savinshop\NHT5iNf5vo4dzq.dll [2014-11-29 766976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-10-30 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{dcb19fe0-a847-4117-8542-caf5bf931a7a}]
greatsaving - C:\ProgramData\greatsaving\iNkFZ0vXJyNZnH.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-10-07 507776]
"BullGuard"=C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe [2014-11-20 1132880]
"BullGuardUpdate2"=c:\program files\bullguard ltd\bullguard\BullGuardUpdate2.exe [2014-11-20 2325328]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [2013-12-06 747264]
"CanonQuickMenu"=C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE [2014-03-25 1284680]
"IJNetworkScannerSelectorEX"=C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2013-02-19 453736]
"CitrixReceiver"=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk []
"ConnectionCenter"=C:\Program Files\Citrix\ICA Client\concentr.exe [2013-10-01 395656]
"Redirector"=C:\Program Files\Citrix\ICA Client\redirector.exe [2013-10-01 153992]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"Spotify Web Helper"=C:\Users\Soaleban\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-11-02 1514040]
"Optimizer Pro"=C:\Program Files\Optimizer Pro\OptProLauncher.exe [2014-11-04 148048]
"Spotify"=C:\Users\Soaleban\AppData\Roaming\Spotify\spotify.exe [2014-11-02 6553144]
"Akamai NetSession Interface"=C:\Users\Soaleban\AppData\Local\Akamai\netsession_win.exe [2014-10-29 4673432]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-11-06 30526056]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BsMain]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BsScanner]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BsUpdate]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-29 11:52:54 ----D---- C:\ProgramData\savinshop
2014-11-25 19:39:29 ----D---- C:\Program Files\trend micro
2014-11-25 19:39:24 ----D---- C:\rsit
2014-11-25 18:49:49 ----D---- C:\Users\Soaleban\AppData\Roaming\vlc
2014-11-24 16:51:04 ----D---- C:\ProgramData\Citrix
2014-11-24 16:50:28 ----D---- C:\Program Files\Common Files\Citrix
2014-11-24 16:37:20 ----D---- C:\Users\Soaleban\AppData\Roaming\ICAClient
2014-11-24 16:36:13 ----D---- C:\Program Files\Citrix
2014-11-23 12:55:03 ----D---- C:\Users\Soaleban\AppData\Roaming\java
2014-11-23 12:54:51 ----D---- C:\Users\Soaleban\AppData\Roaming\.minecraft
2014-11-23 11:13:00 ----D---- C:\ProgramData\Reimage Protector
2014-11-23 11:12:50 ----D---- C:\Program Files\Reimage
2014-11-23 11:12:32 ----D---- C:\rei
2014-11-23 11:09:56 ----A---- C:\Windows\Reimage.ini
2014-11-19 21:47:00 ----A---- C:\Windows\system32\kerberos.dll
2014-11-17 16:31:51 ----D---- C:\Program Files\Steam
2014-11-17 16:28:17 ----D---- C:\Program Files\Microsoft Works
2014-11-17 16:27:51 ----D---- C:\Program Files\Microsoft Visual Studio
2014-11-17 16:27:50 ----D---- C:\Program Files\Common Files\DESIGNER
2014-11-17 16:27:12 ----D---- C:\Windows\PCHEALTH
2014-11-17 16:24:29 ----D---- C:\Program Files\Microsoft Visual Studio 8
2014-11-17 16:23:34 ----D---- C:\ProgramData\Microsoft Help
2014-11-13 19:20:22 ----D---- C:\Users\Soaleban\AppData\Roaming\Skype
2014-11-13 19:20:12 ----D---- C:\Program Files\Common Files\Skype
2014-11-13 19:20:09 ----RD---- C:\Program Files\Skype
2014-11-13 19:19:51 ----D---- C:\ProgramData\Skype
2014-11-13 03:07:27 ----A---- C:\Windows\system32\msaudite.dll
2014-11-13 03:07:26 ----A---- C:\Windows\system32\termsrv.dll
2014-11-13 03:07:26 ----A---- C:\Windows\system32\adtschema.dll
2014-11-13 03:07:25 ----A---- C:\Windows\system32\lsasrv.dll
2014-11-13 03:07:16 ----A---- C:\Windows\system32\msxml3r.dll
2014-11-13 03:07:15 ----A---- C:\Windows\system32\msxml3.dll
2014-11-13 03:06:51 ----A---- C:\Windows\system32\schannel.dll
2014-11-13 03:06:41 ----A---- C:\Windows\system32\packager.dll
2014-11-13 03:06:31 ----A---- C:\Windows\system32\IMJP10K.DLL
2014-11-13 03:05:43 ----A---- C:\Windows\system32\EncDump.dll
2014-11-13 03:05:43 ----A---- C:\Windows\system32\audiosrv.dll
2014-11-13 03:05:43 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-11-13 03:05:43 ----A---- C:\Windows\system32\AudioEng.dll
2014-11-13 03:05:35 ----A---- C:\Windows\system32\oleaut32.dll
2014-11-13 03:00:26 ----A---- C:\Windows\system32\win32k.sys
2014-11-12 08:09:34 ----A---- C:\Windows\system32\vbscript.dll
2014-11-12 08:09:34 ----A---- C:\Windows\system32\urlmon.dll
2014-11-12 08:09:34 ----A---- C:\Windows\system32\mshta.exe
2014-11-12 08:09:34 ----A---- C:\Windows\system32\msfeedssync.exe
2014-11-12 08:09:34 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-11-12 08:09:34 ----A---- C:\Windows\system32\msfeeds.dll
2014-11-12 08:09:34 ----A---- C:\Windows\system32\jsproxy.dll
2014-11-12 08:09:34 ----A---- C:\Windows\system32\jscript.dll
2014-11-12 08:09:34 ----A---- C:\Windows\system32\dxtmsft.dll
2014-11-12 08:09:33 ----A---- C:\Windows\system32\wininet.dll
2014-11-12 08:09:33 ----A---- C:\Windows\system32\url.dll
2014-11-12 08:09:33 ----A---- C:\Windows\system32\ieUnatt.exe
2014-11-12 08:09:33 ----A---- C:\Windows\system32\ieui.dll
2014-11-12 08:09:33 ----A---- C:\Windows\system32\iertutil.dll
2014-11-12 08:09:33 ----A---- C:\Windows\system32\ieframe.dll
2014-11-12 08:09:33 ----A---- C:\Windows\system32\dxtrans.dll
2014-11-12 08:09:31 ----A---- C:\Windows\system32\mshtmled.dll
2014-11-12 08:09:31 ----A---- C:\Windows\system32\mshtml.dll
2014-11-12 08:09:31 ----A---- C:\Windows\system32\jscript9.dll
2014-11-09 18:30:08 ----D---- C:\Program Files\Microsoft Office
2014-11-09 18:28:38 ----D---- C:\Program Files\MSECache
2014-11-09 15:27:08 ----D---- C:\ProgramData\Canon IJ Network Tool
2014-11-09 15:27:00 ----A---- C:\Windows\system32\CNHMCA.dll
2014-11-09 15:27:00 ----A---- C:\Windows\system32\CNC_BVL.dll
2014-11-09 15:26:35 ----D---- C:\Windows\system32\STRING
2014-11-09 15:26:35 ----A---- C:\Windows\system32\CNMNPUI.DLL
2014-11-09 15:26:35 ----A---- C:\Windows\system32\CNMNPPM.DLL
2014-11-09 15:22:04 ----D---- C:\ProgramData\ChampionDeals
2014-11-09 15:20:51 ----D---- C:\ProgramData\greatsaving
2014-11-09 15:20:34 ----D---- C:\ProgramData\3f6acb64d33c9a26
2014-11-09 15:01:24 ----D---- C:\Users\Soaleban\AppData\Roaming\Canon
2014-11-09 15:00:49 ----HD---- C:\ProgramData\CanonIJQuickMenu
2014-11-09 14:55:26 ----D---- C:\ProgramData\CanonIJPLM
2014-11-09 14:54:53 ----HD---- C:\ProgramData\CanonBJ
2014-11-09 14:52:57 ----D---- C:\ProgramData\CanonIJWSpt
2014-11-09 14:36:56 ----D---- C:\Program Files\Optimizer Pro
2014-11-09 14:35:03 ----D---- C:\Users\Soaleban\AppData\Roaming\RHEng
2014-11-09 14:34:36 ----D---- C:\Users\Soaleban\AppData\Roaming\OpenCandy
2014-11-09 14:34:25 ----D---- C:\ProgramData\APN
2014-11-09 14:34:01 ----D---- C:\Users\Soaleban\AppData\Roaming\BitTorrent
2014-11-09 14:34:00 ----A---- C:\Windows\system32\CNMLMBV.DLL
2014-11-09 14:33:44 ----HD---- C:\Program Files\CanonBJ
2014-11-09 14:30:31 ----D---- C:\Program Files\Canon
2014-11-07 10:50:16 ----D---- C:\Windows\Minidump
2014-11-03 16:02:03 ----D---- C:\Users\Soaleban\AppData\Roaming\LolClient
2014-11-03 13:51:21 ----D---- C:\ProgramData\Riot Games
2014-11-03 13:46:34 ----D---- C:\Riot Games
2014-11-02 11:26:00 ----D---- C:\Users\Soaleban\AppData\Roaming\Spotify
2014-11-02 11:22:37 ----D---- C:\Users\Soaleban\AppData\Roaming\TS3Client
2014-11-02 11:17:48 ----D---- C:\Users\Soaleban\AppData\Roaming\Riot Games
2014-11-02 11:16:52 ----D---- C:\Users\Soaleban\AppData\Roaming\Macromedia
2014-11-02 11:16:52 ----D---- C:\Users\Soaleban\AppData\Roaming\Adobe
2014-11-02 10:50:02 ----D---- C:\Users\Soaleban\AppData\Roaming\ATI
2014-11-02 10:49:13 ----D---- C:\Users\Soaleban\AppData\Roaming\Mozilla
2014-11-02 10:48:51 ----D---- C:\Users\Soaleban\AppData\Roaming\Identities
2014-11-02 10:48:45 ----D---- C:\Users\Soaleban\AppData\Roaming\BullGuard
2014-11-02 10:48:37 ----SD---- C:\Users\Soaleban\AppData\Roaming\Microsoft
2014-11-02 10:48:37 ----D---- C:\Users\Soaleban\AppData\Roaming\Media Center Programs
2014-11-02 10:30:25 ----D---- C:\Program Files\CCleaner
2014-10-31 22:20:22 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2014-10-31 22:20:20 ----D---- C:\Windows\system32\Macromed
2014-10-31 18:57:40 ----A---- C:\Windows\system32\drivers\Trufos.sys
2014-10-31 14:45:17 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-10-31 14:45:17 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-10-31 14:45:16 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-10-31 14:45:16 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-10-31 14:45:15 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-10-31 14:45:15 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-10-31 14:45:15 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-10-31 14:45:15 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-10-31 14:45:15 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-10-31 14:45:15 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-10-31 14:45:15 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-10-31 14:45:15 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-10-31 14:45:14 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-10-31 14:45:14 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-10-31 14:45:14 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-10-31 14:45:14 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-10-31 14:45:13 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-10-31 14:45:13 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-10-31 14:45:13 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-10-31 14:45:13 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-10-31 14:45:13 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-10-31 14:45:13 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-10-31 14:45:13 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-10-31 14:45:13 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-10-31 14:45:10 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-10-31 14:45:10 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-10-31 14:45:09 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-10-31 14:45:09 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-10-31 14:45:09 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-10-31 14:45:09 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-10-31 14:45:09 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-10-31 14:45:08 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-10-31 14:45:08 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-10-31 14:45:07 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-10-31 14:45:05 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-10-31 14:45:05 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-10-31 14:45:04 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-10-31 14:45:04 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-10-31 14:45:04 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-10-31 14:45:04 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-10-31 14:45:04 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-10-31 14:45:03 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-10-31 14:45:02 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-10-31 14:45:02 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-10-31 14:45:02 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-10-31 14:45:02 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-10-31 14:45:02 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-10-31 14:45:00 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-10-31 14:44:59 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-10-31 14:44:58 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-10-31 14:44:58 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-10-31 14:44:57 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-10-31 14:44:56 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-10-31 14:44:56 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-10-31 14:44:56 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-10-31 14:44:56 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-10-31 14:44:56 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-10-31 14:44:56 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-10-31 14:44:56 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-10-31 14:44:56 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-10-31 14:44:55 ----A---- C:\Windows\system32\xinput1_3.dll
2014-10-31 14:44:54 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-10-31 14:44:54 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-10-31 14:44:54 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-10-31 14:44:54 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-10-31 14:44:54 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-10-31 14:44:53 ----A---- C:\Windows\system32\xinput1_2.dll
2014-10-31 14:44:53 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-10-31 14:44:53 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-10-31 14:44:53 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-10-31 14:44:53 ----A---- C:\Windows\system32\xactengine2_2.dll
2014-10-31 14:44:53 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-10-31 14:44:53 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-10-31 14:44:53 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-10-31 14:44:53 ----A---- C:\Windows\system32\d3dx10.dll
2014-10-31 14:44:52 ----A---- C:\Windows\system32\xinput1_1.dll
2014-10-31 14:44:52 ----A---- C:\Windows\system32\xactengine2_1.dll
2014-10-31 14:44:42 ----A---- C:\Windows\system32\xactengine2_0.dll
2014-10-31 14:44:42 ----A---- C:\Windows\system32\x3daudio1_0.dll
2014-10-31 14:44:42 ----A---- C:\Windows\system32\d3dx9_30.dll
2014-10-31 14:44:42 ----A---- C:\Windows\system32\d3dx9_29.dll
2014-10-31 14:44:41 ----A---- C:\Windows\system32\d3dx9_28.dll
2014-10-31 14:44:41 ----A---- C:\Windows\system32\d3dx9_27.dll
2014-10-31 14:44:41 ----A---- C:\Windows\system32\d3dx9_26.dll
2014-10-31 14:44:40 ----A---- C:\Windows\system32\d3dx9_25.dll
2014-10-31 14:44:37 ----A---- C:\Windows\system32\d3dx9_24.dll
2014-10-31 14:10:00 ----D---- C:\ProgramData\Apple Computer
2014-10-31 14:10:00 ----D---- C:\Program Files\Safari
2014-10-31 14:07:50 ----D---- C:\ProgramData\Apple
2014-10-31 14:07:50 ----D---- C:\Program Files\Apple Software Update
2014-10-31 13:32:11 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-10-31 13:32:11 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-10-31 13:32:11 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-10-31 13:32:11 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-10-31 13:32:01 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-10-31 13:20:36 ----D---- C:\Program Files\Common Files\Steam
2014-10-31 13:10:02 ----D---- C:\Program Files\Google
2014-10-31 13:03:45 ----D---- C:\Program Files\Overwolf
2014-10-31 13:03:45 ----D---- C:\Program Files\Common Files\Overwolf
2014-10-31 13:02:51 ----D---- C:\ProgramData\Overwolf
2014-10-31 13:01:12 ----D---- C:\Program Files\TeamSpeak 3 Client
2014-10-30 15:33:33 ----D---- C:\ProgramData\ATI
2014-10-30 15:31:35 ----ASH---- C:\hiberfil.sys
2014-10-30 15:10:16 ----D---- C:\Program Files\TeamViewer
2014-10-30 15:10:04 ----D---- C:\Program Files\SumatraPDF
2014-10-30 14:56:04 ----D---- C:\Program Files\ATI Technologies
2014-10-30 14:52:47 ----D---- C:\ProgramData\Package Cache
2014-10-30 14:52:47 ----D---- C:\Program Files\ATI
2014-10-30 14:51:02 ----D---- C:\Program Files\Common Files\BullGuard Ltd
2014-10-30 14:51:01 ----D---- C:\ProgramData\BullGuard
2014-10-30 14:51:01 ----D---- C:\Program Files\BullGuard Ltd
2014-10-30 14:49:53 ----D---- C:\Program Files\VideoLAN
2014-10-30 14:49:49 ----D---- C:\Program Files\WinRAR
2014-10-30 14:07:17 ----D---- C:\SP56164
2014-10-30 13:54:32 ----D---- C:\Program Files\SystemRequirementsLab
2014-10-30 13:25:44 ----D---- C:\ProgramData\Sun
2014-10-30 13:25:44 ----D---- C:\Program Files\Common Files\Java
2014-10-30 13:25:41 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2014-10-30 13:25:12 ----D---- C:\ProgramData\Oracle
2014-10-30 13:24:49 ----D---- C:\Program Files\Java
2014-10-30 13:22:48 ----D---- C:\ProgramData\Mozilla
2014-10-30 13:22:48 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-10-30 13:22:48 ----D---- C:\Program Files\Mozilla Firefox
2014-10-30 10:52:58 ----A---- C:\Windows\system32\srvsvc.dll
2014-10-30 10:52:57 ----A---- C:\Windows\system32\netevent.dll
2014-10-30 10:52:54 ----A---- C:\Windows\system32\FntCache.dll
2014-10-30 10:52:54 ----A---- C:\Windows\system32\DWrite.dll
2014-10-30 10:52:54 ----A---- C:\Windows\system32\d3d10warp.dll
2014-10-30 10:52:54 ----A---- C:\Windows\system32\d3d10level9.dll
2014-10-30 10:52:54 ----A---- C:\Windows\system32\d3d10core.dll
2014-10-30 10:52:54 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-10-30 10:52:54 ----A---- C:\Windows\system32\d3d10_1.dll
2014-10-30 10:52:54 ----A---- C:\Windows\system32\d3d10.dll
2014-10-30 10:52:54 ----A---- C:\Windows\system32\d2d1.dll
2014-10-30 10:52:53 ----A---- C:\Windows\system32\XpsPrint.dll
2014-10-30 03:18:11 ----D---- C:\Program Files\Windows Portable Devices
2014-10-30 03:17:47 ----D---- C:\Windows\system32\WindowsPowerShell

======List of files/folders modified in the last 1 month======

2014-11-29 12:12:47 ----D---- C:\Windows\Temp
2014-11-29 11:52:54 ----HD---- C:\ProgramData
2014-11-29 11:18:39 ----D---- C:\Windows\System32
2014-11-29 11:18:39 ----D---- C:\Windows\inf
2014-11-29 11:18:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-11-28 14:42:18 ----D---- C:\Windows\Prefetch
2014-11-28 11:47:24 ----D---- C:\Windows
2014-11-26 15:38:30 ----SHD---- C:\System Volume Information
2014-11-26 15:37:33 ----RSD---- C:\Windows\assembly
2014-11-25 19:39:29 ----RD---- C:\Program Files
2014-11-25 19:36:47 ----D---- C:\Windows\Logs
2014-11-25 11:15:30 ----SHD---- C:\$Recycle.Bin
2014-11-24 16:52:32 ----SHD---- C:\Windows\Installer
2014-11-24 16:51:35 ----D---- C:\Windows\system32\catroot
2014-11-24 16:51:05 ----D---- C:\Windows\system32\drivers
2014-11-24 16:50:28 ----D---- C:\Program Files\Common Files
2014-11-24 16:40:34 ----D---- C:\Windows\system32\catroot2
2014-11-23 11:14:03 ----D---- C:\Windows\system32\Tasks
2014-11-22 12:24:06 ----D---- C:\Windows\SoftwareDistribution
2014-11-20 14:45:27 ----D---- C:\Windows\Tasks
2014-11-20 14:27:52 ----A---- C:\Windows\system32\BGLsp.dll
2014-11-20 14:27:42 ----A---- C:\Windows\system32\BgGamingMonitor.dll
2014-11-19 21:47:13 ----D---- C:\Windows\winsxs
2014-11-17 16:28:15 ----D---- C:\Program Files\Common Files\microsoft shared
2014-11-17 16:27:57 ----D---- C:\Program Files\MSBuild
2014-11-17 16:27:49 ----D---- C:\Windows\ShellNew
2014-11-17 16:27:18 ----RSD---- C:\Windows\Fonts
2014-11-17 16:27:15 ----SD---- C:\ProgramData\Microsoft
2014-11-17 16:27:12 ----D---- C:\Program Files\Microsoft.NET
2014-11-17 16:24:11 ----A---- C:\Windows\win.ini
2014-11-17 16:24:10 ----D---- C:\Program Files\Common Files\System
2014-11-16 15:16:59 ----D---- C:\Windows\Debug
2014-11-15 11:13:46 ----D---- C:\Windows\system32\WDI
2014-11-13 03:42:49 ----D---- C:\Windows\rescache
2014-11-13 03:33:22 ----D---- C:\Windows\Microsoft.NET
2014-11-13 03:23:31 ----D---- C:\Windows\system32\nl-NL
2014-11-13 03:23:28 ----D---- C:\Windows\system32\migration
2014-11-13 03:23:26 ----D---- C:\Program Files\Internet Explorer
2014-11-13 03:05:00 ----D---- C:\Windows\system32\MRT
2014-11-13 03:01:09 ----A---- C:\Windows\system32\mrt.exe
2014-11-11 10:52:45 ----D---- C:\Windows\LiveKernelReports
2014-11-09 15:27:01 ----RSD---- C:\Windows\Media
2014-11-09 15:27:00 ----D---- C:\Windows\twain_32
2014-11-06 21:51:39 ----D---- C:\Windows\system32\drivers\UMDF
2014-11-02 10:53:56 ----RD---- C:\Users
2014-10-31 13:58:17 ----D---- C:\Windows\Panther
2014-10-30 15:32:41 ----D---- C:\Windows\system32\config
2014-10-30 12:30:12 ----D---- C:\Windows\system32\drivers\nl-NL
2014-10-30 03:18:13 ----D---- C:\Program Files\Windows Media Player
2014-10-30 03:18:13 ----D---- C:\Program Files\Windows Mail
2014-10-30 03:18:12 ----D---- C:\Program Files\Windows Journal
2014-10-30 03:18:11 ----D---- C:\Windows\system32\wbem
2014-10-30 03:18:10 ----D---- C:\Windows\system32\zh-TW
2014-10-30 03:18:10 ----D---- C:\Windows\system32\uk-UA
2014-10-30 03:18:10 ----D---- C:\Windows\system32\tr-TR
2014-10-30 03:18:10 ----D---- C:\Windows\system32\th-TH
2014-10-30 03:18:10 ----D---- C:\Windows\system32\sv-SE
2014-10-30 03:18:10 ----D---- C:\Windows\system32\sr-Latn-CS
2014-10-30 03:18:10 ----D---- C:\Windows\system32\sl-SI
2014-10-30 03:18:10 ----D---- C:\Windows\system32\sk-SK
2014-10-30 03:18:10 ----D---- C:\Windows\system32\ro-RO
2014-10-30 03:18:10 ----D---- C:\Windows\system32\pt-PT
2014-10-30 03:18:10 ----D---- C:\Windows\system32\pt-BR
2014-10-30 03:18:10 ----D---- C:\Windows\system32\pl-PL
2014-10-30 03:18:10 ----D---- C:\Windows\system32\nb-NO
2014-10-30 03:18:10 ----D---- C:\Windows\system32\lv-LV
2014-10-30 03:18:10 ----D---- C:\Windows\system32\lt-LT
2014-10-30 03:18:10 ----D---- C:\Windows\system32\ko-KR
2014-10-30 03:18:10 ----D---- C:\Windows\system32\ja-JP
2014-10-30 03:18:10 ----D---- C:\Windows\system32\it-IT
2014-10-30 03:18:10 ----D---- C:\Windows\system32\hu-HU
2014-10-30 03:18:10 ----D---- C:\Windows\system32\hr-HR
2014-10-30 03:18:10 ----D---- C:\Windows\system32\he-IL
2014-10-30 03:18:10 ----D---- C:\Windows\system32\fr-FR
2014-10-30 03:18:10 ----D---- C:\Windows\system32\fi-FI
2014-10-30 03:18:10 ----D---- C:\Windows\system32\et-EE
2014-10-30 03:18:10 ----D---- C:\Windows\system32\es-ES
2014-10-30 03:18:10 ----D---- C:\Windows\system32\en-US
2014-10-30 03:18:10 ----D---- C:\Windows\system32\el-GR
2014-10-30 03:18:10 ----D---- C:\Windows\system32\de-DE
2014-10-30 03:18:10 ----D---- C:\Windows\system32\da-DK
2014-10-30 03:18:10 ----D---- C:\Windows\system32\cs-CZ
2014-10-30 03:18:10 ----D---- C:\Windows\system32\bg-BG
2014-10-30 03:18:10 ----D---- C:\Windows\system32\ar-SA
2014-10-30 03:18:09 ----D---- C:\Windows\system32\zh-HK
2014-10-30 03:18:09 ----D---- C:\Windows\system32\zh-CN
2014-10-30 03:18:09 ----D---- C:\Windows\system32\ru-RU
2014-10-30 03:18:08 ----D---- C:\Windows\AppPatch
2014-10-30 03:18:06 ----D---- C:\Program Files\Movie Maker
2014-10-30 03:18:05 ----D---- C:\Windows\ehome
2014-10-30 03:17:57 ----RD---- C:\Windows\Offline Web Pages
2014-10-30 03:17:57 ----D---- C:\Windows\PolicyDefinitions
2014-10-30 03:17:56 ----SD---- C:\Windows\Downloaded Program Files
2014-10-30 03:17:54 ----D---- C:\Windows\system32\XPSViewer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AFW;Agnitum Firewall Driver; C:\Windows\system32\DRIVERS\afw.sys [2014-10-31 35024]
R1 BdAgent;BullGuard Security Agent; C:\Windows\system32\DRIVERS\BdAgent.sys [2014-10-31 98608]
R1 BdSpy;BdSpy; C:\Windows\system32\drivers\BdSpy.sys [2013-11-06 63584]
R1 ctxusbm;Citrix USB Monitor Driver; C:\Windows\system32\DRIVERS\ctxusbm.sys [2013-09-24 70440]
R1 NovaShieldFilterDriver;NovaShieldFilterDriver; C:\Windows\system32\DRIVERS\NSKernel.sys [2014-10-31 262920]
R1 NovaShieldTDIDriver;NovaShieldTDIDriver; C:\Windows\system32\DRIVERS\NSNetmon.sys [2014-10-31 21888]
R3 afwcore;afwcore; C:\Windows\system32\DRIVERS\afwcore.sys [2014-10-31 340688]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-12-06 11527680]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-12-06 501248]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdLH3.sys [2013-07-05 75264]
R3 HdAudAddService;Microsoft 1.1 UAA Functiestuurprogramma voor High Definition Audio-service; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 MEI;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECI.sys [2013-01-11 56432]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2014-07-16 582872]
R3 Trufos;Trufos; C:\Windows\system32\DRIVERS\Trufos.sys [2014-10-31 343456]
R3 usbaudio;Stuurprogramma voor USB-audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2013-07-12 73344]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
S3 cpuz134;cpuz134; \??\C:\Users\Soaleban\AppData\Local\Temp\cpuz134\cpuz134_x32.sys []
S3 drmkaud;Microsoft Kernel DRM-audiodecoder; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 MSKSSRV;Microsoft Streaming Service-proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock-proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Kwaliteitsbeheer Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-conversieprogramma; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2009-04-11 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-12-06 209408]
R2 BsBackup;BullGuard backup service; C:\Windows\System32\SvcHost.exe [2008-01-21 21504]
R2 BsBhvScan;BullGuard Behavioural Detection; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardBhvScanner.exe [2014-11-20 515408]
R2 BsCache;BullGuard CODS service; C:\Windows\System32\SvcHost.exe [2008-01-21 21504]
R2 BsFileScan;BullGuard on-access service; C:\Windows\System32\SvcHost.exe [2008-01-21 21504]
R2 BsFire;BullGuard firewall service; C:\Windows\System32\SvcHost.exe [2008-01-21 21504]
R2 BsMailProxy;BullGuard e-mail monitoring service; C:\Windows\System32\SvcHost.exe [2008-01-21 21504]
R2 BsMain;BullGuard main service; C:\Windows\System32\SvcHost.exe [2008-01-21 21504]
R2 BsScanner;BullGuard scanning service; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe [2014-11-20 239952]
R2 BsUpdate;BullGuard update service; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe [2014-11-20 330576]
R2 ca82e1a5;Optimizer Pro Crash Monitor; c:\Program Files\Optimizer Pro\OptProCrash.dll [2014-11-09 3113040]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2013-05-14 140936]
R2 ReimageRealTimeProtector;Reimage Real Time Protector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2014-11-10 5873000]
R2 TeamViewer9;TeamViewer 9; C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe [2013-12-17 5341536]
R3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2014-11-18 833728]
R3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 770168]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Google Update-service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-11-04 107912]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-25 267440]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-11-04 107912]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-06-06 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 OverwolfUpdater;Overwolf Updater Windows SCM; C:\Program Files\Overwolf\OverwolfUpdater.exe [2014-10-22 997664]
S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------