Logfile of random's system information tool 1.10 (written by random/random)
Run by Mario at 2014-12-22 18:41:33
Microsoft Windows 8.1 
System drive C: has 391 GB (84%) free of 465 GB
Total RAM: 5055 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:43:17, on 22-12-2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\AVG\AVG2015\avgui.exe
C:\Windows\SysWOW64\ctfmon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\AVG\AVG2015\avgcsrvx.exe
C:\Users\Mario\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\AVG\AVG2015\avgcsrvx.exe
C:\Program Files (x86)\AVG\AVG2015\avgcsrvx.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
C:\Program Files (x86)\AVG\AVG2015\avgcsrvx.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\TOSHIBA\System Setting\TOSHIBASystemSetting.exe
C:\Program Files\trend micro\Mario.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba13.msn.com/?pc=TEJB
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://Vosteran.com/?f=1&a=vst_ggbg_14_48_ch&cd=2XzuyEtN2Y1L1Qzu0Fzz0AzyyCtA0E0AtA0AyDyCzzyD0AtCtN0D0Tzu0StCtDyDzztN1L2XzutAtFyCtFtBtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCtBtCtBtC0A0CyCtGyB0C0CtCtG0FtD0FyEtGtC0BtC0BtGtDyC0A0AtA0CtByE0EtB0F0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtCyB0DyD0EyB0EtGyCyCtDtDtGyE0AtC0EtG0Bzz0AzztGyE0E0B0AyByDyDzyyB0AtAzy2Q&cr=1189582344&ir=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [KeNotify] "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
O4 - Startup: Dropbox.lnk = Mario\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe
O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: AdaptiveSleepService - Unknown owner - C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
O23 - Service: @oem23.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\Windows\system32\BtwRSupportService.exe (file missing)
O23 - Service: DTS APO Service (dts_apo_service) - Unknown owner - C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Elan Service (ETDService) - ELAN Microelectronics Corp. - C:\Program Files\Elantech\ETDService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: tbaseprovisioning - Advanced Micro Devices, Inc. - C:\Windows\SysWOW64\tbaseprovisioning.exe
O23 - Service: TEMPRO Service (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
O23 - Service: TOSHIBA eco Utility Service - Toshiba Corporation - C:\Program Files\TOSHIBA\Teco\TecoService.exe
O23 - Service: TPCH Service (TPCHSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Update Hold Page - Unknown owner - C:\Program Files (x86)\Hold Page\updateHoldPage.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9972 bytes

======Listing Processes======




c:\PROGRA~2\AVG\AVG2015\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe /pipeName=c2feea3f-0200-0000-d472-29227b675456 /binaryPath="C:\Program Files (x86)\AVG\AVG2015\"

wininit.exe

winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\SysWOW64\tbaseprovisioning.exe
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe"
C:\Windows\system32\BtwRSupportService.exe
"C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe"
dashost.exe {406cffec-9858-4923-8b00165f4cba0e8a}
"C:\Program Files\Elantech\ETDService.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\TOSHIBA\Teco\TecoService.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2015\avgemca.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe"
"C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
atieclxx
"C:\Program Files\Elantech\ETDCtrl.exe"
taskhostex.exe 
C:\Windows\Explorer.EXE
"C:\Program Files\Elantech\ETDCtrlHelper.exe" 
"C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe" 
"C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" 
"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
"C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
ctfmon.exe
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
C:\Program Files (x86)\AVG\AVG2015\avgcsrvx.exe /pipeName=c2feea3f-0100-0000-2631-497a17c3727c /binaryPath="C:\Program Files (x86)\AVG\AVG2015"
"C:\Program Files\TOSHIBA\Teco\TecoResident.exe" 
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TDUSrv64.exe"
"C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe" /hide
"C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe"
"C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe" 
"C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\DllHost.exe /Processid:{478B41E6-3257-4519-BDA8-E971F9843849}
C:\Program Files (x86)\AVG\AVG2015\avgcsrvx.exe /pipeName=c2feea3f-0100-0000-17ca-fc2c5e80b524 /binaryPath="C:\Program Files (x86)\AVG\AVG2015"
C:\Program Files (x86)\AVG\AVG2015\avgcsrvx.exe /pipeName=c2feea3f-0100-0000-0ad9-8657a49eef36 /binaryPath="C:\Program Files (x86)\AVG\AVG2015"
"C:\Program Files\Internet Explorer\iexplore.exe" 
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5152 CREDAT:267521 /prefetch:2
"C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding
"C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17499_x64__8wekyb3d8bbwe\glcnd.exe" -ServerName:Microsoft.Reader.AppXtszmc7avrx02s7n8gch63tzwg517wd9k.mca
C:\Windows\System32\RuntimeBroker.exe -Embedding

winlogon.exe
"dwm.exe"
atieclxx
"C:\Program Files\Elantech\ETDCtrl.exe"
taskhostex.exe 
C:\Windows\Explorer.EXE
"C:\Program Files\Elantech\ETDCtrlHelper.exe" 
"C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe" 
"C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" 
"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
"C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
ctfmon.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --silent-launch --connect-to-metro-viewer --flag-switches-begin --flag-switches-end --restore-last-session
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="9044.0.1622056436\1082551673" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,17,38 --gpu-vendor-id=0x1002 --gpu-device-id=0x9853 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=13.352.1004.1007 --ignored=" --type=renderer " /prefetch:822062411
C:\Program Files (x86)\AVG\AVG2015\avgcsrvx.exe /pipeName=c2feea3f-0100-0000-6633-8c4824f4fc78 /binaryPath="C:\Program Files (x86)\AVG\AVG2015"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TDUSrv64.exe"
"C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe" 
"C:\Users\Mario\AppData\Roaming\Dropbox\bin\Dropbox.exe" /firstrunupdate 0 /TAGS:@FULL-{0B527D16-E0D0-437E-B09D-D575B6BF681F}
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -ServerName:DefaultBrowserServer
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\nacl64" --type=nacl-broker --channel="9044.21.964128542\243137066" /prefetch:-875166825
"C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\nacl64.exe" --type=nacl-loader --channel="9044.20.970254973\1298849443" --ignored=" --type=renderer " /prefetch:-1502398898
C:\Program Files (x86)\AVG\AVG2015\avgcsrvx.exe /pipeName=c2feea3f-0100-0000-1f3b-0727e6aada4e /binaryPath="C:\Program Files (x86)\AVG\AVG2015"
C:\Program Files (x86)\AVG\AVG2015\avgcsrvx.exe /pipeName=c2feea3f-0100-0000-b673-bc5795c6bf45 /binaryPath="C:\Program Files (x86)\AVG\AVG2015"
C:\Windows\splwow64.exe 8192
C:\Program Files (x86)\AVG\AVG2015\avgcsrvx.exe /pipeName=c2feea3f-0100-0000-7972-0736a19e852f /binaryPath="C:\Program Files (x86)\AVG\AVG2015"
taskhost.exe 
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLs/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Control/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/Spdy4Enabled/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-1-Percent/group_39/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="9044.61.340831903\1796964530" /prefetch:673131151
"C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" 
C:\Windows\system32\wbem\WmiApSrv.exe
taskhost.exe $(Arg0)
C:\Program Files (x86)\AVG\AVG2015\avgcsrvx.exe /pipeName=c2feea3f-0100-0000-e2df-a769d819986d /binaryPath="C:\Program Files (x86)\AVG\AVG2015"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"LogonUI.exe" /flags:0x0
"C:\Windows\system32\wwahost.exe" -ServerName:Microsoft.ZuneVideo.wwa
C:\Windows\System32\RuntimeBroker.exe -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GCM/Enabled/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/StableBookmarksIndexURLs/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Control/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/Spdy4Enabled/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-1-Percent/group_39/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="9044.121.1300479745\214776306" /prefetch:673131151
"C:\Program Files (x86)\TOSHIBA\System Setting\TOSHIBASystemSetting.exe" 

"C:\Users\Mario\Downloads\RSITx64.exe" 
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2014-03-04 3244360]
"TCrdMain"=C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2013-10-09 2556768]
"TSSSrv"=C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [2013-10-22 296008]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"KeNotify"=C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [2013-08-06 34160]
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
""= []
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2013-03-10 88984]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2015\avgui.exe [2014-11-09 3653136]

C:\Users\Mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Mario\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 6671064]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-12-22 18:41:34 ----D---- C:\Program Files\trend micro
2014-12-22 18:41:33 ----D---- C:\rsit
2014-12-20 19:43:41 ----D---- C:\ProgramData\tmp
2014-12-20 19:43:37 ----D---- C:\ProgramData\hps
2014-12-17 18:34:24 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-12-17 18:29:58 ----D---- C:\Windows\system32\appraiser
2014-12-16 09:50:40 ----SHD---- C:\Config.Msi
2014-12-16 07:22:18 ----A---- C:\Windows\system32\poqexec.exe
2014-12-16 07:22:14 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2014-12-11 13:35:16 ----D---- C:\Users\Mario\AppData\Roaming\AVG2015
2014-12-11 13:34:29 ----D---- C:\Users\Mario\AppData\Roaming\TuneUp Software
2014-12-11 13:33:24 ----HD---- C:\$AVG
2014-12-11 13:33:24 ----D---- C:\ProgramData\AVG2015
2014-12-11 13:32:53 ----D---- C:\Program Files (x86)\AVG
2014-12-11 13:29:58 ----HD---- C:\ProgramData\Common Files
2014-12-11 13:29:58 ----D---- C:\ProgramData\MFAData
2014-12-11 12:28:07 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-12-11 12:28:07 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-12-11 12:26:09 ----A---- C:\Windows\system32\appraiser.dll
2014-12-11 12:26:07 ----A---- C:\Windows\system32\aepic.dll
2014-12-11 12:26:06 ----A---- C:\Windows\system32\aeinv.dll
2014-12-11 12:25:34 ----A---- C:\Windows\system32\invagent.dll
2014-12-11 12:25:32 ----A---- C:\Windows\system32\generaltel.dll
2014-12-11 12:25:32 ----A---- C:\Windows\system32\devinv.dll
2014-12-11 12:25:29 ----A---- C:\Windows\system32\aepdu.dll
2014-12-11 12:25:17 ----AC---- C:\Windows\system32\drivers\sdbus.sys
2014-12-11 12:25:16 ----AC---- C:\Windows\system32\drivers\dumpsd.sys
2014-12-11 12:25:16 ----A---- C:\Windows\system32\drivers\pdc.sys
2014-12-11 12:25:15 ----AC---- C:\Windows\system32\drivers\intelpep.sys
2014-12-11 12:22:30 ----A---- C:\Windows\system32\mshtml.dll
2014-12-11 12:22:18 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-12-11 12:22:05 ----A---- C:\Windows\system32\ieframe.dll
2014-12-11 12:21:59 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-12-11 12:21:55 ----A---- C:\Windows\system32\jscript9.dll
2014-12-11 12:21:52 ----A---- C:\Windows\system32\wininet.dll
2014-12-11 12:21:50 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-12-11 12:21:49 ----A---- C:\Windows\system32\urlmon.dll
2014-12-11 12:21:47 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-12-11 12:21:47 ----A---- C:\Windows\system32\iertutil.dll
2014-12-11 12:21:46 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-12-11 12:21:46 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-12-11 12:21:43 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-12-11 12:21:43 ----A---- C:\Windows\system32\ieapfltr.dll
2014-12-11 12:21:40 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-12-11 12:21:38 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-12-11 12:21:38 ----A---- C:\Windows\system32\msfeeds.dll
2014-12-11 12:21:38 ----A---- C:\Windows\system32\iedkcs32.dll
2014-12-11 12:21:36 ----A---- C:\Windows\system32\ie4uinit.exe
2014-12-11 12:21:35 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-12-11 12:21:35 ----A---- C:\Windows\system32\vbscript.dll
2014-12-11 12:21:34 ----A---- C:\Windows\system32\iepeers.dll
2014-12-11 12:21:30 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-12-11 12:21:30 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-12-11 12:21:30 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-12-11 12:21:30 ----A---- C:\Windows\system32\webcheck.dll
2014-12-11 12:21:30 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-12-11 12:21:30 ----A---- C:\Windows\system32\dxtrans.dll
2014-12-11 12:21:29 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-12-11 12:21:29 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2014-12-11 12:21:29 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-12-11 12:21:29 ----A---- C:\Windows\system32\mshtmled.dll
2014-12-11 12:21:29 ----A---- C:\Windows\system32\jscript.dll
2014-12-11 12:21:29 ----A---- C:\Windows\system32\inetcomm.dll
2014-12-11 12:21:28 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-12-11 12:21:18 ----A---- C:\Windows\SYSWOW64\MrmCoreR.dll
2014-12-11 12:21:18 ----A---- C:\Windows\system32\MrmCoreR.dll
2014-12-11 12:20:49 ----N---- C:\Windows\system32\MpSigStub.exe
2014-12-10 07:45:27 ----A---- C:\Windows\SYSWOW64\DeviceSetupStatusProvider.dll
2014-12-10 07:45:27 ----A---- C:\Windows\system32\DeviceSetupStatusProvider.dll
2014-12-10 07:45:13 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2014-12-10 07:45:13 ----A---- C:\Windows\system32\crypt32.dll
2014-11-26 19:10:35 ----D---- C:\Program Files (x86)\Tele2 Veilig Internet
2014-11-26 19:09:57 ----D---- C:\ProgramData\F-Secure
2014-11-24 21:48:49 ----D---- C:\ProgramData\374311380
2014-11-24 21:18:37 ----D---- C:\Users\Mario\AppData\Roaming\WSE_Vosteran

======List of files/folders modified in the last 1 month======

2014-12-22 18:42:20 ----D---- C:\Windows\Temp
2014-12-22 18:41:34 ----RD---- C:\Program Files
2014-12-22 18:41:19 ----D---- C:\Windows\Prefetch
2014-12-22 18:00:00 ----D---- C:\Windows\system32\sru
2014-12-22 10:17:31 ----D---- C:\Windows\AppReadiness
2014-12-21 20:38:10 ----D---- C:\Windows\rescache
2014-12-21 20:10:05 ----SHD---- C:\System Volume Information
2014-12-21 19:59:01 ----D---- C:\Windows\system32\config
2014-12-21 19:53:30 ----D---- C:\Windows\Microsoft.NET
2014-12-20 19:43:41 ----HD---- C:\ProgramData
2014-12-20 11:40:17 ----HD---- C:\Program Files\WindowsApps
2014-12-20 11:03:23 ----D---- C:\Windows\system32\DriverStore
2014-12-19 17:55:13 ----D---- C:\Windows\WinSxS
2014-12-19 17:15:15 ----D---- C:\Windows\system32\catroot2
2014-12-19 16:41:37 ----D---- C:\Users\Mario\AppData\Roaming\Dropbox
2014-12-18 22:15:58 ----D---- C:\Windows\CbsTemp
2014-12-18 21:34:54 ----D---- C:\Windows\Inf
2014-12-18 19:14:32 ----AD---- C:\Windows\System32
2014-12-18 19:14:32 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-12-18 19:12:18 ----D---- C:\FOTO
2014-12-18 16:02:41 ----D---- C:\Windows\system32\NDF
2014-12-18 16:02:24 ----D---- C:\Windows\system32\catroot
2014-12-17 18:34:43 ----D---- C:\Windows\SysWOW64
2014-12-17 18:29:59 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-12-17 18:29:59 ----D---- C:\Windows\SYSWOW64\en-US
2014-12-17 18:29:59 ----D---- C:\Windows\system32\sr-Latn-RS
2014-12-17 18:29:59 ----D---- C:\Windows\system32\sr-Latn-CS
2014-12-17 18:29:59 ----D---- C:\Windows\system32\nl-NL
2014-12-17 18:29:59 ----D---- C:\Windows\system32\en-US
2014-12-17 18:29:58 ----SD---- C:\Windows\system32\CompatTel
2014-12-17 18:29:58 ----D---- C:\Windows\AppCompat
2014-12-17 18:29:54 ----D---- C:\Windows\system32\drivers
2014-12-17 18:29:53 ----D---- C:\Program Files (x86)\Internet Explorer
2014-12-17 18:29:52 ----D---- C:\Program Files\Internet Explorer
2014-12-17 18:29:49 ----D---- C:\Windows\PolicyDefinitions
2014-12-17 18:20:39 ----SD---- C:\Users\Mario\AppData\Roaming\Microsoft
2014-12-16 10:45:15 ----SHD---- C:\Windows\Installer
2014-12-16 10:45:15 ----D---- C:\ProgramData\Microsoft Help
2014-12-16 10:40:48 ----D---- C:\Windows\system32\MRT
2014-12-16 10:29:31 ----A---- C:\Windows\system32\MRT.exe
2014-12-14 19:43:23 ----AD---- C:\Windows
2014-12-14 19:43:13 ----D---- C:\Windows\SoftwareDistribution
2014-12-14 10:06:12 ----D---- C:\Windows\SYSWOW64\config
2014-12-11 14:11:16 ----RD---- C:\Windows\assembly
2014-12-11 13:34:19 ----HD---- C:\Windows\ELAMBKUP
2014-12-11 13:32:53 ----RD---- C:\Program Files (x86)
2014-12-11 12:02:04 ----D---- C:\ProgramData\McAfee
2014-12-11 12:02:04 ----D---- C:\Program Files\Common Files
2014-12-11 11:20:34 ----D---- C:\Windows\system32\wbem
2014-12-11 11:20:33 ----RSD---- C:\Windows\Fonts
2014-12-11 11:15:53 ----D---- C:\Windows\WinStore
2014-12-11 11:15:53 ----D---- C:\Windows\Tasks
2014-12-11 11:15:53 ----D---- C:\Windows\SYSWOW64\WinMetadata
2014-12-11 11:15:53 ----D---- C:\Windows\SYSWOW64\wbem
2014-12-11 11:15:53 ----D---- C:\Windows\SYSWOW64\setup
2014-12-11 11:15:53 ----D---- C:\Windows\SYSWOW64\nl
2014-12-11 11:15:53 ----D---- C:\Windows\SYSWOW64\migration
2014-12-11 11:15:53 ----D---- C:\Windows\system32\zh-TW
2014-12-11 11:15:53 ----D---- C:\Windows\system32\zh-HK
2014-12-11 11:15:53 ----D---- C:\Windows\system32\zh-CN
2014-12-11 11:15:53 ----D---- C:\Windows\system32\WinMetadata
2014-12-11 11:15:53 ----D---- C:\Windows\system32\uk-UA
2014-12-11 11:15:53 ----D---- C:\Windows\system32\tr-TR
2014-12-11 11:15:53 ----D---- C:\Windows\system32\th-TH
2014-12-11 11:15:53 ----D---- C:\Windows\system32\sv-SE
2014-12-11 11:15:53 ----D---- C:\Windows\system32\sl-SI
2014-12-11 11:15:53 ----D---- C:\Windows\system32\sk-SK
2014-12-11 11:15:53 ----D---- C:\Windows\system32\setup
2014-12-11 11:15:53 ----D---- C:\Windows\system32\ru-RU
2014-12-11 11:15:53 ----D---- C:\Windows\system32\ro-RO
2014-12-11 11:15:53 ----D---- C:\Windows\system32\pt-PT
2014-12-11 11:15:53 ----D---- C:\Windows\system32\pt-BR
2014-12-11 11:15:53 ----D---- C:\Windows\system32\pl-PL
2014-12-11 11:15:53 ----D---- C:\Windows\system32\nl
2014-12-11 11:15:49 ----D---- C:\Windows\system32\nb-NO
2014-12-11 11:15:49 ----D---- C:\Windows\system32\migration
2014-12-11 11:15:49 ----D---- C:\Windows\system32\lv-LV
2014-12-11 11:15:49 ----D---- C:\Windows\system32\lt-LT
2014-12-11 11:15:49 ----D---- C:\Windows\system32\ko-KR
2014-12-11 11:15:49 ----D---- C:\Windows\system32\ja-JP
2014-12-11 11:15:49 ----D---- C:\Windows\system32\it-IT
2014-12-11 11:15:49 ----D---- C:\Windows\system32\hu-HU
2014-12-11 11:15:49 ----D---- C:\Windows\system32\hr-HR
2014-12-11 11:15:49 ----D---- C:\Windows\system32\he-IL
2014-12-11 11:15:49 ----D---- C:\Windows\system32\fr-FR
2014-12-11 11:15:49 ----D---- C:\Windows\system32\fi-FI
2014-12-11 11:15:49 ----D---- C:\Windows\system32\et-EE
2014-12-11 11:15:49 ----D---- C:\Windows\system32\es-ES
2014-12-11 11:15:49 ----D---- C:\Windows\system32\en-GB
2014-12-11 11:15:49 ----D---- C:\Windows\system32\el-GR
2014-12-11 11:15:47 ----D---- C:\Windows\system32\drivers\UMDF
2014-12-11 11:15:47 ----D---- C:\Windows\system32\drivers\nl-NL
2014-12-11 11:15:47 ----D---- C:\Windows\system32\drivers\en-US
2014-12-11 11:15:47 ----D---- C:\Windows\system32\de-DE
2014-12-11 11:15:47 ----D---- C:\Windows\system32\da-DK
2014-12-11 11:15:47 ----D---- C:\Windows\system32\cs-CZ
2014-12-11 11:15:43 ----D---- C:\Windows\system32\bg-BG
2014-12-11 11:15:43 ----D---- C:\Windows\system32\ar-SA
2014-12-11 11:15:43 ----D---- C:\Windows\ShellNew
2014-12-11 11:15:42 ----RSD---- C:\Windows\Media
2014-12-11 11:15:42 ----D---- C:\Windows\MediaViewer
2014-12-11 11:15:42 ----D---- C:\Windows\FileManager
2014-12-11 11:15:42 ----D---- C:\Windows\Camera
2014-12-11 11:15:42 ----D---- C:\Windows\apppatch
2014-12-11 11:15:42 ----D---- C:\Program Files\Windows Journal
2014-12-11 11:15:42 ----D---- C:\Program Files\Windows Defender
2014-12-11 11:00:24 ----D---- C:\Windows\SYSWOW64\Macromed
2014-12-11 11:00:23 ----D---- C:\Windows\system32\Tasks
2014-12-11 11:00:23 ----D---- C:\Windows\system32\Sysprep
2014-12-11 11:00:23 ----D---- C:\Windows\system32\Macromed
2014-12-11 11:00:21 ----D---- C:\Windows\system32\CodeIntegrity
2014-12-11 10:59:35 ----D---- C:\Program Files\Common Files\microsoft shared
2014-12-11 10:36:44 ----D---- C:\Windows\registration
2014-12-11 09:38:19 ----SD---- C:\ProgramData\Microsoft
2014-12-11 09:37:05 ----SHD---- C:\$RECYCLE.BIN
2014-12-11 09:37:05 ----RHD---- C:\MSOCache
2014-12-11 09:29:05 ----D---- C:\Windows\Logs
2014-12-07 21:34:48 ----D---- C:\Users\Mario\AppData\Roaming\HpUpdate
2014-12-07 18:34:13 ----D---- C:\Windows\LiveKernelReports
2014-12-04 21:46:42 ----D---- C:\Windows\system32\FxsTmp
2014-11-24 21:24:27 ----D---- C:\Program Files (x86)\Google

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 amdkmpfd;@oem3.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\Windows\System32\drivers\amdkmpfd.sys [2013-12-14 36608]
R0 amdpsp;@oem4.inf,%amdpsp.SVCDESC%;AMD PSP 1.0 Service; C:\Windows\system32\DRIVERS\amdpsp.sys [2014-02-24 230088]
R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2014-06-18 190744]
R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2014-07-18 313624]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2014-10-05 124184]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2014-06-18 31512]
R0 LPCFilter;@oem17.inf,%LPCFilter.SvcDesc%;LPC Lower Filter Driver; C:\Windows\System32\drivers\LPCFilter.sys [2013-08-01 35672]
R0 TVALZ;@oem15.inf,%TVALZ.SvcDesc%;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\System32\drivers\TVALZ_O.SYS [2013-08-15 32832]
R0 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver; C:\Windows\System32\Drivers\TVALZFL.sys [2013-06-07 17208]
R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2014-06-18 153368]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2014-10-29 263960]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2014-08-28 243480]
R1 Avgwfpa;AVG Firewall Driver; C:\Windows\system32\DRIVERS\avgwfpa.sys [2014-09-24 277784]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2013-03-04 40344]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R3 AmdAS4;@oem2.inf,%AmdAS4.SVCDESC%;AmdAS4 service; C:\Windows\System32\drivers\AmdAS4.sys [2013-10-24 17640]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-04-23 13941760]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-04-23 628224]
R3 athr;@oem11.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athwbx.sys [2014-02-14 3888640]
R3 AtiHDAudioService;@oem5.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdWB6.sys [2013-12-19 222720]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2014-03-19 598216]
R3 BthA2DP;@wdma_bt.inf,%BthA2DP.SvcDesc%;Bluetooth-stereo; C:\Windows\system32\drivers\BthA2DP.sys [2013-08-22 131584]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator-service; C:\Windows\System32\drivers\BthEnum.sys [2013-08-22 53248]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth-apparaat (Personal Area Network); C:\Windows\System32\drivers\bthpan.sys [2014-07-24 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;USB-stuurprogramma voor Bluetooth-radio; C:\Windows\System32\Drivers\BTHUSB.sys [2014-03-18 81920]
R3 CeKbFilter;CeKbFilter; C:\Windows\system32\DRIVERS\CeKbFilter.sys [2014-07-31 20312]
R3 ETD;@oem9.inf,%PS2.DeviceDesc%;ELAN PS/2_SMBus Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2014-03-04 404296]
R3 ETDSMBus;ETDSMBus; C:\Windows\system32\DRIVERS\ETDSMBus.sys [2014-02-06 24904]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-03-11 3891800]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth-apparaat (RFCOMM Protocol TDI); C:\Windows\System32\drivers\rfcomm.sys [2014-03-18 167424]
R3 RSP2STOR;@oem7.inf,%Rts5229%;Realtek PCIE CardReader Driver - P2; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [2014-01-03 291544]
R3 RTL8168;@oem8.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2014-01-27 839896]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Stuurprogramma voor seriële digitale fotocamera; C:\Windows\system32\DRIVERS\serscan.sys [2013-08-22 11776]
R3 Thotkey;@oem12.inf,%Thotkey%;Toshiba Hotkey Driver; C:\Windows\System32\drivers\Thotkey.sys [2013-10-10 33168]
R3 tosrfec;@oem18.inf,%busenum.SVCDESC%;Bluetooth ACPI; C:\Windows\System32\drivers\tosrfec.sys [2013-11-01 27032]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 VClone;VClone; C:\Windows\System32\drivers\VClone.sys [2013-07-24 34816]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S0 Avgboota;AVG Early Launch Anti-Malware Driver; C:\Windows\system32\DRIVERS\avgboota.sys [2013-09-04 20496]
S3 amdkmcsp;@oem4.inf,%amdkmcsp.SVCDESC%;AMD Kernel Mode CSP Service; C:\Windows\system32\DRIVERS\amdkmcsp.sys [2014-02-24 85704]
S3 bcbtums;@oem23.inf,%BCBTUMS.SvcDesc%;Bluetooth USB LD Filter; C:\Windows\system32\drivers\bcbtums.sys [2013-10-28 170712]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Stuurprogramma voor Bluetooth-poort; C:\Windows\System32\Drivers\BTHport.sys [2014-07-24 1200640]
S3 btwampfl;@oem23.inf,%btwampfl.ServiceName%;btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [2013-10-28 166104]
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Stuurprogramma voor USB-scanner; C:\Windows\System32\drivers\usbscan.sys [2013-08-22 44544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdaptiveSleepService;AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [2014-04-23 140288]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-04-23 240128]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2014-03-19 319104]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [2014-11-09 3488784]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [2014-11-09 298080]
R2 BcmBtRSupport;@oem23.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\Windows\system32\BtwRSupportService.exe [2013-10-28 2255064]
R2 dts_apo_service;DTS APO Service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [2014-03-03 21840]
R2 ETDService;Elan Service; C:\Program Files\Elantech\ETDService.exe [2014-03-04 103240]
R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-02-25 227904]
R2 tbaseprovisioning;tbaseprovisioning; C:\Windows\SysWOW64\tbaseprovisioning.exe [2014-02-24 51712]
R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\Teco\TecoService.exe [2014-05-10 354896]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 TMachInfo;TMachInfo; C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2013-09-24 53864]
R3 TPCHSrv;TPCH Service; C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [2014-02-14 469064]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-22 116648]
S2 Update Hold Page;Update Hold Page; C:\Program Files (x86)\Hold Page\updateHoldPage.exe []
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Google Update Service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-05-22 116648]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 ose;Office  Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 TemproMonitoringService;TEMPRO Service; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [2013-12-24 116088]

-----------------EOF-----------------