Logfile of random's system information tool 1.10 (written by random/random) Run by Aliegriet at 2015-01-03 21:24:59 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 156 GB (29%) free of 532 GB Total RAM: 6030 MB (42% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:25:37, on 3-1-2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17496) Boot mode: Normal Running processes: C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe C:\Program Files (x86)\ASUS\Splendid\ACMON.exe C:\Users\Aliegriet\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Windows\SysWOW64\ACEngSvr.exe C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe C:\Program Files (x86)\AVG\AVG2013\avgui.exe C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Windows\AsScrPro.exe C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files\trend micro\Aliegriet.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:8555;https=127.0.0.1:8555 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE" O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Aliegriet\AppData\Local\Akamai\netsession_win.exe" O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKCU\..\RunOnce: [Application Restart #1] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --extensions-on-chrome-urls --test-type --load-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\app" --load-component-extension="c:\Program Files\Google\Chrome\Application\Extensions\chrome\man" --flag-switches-begin --flag-switches-end --restore-last-session O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil64_15_0_0_246_ActiveX.exe -update activex O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-1147976641-2597456954-336000686-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser') O4 - HKUS\S-1-5-21-1147976641-2597456954-336000686-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser') O4 - Startup: Dropbox.lnk = Aliegriet\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Global Startup: PHOTOfunSTUDIO 9.0 AE.lnk = C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file) O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O20 - AppInit_DLLs: c:\windows\syswow64\nvinit.dll, C:\Windows\SysWOW64\nvinit.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing) O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel(R) ME Service - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NitroPDFDriverCreatorReadSpool8 (NitroDriverReadSpool8) - Nitro PDF Software - C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\SysWOW64\NLSSRV32.EXE O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 14811 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe C:\PROGRA~2\AVG\AVG2013\avgrsa.exe /boot C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=78fc4964-6413-4e10-aad4-b97150a8be33 /coreSdkOptions=4382 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\69e48242-33c3-414f-91a6-3b3f58b19008-264-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\" %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k NetworkService "C:\Windows\system32\FBAgent.exe" C:\Windows\system32\WLANExt.exe 20604608 \??\C:\Windows\system32\conhost.exe "-1857720196-1402494753-4368671131876259816-714612327-3643406411231873152-709336199 "C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe" "C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe" C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe" "C:\Program Files (x86)\AVG\AVG2013\avgfws.exe" "C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe" "C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe" "C:\Program Files\Bonjour\mDNSResponder.exe" "C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service "C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service "C:\Program Files\Intel\iCLS Client\HeciServer.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe" "C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe" C:\Windows\SysWOW64\NLSSRV32.EXE "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" "C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe" "C:\Program Files (x86)\AVG\AVG2013\avgemca.exe" WLIDSvcM.exe 3104 C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=02a3676a-e303-4a19-aaa9-b243c794c66c /coreSdkOptions=4114 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\063c2968-f09b-477b-be67-8e1bf30f8857-dc0-oopp.tmp" /loggerName=AVG.NS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\" "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" "C:\Program Files\Windows Media Player\wmpnetwk.exe" C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe" "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\Windows\system32\nvvsvc.exe -session -first /QuitInfo:0000000000000698;0000000000000974; /AddRef; "taskhost.exe" "C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe" "C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe" taskeng.exe {C67556E7-D291-4798-8FAA-5A062C60DD8D} /QuitInfo:000000000000084C;00000000000008B0; /AddRef; /QuitInfo:0000000000000A10;0000000000000A00; "C:\Windows\system32\Dwm.exe" /loadhooks /Parent:0000000000001128 C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\Explorer.EXE ATKOSD.exe KBFiltr.exe WDC.exe "C:\Program Files\ASUS\P4G\BatteryLife.exe" "C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe" "C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe" "C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe" "C:\Program Files\Elantech\ETDCtrl.exe" "C:\Windows\System32\igfxtray.exe" "C:\Windows\System32\hkcmd.exe" "C:\Windows\System32\igfxpers.exe" "C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe" -e "C:\Program Files (x86)\Panasonic\PHOTOfunSTUDIO 9.0 AE\PHOTOfunSTUDIO.exe" "C:\Program Files (x86)\ASUS\Splendid\ACMON.exe" "C:\Users\Aliegriet\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup C:\Windows\SysWOW64\ACEngSvr.exe -Embedding "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" "C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" "C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" "C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe" "C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe" /AUTORUN "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s "C:\Program Files (x86)\iTunes\iTunesHelper.exe" "C:\Program Files\Elantech\ETDCtrlHelper.exe" "C:\Windows\AsScrPro.exe" "C:\Program Files\Elantech\ETDGesture.exe" "C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe" /autorun "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe" "C:\Program Files\iPod\bin\iPodService.exe" "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1 "C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe" C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe" C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="8884.0.755527268\1233921603" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,16 --gpu-vendor-id=0x8086 --gpu-device-id=0x0166 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=9.17.10.2932 --ignored=" --type=renderer " /prefetch:822062411 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --test-type --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Bootstrap/NewProfileManagement/NewAvatarMenu/PasswordGeneration/Disabled/Prerender/PrerenderControl/PrerenderLocalPredictorSpec/cd=3e:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2:LocalPredictorUnencryptedSyncOnly=Enabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SafeBrowsingIncidentReportingService/Enabled/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_90/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --extensions-on-chrome-urls --device-scale-factor=1 --enable-delegated-renderer --channel="8884.2.1945337367\1632447887" /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="8884.24.485958844\1076290475" --ppapi-flash-args=enable_hw_video_decode=1 --lang=nl --ignored=" --type=renderer " /prefetch:-632637702 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --test-type --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Bootstrap/NewProfileManagement/NewAvatarMenu/PasswordGeneration/Disabled/Prerender/PrerenderControl/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/cd=3e:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2:LocalPredictorUnencryptedSyncOnly=Enabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SafeBrowsingIncidentReportingService/Enabled/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_90/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --extensions-on-chrome-urls --device-scale-factor=1 --enable-delegated-renderer --channel="8884.40.51609020\1388532201" /prefetch:673131151 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --test-type --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group1 dev:pp5 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/ControlEnforce/ExtensionInstallVerification/Bootstrap/NewProfileManagement/NewAvatarMenu/PasswordGeneration/Disabled/Prerender/PrerenderControl/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/cd=3e:LocalPredictor=Enabled:SkipHTTPS=Enabled:SideEffectFreeWhitelist=Enabled:MaxConcurrentPrerenders=5:PrerenderPriorityHalfLifeTimeSeconds=30:PrerenderQueryPrerenderService=Enabled:PrerenderServiceFetchTimeoutMs=5000:PrerenderAlwaysControl=Enabled:MaxLaunchPrerenders=2:LocalPredictorUnencryptedSyncOnly=Enabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SafeBrowsingIncidentReportingService/Enabled/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_90/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --renderer-print-preview --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --extensions-on-chrome-urls --device-scale-factor=1 --enable-delegated-renderer --channel="8884.83.1543246782\555917657" /prefetch:673131151 taskeng.exe {DF4C10D3-C916-4914-BC8B-0EB0760169F7} C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\sppsvc.exe "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe75_ Global\UsGthrCtrlFltPipeMssGthrPipe75 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\Windows\system32\SearchFilterHost.exe" 0 540 544 552 65536 548 "C:\Users\Aliegriet\Downloads\RSITx64.exe" ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\b96f09aa-67ad-4eda-8dbc-30892345d498-1.job - C:\Program Files (x86)\TheTorntvs V10 1.1 +\TheTorntvs V10 1.1 +-codedownloader.exe /rawdata=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 C:\Windows\tasks\b96f09aa-67ad-4eda-8dbc-30892345d498-11.job - C:\Program Files (x86)\TheTorntvs V10 1.1 +\b96f09aa-67ad-4eda-8dbc-30892345d498-11.exe /rawdata=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 C:\Windows\tasks\b96f09aa-67ad-4eda-8dbc-30892345d498-3.job - C:\Program Files (x86)\TheTorntvs V10 1.1 +\b96f09aa-67ad-4eda-8dbc-30892345d498-3.exe /rawdata=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 C:\Windows\tasks\b96f09aa-67ad-4eda-8dbc-30892345d498-4.job - C:\Program Files (x86)\TheTorntvs V10 1.1 +\b96f09aa-67ad-4eda-8dbc-30892345d498-4.exe /rawdata=JyxJyTxAitmYJhFUsn6ckb8ZIOtIWOwfQaK6pt3amhWMqI5kq38FTuCKMxammtQKDV9YP+q5iO0mIvlPr5jm8lk97bOw7GLGbhNlSS9vn2LczuuDiDMijpC3YgmXLFJLnS2UsDA11YRkQ27w3qsILk8QVfQ7jovWhn5Q+D56qkknBsxX2wV0BTpcD22p5V3EoKKgOLMVANH+Cun90Cp4lYVT5vaSQl0M4YyiK9WlzSV66RmLERSuoVTYH3Axcxa73nX7SN9L/zx/gEht6FQzYNIPMUDnugmd++D1HbSESh7NVi1I6kxfWlFuajPvUV+1L316nyAk4rMkx0fAMAjOBQ8l1bMEFDgJntRTJQSBC9Vp52q71pOQzRbhSmnpOz519a3RSIFG5mXiutxoIBn5PItQf3M6e6+0MILjJXPvnAk7PEeFwVLAbWLpoVbWcWGmj2ZSr+f+W8j6QxDpZJLTEn5srIi54ucu3x2LiRuzDVdVCEdOJjA4/yzCkclg1uuBrzSs0j5i6og0pe2NCDTURltl/Gzl2qUuyDIlnBDPJTETd2chXW8YpXKj0aBEsCv5O+9Bi/s35MbhZknnjF9rhmdMke9UZaPyE2QgkpW/eIxBo3Wi0CHvvhxqQu5K3jc1yGL6NVGXPtPQaK4/8MVWOdWFx4Pk1xmJdI//K4bpVZ64ZQr0LSJjujmTh6S+lZ3k68/qkc2WFyCQ8YgBYy7YWKWl9vJgzmef7+xEJNU0tLvlDAKlWCll1hpMuRvtnQ7gTqH9nWiZz+038hFFN9Wo47FaSmw6MN0H3ENC/z8MmiUN3sDm4Aw7GHz9ycLoVBzGzwPmTPSZg3JUa+NCCcLeOTuyTLtSJReRB7y+rUFxLeQ6Uf0fKQVK+ugi/dAo+CEwXE33iu/gDvX1P6HKzF2oQ9rg2pZjH9cUii8yhKk2MiMcjQ5FtFEpSUHpK4AgQsYWYbUxkX4/KIoWMagtVunu57HDMoy1s13N2xgnzR9N7c2IL8r5TzoUHDul4J0xdqAyio0F/fwbQQubu4VF410XIZUIdXrK0I7SwKW0HwGOjOPErrfPrX3AI2jZS2dHFSqg+p0gy3aW82IcQruvoWSQUJ4NpG0JgSK5cxDNCBoyDqoEmoi0dnbul0hpfiqxZr3nEcB20hG76A9zXmXCRCXA4xentIp5kqkAUIUcKddMDatzowAOSkgoSoKM3ErPhrTS955jv9qyONXxKjdKN18prWnG/T72R4VuffD2jTjEqefQ0gfOt4DNb6g7GhEjjzZkmDl4aw/kpGIO+Ac7BSSrZ71cuCSSGTPx1M2EKv6aZjV+26m/24CGLalVSjsIOt/tlM6hOWAn/nFrq9Gm0kSLrDalTNGRqPEehNJztQX623amuUGQVFuq+/3McGvpYUWKuNnyS6rRBCyt6+LB4Hs9Po0zqjiNaBRqvEZjhfQ+R4SO+fwSXjmwFEdFe5KkUUqmjAmdNQZgdvL+GQbDA5KEvquXl5iaBLOO1nMfJiKn3j826I5yuTYOzbvKR7dLzLY7qToRHywOha7Dmhhr+zczvdSiW/7bfaesv+jO32IDclSRsamI51FHtecrxx9G12/RYU6inwXGZ/2QG2+VGRHWACnXog96ej+kcnfFlb2I6zfwpN2O6i/yWU0tWQ/i7mmhzqw23Bt9z7ewcqm0XQlfxdhjJ62ZunK6PWsPBqTtonUqv0DHogYnZidUS2aoVaOlOv0Xq9FyNXWs28Pw2OLejfCsUCPaBAEXamgKCAXePJUw3dfmWg8D3GwBfsIGARsstHVlIfORDpfb7P6uy5jESjkTo98QV6lOjxPkTIcQXj/rKK2Pp2CHDZkhZpTXoaM/oatmUOrFdZ1v/qu0ifnaybVwvMTePfFgu60V05wcKa664HHoDsP8LmhtVE7Cp63IyFFV+CxUc/lG5SXAUS5fAkBnYLwFNBJZDwuUGtZ4YAHTLSLwmrRWT/fd/rKx8lX4vVSIadbbF0jp58NtEZ6eZ5iWB4HKSS7QyCpR1ewwJyWBXtGC5m12/FXz8zgsrFePWLj2ycqCsU/zFX5axHdaedgmA//WDpznDhPjVm5x6I+E37ENeilarl1K3eoAnQfxt6FdJ5BgZvY0ipXSJ7fncOs5C8hdCmjMEm9O/v9PLDvwlOzz+K6LY/6oQ87EgCyus9LtOeIcVqgdX3Brj0Y/6yoc1Z0diqg0Ete0yNc6Yjs= C:\Windows\tasks\b96f09aa-67ad-4eda-8dbc-30892345d498-6.job - C:\Program Files (x86)\TheTorntvs V10 1.1 +\b96f09aa-67ad-4eda-8dbc-30892345d498-6.exe /rawdata=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 C:\Windows\tasks\b96f09aa-67ad-4eda-8dbc-30892345d498-7.job - C:\Program Files (x86)\TheTorntvs V10 1.1 +\b96f09aa-67ad-4eda-8dbc-30892345d498-7.exe /rawdata=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 C:\Windows\tasks\DURCKM.job - C:\Users\Aliegriet\AppData\Roaming\DURCKM.exe /infocmdline=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 C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /c C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job - C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe --domain-id 4e00205a-2ab1-4423-8f77-cc25b82cde1d --caller winlogon-impersonate C:\Windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job - C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe --domain-id 4e00205a-2ab1-4423-8f77-cc25b82cde1d --caller scheduler-impersonate C:\Windows\tasks\ROC_REG_JAN_DELETE.job - C:\ProgramData\AVG January 2013 Campaign\ROC.exe /DELETE_FROM_SYSTEM=1 C:\Windows\tasks\XKJSF.job - C:\Users\Aliegriet\AppData\Roaming\XKJSF.exe /infocmdline=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 =========Mozilla firefox========= ProfilePath - C:\Users\Aliegriet\AppData\Roaming\Mozilla\Firefox\Profiles\egi3vwr1.default [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 10 "Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=] "Description"=iTunes Detector Plug-in "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0] "Description"= "Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59] "Description"=Intel IPT WebApi plugin "Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater] "Description"=This plugin updates Intel WebAPI component "Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.25.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.25.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nitropdf.com/NitroPDF] "Description"=NitroPDF Web Browser Plugin "Path"=C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10] "Description"=globalUpdate Update "Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4] "Description"=globalUpdate Update "Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.1] "Description"=VLC Multimedia Plugin "Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect] "Description"= "Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll C:\Users\Aliegriet\AppData\Roaming\Mozilla\Firefox\Profiles\egi3vwr1.default\extensions\ 5760ec0d6ec24a119c6398f@fa137c6b34f842bd805263bee28d76.com ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 529280] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14 2117216] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-12-01 460712] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 441216] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-12-01 172968] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2012-02-19 2661672] "IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-12-14 172144] "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-12-14 399984] "Persistence"=C:\Windows\system32\igfxpers.exe [2012-12-14 441968] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Akamai NetSession Interface"=C:\Users\Aliegriet\AppData\Local\Akamai\netsession_win.exe [] "Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-11-27 30524520] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Application Restart #1"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2014-10-22 854344] "FlashPlayerUpdate"=C:\Windows\system32\Macromed\Flash\FlashUtil64_15_0_0_246_ActiveX.exe [2014-12-10 540848] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACMON] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2012-02-21 102568] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2013-05-10 37960] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe [2012-08-03 3058304] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer] C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-12-27 12343400] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576] "ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2012-02-24 3331312] "ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2012-02-16 322176] "ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2011-10-25 174720] "HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016] "Wireless Console 3"=C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2012-02-03 2321072] "BrMfcWnd"=C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [2012-09-25 1163264] "ControlCenter3"=C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [2008-12-24 114688] "GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040] "AVG_UI"=C:\Program Files (x86)\AVG\AVG2013\avgui.exe [2014-11-04 4411952] "VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456] "APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720] "iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-08-16 152392] "QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup PHOTOfunSTUDIO 9.0 AE.lnk - C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe C:\Users\Aliegriet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Dropbox.lnk - C:\Users\Aliegriet\AppData\Roaming\Dropbox\bin\Dropbox.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\Windows\system32\nvinitx.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\Windows\system32\igfxdev.dll [2012-12-14 442880] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "SoftwareSASGeneration"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveAutoRun"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll "vidc.tsc2"=C:\Windows\SysWOW64\tsc2_codec64.dll ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 3 months====== 2015-01-03 21:25:00 ----D---- C:\Program Files\trend micro 2015-01-03 21:24:59 ----D---- C:\rsit 2014-12-22 14:05:38 ----D---- C:\Program Files (x86)\DOSBox-0.74 2014-12-18 09:01:13 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2014-12-18 09:01:12 ----A---- C:\Windows\system32\ieUnatt.exe 2014-12-16 16:15:50 ----D---- C:\Windows\system32\appraiser 2014-12-15 18:27:47 ----D---- C:\Program Files (x86)\a444df1f-4cc8-4e1c-9fdb-aafc21a0799e 2014-12-15 18:27:33 ----D---- C:\Program Files (x86)\globalUpdate 2014-12-15 18:27:31 ----D---- C:\Program Files (x86)\TheTorntvs V10 1.1 + 2014-12-15 18:26:07 ----D---- C:\Users\Aliegriet\AppData\Roaming\TornTV.com 2014-12-12 09:30:37 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe 2014-12-12 09:30:37 ----A---- C:\Windows\SYSWOW64\mfps.dll 2014-12-12 09:30:37 ----A---- C:\Windows\SYSWOW64\mfpmp.exe 2014-12-12 09:30:37 ----A---- C:\Windows\SYSWOW64\mferror.dll 2014-12-12 09:30:37 ----A---- C:\Windows\SYSWOW64\mf.dll 2014-12-12 09:30:37 ----A---- C:\Windows\system32\rrinstaller.exe 2014-12-12 09:30:37 ----A---- C:\Windows\system32\mfps.dll 2014-12-12 09:30:37 ----A---- C:\Windows\system32\mfpmp.exe 2014-12-12 09:30:37 ----A---- C:\Windows\system32\mferror.dll 2014-12-12 09:30:35 ----A---- C:\Windows\system32\mf.dll 2014-12-11 08:47:59 ----A---- C:\Windows\system32\appraiser.dll 2014-12-11 08:47:59 ----A---- C:\Windows\system32\aitstatic.exe 2014-12-11 08:47:59 ----A---- C:\Windows\system32\aepic.dll 2014-12-11 08:47:59 ----A---- C:\Windows\system32\aeinv.dll 2014-12-11 08:47:58 ----A---- C:\Windows\system32\invagent.dll 2014-12-11 08:47:58 ----A---- C:\Windows\system32\generaltel.dll 2014-12-11 08:47:58 ----A---- C:\Windows\system32\devinv.dll 2014-12-11 08:47:58 ----A---- C:\Windows\system32\aepdu.dll 2014-12-11 08:47:45 ----A---- C:\Windows\system32\WindowsCodecs.dll 2014-12-11 08:47:44 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll 2014-12-11 08:47:37 ----A---- C:\Windows\system32\drivers\tdx.sys 2014-12-11 08:47:21 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2014-12-11 08:47:21 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2014-12-11 08:47:21 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2014-12-11 08:47:21 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2014-12-11 08:47:21 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2014-12-11 08:47:21 ----A---- C:\Windows\system32\iernonce.dll 2014-12-11 08:47:21 ----A---- C:\Windows\system32\ieetwproxystub.dll 2014-12-11 08:47:21 ----A---- C:\Windows\system32\ieetwcollector.exe 2014-12-11 08:47:21 ----A---- C:\Windows\system32\ie4uinit.exe 2014-12-11 08:47:20 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2014-12-11 08:47:20 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2014-12-11 08:47:20 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll 2014-12-11 08:47:20 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2014-12-11 08:47:20 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-12-11 08:47:19 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2014-12-11 08:47:19 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2014-12-11 08:47:19 ----A---- C:\Windows\SYSWOW64\ieui.dll 2014-12-11 08:47:19 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2014-12-11 08:47:19 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2014-12-11 08:47:19 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2014-12-11 08:47:19 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2014-12-11 08:47:19 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2014-12-11 08:47:19 ----A---- C:\Windows\system32\urlmon.dll 2014-12-11 08:47:19 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2014-12-11 08:47:19 ----A---- C:\Windows\system32\msfeeds.dll 2014-12-11 08:47:19 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2014-12-11 08:47:19 ----A---- C:\Windows\system32\iedkcs32.dll 2014-12-11 08:47:19 ----A---- C:\Windows\system32\dxtrans.dll 2014-12-11 08:47:18 ----A---- C:\Windows\system32\iesetup.dll 2014-12-11 08:47:18 ----A---- C:\Windows\system32\ieapfltr.dll 2014-12-11 08:47:17 ----A---- C:\Windows\system32\iertutil.dll 2014-12-11 08:47:16 ----A---- C:\Windows\SYSWOW64\wininet.dll 2014-12-11 08:47:16 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2014-12-11 08:47:16 ----A---- C:\Windows\SYSWOW64\msrating.dll 2014-12-11 08:47:16 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll 2014-12-11 08:47:16 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll 2014-12-11 08:47:16 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2014-12-11 08:47:16 ----A---- C:\Windows\system32\jsproxy.dll 2014-12-11 08:47:16 ----A---- C:\Windows\system32\ieui.dll 2014-12-11 08:47:16 ----A---- C:\Windows\system32\ieframe.dll 2014-12-11 08:47:16 ----A---- C:\Windows\system32\dxtmsft.dll 2014-12-11 08:47:15 ----A---- C:\Windows\system32\wininet.dll 2014-12-11 08:47:15 ----A---- C:\Windows\system32\vbscript.dll 2014-12-11 08:47:15 ----A---- C:\Windows\system32\mshtmlmedia.dll 2014-12-11 08:47:15 ----A---- C:\Windows\system32\mshtmled.dll 2014-12-11 08:47:15 ----A---- C:\Windows\system32\jscript9diag.dll 2014-12-11 08:47:15 ----A---- C:\Windows\system32\jscript9.dll 2014-12-11 08:47:14 ----A---- C:\Windows\system32\msrating.dll 2014-12-11 08:47:14 ----A---- C:\Windows\system32\MshtmlDac.dll 2014-12-11 08:47:14 ----A---- C:\Windows\system32\mshtml.dll 2014-12-11 08:45:03 ----A---- C:\Windows\SYSWOW64\charmap.exe 2014-12-11 08:45:03 ----A---- C:\Windows\system32\WsmSvc.dll 2014-12-11 08:45:03 ----A---- C:\Windows\system32\charmap.exe 2014-12-11 08:45:02 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll 2014-12-11 08:45:02 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll 2014-12-11 08:45:02 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll 2014-12-11 08:45:02 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll 2014-12-11 08:45:02 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe 2014-12-11 08:45:02 ----A---- C:\Windows\system32\WsmWmiPl.dll 2014-12-11 08:45:02 ----A---- C:\Windows\system32\WsmAuto.dll 2014-12-11 08:45:02 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll 2014-12-11 08:45:02 ----A---- C:\Windows\system32\WSManHTTPConfig.exe 2014-12-11 08:44:57 ----A---- C:\Windows\SYSWOW64\tzres.dll 2014-12-11 08:44:57 ----A---- C:\Windows\system32\tzres.dll 2014-12-01 10:40:25 ----A---- C:\Windows\SYSWOW64\java.exe 2014-11-23 09:59:50 ----SD---- C:\Windows\SYSWOW64\Microsoft 2014-11-20 00:14:20 ----D---- C:\ProgramData\Malwarebytes 2014-11-19 23:56:03 ----A---- C:\Windows\system32\FNTCACHE.DAT 2014-11-19 23:24:14 ----D---- C:\Windows\SYSWOW64\vbox 2014-11-19 23:24:14 ----D---- C:\Windows\system32\vbox 2014-11-19 23:17:39 ----D---- C:\ProgramData\AVAST Software 2014-11-19 15:53:36 ----A---- C:\autoexec.bat 2014-11-19 13:02:05 ----D---- C:\AdwCleaner 2014-11-19 12:29:10 ----A---- C:\Windows\SYSWOW64\pku2u.dll 2014-11-19 12:29:10 ----A---- C:\Windows\system32\pku2u.dll 2014-11-19 12:29:10 ----A---- C:\Windows\system32\kerberos.dll 2014-11-19 12:29:09 ----A---- C:\Windows\SYSWOW64\kerberos.dll 2014-11-18 14:56:48 ----A---- C:\Windows\SYSWOW64\FM20.DLL 2014-11-12 19:07:38 ----A---- C:\Windows\system32\termsrv.dll 2014-11-12 19:07:37 ----A---- C:\Windows\SYSWOW64\adtschema.dll 2014-11-12 19:07:37 ----A---- C:\Windows\system32\lsasrv.dll 2014-11-12 19:07:37 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2014-11-12 19:07:37 ----A---- C:\Windows\system32\adtschema.dll 2014-11-12 19:07:36 ----A---- C:\Windows\SYSWOW64\sspicli.dll 2014-11-12 19:07:36 ----A---- C:\Windows\SYSWOW64\secur32.dll 2014-11-12 19:07:36 ----A---- C:\Windows\SYSWOW64\msaudite.dll 2014-11-12 19:07:36 ----A---- C:\Windows\system32\msaudite.dll 2014-11-12 19:06:29 ----A---- C:\Windows\SYSWOW64\msxml3r.dll 2014-11-12 19:06:29 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2014-11-12 19:06:29 ----A---- C:\Windows\system32\msxml3r.dll 2014-11-12 19:06:29 ----A---- C:\Windows\system32\msxml3.dll 2014-11-12 19:06:27 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL 2014-11-12 19:06:27 ----A---- C:\Windows\system32\IMJP10K.DLL 2014-11-12 19:06:23 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll 2014-11-12 19:06:23 ----A---- C:\Windows\system32\AUDIOKSE.dll 2014-11-12 19:06:22 ----A---- C:\Windows\system32\audiosrv.dll 2014-11-12 19:06:22 ----A---- C:\Windows\system32\AudioEng.dll 2014-11-12 19:06:21 ----A---- C:\Windows\SYSWOW64\AudioSes.dll 2014-11-12 19:06:21 ----A---- C:\Windows\SYSWOW64\AudioEng.dll 2014-11-12 19:06:21 ----A---- C:\Windows\system32\EncDump.dll 2014-11-12 19:06:21 ----A---- C:\Windows\system32\AudioSes.dll 2014-11-12 19:06:15 ----A---- C:\Windows\SYSWOW64\schannel.dll 2014-11-12 19:06:15 ----A---- C:\Windows\SYSWOW64\ncrypt.dll 2014-11-12 19:06:15 ----A---- C:\Windows\system32\schannel.dll 2014-11-12 19:06:15 ----A---- C:\Windows\system32\ncrypt.dll 2014-11-12 19:06:14 ----A---- C:\Windows\SYSWOW64\wdigest.dll 2014-11-12 19:06:14 ----A---- C:\Windows\SYSWOW64\TSpkg.dll 2014-11-12 19:06:14 ----A---- C:\Windows\SYSWOW64\msv1_0.dll 2014-11-12 19:06:14 ----A---- C:\Windows\system32\wdigest.dll 2014-11-12 19:06:14 ----A---- C:\Windows\system32\TSpkg.dll 2014-11-12 19:06:14 ----A---- C:\Windows\system32\msv1_0.dll 2014-11-12 19:06:13 ----A---- C:\Windows\SYSWOW64\credssp.dll 2014-11-12 19:06:13 ----A---- C:\Windows\system32\credssp.dll 2014-11-12 19:05:48 ----A---- C:\Windows\SYSWOW64\packager.dll 2014-11-12 19:05:48 ----A---- C:\Windows\system32\packager.dll 2014-11-12 19:05:45 ----A---- C:\Windows\system32\win32k.sys 2014-11-12 19:05:38 ----A---- C:\Windows\SYSWOW64\msi.dll 2014-11-12 19:05:38 ----A---- C:\Windows\system32\msi.dll 2014-11-12 19:05:31 ----A---- C:\Windows\SYSWOW64\oleaut32.dll 2014-11-12 19:05:31 ----A---- C:\Windows\system32\oleaut32.dll 2014-11-07 20:05:23 ----D---- C:\Program Files (x86)\fabius 2014-11-07 18:21:06 ----D---- C:\ProgramData\beautydeals 2014-11-07 18:21:01 ----D---- C:\ProgramData\cheapncheap 2014-11-07 18:00:41 ----D---- C:\Program Files (x86)\VideoCnv 2014-11-04 00:30:04 ----A---- C:\Windows\system32\drivers\avgldx64.sys 2014-10-23 19:11:17 ----D---- C:\Program Files (x86)\Mozilla Firefox 2014-10-18 11:47:42 ----A---- C:\Windows\SYSWOW64\mscorier.dll 2014-10-18 11:47:41 ----A---- C:\Windows\SYSWOW64\mscories.dll 2014-10-18 11:47:41 ----A---- C:\Windows\SYSWOW64\dfshim.dll 2014-10-18 11:47:41 ----A---- C:\Windows\system32\mscories.dll 2014-10-18 11:47:41 ----A---- C:\Windows\system32\mscorier.dll 2014-10-18 11:47:41 ----A---- C:\Windows\system32\dfshim.dll 2014-10-18 11:46:50 ----A---- C:\Windows\system32\qdvd.dll 2014-10-18 11:46:49 ----A---- C:\Windows\SYSWOW64\qdvd.dll 2014-10-18 11:46:23 ----A---- C:\Windows\SYSWOW64\tsgqec.dll 2014-10-18 11:46:23 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2014-10-18 11:46:23 ----A---- C:\Windows\SYSWOW64\mstsc.exe 2014-10-18 11:46:23 ----A---- C:\Windows\SYSWOW64\aaclient.dll 2014-10-18 11:46:23 ----A---- C:\Windows\system32\tsgqec.dll 2014-10-18 11:46:22 ----A---- C:\Windows\system32\mstscax.dll 2014-10-18 11:46:22 ----A---- C:\Windows\system32\mstsc.exe 2014-10-18 11:46:22 ----A---- C:\Windows\system32\aaclient.dll 2014-10-18 11:46:21 ----A---- C:\Windows\system32\rdpcorets.dll 2014-10-18 11:46:11 ----A---- C:\Windows\SYSWOW64\rastls.dll 2014-10-18 11:46:11 ----A---- C:\Windows\system32\rastls.dll 2014-10-18 11:45:54 ----A---- C:\Windows\SYSWOW64\winsta.dll 2014-10-18 11:45:54 ----A---- C:\Windows\system32\winsta.dll 2014-10-18 11:45:54 ----A---- C:\Windows\system32\rdpcorekmts.dll 2014-10-18 11:45:54 ----A---- C:\Windows\system32\drivers\rdpwd.sys 2014-10-18 11:45:53 ----A---- C:\Windows\system32\winlogon.exe 2014-10-18 11:45:52 ----A---- C:\Windows\system32\drivers\tssecsrv.sys 2014-10-17 15:34:46 ----A---- C:\Windows\system32\drivers\avgtdia.sys ======List of files/folders modified in the last 3 months====== 2015-01-03 21:25:38 ----D---- C:\Windows\Temp 2015-01-03 21:25:13 ----D---- C:\Windows\Prefetch 2015-01-03 21:25:00 ----RD---- C:\Program Files 2015-01-03 19:43:40 ----D---- C:\ProgramData\MFAData 2015-01-03 17:38:25 ----D---- C:\Windows\System32 2015-01-03 17:38:25 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-01-03 17:38:24 ----D---- C:\Windows\inf 2015-01-03 14:38:54 ----D---- C:\Windows\system32\config 2015-01-03 11:41:08 ----SHD---- C:\Windows\Installer 2015-01-03 11:40:27 ----SHD---- C:\System Volume Information 2014-12-27 12:10:14 ----D---- C:\Users\Aliegriet\AppData\Roaming\Skype 2014-12-27 12:05:14 ----D---- C:\Windows\system32\catroot2 2014-12-27 12:05:08 ----D---- C:\Windows\SysWOW64 2014-12-27 12:03:40 ----D---- C:\Users\Aliegriet\AppData\Roaming\Dropbox 2014-12-27 12:00:56 ----D---- C:\Windows\winsxs 2014-12-27 11:42:55 ----D---- C:\Windows\system32\catroot 2014-12-27 11:36:17 ----A---- C:\Windows\SYSWOW64\log.txt 2014-12-26 00:50:45 ----D---- C:\Users\Aliegriet\AppData\Roaming\Azureus 2014-12-22 14:05:38 ----RD---- C:\Program Files (x86) 2014-12-20 17:46:25 ----SD---- C:\ProgramData\Microsoft 2014-12-16 16:22:06 ----D---- C:\ProgramData\Skype 2014-12-16 16:22:03 ----RD---- C:\Program Files (x86)\Skype 2014-12-16 16:18:38 ----A---- C:\Windows\system32\ServiceFilter.ini 2014-12-16 16:15:53 ----D---- C:\Windows\AppCompat 2014-12-16 16:15:52 ----SD---- C:\Windows\system32\CompatTel 2014-12-15 18:28:30 ----D---- C:\Program Files (x86)\Apple Software Update 2014-12-15 18:28:15 ----D---- C:\Windows\Tasks 2014-12-15 18:28:15 ----D---- C:\Windows\system32\Tasks 2014-12-12 12:48:59 ----D---- C:\Windows\rescache 2014-12-12 10:11:50 ----D---- C:\Windows\system32\drivers 2014-12-12 10:11:48 ----D---- C:\Windows\SYSWOW64\nl-NL 2014-12-12 10:11:48 ----D---- C:\Program Files\Internet Explorer 2014-12-12 10:11:47 ----D---- C:\Windows\SYSWOW64\en-US 2014-12-12 10:11:43 ----D---- C:\Windows\system32\nl-NL 2014-12-12 10:11:43 ----D---- C:\Windows\PolicyDefinitions 2014-12-12 10:11:42 ----D---- C:\Windows\system32\en-US 2014-12-12 10:11:36 ----D---- C:\Program Files (x86)\Internet Explorer 2014-12-12 09:44:39 ----D---- C:\ProgramData\Microsoft Help 2014-12-12 09:42:57 ----D---- C:\Windows\system32\MRT 2014-12-12 09:33:21 ----D---- C:\Windows\debug 2014-12-12 09:33:18 ----A---- C:\Windows\system32\MRT.exe 2014-12-10 18:22:20 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2014-12-08 17:12:22 ----D---- C:\Users\Aliegriet\AppData\Roaming\vlc 2014-12-01 10:39:57 ----D---- C:\Program Files (x86)\Common Files 2014-12-01 10:38:58 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll 2014-12-01 10:38:58 ----A---- C:\Windows\SYSWOW64\javaws.exe 2014-12-01 10:38:58 ----A---- C:\Windows\SYSWOW64\javaw.exe 2014-12-01 10:38:40 ----D---- C:\ProgramData\Oracle 2014-12-01 10:38:28 ----D---- C:\Program Files (x86)\Java 2014-11-27 19:11:00 ----D---- C:\Users\Aliegriet\AppData\Roaming\Nitro PDF 2014-11-24 08:46:45 ----AD---- C:\Windows 2014-11-23 10:00:22 ----D---- C:\Windows\system32\DriverStore 2014-11-23 09:56:51 ----D---- C:\Windows\SYSWOW64\drivers 2014-11-23 09:56:38 ----D---- C:\Users\Aliegriet\AppData\Roaming\Spotify 2014-11-20 21:54:42 ----SD---- C:\Users\Aliegriet\AppData\Roaming\Microsoft 2014-11-20 18:00:02 ----D---- C:\Windows\system32\LogFiles 2014-11-20 00:14:20 ----HD---- C:\ProgramData 2014-11-19 23:58:36 ----A---- C:\Windows\system32\AutoRunFilter.ini 2014-11-19 23:55:40 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2014-11-19 12:48:32 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2014-11-19 12:48:17 ----D---- C:\Program Files (x86)\CyberLink 2014-11-16 23:23:09 ----D---- C:\Windows\Microsoft.NET 2014-11-16 23:22:41 ----RSD---- C:\Windows\assembly 2014-10-18 13:57:29 ----D---- C:\Windows\system32\NDF ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2013-07-20 71480] R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2013-07-20 311608] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2013-07-01 116536] R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2013-10-23 45880] R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-11-29 568600] R0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-02-27 16152] R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2012-03-04 28992] R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888] R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536] R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6a.sys [2012-09-04 50296] R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2013-11-25 246072] R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2014-11-04 209720] R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2014-10-17 240952] R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2010-12-16 40816] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416] R3 AiCharger;ASUS Charger Driver; C:\Windows\system32\DRIVERS\AiCharger.sys [2012-02-29 17152] R3 AsusVBus;AsusVBus; C:\Windows\system32\DRIVERS\AsusVBus.sys [2011-12-21 35968] R3 AsusVTouch;AsusVTouch; C:\Windows\system32\DRIVERS\AsusVTouch.sys [2011-11-08 16512] R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-12-28 2797056] R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2012-02-19 200488] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240] R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-12-14 5353888] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-12-27 4727656] R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2011-12-06 331264] R3 iusb3hub;Intel(R) USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-02-27 356120] R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-02-27 788760] R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416] R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-17 62784] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-09-29 646248] R3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288] R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352] R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920] S3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-10 1146880] S3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984] S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784] S3 BTHPORT;Stuurprogramma voor Bluetooth-poort; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960] S3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio; C:\Windows\System32\Drivers\BTHUSB.sys [2012-02-24 80384] S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-06-10 57344] S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2011-08-17 251496] S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832] S3 taphss6;Anchorfree HSS VPN Adapter; C:\Windows\system32\DRIVERS\taphss6.sys [2014-05-17 42184] S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856] S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208] S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784] S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496] S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168] S3 WinUsb;WinUSB Driver; C:\Windows\system32\drivers\WinUSB.sys [2010-11-20 41984] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-09 65640] R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2011-03-04 379520] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008] R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2011-11-21 80512] R2 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [2012-02-17 277120] R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896] R2 avgfws;AVG Firewall; C:\Program Files (x86)\AVG\AVG2013\avgfws.exe [2014-11-04 1432592] R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2014-10-17 4942384] R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-11-20 283136] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184] R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176] R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520] R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-03 628448] R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-02-21 128280] R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-02-21 161560] R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-02-28 277784] R2 NitroDriverReadSpool8;NitroPDFDriverCreatorReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [2013-03-25 230408] R2 nlsX86cc;Nalpeiron Licensing Service; C:\Windows\SysWOW64\NLSSRV32.EXE [2013-03-25 70152] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-03-05 889664] R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-03-04 2348864] R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-02-28 363800] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-29 2292096] R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2013-08-16 641352] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088] S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-12-15 68608] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-25 116648] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-10 267440] S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808] S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-12-14 277616] S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-12-15 68608] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-25 116648] S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-22 114688] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-10-23 119408] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-08-07 1255736] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] -----------------EOF-----------------