Logfile of random's system information tool 1.10 (written by random/random) Run by Jonas at 2015-03-13 15:30:05 Microsoft Windows 8.1 System drive C: has 868 GB (93%) free of 934 GB Total RAM: 8087 MB (41% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 15:30:07, on 13/03/2015 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.9600.17416) Boot mode: Normal Running processes: C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe C:\Program Files (x86)\TeamViewer\TeamViewer.exe C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Users\Jonas\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Users\Jonas\AppData\Local\Pokki\Engine\HostAppService.exe C:\Program Files (x86)\Citrix\ICA Client\concentr.exe C:\Program Files (x86)\Citrix\ICA Client\redirector.exe C:\Program Files (x86)\Citrix\Receiver\Receiver.exe C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe C:\Users\Jonas\AppData\Local\Pokki\Engine\HostAppService.exe C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files\Lenovo\Communications Utility\tpknrres.exe C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\WINDOWS\SysWOW64\cmd.exe C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coNatHst.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files\trend micro\Jonas.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13-comm.msn.com/?pc=LNJB R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" O4 - HKLM\..\Run: [Fastboot] "C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe" /analysis O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [CitrixReceiver] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk" O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup O4 - HKLM\..\Run: [Redirector] "C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKCU\..\Run: [Pokki] "%LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON O4 - HKCU\..\RunOnce: [Application Restart #1] C:\Users\Jonas\AppData\Local\Pokki\Engine\HostAppService.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\Jonas\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session O4 - HKUS\S-1-5-21-2856834796-3624118678-1303184682-1001\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User 'UpdatusUser') O4 - Startup: Dropbox.lnk = Jonas\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra button: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra 'Tools' menuitem: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: AVControlCenter - Lenovo Corporation - C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: BrcmSetSecurity - Intel - C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe O23 - Service: Conexant Audio Message Service (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe O23 - Service: ExpressCache - Condusiv Technologies - C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe O23 - Service: FastbootService - Lenovo - C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: @oem74.inf,%ibm.svcDesc0%;Lenovo PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing) O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe O23 - Service: Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe O23 - Service: Intel(R) Small Business Advantage (intelsba) - Intel Corporation - C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) - Unknown owner - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Lenovo QuickSnip Service - LENOVO INCORPORATED. - C:\Program Files\lenovo\QuickSnipService\QuickSnipService.exe O23 - Service: Lenovo Settings Service - Lenovo Group Limited - C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe O23 - Service: Lenovo System Agent Service - LENOVO INCORPORATED. - C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe O23 - Service: Lenovo AVFramework Camera Privacy Controller (LENOVO.CAMMUTE) - Lenovo Corporation - C:\Program Files\Lenovo\Communications Utility\cammute.exe O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe O23 - Service: Lenovo AVFramework Microphone Volume Controller and Dolby Interface (LENOVO.TPKNRSVC) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\tpknrsvc.exe O23 - Service: Lenovo AVFramework Virtual Camera Controller Service (LENOVO.TVTVCAM) - Lenovo Corporation - C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe O23 - Service: Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: Lenovo Settings Mobile Hotspot Service (LnvHotSpotSvc) - Lenovo - C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe O23 - Service: LocationTaskManager - Unknown owner - C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe O23 - Service: LSCWinService - Unknown owner - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing) O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe O23 - Service: NitroPDFDriverCreatorReadSpool8 (NitroDriverReadSpool8) - Nitro PDF Software - C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\windows\SysWOW64\NLSSRV32.EXE O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: Lenovo Settings Power Service (Power Manager DBC Service) - Lenovo - C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE O23 - Service: Lenovo QuickControl Master Service (QuickControlMasterSvc) - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe O23 - Service: Lenovo QuickControl Service (QuickControlService) - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing) O23 - Service: System Update (SUService) - Unknown owner - C:\Program Files (x86)\Lenovo\System Update\SUService.exe O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Unknown owner - C:\WINDOWS\System32\TPHDEXLG64.exe (file missing) O23 - Service: Lenovo Hotkey Client Loader (TPHKLOAD) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing) O23 - Service: ValBioService - Validity Sensors, Inc. - C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe O23 - Service: @oem73.inf,%WBFService_SvcDesc%;Synaptics FP WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\WINDOWS\system32\valWBFPolicyService.exe (file missing) O23 - Service: @oem73.inf,%BioSyncService_SvcDesc%;BiometricSensorDataSynchronization (valWbioSyncSvc) - Unknown owner - C:\WINDOWS\system32\valWbioSyncSvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- End of file - 21278 bytes ======Listing Processes====== wininit.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe -k DcomLaunch C:\WINDOWS\system32\svchost.exe -k RPCSS winlogon.exe C:\WINDOWS\system32\ibmpmsvc.exe "dwm.exe" "C:\WINDOWS\system32\nvvsvc.exe" C:\WINDOWS\system32\nvvsvc.exe -session -first C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted C:\WINDOWS\system32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k LocalService "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\WINDOWS\system32\igfxCUIService.exe C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-edb02ff5-3b8e-4b17-bc10-07dd5fdd46be -SystemEventPortName:HostProcess-1475a610-2908-4ffb-9418-b8616ba9cb91 -IoCancelEventPortName:HostProcess-7790f7a6-689b-48f2-9a25-f13d0b5c5f01 -NonStateChangingEventPortName:HostProcess-ee8a26fd-af75-4d30-a1c8-deffa6990568 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:1fcafa54-b9fb-4fe4-b1c6-137b07b0e55b -DeviceGroupId: "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-4fa7b1c7-2667-4604-8165-89b6a644d90b -SystemEventPortName:HostProcess-2eb0e48a-a27e-466e-a940-b307a62cb5b8 -IoCancelEventPortName:HostProcess-a07671ed-6193-4d2d-8ec9-8e98fcb0c098 -NonStateChangingEventPortName:HostProcess-deb52d2d-032d-4cb7-a9ee-5031d196e45b -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:10310b09-e2c2-41fd-8401-eebe3ffcbaa5 -DeviceGroupId: "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-73968b25-09c1-472f-bc73-62fd9460928a -SystemEventPortName:HostProcess-7055b1e7-f956-4e32-8f3a-345c11c738d6 -IoCancelEventPortName:HostProcess-fbbe077f-ba74-4e3c-a66c-1cc08319ce41 -NonStateChangingEventPortName:HostProcess-77e082b3-021e-403f-9eb8-27e771c29f49 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d0bcc50f-ddab-4804-acbf-59165965c9d3 -DeviceGroupId: "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-46b2cfd6-de19-4a4b-bc2b-77c94acd8835 -SystemEventPortName:HostProcess-bcf8b4ea-000e-4f09-beff-53d8608f7ff2 -IoCancelEventPortName:HostProcess-93e2b471-a6c7-4959-b14f-01055825509b -NonStateChangingEventPortName:HostProcess-4da216ee-62f4-4f39-864b-66d93700b391 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:d9761527-b2dd-47bd-b7f6-4bd4a141a0d7 -DeviceGroupId: C:\WINDOWS\system32\svchost.exe -k NetworkService C:\WINDOWS\system32\WLANExt.exe 500386367728 \??\C:\WINDOWS\system32\conhost.exe 0x4 C:\WINDOWS\System32\spoolsv.exe C:\WINDOWS\system32\svchost.exe -k WbioSvcGroup C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe" "C:\Program Files\Bonjour\mDNSResponder.exe" "C:\Program Files\Lenovo\Communications Utility\avfaudiosw.exe" "C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service "C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service C:\windows\system32\CxAudMsg64.exe dashost.exe {2d3fc215-1b76-460c-81cf9a0fedd0021a} "C:\Program Files\Intel\WiFi\bin\EvtEng.exe" "C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe" "C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe" "C:\Program Files\Intel\iCLS Client\HeciServer.exe" "C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe" "C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe" "C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe" "C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe" "C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe" "C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe" C:\windows\SysWOW64\NLSSRV32.EXE "C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe" "C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe" C:\WINDOWS\system32\svchost.exe -k imgsvc "C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe" "C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe" C:\WINDOWS\system32\valWBFPolicyService.exe C:\WINDOWS\system32\valWbioSyncSvc.exe "C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe" "C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe" "C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe" "C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe" C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\system32\wbem\wmiprvse.exe "C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe" "C:\Program Files (x86)\Lenovo\QuickControl\QuickControlInput.exe" "C:\Program Files (x86)\Lenovo\QuickControl\QuickControlInput.exe" -default \??\C:\WINDOWS\system32\conhost.exe 0x4 \??\C:\WINDOWS\system32\conhost.exe 0x4 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe C:\WINDOWS\Explorer.EXE "C:\Program Files\Synaptics\SynFp\Shared\SensorDBSynch.exe" \??\C:\WINDOWS\system32\conhost.exe 0x4 C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe "C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe" \??\C:\WINDOWS\system32\conhost.exe 0x4 igfxEM.exe igfxHK.exe igfxTray.exe C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding C:\WINDOWS\system32\SearchIndexer.exe /Embedding C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683} C:\Windows\System32\skydrive.exe -Embedding taskhostex.exe "C:\Program Files (x86)\TeamViewer\TeamViewer.exe" C:\Program Files\LENOVO\HOTKEY\tpnumlkd.exe C:\PROGRA~1\Lenovo\HOTKEY\TPOSD.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.OnScreenDisplay C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.ShortcutKey "C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log "C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log "C:\Windows\RtsCM64.exe" C:\WINDOWS\system32\rundll32.exe "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.dll",PwrMgrBkGndMonitor "C:\Program Files\Lenovo\HOTKEY\extapsup.exe" "C:\Windows\System32\rundll32.exe" "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp "C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe" "C:\Program Files\CONEXANT\ForteConfig\fmapp.exe" "C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe" "C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe" "C:\Windows\System32\TpShocks.exe" "C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe" "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun "C:\Users\Jonas\AppData\Local\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON "C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE" "C:\Users\Jonas\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" "C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe" /analysis "C:\Program Files (x86)\iTunes\iTunesHelper.exe" "C:\Users\Jonas\AppData\Local\Pokki\Engine\HostAppService.exe" "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup "C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup "C:\Program Files (x86)\Citrix\Receiver\Receiver.exe" -autoupdate -startplugins -disableshowcontrolpanel "C:\Program Files\iPod\bin\iPodService.exe" "C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe" "C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding "C:\PROGRAM FILES (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe" "C:\Users\Jonas\AppData\Local\Pokki\Engine\HostAppService.exe" --type=renderer --disable-breakpad --disable-desktop-notifications --disable-logging --disable-speech-input --lang=en-US --force-fieldtrials=AsyncDns/disabled/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/ForceCompositingMode/disable/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/InfiniteCache/No/OmniboxDisallowInlineHQP/Standard/OmniboxSearchSuggest/12/OneClickSignIn/BlueOnWhite/Prefetch/ContentPrefetchPrefetchOff/Prerender/PrerenderNoUse/ProxyConnectionImpact/proxy_connections_32/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetchingLearning/SpeculativePrefetchingLearningEnabled/Test0PercentDefault/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-1-Percent/group_92/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/default/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/last_accessed_socket/ --noerrdialogs --disable-client-side-phishing-detection --disable-bundled-ppapi-flash --channel="6748.1.1848862274\685002141" /prefetch:3 "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" "C:\Users\Jonas\AppData\Local\Pokki\Engine\StartMenuIndexer.exe" "C:\Windows\System32\SettingSyncHost.exe" -Embedding "C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe" "C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe" "C:\Program Files\lenovo\QuickSnipService\QuickSnipService.exe" "C:\Program Files\lenovo\QuickSnipService\QuickSnipInput.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" "C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe" "C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\diMaster.dll" /prefetch:1 "C:\Program Files\Lenovo\Communications Utility\tpknrres.exe" "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" "C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe" \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe" /c /a /s UserSession "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="8044.0.1777876007\1376821787" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40 --gpu-vendor-id=0x8086 --gpu-device-id=0x0416 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3960 --ignored=" --type=renderer " /prefetch:822062411 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group5 pct:10e stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/StableBookmarksIndexURLs/PasswordGeneration/Disabled/QUIC/ControlForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Enabled/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_66/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=8044 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="8044.2.394521461\1445234344" /prefetch:673131151 C:\WINDOWS\system32\cmd.exe /c "C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coNatHst.exe" --parent-window=0 chrome-extension://mkfokfffehpeedafpekjeddnmnjhmcmk/ < \\.\pipe\chrome.nativeMessaging.in.32b5e139873a1ad5 > \\.\pipe\chrome.nativeMessaging.out.32b5e139873a1ad5 \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coNatHst.exe" --parent-window=0 chrome-extension://mkfokfffehpeedafpekjeddnmnjhmcmk/ "C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.89\nacl64" --type=nacl-broker --channel="8044.5.41904397\1275179685" /prefetch:-875166825 "C:\Program Files (x86)\Google\Chrome\Application\41.0.2272.89\nacl64.exe" --type=nacl-loader --channel="8044.4.1836140047\743730396" --ignored=" --type=renderer " /prefetch:-1502398898 "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE" "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group5 pct:10e stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/StableBookmarksIndexURLs/PasswordGeneration/Disabled/QUIC/ControlForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Enabled/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_66/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=8044 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="8044.6.917839424\130543747" /prefetch:673131151 C:\windows\system32\rundll32.exe C:\windows\system32\pla.dll,PlaHost "LSC Memory" "0x1678_0x20a0_0x55f84614" "C:\WINDOWS\ImmersiveControlPanel\SystemSettings.exe" -ServerName:microsoft.windows.immersivecontrolpanel C:\WINDOWS\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding "C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe" "C:\Program Files\Lenovo\Communications Utility\cammute.exe" "C:\Program Files\Lenovo\Communications Utility\vcamsvchlpr.exe" "C:\Program Files\Lenovo\Communications Utility\tpknrsvc.exe" "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5828 CREDAT:78849 /prefetch:2 C:\WINDOWS\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF} "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5828 CREDAT:1185041 /prefetch:2 "C:\WINDOWS\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server C:\Windows\System32\RuntimeBroker.exe -Embedding "C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2856834796-3624118678-1303184682-100233_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2856834796-3624118678-1303184682-100233 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1" "C:\Program Files\Lenovo Fingerprint Reader\SwipeMonitor.exe" ytidilav \??\C:\WINDOWS\system32\conhost.exe 0x4 "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group5 pct:10e stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/StableBookmarksIndexURLs/PasswordGeneration/Disabled/QUIC/ControlForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Enabled/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_66/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_13/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Enabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --font-cache-shared-mem-suffix=8044 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="8044.9.931844895\1860761266" /prefetch:673131151 "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5828 CREDAT:3093580 /prefetch:2 "C:\Program Files\Microsoft Office\Office15\WINWORD.EXE" -Embedding "C:\WINDOWS\system32\SearchFilterHost.exe" 0 588 592 600 65536 596 C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} C:\WINDOWS\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} "C:\Users\Jonas\Desktop\RSITx64.exe" ======Scheduled tasks folder====== C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\WINDOWS\tasks\Synaptics TouchPad Enhancements.job - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-02-10 218776] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}] Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll [2014-09-20 917856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-01 256456] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14 2117216] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2015-01-21 2334928] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-02-10 153248] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}] Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll [2014-09-20 655200] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-01 194504] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}] Skype Click to Call for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL [2015-01-21 1729744] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine64\21.6.0.32\coIEPlg.dll [2014-09-20 917856] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-01 256456] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\coIEPlg.dll [2014-09-20 655200] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-01 194504] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RtsCM"=C:\WINDOWS\RTSCM64.EXE [2013-03-21 140872] "IgfxTray"=C:\windows\system32\igfxtray.exe [2014-10-04 457616] "HotKeysCmds"=C:\windows\system32\hkcmd.exe [] "Persistence"=C:\windows\system32\igfxpers.exe [] "LenovoOptMouseUpdate"=C:\Program Files\Lenovo\HOTKEY\extapsup.exe [2013-06-20 255480] "BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [2013-05-21 7830328] "cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [2013-03-15 900704] "ForteConfig"=C:\Program Files\Conexant\ForteConfig\fmapp.exe [2010-10-26 49056] "SmartAudio"=C:\Program Files\CONEXANT\SAII\SACpl.exe [2012-06-13 1647616] "TpShocks"=C:\WINDOWS\system32\TpShocks.exe [2013-06-21 382248] "LnvMobHotspotClient"=C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [2014-08-12 937968] "LENOVO.TPKNRRES"=C:\Program Files\Lenovo\Communications Utility\LibStartStub.dll [2014-09-30 89544] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-07-09 2986224] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2015-01-23 31090272] "Pokki"=C:\Users\Jonas\AppData\Local\Pokki\Engine\HostAppServiceUpdater.exe [2015-01-31 10355528] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Application Restart #1"=C:\Users\Jonas\AppData\Local\Pokki\Engine\HostAppService.exe [2015-02-19 7846216] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2013-05-16 134616] "Fastboot"=C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [2014-04-20 735304] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152] "iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-10-15 157480] "CitrixReceiver"=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk [] "ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2014-11-27 407904] "Redirector"=C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [2014-11-27 153952] C:\Users\Jonas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Dropbox.lnk - C:\Users\Jonas\AppData\Roaming\Dropbox\bin\Dropbox.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "VIDC.YUY2"=msyuv.dll "vidc.i420"=iyuv_32.dll "msacm.msgsm610"=msgsm32.acm "msacm.msg711"=msg711.acm "VIDC.YVYU"=msyuv.dll "VIDC.YVU9"=tsbyuv.dll "wavemapper"=msacm32.drv "midimapper"=midimap.dll "VIDC.UYVY"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.mrle"=msrle32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "vidc.msvc"=msvidc32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "MSVideo8"=VfWWDM32.dll ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-03-13 12:31:42 ----A---- C:\WINDOWS\system32\WPRO_41_2001woem.tmp 2015-03-11 20:07:42 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll 2015-03-11 20:07:42 ----A---- C:\WINDOWS\system32\SHCore.dll 2015-03-11 20:07:35 ----A---- C:\WINDOWS\SYSWOW64\calc.exe 2015-03-11 20:07:35 ----A---- C:\WINDOWS\system32\calc.exe 2015-03-11 20:07:33 ----A---- C:\WINDOWS\system32\photowiz.dll 2015-03-11 20:07:32 ----A---- C:\WINDOWS\SYSWOW64\photowiz.dll 2015-03-11 20:07:22 ----A---- C:\WINDOWS\system32\localspl.dll 2015-03-11 20:07:21 ----A---- C:\WINDOWS\system32\win32spl.dll 2015-03-11 20:07:20 ----A---- C:\WINDOWS\SYSWOW64\msftedit.dll 2015-03-11 20:07:20 ----A---- C:\WINDOWS\system32\msftedit.dll 2015-03-11 20:07:19 ----A---- C:\WINDOWS\system32\dwmcore.dll 2015-03-11 20:07:18 ----A---- C:\WINDOWS\SYSWOW64\dwmcore.dll 2015-03-11 20:07:18 ----A---- C:\WINDOWS\system32\drivers\ndis.sys 2015-03-11 20:07:16 ----A---- C:\WINDOWS\system32\mfc42u.dll 2015-03-11 20:07:16 ----A---- C:\WINDOWS\system32\D3DCompiler_47.dll 2015-03-11 20:07:15 ----A---- C:\WINDOWS\SYSWOW64\mfc42u.dll 2015-03-11 20:07:15 ----A---- C:\WINDOWS\SYSWOW64\mfc42.dll 2015-03-11 20:07:15 ----A---- C:\WINDOWS\system32\mfc42.dll 2015-03-11 20:07:14 ----A---- C:\WINDOWS\SYSWOW64\D3DCompiler_47.dll 2015-03-11 20:07:14 ----A---- C:\WINDOWS\SYSWOW64\atlthunk.dll 2015-03-11 20:07:06 ----A---- C:\WINDOWS\system32\drivers\rfcomm.sys 2015-03-11 20:07:06 ----A---- C:\WINDOWS\system32\drivers\hidbth.sys 2015-03-11 20:07:05 ----A---- C:\WINDOWS\SYSWOW64\StorageContextHandler.dll 2015-03-11 20:07:05 ----A---- C:\WINDOWS\system32\WSShared.dll 2015-03-11 20:07:05 ----A---- C:\WINDOWS\system32\StorageContextHandler.dll 2015-03-11 20:07:04 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll 2015-03-11 20:07:04 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-03-11 20:07:04 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-03-11 20:07:02 ----A---- C:\WINDOWS\SYSWOW64\eapphost.dll 2015-03-11 20:07:02 ----A---- C:\WINDOWS\SYSWOW64\eappgnui.dll 2015-03-11 20:07:02 ----A---- C:\WINDOWS\SYSWOW64\eappcfg.dll 2015-03-11 20:07:02 ----A---- C:\WINDOWS\SYSWOW64\eapp3hst.dll 2015-03-11 20:07:02 ----A---- C:\WINDOWS\SYSWOW64\authui.dll 2015-03-11 20:07:02 ----A---- C:\WINDOWS\system32\eapphost.dll 2015-03-11 20:07:02 ----A---- C:\WINDOWS\system32\eappgnui.dll 2015-03-11 20:07:02 ----A---- C:\WINDOWS\system32\eappcfg.dll 2015-03-11 20:07:02 ----A---- C:\WINDOWS\system32\eapp3hst.dll 2015-03-11 20:07:02 ----A---- C:\WINDOWS\system32\authui.dll 2015-03-11 20:07:01 ----A---- C:\WINDOWS\SYSWOW64\MrmCoreR.dll 2015-03-11 20:07:01 ----A---- C:\WINDOWS\system32\MrmCoreR.dll 2015-03-11 20:07:01 ----A---- C:\WINDOWS\system32\LockScreenContentServer.exe 2015-03-11 20:06:59 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe 2015-03-11 20:06:59 ----A---- C:\WINDOWS\explorer.exe 2015-03-11 20:06:52 ----A---- C:\WINDOWS\SYSWOW64\winshfhc.dll 2015-03-11 20:06:52 ----A---- C:\WINDOWS\system32\winshfhc.dll 2015-03-11 20:06:52 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys 2015-03-11 20:06:52 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys 2015-03-11 20:06:52 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys 2015-03-11 17:39:57 ----SHD---- C:\Config.Msi 2015-03-11 16:33:37 ----A---- C:\WINDOWS\SYSWOW64\atmlib.dll 2015-03-11 16:33:37 ----A---- C:\WINDOWS\SYSWOW64\atmfd.dll 2015-03-11 16:33:37 ----A---- C:\WINDOWS\system32\atmlib.dll 2015-03-11 16:33:37 ----A---- C:\WINDOWS\system32\atmfd.dll 2015-03-11 16:33:35 ----A---- C:\WINDOWS\SYSWOW64\ntdll.dll 2015-03-11 16:33:35 ----A---- C:\WINDOWS\system32\ntoskrnl.exe 2015-03-11 16:33:35 ----A---- C:\WINDOWS\system32\ntdll.dll 2015-03-11 16:33:33 ----A---- C:\WINDOWS\system32\win32k.sys 2015-03-11 16:33:32 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll 2015-03-11 16:33:32 ----A---- C:\WINDOWS\system32\schannel.dll 2015-03-11 16:33:30 ----A---- C:\WINDOWS\system32\rdpcorets.dll 2015-03-11 16:33:29 ----A---- C:\WINDOWS\system32\rdpudd.dll 2015-03-11 16:33:27 ----A---- C:\WINDOWS\system32\ubpm.dll 2015-03-11 16:33:20 ----A---- C:\WINDOWS\system32\mshtml.dll 2015-03-11 16:33:19 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll 2015-03-11 16:33:18 ----A---- C:\WINDOWS\system32\jscript9.dll 2015-03-11 16:33:17 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll 2015-03-11 16:33:17 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll 2015-03-11 16:33:17 ----A---- C:\WINDOWS\system32\ieframe.dll 2015-03-11 16:33:16 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll 2015-03-11 16:33:16 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll 2015-03-11 16:33:16 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll 2015-03-11 16:33:16 ----A---- C:\WINDOWS\system32\wininet.dll 2015-03-11 16:33:16 ----A---- C:\WINDOWS\system32\urlmon.dll 2015-03-11 16:33:16 ----A---- C:\WINDOWS\system32\inetcomm.dll 2015-03-11 16:33:16 ----A---- C:\WINDOWS\system32\iertutil.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\system32\webcheck.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\system32\vbscript.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\system32\mshtmled.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\system32\MshtmlDac.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\system32\msfeeds.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\system32\jscript9diag.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\system32\jscript.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\system32\iepeers.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\system32\iedkcs32.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\system32\ieapfltr.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\system32\dxtrans.dll 2015-03-11 16:33:15 ----A---- C:\WINDOWS\system32\actxprxy.dll 2015-03-11 16:33:09 ----A---- C:\WINDOWS\SYSWOW64\WindowsCodecs.dll 2015-03-11 16:33:09 ----A---- C:\WINDOWS\system32\WindowsCodecs.dll 2015-03-11 16:33:08 ----A---- C:\WINDOWS\system32\shell32.dll 2015-03-11 16:33:07 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll 2015-03-11 16:33:05 ----A---- C:\WINDOWS\SYSWOW64\WMPhoto.dll 2015-03-11 16:33:05 ----A---- C:\WINDOWS\SYSWOW64\msctf.dll 2015-03-11 16:33:05 ----A---- C:\WINDOWS\system32\WMPhoto.dll 2015-03-11 16:33:05 ----A---- C:\WINDOWS\system32\msctf.dll 2015-03-07 16:09:25 ----D---- C:\rsit 2015-03-07 16:09:25 ----D---- C:\Program Files\trend micro 2015-02-17 15:30:04 ----A---- C:\WINDOWS\system32\FM20.DLL ======List of files/folders modified in the last 1 month====== 2015-03-13 15:27:15 ----D---- C:\Users\Jonas\AppData\Roaming\Skype 2015-03-13 15:27:10 ----D---- C:\WINDOWS\system32\sru 2015-03-13 13:44:57 ----D---- C:\WINDOWS\AppReadiness 2015-03-13 12:51:01 ----D---- C:\WINDOWS\Prefetch 2015-03-13 12:47:45 ----D---- C:\WINDOWS\Temp 2015-03-13 12:44:31 ----D---- C:\WINDOWS\Microsoft.NET 2015-03-13 12:38:12 ----RD---- C:\WINDOWS\System32 2015-03-13 12:38:12 ----D---- C:\WINDOWS\Inf 2015-03-13 12:38:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2015-03-13 12:34:44 ----SHD---- C:\System Volume Information 2015-03-13 12:33:22 ----D---- C:\Users\Jonas\AppData\Roaming\Dropbox 2015-03-13 12:31:26 ----D---- C:\ProgramData\Validity 2015-03-13 12:03:42 ----D---- C:\WINDOWS\SysWOW64 2015-03-13 11:25:58 ----D---- C:\WINDOWS\LiveKernelReports 2015-03-13 11:12:14 ----D---- C:\WINDOWS\system32\NDF 2015-03-13 11:09:48 ----D---- C:\WINDOWS\system32\config 2015-03-13 11:06:39 ----D---- C:\WINDOWS\WinSxS 2015-03-13 10:59:11 ----D---- C:\Program Files\Windows Defender 2015-03-13 10:59:10 ----D---- C:\WINDOWS\system32\drivers 2015-03-13 10:59:10 ----D---- C:\Program Files (x86)\Windows Defender 2015-03-13 10:59:04 ----RD---- C:\WINDOWS\ToastData 2015-03-13 10:59:04 ----D---- C:\WINDOWS\SYSWOW64\nl-NL 2015-03-13 10:59:04 ----D---- C:\WINDOWS\system32\nl-NL 2015-03-13 10:59:02 ----D---- C:\WINDOWS\WinStore 2015-03-13 10:59:00 ----D---- C:\Windows 2015-03-13 10:58:58 ----D---- C:\Program Files\Internet Explorer 2015-03-13 10:58:58 ----D---- C:\Program Files (x86)\Internet Explorer 2015-03-13 10:58:54 ----D---- C:\WINDOWS\system32\DriverStore 2015-03-12 18:16:31 ----D---- C:\Users\Jonas\AppData\Roaming\vlc 2015-03-12 16:52:23 ----D---- C:\Users\Jonas\AppData\Roaming\Nitro PDF 2015-03-11 22:15:08 ----D---- C:\WINDOWS\CbsTemp 2015-03-11 21:09:39 ----D---- C:\WINDOWS\system32\MRT 2015-03-11 21:05:36 ----A---- C:\WINDOWS\system32\MRT.exe 2015-03-11 18:01:04 ----SHD---- C:\WINDOWS\Installer 2015-03-11 18:00:39 ----D---- C:\ProgramData\Microsoft Help 2015-03-11 17:46:43 ----RD---- C:\WINDOWS\assembly 2015-03-11 17:43:07 ----A---- C:\WINDOWS\win.ini 2015-03-11 16:27:38 ----D---- C:\WINDOWS\system32\catroot2 2015-03-11 14:05:42 ----HD---- C:\Program Files\WindowsApps 2015-03-10 14:33:48 ----D---- C:\WINDOWS\system32\drivers\UMDF 2015-03-10 14:26:12 ----D---- C:\Users\Jonas\AppData\Roaming\Apple Computer 2015-03-07 16:09:25 ----RD---- C:\Program Files 2015-03-07 13:44:04 ----D---- C:\Program Files (x86)\Mozilla Firefox 2015-03-06 10:44:02 ----D---- C:\WINDOWS\system32\wdi 2015-03-04 21:24:42 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe 2015-03-04 12:16:27 ----D---- C:\ProgramData\Skype 2015-03-04 12:16:26 ----RD---- C:\Program Files (x86)\Skype 2015-03-04 10:30:16 ----D---- C:\Program Files (x86)\TeamViewer 2015-02-22 16:47:36 ----D---- C:\Users\Jonas\AppData\Roaming\LSC 2015-02-18 14:22:26 ----D---- C:\WINDOWS\system32\Tasks 2015-02-14 17:31:06 ----D---- C:\WINDOWS\rescache ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 excsd;ExpressCache Storage Filter Driver; C:\WINDOWS\system32\DRIVERS\excsd.sys [2013-07-03 112912] R0 Fastboot;Fastboot; C:\WINDOWS\System32\DRIVERS\fastboot.sys [2014-04-20 61000] R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-08-02 644968] R0 IntelHSWPcc;IntelHSWPcc; C:\WINDOWS\System32\drivers\IntelPcc.sys [2013-04-24 101976] R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2013-12-27 32544] R0 Shockprf;Shockprf; C:\WINDOWS\System32\DRIVERS\Apsx64.sys [2013-06-20 150272] R0 TPDIGIMN;TPDIGIMN; C:\WINDOWS\System32\DRIVERS\ApsHM64.sys [2013-06-20 25856] R1 ctxusbm;Citrix USB Monitor Driver; C:\WINDOWS\system32\DRIVERS\ctxusbm.sys [2014-10-29 131256] R1 excfs;ExpressCache File System Filter Driver; C:\WINDOWS\system32\DRIVERS\excfs.sys [2013-07-03 25872] R1 SMIDriver;SMIDriver; C:\WINDOWS\system32\drivers\smi.sys [2014-07-21 19760] R1 TPPWRIF;TPPWRIF; C:\WINDOWS\System32\drivers\Tppwr64v.sys [2014-08-22 20736] R3 AMPPAL;@oem53.inf,%AMPPAL.SVCDESC%;Intel(r) Centrino(r) Wireless Bluetooth(r) + High Speed Virtuele adapter; C:\WINDOWS\System32\drivers\AMPPAL.sys [2013-04-09 164080] R3 BHDrvx64;BHDrvx64; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.5.0.19\Definitions\BASHDefs\20150309.001\BHDrvx64.sys [2015-02-03 1622744] R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator-service; C:\WINDOWS\System32\drivers\BthEnum.sys [2014-10-29 53248] R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy-stuurprogramma; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-09-24 226304] R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth-apparaat (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2014-09-24 118272] R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;USB-stuurprogramma voor Bluetooth-radio; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-10-29 81920] R3 btmhsf;btmhsf; C:\WINDOWS\system32\DRIVERS\btmhsf.sys [2013-08-02 1385272] R3 ccSet_NIS;NIS Settings Manager; C:\WINDOWS\system32\drivers\NISx64\1506000.020\ccSetx64.sys [2014-02-20 162392] R3 CnxtHdAudService;@oem55.inf,%UAAFunctionDriverForHdAudio.SvcDesc%;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT64.sys [2013-07-03 1688280] R3 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2014-11-25 487216] R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2014-11-25 142640] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-10-03 33240] R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys [2014-11-14 60112] R3 ibtusb;@oem51.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R) 4.0 + HS-adapter; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [2013-08-20 113096] R3 IDSVia64;IDSVia64; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.5.0.19\Definitions\IPSDefs\20150312.003\IDSvia64.sys [2015-02-06 669400] R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2014-10-04 4753336] R3 ikbevent;Intel Upper keyboard Class Filter Driver; C:\WINDOWS\system32\DRIVERS\ikbevent.sys [2013-04-15 21048] R3 imsevent;Intel Upper Mouse Class Filter Driver; C:\WINDOWS\system32\DRIVERS\imsevent.sys [2013-04-15 21048] R3 ISCT;@oem69.inf,%ISCT.DeviceDesc%;Intel(R) Smart Connect Technology Device Driver; C:\WINDOWS\System32\drivers\ISCTD64.sys [2013-04-15 46568] R3 iwdbus;@oem63.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2014-09-19 27000] R3 LnvHIDHW;@oem86.inf,%LnvHIDHW%;Lenovo HID Mini-driver for Hardware Radio Switch; C:\WINDOWS\System32\drivers\LnvHIDHW.sys [2014-04-07 29496] R3 MEIx64;@oem57.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2013-05-16 64624] R3 NAVENG;NAVENG; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.5.0.19\Definitions\VirusDefs\20150312.016\ENG64.SYS [2015-03-12 129752] R3 NAVEX15;NAVEX15; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.5.0.19\Definitions\VirusDefs\20150312.016\EX64.SYS [2015-03-12 2137304] R3 NETwNb64;@oem80.inf,___ %NIC_Service_DispName_WINB_64%;___ Intel(R) Wireless adapter stuurprogramma onder Windows 8.1 64 Bit; C:\WINDOWS\system32\DRIVERS\NETwbw02.sys [2013-09-26 3589600] R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2013-12-27 11311392] R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2015-01-30 167424] R3 RTL8168;@oem56.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-07-26 827096] R3 RTSPER;@oem70.inf,%Rts5227PER%;Realtek PCIE Card Reader - PER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [2013-06-24 418008] R3 rtsuvc;@oem42.inf,%rtsuvc.DeviceDesc%;Integrated Camera; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [2013-03-21 8243272] R3 SmbDrvI;SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [2013-07-09 33008] R3 SRTSP;Symantec Real Time Storage Protection x64; C:\WINDOWS\System32\Drivers\NISx64\1506000.020\SRTSP64.SYS [2014-08-26 876248] R3 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\WINDOWS\system32\drivers\NISx64\1506000.020\SRTSPX64.SYS [2014-08-26 37592] R3 SymDS;Symantec Data Store; C:\WINDOWS\system32\drivers\NISx64\1506000.020\SYMDS64.SYS [2014-07-23 493656] R3 SymEFA;Symantec Extended File Attributes; C:\WINDOWS\system32\drivers\NISx64\1506000.020\SYMEFA64.SYS [2014-07-23 1148120] R3 SymEvent;SymEvent; \??\C:\windows\system32\Drivers\SYMEVENT64x86.SYS [2015-01-02 177752] R3 SymIRON;Symantec Iron Driver; C:\WINDOWS\system32\drivers\NISx64\1506000.020\Ironx64.SYS [2014-08-06 266968] R3 SymNetS;Symantec Network Security WFP Driver; C:\WINDOWS\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS [2014-07-23 593112] R3 SynTP;@oem67.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2013-07-09 532720] R3 usb3Hub;@oem64.inf,%usb3Hub.SVCDESC%;UoIP Hub; C:\WINDOWS\System32\drivers\usb3Hub.sys [2013-04-12 207256] S0 SymELAM;Symantec ELAM Driver; C:\WINDOWS\system32\drivers\NISx64\1506000.020\SymELAM.sys [2014-07-23 23568] S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Stuurprogramma voor Bluetooth-poort; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-10-29 1198080] S3 intaud_WaveExtensible;@oem62.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2014-09-19 38264] S3 IntcDAud;@oem5.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-08-08 452088] S3 NETwNe64;@oem71.inf,%NIC_Service_DispName_WIN8_64%;Intel(R) Wireless adapter stuurprogramma onder Windows 8 64 Bit; C:\WINDOWS\system32\DRIVERS\Netwew02.sys [2013-10-09 3648480] S3 SWIX64;SWIX64; \??\C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [2012-09-13 33856] S3 USBAAPL64;@oem82.inf,%USBAAPL64.SvcDesc%;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl64.sys [2014-08-15 54784] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088] R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2013-04-09 772064] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-10-07 60744] R2 AVControlCenter;AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [2014-09-30 613320] R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2013-06-25 1132920] R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2013-04-23 1153400] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184] R2 BrcmSetSecurity;BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [2013-04-12 101536] R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-09-13 135984] R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176] R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520] R2 CxAudMsg;Conexant Audio Message Service; C:\windows\system32\CxAudMsg64.exe [2012-12-12 205560] R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2013-08-29 626416] R2 ExpressCache;ExpressCache; C:\Program Files\Condusiv Technologies\ExpressCache\ExpressCache.exe [2013-07-03 107792] R2 FastbootService;FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [2014-04-20 137288] R2 IBMPMSVC;@oem74.inf,%ibm.svcDesc0%;Lenovo PM Service; C:\WINDOWS\system32\ibmpmsvc.exe [2014-11-14 84208] R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\WINDOWS\system32\igfxCUIService.exe [2014-10-04 329104] R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-02-13 731648] R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management;Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [2013-08-20 155448] R2 ISCTAgent;Intel(R) Smart Connect Technology Agent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [2013-04-15 182760] R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-05-16 169432] R2 Lenovo QuickSnip Service;Lenovo QuickSnip Service; C:\Program Files\lenovo\QuickSnipService\QuickSnipService.exe [2013-06-05 219976] R2 Lenovo Settings Service;Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2014-08-29 2014704] R2 Lenovo System Agent Service;Lenovo System Agent Service; C:\Program Files\lenovo\SystemAgent\SystemAgentService.exe [2013-06-05 562504] R2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2013-06-24 110072] R2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [2012-08-11 136288] R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-05-16 366552] R2 LocationTaskManager;LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [2014-06-10 470000] R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [2014-09-21 276376] R2 NitroDriverReadSpool8;NitroPDFDriverCreatorReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [2013-08-18 230408] R2 nlsX86cc;Nalpeiron Licensing Service; C:\windows\SysWOW64\NLSSRV32.EXE [2013-08-18 69640] R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2013-10-28 920864] R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-12-27 1364256] R2 QuickControlMasterSvc;Lenovo QuickControl Master Service; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [2013-07-16 59384] R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2013-08-29 149744] R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-02-17 5436176] R2 TPHKLOAD;Lenovo Hotkey Client Loader; C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe [2013-06-20 125432] R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696] R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2014-10-15 643880] R3 LENOVO.CAMMUTE;Lenovo AVFramework Camera Privacy Controller; C:\Program Files\Lenovo\Communications Utility\cammute.exe [2014-09-30 531912] R3 LENOVO.TPKNRSVC;Lenovo AVFramework Microphone Volume Controller and Dolby Interface; C:\Program Files\Lenovo\Communications Utility\tpknrsvc.exe [2014-09-30 534984] R3 LENOVO.TVTVCAM;Lenovo AVFramework Virtual Camera Controller Service; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [2014-09-30 717768] R3 Power Manager DBC Service;Lenovo Settings Power Service; C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [2014-08-22 1668896] R3 QuickControlService;Lenovo QuickControl Service; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [2013-07-16 138232] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-02 107912] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-01-02 315488] S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\WINDOWS\System32\svchost.exe [2014-10-29 38792] S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2014-10-04 279952] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-01-02 107912] S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2015-01-02 194032] S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-02-13 820184] S3 intelsba;Intel(R) Small Business Advantage; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [2013-07-25 54976] S3 LnvHotSpotSvc;Lenovo Settings Mobile Hotspot Service; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [2014-08-12 474608] S3 LSCWinService;LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [2013-09-25 1674720] S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2013-08-29 273136] S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 178760] S3 SUService;System Update; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [2013-11-28 22888] S3 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\WINDOWS\System32\TPHDEXLG64.exe [2013-06-20 49920] -----------------EOF-----------------