Logfile of random's system information tool 1.10 (written by random/random) Run by pc at 2015-04-06 16:40:48 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 80 GB (70%) free of 114 GB Total RAM: 16342 MB (88% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:41:25, on 6-4-2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17689) Boot mode: Normal Running processes: C:\Program Files (x86)\TeamViewer\TeamViewer.exe C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe C:\Windows\SysWOW64\CTHELPER.EXE C:\Program Files (x86)\Creative Professional\E-MU PatchMix DSP\EmuPMixDSP.exe C:\Users\pc\Desktop\VUMeter.exe C:\Program Files\trend micro\pc.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office15\URLREDIR.DLL O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~3\Office15\GROOVEEX.DLL O4 - HKLM\..\Run: [AsioThk32Reg] REGSVR32.EXE /S CTASIO.DLL O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: CodeMeter Control Center.lnk = C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra button: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra 'Tools' menuitem: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra button: (no name) - {59F39B89-94C3-44C5-B903-9A6B85C32921} - (no file) (HKCU) O9 - Extra 'Tools' menuitem: SimpleNewTab - Change Tab Custom Page... - {59F39B89-94C3-44C5-B903-9A6B85C32921} - (no file) (HKCU) O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: CodeMeter Runtime Server (CodeMeter.exe) - WIBU-SYSTEMS AG - C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe O23 - Service: Encrypting File System (EFS) (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel(R) PROSet Monitoring Service - Unknown owner - C:\Windows\system32\IProsetMonitor.exe (file missing) O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: Print Spooler (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: Software Protection (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: Credential Manager (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) -- End of file - 9247 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch winlogon.exe "C:\Windows\system32\nvvsvc.exe" C:\Windows\system32\svchost.exe -k RPCSS "C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe" C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k LocalService "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\Windows\system32\nvvsvc.exe -session -first C:\Windows\system32\svchost.exe -k NetworkService "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE C:\Windows\System32\spoolsv.exe "taskhost.exe" C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe" C:\Windows\system32\svchost.exe -k wcssvc C:\Windows\System32\svchost.exe -k WerSvcGroup "C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe" "C:\Program Files\Microsoft Office\Office15\MsoSync.exe" "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR "C:\Program Files (x86)\TeamViewer\TeamViewer.exe" "C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe" "C:\Windows\System32\CTHELPER.EXE" "C:\Program Files (x86)\Creative Professional\E-MU PatchMix DSP\EmuPMixDSP.exe" "C:\Program Files (x86)\TeamViewer\tv_w32.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log "C:\Program Files (x86)\TeamViewer\tv_x64.exe" --action hooks --log C:\Program Files (x86)\TeamViewer\TeamViewer10_Logfile.log "c:\program files (x86)\teamviewer\TeamViewer_Desktop.exe" --IPCport 5939 "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe" C:\Windows\servicing\TrustedInstaller.exe "C:\Users\pc\Desktop\VUMeter.exe" "C:\Users\pc\Desktop\RSITx64.exe" C:\Windows\system32\wbem\wmiprvse.exe "C:\Program Files\Internet Explorer\iexplore.exe" http://www.trendmicro.com/go/hjt/error/?function%3DmodRegistry%5FIniGetString%26params%3DsFile%3Dwin%2Eini%2C+sSection%3Dwindows%2C+sValue%3Dload%26errorno%3D5%26errortxtInvalid+procedure+call+or+argument%26winver%3DWindows+NT+6%2E01%2E3505%26iever%3D9%2E11%2E9600%2E17691%26hjtver%3D2%2E0%2E4 "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3632 CREDAT:275457 /prefetch:2 ======Scheduled tasks folder====== C:\Windows\tasks\trivia_games_notification_service.job - C:\Program Files (x86)\trivia games\trivia_games_notification_service.exe /url='http://cdn.selectbestopt.com/notf_sys/index.html' /crregname='trivia games' /appid='73143' /srcid='2913' /bic='04850723038cf2b6738b532579b2aa71' /verifier='62ac471a26dda432c3978867a006f927' /installerversion='1.50.3.10' /statsdomain='http://stats.buildomserv.com/data.gif?' /errorsdomain='http://stats.buildomserv.com/data.gif?' /monetizationdomain='http://logs.buildomserv.com/monetization.gif?' /installationtime='1427912711' /runfrom='task' /brwtype='notbg' /postponedhours='6' C:\Windows\tasks\trivia_games_updating_service.job - C:\Program Files (x86)\trivia games\trivia_games_updating_service.exe /campid=2913 /verid=1 /url=http://cdn.buildomserv.com/txt/@CAMPID@/@VER@/file.txt /appid=73143 /taskname=trivia_games_updating_service /funurl=http://stats.buildomserv.com C:\Windows\tasks\xd2DAEqrIvvWqDXBh2p.job - C:\Users\pc\AppData\Roaming\xd2DAEqrIvvWqDXBh2p.exe --c=fbA/MuO46QHCpaIoAiZua6TLjAMdUJFAm3LsSnNa8kBJIySChaFl3jMj/t2x+cFQGeGFN9flNuUa5GPckDyJA0w1zLWGC8XIPF4ZyiX4DVEJnL0g7G3mWCaQBVc+wCxwYL0azdiUswtnvCcOSgLPUbnuzJ7RDVJwD6qrNKkRhewNZR1jlEPvg9h71AEDhvekkYjUOphLbA8QMsYRmFLCsT9GTqwFvN/KQ39InWc8wsxxyfPK8rVKjpqBk2p5elA6aFGe7LuW8nyfqTR7kKx0o4NW/xujT7TEpqJ6lDHul9DcKt5HCOCeRfjC7GGlqEiS3bh9h/VxWDqOnIAP0blYwQ== =========Mozilla firefox========= ProfilePath - C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\v7mjlcuz.default [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 17.0.0.134 Plugin "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0] "Description"=Picasa3 plugin "Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42] "Description"=Intel IPT WebApi plugin "Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater] "Description"=This plugin updates Intel WebAPI component "Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0] "Description"=Microsoft Lync Plug-in for Firefox "Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3] "Description"=VLC Multimedia Plugin "Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 17.0.0.134 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"= "Path"=C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL C:\Program Files (x86)\Mozilla Firefox\plugins\ npMeetingJoinPluginOC.dll ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-01-23 218784] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL [2014-01-23 881880] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL [2014-01-23 2333400] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-01-21 153248] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Aanmeldhulp voor Microsoft-account - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office15\URLREDIR.DLL [2014-01-21 707800] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~3\Office15\GROOVEEX.DLL [2014-01-21 1728216] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Persistence"=C:\Windows\system32\igfxpers.exe [2011-04-20 416024] "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-04-20 392472] "COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-03-11 9569096] "MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2010-11-30 1436224] "IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-04-20 168216] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-03-13 7451928] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20 1021128] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Speed Launcher] 1418853123 [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\COMODO] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CPA] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^pc^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk] C:\PROGRA~2\MAGICD~1\MAGICD~1.EXE [] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "AsioThk32Reg"=REGSVR32.EXE /S CTASIO.DLL [] "CTHelper"=C:\Windows\system32\CTHELPER.EXE [2010-02-23 27648] "CTxfiHlp"=C:\Windows\system32\CTXFIHLP.EXE [2010-02-23 24576] "IMSS"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2000-01-01 133440] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup CodeMeter Control Center.lnk - C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\Windows\system32\guard64.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\Windows\system32\igfxdev.dll [2011-04-15 385024] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=0 "ConsentPromptBehaviorUser"=3 "EnableLUA"=0 "EnableUIADesktopToggle"=0 "PromptOnSecureDesktop"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe"="C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe:*:Enabled:CodeMeter Runtime Server" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe"="C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe:*:Enabled:CodeMeter Runtime Server" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "vidc.uyvy"=msyuv.dll "vidc.yuy2"=msyuv.dll "vidc.yvyu"=msyuv.dll "vidc.iyuv"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "vidc.yvu9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "wave3"=wdmaud.drv "midi3"=wdmaud.drv "mixer3"=wdmaud.drv "wave4"=wdmaud.drv "midi4"=wdmaud.drv "mixer4"=wdmaud.drv "wave5"=wdmaud.drv "midi5"=wdmaud.drv "mixer5"=wdmaud.drv "wave6"=wdmaud.drv "midi6"=wdmaud.drv "mixer6"=wdmaud.drv "wave7"=wdmaud.drv "midi7"=wdmaud.drv "mixer7"=wdmaud.drv "aux2"=wdmaud.drv "wave8"=wdmaud.drv "midi8"=wdmaud.drv "mixer8"=wdmaud.drv "aux3"=wdmaud.drv "wave9"=wdmaud.drv "midi9"=wdmaud.drv "mixer9"=wdmaud.drv "aux4"=wdmaud.drv "aux5"=wdmaud.drv "aux6"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2040-06-11 20:02:29 ----A---- C:\Windows\SYSWOW64\audcon.sys 2040-06-11 20:01:45 ----D---- C:\ProgramData\eLicenser 2015-04-06 16:40:48 ----D---- C:\rsit 2015-04-06 16:40:48 ----D---- C:\Program Files\trend micro 2015-04-05 23:33:53 ----D---- C:\Program Files\Defraggler 2015-04-05 23:33:10 ----D---- C:\Program Files\CCleaner 2015-04-05 23:27:44 ----A---- C:\TDSSKiller.3.0.0.44_05.04.2015_23.27.44_log.txt 2015-04-04 20:52:52 ----SD---- C:\Windows\SYSWOW64\GWX 2015-04-04 20:52:52 ----SD---- C:\Windows\system32\GWX 2015-04-04 18:02:21 ----D---- C:\Users\pc\AppData\Roaming\TeamViewer 2015-04-04 17:50:14 ----A---- C:\Windows\system32\TSWbPrxy.exe 2015-04-04 17:48:56 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2015-04-04 17:48:56 ----A---- C:\Windows\system32\mstscax.dll 2015-04-04 12:09:52 ----A---- C:\Windows\SYSWOW64\DWrite.dll 2015-04-04 12:09:52 ----A---- C:\Windows\system32\DWrite.dll 2015-04-03 23:43:59 ----D---- C:\Windows\system32\drivers\en-US 2015-04-03 23:38:32 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll 2015-04-03 23:37:55 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2015-04-03 23:37:55 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2015-04-03 23:37:54 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys 2015-04-03 23:37:46 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll 2015-04-03 23:37:46 ----A---- C:\Windows\SYSWOW64\tsgqec.dll 2015-04-03 23:37:46 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll 2015-04-03 23:37:46 ----A---- C:\Windows\system32\wksprtPS.dll 2015-04-03 23:37:46 ----A---- C:\Windows\system32\tsgqec.dll 2015-04-03 23:37:46 ----A---- C:\Windows\system32\MsRdpWebAccess.dll 2015-04-03 23:37:45 ----A---- C:\Windows\SYSWOW64\mstsc.exe 2015-04-03 23:37:45 ----A---- C:\Windows\system32\wksprt.exe 2015-04-03 23:37:45 ----A---- C:\Windows\system32\mstsc.exe 2015-04-03 23:37:44 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll 2015-04-03 23:37:44 ----A---- C:\Windows\system32\rdvidcrl.dll 2015-04-03 23:14:04 ----D---- C:\Program Files (x86)\Mozilla Firefox 2015-04-02 16:21:18 ----D---- C:\Program Files (x86)\Mozilla Thunderbird 2015-04-02 16:16:04 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2015-04-02 16:03:06 ----A---- C:\ntuser.dat 2015-03-11 20:31:48 ----A---- C:\Windows\system32\drivers\wdcsam64.sys 2015-03-11 10:30:15 ----A---- C:\Windows\SYSWOW64\lpk.dll 2015-03-11 10:30:15 ----A---- C:\Windows\SYSWOW64\fontsub.dll 2015-03-11 10:30:15 ----A---- C:\Windows\SYSWOW64\dciman32.dll 2015-03-11 10:30:15 ----A---- C:\Windows\SYSWOW64\atmlib.dll 2015-03-11 10:30:15 ----A---- C:\Windows\SYSWOW64\atmfd.dll 2015-03-11 10:30:15 ----A---- C:\Windows\system32\win32k.sys 2015-03-11 10:30:15 ----A---- C:\Windows\system32\lpk.dll 2015-03-11 10:30:15 ----A---- C:\Windows\system32\fontsub.dll 2015-03-11 10:30:15 ----A---- C:\Windows\system32\dciman32.dll 2015-03-11 10:30:15 ----A---- C:\Windows\system32\atmlib.dll 2015-03-11 10:30:15 ----A---- C:\Windows\system32\atmfd.dll 2015-03-11 10:30:13 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll 2015-03-11 10:30:13 ----A---- C:\Windows\SYSWOW64\blackbox.dll 2015-03-11 10:30:13 ----A---- C:\Windows\system32\drmv2clt.dll 2015-03-11 10:30:13 ----A---- C:\Windows\system32\blackbox.dll 2015-03-11 10:30:12 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll 2015-03-11 10:30:12 ----A---- C:\Windows\SYSWOW64\mf.dll 2015-03-11 10:30:12 ----A---- C:\Windows\system32\wmdrmsdk.dll 2015-03-11 10:30:12 ----A---- C:\Windows\system32\ntoskrnl.exe 2015-03-11 10:30:11 ----A---- C:\Windows\SYSWOW64\quartz.dll 2015-03-11 10:30:11 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2015-03-11 10:30:11 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2015-03-11 10:30:11 ----A---- C:\Windows\SYSWOW64\mfplat.dll 2015-03-11 10:30:11 ----A---- C:\Windows\SYSWOW64\evr.dll 2015-03-11 10:30:11 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll 2015-03-11 10:30:11 ----A---- C:\Windows\SYSWOW64\cryptui.dll 2015-03-11 10:30:11 ----A---- C:\Windows\SYSWOW64\cryptsp.dll 2015-03-11 10:30:11 ----A---- C:\Windows\SYSWOW64\crypt32.dll 2015-03-11 10:30:11 ----A---- C:\Windows\system32\winresume.exe 2015-03-11 10:30:11 ----A---- C:\Windows\system32\quartz.dll 2015-03-11 10:30:11 ----A---- C:\Windows\system32\pcasvc.dll 2015-03-11 10:30:11 ----A---- C:\Windows\system32\mfplat.dll 2015-03-11 10:30:11 ----A---- C:\Windows\system32\evr.dll 2015-03-11 10:30:11 ----A---- C:\Windows\system32\drmmgrtn.dll 2015-03-11 10:30:11 ----A---- C:\Windows\system32\drivers\PEAuth.sys 2015-03-11 10:30:11 ----A---- C:\Windows\system32\drivers\mountmgr.sys 2015-03-11 10:30:11 ----A---- C:\Windows\system32\cryptui.dll 2015-03-11 10:30:11 ----A---- C:\Windows\system32\cryptsp.dll 2015-03-11 10:30:11 ----A---- C:\Windows\system32\crypt32.dll 2015-03-11 10:30:10 ----A---- C:\Windows\SYSWOW64\wintrust.dll 2015-03-11 10:30:10 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe 2015-03-11 10:30:10 ----A---- C:\Windows\SYSWOW64\qdvd.dll 2015-03-11 10:30:10 ----A---- C:\Windows\SYSWOW64\msscp.dll 2015-03-11 10:30:10 ----A---- C:\Windows\SYSWOW64\msnetobj.dll 2015-03-11 10:30:10 ----A---- C:\Windows\SYSWOW64\mfps.dll 2015-03-11 10:30:10 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll 2015-03-11 10:30:10 ----A---- C:\Windows\SYSWOW64\cryptnet.dll 2015-03-11 10:30:10 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll 2015-03-11 10:30:10 ----A---- C:\Windows\SYSWOW64\AudioEng.dll 2015-03-11 10:30:10 ----A---- C:\Windows\SYSWOW64\appidapi.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\wintrust.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\winload.exe 2015-03-11 10:30:10 ----A---- C:\Windows\system32\srcore.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\smss.exe 2015-03-11 10:30:10 ----A---- C:\Windows\system32\rstrui.exe 2015-03-11 10:30:10 ----A---- C:\Windows\system32\rrinstaller.exe 2015-03-11 10:30:10 ----A---- C:\Windows\system32\qdvd.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\pcawrk.exe 2015-03-11 10:30:10 ----A---- C:\Windows\system32\pcadm.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\msscp.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\msnetobj.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\msmmsp.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\mfps.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\mf.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\drivers\appid.sys 2015-03-11 10:30:10 ----A---- C:\Windows\system32\cryptsvc.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\cryptnet.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\ci.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\audiosrv.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\AudioSes.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\AUDIOKSE.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\AudioEng.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\audiodg.exe 2015-03-11 10:30:10 ----A---- C:\Windows\system32\appidsvc.dll 2015-03-11 10:30:10 ----A---- C:\Windows\system32\appidpolicyconverter.exe 2015-03-11 10:30:10 ----A---- C:\Windows\system32\appidapi.dll 2015-03-11 10:30:09 ----A---- C:\Windows\SYSWOW64\srclient.dll 2015-03-11 10:30:09 ----A---- C:\Windows\SYSWOW64\mfpmp.exe 2015-03-11 10:30:09 ----A---- C:\Windows\SYSWOW64\mferror.dll 2015-03-11 10:30:09 ----A---- C:\Windows\SYSWOW64\AudioSes.dll 2015-03-11 10:30:09 ----A---- C:\Windows\SYSWOW64\apisetschema.dll 2015-03-11 10:30:09 ----A---- C:\Windows\system32\srclient.dll 2015-03-11 10:30:09 ----A---- C:\Windows\system32\setbcdlocale.dll 2015-03-11 10:30:09 ----A---- C:\Windows\system32\pcalua.exe 2015-03-11 10:30:09 ----A---- C:\Windows\system32\pcaevts.dll 2015-03-11 10:30:09 ----A---- C:\Windows\system32\mfpmp.exe 2015-03-11 10:30:09 ----A---- C:\Windows\system32\mferror.dll 2015-03-11 10:30:09 ----A---- C:\Windows\system32\EncDump.dll 2015-03-11 10:30:09 ----A---- C:\Windows\system32\csrsrv.dll 2015-03-11 10:30:09 ----A---- C:\Windows\system32\appidcertstorecheck.exe 2015-03-11 10:30:09 ----A---- C:\Windows\system32\apisetschema.dll 2015-03-11 10:30:03 ----A---- C:\Windows\system32\rdpudd.dll 2015-03-11 10:30:03 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll 2015-03-11 10:30:03 ----A---- C:\Windows\system32\rdpcorets.dll 2015-03-11 10:29:58 ----A---- C:\Windows\SYSWOW64\ubpm.dll 2015-03-11 10:29:58 ----A---- C:\Windows\system32\ubpm.dll 2015-03-11 10:29:58 ----A---- C:\Windows\system32\shell32.dll 2015-03-11 10:29:57 ----A---- C:\Windows\SYSWOW64\shell32.dll 2015-03-11 10:29:57 ----A---- C:\Windows\system32\schannel.dll 2015-03-11 10:29:57 ----A---- C:\Windows\system32\lsasrv.dll 2015-03-11 10:29:57 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2015-03-11 10:29:57 ----A---- C:\Windows\system32\drivers\cng.sys 2015-03-11 10:29:56 ----A---- C:\Windows\SYSWOW64\wdigest.dll 2015-03-11 10:29:56 ----A---- C:\Windows\SYSWOW64\TSpkg.dll 2015-03-11 10:29:56 ----A---- C:\Windows\SYSWOW64\sspicli.dll 2015-03-11 10:29:56 ----A---- C:\Windows\SYSWOW64\secur32.dll 2015-03-11 10:29:56 ----A---- C:\Windows\SYSWOW64\schannel.dll 2015-03-11 10:29:56 ----A---- C:\Windows\SYSWOW64\ncrypt.dll 2015-03-11 10:29:56 ----A---- C:\Windows\SYSWOW64\msv1_0.dll 2015-03-11 10:29:56 ----A---- C:\Windows\SYSWOW64\msobjs.dll 2015-03-11 10:29:56 ----A---- C:\Windows\SYSWOW64\msaudite.dll 2015-03-11 10:29:56 ----A---- C:\Windows\SYSWOW64\kerberos.dll 2015-03-11 10:29:56 ----A---- C:\Windows\SYSWOW64\credssp.dll 2015-03-11 10:29:56 ----A---- C:\Windows\SYSWOW64\auditpol.exe 2015-03-11 10:29:56 ----A---- C:\Windows\SYSWOW64\adtschema.dll 2015-03-11 10:29:56 ----A---- C:\Windows\system32\wdigest.dll 2015-03-11 10:29:56 ----A---- C:\Windows\system32\TSpkg.dll 2015-03-11 10:29:56 ----A---- C:\Windows\system32\sspisrv.dll 2015-03-11 10:29:56 ----A---- C:\Windows\system32\sspicli.dll 2015-03-11 10:29:56 ----A---- C:\Windows\system32\secur32.dll 2015-03-11 10:29:56 ----A---- C:\Windows\system32\ncrypt.dll 2015-03-11 10:29:56 ----A---- C:\Windows\system32\msv1_0.dll 2015-03-11 10:29:56 ----A---- C:\Windows\system32\msobjs.dll 2015-03-11 10:29:56 ----A---- C:\Windows\system32\msaudite.dll 2015-03-11 10:29:56 ----A---- C:\Windows\system32\lsass.exe 2015-03-11 10:29:56 ----A---- C:\Windows\system32\kerberos.dll 2015-03-11 10:29:56 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2015-03-11 10:29:56 ----A---- C:\Windows\system32\credssp.dll 2015-03-11 10:29:56 ----A---- C:\Windows\system32\auditpol.exe 2015-03-11 10:29:56 ----A---- C:\Windows\system32\adtschema.dll 2015-03-11 10:29:55 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll 2015-03-11 10:29:55 ----A---- C:\Windows\SYSWOW64\msctf.dll 2015-03-11 10:29:55 ----A---- C:\Windows\system32\WindowsCodecs.dll 2015-03-11 10:29:55 ----A---- C:\Windows\system32\msctf.dll 2015-03-11 10:29:54 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2015-03-11 10:29:54 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll 2015-03-11 10:29:54 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2015-03-11 10:29:54 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2015-03-11 10:29:54 ----A---- C:\Windows\system32\ieetwproxystub.dll 2015-03-11 10:29:54 ----A---- C:\Windows\system32\ieetwcollector.exe 2015-03-11 10:29:53 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2015-03-11 10:29:53 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2015-03-11 10:29:53 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2015-03-11 10:29:53 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll 2015-03-11 10:29:53 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2015-03-11 10:29:53 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2015-03-11 10:29:53 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-03-11 10:29:53 ----A---- C:\Windows\system32\iernonce.dll 2015-03-11 10:29:53 ----A---- C:\Windows\system32\ie4uinit.exe 2015-03-11 10:29:52 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2015-03-11 10:29:52 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2015-03-11 10:29:52 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2015-03-11 10:29:52 ----A---- C:\Windows\SYSWOW64\ieui.dll 2015-03-11 10:29:52 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2015-03-11 10:29:52 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2015-03-11 10:29:52 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2015-03-11 10:29:52 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2015-03-11 10:29:52 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2015-03-11 10:29:52 ----A---- C:\Windows\system32\urlmon.dll 2015-03-11 10:29:52 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2015-03-11 10:29:52 ----A---- C:\Windows\system32\msfeeds.dll 2015-03-11 10:29:52 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2015-03-11 10:29:52 ----A---- C:\Windows\system32\iedkcs32.dll 2015-03-11 10:29:52 ----A---- C:\Windows\system32\dxtrans.dll 2015-03-11 10:29:51 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll 2015-03-11 10:29:51 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2015-03-11 10:29:51 ----A---- C:\Windows\system32\iesetup.dll 2015-03-11 10:29:51 ----A---- C:\Windows\system32\iertutil.dll 2015-03-11 10:29:51 ----A---- C:\Windows\system32\ieapfltr.dll 2015-03-11 10:29:50 ----A---- C:\Windows\SYSWOW64\wininet.dll 2015-03-11 10:29:50 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2015-03-11 10:29:50 ----A---- C:\Windows\SYSWOW64\msrating.dll 2015-03-11 10:29:50 ----A---- C:\Windows\system32\jsproxy.dll 2015-03-11 10:29:50 ----A---- C:\Windows\system32\ieUnatt.exe 2015-03-11 10:29:50 ----A---- C:\Windows\system32\ieui.dll 2015-03-11 10:29:50 ----A---- C:\Windows\system32\ieframe.dll 2015-03-11 10:29:50 ----A---- C:\Windows\system32\dxtmsft.dll 2015-03-11 10:29:49 ----A---- C:\Windows\system32\wininet.dll 2015-03-11 10:29:49 ----A---- C:\Windows\system32\vbscript.dll 2015-03-11 10:29:49 ----A---- C:\Windows\system32\mshtmlmedia.dll 2015-03-11 10:29:49 ----A---- C:\Windows\system32\mshtmled.dll 2015-03-11 10:29:49 ----A---- C:\Windows\system32\jscript9diag.dll 2015-03-11 10:29:49 ----A---- C:\Windows\system32\jscript9.dll 2015-03-11 10:29:48 ----A---- C:\Windows\system32\msrating.dll 2015-03-11 10:29:48 ----A---- C:\Windows\system32\MshtmlDac.dll 2015-03-11 10:29:48 ----A---- C:\Windows\system32\mshtml.dll 2015-03-11 10:29:47 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll 2015-03-11 10:29:47 ----A---- C:\Windows\system32\WMPhoto.dll ======List of files/folders modified in the last 1 month====== 2015-04-06 16:40:48 ----RD---- C:\Program Files 2015-04-06 16:36:57 ----D---- C:\Windows\System32 2015-04-06 16:36:57 ----D---- C:\Windows\inf 2015-04-06 16:36:57 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-04-06 16:35:27 ----A---- C:\Windows\NeroDigital.ini 2015-04-06 16:34:54 ----D---- C:\Windows\system32\config 2015-04-06 16:34:07 ----A---- C:\Windows\SYSWOW64\log.txt 2015-04-06 16:31:03 ----HD---- C:\ProgramData 2015-04-06 16:27:32 ----D---- C:\Windows\Temp 2015-04-06 15:25:47 ----D---- C:\Windows\system32\catroot2 2015-04-06 15:18:44 ----D---- C:\Program Files (x86)\TeamViewer 2015-04-06 15:15:23 ----D---- C:\Windows\winsxs 2015-04-05 23:39:53 ----D---- C:\Windows 2015-04-05 23:33:14 ----D---- C:\Windows\system32\Tasks 2015-04-05 22:22:24 ----D---- C:\Program Files (x86)\Common Files 2015-04-05 22:22:07 ----D---- C:\Program Files\Common Files 2015-04-05 21:35:11 ----SHD---- C:\System Volume Information 2015-04-05 21:30:51 ----D---- C:\Windows\SysWOW64 2015-04-05 21:30:51 ----D---- C:\Program Files (x86)\MyFree Codec 2015-04-05 21:28:09 ----RD---- C:\Program Files (x86) 2015-04-05 21:09:40 ----D---- C:\Program Files (x86)\Jazz_Guitar_Solos_Vol_1-4 2015-04-05 21:08:41 ----SHD---- C:\Windows\Installer 2015-04-05 20:52:55 ----HDC---- C:\ProgramData\{B53633F4-53A8-4BAA-81BD-2830099F2459} 2015-04-05 20:52:52 ----HDC---- C:\ProgramData\{F299F641-E758-4AF2-AEE2-1FF1FA99E411} 2015-04-05 20:52:49 ----HDC---- C:\ProgramData\{DC597CF0-DB39-40C2-9F8C-CF9D0A386548} 2015-04-05 20:52:45 ----HDC---- C:\ProgramData\{588D017F-D30B-4C08-8A10-1FEF7D039369} 2015-04-05 20:52:42 ----HDC---- C:\ProgramData\{CA03436C-933D-4ADA-9E89-2C39CC03E904} 2015-04-05 20:52:39 ----HDC---- C:\ProgramData\{792288EF-B822-4482-B541-7ED490D444F7} 2015-04-05 20:52:36 ----HDC---- C:\ProgramData\{14F71F5E-7E38-4BE6-9307-DC81B8A419A5} 2015-04-05 20:52:32 ----HDC---- C:\ProgramData\{D49FD676-115D-4DF5-B976-28952EB09BEB} 2015-04-05 20:52:29 ----HDC---- C:\ProgramData\{3DFBC806-D62A-4312-81FF-5F343DDCB5DC} 2015-04-05 20:52:23 ----HDC---- C:\ProgramData\{B0DF9098-245E-479F-A4ED-B5F91EA4948B} 2015-04-05 20:52:20 ----HDC---- C:\ProgramData\{0A583E76-A7A0-45F8-9386-AEE1E529A4DE} 2015-04-05 20:52:15 ----HDC---- C:\ProgramData\{6E467D89-1963-440B-84F9-852C8150E323} 2015-04-05 20:52:12 ----HDC---- C:\ProgramData\{D04E7E60-5F77-4E61-9CD4-7AEC5E15C525} 2015-04-05 20:52:08 ----HDC---- C:\ProgramData\{7B7672F5-5EA2-4D83-BC77-1AFCA8846266} 2015-04-05 20:52:05 ----HDC---- C:\ProgramData\{6B3E9A08-404E-4FBF-A80D-1E9DA9E75171} 2015-04-05 20:52:01 ----HDC---- C:\ProgramData\{4C01754A-32F9-4A34-8B9F-E06DD553B755} 2015-04-05 20:51:56 ----HDC---- C:\ProgramData\{91377244-4B4E-4A81-9F72-FA41DECB3D8F} 2015-04-05 20:51:53 ----HDC---- C:\ProgramData\{82B9F45C-9378-4B6C-B80A-338C197F3791} 2015-04-05 20:51:50 ----HDC---- C:\ProgramData\{DFB8047B-FF22-438D-90BD-83E8B78F83D7} 2015-04-05 20:51:46 ----HDC---- C:\ProgramData\{68233086-CF7D-452D-8519-A7815257EC6B} 2015-04-05 20:51:43 ----HDC---- C:\ProgramData\{4A95D8FB-6FE5-4651-9C81-388A5F0CB306} 2015-04-05 20:51:40 ----HDC---- C:\ProgramData\{E13AD921-F7D5-4901-BF24-AC8BF60E1EB6} 2015-04-05 20:51:36 ----HDC---- C:\ProgramData\{589B734B-3C34-40B2-9EFD-8C2D12D479CE} 2015-04-05 20:51:33 ----HDC---- C:\ProgramData\{AB38F02B-C891-457C-B8C8-DA9D96EFA317} 2015-04-05 20:51:29 ----HDC---- C:\ProgramData\{B06671EB-304F-4BCB-A3C8-1D59B4FD236F} 2015-04-05 20:51:24 ----HDC---- C:\ProgramData\{F2026C51-8509-47B4-816D-CCD2DB993FC1} 2015-04-05 20:51:20 ----HDC---- C:\ProgramData\{624486AF-AD5B-4BB3-BEEE-A0D2D4D112DF} 2015-04-05 20:51:16 ----HDC---- C:\ProgramData\{B8AB470F-A90B-4652-A8F5-160A08FD7411} 2015-04-05 20:51:12 ----HDC---- C:\ProgramData\{7FC6C6B3-C2D5-4F17-BBEF-A11135E1A668} 2015-04-05 20:51:09 ----HDC---- C:\ProgramData\{8CD9955F-F554-4B5B-9EA3-370A45EF233C} 2015-04-05 20:51:06 ----HDC---- C:\ProgramData\{69DF5CE1-2094-4539-A287-9DD19C7BD30B} 2015-04-05 20:51:02 ----HDC---- C:\ProgramData\{CD0D90ED-2704-4043-9651-E90B134DD7DD} 2015-04-05 20:50:59 ----HDC---- C:\ProgramData\{24EEDFDA-74B5-4E97-8334-5AEA44CD0095} 2015-04-05 20:50:55 ----HDC---- C:\ProgramData\{AA5037F8-9B97-456B-847E-A64FEB3E393C} 2015-04-05 20:50:52 ----HDC---- C:\ProgramData\{80A0A482-175E-4DE8-9D32-C8C8463D1362} 2015-04-05 20:50:48 ----HDC---- C:\ProgramData\{B7CF1107-3BD9-48BA-BC77-54B909022641} 2015-04-05 20:50:45 ----HDC---- C:\ProgramData\{CCE3E562-124D-4D63-8AC7-EC849A579F07} 2015-04-05 20:50:37 ----HDC---- C:\ProgramData\{35B46D49-85E2-40EA-8EC6-43B281EDD8E7} 2015-04-05 20:50:31 ----HDC---- C:\ProgramData\{E26B3878-7CEC-469C-B449-5CAA336DF8CD} 2015-04-05 20:50:25 ----HDC---- C:\ProgramData\{3006A797-CDFA-44FC-98EF-155579E2CDBF} 2015-04-05 20:49:46 ----HDC---- C:\ProgramData\{C2A88E6D-FA3D-462B-BDFF-A09B1EFA8FBE} 2015-04-05 20:37:28 ----D---- C:\Windows\SYSWOW64\drivers 2015-04-04 23:36:14 ----D---- C:\Windows\rescache 2015-04-04 22:39:39 ----D---- C:\Windows\system32\drivers 2015-04-04 20:54:38 ----D---- C:\Windows\Logs 2015-04-04 20:52:52 ----D---- C:\Windows\SYSWOW64\nl-NL 2015-04-04 20:52:52 ----D---- C:\Windows\system32\nl-NL 2015-04-04 20:51:30 ----D---- C:\Windows\SoftwareDistribution 2015-04-04 20:42:01 ----D---- C:\Windows\L2Schemas 2015-04-04 19:25:39 ----D---- C:\Users\pc\AppData\Roaming\Mozilla 2015-04-04 19:05:48 ----SD---- C:\Users\pc\AppData\Roaming\Microsoft 2015-04-04 12:43:48 ----D---- C:\Windows\system32\DriverStore 2015-04-03 23:44:44 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2015-04-03 23:12:54 ----RSD---- C:\Windows\Fonts 2015-04-03 22:51:21 ----D---- C:\Windows\pss 2015-04-03 10:30:04 ----D---- C:\Program Files (x86)\Google 2015-04-03 10:30:03 ----D---- C:\Windows\Tasks 2015-04-03 10:10:24 ----D---- C:\Windows\ModemLogs 2015-04-02 22:37:40 ----RSD---- C:\Windows\assembly 2015-04-02 16:04:05 ----D---- C:\Windows\Help 2015-04-02 16:04:05 ----D---- C:\Program Files (x86)\globalUpdate 2015-04-02 15:56:59 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware 2015-04-01 17:29:11 ----D---- C:\Users\pc\AppData\Roaming\Snz 2015-03-26 09:52:50 ----D---- C:\Windows\Microsoft.NET 2015-03-25 23:41:52 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI 2015-03-22 23:17:48 ----D---- C:\Windows\debug 2015-03-11 23:50:31 ----D---- C:\Windows\SYSWOW64\Dism 2015-03-11 23:50:31 ----D---- C:\Windows\system32\Dism 2015-03-11 23:50:31 ----D---- C:\Windows\system32\CodeIntegrity 2015-03-11 23:50:31 ----D---- C:\Windows\system32\Boot 2015-03-11 23:50:30 ----D---- C:\Windows\SYSWOW64\en-US 2015-03-11 23:50:30 ----D---- C:\Windows\system32\en-US 2015-03-11 23:50:30 ----D---- C:\Program Files\Internet Explorer 2015-03-11 23:50:30 ----D---- C:\Program Files (x86)\Internet Explorer 2015-03-11 17:54:28 ----D---- C:\Windows\system32\MRT 2015-03-11 17:51:57 ----A---- C:\Windows\system32\MRT.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888] R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2012-03-11 22696] R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2012-03-11 577824] R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2012-03-11 43248] R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2012-02-03 93200] R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-10-24 188928] R3 COMMONFX.SYS;COMMONFX.SYS; C:\Windows\System32\drivers\COMMONFX.SYS [2010-02-23 123992] R3 ctaud2k;Creative Audio Driver (WDM); C:\Windows\system32\drivers\ctaud2k.sys [2010-02-23 684504] R3 CTEDSPIO.SYS;CTEDSPIO.SYS; C:\Windows\System32\drivers\CTEDSPIO.SYS [2010-02-23 158296] R3 CTEDSPSY.SYS;CTEDSPSY.SYS; C:\Windows\System32\drivers\CTEDSPSY.SYS [2010-02-23 338520] R3 ctprxy2k;Creative Proxy Driver; C:\Windows\system32\drivers\ctprxy2k.sys [2010-02-23 15960] R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\Windows\system32\drivers\ctsfm2k.sys [2010-02-23 213080] R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2013-02-21 495888] R3 emupia;E-mu Plug-in Architecture Driver; C:\Windows\system32\drivers\emupia2k.sys [2010-02-23 118360] R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\Windows\system32\drivers\ha10kx2k.sys [2010-02-23 1021016] R3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT); C:\Windows\system32\DRIVERS\ICCWDT.sys [2010-08-17 26136] R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2000-01-01 62784] R3 ossrv;Creative OS Services Driver; C:\Windows\system32\drivers\ctoss2k.sys [2010-02-23 178776] S3 COMMONFX;COMMONFX; C:\Windows\system32\drivers\COMMONFX.SYS [2010-02-23 123992] S3 CT20XUT.SYS;CT20XUT.SYS; C:\Windows\System32\drivers\CT20XUT.SYS [2010-02-23 202840] S3 CT20XUT;CT20XUT; C:\Windows\system32\drivers\CT20XUT.SYS [2010-02-23 202840] S3 ctac32k;Creative AC3 Software Decoder; C:\Windows\system32\drivers\ctac32k.sys [2010-02-23 580696] S3 CTAUDFX.SYS;CTAUDFX.SYS; C:\Windows\System32\drivers\CTAUDFX.SYS [2010-02-23 588888] S3 CTAUDFX;CTAUDFX; C:\Windows\system32\drivers\CTAUDFX.SYS [2010-02-23 588888] S3 CTEAPSFX.SYS;CTEAPSFX.SYS; C:\Windows\System32\drivers\CTEAPSFX.SYS [2010-02-23 187480] S3 CTEAPSFX;CTEAPSFX; C:\Windows\system32\drivers\CTEAPSFX.SYS [2010-02-23 187480] S3 CTEDSPFX.SYS;CTEDSPFX.SYS; C:\Windows\System32\drivers\CTEDSPFX.SYS [2010-02-23 287832] S3 CTEDSPFX;CTEDSPFX; C:\Windows\system32\drivers\CTEDSPFX.SYS [2010-02-23 287832] S3 CTEDSPIO;CTEDSPIO; C:\Windows\system32\drivers\CTEDSPIO.SYS [2010-02-23 158296] S3 CTEDSPSY;CTEDSPSY; C:\Windows\system32\drivers\CTEDSPSY.SYS [2010-02-23 338520] S3 CTERFXFX.SYS;CTERFXFX.SYS; C:\Windows\System32\drivers\CTERFXFX.SYS [2010-02-23 116312] S3 CTERFXFX;CTERFXFX; C:\Windows\system32\drivers\CTERFXFX.SYS [2010-02-23 116312] S3 CTEXFIFX.SYS;CTEXFIFX.SYS; C:\Windows\System32\drivers\CTEXFIFX.SYS [2010-02-23 1417816] S3 CTEXFIFX;CTEXFIFX; C:\Windows\system32\drivers\CTEXFIFX.SYS [2010-02-23 1417816] S3 CTHWIUT.SYS;CTHWIUT.SYS; C:\Windows\System32\drivers\CTHWIUT.SYS [2010-02-23 94808] S3 CTHWIUT;CTHWIUT; C:\Windows\system32\drivers\CTHWIUT.SYS [2010-02-23 94808] S3 CTSBLFX.SYS;CTSBLFX.SYS; C:\Windows\System32\drivers\CTSBLFX.SYS [2010-02-23 589912] S3 CTSBLFX;CTSBLFX; C:\Windows\system32\drivers\CTSBLFX.SYS [2010-02-23 589912] S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-04-15 12228128] S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440] S3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120] S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\Windows\system32\DRIVERS\mcdbus.sys [2009-02-24 255552] S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-10-24 40832] S3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\drivers\ASACPI.sys [2005-03-29 8192] S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-24 72064] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 rspLLL;rspLLL; C:\Windows\system32\DRIVERS\rspLLL64.sys [2012-05-14 21560] S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-06-23 344680] S3 smwdm;smwdm; C:\Windows\system32\drivers\smwdm.sys [2005-11-29 348032] S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2014-12-17 16152] S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 56832] S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208] S3 usb_rndisx;USB RNDIS-adapter; C:\Windows\system32\drivers\usb8023x.sys [2013-02-12 19968] S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2015-03-11 14464] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984] S4 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-03-11 2815496] R2 CodeMeter.exe;CodeMeter Runtime Server; C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe [2012-11-21 2571704] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-05-20 927520] R2 TeamViewer;TeamViewer 10; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [2015-03-30 5448464] R3 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2000-01-01 277824] R3 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2000-01-01 365376] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688] S3 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-06-19 634632] S3 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [2013-07-08 195336] S3 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2000-01-01 166720] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-04-03 148080] S3 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2010-11-11 12784] S3 NetMsmqActivator;Net.Msmq Listener Adapter; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S3 NisSrv;@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 282616] S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 178760] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2014-01-23 5132888] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-02-09 1255736] S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480] S4 Adobe LM Service;Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2012-06-13 72704] S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088] S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864] S4 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120] S4 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-10-13 935208] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] -----------------EOF-----------------