Logfile of random's system information tool 1.10 (written by random/random) Run by Ellen at 2015-05-17 19:51:23 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 515 GB (74%) free of 697 GB Total RAM: 8044 MB (62% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 19:51:27, on 17/05/2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17801) Boot mode: Normal Running processes: C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe C:\Program Files (x86)\Launch Manager\LMworker.exe C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe C:\Program Files (x86)\Launch Manager\LManager.exe C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files (x86)\Maxtor\OneTouch Status\MaxMenuMgr.exe C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe C:\Program Files\trend micro\Ellen.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: PriceLesss - {912fe1ad-b959-4650-86f7-920f60e511fa} - C:\Program Files (x86)\PriceLesss\DV7n0HoDWkqhES.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [mxomssmenu] "C:\Program Files (x86)\Maxtor\OneTouch Status\maxmenumgr.exe" O4 - HKLM\..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" O4 - HKLM\..\Run: [mcpltui_exe] "C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe" /platui /runkey O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe O4 - HKLM\..\Run: [AgentMonitor] C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe O4 - HKCU\..\Run: [Google Update] "C:\Users\Ellen\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Spybot-S&D Cleaning] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user') O4 - Global Startup: Update-agent.lnk = ? O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivX Web Player Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll O20 - AppInit_DLLs: c:\windows\syswow64\nvinit.dll,c:\windows\syswow64\nvinit.dll O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing) O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: BecHelperService - Unknown owner - C:\Program Files (x86)\KPN\Mobiel Internet Software\BecHelperService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: McAfee Home Network (HomeNetSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: Maxtor Service (Maxtor Sync Service) - Seagate Technology LLC - C:\Program Files (x86)\Maxtor\Sync\SyncServices.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe O23 - Service: McAfee AP Service (McAPExe) - McAfee, Inc. - C:\Program Files\McAfee\MSC\McAPExe.exe O23 - Service: McAfee Activation Service (McAWFwk) - McAfee, Inc. - c:\PROGRA~1\mcafee\msc\mcawfwk.exe O23 - Service: McAfee CSP Service (mccspsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe O23 - Service: McAfee Platform Services (mcpltsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe O23 - Service: McAfee Anti-Malware Core (mfecore) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\Windows\system32\mfevtps.exe (file missing) O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\SysWOW64\nlssrv32.exe O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: Update Chart Choosing - Unknown owner - C:\Program Files (x86)\Chart Choosing\updateChartChoosing.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 17342 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch "C:\Windows\system32\nvvsvc.exe" C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\WLANExt.exe 20107840 \??\C:\Windows\system32\conhost.exe "-1330512666-8897959101405027277-1785742015-2058862375-9223011371741189978-255046284 C:\Windows\System32\spoolsv.exe taskeng.exe {55088D60-DB70-451D-9C96-E41C2E75AF1E} C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\Windows\system32\nvvsvc.exe -session -first "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "taskhost.exe" "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE taskeng.exe {307AF2B2-E052-42DC-A3BB-9CEFF28FC861} "C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe" "C:\Program Files (x86)\KPN\Mobiel Internet Software\BecHelperService.exe" "C:\Program Files\Bonjour\mDNSResponder.exe" C:\Windows\System32\svchost.exe -k utcsvc "C:\Program Files (x86)\Launch Manager\dsiwmis.exe" "C:\Program Files (x86)\KPN\Mobiel Internet Software\LoggerServer.exe" -background 2172 \??\C:\Windows\system32\conhost.exe "-2310729213604086581738450436-397919866-2146837341-54222869313737706061536702622 "C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe" "C:\Program Files (x86)\Launch Manager\LMworker.exe" "C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe" "C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}" --enable-wmi-window "C:\Program Files (x86)\Acer\Registration\GREGsvc.exe" "C:\Program Files\Acer\Acer Updater\UpdaterService.exe" "C:\Program Files (x86)\Maxtor\Sync\SyncServices.exe" "C:\Windows\System32\igfxtray.exe" "C:\Windows\System32\hkcmd.exe" "C:\Windows\System32\igfxpers.exe" "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe" "C:\Program Files\Microsoft IntelliPoint\ipoint.exe" "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" "C:\Program Files\iTunes\iTunesHelper.exe" "C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe" silentrun "C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe" "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1 "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k "C:\Program Files (x86)\Launch Manager\LManager.exe" "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "C:\Program Files (x86)\Maxtor\OneTouch Status\MaxMenuMgr.exe" "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" "C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe" /platui /runkey "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe" "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW "C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe" "C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe" "C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe" "C:\Windows\system32\mfevtps.exe" C:\Windows\SysWOW64\nlssrv32.exe "C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE "C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe" "C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe" "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" "C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe" "C:\Windows\SysWOW64\rundll32.exe" "c:\PROGRA~2\mcafee\SITEAD~1\saHook.dll", saHooker_Initialize_and_Wait "C:\Windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\SITEAD~1\x64\saHook.dll", saHooker_Initialize_and_Wait "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe" C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files\McAfee\MSC\McAPExe.exe" "C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe" "C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\igfxext.exe -Embedding C:\Windows\system32\igfxsrvc.exe -Embedding C:\Windows\system32\wbem\unsecapp.exe -Embedding "C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe" "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe" "C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe" "C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE" "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Program Files\iPod\bin\iPodService.exe" C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" nss 4d8af85c-fe51-4781-b471-0fdb2242b1db 1 C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted \??\C:\Windows\system32\conhost.exe "199153385-2061121756-281114792145859914-718195838143754295317027490111691644104 "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp \??\C:\Windows\system32\conhost.exe "-2019498386100747504292500473103854022717049844222031356444-14271037291536453616 "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe" C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7} "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" "C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe" C:\Windows\system32\svchost.exe -k SDRSVC "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe" "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-78a3fe2c-40ed-438b-964a-349e9f751f07 -SystemEventPortName:HostProcess-1dd43a46-7500-4e3f-bb79-51bd2c58649d -IoCancelEventPortName:HostProcess-6643e449-6c18-4b8b-ac57-12484fd84fe0 -NonStateChangingEventPortName:HostProcess-139e8a4f-46f5-4bcf-8a36-31287e4dacd4 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:4ba717a8-315e-4758-b444-0001f11372d1 -DeviceGroupId: "C:\Program Files\EgisTec IPS\PMMUpdate.exe" "C:\Program Files\EgisTec IPS\EgisUpdate.exe" "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" "C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=5084.8774370.1090572872 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 5084 "\\.\pipe\gecko-crash-server-pipe.5084" plugin "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe" --proxy-stub-channel=Flash7324.61ADAF38.444 --host-broker-channel=Flash7324.61ADAF38.80 --host-pid=7324 --host-npapi-version=28 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll" "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe" --channel=780.002CF43C.1231636609 --proxy-stub-channel=Flash7324.61ADAF38.444 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll" --host-npapi-version=28 --type=renderer C:\Windows\system32\sppsvc.exe C:\Windows\system32\wbem\wmiprvse.exe "C:\Users\Ellen\Downloads\RSITx64.exe" ======Scheduled tasks folder====== C:\Windows\tasks\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-1-6.job - C:\Program Files (x86)\GoHD\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-1-6.exe /rawdata=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 C:\Windows\tasks\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-1-7.job - C:\Program Files (x86)\GoHD\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-1-7.exe /rawdata=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 C:\Windows\tasks\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-10_user.job - C:\Program Files (x86)\GoHD\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-10.exe /rawdata=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 C:\Windows\tasks\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-3.job - C:\Program Files (x86)\GoHD\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-3.exe /rawdata=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 C:\Windows\tasks\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-4.job - C:\Program Files (x86)\GoHD\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-4.exe /rawdata=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 C:\Windows\tasks\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-6.job - C:\Program Files (x86)\GoHD\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-6.exe /rawdata=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 C:\Windows\tasks\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-7.job - C:\Program Files (x86)\GoHD\96d4f2c1-5a31-4bf0-93a4-bc2739f7d30e-7.exe /rawdata=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 C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job - C:\Windows\TEMP\{41727B37-8EEA-42F9-9948-1F665E4C3094}.exe --uninstall=1 C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-889363557-2036165539-3501339599-1001Core.job - C:\Users\Ellen\AppData\Local\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-889363557-2036165539-3501339599-1001Core1d090c12f6414dd.job - C:\Users\Ellen\AppData\Local\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-889363557-2036165539-3501339599-1001UA1cf30c418896b74.job - C:\Users\Ellen\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\Norton Security Scan for Ellen.job - C:\PROGRA~2\NORTON~2\Engine\361~1.11\Nss.exe /scan-quick /scheduled =========Mozilla firefox========= ProfilePath - C:\Users\Ellen\AppData\Roaming\Mozilla\Firefox\Profiles\vd9etfrr.default-1431286248019 "{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"=C:\Program Files (x86)\McAfee\SiteAdvisor [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 17.0.0.169 Plugin "Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=] "Description"=iTunes Detector Plug-in "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0] "Description"= "Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@canon.com/MycameraPlugin] "Description"=Canon MycameraPlugin "Path"=C:\Program Files (x86)\Canon\ZoomBrowser EX\Program\NPCIG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0] "Description"=DivX VOD Helper Plug-in "Path"=C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0] "Description"=DivX Web Player "Path"=C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@garmin.com/GpsControl] "Description"=Garmin GPS Control for Firefox "Path"=C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin] "Description"=Google Earth in your browser "Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0] "Description"=Picasa3 plugin "Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.45.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@mcafee.com/MSC,version=10] "Description"=McAfee Total Protection MIME Plugin "Path"=c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0] "Description"=WildTangent Games App Presence Detector Plugin "Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 17.0.0.169 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0] "Description"=DivX VOD Helper Plug-in "Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mcafee.com/MSC,version=10] "Description"=McAfee Total Protection MIME Plugin "Path"=c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll C:\Program Files (x86)\Mozilla Firefox\components\ nsIQTScriptablePlugin.xpt C:\Program Files (x86)\Mozilla Firefox\plugins\ np-mswmp.dll nppdf32.DEU nppdf32.dll nppdf32.FRA nppdf32.JPN npqtplugin.dll npqtplugin2.dll npqtplugin3.dll npqtplugin4.dll npqtplugin5.dll QuickTimePlugin.class WMP Firefox Plugin License.rtf WMP Firefox Plugin RelNotes.txt ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 529280] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-08 256456] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-11 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 441216] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{912fe1ad-b959-4650-86f7-920f60e511fa}] PriceLesss - C:\Program Files (x86)\PriceLesss\DV7n0HoDWkqhES.dll [2015-05-10 821760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-08 194504] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-01-11 171944] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-08 256456] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-08 194504] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-06-21 167704] "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-06-21 392472] "Persistence"=C:\Windows\system32\igfxpers.exe [2011-06-21 416024] "IntelTBRunOnce"=wscript.exe //b //nologo C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-07-30 2280232] "Power Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2011-08-02 1831016] "IntelliPoint"=C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2009-11-05 2320752] "NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2014-07-25 2403104] "ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2014-07-25 1283136] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2015-04-07 169768] "XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-10-01 825184] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "AliceConnect"= [] "Google Update"=C:\Users\Ellen\AppData\Local\Google\Update\GoogleUpdate.exe [2013-12-08 116648] "Spybot-S&D Cleaning"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [2013-09-20 3666224] "EADM"=C:\Program Files (x86)\Origin\Origin.exe [2015-04-14 3632472] "Device Detection"= [] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "mcui_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2015-02-27 533872] "SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2011-06-22 341360] "Norton Online Backup"=C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-02 1155928] "BackupManagerTray"=C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [2011-04-24 297280] "LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-07-01 1103440] "NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288] "ArcadeMovieService"=C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [2011-05-10 177448] "APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-03-20 60712] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904] "mxomssmenu"=C:\Program Files (x86)\Maxtor\OneTouch Status\maxmenumgr.exe [2007-09-06 169264] "DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2014-05-28 455512] "SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2013-07-25 5624784] "mcpltui_exe"=C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe [2015-02-09 643064] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336] "QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888] "DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2014-01-10 1861968] "KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2014-06-14 310064] "AgentMonitor"=C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe [2014-06-20 401280] "mbot_be_86"= [] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Update-agent.lnk - C:\Program Files (x86)\KPN\Mobiel Internet Software\AutoUpdateSrv.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\Windows\system32\nvinitx.dll " [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\Windows\system32\igfxdev.dll [2011-06-10 389632] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefire] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "DisableTaskMgr"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 "NoRun"=0 "NoFolderOptions"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon" "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service" "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater" "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "wave3"=wdmaud.drv "midi3"=wdmaud.drv "mixer3"=wdmaud.drv "aux2"=wdmaud.drv "wave4"=wdmaud.drv "midi4"=wdmaud.drv "mixer4"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 3 months====== 2015-05-17 19:51:23 ----D---- C:\rsit 2015-05-17 19:51:23 ----D---- C:\Program Files\trend micro 2015-05-14 14:23:30 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-05-14 14:23:30 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-05-13 11:50:01 ----A---- C:\Windows\SYSWOW64\schannel.dll 2015-05-13 11:50:01 ----A---- C:\Windows\SYSWOW64\certcli.dll 2015-05-13 11:50:01 ----A---- C:\Windows\system32\schannel.dll 2015-05-13 11:50:01 ----A---- C:\Windows\system32\certcli.dll 2015-05-13 11:49:50 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2015-05-13 11:49:50 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll 2015-05-13 11:49:50 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2015-05-13 11:49:50 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2015-05-13 11:49:50 ----A---- C:\Windows\system32\ieetwproxystub.dll 2015-05-13 11:49:50 ----A---- C:\Windows\system32\ieetwcollector.exe 2015-05-13 11:49:49 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2015-05-13 11:49:49 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2015-05-13 11:49:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2015-05-13 11:49:49 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2015-05-13 11:49:49 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll 2015-05-13 11:49:49 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll 2015-05-13 11:49:49 ----A---- C:\Windows\SYSWOW64\dxtrans.dll 2015-05-13 11:49:49 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-05-13 11:49:49 ----A---- C:\Windows\system32\iernonce.dll 2015-05-13 11:49:49 ----A---- C:\Windows\system32\ie4uinit.exe 2015-05-13 11:49:48 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2015-05-13 11:49:48 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2015-05-13 11:49:48 ----A---- C:\Windows\system32\urlmon.dll 2015-05-13 11:49:48 ----A---- C:\Windows\system32\iedkcs32.dll 2015-05-13 11:49:47 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2015-05-13 11:49:47 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2015-05-13 11:49:47 ----A---- C:\Windows\SYSWOW64\jscript.dll 2015-05-13 11:49:47 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2015-05-13 11:49:47 ----A---- C:\Windows\SYSWOW64\ieui.dll 2015-05-13 11:49:47 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2015-05-13 11:49:47 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2015-05-13 11:49:47 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll 2015-05-13 11:49:47 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2015-05-13 11:49:47 ----A---- C:\Windows\system32\msfeeds.dll 2015-05-13 11:49:47 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2015-05-13 11:49:47 ----A---- C:\Windows\system32\dxtrans.dll 2015-05-13 11:49:46 ----A---- C:\Windows\system32\iesetup.dll 2015-05-13 11:49:46 ----A---- C:\Windows\system32\iertutil.dll 2015-05-13 11:49:46 ----A---- C:\Windows\system32\ieapfltr.dll 2015-05-13 11:49:45 ----A---- C:\Windows\SYSWOW64\wininet.dll 2015-05-13 11:49:45 ----A---- C:\Windows\SYSWOW64\msrating.dll 2015-05-13 11:49:45 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll 2015-05-13 11:49:45 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2015-05-13 11:49:45 ----A---- C:\Windows\system32\vbscript.dll 2015-05-13 11:49:45 ----A---- C:\Windows\system32\jsproxy.dll 2015-05-13 11:49:45 ----A---- C:\Windows\system32\ieUnatt.exe 2015-05-13 11:49:45 ----A---- C:\Windows\system32\dxtmsft.dll 2015-05-13 11:49:44 ----A---- C:\Windows\system32\mshtmlmedia.dll 2015-05-13 11:49:44 ----A---- C:\Windows\system32\mshtmled.dll 2015-05-13 11:49:44 ----A---- C:\Windows\system32\jscript9diag.dll 2015-05-13 11:49:44 ----A---- C:\Windows\system32\jscript.dll 2015-05-13 11:49:44 ----A---- C:\Windows\system32\ieui.dll 2015-05-13 11:49:44 ----A---- C:\Windows\system32\ieframe.dll 2015-05-13 11:49:43 ----A---- C:\Windows\system32\wininet.dll 2015-05-13 11:49:43 ----A---- C:\Windows\system32\msrating.dll 2015-05-13 11:49:43 ----A---- C:\Windows\system32\MshtmlDac.dll 2015-05-13 11:49:43 ----A---- C:\Windows\system32\jscript9.dll 2015-05-13 11:49:42 ----A---- C:\Windows\system32\mshtml.dll 2015-05-13 11:49:40 ----A---- C:\Windows\system32\services.exe 2015-05-13 11:49:19 ----A---- C:\Windows\system32\UtcResources.dll 2015-05-13 11:49:19 ----A---- C:\Windows\system32\diagtrack.dll 2015-05-13 11:49:18 ----A---- C:\Windows\system32\ntoskrnl.exe 2015-05-13 11:49:17 ----A---- C:\Windows\system32\ntdll.dll 2015-05-13 11:49:15 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2015-05-13 11:49:14 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2015-05-13 11:49:14 ----A---- C:\Windows\system32\tdh.dll 2015-05-13 11:49:13 ----A---- C:\Windows\SYSWOW64\tdh.dll 2015-05-13 11:49:11 ----A---- C:\Windows\system32\advapi32.dll 2015-05-13 11:49:10 ----A---- C:\Windows\SYSWOW64\ntdll.dll 2015-05-13 11:49:10 ----A---- C:\Windows\system32\kernel32.dll 2015-05-13 11:49:09 ----A---- C:\Windows\SYSWOW64\kernel32.dll 2015-05-13 11:49:09 ----A---- C:\Windows\SYSWOW64\advapi32.dll 2015-05-13 11:49:09 ----A---- C:\Windows\system32\msv1_0.dll 2015-05-13 11:49:09 ----A---- C:\Windows\system32\lsasrv.dll 2015-05-13 11:49:08 ----A---- C:\Windows\SYSWOW64\tracerpt.exe 2015-05-13 11:49:08 ----A---- C:\Windows\SYSWOW64\sechost.dll 2015-05-13 11:49:08 ----A---- C:\Windows\SYSWOW64\kerberos.dll 2015-05-13 11:49:08 ----A---- C:\Windows\system32\wow64.dll 2015-05-13 11:49:08 ----A---- C:\Windows\system32\winsrv.dll 2015-05-13 11:49:08 ----A---- C:\Windows\system32\tracerpt.exe 2015-05-13 11:49:08 ----A---- C:\Windows\system32\srcore.dll 2015-05-13 11:49:08 ----A---- C:\Windows\system32\sechost.dll 2015-05-13 11:49:08 ----A---- C:\Windows\system32\logman.exe 2015-05-13 11:49:08 ----A---- C:\Windows\system32\KernelBase.dll 2015-05-13 11:49:08 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2015-05-13 11:49:08 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2015-05-13 11:49:08 ----A---- C:\Windows\system32\conhost.exe 2015-05-13 11:49:07 ----A---- C:\Windows\SYSWOW64\wdigest.dll 2015-05-13 11:49:07 ----A---- C:\Windows\SYSWOW64\typeperf.exe 2015-05-13 11:49:07 ----A---- C:\Windows\SYSWOW64\TSpkg.dll 2015-05-13 11:49:07 ----A---- C:\Windows\SYSWOW64\ncrypt.dll 2015-05-13 11:49:07 ----A---- C:\Windows\SYSWOW64\msv1_0.dll 2015-05-13 11:49:07 ----A---- C:\Windows\SYSWOW64\logman.exe 2015-05-13 11:49:07 ----A---- C:\Windows\SYSWOW64\KernelBase.dll 2015-05-13 11:49:07 ----A---- C:\Windows\system32\wdigest.dll 2015-05-13 11:49:07 ----A---- C:\Windows\system32\typeperf.exe 2015-05-13 11:49:07 ----A---- C:\Windows\system32\TSpkg.dll 2015-05-13 11:49:07 ----A---- C:\Windows\system32\sspicli.dll 2015-05-13 11:49:07 ----A---- C:\Windows\system32\smss.exe 2015-05-13 11:49:07 ----A---- C:\Windows\system32\rstrui.exe 2015-05-13 11:49:07 ----A---- C:\Windows\system32\relog.exe 2015-05-13 11:49:07 ----A---- C:\Windows\system32\ncrypt.dll 2015-05-13 11:49:07 ----A---- C:\Windows\system32\kerberos.dll 2015-05-13 11:49:06 ----A---- C:\Windows\SYSWOW64\srclient.dll 2015-05-13 11:49:06 ----A---- C:\Windows\SYSWOW64\setup16.exe 2015-05-13 11:49:06 ----A---- C:\Windows\SYSWOW64\relog.exe 2015-05-13 11:49:06 ----A---- C:\Windows\SYSWOW64\diskperf.exe 2015-05-13 11:49:06 ----A---- C:\Windows\SYSWOW64\auditpol.exe 2015-05-13 11:49:06 ----A---- C:\Windows\system32\srclient.dll 2015-05-13 11:49:06 ----A---- C:\Windows\system32\lsass.exe 2015-05-13 11:49:06 ----A---- C:\Windows\system32\diskperf.exe 2015-05-13 11:49:06 ----A---- C:\Windows\system32\csrsrv.dll 2015-05-13 11:49:06 ----A---- C:\Windows\system32\auditpol.exe 2015-05-13 11:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-05-13 11:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-05-13 11:49:05 ----A---- C:\Windows\SYSWOW64\wow32.dll 2015-05-13 11:49:05 ----A---- C:\Windows\SYSWOW64\sspicli.dll 2015-05-13 11:49:05 ----A---- C:\Windows\SYSWOW64\secur32.dll 2015-05-13 11:49:05 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll 2015-05-13 11:49:05 ----A---- C:\Windows\SYSWOW64\credssp.dll 2015-05-13 11:49:05 ----A---- C:\Windows\system32\wow64win.dll 2015-05-13 11:49:05 ----A---- C:\Windows\system32\wow64cpu.dll 2015-05-13 11:49:05 ----A---- C:\Windows\system32\sspisrv.dll 2015-05-13 11:49:05 ----A---- C:\Windows\system32\secur32.dll 2015-05-13 11:49:05 ----A---- C:\Windows\system32\ntvdm64.dll 2015-05-13 11:49:05 ----A---- C:\Windows\system32\credssp.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-05-13 11:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-05-13 11:49:04 ----A---- C:\Windows\SYSWOW64\instnm.exe 2015-05-13 11:49:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll 2015-05-13 11:49:03 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-05-13 11:49:03 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-05-13 11:49:03 ----A---- C:\Windows\SYSWOW64\user.exe 2015-05-13 11:49:03 ----A---- C:\Windows\SYSWOW64\msobjs.dll 2015-05-13 11:49:03 ----A---- C:\Windows\SYSWOW64\msaudite.dll 2015-05-13 11:49:03 ----A---- C:\Windows\SYSWOW64\apisetschema.dll 2015-05-13 11:49:03 ----A---- C:\Windows\SYSWOW64\adtschema.dll 2015-05-13 11:49:03 ----A---- C:\Windows\system32\msobjs.dll 2015-05-13 11:49:03 ----A---- C:\Windows\system32\msaudite.dll 2015-05-13 11:49:03 ----A---- C:\Windows\system32\apisetschema.dll 2015-05-13 11:49:03 ----A---- C:\Windows\system32\adtschema.dll 2015-05-13 11:48:44 ----A---- C:\Windows\system32\FntCache.dll 2015-05-13 11:48:43 ----A---- C:\Windows\SYSWOW64\DWrite.dll 2015-05-13 11:48:43 ----A---- C:\Windows\system32\win32k.sys 2015-05-13 11:48:43 ----A---- C:\Windows\system32\DWrite.dll 2015-05-13 11:48:38 ----A---- C:\Windows\SYSWOW64\InkEd.dll 2015-05-13 11:48:38 ----A---- C:\Windows\system32\jnwmon.dll 2015-05-13 11:48:38 ----A---- C:\Windows\system32\InkEd.dll 2015-05-13 11:48:35 ----A---- C:\Windows\SYSWOW64\wpdshext.dll 2015-05-13 11:48:35 ----A---- C:\Windows\system32\wpdshext.dll 2015-05-13 11:48:31 ----A---- C:\Windows\SYSWOW64\poqexec.exe 2015-05-13 11:48:31 ----A---- C:\Windows\system32\poqexec.exe 2015-05-13 11:48:30 ----A---- C:\Windows\SYSWOW64\shimeng.dll 2015-05-13 11:48:30 ----A---- C:\Windows\SYSWOW64\sdbinst.exe 2015-05-13 11:48:30 ----A---- C:\Windows\SYSWOW64\apphelp.dll 2015-05-13 11:48:30 ----A---- C:\Windows\system32\shimeng.dll 2015-05-13 11:48:30 ----A---- C:\Windows\system32\sdbinst.exe 2015-05-13 11:48:30 ----A---- C:\Windows\system32\apphelp.dll 2015-05-13 11:48:30 ----A---- C:\Windows\system32\aelupsvc.dll 2015-05-11 18:30:52 ----D---- C:\Program Files\Microsoft Xbox 360 Accessories 2015-05-10 21:40:17 ----D---- C:\Users\Ellen\AppData\Roaming\jdcxxjys 2015-05-10 21:27:47 ----D---- C:\Program Files (x86)\predm 2015-05-10 21:14:50 ----D---- C:\Program Files (x86)\01e674bc-b417-4257-9cd5-f4194fdba9e4 2015-05-10 21:14:45 ----D---- C:\Program Files (x86)\GoHD 2015-05-10 21:14:09 ----D---- C:\ProgramData\2570c7c900004c26 2015-05-10 21:13:57 ----A---- C:\Windows\system32\roboot64.exe 2015-05-10 21:13:53 ----D---- C:\Users\Ellen\AppData\Roaming\systweak 2015-05-10 21:12:31 ----D---- C:\ProgramData\{ee9cba4c-5637-5405-ee9c-cba4c563e931} 2015-05-10 21:12:02 ----D---- C:\Program Files (x86)\Chart Choosing 2015-05-10 21:08:21 ----D---- C:\ProgramData\5328226958838354170 2015-05-10 21:08:18 ----D---- C:\Program Files (x86)\PriceLesss 2015-05-10 20:18:24 ----D---- C:\ProgramData\Ubisoft 2015-04-29 20:55:57 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2015-04-29 20:55:57 ----D---- C:\Program Files\iTunes 2015-04-29 20:55:57 ----D---- C:\Program Files\iPod 2015-04-29 20:55:57 ----D---- C:\Program Files (x86)\iTunes 2015-04-26 18:55:48 ----D---- C:\Program Files (x86)\Mozilla Firefox 2015-04-19 18:47:47 ----RD---- C:\Program Files (x86)\Skype 2015-04-19 17:26:50 ----A---- C:\Windows\SYSWOW64\wuwebv.dll 2015-04-19 17:26:50 ----A---- C:\Windows\SYSWOW64\wups.dll 2015-04-19 17:26:50 ----A---- C:\Windows\SYSWOW64\wudriver.dll 2015-04-19 17:26:50 ----A---- C:\Windows\SYSWOW64\wuapp.exe 2015-04-19 17:26:50 ----A---- C:\Windows\SYSWOW64\wuapi.dll 2015-04-19 17:26:50 ----A---- C:\Windows\system32\wuwebv.dll 2015-04-19 17:26:50 ----A---- C:\Windows\system32\wups2.dll 2015-04-19 17:26:50 ----A---- C:\Windows\system32\wups.dll 2015-04-19 17:26:50 ----A---- C:\Windows\system32\wudriver.dll 2015-04-19 17:26:50 ----A---- C:\Windows\system32\wucltux.dll 2015-04-19 17:26:50 ----A---- C:\Windows\system32\wuaueng.dll 2015-04-19 17:26:50 ----A---- C:\Windows\system32\wuauclt.exe 2015-04-19 17:26:50 ----A---- C:\Windows\system32\wuapp.exe 2015-04-19 17:26:50 ----A---- C:\Windows\system32\wuapi.dll 2015-04-19 17:26:50 ----A---- C:\Windows\system32\wu.upgrade.ps.dll 2015-04-19 17:26:50 ----A---- C:\Windows\system32\WinSetupUI.dll 2015-04-19 17:26:45 ----A---- C:\Windows\system32\invagent.dll 2015-04-19 17:26:45 ----A---- C:\Windows\system32\generaltel.dll 2015-04-19 17:26:45 ----A---- C:\Windows\system32\devinv.dll 2015-04-19 17:26:45 ----A---- C:\Windows\system32\appraiser.dll 2015-04-19 17:26:45 ----A---- C:\Windows\system32\aepic.dll 2015-04-19 17:26:45 ----A---- C:\Windows\system32\aepdu.dll 2015-04-19 17:26:45 ----A---- C:\Windows\system32\aeinv.dll 2015-04-19 17:26:45 ----A---- C:\Windows\system32\acmigration.dll 2015-04-19 17:26:44 ----A---- C:\Windows\SYSWOW64\gdi32.dll 2015-04-19 17:26:44 ----A---- C:\Windows\system32\gdi32.dll 2015-04-19 17:26:42 ----A---- C:\Windows\SYSWOW64\msxml3r.dll 2015-04-19 17:26:42 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2015-04-19 17:26:42 ----A---- C:\Windows\system32\msxml3r.dll 2015-04-19 17:26:42 ----A---- C:\Windows\system32\msxml3.dll 2015-04-19 17:26:20 ----A---- C:\Windows\system32\drivers\http.sys 2015-04-19 17:25:14 ----A---- C:\Windows\SYSWOW64\clfsw32.dll 2015-04-19 17:25:14 ----A---- C:\Windows\system32\clfsw32.dll 2015-04-19 17:25:14 ----A---- C:\Windows\system32\clfs.sys 2015-04-19 17:17:30 ----A---- C:\Windows\system32\drivers\HipShieldK.sys 2015-04-09 21:44:55 ----SD---- C:\Windows\SYSWOW64\GWX 2015-04-09 21:44:55 ----SD---- C:\Windows\system32\GWX 2015-03-22 20:23:51 ----AH---- C:\Windows\system32\mlfcache.dat 2015-03-14 19:10:46 ----D---- C:\Windows\system32\%LOCALAPPDATA% 2015-03-13 07:49:32 ----A---- C:\Windows\SYSWOW64\atmfd.dll 2015-03-13 07:49:32 ----A---- C:\Windows\system32\atmfd.dll 2015-03-13 07:49:31 ----A---- C:\Windows\SYSWOW64\lpk.dll 2015-03-13 07:49:31 ----A---- C:\Windows\SYSWOW64\fontsub.dll 2015-03-13 07:49:31 ----A---- C:\Windows\SYSWOW64\dciman32.dll 2015-03-13 07:49:31 ----A---- C:\Windows\SYSWOW64\atmlib.dll 2015-03-13 07:49:31 ----A---- C:\Windows\system32\lpk.dll 2015-03-13 07:49:31 ----A---- C:\Windows\system32\fontsub.dll 2015-03-13 07:49:31 ----A---- C:\Windows\system32\dciman32.dll 2015-03-13 07:49:31 ----A---- C:\Windows\system32\atmlib.dll 2015-03-13 07:49:02 ----A---- C:\Windows\SYSWOW64\blackbox.dll 2015-03-13 07:49:02 ----A---- C:\Windows\system32\blackbox.dll 2015-03-13 07:49:01 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll 2015-03-13 07:49:01 ----A---- C:\Windows\system32\drmv2clt.dll 2015-03-13 07:49:00 ----A---- C:\Windows\system32\wmp.dll 2015-03-13 07:48:58 ----A---- C:\Windows\SYSWOW64\wmp.dll 2015-03-13 07:48:58 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll 2015-03-13 07:48:58 ----A---- C:\Windows\SYSWOW64\mf.dll 2015-03-13 07:48:58 ----A---- C:\Windows\system32\wmdrmsdk.dll 2015-03-13 07:48:57 ----A---- C:\Windows\system32\drmmgrtn.dll 2015-03-13 07:48:57 ----A---- C:\Windows\system32\crypt32.dll 2015-03-13 07:48:56 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll 2015-03-13 07:48:56 ----A---- C:\Windows\SYSWOW64\crypt32.dll 2015-03-13 07:48:56 ----A---- C:\Windows\system32\drivers\PEAuth.sys 2015-03-13 07:48:55 ----A---- C:\Windows\system32\quartz.dll 2015-03-13 07:48:55 ----A---- C:\Windows\system32\evr.dll 2015-03-13 07:48:54 ----A---- C:\Windows\SYSWOW64\quartz.dll 2015-03-13 07:48:54 ----A---- C:\Windows\SYSWOW64\evr.dll 2015-03-13 07:48:54 ----A---- C:\Windows\system32\mfplat.dll 2015-03-13 07:48:54 ----A---- C:\Windows\system32\cryptui.dll 2015-03-13 07:48:53 ----A---- C:\Windows\SYSWOW64\mfplat.dll 2015-03-13 07:48:53 ----A---- C:\Windows\SYSWOW64\cryptui.dll 2015-03-13 07:48:53 ----A---- C:\Windows\SYSWOW64\cryptsp.dll 2015-03-13 07:48:53 ----A---- C:\Windows\system32\winresume.exe 2015-03-13 07:48:53 ----A---- C:\Windows\system32\pcasvc.dll 2015-03-13 07:48:53 ----A---- C:\Windows\system32\msscp.dll 2015-03-13 07:48:53 ----A---- C:\Windows\system32\mf.dll 2015-03-13 07:48:53 ----A---- C:\Windows\system32\drivers\mountmgr.sys 2015-03-13 07:48:53 ----A---- C:\Windows\system32\cryptsp.dll 2015-03-13 07:48:51 ----A---- C:\Windows\SYSWOW64\wintrust.dll 2015-03-13 07:48:51 ----A---- C:\Windows\SYSWOW64\qdvd.dll 2015-03-13 07:48:51 ----A---- C:\Windows\SYSWOW64\msscp.dll 2015-03-13 07:48:51 ----A---- C:\Windows\SYSWOW64\cryptnet.dll 2015-03-13 07:48:51 ----A---- C:\Windows\system32\wintrust.dll 2015-03-13 07:48:51 ----A---- C:\Windows\system32\winload.exe 2015-03-13 07:48:51 ----A---- C:\Windows\system32\msnetobj.dll 2015-03-13 07:48:51 ----A---- C:\Windows\system32\drivers\appid.sys 2015-03-13 07:48:51 ----A---- C:\Windows\system32\cryptnet.dll 2015-03-13 07:48:51 ----A---- C:\Windows\system32\ci.dll 2015-03-13 07:48:51 ----A---- C:\Windows\system32\audiosrv.dll 2015-03-13 07:48:51 ----A---- C:\Windows\system32\audiodg.exe 2015-03-13 07:48:51 ----A---- C:\Windows\system32\appidsvc.dll 2015-03-13 07:48:50 ----A---- C:\Windows\SYSWOW64\msnetobj.dll 2015-03-13 07:48:50 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll 2015-03-13 07:48:50 ----A---- C:\Windows\system32\qdvd.dll 2015-03-13 07:48:50 ----A---- C:\Windows\system32\pcadm.dll 2015-03-13 07:48:50 ----A---- C:\Windows\system32\cryptsvc.dll 2015-03-13 07:48:50 ----A---- C:\Windows\system32\AudioSes.dll 2015-03-13 07:48:50 ----A---- C:\Windows\system32\AUDIOKSE.dll 2015-03-13 07:48:50 ----A---- C:\Windows\system32\AudioEng.dll 2015-03-13 07:48:49 ----A---- C:\Windows\SYSWOW64\AudioEng.dll 2015-03-13 07:48:49 ----A---- C:\Windows\system32\rrinstaller.exe 2015-03-13 07:48:48 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe 2015-03-13 07:48:48 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll 2015-03-13 07:48:48 ----A---- C:\Windows\system32\appidpolicyconverter.exe 2015-03-13 07:48:47 ----A---- C:\Windows\SYSWOW64\mfps.dll 2015-03-13 07:48:47 ----A---- C:\Windows\SYSWOW64\mfpmp.exe 2015-03-13 07:48:47 ----A---- C:\Windows\SYSWOW64\AudioSes.dll 2015-03-13 07:48:47 ----A---- C:\Windows\SYSWOW64\appidapi.dll 2015-03-13 07:48:47 ----A---- C:\Windows\system32\setbcdlocale.dll 2015-03-13 07:48:47 ----A---- C:\Windows\system32\pcawrk.exe 2015-03-13 07:48:47 ----A---- C:\Windows\system32\pcalua.exe 2015-03-13 07:48:47 ----A---- C:\Windows\system32\msmmsp.dll 2015-03-13 07:48:47 ----A---- C:\Windows\system32\mfps.dll 2015-03-13 07:48:47 ----A---- C:\Windows\system32\mfpmp.exe 2015-03-13 07:48:47 ----A---- C:\Windows\system32\EncDump.dll 2015-03-13 07:48:47 ----A---- C:\Windows\system32\appidcertstorecheck.exe 2015-03-13 07:48:47 ----A---- C:\Windows\system32\appidapi.dll 2015-03-13 07:48:46 ----A---- C:\Windows\system32\spwmp.dll 2015-03-13 07:48:45 ----A---- C:\Windows\SYSWOW64\wmploc.DLL 2015-03-13 07:48:45 ----A---- C:\Windows\SYSWOW64\spwmp.dll 2015-03-13 07:48:45 ----A---- C:\Windows\SYSWOW64\dxmasf.dll 2015-03-13 07:48:45 ----A---- C:\Windows\system32\pcaevts.dll 2015-03-13 07:48:45 ----A---- C:\Windows\system32\dxmasf.dll 2015-03-13 07:48:44 ----A---- C:\Windows\SYSWOW64\mferror.dll 2015-03-13 07:48:44 ----A---- C:\Windows\system32\wmploc.DLL 2015-03-13 07:48:44 ----A---- C:\Windows\system32\mferror.dll 2015-03-13 07:48:12 ----A---- C:\Windows\SYSWOW64\ubpm.dll 2015-03-13 07:48:12 ----A---- C:\Windows\system32\ubpm.dll 2015-03-13 07:48:10 ----A---- C:\Windows\system32\shell32.dll 2015-03-13 07:48:09 ----A---- C:\Windows\SYSWOW64\shell32.dll 2015-03-13 07:48:06 ----A---- C:\Windows\system32\drivers\cng.sys 2015-03-13 07:47:56 ----A---- C:\Windows\SYSWOW64\msctf.dll 2015-03-13 07:47:56 ----A---- C:\Windows\system32\msctf.dll 2015-03-13 07:47:55 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll 2015-03-13 07:47:55 ----A---- C:\Windows\system32\WindowsCodecs.dll 2015-03-13 07:46:43 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll 2015-03-13 07:46:43 ----A---- C:\Windows\system32\WMPhoto.dll 2015-03-01 19:04:22 ----A---- C:\Windows\SYSWOW64\wdi.dll 2015-03-01 19:04:22 ----A---- C:\Windows\system32\wdi.dll 2015-03-01 19:04:22 ----A---- C:\Windows\system32\powertracker.dll 2015-03-01 19:04:22 ----A---- C:\Windows\system32\perftrack.dll 2015-02-18 15:44:14 ----A---- C:\Windows\system32\aitstatic.exe 2015-02-18 15:42:57 ----A---- C:\Windows\SYSWOW64\oleaut32.dll 2015-02-18 15:42:57 ----A---- C:\Windows\system32\oleaut32.dll 2015-02-18 15:42:54 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2015-02-18 15:42:54 ----A---- C:\Windows\system32\mstscax.dll 2015-02-18 15:42:53 ----A---- C:\Windows\SYSWOW64\aaclient.dll 2015-02-18 15:42:26 ----A---- C:\Windows\SYSWOW64\scesrv.dll 2015-02-18 15:42:26 ----A---- C:\Windows\system32\scesrv.dll ======List of files/folders modified in the last 3 months====== 2015-05-17 19:51:25 ----D---- C:\Windows\Temp 2015-05-17 19:51:23 ----RD---- C:\Program Files 2015-05-17 19:30:14 ----D---- C:\Windows\system32\config 2015-05-17 19:18:28 ----D---- C:\ProgramData\clear.fi 2015-05-17 19:18:23 ----A---- C:\Windows\SYSWOW64\log.txt 2015-05-17 19:17:30 ----D---- C:\ProgramData\Origin 2015-05-17 19:12:38 ----SHD---- C:\Config.Msi 2015-05-17 19:00:39 ----SHD---- C:\Windows\Installer 2015-05-17 18:47:39 ----D---- C:\Windows\Tasks 2015-05-17 18:47:39 ----D---- C:\Windows\system32\Tasks 2015-05-14 19:45:32 ----D---- C:\Windows\Microsoft.NET 2015-05-14 19:44:55 ----RSD---- C:\Windows\assembly 2015-05-14 19:10:26 ----D---- C:\Windows\System32 2015-05-14 19:10:26 ----D---- C:\Windows\inf 2015-05-14 19:10:26 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-05-14 19:05:33 ----D---- C:\Windows\SysWOW64 2015-05-14 19:05:14 ----D---- C:\Windows\winsxs 2015-05-14 19:02:13 ----D---- C:\Program Files\Microsoft Silverlight 2015-05-14 19:02:11 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2015-05-14 15:29:01 ----D---- C:\Windows\SYSWOW64\nl-NL 2015-05-14 15:29:01 ----D---- C:\Windows\system32\nl-NL 2015-05-14 15:29:01 ----D---- C:\Program Files\Internet Explorer 2015-05-14 15:28:57 ----D---- C:\Windows\SYSWOW64\en-US 2015-05-14 15:28:54 ----D---- C:\Windows\system32\en-US 2015-05-14 15:28:50 ----D---- C:\Program Files (x86)\Internet Explorer 2015-05-14 15:28:32 ----D---- C:\Windows\AppPatch 2015-05-14 15:28:30 ----D---- C:\Windows\system32\drivers 2015-05-14 15:28:27 ----D---- C:\Program Files\Windows Journal 2015-05-14 15:28:24 ----D---- C:\Windows\system32\AdvancedInstallers 2015-05-14 15:28:17 ----D---- C:\Windows\system32\DriverStore 2015-05-14 15:28:16 ----D---- C:\Windows\system32\drivers\UMDF 2015-05-14 14:44:59 ----D---- C:\Program Files (x86)\Microsoft Application Virtualization Client 2015-05-14 14:44:59 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI 2015-05-14 14:44:24 ----SHD---- C:\System Volume Information 2015-05-14 14:42:09 ----D---- C:\Windows\system32\MRT 2015-05-13 12:40:53 ----D---- C:\Program Files (x86)\Denda Games 2015-05-13 12:20:59 ----D---- C:\ProgramData\Spybot - Search & Destroy 2015-05-13 12:13:39 ----D---- C:\Program Files (x86)\TheGuild2 2015-05-13 12:12:03 ----D---- C:\Program Files (x86)\The Guild II - Venice 2015-05-13 12:10:44 ----RD---- C:\Program Files (x86) 2015-05-13 12:05:00 ----D---- C:\Windows\system32\NDF 2015-05-13 11:50:55 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy 2 2015-05-13 11:48:13 ----D---- C:\Windows\system32\catroot2 2015-05-11 18:33:53 ----AD---- C:\Windows 2015-05-10 21:25:53 ----HD---- C:\ProgramData 2015-05-10 20:30:25 ----D---- C:\Users\Ellen\AppData\Roaming\Ubisoft 2015-05-10 19:58:30 ----D---- C:\Program Files (x86)\Ubisoft 2015-05-10 19:58:26 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2015-04-30 10:07:28 ----A---- C:\Windows\system32\MRT.exe 2015-04-29 20:55:57 ----D---- C:\Program Files\Common Files\Apple 2015-04-28 20:47:36 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2015-04-26 18:34:57 ----D---- C:\Windows\AppCompat 2015-04-20 18:19:00 ----D---- C:\Windows\PolicyDefinitions 2015-04-20 18:18:57 ----SD---- C:\Windows\system32\CompatTel 2015-04-20 18:18:54 ----D---- C:\Windows\system32\appraiser 2015-04-19 18:51:10 ----D---- C:\Windows\system32\catroot 2015-04-19 18:47:47 ----D---- C:\Program Files (x86)\Common Files 2015-04-19 18:47:38 ----D---- C:\ProgramData\Skype 2015-04-19 18:33:14 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2015-04-14 17:46:52 ----D---- C:\Program Files (x86)\Origin 2015-04-12 20:47:42 ----D---- C:\Users\Ellen\AppData\Roaming\SoftGrid Client 2015-04-09 21:45:07 ----D---- C:\Windows\Logs 2015-03-28 18:35:57 ----D---- C:\Windows\system32\wbem 2015-03-22 19:47:24 ----A---- C:\Windows\wininit.ini 2015-03-14 19:05:20 ----D---- C:\Windows\SYSWOW64\Dism 2015-03-14 19:05:20 ----D---- C:\Program Files\Windows Media Player 2015-03-14 19:05:20 ----D---- C:\Program Files (x86)\Windows Media Player 2015-03-14 19:05:15 ----D---- C:\Windows\system32\Dism 2015-03-14 19:05:02 ----D---- C:\Windows\system32\CodeIntegrity 2015-03-14 19:05:02 ----D---- C:\Windows\system32\Boot 2015-03-06 14:20:30 ----D---- C:\Windows\tracing 2015-02-22 20:35:52 ----D---- C:\Windows\rescache 2015-02-22 19:59:56 ----D---- C:\Program Files\Common Files\mcafee ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-04-26 557848] R0 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2014-10-01 786304] R0 mfewfpk;McAfee Inc. mfewfpk; C:\Windows\system32\drivers\mfewfpk.sys [2014-10-01 348560] R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2014-07-02 32544] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888] R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys [2013-05-21 45856] R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2011-08-12 22648] R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2011-08-12 20520] R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-08-12 62776] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2013-08-14 88480] R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2013-08-14 46400] R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2010-11-30 16120] R3 b57xdbd;Broadcom xD Picture Bus Driver Service; C:\Windows\system32\drivers\b57xdbd.sys [2011-01-21 67624] R3 b57xdmp;Broadcom xD Picture vstorp client drv; C:\Windows\system32\drivers\b57xdmp.sys [2011-01-21 19496] R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-06-08 4729408] R3 bScsiMSa;bScsiMSa; C:\Windows\system32\drivers\bScsiMSa.sys [2011-05-16 51240] R3 bScsiSDa;bScsiSDa; C:\Windows\system32\DRIVERS\bScsiSDa.sys [2011-05-06 86056] R3 cfwids;McAfee Inc. cfwids; C:\Windows\system32\drivers\cfwids.sys [2014-10-01 72136] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-06-16 110336] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240] R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-06-10 12230912] R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440] R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2011-05-10 425000] R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-05-12 25816] R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344] R3 mfeapfk;McAfee Inc. mfeapfk; C:\Windows\system32\drivers\mfeapfk.sys [2014-10-01 181584] R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [2014-10-01 313680] R3 mfefirek;McAfee Inc. mfefirek; C:\Windows\system32\drivers\mfefirek.sys [2014-10-01 526360] R3 mfencbdc;McAfee Inc. mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [2014-09-19 447440] R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2011-03-10 18432] R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2011-02-10 82432] R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2011-02-10 181760] R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2014-07-25 20256] R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2014-03-31 40392] R3 Point64;Microsoft IntelliPoint Filter Driver; C:\Windows\system32\DRIVERS\point64k.sys [2009-11-05 34160] R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2014-10-08 766632] R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2014-10-08 273576] R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2014-10-08 29352] R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2014-10-08 23208] R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-06-16 206080] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-07-30 1383472] R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2011-03-10 17408] S2 EAPPkt;Realtek EAPPkt Protocol; C:\Windows\system32\DRIVERS\EAPPkt.sys [] S3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984] S3 BthPan;Bluetooth-apparaat (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784] S3 BTHPORT;Stuurprogramma voor Bluetooth-poort; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960] S3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384] S3 HipShieldK;McAfee Inc. HipShieldK; C:\Windows\system32\drivers\HipShieldK.sys [2013-09-23 197704] S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [] S3 massfilter;Mass Storage Filter Driver; C:\Windows\system32\drivers\massfilter.sys [2012-09-26 11776] S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-06-24 122584] S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-05-12 63704] S3 mfencrk;McAfee Inc. mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [2014-09-19 96600] S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-04-22 25600] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 RFCOMM;Bluetooth-apparaat (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720] S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392] S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432] R2 Apple Mobile Device Service;Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-20 77128] R2 BecHelperService;BecHelperService; C:\Program Files (x86)\KPN\Mobiel Internet Software\BecHelperService.exe [2013-07-29 1915904] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184] R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2015-03-18 822496] R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-07-01 353360] R2 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2011-08-02 872552] R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2011-05-30 36456] R2 HomeNetSvc;McAfee Home Network; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-10-31 335064] R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-04-30 13592] R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376] R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2011-02-01 326168] R2 Maxtor Sync Service;Maxtor Service; C:\Program Files (x86)\Maxtor\Sync\SyncServices.exe [2007-09-28 156976] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [2015-04-29 155368] R2 McAPExe;McAfee AP Service; C:\Program Files\McAfee\MSC\McAPExe.exe [2015-02-27 562200] R2 mccspsvc;McAfee CSP Service; C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe [2015-01-22 422632] R2 McMPFSvc;McAfee Personal Firewall Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-10-31 335064] R2 McNaiAnn;McAfee VirusScan Announcer; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [2014-10-31 335064] R2 mcpltsvc;McAfee Platform Services; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [2014-10-31 335064] R2 McProxy;McAfee Proxy Service; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [2014-10-31 335064] R2 mfecore;McAfee Anti-Malware Core; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [2014-11-06 1050952] R2 mfefire;McAfee Firewall Core Service; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [2014-10-01 221832] R2 mfevtp;McAfee Validation Trust Protection Service; C:\Windows\system32\mfevtps.exe [2014-10-01 189920] R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-10-31 335064] R2 nlsX86cc;Nalpeiron Licensing Service; C:\Windows\SysWOW64\nlssrv32.exe [2014-01-23 70768] R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-02 2804568] R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-04-24 256832] R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2014-07-25 1720608] R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2014-07-25 18956064] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2014-07-02 935368] R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-10 189728] R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2013-10-15 3921880] R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2013-09-20 1042272] R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2013-09-13 171416] R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2014-10-08 534184] R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280] R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2015-04-07 643880] R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2014-10-08 211104] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088] S2 gupdate;Google Updateservice (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-30 107912] S2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-05-12 1809720] S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496] S2 Update Chart Choosing;Update Chart Choosing; C:\Program Files (x86)\Chart Choosing\updateChartChoosing.exe [] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-19 268464] S3 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808] S3 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-06-21 173424] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-09-17 655624] S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-30 107912] S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-26 194032] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-04-21 114688] S3 McAWFwk;McAfee Activation Service; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [2011-03-09 224704] S3 McODS;McAfee Scanner; C:\Program Files\mcafee\VirusScan\mcods.exe [2015-02-27 601864] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-04-26 148080] S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-04-14 1931632] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-04-22 720936] S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-11-30 149504] S4 McOobeSv;McAfee OOBE Service; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-08-31 201304] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] -----------------EOF-----------------