Logfile of random's system information tool 1.10 (written by random/random) Run by Jourim at 2015-05-23 13:30:13 Microsoft Windows 8.1 met Bing System drive C: has 421 GB (91%) free of 460 GB Total RAM: 8074 MB (71% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 13:30:14, on 23/05/2015 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.9600.17037) Boot mode: Normal Running processes: C:\Users\Jourim\AppData\Local\gmsd_be_198\upgmsd_be_198.exe C:\Program Files (x86)\XTab\cmdshell.exe C:\Program Files (x86)\XTab\HPNotify.exe C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe C:\Users\Jourim\AppData\Roaming\Spotify\SpotifyWebHelper.exe C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe C:\Program Files (x86)\gmsd_be_198\gmsd_be_198.exe C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe C:\Users\Jourim\AppData\Local\Pokki\Engine\HostAppService.exe C:\Program Files (x86)\gmsd_be_198\gmsd_be_198.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Windows\SysWOW64\cmd.exe C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe c:\PROGRA~2\mcafee\siteadvisor\saui.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\Jourim\Downloads\RSIT.exe C:\Program Files (x86)\trend micro\Jourim.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: LuckyTab Class - {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} - C:\Program Files (x86)\XTab\SupTab.dll O2 - BHO: Primary Color 1.0.0.7 - {b0a28f54-b08f-4049-a9bf-8d33bd1e9222} - C:\Program Files (x86)\Primary Color\PrimaryColorbho.dll O4 - HKLM\..\Run: [BacKGround Agent] C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe O4 - HKLM\..\Run: [mcpltui_exe] "C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe" /platui /runkey O4 - HKLM\..\Run: [abDocsDllLoader] C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe O4 - HKLM\..\Run: [gmsd_be_198] "C:\Program Files (x86)\gmsd_be_198\gmsd_be_198.exe" O4 - HKLM\..\RunOnce: [upgmsd_be_198.exe] C:\Users\Jourim\AppData\Local\gmsd_be_198\upgmsd_be_198.exe -runonce O4 - HKCU\..\Run: [Pokki] "%LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON O4 - HKCU\..\Run: [AcerPortal] "C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe" startup O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Jourim\AppData\Roaming\Spotify\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [Optimizer Pro] C:\Program Files (x86)\Optimizer Pro 3.93\OptProLauncher.exe O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe" O4 - Startup: MyPC Backup.lnk = C:\Program Files (x86)\OLBPre\OLBPre.exe O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AtherosSvc - Windows (R) Win 7 DDK provider - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: GamesAppIntegrationService - WildTangent - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: McAfee Home Network (HomeNetSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing) O23 - Service: IHProtect Service - XTab system - C:\Program Files (x86)\XTab\ProtectService.exe O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Launch Manager Service (LMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe O23 - Service: McAfee AP Service (McAPExe) - McAfee, Inc. - C:\Program Files\McAfee\MSC\McAPExe.exe O23 - Service: McAfee Activation Service (McAWFwk) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe O23 - Service: McAfee CSP Service (mccspsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe O23 - Service: McAfee Platform Services (mcpltsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe O23 - Service: McAfee Anti-Malware Core (mfecore) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\Windows\system32\mfevtps.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Quick Access Service (QASvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\QASvc.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe O23 - Service: Quick Access RadioMgr Service (RMSvc) - Acer Incorporate - C:\Program Files\Acer\Acer Quick Access\RMSvc.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: User Experience Improvement Program (UEIPSvc) - acer - C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Update Primary Color - Unknown owner - C:\Program Files (x86)\Primary Color\updatePrimaryColor.exe O23 - Service: Util Primary Color - Unknown owner - C:\Program Files (x86)\Primary Color\bin\utilPrimaryColor.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11272 bytes ======Scheduled tasks folder====== C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\Windows\tasks\Periodic Synchronize Task.job - c:\programdata\{c2a9db85-8f48-576a-c2a9-9db858f46e16}\hqghumeaylnlf.exe --startup=1 --single ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}] LuckyTab Class - C:\Program Files (x86)\XTab\SupTab.dll [2015-05-18 538240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b0a28f54-b08f-4049-a9bf-8d33bd1e9222}] Primary Color 1.0.0.7 - C:\Program Files (x86)\Primary Color\PrimaryColorbho.dll [2015-05-21 269048] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "BacKGround Agent"=C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [2015-05-06 66304] "mcpltui_exe"=C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe [2015-02-09 643064] "abDocsDllLoader"=C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [2015-05-06 92928] "gmsd_be_198"=C:\Program Files (x86)\gmsd_be_198\gmsd_be_198.exe [2015-05-19 3983816] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "upgmsd_be_198.exe"=C:\Users\Jourim\AppData\Local\gmsd_be_198\upgmsd_be_198.exe [2015-05-19 3283912] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] "BtvStack"=C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [2014-04-29 134784] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Pokki"=C:\Users\Jourim\AppData\Local\Pokki\Engine\HostAppServiceUpdater.exe [2015-05-05 10566144] "AcerPortal"=C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-05-06 2574080] "Spotify Web Helper"=C:\Users\Jourim\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2015-05-21 2022968] "Optimizer Pro"=C:\Program Files (x86)\Optimizer Pro 3.93\OptProLauncher.exe [2015-05-20 148008] C:\Users\Jourim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup MyPC Backup.lnk - C:\Program Files (x86)\OLBPre\OLBPre.exe [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2ce.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefire] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "msacm.msgsm610"=msgsm32.acm "msacm.msg711"=msg711.acm "msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm "vidc.yuy2"=msyuv.dll "vidc.i420"=iyuv_32.dll "vidc.cvid"=iccvid.dll "vidc.yvyu"=msyuv.dll "vidc.yvu9"=tsbyuv.dll "wavemapper"=msacm32.drv "midimapper"=midimap.dll "vidc.uyvy"=msyuv.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "vidc.iyuv"=iyuv_32.dll "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "wave3"=wdmaud.drv "midi3"=wdmaud.drv "mixer3"=wdmaud.drv "wave4"=wdmaud.drv "mixer4"=wdmaud.drv "midi4"=wdmaud.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2015-05-23 13:14:16 ----D---- C:\rsit 2015-05-23 13:14:16 ----D---- C:\Program Files (x86)\trend micro 2015-05-23 12:11:23 ----A---- C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-05-23 09:11:31 ----A---- C:\Windows\SysWOW64\nlaapi.dll 2015-05-23 09:11:31 ----A---- C:\Windows\SysWOW64\eappprxy.dll 2015-05-23 09:11:31 ----A---- C:\Windows\SysWOW64\eapphost.dll 2015-05-23 09:11:31 ----A---- C:\Windows\SysWOW64\eappgnui.dll 2015-05-23 09:11:31 ----A---- C:\Windows\SysWOW64\eappcfg.dll 2015-05-23 09:11:31 ----A---- C:\Windows\SysWOW64\eapp3hst.dll 2015-05-23 09:10:19 ----A---- C:\Windows\SysWOW64\shell32.dll 2015-05-23 08:43:42 ----A---- C:\Windows\SysWOW64\qedit.dll 2015-05-23 08:17:45 ----A---- C:\Windows\SysWOW64\WindowsCodecs.dll 2015-05-23 08:16:09 ----A---- C:\Windows\SysWOW64\pku2u.dll 2015-05-23 08:16:09 ----A---- C:\Windows\SysWOW64\kerberos.dll 2015-05-23 08:15:46 ----A---- C:\Windows\SysWOW64\certcli.dll 2015-05-23 08:15:45 ----A---- C:\Windows\SysWOW64\adtschema.dll 2015-05-23 08:15:44 ----A---- C:\Windows\SysWOW64\msaudite.dll 2015-05-23 08:15:06 ----A---- C:\Windows\SysWOW64\msvcr120_clr0400.dll 2015-05-23 08:14:11 ----A---- C:\Windows\SysWOW64\clfsw32.dll 2015-05-23 08:14:10 ----A---- C:\Windows\SysWOW64\WMPhoto.dll 2015-05-23 08:14:09 ----A---- C:\Windows\SysWOW64\msctf.dll 2015-05-23 08:14:05 ----A---- C:\Windows\SysWOW64\InkEd.dll 2015-05-23 08:14:03 ----A---- C:\Windows\SysWOW64\msi.dll 2015-05-23 08:14:03 ----A---- C:\Windows\SysWOW64\authui.dll 2015-05-23 08:14:02 ----A---- C:\Windows\SysWOW64\msihnd.dll 2015-05-23 08:14:00 ----A---- C:\Windows\SysWOW64\WPDShServiceObj.dll 2015-05-23 08:14:00 ----A---- C:\Windows\SysWOW64\WPDShextAutoplay.exe 2015-05-23 08:14:00 ----A---- C:\Windows\SysWOW64\wpdshext.dll 2015-05-23 08:13:59 ----A---- C:\Windows\SysWOW64\AUDIOKSE.dll 2015-05-23 08:13:59 ----A---- C:\Windows\SysWOW64\AudioEng.dll 2015-05-23 08:13:58 ----A---- C:\Windows\SysWOW64\wermgr.exe 2015-05-23 08:13:58 ----A---- C:\Windows\SysWOW64\WerFault.exe 2015-05-23 08:13:58 ----A---- C:\Windows\SysWOW64\wer.dll 2015-05-23 08:13:58 ----A---- C:\Windows\SysWOW64\Faultrep.dll 2015-05-23 08:13:58 ----A---- C:\Windows\SysWOW64\AudioSes.dll 2015-05-23 08:13:57 ----A---- C:\Windows\SysWOW64\WerFaultSecure.exe 2015-05-23 08:13:57 ----A---- C:\Windows\SysWOW64\werdiagcontroller.dll 2015-05-23 08:13:56 ----A---- C:\Windows\SysWOW64\explorer.exe 2015-05-23 08:13:56 ----A---- C:\Windows\explorer.exe 2015-05-23 08:13:54 ----A---- C:\Windows\SysWOW64\MrmCoreR.dll 2015-05-22 09:28:51 ----D---- C:\Users\Jourim\AppData\Roaming\WildTangent 2015-05-21 18:57:51 ----D---- C:\ProgramData\a646e5dc000070b0 2015-05-21 18:37:03 ----D---- C:\Users\Jourim\AppData\Roaming\Optimizer Pro 2015-05-21 18:31:36 ----D---- C:\Program Files (x86)\Optimizer Pro 3.93 2015-05-21 18:31:25 ----D---- C:\ProgramData\{5c5d0c0f-fbf7-9192-5c5d-d0c0ffbf303f} 2015-05-21 18:26:26 ----D---- C:\Program Files (x86)\Primary Color 2015-05-21 18:26:18 ----D---- C:\Program Files (x86)\gmsd_be_198 2015-05-21 18:26:10 ----D---- C:\ProgramData\IHProtectUpDate 2015-05-21 18:25:58 ----D---- C:\Program Files (x86)\XTab 2015-05-21 18:25:25 ----D---- C:\Users\Jourim\AppData\Roaming\istartsurf 2015-05-21 18:25:15 ----D---- C:\ProgramData\{c2a9db85-8f48-576a-c2a9-9db858f46e16} 2015-05-21 18:25:15 ----D---- C:\Program Files (x86)\OLBPre 2015-05-21 18:25:04 ----D---- C:\Program Files (x86)\Google 2015-05-21 15:55:41 ----D---- C:\Users\Jourim\AppData\Roaming\Spotify 2015-05-21 15:10:57 ----SHD---- C:\Config.Msi 2015-05-21 14:58:09 ----D---- C:\Users\Jourim\AppData\Roaming\Macromedia 2015-05-21 14:56:47 ----D---- C:\Users\Jourim\AppData\Roaming\Atheros 2015-05-21 14:55:29 ----D---- C:\Windows\oem 2015-05-21 14:55:03 ----D---- C:\Users\Jourim\AppData\Roaming\Adobe 2015-05-21 14:51:10 ----A---- C:\Windows\SysWOW64\wudriver.dll 2015-05-21 14:51:09 ----A---- C:\Windows\SysWOW64\wuwebv.dll 2015-05-21 14:51:09 ----A---- C:\Windows\SysWOW64\wups.dll 2015-05-21 14:51:09 ----A---- C:\Windows\SysWOW64\wuapp.exe 2015-05-21 14:51:09 ----A---- C:\Windows\SysWOW64\wuapi.dll 2015-05-21 14:49:14 ----SD---- C:\Users\Jourim\AppData\Roaming\Microsoft ======List of files/folders modified in the last 1 month====== 2015-05-23 13:28:14 ----D---- C:\Windows\Prefetch 2015-05-23 13:14:17 ----D---- C:\Windows\Temp 2015-05-23 13:14:16 ----RD---- C:\Program Files (x86) 2015-05-23 12:57:08 ----D---- C:\Windows\Microsoft.NET 2015-05-23 12:28:41 ----D---- C:\Windows\CbsTemp 2015-05-23 12:25:39 ----D---- C:\Windows\System32 2015-05-23 12:25:38 ----D---- C:\Windows\Inf 2015-05-23 12:18:56 ----D---- C:\Windows\WinSxS 2015-05-23 12:18:12 ----D---- C:\Program Files (x86)\McAfee 2015-05-23 12:14:47 ----D---- C:\Windows\SysWOW64 2015-05-23 12:14:47 ----D---- C:\Windows\apppatch 2015-05-23 12:14:44 ----RD---- C:\Windows\ToastData 2015-05-23 12:14:44 ----D---- C:\Windows\SysWOW64\nl-NL 2015-05-23 12:14:44 ----D---- C:\Windows\SysWOW64\fr-FR 2015-05-23 12:14:44 ----D---- C:\Windows\SysWOW64\en-US 2015-05-23 12:14:43 ----D---- C:\Windows 2015-05-23 11:14:52 ----D---- C:\Windows\Logs 2015-05-23 11:14:39 ----SD---- C:\ProgramData\Microsoft 2015-05-23 08:55:00 ----D---- C:\Windows\AppReadiness 2015-05-23 08:52:20 ----D---- C:\Windows\LiveKernelReports 2015-05-23 07:09:51 ----RSD---- C:\Windows\assembly 2015-05-22 09:28:59 ----D---- C:\Program Files (x86)\WildTangent Games 2015-05-22 09:28:51 ----D---- C:\ProgramData\WildTangent 2015-05-22 05:47:59 ----D---- C:\Windows\rescache 2015-05-22 05:46:15 ----D---- C:\Windows\debug 2015-05-21 20:18:32 ----HD---- C:\ProgramData 2015-05-21 19:33:50 ----SHD---- C:\System Volume Information 2015-05-21 18:36:02 ----SHD---- C:\Windows\Installer 2015-05-21 18:31:36 ----D---- C:\Windows\Tasks 2015-05-21 18:30:32 ----D---- C:\ProgramData\McAfee 2015-05-21 15:31:04 ----HD---- C:\Windows\ELAMBKUP 2015-05-21 15:15:31 ----D---- C:\Program Files (x86)\Acer 2015-05-21 15:09:06 ----D---- C:\ProgramData\OEM 2015-05-21 15:09:01 ----D---- C:\Windows\SoftwareDistribution 2015-05-21 15:07:49 ----HD---- C:\OEM 2015-05-21 15:02:41 ----D---- C:\ProgramData\acer 2015-05-21 14:56:09 ----SHD---- C:\$Recycle.Bin 2015-05-21 14:55:26 ----D---- C:\Windows\Panther 2015-05-21 14:55:08 ----RD---- C:\Program Files 2015-05-21 14:49:10 ----RD---- C:\Users ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 BTATH_BUS;@oem15.inf,%BTATH_BUS.SVCDESC%;Qualcomm Atheros Bluetooth Bus; C:\Windows\System32\drivers\btath_bus.sys [] R0 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [] R0 mfewfpk;McAfee Inc. mfewfpk; C:\Windows\system32\drivers\mfewfpk.sys [] R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\Windows\system32\DRIVERS\vwififlt.sys [] R3 athr;@oem14.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athwbx.sys [] R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [] R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [] R3 cfwids;McAfee Inc. cfwids; C:\Windows\system32\drivers\cfwids.sys [] R3 GPIO;@oem11.inf,%GPIO.SVCDESC%;Intel SoC GPIO Controller Driver; C:\Windows\System32\drivers\iaiogpioe.sys [] R3 iaioi2c;@oem12.inf,%Driver_Service.Desc%;I2C Controller Service; C:\Windows\System32\drivers\iaioi2ce.sys [] R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [] R3 IntcDAud;@oem1.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [] R3 iwdbus;@oem4.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\Windows\System32\drivers\iwdbus.sys [] R3 LMDriver;@oem21.inf,%LMDriver.SVCDESC%;Launch Manager Wireless Driver; C:\Windows\System32\drivers\LMDriver.sys [] R3 mfeapfk;McAfee Inc. mfeapfk; C:\Windows\system32\drivers\mfeapfk.sys [] R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [] R3 mfefirek;McAfee Inc. mfefirek; C:\Windows\system32\drivers\mfefirek.sys [] R3 mfencbdc;McAfee Inc. mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [] R3 RadioShim;@oem21.inf,%RadioShim.SVCDESC%;Shim for HID-KMDF Interface layer; C:\Windows\System32\drivers\RadioShim.sys [] R3 RTL8168;@oem5.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [] R3 TXEIx64;@oem10.inf,%TEE_SvcDesc%;Intel(R) Trusted Execution Engine Interface ; C:\Windows\System32\drivers\TXEIx64.sys [] R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [] R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\Windows\system32\DRIVERS\vwifimp.sys [] S0 mfeelamk;McAfee Inc. mfeelamk; C:\Windows\system32\drivers\mfeelamk.sys [] S3 AthBTPort;@oem18.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [] S3 BTATH_A2DP;@oem17.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [] S3 btath_avdt;@oem17.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\Windows\system32\drivers\btath_avdt.sys [] S3 BTATH_LWFLT;@oem22.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [] S3 BTATH_RCP;@oem24.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\Windows\System32\drivers\btath_rcp.sys [] S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [] S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\Windows\system32\DRIVERS\BthLEEnum.sys [] S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [] S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [] S3 HipShieldK;McAfee Inc. HipShieldK; C:\Windows\system32\drivers\HipShieldK.sys [] S3 intaud_WaveExtensible;@oem3.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [] S3 mfencrk;McAfee Inc. mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [] S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [] S3 RSUSBVSTOR;@oem13.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [2014-04-29 319104] R2 CCDMonitorService;CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2015-05-06 2839296] R2 GamesAppIntegrationService;GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [2014-04-24 227904] R2 HomeNetSvc;McAfee Home Network; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-10-31 335064] R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service; C:\Windows\system32\igfxCUIService.exe [] R2 IHProtect Service;IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [2015-05-18 157824] R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [2013-07-02 733696] R2 LMSvc;Launch Manager Service; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [2014-07-29 469736] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [2015-04-29 155368] R2 McAPExe;McAfee AP Service; C:\Program Files\McAfee\MSC\McAPExe.exe [2015-02-27 562200] R2 mccspsvc;McAfee CSP Service; C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe [2015-01-22 422632] R2 McMPFSvc;McAfee Personal Firewall Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-10-31 335064] R2 McNaiAnn;McAfee VirusScan Announcer; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2014-10-31 335064] R2 mcpltsvc;McAfee Platform Services; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2014-10-31 335064] R2 McProxy;McAfee Proxy Service; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2014-10-31 335064] R2 mfecore;McAfee Anti-Malware Core; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [2014-11-06 1050952] R2 mfefire;McAfee Firewall Core Service; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [2014-10-01 221832] R2 mfevtp;McAfee Validation Trust Protection Service; C:\Windows\system32\mfevtps.exe [] R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-10-31 335064] R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2012-04-24 254512] R2 Update Primary Color;Update Primary Color; C:\Program Files (x86)\Primary Color\updatePrimaryColor.exe [2015-05-23 662264] R2 Util Primary Color;Util Primary Color; C:\Program Files (x86)\Primary Color\bin\utilPrimaryColor.exe [2015-05-23 662264] R3 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2014-06-12 2573032] R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2014-03-18 43696] R3 QASvc;Quick Access Service; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [2014-06-26 458984] R3 RMSvc;Quick Access RadioMgr Service; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [2014-06-26 449768] R3 UEIPSvc;User Experience Improvement Program; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [2014-07-15 234240] S2 23cb3056;OptimizerPro Monitoring; C:\Windows\system32\rundll32.exe [2013-08-22 49664] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-21 107912] S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-06-09 279024] S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2014-04-24 203344] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-21 107912] S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-25 169752] S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [2013-07-02 822232] S3 McAWFwk;McAfee Activation Service; c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe [2013-07-30 334608] S3 McODS;McAfee Scanner; C:\Program Files\mcafee\VirusScan\mcods.exe [2015-02-27 601864] S4 McOobeSv2;McAfee OOBE Service2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [2014-10-31 335064] -----------------EOF-----------------