Logfile of random's system information tool 1.10 (written by random/random) Run by francist at 2015-07-03 08:56:31 Microsoft Windows 7 Professional Service Pack 1 System drive C: has 327 GB (68%) free of 477 GB Total RAM: 2814 MB (56% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 8:56:36, on 3/07/2015 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17840) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\DllHost.exe C:\Windows\system32\GWX\GWX.exe C:\Program Files\AVG\AVG2015\avgui.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Program Files\Real\RealPlayer\Update\realsched.exe C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\RealNetworks\RealDownloader\downloader2.exe C:\Windows\WindowsMobile\wmdcBase.exe C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe C:\Program Files\TechSmith\Snagit 11\Snagit32.exe C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Windows\system32\taskeng.exe C:\Program Files\CCleaner\CCleaner.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\Windows\system32\ctfmon.exe C:\Program Files\TechSmith\Snagit 11\SnagPriv.exe C:\Program Files\Okidata\OKI C3200 Status Monitor\OPSTM010.exe C:\Program Files\Microsoft Office\Office14\WINWORD.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Macromed\Flash\FlashUtil32_18_0_0_194_ActiveX.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Users\francist\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XSKQ2G25\RSIT.exe C:\Program Files\trend micro\francist.exe C:\Windows\system32\DllHost.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - Default URLSearchHook is missing O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2015\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe" MSRun O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [RealDownloader] C:\Program Files\RealNetworks\RealDownloader\downloader2.exe O4 - HKLM\..\Run: [Windows Mobile-based device management] %WINDIR%\WindowsMobile\wmdcBase.exe O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe" O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - Startup: OneNote 2010 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE O4 - Startup: OpenOffice.org 3.4.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe O4 - Global Startup: RealPlayer Cloud Service UI.lnk = C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe O4 - Global Startup: RealTimes.lnk = C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe O4 - Global Startup: Snagit 11.lnk = C:\Program Files\TechSmith\Snagit 11\Snagit32.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: Download alle links met IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm O8 - Extra context menu item: Download met IDM - C:\Program Files\Internet Download Manager\IEExt.htm O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: ABBYY FineReader 10 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.10.0) - ABBYY - C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgwdsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: OKI OPHC DCS Loader - Oki Data Corporation - C:\Windows\system32\spool\DRIVERS\W32X86\3\OPHCLDCS.EXE O23 - Service: Print Job Accounting (OkiJaSvc) - Oki Data Corporation - C:\Program Files\Okidata\Print Job Accounting\oklogsvc.exe O23 - Service: Print Job Accounting Watch Service (OkiWchSvc) - Oki Data Corporation - C:\Program Files\Okidata\Print Job Accounting\okwchsvc.exe O23 - Service: Print Job Accounting opja0004 (opja0004) - Oki Data Corporation - C:\Program Files\Okidata\Print Job Accounting\opja0004.exe O23 - Service: OKI Local Port Manager (OpLclSrv) - Oki Data Corporation - C:\Program Files\Okidata\Common\Extend3\portmgrsrv.exe O23 - Service: RealPlayer Update Service (RealPlayerUpdateSvc) - Unknown owner - C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe O23 - Service: RealTimes Desktop Service - RealNetworks, Inc. - c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe -- End of file - 9124 bytes ======Scheduled tasks folder====== C:\Windows\tasks\0215avUpdateInfo.job - C:\ProgramData\Avg_Update_0215av\0215av_AVG-Secure-Search-Update.exe /SETINFO /CMPID=0215av /INFORETRY=3 C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\AutoKMS.job - C:\Windows\AutoKMS\AutoKMS.exe =========Mozilla firefox========= ProfilePath - C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\u38188c5.default-1422026848436 prefs.js - "browser.startup.homepage" - "www.google.be" "belgiumeid@eid.belgium.be"=C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be "{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 18.0.0.198 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_198.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf] "Description"= "Path"=C:\Program Files\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0] "Description"=Picasa3 plugin "Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.45.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0] "Description"=Office Authorization plug-in for NPAPI browsers "Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331] "Description"=WLPG Install MIME type "Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=18.0.1.9] "Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In "Path"=c:\program files\real\realplayer\Netscape6\nppl3260.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpplugin;version=18.0.1.9] "Description"=RealTimes Download Plugin "Path"=c:\program files\real\realplayer\Netscape6\nprpplugin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5] "Description"=VLC Multimedia Plugin "Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5] "Description"=VLC Multimedia Plugin "Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll C:\Program Files\Mozilla Firefox\extensions\ belgiumeid@eid.belgium.be ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}] RealNetworks Download and Record Plugin for Internet Explorer - C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-06-17 513600] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-06-15 460384] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-15 172640] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184] "AVG_UI"=C:\Program Files\AVG\AVG2015\avgui.exe [2015-06-16 3727824] "StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [2013-08-19 747264] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2014-06-25 12021464] "TkBellExe"=C:\Program Files\Real\RealPlayer\update\realsched.exe [2015-06-27 286272] "Wondershare Helper Compact.exe"=C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2014-09-11 2087264] "SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2015-04-30 334896] "RealDownloader"=C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2015-06-17 608320] "Windows Mobile-based device management"=C:\Windows\WindowsMobile\wmdcBase.exe [2007-05-31 648072] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "HydraVisionDesktopManager"=C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [2011-02-09 393216] "CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2014-10-29 4826904] "msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2014-03-31 4272840] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR10] C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [2012-01-11 941320] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck] C:\Windows\system32\NeroCheck.exe [2001-07-09 155648] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2014-06-25 12021464] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] C:\Program Files\Real\RealPlayer\Update\realsched.exe [2015-06-27 286272] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup RealPlayer Cloud Service UI.lnk - C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe RealTimes.lnk - C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe Snagit 11.lnk - C:\Program Files\TechSmith\Snagit 11\Snagit32.exe C:\Users\francist\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup OneNote 2010 Schermopname en Snel starten.lnk - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE OpenOffice.org 3.4.1.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDrives"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "vidc.cvid"=iccvid.dll "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "aux2"=wdmaud.drv "msacm.siren"=sirenacm.dll "vidc.dvsd"=pdvcodec.dll ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 ======List of files/folders created in the last 1 month====== 2015-07-03 08:56:31 ----D---- C:\Program Files\trend micro 2015-07-02 19:24:51 ----A---- C:\Windows\system32\FNTCACHE.DAT 2015-07-01 14:45:17 ----D---- C:\Program Files\HD Tune 2015-06-30 12:28:46 ----D---- C:\Program Files\Speccy 2015-06-27 10:58:56 ----D---- C:\Users\francist\AppData\Roaming\RealNetworks 2015-06-27 10:58:46 ----D---- C:\ProgramData\RealNetworks 2015-06-17 19:16:23 ----D---- C:\Program Files\Mozilla Firefox 2015-06-16 01:12:39 ----D---- C:\Program Files\Common Files\Java 2015-06-13 09:44:31 ----D---- C:\Program Files\Common Files\AV 2015-06-10 05:15:11 ----A---- C:\Windows\system32\invagent.dll 2015-06-10 05:15:11 ----A---- C:\Windows\system32\generaltel.dll 2015-06-10 05:15:11 ----A---- C:\Windows\system32\devinv.dll 2015-06-10 05:15:11 ----A---- C:\Windows\system32\appraiser.dll 2015-06-10 05:15:11 ----A---- C:\Windows\system32\aepic.dll 2015-06-10 05:15:11 ----A---- C:\Windows\system32\aeinv.dll 2015-06-10 05:15:11 ----A---- C:\Windows\system32\acmigration.dll 2015-06-10 05:15:10 ----A---- C:\Windows\system32\aepdu.dll 2015-06-10 05:15:09 ----A---- C:\Windows\system32\win32k.sys 2015-06-10 05:15:09 ----A---- C:\Windows\system32\drivers\stream.sys 2015-06-10 05:15:02 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2015-06-10 05:15:02 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-06-10 05:15:02 ----A---- C:\Windows\system32\iernonce.dll 2015-06-10 05:15:02 ----A---- C:\Windows\system32\ieetwproxystub.dll 2015-06-10 05:15:02 ----A---- C:\Windows\system32\ieetwcollector.exe 2015-06-10 05:15:02 ----A---- C:\Windows\system32\ie4uinit.exe 2015-06-10 05:15:01 ----A---- C:\Windows\system32\vbscript.dll 2015-06-10 05:15:01 ----A---- C:\Windows\system32\urlmon.dll 2015-06-10 05:15:01 ----A---- C:\Windows\system32\msfeeds.dll 2015-06-10 05:15:01 ----A---- C:\Windows\system32\jsproxy.dll 2015-06-10 05:15:01 ----A---- C:\Windows\system32\jscript9diag.dll 2015-06-10 05:15:01 ----A---- C:\Windows\system32\ieUnatt.exe 2015-06-10 05:15:01 ----A---- C:\Windows\system32\iedkcs32.dll 2015-06-10 05:15:01 ----A---- C:\Windows\system32\ieapfltr.dll 2015-06-10 05:15:01 ----A---- C:\Windows\system32\dxtmsft.dll 2015-06-10 05:15:00 ----A---- C:\Windows\system32\msrating.dll 2015-06-10 05:15:00 ----A---- C:\Windows\system32\iesetup.dll 2015-06-10 05:14:59 ----A---- C:\Windows\system32\wininet.dll 2015-06-10 05:14:59 ----A---- C:\Windows\system32\jscript.dll 2015-06-10 05:14:59 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2015-06-10 05:14:58 ----A---- C:\Windows\system32\ieui.dll 2015-06-10 05:14:58 ----A---- C:\Windows\system32\ieframe.dll 2015-06-10 05:14:58 ----A---- C:\Windows\system32\dxtrans.dll 2015-06-10 05:14:56 ----A---- C:\Windows\system32\mshtmlmedia.dll 2015-06-10 05:14:56 ----A---- C:\Windows\system32\mshtmled.dll 2015-06-10 05:14:56 ----A---- C:\Windows\system32\MshtmlDac.dll 2015-06-10 05:14:55 ----A---- C:\Windows\system32\jscript9.dll 2015-06-10 05:14:54 ----A---- C:\Windows\system32\mshtml.dll 2015-06-10 05:14:53 ----A---- C:\Windows\system32\iertutil.dll 2015-06-10 05:14:39 ----A---- C:\Windows\system32\kerberos.dll 2015-06-10 05:14:39 ----A---- C:\Windows\system32\diagtrack.dll 2015-06-10 05:14:38 ----A---- C:\Windows\system32\ntkrnlpa.exe 2015-06-10 05:14:38 ----A---- C:\Windows\system32\lsasrv.dll 2015-06-10 05:14:38 ----A---- C:\Windows\system32\advapi32.dll 2015-06-10 05:14:37 ----A---- C:\Windows\system32\srcore.dll 2015-06-10 05:14:37 ----A---- C:\Windows\system32\ntdll.dll 2015-06-10 05:14:36 ----A---- C:\Windows\system32\tracerpt.exe 2015-06-10 05:14:36 ----A---- C:\Windows\system32\rstrui.exe 2015-06-10 05:14:36 ----A---- C:\Windows\system32\ntoskrnl.exe 2015-06-10 05:14:35 ----A---- C:\Windows\system32\schannel.dll 2015-06-10 05:14:35 ----A---- C:\Windows\system32\ncrypt.dll 2015-06-10 05:14:35 ----A---- C:\Windows\system32\msv1_0.dll 2015-06-10 05:14:35 ----A---- C:\Windows\system32\logman.exe 2015-06-10 05:14:35 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2015-06-10 05:14:35 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2015-06-10 05:14:34 ----A---- C:\Windows\system32\tdh.dll 2015-06-10 05:14:34 ----A---- C:\Windows\system32\sechost.dll 2015-06-10 05:14:33 ----A---- C:\Windows\system32\wdigest.dll 2015-06-10 05:14:33 ----A---- C:\Windows\system32\typeperf.exe 2015-06-10 05:14:33 ----A---- C:\Windows\system32\TSpkg.dll 2015-06-10 05:14:33 ----A---- C:\Windows\system32\sspicli.dll 2015-06-10 05:14:33 ----A---- C:\Windows\system32\srclient.dll 2015-06-10 05:14:33 ----A---- C:\Windows\system32\smss.exe 2015-06-10 05:14:33 ----A---- C:\Windows\system32\relog.exe 2015-06-10 05:14:33 ----A---- C:\Windows\system32\lsass.exe 2015-06-10 05:14:33 ----A---- C:\Windows\system32\csrsrv.dll 2015-06-10 05:14:33 ----A---- C:\Windows\system32\auditpol.exe 2015-06-10 05:14:32 ----A---- C:\Windows\system32\sspisrv.dll 2015-06-10 05:14:32 ----A---- C:\Windows\system32\secur32.dll 2015-06-10 05:14:32 ----A---- C:\Windows\system32\msobjs.dll 2015-06-10 05:14:32 ----A---- C:\Windows\system32\msaudite.dll 2015-06-10 05:14:32 ----A---- C:\Windows\system32\diskperf.exe 2015-06-10 05:14:32 ----A---- C:\Windows\system32\credssp.dll 2015-06-10 05:14:32 ----A---- C:\Windows\system32\apisetschema.dll 2015-06-10 05:14:32 ----A---- C:\Windows\system32\adtschema.dll 2015-06-10 05:14:31 ----A---- C:\Windows\system32\UtcResources.dll 2015-06-10 05:14:23 ----A---- C:\Windows\system32\wmp.dll 2015-06-10 05:14:22 ----A---- C:\Windows\system32\wmploc.DLL 2015-06-10 05:14:22 ----A---- C:\Windows\system32\spwmp.dll 2015-06-10 05:14:22 ----A---- C:\Windows\system32\dxmasf.dll 2015-06-10 05:14:20 ----A---- C:\Windows\system32\kernel32.dll 2015-06-10 05:14:19 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-06-10 05:14:19 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-06-10 05:14:19 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-06-10 05:14:19 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-06-10 05:14:19 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-06-10 05:14:19 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-06-10 05:14:19 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-06-10 05:14:19 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-06-10 05:14:19 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-06-10 05:14:19 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-06-10 05:14:19 ----A---- C:\Windows\system32\winsrv.dll 2015-06-10 05:14:19 ----A---- C:\Windows\system32\KernelBase.dll 2015-06-10 05:14:19 ----A---- C:\Windows\system32\conhost.exe 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-06-10 05:14:18 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-06-10 05:14:17 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-06-10 05:14:17 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-06-10 05:14:17 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-06-10 05:14:17 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-06-10 05:14:16 ----A---- C:\Windows\system32\comctl32.dll 2015-06-08 11:41:17 ----D---- C:\Users\francist\AppData\Roaming\Windows Live Writer ======List of files/folders modified in the last 1 month====== 2015-07-03 08:56:36 ----D---- C:\Windows\Prefetch 2015-07-03 08:56:31 ----RD---- C:\Program Files 2015-07-03 08:55:09 ----D---- C:\Windows\Temp 2015-07-03 08:34:30 ----D---- C:\ProgramData\MFAData 2015-07-02 19:47:02 ----D---- C:\Windows\inf 2015-07-02 19:29:22 ----D---- C:\Windows\System32 2015-07-02 19:29:22 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-07-02 19:28:17 ----D---- C:\Windows\system32\config 2015-07-02 19:27:01 ----A---- C:\Windows\system32\FlashPlayerApp.exe 2015-07-02 19:25:24 ----D---- C:\Windows\system32\Tasks 2015-07-02 19:24:49 ----D---- C:\Windows 2015-07-01 02:34:45 ----SHD---- C:\System Volume Information 2015-06-30 08:06:28 ----D---- C:\Users\francist\AppData\Roaming\IDM 2015-06-30 08:06:03 ----D---- C:\Windows\Logs 2015-06-30 08:06:03 ----D---- C:\Windows\debug 2015-06-29 13:07:28 ----SHD---- C:\Windows\Installer 2015-06-29 13:07:25 ----D---- C:\Windows\WindowsMobile 2015-06-27 10:59:05 ----D---- C:\Program Files\Real 2015-06-27 10:58:51 ----D---- C:\ProgramData\Package Cache 2015-06-27 10:58:47 ----D---- C:\Program Files\RealNetworks 2015-06-27 10:58:46 ----D---- C:\ProgramData 2015-06-27 10:57:59 ----A---- C:\Windows\system32\rmoc3260.dll 2015-06-27 10:57:42 ----A---- C:\Windows\system32\pncrt.dll 2015-06-27 10:57:23 ----A---- C:\Windows\system32\msvcr71.dll 2015-06-27 10:57:23 ----A---- C:\Windows\system32\msvcp71.dll 2015-06-27 10:51:04 ----D---- C:\Program Files\Mozilla Maintenance Service 2015-06-25 18:13:32 ----D---- C:\Program Files\Opera 2015-06-22 15:22:57 ----D---- C:\Users\francist\AppData\Roaming\vlc 2015-06-20 00:20:28 ----D---- C:\ProgramData\AVG Security Toolbar 2015-06-19 12:32:26 ----D---- C:\Program Files\Common Files 2015-06-19 12:32:26 ----D---- C:\Program Files\AVG Web TuneUp 2015-06-15 20:37:59 ----D---- C:\Program Files\Java 2015-06-15 20:28:17 ----A---- C:\Windows\system32\WindowsAccessBridge.dll 2015-06-15 12:28:42 ----SD---- C:\Users\francist\AppData\Roaming\Microsoft 2015-06-13 09:44:03 ----D---- C:\Windows\system32\drivers 2015-06-12 14:24:55 ----D---- C:\Windows\Tasks 2015-06-11 04:15:31 ----D---- C:\Windows\rescache 2015-06-11 03:38:44 ----D---- C:\Windows\winsxs 2015-06-11 03:35:59 ----SD---- C:\Windows\system32\CompatTel 2015-06-11 03:35:59 ----D---- C:\Windows\system32\appraiser 2015-06-11 03:35:58 ----D---- C:\Windows\system32\nl-NL 2015-06-11 03:35:58 ----D---- C:\Windows\system32\en-US 2015-06-11 03:35:58 ----D---- C:\Windows\PolicyDefinitions 2015-06-11 03:35:58 ----D---- C:\Windows\AppPatch 2015-06-11 03:35:58 ----D---- C:\Program Files\Internet Explorer 2015-06-11 03:35:56 ----D---- C:\Program Files\Windows Media Player 2015-06-11 03:20:22 ----D---- C:\ProgramData\Microsoft Help 2015-06-11 03:14:13 ----A---- C:\Windows\win.ini 2015-06-11 03:14:08 ----D---- C:\Windows\system32\MRT 2015-06-11 03:02:37 ----A---- C:\Windows\system32\MRT.exe 2015-06-10 05:13:54 ----D---- C:\Windows\system32\catroot2 ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2015-05-12 190944] R0 Avglogx;AVG Logging Driver; C:\Windows\system32\DRIVERS\avglogx.sys [2015-05-07 290272] R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2015-05-12 169440] R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2015-03-20 35808] R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440] R1 Avgdiskx;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiskx.sys [2015-03-11 132576] R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2015-05-19 227808] R1 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2015-05-14 29664] R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2015-04-15 206816] R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2015-05-12 213984] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096] R2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2012-11-20 48808] R2 IDMWFP;IDMWFP; C:\Windows\system32\DRIVERS\idmwfp.sys [2013-11-28 108000] R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704] R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-03-03 5340160] R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-03-03 152064] R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2010-11-17 101392] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2014-06-25 3086040] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2013-09-17 543336] R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2012-08-28 45736] S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720] S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312] S3 amdiox86;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox86.sys [] S3 AODDriver4.0;AODDriver4.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2012-11-20 48808] S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-01-28 100352] S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-03-03 5340160] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888] S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336] S3 catchme;catchme; \??\C:\Users\francist\AppData\Local\Temp\catchme.sys [] S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-01-22 88576] S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-20 62464] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2014-03-31 49856] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632] S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632] S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304] S3 SMIGrabber3C;SMI Grabber Device Tuner Filter 3C; C:\Windows\System32\Drivers\SmiUsbGrabber3C.sys [2011-01-26 805888] S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 184192] S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032] S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224] S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264] S3 USB28xxBGA;USB 2863 Device; C:\Windows\system32\DRIVERS\emBDA.sys [2008-05-14 535040] S3 USB28xxOEM;USB 28xx OEM Filter; C:\Windows\system32\DRIVERS\emOEM.sys [2008-05-14 286208] S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328] S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736] S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360] S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920] S3 WinUsb;WinUsb-stuurprogramma; C:\Windows\system32\DRIVERS\WinUSB.SYS [2010-11-20 35968] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 ABBYY.Licensing.FineReader.Professional.10.0;ABBYY FineReader 10 PE Licensing Service; C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [2010-07-22 814344] R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-06-12 82112] R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-03-03 172032] R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-08-19 276992] R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [2015-06-16 3461072] R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [2015-06-16 312816] R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992] R2 OKI OPHC DCS Loader;OKI OPHC DCS Loader; C:\Windows\system32\spool\DRIVERS\W32X86\3\OPHCLDCS.EXE [2007-05-29 24576] R2 OkiJaSvc;Print Job Accounting; C:\Program Files\Okidata\Print Job Accounting\oklogsvc.exe [2013-05-28 299008] R2 OkiWchSvc;Print Job Accounting Watch Service; C:\Program Files\Okidata\Print Job Accounting\okwchsvc.exe [2010-09-01 49152] R2 opja0004;Print Job Accounting opja0004; C:\Program Files\Okidata\Print Job Accounting\opja0004.exe [2013-04-18 140800] R2 OpLclSrv;OKI Local Port Manager; C:\Program Files\Okidata\Common\Extend3\portmgrsrv.exe [2012-03-28 147456] R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 20992] R2 RealPlayerUpdateSvc;RealPlayer Update Service; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [2015-06-17 31856] R2 RealTimes Desktop Service;RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [2015-06-27 1115224] R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 20992] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904] R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-02 268976] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2014-03-31 1512640] S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-03-11 136120] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-05-23 102912] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-06-17 148080] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-05 1343400] S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-12 45744] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-12 139944] S4 RealPlayer Cloud Service;RealPlayer Cloud Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [2015-06-27 1115224] -----------------EOF-----------------