Logfile of random's system information tool 1.10 (written by random/random) Run by Indro at 2015-07-24 15:17:33 Microsoft Windows 7 Home Premium System drive C: has 84 GB (74%) free of 114 GB Total RAM: 6006 MB (60% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 15:17:34, on 24/07/2015 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\TOPI.exe C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files\trend micro\Indro.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL O4 - HKLM\..\Run: [HWSetup] "C:\Program Files\TOSHIBA\Utilities\HWSetup.exe" hwSetUP O4 - HKLM\..\Run: [KeNotify] C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe O4 - HKLM\..\Run: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun O4 - HKLM\..\Run: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60 O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui O4 - HKCU\..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user') O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user') O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing) O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe O23 - Service: TOSHIBA eco Utility Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TECO\TecoService.exe O23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe O23 - Service: TPCH Service (TPCHSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 9779 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe winlogon.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" atieclxx C:\Windows\Explorer.EXE C:\Windows\System32\spoolsv.exe "taskhost.exe" C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe" "C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe" "C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe" "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe" "C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe" "C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe" "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "C:\Program Files\TOSHIBA\TECO\Teco.exe" /r "C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe" "C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\TOPI.exe" C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe" "C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe" "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" C:\Windows\system32\TODDSrv.exe "C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe" "C:\Program Files\TOSHIBA\TECO\TecoService.exe" "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0 C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\system32\wbem\wmiprvse.exe "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe" "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60 "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui C:\Windows\system32\wbem\unsecapp.exe -Embedding C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Program Files\Windows Media Player\wmpnetwk.exe" taskeng.exe {26F9260C-6AC5-470E-9597-447CD12DD145} "C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe" "C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe" "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe" "C:\Windows\system32\wuauclt.exe" C:\Windows\servicing\TrustedInstaller.exe "C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe" "C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe" "C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe" "C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe" "C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe" "C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe" "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe" C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\msiexec.exe /V "C:\Program Files (x86)\Internet Explorer\iexplore.exe" "C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:3868 CREDAT:71937 "C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:3868 CREDAT:6408 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\system32\sppsvc.exe "C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524 "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe8_ Global\UsGthrCtrlFltPipeMssGthrPipe8 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\Users\Indro\Desktop\RSITx64.exe" ======Scheduled tasks folder====== C:\Windows\tasks\DriverToolkit Autorun.job - C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe --autorun ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-07-24 655480] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-24 559624] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live Aanmelden - Help - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-03-08 41368] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "TosSENotify"=C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [2009-11-05 709976] "Toshiba TEMPRO"=C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [2009-10-15 1050000] "TosNC"=C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [2009-11-30 595816] "TosReelTimeMonitor"=C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [2009-12-01 34648] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-10-21 8306208] "TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2009-11-05 505696] "HSON"=C:\Program Files\TOSHIBA\TBS\HSON.exe [2009-03-09 52600] "SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2009-08-13 570680] "00TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2009-11-10 910136] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-10-15 1870120] "SmartFaceVWatcher"=C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [2009-10-19 238080] "Teco"=C:\Program Files\TOSHIBA\TECO\Teco.exe [2009-09-28 1482592] "TosWaitSrv"=C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [2009-11-10 707416] "Toshiba Registration"=C:\Program Files\Toshiba\Registration\ToshibaReminder.exe [2009-08-25 134032] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "TOSHIBA Online Product Information"=C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe [2009-08-12 6203296] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288] "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-09-08 98304] "SVPWUTIL"=C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe [2009-08-12 352256] "HWSetup"=C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [2009-06-02 423936] "KeNotify"=C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [2009-01-13 34088] "TWebCamera"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2009-11-21 2454840] "ToshibaServiceStation"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [2009-10-06 1294136] "AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-07-24 6109776] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "SoftwareSASGeneration"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 3 months====== 2015-07-24 15:15:03 ----D---- C:\rsit 2015-07-24 15:15:03 ----D---- C:\Program Files\trend micro 2015-07-24 15:01:27 ----SHD---- C:\Config.Msi 2015-07-24 14:56:58 ----D---- C:\Windows\system32\MRT 2015-07-24 14:56:55 ----A---- C:\Windows\system32\MRT.exe 2015-07-24 12:07:06 ----D---- C:\Windows\system32\SPReview 2015-07-24 12:02:07 ----D---- C:\Windows\SYSWOW64\vbox 2015-07-24 12:02:07 ----D---- C:\Windows\system32\vbox 2015-07-24 11:34:21 ----D---- C:\Windows\CheckSur 2015-07-24 11:34:15 ----D---- C:\Windows\system32\EventProviders 2015-07-24 10:39:38 ----D---- C:\Program Files\Speccy 2015-07-24 10:37:40 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll 2015-07-24 10:37:40 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe 2015-07-24 10:37:40 ----A---- C:\Windows\SYSWOW64\netfxperf.dll 2015-07-24 10:37:40 ----A---- C:\Windows\SYSWOW64\mscoree.dll 2015-07-24 10:37:40 ----A---- C:\Windows\SYSWOW64\dfshim.dll 2015-07-24 10:37:40 ----A---- C:\Windows\system32\PresentationHostProxy.dll 2015-07-24 10:37:40 ----A---- C:\Windows\system32\PresentationHost.exe 2015-07-24 10:37:40 ----A---- C:\Windows\system32\netfxperf.dll 2015-07-24 10:37:40 ----A---- C:\Windows\system32\mscoree.dll 2015-07-24 10:37:40 ----A---- C:\Windows\system32\dfshim.dll 2015-07-24 00:10:41 ----A---- C:\Windows\system32\drivers\ngvss.sys 2015-07-24 00:10:41 ----A---- C:\Windows\system32\drivers\aswStm.sys 2015-07-24 00:10:41 ----A---- C:\Windows\system32\drivers\aswHwid.sys 2015-07-24 00:10:40 ----A---- C:\Windows\system32\aswBoot.exe 2015-07-24 00:10:37 ----A---- C:\Windows\avastSS.scr 2015-07-24 00:08:33 ----D---- C:\Users\Indro\AppData\Roaming\AVAST Software 2015-07-24 00:07:44 ----A---- C:\Windows\system32\drivers\aswVmm.sys 2015-07-24 00:07:44 ----A---- C:\Windows\system32\drivers\aswSP.sys 2015-07-24 00:07:44 ----A---- C:\Windows\system32\drivers\aswSnx.sys 2015-07-24 00:07:44 ----A---- C:\Windows\system32\drivers\aswRvrt.sys 2015-07-24 00:07:44 ----A---- C:\Windows\system32\drivers\aswRdr2.sys 2015-07-24 00:07:44 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys 2015-07-24 00:07:33 ----D---- C:\Program Files\AVAST Software 2015-07-23 23:50:23 ----D---- C:\ProgramData\AVAST Software 2015-07-23 23:25:17 ----A---- C:\Windows\ntbtlog.txt 2015-07-23 16:12:40 ----D---- C:\Program Files (x86)\MiniTool Partition Wizard Professional Edition 9.0 2015-07-23 16:05:49 ----A---- C:\Windows\pwnativedev.bak 2015-07-23 15:05:12 ----D---- C:\Program Files (x86)\DriverToolkit 2015-07-23 14:41:29 ----A---- C:\Windows\system32\drivers\timntr.sys 2015-07-23 14:41:21 ----A---- C:\Windows\system32\drivers\vsflt53.sys 2015-07-23 14:41:21 ----A---- C:\Windows\system32\drivers\vididr.sys 2015-07-23 14:00:59 ----SD---- C:\Windows\system32\CompatTel 2015-07-23 14:00:59 ----D---- C:\Windows\system32\appraiser 2015-07-23 14:00:59 ----D---- C:\Windows\Migration 2015-07-23 13:13:32 ----A---- C:\Windows\PWCMDLST.BAK 2015-07-23 13:11:13 ----N---- C:\Windows\system32\pwdspio.sys 2015-07-23 13:11:13 ----N---- C:\Windows\system32\pwdrvio.sys 2015-07-23 13:11:13 ----A---- C:\Windows\system32\pwNative.exe 2015-07-23 13:06:27 ----N---- C:\Windows\system32\MpSigStub.exe 2015-07-23 11:58:05 ----A---- C:\Windows\system32\poqexec.exe 2015-07-23 11:58:04 ----A---- C:\Windows\SYSWOW64\poqexec.exe 2015-07-23 11:57:29 ----D---- C:\Program Files (x86)\MiniTool Partition Wizard Free 9.0 2015-07-23 11:55:27 ----A---- C:\Windows\system32\CompatTelRunner.exe 2015-07-23 11:55:27 ----A---- C:\Windows\system32\aitstatic.exe 2015-07-23 11:55:26 ----A---- C:\Windows\system32\invagent.dll 2015-07-23 11:55:26 ----A---- C:\Windows\system32\generaltel.dll 2015-07-23 11:55:26 ----A---- C:\Windows\system32\devinv.dll 2015-07-23 11:55:26 ----A---- C:\Windows\system32\appraiser.dll 2015-07-23 11:55:26 ----A---- C:\Windows\system32\acmigration.dll 2015-07-23 11:55:25 ----A---- C:\Windows\system32\aepic.dll 2015-07-23 11:55:25 ----A---- C:\Windows\system32\aeinv.dll 2015-07-23 11:55:22 ----A---- C:\Windows\system32\aepdu.dll 2015-07-23 11:55:08 ----A---- C:\Windows\system32\ntoskrnl.exe 2015-07-23 11:55:07 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2015-07-23 11:55:07 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2015-07-23 11:55:06 ----A---- C:\Windows\SYSWOW64\apisetschema.dll 2015-07-23 11:55:06 ----A---- C:\Windows\system32\smss.exe 2015-07-23 11:55:06 ----A---- C:\Windows\system32\csrsrv.dll 2015-07-23 11:55:05 ----A---- C:\Windows\system32\win32k.sys 2015-06-18 17:31:44 ----D---- C:\Users\Indro\AppData\Roaming\Google 2015-06-18 17:31:23 ----D---- C:\Users\Indro\AppData\Roaming\ATI 2015-06-18 17:30:48 ----D---- C:\Users\Indro\AppData\Roaming\Identities 2015-06-18 17:26:33 ----A---- C:\Windows\system32\wups2.dll 2015-06-18 17:26:33 ----A---- C:\Windows\system32\wuauclt.exe 2015-06-18 17:26:32 ----A---- C:\Windows\system32\wucltux.dll 2015-06-18 17:26:32 ----A---- C:\Windows\system32\wuaueng.dll 2015-06-18 17:26:31 ----D---- C:\ProgramData\ToshibaEurope 2015-06-18 17:26:24 ----A---- C:\Windows\system32\wups.dll 2015-06-18 17:26:24 ----A---- C:\Windows\system32\wudriver.dll 2015-06-18 17:26:24 ----A---- C:\Windows\system32\wuapi.dll 2015-06-18 17:26:18 ----A---- C:\Windows\system32\wuwebv.dll 2015-06-18 17:26:18 ----A---- C:\Windows\system32\wuapp.exe 2015-06-18 17:26:08 ----SD---- C:\Users\Indro\AppData\Roaming\Microsoft 2015-06-18 17:26:08 ----D---- C:\Users\Indro\AppData\Roaming\Media Center Programs 2015-06-18 17:26:08 ----D---- C:\Users\Indro\AppData\Roaming\Macromedia 2015-06-18 17:25:50 ----SHD---- C:\ProgramData\Sjablonen 2015-06-18 17:25:50 ----SHD---- C:\ProgramData\Menu Start 2015-06-18 17:25:50 ----SHD---- C:\ProgramData\Favorieten 2015-06-18 17:25:50 ----SHD---- C:\ProgramData\Documenten 2015-06-18 17:25:50 ----SHD---- C:\ProgramData\Bureaublad 2015-06-18 17:13:09 ----D---- C:\Windows\OemDrv 2015-06-18 17:09:19 ----A---- C:\Windows\NDSTray.INI 2015-06-18 17:09:01 ----A---- C:\Windows\system32\drivers\tos_sps64.sys 2015-06-18 17:09:00 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll 2015-06-18 17:07:06 ----D---- C:\ProgramData\TOSHIBA 2015-06-18 17:06:31 ----A---- C:\Windows\system32\drivers\PGEffect.sys 2015-06-18 17:05:50 ----D---- C:\Program Files\Synaptics 2015-06-18 17:05:32 ----A---- C:\Windows\SYSWOW64\log.txt 2015-06-18 17:05:22 ----A---- C:\Windows\system32\drivers\HECIx64.sys 2015-06-18 17:05:12 ----D---- C:\Intel 2015-06-18 17:03:56 ----A---- C:\Windows\system32\RTSUSTORicon.dll 2015-06-18 17:03:54 ----A---- C:\Windows\SYSWOW64\drivers\RtsUStor.sys 2015-06-18 17:02:04 ----A---- C:\Windows\system32\drivers\rtl8192se.sys 2015-06-18 17:02:03 ----D---- C:\Program Files (x86)\Realtek WLAN Driver 2015-06-18 16:58:59 ----A---- C:\Windows\SYSWOW64\TSCI.dll 2015-06-18 16:58:59 ----A---- C:\Windows\SYSWOW64\THCI.dll 2015-06-18 16:57:20 ----A---- C:\Windows\system32\TSBWLS.dll 2015-06-18 16:57:20 ----A---- C:\Windows\system32\HWS_Ctrl.dll 2015-06-18 16:56:50 ----D---- C:\Windows\SYSWOW64\Microsoft.VC80.MFC 2015-06-18 16:56:50 ----D---- C:\Windows\system32\Microsoft.VC80.MFC 2015-06-18 16:56:50 ----D---- C:\ProgramData\XP 2015-06-18 16:56:50 ----D---- C:\ProgramData\win7_64 2015-06-18 16:56:50 ----D---- C:\ProgramData\win7_32 2015-06-18 16:56:50 ----D---- C:\ProgramData\Vista64 2015-06-18 16:56:50 ----D---- C:\ProgramData\Vista32 2015-06-18 16:55:17 ----D---- C:\Program Files\Realtek 2015-06-18 16:55:16 ----D---- C:\Windows\SYSWOW64\RTCOM 2015-06-18 16:55:08 ----A---- C:\Windows\system32\RtkHDM64.dll 2015-06-18 16:55:08 ----A---- C:\Windows\system32\RHDMEx64.dll 2015-06-18 16:55:08 ----A---- C:\Windows\system32\RHCoInst64.dll 2015-06-18 16:55:08 ----A---- C:\Windows\system32\RH3DHT64.dll 2015-06-18 16:55:08 ----A---- C:\Windows\system32\RH3DAA64.dll 2015-06-18 16:55:08 ----A---- C:\Windows\system32\drivers\RtHDMIVX.sys 2015-06-18 16:55:07 ----A---- C:\Windows\system32\SRSWOW64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\SRSTSX64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\SRSTSH64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\SRSHP64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\RtPgEx64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\RtlCPAPI64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\RtkCfg64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\RtkAPO64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\RtkApi64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\RTEEP64A.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\RTEEL64A.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\RTEEG64A.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\RTEED64A.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\RTCOM64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\RP3DHT64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\RP3DAA64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\RCoInst64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\FMAPO64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys 2015-06-18 16:55:07 ----A---- C:\Windows\system32\AERTAR64.dll 2015-06-18 16:55:07 ----A---- C:\Windows\system32\AERTAC64.dll 2015-06-18 16:55:06 ----HD---- C:\Program Files (x86)\Temp 2015-06-18 16:55:06 ----A---- C:\Windows\RtlExUpd.dll 2015-06-18 16:53:04 ----D---- C:\Windows\SoftwareDistribution 2015-06-18 16:52:55 ----D---- C:\ProgramData\ATI 2015-06-18 16:52:05 ----D---- C:\Program Files\ATI 2015-06-18 16:52:03 ----D---- C:\Program Files (x86)\ATI Technologies 2015-06-18 16:52:01 ----A---- C:\Windows\SYSWOW64\Oemdspif.dll 2015-06-18 16:52:01 ----A---- C:\Windows\SYSWOW64\atiumdva.dll 2015-06-18 16:52:01 ----A---- C:\Windows\SYSWOW64\atiumdag.dll 2015-06-18 16:52:01 ----A---- C:\Windows\SYSWOW64\atipdlxx.dll 2015-06-18 16:52:01 ----A---- C:\Windows\SYSWOW64\atioglxx.dll 2015-06-18 16:52:01 ----A---- C:\Windows\SYSWOW64\atimpc32.dll 2015-06-18 16:52:01 ----A---- C:\Windows\SYSWOW64\atidxx32.dll 2015-06-18 16:52:01 ----A---- C:\Windows\SYSWOW64\aticalrt.dll 2015-06-18 16:52:01 ----A---- C:\Windows\SYSWOW64\aticaldd.dll 2015-06-18 16:52:01 ----A---- C:\Windows\SYSWOW64\aticalcl.dll 2015-06-18 16:52:01 ----A---- C:\Windows\SYSWOW64\atiadlxy.dll 2015-06-18 16:52:01 ----A---- C:\Windows\SYSWOW64\ati2edxx.dll 2015-06-18 16:52:01 ----A---- C:\Windows\SYSWOW64\amdpcom32.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\drivers\atikmdag.sys 2015-06-18 16:52:01 ----A---- C:\Windows\system32\drivers\ati2erec.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atiumd6a.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atiumd64.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atitmm64.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atipdl64.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\ATIODE.exe 2015-06-18 16:52:01 ----A---- C:\Windows\system32\ATIODCLI.exe 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atio6axx.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atimuixx.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atimpc64.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atiicdxx.dat 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atiesrxx.exe 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atiedu64.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atieclxx.exe 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atidxx64.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\ATIDEMGX.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\aticalrt64.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\aticaldd64.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\aticalcl64.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atibtmon.exe 2015-06-18 16:52:01 ----A---- C:\Windows\system32\atiadlxx.dll 2015-06-18 16:52:01 ----A---- C:\Windows\system32\amdpcom64.dll 2015-06-18 16:51:17 ----SHD---- C:\$RECYCLE.BIN 2015-06-18 16:48:37 ----SHD---- C:\System Volume Information 2015-06-18 16:48:37 ----ASH---- C:\pagefile.sys 2015-06-18 16:48:37 ----ASH---- C:\hiberfil.sys 2015-06-18 16:40:25 ----D---- C:\Users\Indro\AppData\Roaming\Toshiba 2015-06-18 16:38:36 ----A---- C:\Windows\SYSWOW64\drivers\HWiNFO64A.SYS 2015-06-18 16:38:29 ----D---- C:\Program Files (x86)\HWiNFO32 ======List of files/folders modified in the last 3 months====== 2015-07-24 15:17:34 ----D---- C:\Windows\Temp 2015-07-24 15:15:03 ----D---- C:\Program Files 2015-07-24 15:08:00 ----SHD---- C:\Windows\Installer 2015-07-24 15:07:59 ----RSD---- C:\Windows\assembly 2015-07-24 15:06:10 ----D---- C:\Windows\System32 2015-07-24 15:06:10 ----D---- C:\Windows\inf 2015-07-24 15:06:10 ----A---- C:\Windows\system32\PerfStringBackup.INI 2015-07-24 15:01:29 ----D---- C:\Windows\Microsoft.NET 2015-07-24 14:56:58 ----D---- C:\Windows\debug 2015-07-24 14:54:47 ----D---- C:\Windows\system32\config 2015-07-24 14:23:00 ----D---- C:\Windows\Prefetch 2015-07-24 14:22:51 ----D---- C:\Windows\winsxs 2015-07-24 12:02:07 ----D---- C:\Windows\SysWOW64 2015-07-24 11:37:01 ----D---- C:\Windows\system32\catroot2 2015-07-24 11:34:21 ----D---- C:\Windows 2015-07-24 10:52:07 ----D---- C:\Windows\system32\catroot 2015-07-24 10:39:05 ----D---- C:\Windows\SYSWOW64\nl-NL 2015-07-24 10:39:05 ----D---- C:\Windows\system32\nl-NL 2015-07-24 10:38:13 ----D---- C:\Windows\SYSWOW64\en-US 2015-07-24 10:38:13 ----D---- C:\Windows\system32\en-US 2015-07-24 10:38:13 ----D---- C:\Program Files (x86)\Microsoft.NET 2015-07-24 10:33:59 ----D---- C:\Windows\system32\drivers 2015-07-24 00:10:45 ----D---- C:\Windows\system32\Tasks 2015-07-23 23:58:22 ----D---- C:\Windows\system32\LogFiles 2015-07-23 23:57:03 ----D---- C:\Windows\system32\DriverStore 2015-07-23 23:50:23 ----HD---- C:\ProgramData 2015-07-23 23:11:07 ----RD---- C:\Program Files (x86) 2015-07-23 23:11:07 ----D---- C:\ProgramData\McAfee 2015-07-23 23:11:07 ----D---- C:\Program Files (x86)\Common Files 2015-07-23 23:11:06 ----D---- C:\Program Files\Common Files 2015-07-23 23:10:09 ----D---- C:\Windows\Tasks 2015-07-23 15:20:38 ----SD---- C:\ProgramData\Microsoft 2015-07-23 15:20:36 ----D---- C:\Windows\system32\drivers\UMDF 2015-07-23 14:01:16 ----D---- C:\Windows\system32\wfp 2015-07-23 14:01:14 ----D---- C:\Windows\system32\CodeIntegrity 2015-07-23 14:01:11 ----D---- C:\Windows\registration 2015-07-23 14:00:59 ----D---- C:\Windows\system32\wbem 2015-07-23 14:00:59 ----D---- C:\Windows\AppCompat 2015-07-23 14:00:58 ----D---- C:\Windows\AppPatch 2015-07-23 11:34:42 ----D---- C:\ProgramData\Partner 2015-07-23 11:34:42 ----D---- C:\Program Files\Google 2015-06-18 17:30:38 ----D---- C:\Toshiba 2015-06-18 17:26:05 ----D---- C:\Windows\system32\restore 2015-06-18 17:26:05 ----D---- C:\Users 2015-06-18 17:25:59 ----D---- C:\Windows\rescache 2015-06-18 17:25:50 ----D---- C:\Program Files\Windows NT 2015-06-18 17:13:33 ----D---- C:\Windows\system32\sysprep 2015-06-18 17:13:33 ----D---- C:\Windows\Panther 2015-06-18 17:13:15 ----D---- C:\Windows\SYSWOW64\sysprep 2015-06-18 17:09:00 ----D---- C:\Windows\Logs 2015-06-18 17:08:58 ----D---- C:\Program Files (x86)\TOSHIBA 2015-06-18 17:08:57 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2015-06-18 17:08:20 ----D---- C:\Program Files\TOSHIBA 2015-06-18 17:08:17 ----D---- C:\Windows\Downloaded Installations 2015-06-18 17:05:24 ----D---- C:\Program Files (x86)\Intel 2015-06-18 17:03:54 ----D---- C:\Program Files (x86)\Realtek 2015-06-18 16:38:36 ----D---- C:\Windows\SYSWOW64\drivers ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-07-24 65224] R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-07-24 274808] R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-01-15 538136] R0 LPCFilter;LPC Lower Filter Driver; C:\Windows\system32\DRIVERS\LPCFilter.sys [2009-07-30 44912] R0 ngvss;ngvss; C:\Windows\system32\drivers\ngvss.sys [2015-07-24 115152] R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352] R0 pwdrvio;pwdrvio; C:\Windows\system32\pwdrvio.sys [2013-09-30 19152] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096] R0 tos_sps64;TOSHIBA tos_sps64 Service; C:\Windows\system32\DRIVERS\tos_sps64.sys [2009-07-24 482384] R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2009-07-14 26840] R0 vidsflt53;Acronis Disk Storage Filter (53); C:\Windows\system32\DRIVERS\vsflt53.sys [2015-07-23 141920] R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-07-24 93528] R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-07-24 1048856] R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-07-24 447944] R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-06-18 27552] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-07-24 28656] R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-07-24 90968] R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-07-24 150160] R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver; C:\Windows\system32\DRIVERS\TVALZFL.sys [2009-06-19 14472] R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-07-24 273824] R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-09-09 6204928] R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344] R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 151936] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-10-21 2013856] R3 PGEffect;Pangu effect driver; C:\Windows\system32\DRIVERS\pgeffect.sys [2009-06-22 35008] R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2009-05-20 202016] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-11-05 291328] R3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver; C:\Windows\system32\DRIVERS\rtl8192se.sys [2009-10-02 946688] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-10-15 307760] R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2009-07-30 27784] S3 pwdspio;pwdspio; \??\C:\Windows\system32\pwdspio.sys [2013-09-30 12504] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [] S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864] S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312] S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-09-08 202752] R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-07-24 146600] R2 cfWiMAXService;ConfigFree WiMAX Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2009-10-27 252784] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 ConfigFree Service;ConfigFree Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448] R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-09-30 262144] R2 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO); C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [2009-10-15 116104] R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2009-07-28 140632] R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [2009-11-05 489312] R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\TECO\TecoService.exe [2009-09-28 251760] R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-09-30 2314240] R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-07-24 4047768] R3 TMachInfo;TMachInfo; C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2009-10-06 51512] R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2009-11-05 137560] R3 TPCHSrv;TPCH Service; C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [2009-11-10 824688] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] -----------------EOF-----------------