Logfile of random's system information tool 1.10 (written by random/random)
Run by Gebruiker at 2017-02-06 14:48:19
Microsoft Windows 7 Professional  Service Pack 1
System drive C: has 82 GB (53%) free of 153 GB
Total RAM: 2995 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:50:23, on 6-2-2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18538)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\CSR\Bluetooth Feature Pack 5.0\ConMgr.exe
C:\Windows\vsnp2uvc.exe
C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\AVG Web TuneUp\vprot.exe
C:\Program Files\AVG\Av\avgui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Users\Gebruiker\AppData\Roaming\Spotify\SpotifyWebHelper.exe
C:\Users\Gebruiker\AppData\Local\Microsoft\BingSvc\BingSvc.exe
C:\Windows\System32\StikyNot.exe
C:\Users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE
C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
C:\Program Files\AVG\Framework\Common\avguix.exe
C:\Windows\system32\ctfmon.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\taskeng.exe
C:\Users\Gebruiker\Downloads\RSIT.exe
C:\Program Files\trend micro\Gebruiker.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1437747504&from=xtab&uid=ST9160314AS_6VCP53C5XXXX6VCP53C5
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?type=ds&ts=1432838129&z=a15425d0d154395bcc37122gezfcao0b5c2b0e4q6b&from=wpm05283&uid=ST9160314AS_6VCP53C5XXXX6VCP53C5&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type=ds&ts=1432838129&z=a15425d0d154395bcc37122gezfcao0b5c2b0e4q6b&from=wpm05283&uid=ST9160314AS_6VCP53C5XXXX6VCP53C5&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131253393154037084&GUID=037FCCAA-281B-4B40-90AA-2A5498D60259
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts=1437747504&from=xtab&uid=ST9160314AS_6VCP53C5XXXX6VCP53C5
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.yoursites123.com/web/?type=ds&ts=1449846857&z=dcfb5c470542315bd276172g8z1zat3b9z7qbb6w4b&from=ient07021&uid=ST9160314AS_6VCP53C5XXXX6VCP53C5&q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yoursites123.com/web/?type=ds&ts=1449846857&z=dcfb5c470542315bd276172g8z1zat3b9z7qbb6w4b&from=ient07021&uid=ST9160314AS_6VCP53C5XXXX6VCP53C5&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131253393153881083&GUID=037FCCAA-281B-4B40-90AA-2A5498D60259
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll
O2 - BHO: AVG Web TuneUp - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Web TuneUp\4.3.6.255\AVG Web TuneUp.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL
O4 - HKLM\..\Run: [CSRSkype] C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRSkype.exe
O4 - HKLM\..\Run: [ConMgr] "C:\Program Files\CSR\Bluetooth Feature Pack 5.0\ConMgr.exe"
O4 - HKLM\..\Run: [snp2uvc] C:\Windows\vsnp2uvc.exe
O4 - HKLM\..\Run: [IndicatorUtility] C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [IMSS] "C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Web TuneUp\vprot.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\Framework\Common\avguirnx.exe" /lps=av
O4 - HKLM\..\Run: [FUJ02B1_Apps] "%PROGRAMFILES%\Fujitsu\FUJ02B1\CheckBatteryPack.exe" -ViewTarget -langid 0x411
O4 - HKCU\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_5FEA36A39174F28C3634662B2D565CAA] "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [Spotify Web Helper] "C:\Users\Gebruiker\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [BingSvc] C:\Users\Gebruiker\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O4 - HKCU\..\Run: [Dropbox Update] "C:\Users\Gebruiker\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
O4 - HKCU\..\Run: [Spotify] "C:\Users\Gebruiker\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\RunOnce: [Application Restart #2] C:\Program Files\Google\Chrome\Application\chrome.exe  --flag-switches-begin --flag-switches-end --restore-last-session http://www.yoursites123.com/?type=sc&ts=1449846857&z=dcfb5c470542315bd276172g8z1zat3b9z7qbb6w4b&from=ient07021&uid=ST9160314AS_6VCP53C5XXXX6VCP53C5
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: Verzenden naar OneNote.lnk = C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office\Root\Office16\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\root\Office16\ONBttnIE.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{4D30DDB0-171B-401B-B411-4946482FF1C9}: NameServer = 199.203.131.151 82.163.143.181
O17 - HKLM\System\CCS\Services\Tcpip\..\{7A4CF259-3D72-440A-96DC-665D14B261A4}: NameServer = 199.203.131.151 82.163.143.181
O17 - HKLM\System\CCS\Services\Tcpip\..\{F72C5D43-9D52-4BCC-B5FE-65EBFE057690}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 199.203.131.151 82.163.143.181
O17 - HKLM\System\CS1\Services\Tcpip\..\{4D30DDB0-171B-401B-B411-4946482FF1C9}: NameServer = 199.203.131.151 82.163.143.181
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 199.203.131.151 82.163.143.181
O17 - HKLM\System\CS2\Services\Tcpip\..\{4D30DDB0-171B-401B-B411-4946482FF1C9}: NameServer = 199.203.131.151 82.163.143.181
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 199.203.131.151 82.163.143.181
O18 - Protocol: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: AvgAMPS - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Av\avgamps.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Av\avgidsagent.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Framework\Common\avgsvcx.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Av\avgwdsvcx.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Qualcomm Gobi 2000 Download Service (Sierra) (QDLService2kSierra) - QUALCOMM, Inc. - C:\Program Files\QUALCOMM\QDLService2k\QDLService2kSierra.exe
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Update service - Popcorn Time - C:\Program Files\Popcorn Time\Updater.exe
O23 - Service: Ondersteuning Bluetooth-functies (VFPRadioSupportService) - CSR, plc - C:\Program Files\CSR\Bluetooth Feature Pack 5.0\VFPRadioSupportService.exe
O23 - Service: vToolbarUpdater40.3.6 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\40.3.6\ToolbarUpdater.exe
O23 - Service: WtuSystemSupport - Unknown owner - C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe

--
End of file - 11889 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe 
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-1058695312-2763810296-1595327000-1000Core.job - C:\Users\Gebruiker\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-1058695312-2763810296-1595327000-1000UA.job - C:\Users\Gebruiker\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\Superclean.job - c:\programdata\{2192b5c3-9d8d-b549-2192-2b5c39d8d70e}\hqghumeaylnlf.exe --startup=1 --single

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2017-02-05 154824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Web TuneUp - C:\Program Files\AVG Web TuneUp\4.3.6.255\AVG Web TuneUp.dll [2016-09-30 2260040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2017-02-05 332576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft OneDrive for Business Browser Helper - C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-02-05 1522480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CSRSkype"=C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRSkype.exe [2009-10-12 346464]
"ConMgr"=C:\Program Files\CSR\Bluetooth Feature Pack 5.0\ConMgr.exe [2009-10-12 504160]
"snp2uvc"=C:\Windows\vsnp2uvc.exe [2009-08-12 662016]
"IndicatorUtility"=C:\Program Files\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [2009-10-09 47976]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-01-12 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-01-12 175640]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-01-12 166936]
"IMSS"=C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [2009-11-01 104960]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-10-28 7862816]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-10-09 1578280]
"gmsd_nl_146"= []
"AvgUi"=C:\Program Files\AVG\Framework\Common\avguirnx.exe [2016-12-06 220944]
"vProt"=C:\Program Files\AVG Web TuneUp\vprot.exe [2016-09-30 2180680]
"AVG_UI"=C:\Program Files\AVG\Framework\Common\avguirnx.exe [2016-12-06 220944]
"FUJ02B1_Apps"=C:\Program Files\Fujitsu\FUJ02B1\CheckBatteryPack.exe [2016-05-11 367432]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LtMoh"=C:\Program Files\ltmoh\Ltmoh.exe []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"GoogleChromeAutoLaunch_5FEA36A39174F28C3634662B2D565CAA"=C:\Program Files\Google\Chrome\Application\chrome.exe [2016-11-08 921192]
"Spotify Web Helper"=C:\Users\Gebruiker\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2016-12-04 1431664]
"BingSvc"=C:\Users\Gebruiker\AppData\Local\Microsoft\BingSvc\BingSvc.exe [2015-11-13 144008]
"Dropbox Update"=C:\Users\Gebruiker\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-12-01 143144]
"Spotify"=C:\Users\Gebruiker\AppData\Roaming\Spotify\Spotify.exe [2016-12-04 6987376]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 354304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Application Restart #2"=C:\Program Files\Google\Chrome\Application\chrome.exe [2016-11-08 921192]

C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe
Verzenden naar OneNote.lnk - C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-12-18 226304]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"AllowLegacyWebView"=1
"AllowUnhashedWebView"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-02-06 14:48:19 ----D---- C:\rsit
2017-02-06 14:48:19 ----D---- C:\Program Files\trend micro
2017-02-05 21:59:47 ----D---- C:\Program Files\Common Files\DESIGNER
2017-02-05 21:38:22 ----A---- C:\Windows\system32\mshtml.dll
2017-02-05 21:38:20 ----A---- C:\Windows\system32\ieframe.dll
2017-02-05 21:38:18 ----A---- C:\Windows\system32\jscript9.dll
2017-02-05 21:38:17 ----A---- C:\Windows\system32\wininet.dll
2017-02-05 21:38:17 ----A---- C:\Windows\system32\win32k.sys
2017-02-05 21:38:16 ----A---- C:\Windows\system32\winload.exe
2017-02-05 21:38:16 ----A---- C:\Windows\system32\msi.dll
2017-02-05 21:38:16 ----A---- C:\Windows\system32\drivers\cng.sys
2017-02-05 21:38:16 ----A---- C:\Windows\system32\crypt32.dll
2017-02-05 21:38:15 ----A---- C:\Windows\system32\urlmon.dll
2017-02-05 21:38:15 ----A---- C:\Windows\system32\iedkcs32.dll
2017-02-05 21:38:15 ----A---- C:\Windows\system32\clfs.sys
2017-02-05 21:38:15 ----A---- C:\Windows\system32\bcdedit.exe
2017-02-05 21:38:14 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-02-05 21:38:14 ----A---- C:\Windows\system32\ntkrnlpa.exe
2017-02-05 21:38:14 ----A---- C:\Windows\system32\consent.exe
2017-02-05 21:38:14 ----A---- C:\Windows\system32\bcrypt.dll
2017-02-05 21:38:13 ----A---- C:\Windows\system32\wintrust.dll
2017-02-05 21:38:13 ----A---- C:\Windows\system32\usp10.dll
2017-02-05 21:38:13 ----A---- C:\Windows\system32\user32.dll
2017-02-05 21:38:13 ----A---- C:\Windows\system32\ntdll.dll
2017-02-05 21:38:13 ----A---- C:\Windows\system32\nlsbres.dll
2017-02-05 21:38:13 ----A---- C:\Windows\system32\hlink.dll
2017-02-05 21:38:13 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2017-02-05 21:38:13 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2017-02-05 21:38:12 ----A---- C:\Windows\system32\vbscript.dll
2017-02-05 21:38:12 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-02-05 21:38:12 ----A---- C:\Windows\system32\jscript.dll
2017-02-05 21:38:12 ----A---- C:\Windows\system32\gdi32.dll
2017-02-05 21:38:11 ----A---- C:\Windows\system32\iertutil.dll
2017-02-05 21:38:10 ----A---- C:\Windows\system32\msiexec.exe
2017-02-05 21:38:10 ----A---- C:\Windows\system32\msfeeds.dll
2017-02-05 21:38:10 ----A---- C:\Windows\system32\ieui.dll
2017-02-05 21:38:10 ----A---- C:\Windows\system32\ieapfltr.dll
2017-02-05 21:38:09 ----A---- C:\Windows\system32\authui.dll
2017-02-05 21:38:07 ----A---- C:\Windows\system32\webcheck.dll
2017-02-05 21:38:07 ----A---- C:\Windows\system32\msihnd.dll
2017-02-05 21:38:06 ----A---- C:\Windows\system32\smss.exe
2017-02-05 21:38:06 ----A---- C:\Windows\system32\mshtmled.dll
2017-02-05 21:38:06 ----A---- C:\Windows\system32\jscript9diag.dll
2017-02-05 21:38:06 ----A---- C:\Windows\system32\dxtrans.dll
2017-02-05 21:38:06 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2017-02-05 21:38:05 ----A---- C:\Windows\system32\rpcrt4.dll
2017-02-05 21:38:05 ----A---- C:\Windows\system32\occache.dll
2017-02-05 21:38:05 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-02-05 21:38:05 ----A---- C:\Windows\system32\msrating.dll
2017-02-05 21:38:05 ----A---- C:\Windows\system32\kerberos.dll
2017-02-05 21:38:05 ----A---- C:\Windows\system32\jsproxy.dll
2017-02-05 21:38:05 ----A---- C:\Windows\system32\dxtmsft.dll
2017-02-05 21:38:05 ----A---- C:\Windows\system32\advapi32.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\wdigest.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\sspicli.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\srcore.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\schannel.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\rpchttp.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\ncrypt.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\msv1_0.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\lsasrv.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\inseng.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\ieUnatt.exe
2017-02-05 21:38:04 ----A---- C:\Windows\system32\iesetup.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\iernonce.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\ie4uinit.exe
2017-02-05 21:38:04 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2017-02-05 21:38:04 ----A---- C:\Windows\system32\cryptsvc.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\cryptnet.dll
2017-02-05 21:38:04 ----A---- C:\Windows\system32\appinfo.dll
2017-02-05 21:38:03 ----A---- C:\Windows\system32\TSpkg.dll
2017-02-05 21:38:03 ----A---- C:\Windows\system32\sspisrv.dll
2017-02-05 21:38:03 ----A---- C:\Windows\system32\srclient.dll
2017-02-05 21:38:03 ----A---- C:\Windows\system32\setbcdlocale.dll
2017-02-05 21:38:03 ----A---- C:\Windows\system32\secur32.dll
2017-02-05 21:38:03 ----A---- C:\Windows\system32\rstrui.exe
2017-02-05 21:38:03 ----A---- C:\Windows\system32\lsass.exe
2017-02-05 21:38:03 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-02-05 21:38:03 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2017-02-05 21:38:03 ----A---- C:\Windows\system32\drivers\appid.sys
2017-02-05 21:38:03 ----A---- C:\Windows\system32\csrsrv.dll
2017-02-05 21:38:03 ----A---- C:\Windows\system32\cryptbase.dll
2017-02-05 21:38:03 ----A---- C:\Windows\system32\credssp.dll
2017-02-05 21:38:03 ----A---- C:\Windows\system32\auditpol.exe
2017-02-05 21:38:03 ----A---- C:\Windows\system32\appidsvc.dll
2017-02-05 21:38:03 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2017-02-05 21:38:03 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2017-02-05 21:38:03 ----A---- C:\Windows\system32\appidapi.dll
2017-02-05 21:38:03 ----A---- C:\Windows\system32\apisetschema.dll
2017-02-05 21:38:02 ----A---- C:\Windows\system32\tzres.dll
2017-02-05 21:38:02 ----A---- C:\Windows\system32\msimsg.dll
2017-02-05 21:38:02 ----A---- C:\Windows\system32\msaudite.dll
2017-02-05 21:38:02 ----A---- C:\Windows\system32\adtschema.dll
2017-02-05 21:38:01 ----A---- C:\Windows\system32\msobjs.dll
2017-02-05 21:38:01 ----A---- C:\Windows\system32\ieetwcollectorres.dll

======List of files/folders modified in the last 1 month======

2017-02-06 14:48:19 ----RD---- C:\Program Files
2017-02-06 14:46:33 ----D---- C:\Windows\Temp
2017-02-06 14:24:44 ----D---- C:\Windows\system32\config
2017-02-06 14:09:16 ----D---- C:\Windows\System32
2017-02-06 14:09:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-02-06 14:09:15 ----D---- C:\Windows\inf
2017-02-06 14:07:16 ----D---- C:\Users\Gebruiker\AppData\Roaming\Spotify
2017-02-06 14:04:29 ----D---- C:\ProgramData\MFAData
2017-02-06 14:03:38 ----D---- C:\Windows\winsxs
2017-02-06 14:03:16 ----A---- C:\Windows\system32\log.txt
2017-02-06 13:59:59 ----D---- C:\Program Files\Internet Explorer
2017-02-06 13:59:58 ----D---- C:\Windows\system32\drivers
2017-02-06 13:59:57 ----D---- C:\Windows\system32\nl-NL
2017-02-06 13:59:56 ----D---- C:\Windows\system32\en-US
2017-02-06 13:59:50 ----D---- C:\Windows\system32\Boot
2017-02-06 13:59:43 ----SHD---- C:\Config.Msi
2017-02-06 13:59:43 ----HD---- C:\ProgramData
2017-02-05 22:08:45 ----D---- C:\Windows
2017-02-05 22:06:44 ----RSD---- C:\Windows\assembly
2017-02-05 22:02:08 ----D---- C:\Windows\system32\MRT
2017-02-05 22:01:48 ----AC---- C:\Windows\system32\MRT.exe
2017-02-05 22:01:32 ----D---- C:\Windows\Microsoft.NET
2017-02-05 22:00:41 ----SHD---- C:\Windows\Installer
2017-02-05 22:00:34 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2017-02-05 21:59:47 ----D---- C:\Program Files\Common Files\microsoft shared
2017-02-05 21:59:47 ----D---- C:\Program Files\Common Files
2017-02-05 21:51:35 ----D---- C:\Program Files\Microsoft Office
2017-02-05 21:49:51 ----SHD---- C:\System Volume Information
2017-02-05 21:21:46 ----D---- C:\Windows\Tasks
2017-02-05 21:19:42 ----D---- C:\Windows\system32\catroot2
2017-02-05 21:11:49 ----D---- C:\Users\Gebruiker\AppData\Roaming\Dropbox
2017-02-05 21:01:21 ----D---- C:\Windows\system32\Tasks
2017-02-05 20:57:54 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2017-02-05 20:57:26 ----D---- C:\Windows\system32\Macromed

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2016-10-05 207616]
R0 Avglogx;AVG Logging Driver; C:\Windows\system32\DRIVERS\avglogx.sys [2016-02-16 287008]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2016-09-26 197376]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2016-06-01 47360]
R0 Avgunivx;AVG Universal Driver; C:\Windows\system32\DRIVERS\avgunivx.sys [2016-06-20 65280]
R0 O2MDRDR;O2MDRDR; C:\Windows\system32\DRIVERS\o2media.sys [2005-11-14 34176]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 Avgdiskx;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiskx.sys [2016-05-13 134912]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2016-10-17 259328]
R1 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2015-11-20 31664]
R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2016-10-19 219904]
R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2016-07-27 231680]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-12-04 1161760]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-10-05 1221632]
R3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K; C:\Windows\system32\DRIVERS\e1k6232.sys [2009-11-01 208552]
R3 FUJ02B1;Fujitsu FUJ02B1 Device Driver; C:\Windows\system32\DRIVERS\FUJ02B1.sys [2016-05-11 57232]
R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver; C:\Windows\system32\DRIVERS\FUJ02E3.sys [2006-11-01 5632]
R3 HECI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2009-11-01 41088]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-12-18 7064576]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 125696]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-10-28 2785568]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2009-11-27 209920]
R3 OZSCR;O2Micro SmartCardBus Smartcard Reader; C:\Windows\system32\DRIVERS\ozscr.sys [2005-04-21 92550]
R3 qcfiltersra2k;Gobi 2000 USB Composite Device Filter Driver(1199-9001); C:\Windows\system32\DRIVERS\qcfiltersra2k.sys [2009-10-01 5248]
R3 qcusbnetsra2k;Gobi 2000 USB-NDIS miniport(1199-9001); C:\Windows\system32\DRIVERS\qcusbnetsra2k.sys [2009-10-01 201728]
R3 qcusbsersra2k;Gobi 2000 USB Device for Legacy Serial Communication(1199-9001); C:\Windows\system32\DRIVERS\qcusbsersra2k.sys [2009-10-01 106368]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-20 84992]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-09-04 3487104]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-10-09 229424]
R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2016-02-05 123328]
S1 isqntwty;isqntwty; \??\C:\Windows\system32\drivers\isqntwty.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 cpuz134;cpuz134; \??\C:\Users\GEBRUI~1\AppData\Local\Temp\cpuz134\cpuz134_x32.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys []
S3 O2SCBUS;O2Micro SmartCardBus Reader; C:\Windows\system32\DRIVERS\ozscr.sys [2005-04-21 92550]
S3 O2SDRDR;O2SDRDR; C:\Windows\system32\DRIVERS\o2sd.sys [2009-07-03 44064]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TIEHDUSB;TIEHDUSB; C:\Windows\system32\drivers\tiehdusb.sys [2004-02-04 49536]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-12-19 82640]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-12-04 14336]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\Av\avgidsagent.exe [2016-11-02 4152896]
R2 avgsvc;AVG Service; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [2016-12-06 935184]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\Av\avgwdsvcx.exe [2016-11-02 604824]
R2 ClickToRunSvc;Microsoft Office ClickToRun Service; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2016-12-25 2115840]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2016-11-29 105144]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-11-01 262144]
R2 QDLService2kSierra;Qualcomm Gobi 2000 Download Service (Sierra); C:\Program Files\QUALCOMM\QDLService2k\QDLService2kSierra.exe [2009-10-01 329976]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-11-01 2314240]
R2 Update service;Update service; C:\Program Files\Popcorn Time\Updater.exe [2016-08-26 339968]
R2 VFPRadioSupportService;Ondersteuning Bluetooth-functies; C:\Program Files\CSR\Bluetooth Feature Pack 5.0\VFPRadioSupportService.exe [2009-10-12 111488]
R2 vToolbarUpdater40.3.6;vToolbarUpdater40.3.6; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\40.3.6\ToolbarUpdater.exe [2016-09-30 1349704]
R2 WtuSystemSupport;WtuSystemSupport; C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe [2016-09-30 980552]
S2 gupdate;Google Update-service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-22 144200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-02-05 270936]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 AvgAMPS;AvgAMPS; C:\Program Files\AVG\Av\avgamps.exe [2016-11-02 647864]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-22 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-11-12 102912]
S3 ose;Office  Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2016-12-25 209112]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2014-10-30 4846168]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-04-24 1343400]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2016-11-29 45752]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2016-11-29 135848]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2016-11-29 135848]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2016-11-29 135848]

-----------------EOF-----------------