Logfile of random's system information tool 1.10 (written by random/random)
Run by Papa at 2014-11-19 03:00:00
Microsoft Windows 7 Starter  Service Pack 1
System drive C: has 31 GB (21%) free of 145 GB
Total RAM: 3583 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:00:12, on 19/11/2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17420)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG2015\avgui.exe
D:\Program Files\Common Files\Siemens\S7UBTOOX\S7ubTstx.exe
C:\Program Files\File Association Helper\FAHWindow.exe
D:\Program Files\Common Files\Siemens\S7UBTOOX\S7ubtoox.exe
C:\Program Files\Trend Micro\RUBotted\RUBottedGUI.exe
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
D:\Program Files\Common Files\Siemens\Sqlany\dbsrv9.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATICEE.EXE
C:\Windows\System32\spool\drivers\w32x86\3\E_FATICEE.EXE
C:\Windows\System32\spool\drivers\w32x86\3\E_FATICEE.EXE
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\S U R F E N\Downloads\RSIT.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\trend micro\Papa.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com/?fr=avantsearch6
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: Avira SearchFree Toolbar BHO - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" (file missing)
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2015\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [FAHConsole] C:\Program Files\File Association Helper\FAHConsole.exe
O4 - HKLM\..\Run: [S7UB Start] "D:\Program Files\Common Files\Siemens\S7ubtoox\s7ubtstx.exe" -StartDB
O4 - HKLM\..\Run: [BlueStacks Agent] C:\Program Files\BlueStacks\HD-Agent.exe
O4 - HKLM\..\Run: [Trend Micro RUBotted V2.0 Beta] C:\Program Files\Trend Micro\RUBotted\RUBottedGUI.exe
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKLM\..\RunOnce: [MSPCLOCK] rundll32.exe streamci,StreamingDeviceSetup {97ebaacc-95bd-11d0-a3ea-00a0c9223196},{53172480-4791-11D0-A5D6-28DB04C10000},{53172480-4791-11D0-A5D6-28DB04C10000}
O4 - HKLM\..\RunOnce: [MSPQM] rundll32.exe streamci,StreamingDeviceSetup {DDF4358E-BB2C-11D0-A42F-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196}
O4 - HKLM\..\RunOnce: [MSKSSRV] rundll32.exe streamci,StreamingDeviceSetup {96E080C7-143C-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196}
O4 - HKLM\..\RunOnce: [MSTEE.CxTransform] rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},C:\Windows\inf\ksfilter.inf,MSTEE.Interface.Install
O4 - HKLM\..\RunOnce: [MSTEE.Splitter] rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},C:\Windows\inf\ksfilter.inf,MSTEE.Interface.Install
O4 - HKLM\..\RunOnce: [WDM_DRMKAUD] rundll32.exe streamci,StreamingDeviceSetup {EEC12DB6-AD9C-4168-8658-B03DAEF417FE},{ABD61E00-9350-47e2-A632-4438B90C6641},{FFBB6E3F-CCFE-4D84-90D9-421418B03A8E},C:\Windows\inf\WDMAUDIO.inf,WDM_DRMKAUD.Interface.Install
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (cleanup)] rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript
O4 - HKLM\..\RunOnce: [PLCSIM] s7epatsx.exe -silent
O4 - HKLM\..\RunOnce: [*WerKernelReporting] %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq
O4 - HKCU\..\Run: [Speccy] "C:\Program Files\Speccy\Speccy.exe" /totray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-913790430-1820616755-2066786237-1001\..\Run: [EPSON Stylus DX8400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\Windows\TEMP\E_S8962.tmp" /EF "HKCU" (User 'S U R F E N')
O4 - HKUS\S-1-5-21-913790430-1820616755-2066786237-1002\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-913790430-1820616755-2066786237-1002\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} (Bitdefender QuickScan Control) - http://quickscan.bitdefender.com/qsax/qsax.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Automation License Manager Service (almservice) - SIEMENS AG - D:\Program Files\Common Files\Siemens\sws\almsrv\almsrvx.exe
O23 - Service: Ask-updateservice (APNMCP) - APN LLC. - C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2015\avgwdsvc.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files\BlueStacks\HD-LogRotatorService.exe
O23 - Service: BlueStacks Updater Service (BstHdUpdaterSvc) - BlueStack Systems, Inc. - C:\Program Files\BlueStacks\HD-UpdaterService.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Riverbed Technology, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Trend Micro RUBotted Service (RUBotSrv) - Trend Micro Inc. - C:\Program Files\Trend Micro\RUBotted\RUBotSrv.exe
O23 - Service: S7 HSP Service (s7hspsvx) - SIEMENS AG - D:\Program Files\Siemens\Step7\s7bin\s7hspsvx.exe
O23 - Service: SIMATIC IEPG Help Service (s7oiehsx) - SIEMENS AG - D:\Program Files\Common Files\Siemens\S7IEPG\s7oiehsx.exe
O23 - Service: S7TraceServiceX - SIEMENS AG - D:\Program Files\Common Files\Siemens\Automation\TraceEngine\bin\S7TraceServiceX.exe

--
End of file - 8755 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}]
Avira SearchFree Toolbar - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll [2014-10-30 12184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-09-29 462248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-09-29 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{41564952-412D-5637-00A7-7A786E7484D7} - Avira SearchFree Toolbar - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll [2014-10-30 12184]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG_UI"=C:\Program Files\AVG\AVG2015\avgui.exe [2014-11-09 3653136]
"FAHConsole"=C:\Program Files\File Association Helper\FAHConsole.exe [2013-09-26 239288]
"S7UB Start"=D:\Program Files\Common Files\Siemens\S7ubtoox\s7ubtstx.exe [2010-06-03 102453]
"BlueStacks Agent"=C:\Program Files\BlueStacks\HD-Agent.exe [2014-05-21 832272]
"Trend Micro RUBotted V2.0 Beta"=C:\Program Files\Trend Micro\RUBotted\RUBottedGUI.exe [2013-07-25 1102872]
"ApnTBMon"=C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2014-10-09 1942424]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"MSPCLOCK"=streamci,StreamingDeviceSetup {97ebaacc-95bd-11d0-a3ea-00a0c9223196},{53172480-4791-11D0-A5D6-28DB04C10000},{53172480-4791-11D0-A5D6-28DB04C10000} []
"MSPQM"=streamci,StreamingDeviceSetup {DDF4358E-BB2C-11D0-A42F-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196} []
"MSKSSRV"=streamci,StreamingDeviceSetup {96E080C7-143C-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196} []
"MSTEE.CxTransform"=streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},C:\Windows\inf\ksfilter.inf,MSTEE.Interface.Install []
"MSTEE.Splitter"=streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},C:\Windows\inf\ksfilter.inf,MSTEE.Interface.Install []
"WDM_DRMKAUD"=streamci,StreamingDeviceSetup {EEC12DB6-AD9C-4168-8658-B03DAEF417FE},{ABD61E00-9350-47e2-A632-4438B90C6641},{FFBB6E3F-CCFE-4D84-90D9-421418B03A8E},C:\Windows\inf\WDMAUDIO.inf,WDM_DRMKAUD.Interface.Install []
"Malwarebytes Anti-Malware (cleanup)"=C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll,ProcessCleanupScript []
"PLCSIM"=s7epatsx.exe -silent []
"*WerKernelReporting"=C:\Windows\SYSTEM32\WerFault.exe [2009-07-14 360448]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Speccy"=C:\Program Files\Speccy\Speccy.exe [2014-04-11 5365016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ApnTBMon]
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2014-10-09 1942424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InstallerLauncher]
C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe /run:C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\Installer.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-19 03:00:00 ----D---- C:\rsit
2014-11-18 23:05:04 ----A---- C:\report.txt
2014-11-15 06:43:38 ----A---- C:\Windows\system32\wdigest.dll
2014-11-15 06:43:38 ----A---- C:\Windows\system32\TSpkg.dll
2014-11-15 06:43:38 ----A---- C:\Windows\system32\schannel.dll
2014-11-15 06:43:38 ----A---- C:\Windows\system32\ncrypt.dll
2014-11-15 06:43:38 ----A---- C:\Windows\system32\msv1_0.dll
2014-11-15 06:43:38 ----A---- C:\Windows\system32\kerberos.dll
2014-11-15 06:43:38 ----A---- C:\Windows\system32\credssp.dll
2014-11-15 06:43:17 ----A---- C:\Windows\system32\msi.dll
2014-11-15 06:43:03 ----A---- C:\Windows\system32\generaltel.dll
2014-11-15 06:43:03 ----A---- C:\Windows\system32\aepdu.dll
2014-11-15 06:43:02 ----A---- C:\Windows\system32\msxml3r.dll
2014-11-15 06:43:02 ----A---- C:\Windows\system32\msxml3.dll
2014-11-15 06:43:02 ----A---- C:\Windows\system32\aeinv.dll
2014-11-15 06:42:58 ----A---- C:\Windows\system32\win32k.sys
2014-11-15 06:42:46 ----A---- C:\Windows\system32\packager.dll
2014-11-15 06:42:44 ----A---- C:\Windows\system32\IMJP10K.DLL
2014-11-15 06:42:40 ----A---- C:\Windows\system32\EncDump.dll
2014-11-15 06:42:40 ----A---- C:\Windows\system32\audiosrv.dll
2014-11-15 06:42:40 ----A---- C:\Windows\system32\AudioSes.dll
2014-11-15 06:42:40 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-11-15 06:42:40 ----A---- C:\Windows\system32\AudioEng.dll
2014-11-15 06:42:32 ----A---- C:\Windows\system32\termsrv.dll
2014-11-15 06:42:32 ----A---- C:\Windows\system32\lsasrv.dll
2014-11-15 06:42:32 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-11-15 06:42:32 ----A---- C:\Windows\system32\adtschema.dll
2014-11-15 06:42:30 ----A---- C:\Windows\system32\msaudite.dll
2014-11-15 06:42:14 ----A---- C:\Windows\system32\oleaut32.dll
2014-11-15 06:42:13 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-15 06:42:13 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-15 06:42:13 ----A---- C:\Windows\system32\iernonce.dll
2014-11-15 06:42:13 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-11-15 06:42:13 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-11-15 06:42:13 ----A---- C:\Windows\system32\ie4uinit.exe
2014-11-15 06:42:12 ----A---- C:\Windows\system32\urlmon.dll
2014-11-15 06:42:12 ----A---- C:\Windows\system32\msfeeds.dll
2014-11-15 06:42:12 ----A---- C:\Windows\system32\jsproxy.dll
2014-11-15 06:42:12 ----A---- C:\Windows\system32\jscript9diag.dll
2014-11-15 06:42:12 ----A---- C:\Windows\system32\ieUnatt.exe
2014-11-15 06:42:12 ----A---- C:\Windows\system32\iedkcs32.dll
2014-11-15 06:42:12 ----A---- C:\Windows\system32\ieapfltr.dll
2014-11-15 06:42:12 ----A---- C:\Windows\system32\dxtmsft.dll
2014-11-15 06:42:10 ----A---- C:\Windows\system32\wininet.dll
2014-11-15 06:42:10 ----A---- C:\Windows\system32\msrating.dll
2014-11-15 06:42:10 ----A---- C:\Windows\system32\iesetup.dll
2014-11-15 06:42:10 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-11-15 06:42:09 ----A---- C:\Windows\system32\dxtrans.dll
2014-11-15 06:42:08 ----A---- C:\Windows\system32\ieui.dll
2014-11-15 06:42:08 ----A---- C:\Windows\system32\ieframe.dll
2014-11-15 06:42:07 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-11-15 06:42:07 ----A---- C:\Windows\system32\mshtmled.dll
2014-11-15 06:42:06 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-11-15 06:42:06 ----A---- C:\Windows\system32\iertutil.dll
2014-11-15 06:42:05 ----A---- C:\Windows\system32\mshtml.dll
2014-11-15 06:42:04 ----A---- C:\Windows\system32\vbscript.dll
2014-11-15 06:42:04 ----A---- C:\Windows\system32\jscript9.dll
2014-11-15 05:49:20 ----D---- C:\Program Files\Speccy
2014-11-15 05:39:44 ----D---- C:\0hotfix
2014-11-10 21:43:25 ----D---- C:\0
2014-11-09 05:16:08 ----A---- C:\PAPA-PC.txt
2014-11-08 17:34:03 ----A---- C:\Windows\system32\drivers\DrvAgent32.sys
2014-10-29 21:34:52 ----A---- C:\Windows\system32\drivers\avgidsdriverx.sys

======List of files/folders modified in the last 1 month======

2014-11-19 03:00:12 ----D---- C:\Windows\Prefetch
2014-11-19 03:00:12 ----D---- C:\Program Files\Trend Micro
2014-11-19 02:50:36 ----D---- C:\Windows\Temp
2014-11-18 21:52:27 ----D---- C:\ProgramData\MFAData
2014-11-18 21:15:57 ----D---- C:\Windows\system32\config
2014-11-18 21:05:25 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-11-18 21:05:20 ----D---- C:\Windows\system32\drivers
2014-11-17 20:19:15 ----D---- C:\000
2014-11-17 19:58:07 ----SHD---- C:\Windows\Installer
2014-11-17 19:53:13 ----RD---- C:\Program Files
2014-11-17 19:53:06 ----D---- C:\Windows\Tasks
2014-11-15 14:05:16 ----D---- C:\Windows\rescache
2014-11-15 13:33:38 ----D---- C:\Windows\Microsoft.NET
2014-11-15 13:32:49 ----RSD---- C:\Windows\assembly
2014-11-15 13:00:01 ----D---- C:\Windows
2014-11-15 10:08:36 ----D---- C:\Windows\winsxs
2014-11-15 07:14:17 ----D---- C:\Windows\System32
2014-11-15 07:14:15 ----SD---- C:\Windows\system32\CompatTel
2014-11-15 07:14:15 ----D---- C:\Windows\system32\zh-TW
2014-11-15 07:14:15 ----D---- C:\Windows\system32\zh-CN
2014-11-15 07:14:15 ----D---- C:\Windows\system32\nl-NL
2014-11-15 07:14:15 ----D---- C:\Windows\system32\nb-NO
2014-11-15 07:14:15 ----D---- C:\Windows\system32\ko-KR
2014-11-15 07:14:15 ----D---- C:\Windows\system32\fr-FR
2014-11-15 07:14:15 ----D---- C:\Windows\system32\fi-FI
2014-11-15 07:14:15 ----D---- C:\Windows\system32\en-US
2014-11-15 07:14:15 ----D---- C:\Windows\system32\de-DE
2014-11-15 07:14:15 ----D---- C:\Windows\system32\cs-CZ
2014-11-15 07:14:05 ----D---- C:\Program Files\Internet Explorer
2014-11-15 06:58:17 ----D---- C:\Windows\system32\MRT
2014-11-15 06:47:56 ----A---- C:\Windows\system32\MRT.exe
2014-11-15 06:45:58 ----SHD---- C:\System Volume Information
2014-11-15 06:41:37 ----D---- C:\Windows\system32\catroot
2014-11-15 06:41:36 ----D---- C:\Windows\system32\catroot2
2014-11-15 05:41:32 ----HD---- C:\$AVG
2014-11-11 04:55:14 ----D---- C:\Windows\Minidump
2014-11-09 18:24:18 ----D---- C:\Windows\inf
2014-11-09 18:24:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-11-09 11:29:23 ----D---- C:\ProgramData\BlueStacks
2014-11-09 11:27:14 ----D---- C:\Windows\system32\wfp
2014-11-09 11:27:14 ----D---- C:\Windows\system32\Tasks
2014-11-09 11:26:54 ----HD---- C:\ProgramData
2014-11-09 11:26:54 ----D---- C:\Program Files\Google
2014-11-09 11:26:54 ----D---- C:\Program Files\BlueStacks
2014-11-09 11:26:52 ----D---- C:\Windows\system32\wbem
2014-11-09 11:26:50 ----D---- C:\Windows\registration
2014-11-09 11:21:53 ----D---- C:\Windows\system32\LogFiles
2014-11-08 21:43:08 ----D---- C:\Windows\system32\wdi
2014-11-06 15:28:12 ----A---- C:\Windows\ntbtlog.txt
2014-10-27 02:14:28 ----D---- C:\Windows\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2014-06-18 147736]
R0 Avglogx;AVG Logging Driver; C:\Windows\system32\DRIVERS\avglogx.sys [2014-07-18 230680]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2014-10-05 98584]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2014-06-18 27416]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 A2DDA;A2 Direct Disk Access Support Driver; \??\C:\EEK\RUN\a2ddax86.sys [2013-12-09 22056]
R1 Avgdiskx;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiskx.sys [2014-06-18 121624]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2014-10-29 213784]
R1 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2014-06-18 21272]
R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2014-08-28 192792]
R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2014-10-10 200984]
R1 dpmconv;SIMATIC NET DP Driver; C:\Windows\system32\DRIVERS\dpmconv32.sys [2012-07-05 290304]
R1 vsnl2ada;SIMATIC NET FDL Driver; C:\Windows\system32\DRIVERS\vsnl2ada32.sys [2012-05-09 144384]
R2 BstHdDrv;BlueStacks Hypervisor; \??\C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [2014-05-21 113424]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2013-03-01 36600]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 S7otranx32;SIMATIC Transport; C:\Windows\System32\Drivers\S7otranx32.sys [2012-07-24 521216]
R2 s7ousbu32x;SIMATIC USB Service; C:\Windows\system32\DRIVERS\s7ousbu32x.sys [2012-12-19 550912]
R2 s7sn2srtx;PROFINET IO RT-Protocol V2.0; C:\Windows\system32\DRIVERS\s7sn2srtx.sys [2012-05-09 69848]
R2 SNTIE;SIMATIC Industrial Ethernet (ISO); C:\Windows\system32\DRIVERS\sntie.sys [2012-09-06 533416]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-03-01 139776]
R3 S7odpx2x32;SIMATIC Knotentaufe; C:\Windows\System32\Drivers\S7odpx2x32.sys [2012-07-24 87552]
R3 s7otsadx32;SIMATIC TS Adapter RS232-32; C:\Windows\System32\Drivers\s7otsadx32.sys [2012-07-24 194560]
R3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 cleanhlp;cleanhlp; \??\C:\EEK\Run\cleanhlp32.sys [2013-12-09 50200]
S3 cpuz136;cpuz136; \??\C:\Users\Papa\AppData\Local\Temp\cpuz136\cpuz136_x32.sys []
S3 DrvAgent32;DrvAgent32; \??\C:\Windows\system32\Drivers\DrvAgent32.sys [2014-11-08 23456]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\0\CPUTEMP\WinRing0.sys [2008-07-26 14416]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 almservice;Automation License Manager Service; D:\Program Files\Common Files\Siemens\sws\almsrv\almsrvx.exe [2013-01-08 1183608]
R2 APNMCP;Ask-updateservice; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [2014-10-30 166296]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [2014-11-09 3488784]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [2014-11-09 298080]
R2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [2014-05-21 385808]
R2 BstHdUpdaterSvc;BlueStacks Updater Service; C:\Program Files\BlueStacks\HD-UpdaterService.exe [2014-05-21 774928]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-31 634656]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-19 1259296]
R2 RUBotSrv;Trend Micro RUBotted Service; C:\Program Files\Trend Micro\RUBotted\RUBotSrv.exe [2013-07-25 443416]
R2 s7hspsvx;S7 HSP Service; D:\Program Files\Siemens\Step7\s7bin\s7hspsvx.exe [2012-12-20 61493]
R2 s7oiehsx;SIMATIC IEPG Help Service; D:\Program Files\Common Files\Siemens\S7IEPG\s7oiehsx.exe [2013-01-07 417656]
R2 S7TraceServiceX;S7TraceServiceX; D:\Program Files\Common Files\Siemens\Automation\TraceEngine\bin\S7TraceServiceX.exe [2013-01-07 561016]
S2 BstHdAndroidSvc;BlueStacks Android Service; C:\Program Files\BlueStacks\HD-Service.exe [2014-05-21 402192]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Google Update-service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-23 116648]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-23 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-06 102912]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2013-03-01 118520]
S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------