Logfile of random's system information tool 1.10 (written by random/random)
Run by MATHIAS at 2014-12-03 20:16:50
Microsoft® Windows Vista™ Home Premium  Service Pack 2
System drive C: has 635 GB (45%) free of 1424 GB
Total RAM: 12277 MB (76% free)

HijackThis download failed

======Listing Processes======



\SystemRoot\System32\smss.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe"

C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k LocalService
Ati2evxx.exe -Client
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {C8D1FE54-37E7-4BAF-A125-EAAB8D4EA361}
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Users\Milan\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe"
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
"C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc
"C:\Windows\system32\mfevtps.exe"
"C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe" /McCoreSvc
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Users\MATHIAS\AppData\Roaming\VOPackage\VOsrv.exe
"C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
WLIDSvcM.exe 2560
"C:\Program Files (x86)\Yontoo\Y2Desktop.Updater.exe" "C:\Users\THE BOSS\AppData\Roaming\Yontoo\YontooDesktop.exe"
"C:\Program Files\McAfee\MSC\McAPExe.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-5b4aa9cf-fef7-4f29-b1cd-29f83f66f6e4 -SystemEventPortName:HostProcess-2832803f-f651-424d-90b7-d1817104a0a9 -IoCancelEventPortName:HostProcess-ea7695e8-9073-49a7-9531-2aaf8b5a58f8 -NonStateChangingEventPortName:HostProcess-30128dca-490a-4544-b37e-45a3604882f9 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:92de306b-f516-45ed-95f5-8e54949df323 -DeviceGroupId:WpdFsGroup
"C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe"
"C:\Windows\SysWOW64\rundll32.exe" "c:\PROGRA~2\mcafee\SITEAD~1\saHook.dll", saHooker_Initialize_and_Wait
"C:\Windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\SITEAD~1\x64\saHook.dll", saHooker_Initialize_and_Wait
taskeng.exe {F9695415-ED46-40BB-AEE8-9178DCAF2240}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\conime.exe
"C:\Program Files\Windows Defender\MSASCui.exe" -hide
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Users\MATHIAS\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
"C:\Windows\ehome\ehtray.exe" 
"C:\Windows\SysWOW64\rundll32.exe" "C:\Users\MATHIAS\AppData\Roaming\BabSolution\Shared\NTRedirect.dll",Run
"C:\Users\MATHIAS\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe" 
"C:\Users\MATHIAS\AppData\Local\Apps\2.0\3RR8R9CL.QQ9\HVJ5G280.YG5\curs..tion_9e9e83ddf3ed3ead_0005.0001_36a9b62a0ea0a2ec\CurseClient.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" 
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" 
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe" /platui /runkey
"C:\Program Files (x86)\iTunes\iTunesHelper.exe" 
"C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe" -hide
"C:\Program Files (x86)\Bench\BService\1.1\bservice.exe" 
"C:\Program Files (x86)\Bench\BService\1.1\bservice64.exe" 
"C:\Program Files (x86)\Bench\Wd\wd.exe" 
"C:\Program Files (x86)\Bench\Proxy\pwdg.exe" 
C:\Windows\ehome\ehmsas.exe -Embedding
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\THE BOSS\AppData\Roaming\Yontoo\YontooDesktop.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP Photosmart B109a-m#1331128591" -Startup
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" 
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group17 pct:1h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/NewSuggestType_A7_Stable_R2/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_49/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --disable-webrtc-hw-encoding --disable-gpu-compositing --channel="204.1.864890817\1182347692" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/DomRel-Enable/enable/EmbeddedSearch/Group17 pct:1h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/ControlBootstrap/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/NewSuggestType_A7_Stable_R2/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SPDY/DefaultSpdy31Enabled/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_49/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-50-Percent/default/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --enable-gpu-rasterization --disable-gpu-compositing --channel="204.4.466943225\695638921" /prefetch:673131151
C:\Windows\system32\cmd.exe /c "C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe" --parent-window=0 chrome-extension://fheoggkfdfchfphceeifdbepaooicaho/ < \\.\pipe\chrome.nativeMessaging.in.2789ec55dab88c3e > \\.\pipe\chrome.nativeMessaging.out.2789ec55dab88c3e
"C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe"  --parent-window=0 chrome-extension://fheoggkfdfchfphceeifdbepaooicaho/ 
"C:\Users\MATHIAS\AppData\Local\Logitech® Webcam Software\Logishrd\LU2.0\LULnchr.exe"  /lang:NLD /vercfg:2.0 /verman:2.0 /prod:lws /version:13.30.1396 /po:0 /qs:hit=2&hcd1=046d_080f_0009 /cn1:facebook /cv1:13.30.1346 /cn2:gallery /cv2:13.30.1379 /cn3:getmore /cv3:13.30.1396 /cn4:help /cv4:13.30.1379 /cn5:help_main /cv5:13.30.1396 /cn6:launcher /cv6:13.30.1379 /cn7:launcher_main /cv7:13.30.1379 /cn8:models /cv8:13.00.1779 /cn9:motdet /cv9:13.30.1395 /cn10:picvid /cv10:13.30.1395 /cn11:privacyshades /cv11:13.00.1779 /cn12:twitter /cv12:13.30.1346 /cn13:videoeffects /cv13:13.30.1379 /cn14:vmm /cv14:13.30.1379 /cn15:webcamcontroller /cv15:13.30.1395 /cn16:wlmplugin /cv16:13.30.1201 /cn17:youtube /cv17:13.30.1346
"C:\Users\MATHIAS\AppData\Local\Logitech® Webcam Software\Logishrd\LU2.0\LogitechUpdate.exe" /lang:NLD /vercfg:2.0 /verman:2.0 /prod:lws /version:13.30.1396 /po:0 /qs:hit=2&hcd1=046d_080f_0009 /cn1:facebook /cv1:13.30.1346 /cn2:gallery /cv2:13.30.1379 /cn3:getmore /cv3:13.30.1396 /cn4:help /cv4:13.30.1379 /cn5:help_main /cv5:13.30.1396 /cn6:launcher /cv6:13.30.1379 /cn7:launcher_main /cv7:13.30.1379 /cn8:models /cv8:13.00.1779 /cn9:motdet /cv9:13.30.1395 /cn10:picvid /cv10:13.30.1395 /cn11:privacyshades /cv11:13.00.1779 /cn12:twitter /cv12:13.30.1346 /cn13:videoeffects /cv13:13.30.1379 /cn14:vmm /cv14:13.30.1379 /cn15:webcamcontroller /cv15:13.30.1395 /cn16:wlmplugin /cv16:13.30.1201 /cn17:youtube /cv17:13.30.1346 /conffile=C:\Users\MATHIAS\AppData\Local\Logitech® Webcam Software\Logishrd\LU2.0\LogitechUpdateProduct.xml
"C:\Program Files\McAfee\MAT\McPvTray.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="204.6.1859541347\1921073454" --ppapi-flash-args=enable_hw_video_decode=1 --lang=nl --ignored=" --type=renderer " /prefetch:-632637702
"C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe"
"C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe" /wts 5612 488 492
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\vssvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\MATHIAS\Downloads\RSITx64.exe" 
"c:\PROGRA~2\mcafee\SITEAD~1\saui.exe" -Embedding
wmiadap.exe /F /T /R
"C:\Program Files\Common Files\McAfee\Platform\Core\mchost.exe" {9d7ac750-e018-4625-a92c-fa1030d039b0} /pid=4596

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 
C:\Windows\tasks\AmiUpdXp.job - C:\Users\Milan\AppData\Local\SwvUpdater\Updater.exe 
C:\Windows\tasks\APSnotifierPP1.job - C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe --notifier2 A
C:\Windows\tasks\APSnotifierPP2.job - C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe --notifier 4
C:\Windows\tasks\APSnotifierPP3.job - C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe --notifier 6
C:\Windows\tasks\bench-S-1-5-21-552174293-927401653-4265545726-1001.job - C:\Program Files (x86)\Bench\Updater\updater.exe -runmode=checkupdate
C:\Windows\tasks\bench-sys.job - C:\Program Files (x86)\Bench\Updater\updater.exe -runmode=checkupdate
C:\Windows\tasks\cf43921d-02df-421d-ae05-8262e53706bf-4.job - C:\Program Files (x86)\TornPlusTV_version1.11\cf43921d-02df-421d-ae05-8262e53706bf-4.exe /rawdata=vUDCIkPG/JW340gkfoSJuHCcyQm5/dOtjyEGO9Ge2ihYvckHDIUbNYJOrcT5irIMPwSfkyX4tIrCx1xIhJ8brzazEKwl1aZFqxWneIdi26Elet15gWExGpQkSP0S+WRCQMChZcJ3vfatImJwRcaayO9cjvL1gXlzHdkPVnx5KZkE9+Lt+1+VsM3v71YpzbkCFU7y964Qg145ciTkUwGpXpipAhUZl2VnWQVtxH3qXqUWGgs2KocbwATNr8AdDM/J8ZRTnCf0gato7d1bp+v3cxrwiQDy71l9/pVB5JwU+XriiWAL+brmA+ux+KMrYVsx7mixv7fqu6K7f/y2DFTym6RHGswq+ZJwc7QtHHXfkkVFCh9lrqq3l2Nv/w3vPKKDaOLfz6s18chiqh8zJ/tNZiLTbEm+2sgg2b9N+mEytKZsddtHaexOu2R1o4m14gZ2An6z19dTd053B5kK0APVguQHY5B/o+6jCgJA1grkbbRFhAucsrkoyar7X/tFnmBFfEYBs5+LRZbqNAvQuRkHEjkUYZv81GRZAbs+FJ4LGmi/2gVSLEzuVk0tNZqBuuDK0PZ7luwj72BlD8mL5SEonDEN44uYjXv+E68zeI4dj0XNggRbPoVz6h1eGEx/QtGlB2hYYASAJ4FUHw9iDq7eAoFJnNpcxXZFBvbgxvx4/W60eqFmc6FpSnb2ugLqsWZaeeEOpH94SVL0Jt8/n1WYIggobpPDqC7PE9zXN47OUmdo7VhZ9fWgUMfG/d7uSH6YRtSE5k9xKpQVI7xUCTUAqo/RIgaMHyi/e6QKhcK40p24+RDjc+YRU9NBzzbv8gx8fGXO/9plnH9n+zf6AydSNYbSugZ4EwdbukBPAj9vPEkHo3YgCqz287y8RqztZYF1X+FL1JMvycr0HOM6zu7VVsMfrgXzU0uNdlnz5yWohnDnudLsCj6sxnefAgEcJ9PIE/jH7kUt0aAwV6rPnvsaBR14YH7VEEU6O75zy4t9fNq5rqOP/UckO6Gjj74jo4wDCcFOTl76f9etICCNhULS78KyVcusWuv6deuVCrwI8C6DJDiE4n+5/2f9nDV8LiayxZYlTUhtV6doksJ0WU0Ff7Cd/URvwhXPW3PN+AlUbjk3xV/QskEGbu72CqxpoAlhvsXT2alTaA92ye98hg75sQfUOVZkitCFMvieKhn77q1FZRzh7aPt/Wq6RJBi4OsjSrdkSVfGW4nR2zN2LAIVta2HMiX/jjv3Gqjjk5KbQTbGEZz0Ko/GByg2x1QgjlbzodGGdVuomnEPYC23UWdIfZkJ+Ns8C19oHst/KTADAzV2M2IoQ1S9ybROkHldVnMA4swgzmbXd2gLQUw2gPfuBb3m9UbDTa9FllHcygAs3X9XZLOcByODmjWsixHpsz/dYvSkw93DRXjIKLMku+EZ/igh+haN/VUgGvdB8yUO3Ajk1i2yIQwOH9AjzLbp+CPfAFVHe6gydqqpPa3NaFd3/agkNw4IzEnHtTWI/aw3HxyRoN5UTx2XkvzIdeQ4bIvwEQggc+LDwN30v1kVkSRFbf+vUA5r7Xnei/EjjvmuUMHDe3z0EFxPuWSKtW0tbf543kqKWuGL0RJmrhuBEsOK23kY4ZPNXcgfbRGAwDngKjnAskFBtdRaCgI1WQjTlrr8z7D2OwVoooBvxkWSuI5EPW1OkH5ugchV21I9W3x6uXsuOw+2HnMQtWk9rz/fC8QXmzFHcyC2nzm3YNoYkaKeeRX02SlOzNLD9VLsLocJ6JmqE662xMJrixG8eK+NpVuzE0ANPzM1+pNSw4EXdjywkWxkhlQGGz4bTS0px9cCrQZZWE6iMd6oXStQ4xNua7usc8x4ywqRSNSnXmIbXPrCZ1j4DhrRshkZ7jUbBhwIOcvoWVTWlsQryMJUkyA7CCizur+NlJtkOZrG1DfvuDpgUHeaeq1JkJLEDj8Tvf9+z7NkiUjQx3WoLPxIYO5/AAyyO3fXBdD8JaWUMkzEfWL07y10TgRwn7HhT4Qr6aJBQlRzsFfHrhge++RHLKu0oKgDn0TarWouaWTPZoQnIlbbcz3oGt1pAB3ojR/vOtcTg/c5nTVsSkX1yGhlSI7B68dRNGLogM9J9lPMQFQUpzu+tQHogAwrRVODQ2WDT3VgCPq8wEQKXavcvpCfoc3jWKyMtz+kIBU8nFNHDr4NE87efQIFVSzomDBDgAD/O669Cd0=
C:\Windows\tasks\DSite.job - C:\Users\THEBOS~1\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE /Check
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-552174293-927401653-4265545726-1000Core.job - C:\Users\THE BOSS\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-552174293-927401653-4265545726-1000UA.job - C:\Users\THE BOSS\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-552174293-927401653-4265545726-1001Core.job - C:\Users\MATHIAS\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-552174293-927401653-4265545726-1001UA.job - C:\Users\MATHIAS\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf6969d4fc1652.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineCore1d002863fa6c0c2.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cf8dcaf697da69.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cfeb0b944d343d.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\LyricsContainer Update.job - C:\Program Files (x86)\LyricsContainer\LrcsCtrUpdr.exe /c

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-03-27 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2012-08-13 5748928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll [2014-10-30 294400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD6EF0F0-B46B-4CB2-839C-BBE569FAA859}]
Browser Champion BHO - C:\Program Files (x86)\Browser Champion\FrameworkBHO64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2013-05-06 194912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-03-19 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}]
DefaultTab Browser Helper - C:\Users\Milan\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll [2014-11-04 470648]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Aanmeldhulp voor Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}]
Rich Media Downloader - C:\Users\MATHIAS\AppData\Local\Rich Media Player\BrowserExtensions\IE\RichMediaDownloader.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-27 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-10-02 4119744]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll [2014-10-30 241864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-03-19 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD6EF0F0-B46B-4CB2-839C-BBE569FAA859}]
Browser Champion BHO - C:\Program Files (x86)\Browser Champion\FrameworkBHO.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
Yontoo - C:\Program Files (x86)\Yontoo\YontooIEClient.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll [2014-10-30 294400]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-03-27 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll [2014-10-30 241864]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-27 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1584184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1555968]
"Facebook Update"=C:\Users\MATHIAS\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-08-01 138096]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 138240]
"NTRedirect"=C:\Windows\SysWOW64\rundll32.exe [2006-11-02 44544]
"uTorrent"=C:\Users\MATHIAS\AppData\Roaming\uTorrent\uTorrent.exe [2014-11-27 1385808]
"WMPNSCFG"=C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe []
"TornTv Downloader"=C:\Users\MATHIAS\AppData\Roaming\TornTV.com\Torntv Downloader.exe /c=startup []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-09-13 59720]
"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-05-10 49208]
""= []
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-08-29 61440]
"mcui_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2014-10-06 533872]
"beid"=C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe /startup []
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"DivXMediaServer"=C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [2013-04-15 450560]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2013-02-13 1263952]
"mcpltui_exe"=C:\Program Files\Common~1\McAfee\Platform\mcuicnt.exe [2014-09-17 643064]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-11-02 152392]
"LWS"=C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [2011-08-12 205336]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888]
"BService"=C:\Program Files (x86)\Bench\BService\1.1\bservice.exe [2014-09-29 52736]
"BService64"=C:\Program Files (x86)\Bench\BService\1.1\bservice64.exe [2014-09-29 110592]
"Wd"=C:\Program Files (x86)\Bench\Wd\wd.exe [2014-09-29 92672]
"Bench Communicator Watcher"=C:\Program Files (x86)\Bench\Proxy\pwdg.exe [2014-11-12 123392]
"Bench Settings Cleaner"=C:\Program Files (x86)\Bench\Proxy\cl.exe [2014-11-06 62464]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"Browser Champion-repairJob"=wscript.exe C:\Users\MATHIAS\AppData\Local\Browser Champion\repair.js Browser Champion-repairJob []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\MATHIAS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
CurseClientStartup.ccip
TornTvDownloader.lnk - C:\Users\MATHIAS\AppData\Roaming\TornTV.com\TornTV Downloader.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefire]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"DisableTaskMgr"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"BindDirectlyToPropertySetStorage"=0
"NoRun"=0
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"MSVideo"=vfwwdm32.dll
"VIDC.XFR1"=xfcodec64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-12-03 20:16:51 ----D---- C:\Program Files\trend micro
2014-12-03 20:16:50 ----D---- C:\rsit
2014-12-03 01:03:41 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-12-03 01:03:41 ----A---- C:\Windows\system32\kerberos.dll
2014-11-29 19:19:20 ----A---- C:\autoexec.bat
2014-11-25 19:39:28 ----D---- C:\ProgramData\600440862
2014-11-25 19:31:35 ----D---- C:\Program Files (x86)\Bench
2014-11-25 19:30:59 ----A---- C:\Windows\system32\drivers\SPPD.sys
2014-11-25 19:29:18 ----A---- C:\Users\MATHIAS\AppData\Roaming\ONEZKDIW.exe
2014-11-25 19:29:09 ----D---- C:\Program Files (x86)\globalUpdate
2014-11-17 00:38:41 ----A---- C:\Windows\system32\win32k.sys
2014-11-17 00:37:54 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-11-17 00:37:54 ----A---- C:\Windows\system32\schannel.dll
2014-11-17 00:35:11 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2014-11-17 00:35:11 ----A---- C:\Windows\system32\IMJP10K.DLL
2014-11-17 00:34:39 ----A---- C:\Windows\SYSWOW64\mscories.dll
2014-11-17 00:34:39 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2014-11-17 00:34:39 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2014-11-17 00:34:39 ----A---- C:\Windows\system32\mscories.dll
2014-11-17 00:34:39 ----A---- C:\Windows\system32\mscorier.dll
2014-11-17 00:34:39 ----A---- C:\Windows\system32\dfshim.dll
2014-11-17 00:33:46 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2014-11-17 00:33:46 ----A---- C:\Windows\system32\msaudite.dll
2014-11-17 00:33:44 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2014-11-17 00:33:44 ----A---- C:\Windows\system32\adtschema.dll
2014-11-17 00:33:43 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-11-17 00:33:43 ----A---- C:\Windows\system32\termsrv.dll
2014-11-17 00:33:42 ----A---- C:\Windows\system32\lsasrv.dll
2014-11-17 00:33:36 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2014-11-17 00:33:36 ----A---- C:\Windows\system32\oleaut32.dll
2014-11-17 00:33:21 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-11-17 00:33:21 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-11-17 00:33:21 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-11-17 00:33:21 ----A---- C:\Windows\SYSWOW64\audiodg.exe
2014-11-17 00:33:21 ----A---- C:\Windows\system32\EncDump.dll
2014-11-17 00:33:21 ----A---- C:\Windows\system32\audiosrv.dll
2014-11-17 00:33:21 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-11-17 00:33:21 ----A---- C:\Windows\system32\AudioEng.dll
2014-11-17 00:22:50 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-11-17 00:22:50 ----A---- C:\Windows\system32\packager.dll
2014-11-17 00:22:44 ----A---- C:\Windows\system32\drivers\fastfat.sys
2014-11-17 00:22:27 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-11-17 00:22:27 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-11-17 00:22:27 ----A---- C:\Windows\system32\msxml3r.dll
2014-11-17 00:22:27 ----A---- C:\Windows\system32\msxml3.dll
2014-11-16 14:40:07 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-11-16 14:40:07 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-11-16 14:40:07 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-11-16 14:40:07 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-11-16 14:40:07 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-11-16 14:40:07 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-11-16 14:40:07 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-11-16 14:40:07 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-11-16 14:40:07 ----A---- C:\Windows\system32\wininet.dll
2014-11-16 14:40:07 ----A---- C:\Windows\system32\vbscript.dll
2014-11-16 14:40:07 ----A---- C:\Windows\system32\mshtmled.dll
2014-11-16 14:40:07 ----A---- C:\Windows\system32\jsproxy.dll
2014-11-16 14:40:07 ----A---- C:\Windows\system32\jscript9.dll
2014-11-16 14:40:07 ----A---- C:\Windows\system32\dxtmsft.dll
2014-11-16 14:40:05 ----A---- C:\Windows\system32\jscript.dll
2014-11-16 14:40:05 ----A---- C:\Windows\system32\ieui.dll
2014-11-16 14:40:05 ----A---- C:\Windows\system32\dxtrans.dll
2014-11-16 14:40:04 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-11-16 14:40:03 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-11-16 14:40:03 ----A---- C:\Windows\system32\mshtml.dll
2014-11-16 14:40:03 ----A---- C:\Windows\system32\mshta.exe
2014-11-16 14:40:02 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-11-16 14:40:02 ----A---- C:\Windows\SYSWOW64\url.dll
2014-11-16 14:40:02 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-11-16 14:40:02 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-11-16 14:40:02 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-11-16 14:40:02 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-11-16 14:40:02 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-11-16 14:40:02 ----A---- C:\Windows\system32\urlmon.dll
2014-11-16 14:40:02 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-11-16 14:40:02 ----A---- C:\Windows\system32\msfeeds.dll
2014-11-16 14:40:02 ----A---- C:\Windows\system32\ieUnatt.exe
2014-11-16 14:40:02 ----A---- C:\Windows\system32\iertutil.dll
2014-11-16 14:40:01 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-11-16 14:40:01 ----A---- C:\Windows\system32\url.dll
2014-11-16 14:40:01 ----A---- C:\Windows\system32\ieframe.dll
2014-11-16 14:40:00 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-11-16 14:40:00 ----A---- C:\Windows\system32\msfeedssync.exe
2014-11-04 21:49:15 ----D---- C:\ProgramData\dtdata

======List of files/folders modified in the last 1 month======

2014-12-03 20:18:09 ----D---- C:\Windows\Temp
2014-12-03 20:16:51 ----RD---- C:\Program Files
2014-12-03 20:13:26 ----D---- C:\Users\MATHIAS\AppData\Roaming\uTorrent
2014-12-03 20:11:22 ----D---- C:\Windows\SysWOW64
2014-12-03 20:11:22 ----D---- C:\Windows\System32
2014-12-03 01:03:47 ----D---- C:\Windows\winsxs
2014-12-03 01:03:45 ----D---- C:\Windows\system32\catroot2
2014-12-03 01:03:45 ----D---- C:\Windows\system32\catroot
2014-12-03 01:03:35 ----SHD---- C:\System Volume Information
2014-12-03 00:35:16 ----D---- C:\Windows
2014-12-02 21:56:56 ----D---- C:\Windows\inf
2014-12-02 21:56:56 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-12-02 21:50:48 ----D---- C:\Windows\Tasks
2014-11-30 01:05:39 ----D---- C:\Windows\Prefetch
2014-11-30 00:48:26 ----RD---- C:\Program Files (x86)
2014-11-29 19:41:24 ----D---- C:\Windows\system32\drivers
2014-11-29 19:18:55 ----D---- C:\Windows\system32\Tasks
2014-11-27 22:13:04 ----D---- C:\Program Files (x86)\Battle.net
2014-11-27 16:19:51 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-11-26 01:34:04 ----SHD---- C:\Windows\Installer
2014-11-26 01:34:04 ----HD---- C:\Config.Msi
2014-11-26 01:33:28 ----D---- C:\Program Files (x86)\Adobe
2014-11-26 00:51:12 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-11-25 19:39:28 ----HD---- C:\ProgramData
2014-11-24 23:21:39 ----D---- C:\Users\MATHIAS\AppData\Roaming\Skype
2014-11-20 17:09:07 ----D---- C:\Program Files (x86)\SpeedFan
2014-11-18 21:11:03 ----D---- C:\Program Files (x86)\Steam
2014-11-17 18:11:18 ----D---- C:\Windows\Microsoft.NET
2014-11-17 18:04:53 ----RSD---- C:\Windows\assembly
2014-11-17 17:35:53 ----D---- C:\Windows\rescache
2014-11-17 17:15:23 ----D---- C:\Windows\SYSWOW64\migration
2014-11-17 17:15:23 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-17 17:15:22 ----D---- C:\Windows\system32\migration
2014-11-17 17:15:22 ----D---- C:\Program Files\Internet Explorer
2014-11-17 17:15:19 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-11-17 17:15:18 ----D---- C:\Windows\system32\nl-NL
2014-11-17 00:32:49 ----D---- C:\Windows\system32\MRT
2014-11-04 14:30:58 ----N---- C:\Windows\system32\MpSigStub.exe
2014-11-04 00:01:51 ----D---- C:\Program Files (x86)\World of Warcraft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2014-10-01 786304]
R0 mfewfpk;McAfee Inc. mfewfpk; C:\Windows\system32\drivers\mfewfpk.sys [2014-10-01 348560]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R1 MOBKFilter;MOBKFilter; C:\Windows\system32\DRIVERS\MOBK.sys [2010-04-13 66040]
R2 McPvDrv;McPvDrv Driver; C:\Windows\system32\drivers\McPvDrv.sys [2014-09-11 76064]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-09-30 4766208]
R3 cfwids;McAfee Inc. cfwids; C:\Windows\system32\drivers\cfwids.sys [2014-10-01 72136]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 HdAudAddService;Microsoft 1.1 UAA Functiestuurprogramma voor High Definition Audio-service; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 275456]
R3 mfeapfk;McAfee Inc. mfeapfk; C:\Windows\system32\drivers\mfeapfk.sys [2014-10-01 181584]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [2014-10-01 313680]
R3 mfefirek;McAfee Inc. mfefirek; C:\Windows\system32\drivers\mfefirek.sys [2014-10-01 526360]
R3 mfencbdc;McAfee Inc. mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [2014-09-19 447440]
R3 rt61x64;Linksys Wireless-G PCI Adapter Driver; C:\Windows\system32\DRIVERS\WMP54Gv41x64.sys [2007-03-12 362496]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh64.sys [2010-06-23 318568]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 87040]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 198656]
S3 Dot4;Microsoft IEEE-1284.4-stuurprogramma; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-21 145408]
S3 Dot4Print;Stuurprogramma voor printerklasse voor IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-21 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-21 42496]
S3 drmkaud;Microsoft Kernel DRM-audiodecoder; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 6144]
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 48488]
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 HipShieldK;McAfee Inc. HipShieldK; C:\Windows\system32\drivers\HipShieldK.sys [2013-09-23 197704]
S3 LVPr2M64;Logitech LVPr2M64 Driver; C:\Windows\system32\DRIVERS\LVPr2M64.sys [2009-10-07 30232]
S3 LVUVC64;Logitech Webcam 120(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2011-08-19 4869024]
S3 massfilter_hs;HS HandSet Mass Storage Filter Driver; \??\C:\Windows\system32\drivers\massfilter_hs.sys [2012-06-08 20232]
S3 mfencrk;McAfee Inc. mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [2014-09-19 96600]
S3 MSKSSRV;Microsoft Streaming Service-proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 11008]
S3 MSPCLOCK;Microsoft Streaming Clock-proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 7040]
S3 MSPQM;Microsoft Streaming Kwaliteitsbeheer Proxy; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 6656]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-conversieprogramma; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 7936]
S3 NTACCESS;NTACCESS; \??\E:\NTACCESS_64.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\E:\NTGLM7X.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784]
S3 usbaudio;Stuurprogramma voor USB-audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2013-07-12 99200]
S3 USBCCID;USB-smartcardlezer; C:\Windows\system32\DRIVERS\usbccid.sys [2009-04-11 38400]
S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 40960]
S3 usbvideo;USB-videoapparaat (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 168704]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 46592]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-04-08 68992]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 8704]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 438328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-09-23 65192]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2013-09-07 55624]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-09-30 908800]
R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 DefaultTabUpdate;DefaultTabUpdate; C:\Users\Milan\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [2013-03-13 107520]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 27648]
R2 HomeNetSvc;McAfee Home Network; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-07-30 335064]
R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\Windows\system32\svchost.exe [2008-01-21 27648]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-08-31 201304]
R2 McAPExe;McAfee AP Service; C:\Program Files\McAfee\MSC\McAPExe.exe [2014-10-06 562200]
R2 McMPFSvc;McAfee Personal Firewall Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-07-30 335064]
R2 McNaiAnn;McAfee VirusScan Announcer; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-07-30 335064]
R2 mcpltsvc;McAfee Platform Services; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-07-30 335064]
R2 McProxy;McAfee Proxy Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-07-30 335064]
R2 mfecore;McAfee Anti-Malware Core; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [2014-09-19 1050952]
R2 mfefire;McAfee Firewall Core Service; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [2014-10-01 221832]
R2 mfevtp;McAfee Validation Trust Protection Service; C:\Windows\system32\mfevtps.exe [2014-10-01 189920]
R2 MOBKbackup;1%; C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe [2010-04-13 231224]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2014-07-30 335064]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 27648]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 27648]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-05-30 75136]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2014-05-30 189248]
R2 servervo;VO Service component; C:\Users\MATHIAS\AppData\Roaming\VOPackage\VOsrv.exe [2014-09-10 71680]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-02 3064000]
R2 UMVPFSrv;UMVPFSrv; C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2011-08-19 450848]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R2 Yontoo Desktop Updater;Yontoo Desktop Updater; C:\Program Files (x86)\Yontoo\Y2Desktop.Updater.exe [2013-05-01 23552]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-21 27648]
R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2013-11-02 641352]
S2 51cdb72;Optimizer Pro Crash Monitor; C:\Windows\syswow64\rundll32.exe [2006-11-02 44544]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Google Updateservice (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-18 107912]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-26 267440]
S3 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-18 107912]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-12 194032]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 McODS;McAfee Scanner; C:\Program Files\McAfee\VirusScan\mcods.exe [2014-10-01 601864]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-25 114288]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PerfHost;@%systemroot%\sysWow64\perfhost.exe,-2; C:\Windows\SysWow64\perfhost.exe [2008-01-21 19968]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-11-12 833728]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 1012344]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------