Logfile of random's system information tool 1.10 (written by random/random) Run by 11307625 at 2015-02-27 19:20:08 Microsoft Windows 8.1 Pro System drive C: has 14 GB (12%) free of 120 GB Total RAM: 8142 MB (66% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 19:20:16, on 27/02/2015 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.9600.17416) Boot mode: Normal Running processes: C:\Program Files\BullGuard Ltd\BullGuard\files32\spamfilter\LittleHook.exe C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files\trend micro\11307625.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.pxl.be R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: ArcPluginIEBHO - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - G:\Arc\Plugins\ArcPluginIE.dll (file missing) O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe /start O4 - HKLM\..\Run: [DBAgent] "C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\DBAgent.exe" /WinStart O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe O4 - HKCU\..\Run: [Uploader] C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR O4 - Startup: Inktwaarschuwingen controleren - HP Officejet Pro 8620.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~2\Office15\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office15\EXCEL.EXE/3000 O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll O9 - Extra button: Report to BullGuard - {27FD17FB-CF63-486b-B2BE-8D8781CBEA01} - C:\Program Files\BullGuard Ltd\BullGuard\Files32\Antiphishing\IE\BGAntiphishingIE.dll O9 - Extra button: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra 'Tools' menuitem: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: http://*.google.be O15 - Trusted Zone: http://*.pxl.be O15 - Trusted Zone: http://*.sharepoint.com O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = STUD.PXL.LOCAL O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = STUD.PXL.LOCAL O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL O20 - AppInit_DLLs: c:\PROGRA~1\BULLGU~1\BULLGU~1\Files32\BgAgent.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\windows\system32\atiesrxx.exe (file missing) O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Arc Service (ArcService) - Unknown owner - G:\Arc\ArcService.exe (file missing) O23 - Service: @oem87.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\windows\system32\BtwRSupportService.exe (file missing) O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: BullGuard Behavioural Detection (BsBhvScan) - BullGuard Ltd. - C:\Program Files\BullGuard Ltd\BullGuard\BullGuardBhvScanner.exe O23 - Service: BullGuard scanning service (BsScanner) - BullGuard Ltd. - C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe O23 - Service: BullGuard update service (BsUpdate) - BullGuard Ltd. - C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing) O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: @oem35.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\windows\system32\Hpservice.exe (file missing) O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing) O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing) O23 - Service: Seagate Dashboard Services - Seagate Technology LLC - C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe O23 - Service: Seagate MobileBackup Service - Seagate Technology LLC - C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\MobileService.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 14640 bytes ======Listing Processes====== wininit.exe C:\windows\system32\lsass.exe C:\windows\system32\svchost.exe -k DcomLaunch C:\windows\system32\svchost.exe -k RPCSS C:\windows\system32\atiesrxx.exe C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\windows\System32\SvcHost.exe -k BullGuard_Main C:\windows\system32\svchost.exe -k netsvcs C:\windows\system32\svchost.exe -k LocalService C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted "C:\Program Files\IDT\WDM\STacSV64.exe" C:\windows\system32\Hpservice.exe "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-c9b419eb-d5bc-43a4-88cc-73ad1da50b0f -SystemEventPortName:HostProcess-9226964b-d80b-4967-a885-f7c9b5567f54 -IoCancelEventPortName:HostProcess-a0a1797c-32fc-4e55-ae07-46cdfbbad55e -NonStateChangingEventPortName:HostProcess-22e93515-7ee0-4e00-a4e2-ba7faadffdf2 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:f91d1b45-ff28-4844-8cfb-210cdb6f4ddd -DeviceGroupId: C:\windows\system32\svchost.exe -k NetworkService C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "C:\Program Files\Bonjour\mDNSResponder.exe" C:\windows\System32\SvcHost.exe -k BullGuard_Backup "C:\Program Files\BullGuard Ltd\BullGuard\BullGuardBhvScanner.exe" C:\windows\System32\SvcHost.exe -k BullGuard_Cache C:\windows\System32\SvcHost.exe -k BullGuard C:\windows\System32\SvcHost.exe -k BullGuard_Proxy "C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe" "C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe" C:\windows\SysWOW64\svchost.exe -k hpdevmgmt dashost.exe {1d232467-a064-4b54-97f3484cc9e7c844} "C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe" "C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\MobileService.exe" C:\windows\system32\svchost.exe -k imgsvc C:\windows\system32\wbem\wmiprvse.exe C:\windows\system32\wbem\wmiprvse.exe C:\windows\system32\wbem\unsecapp.exe -Embedding "C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe" C:\windows\system32\svchost.exe -k HPService C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-fbc8eed0-f5bf-4d1d-94e0-ba3353e85b17 -SystemEventPortName:HostProcess-333db312-29ce-438b-970d-2f1e4b52a514 -IoCancelEventPortName:HostProcess-83448a52-50d9-412a-8f2d-825c25ec663a -NonStateChangingEventPortName:HostProcess-abf89534-d621-4e6e-87ab-a30d7e775062 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:5b45cc61-dd34-4245-bacf-096b2ec3e985 -DeviceGroupId:WudfDefaultDevicePool C:\windows\system32\SearchIndexer.exe /Embedding "C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe" C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe "C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe" C:\windows\System32\spoolsv.exe C:\windows\System32\WinLogon.exe -SpecialSession -hiberboot atieclxx C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe /HTC:376 taskhostex.exe C:\windows\Explorer.EXE "C:\Program Files\IDT\WDM\sttray64.exe" "C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe" -boot "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "C:\Program Files\BullGuard Ltd\BullGuard\files32\spamfilter\LittleHook.exe" "C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE" "C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe" "C:\Windows\System32\StikyNot.exe" "C:\windows\system32\RunDll32.exe" "C:\Program Files\HP\HP Officejet Pro 8620\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN4ADD40YK;CONNECTION=USB;MONITOR=1; "C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe" -autoupdate -startplugins "C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" /start "C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" "C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe" "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3768 CREDAT:144385 /prefetch:2 AdblockPlusEngine.exe nl-BE "C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-919585450-3989951782-4046941352-9551860_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-919585450-3989951782-4046941352-9551860 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1" "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3768 CREDAT:595208 /prefetch:2 "C:\windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe" -Embedding "C:\windows\system32\SearchFilterHost.exe" 0 580 584 592 65536 588 "C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe861_ Global\UsGthrCtrlFltPipeMssGthrPipe861 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\Users\11307625\Desktop\RSITx64.exe" C:\windows\System32\svchost.exe -k WerSvcGroup ======Scheduled tasks folder====== C:\windows\tasks\HP Photo Creations Communicator.job - C:\ProgramData\HP Photo Creations\Communicator.exe --auto =========Mozilla firefox========= ProfilePath - C:\Users\11307625\AppData\Roaming\Mozilla\Firefox\Profiles\vvdkzejt.default [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"= "Path"=G:\ArcPlugins\NPSWF32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Citrix.com/npican] "Description"=Citrix ICA Client Plugin "Path"=C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.71.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/Lync,version=15.0] "Description"=Microsoft Lync Plug-in for Firefox "Path"=C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@perfectworld.com/npArcPlayNowPlugin] "Description"=Arc PlayNow plugin for Mozilla browsers "Path"=G:\Arc\Plugins\npArcPluginFF.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5] "Description"=A component of your photo software powered by RocketLife "Path"=C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll C:\Program Files (x86)\Mozilla Firefox\extensions\ belgiumeid@eid.belgium.be C:\Program Files (x86)\Mozilla Firefox\plugins\ npMeetingJoinPluginOC.dll nppdf32.dll ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-01-21 218776] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL [2015-01-21 2334928] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}] HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}] Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2014-12-16 725768] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}] Lync Browser Helper - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-10-22 153248] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-11-12 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84BFE29A-8139-402a-B2A4-C23AE9E1A75F}] ArcPluginIEBHO Class - G:\Arc\Plugins\ArcPluginIE.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}] Microsoft SkyDrive Pro Browser Helper - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL [2015-01-21 1729744] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-11-12 171944] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}] HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}] Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2014-12-16 615688] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2013-03-07 1664000] "BullGuard"=C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe [2015-01-28 1360208] "BullGuardUpdate2"=c:\program files\bullguard ltd\bullguard\BullGuardUpdate2.exe [2015-01-28 2935120] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2014-07-27 2816240] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Uploader"=C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.Uploader.exe [2014-04-30 126056] "RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2013-09-30 457728] "CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2015-02-19 7416088] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2012-12-14 383544] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20 1021128] "QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2014-02-10 336672] ""= [] "DBAgent"=C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\DBAgent.exe [2014-04-30 1519176] "HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe C:\Users\11307625\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Inktwaarschuwingen controleren - HP Officejet Pro 8620.lnk - C:\windows\system32\RunDll32.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="c:\PROGRA~1\BULLGU~1\BULLGU~1\BgAgent.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BsMain] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BsScanner] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BsUpdate] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "FilterAdministratorToken"=1 "EnableLinkedConnections"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "VIDC.YUY2"=msyuv.dll "vidc.i420"=iyuv_32.dll "msacm.msgsm610"=msgsm32.acm "msacm.msg711"=msg711.acm "VIDC.YVYU"=msyuv.dll "VIDC.YVU9"=tsbyuv.dll "wavemapper"=msacm32.drv "midimapper"=midimap.dll "VIDC.UYVY"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.mrle"=msrle32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "vidc.msvc"=msvidc32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "MSVideo8"=VfWWDM32.dll ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 3 months====== 2015-02-27 19:20:08 ----D---- C:\rsit 2015-02-27 19:20:08 ----D---- C:\Program Files\trend micro 2015-02-27 16:51:56 ----D---- C:\Program Files\CCleaner 2015-02-25 12:56:54 ----D---- C:\Program Files (x86)\Mozilla Firefox 2015-02-17 19:12:11 ----SHD---- C:\Config.Msi 2015-02-13 00:42:24 ----D---- C:\Program Files\Adblock Plus for IE 2015-02-12 09:40:54 ----A---- C:\windows\SYSWOW64\jscript9.dll 2015-02-12 09:40:54 ----A---- C:\windows\system32\jscript9.dll 2015-02-11 18:19:53 ----A---- C:\windows\SYSWOW64\oleaut32.dll 2015-02-11 18:19:53 ----A---- C:\windows\system32\oleaut32.dll 2015-02-11 18:19:46 ----A---- C:\windows\system32\sppobjs.dll 2015-02-11 18:19:46 ----A---- C:\windows\system32\invagent.dll 2015-02-11 18:19:46 ----A---- C:\windows\system32\generaltel.dll 2015-02-11 18:19:46 ----A---- C:\windows\system32\devinv.dll 2015-02-11 18:19:46 ----A---- C:\windows\system32\appraiser.dll 2015-02-11 18:19:46 ----A---- C:\windows\system32\aepdu.dll 2015-02-11 18:19:46 ----A---- C:\windows\system32\aeinv.dll 2015-02-11 13:34:15 ----A---- C:\windows\SYSWOW64\scesrv.dll 2015-02-11 13:34:15 ----A---- C:\windows\system32\scesrv.dll 2015-02-11 13:34:13 ----A---- C:\windows\system32\drivers\ksecpkg.sys 2015-02-11 13:34:13 ----A---- C:\windows\system32\drivers\cng.sys 2015-02-11 13:34:12 ----A---- C:\windows\SYSWOW64\msaudite.dll 2015-02-11 13:34:12 ----A---- C:\windows\SYSWOW64\certcli.dll 2015-02-11 13:34:12 ----A---- C:\windows\SYSWOW64\adtschema.dll 2015-02-11 13:34:12 ----A---- C:\windows\system32\msaudite.dll 2015-02-11 13:34:12 ----A---- C:\windows\system32\lsasrv.dll 2015-02-11 13:34:12 ----A---- C:\windows\system32\certcli.dll 2015-02-11 13:34:12 ----A---- C:\windows\system32\adtschema.dll 2015-02-11 13:33:47 ----A---- C:\windows\system32\gpsvc.dll 2015-02-11 13:33:47 ----A---- C:\windows\system32\drivers\rdbss.sys 2015-02-11 13:33:47 ----A---- C:\windows\system32\drivers\mrxsmb.sys 2015-02-11 13:33:46 ----A---- C:\windows\SYSWOW64\gpapi.dll 2015-02-11 13:33:46 ----A---- C:\windows\system32\gpapi.dll 2015-02-11 13:33:46 ----A---- C:\windows\system32\drivers\mup.sys 2015-02-11 13:33:46 ----A---- C:\windows\system32\drivers\mrxsmb20.sys 2015-02-11 13:33:46 ----A---- C:\windows\system32\drivers\mrxsmb10.sys 2015-02-11 13:33:46 ----A---- C:\windows\system32\drivers\dfsc.sys 2015-02-11 13:33:37 ----A---- C:\windows\SYSWOW64\WindowsCodecs.dll 2015-02-11 13:33:37 ----A---- C:\windows\system32\WindowsCodecs.dll 2015-02-11 13:33:36 ----A---- C:\windows\SYSWOW64\ntdll.dll 2015-02-11 13:33:36 ----A---- C:\windows\system32\ntoskrnl.exe 2015-02-11 13:33:35 ----A---- C:\windows\SYSWOW64\wow32.dll 2015-02-11 13:33:35 ----A---- C:\windows\SYSWOW64\user.exe 2015-02-11 13:33:35 ----A---- C:\windows\SYSWOW64\setup16.exe 2015-02-11 13:33:35 ----A---- C:\windows\SYSWOW64\ntvdm64.dll 2015-02-11 13:33:35 ----A---- C:\windows\SYSWOW64\instnm.exe 2015-02-11 13:33:35 ----A---- C:\windows\system32\wow64cpu.dll 2015-02-11 13:33:35 ----A---- C:\windows\system32\wow64.dll 2015-02-11 13:33:35 ----A---- C:\windows\system32\ntvdm64.dll 2015-02-11 13:33:35 ----A---- C:\windows\system32\ntdll.dll 2015-02-11 13:33:34 ----A---- C:\windows\SYSWOW64\schannel.dll 2015-02-11 13:33:34 ----A---- C:\windows\system32\schannel.dll 2015-02-11 13:33:33 ----A---- C:\windows\system32\mshtml.dll 2015-02-11 13:33:32 ----A---- C:\windows\SYSWOW64\mshtml.dll 2015-02-11 13:33:31 ----A---- C:\windows\SYSWOW64\ieframe.dll 2015-02-11 13:33:31 ----A---- C:\windows\system32\iertutil.dll 2015-02-11 13:33:31 ----A---- C:\windows\system32\ieframe.dll 2015-02-11 13:33:30 ----A---- C:\windows\SYSWOW64\wininet.dll 2015-02-11 13:33:30 ----A---- C:\windows\SYSWOW64\webcheck.dll 2015-02-11 13:33:30 ----A---- C:\windows\SYSWOW64\vbscript.dll 2015-02-11 13:33:30 ----A---- C:\windows\SYSWOW64\urlmon.dll 2015-02-11 13:33:30 ----A---- C:\windows\SYSWOW64\MshtmlDac.dll 2015-02-11 13:33:30 ----A---- C:\windows\SYSWOW64\msfeeds.dll 2015-02-11 13:33:30 ----A---- C:\windows\SYSWOW64\jscript.dll 2015-02-11 13:33:30 ----A---- C:\windows\SYSWOW64\inetcomm.dll 2015-02-11 13:33:30 ----A---- C:\windows\SYSWOW64\iertutil.dll 2015-02-11 13:33:30 ----A---- C:\windows\SYSWOW64\iepeers.dll 2015-02-11 13:33:30 ----A---- C:\windows\SYSWOW64\iedkcs32.dll 2015-02-11 13:33:30 ----A---- C:\windows\SYSWOW64\ieapfltr.dll 2015-02-11 13:33:30 ----A---- C:\windows\SYSWOW64\dxtmsft.dll 2015-02-11 13:33:30 ----A---- C:\windows\system32\wininet.dll 2015-02-11 13:33:30 ----A---- C:\windows\system32\webcheck.dll 2015-02-11 13:33:30 ----A---- C:\windows\system32\vbscript.dll 2015-02-11 13:33:30 ----A---- C:\windows\system32\urlmon.dll 2015-02-11 13:33:30 ----A---- C:\windows\system32\mshtmled.dll 2015-02-11 13:33:30 ----A---- C:\windows\system32\MshtmlDac.dll 2015-02-11 13:33:30 ----A---- C:\windows\system32\msfeeds.dll 2015-02-11 13:33:30 ----A---- C:\windows\system32\jscript.dll 2015-02-11 13:33:30 ----A---- C:\windows\system32\inetcomm.dll 2015-02-11 13:33:30 ----A---- C:\windows\system32\iedkcs32.dll 2015-02-11 13:33:30 ----A---- C:\windows\system32\ieapfltr.dll 2015-02-11 13:33:30 ----A---- C:\windows\system32\ie4uinit.exe 2015-02-11 13:33:30 ----A---- C:\windows\system32\dxtmsft.dll 2015-02-11 13:33:30 ----A---- C:\windows\system32\actxprxy.dll 2015-02-11 13:33:17 ----A---- C:\windows\system32\win32k.sys 2015-01-31 18:25:20 ----N---- C:\windows\system32\HPDiscoPM7012.dll 2015-01-31 18:25:17 ----D---- C:\Program Files\HP 2015-01-30 19:08:04 ----D---- C:\Users\11307625\AppData\Roaming\Visan 2015-01-30 19:07:04 ----D---- C:\ProgramData\Visan 2015-01-30 19:07:04 ----D---- C:\ProgramData\HP Photo Creations 2015-01-30 19:07:04 ----D---- C:\Program Files (x86)\HP Photo Creations 2015-01-30 18:35:33 ----D---- C:\Users\11307625\AppData\Roaming\HpUpdate 2015-01-30 18:34:19 ----A---- C:\ProgramData\Ament.ini 2015-01-28 14:09:52 ----A---- C:\windows\SYSWOW64\BgGamingMonitor.dll 2015-01-28 14:09:52 ----A---- C:\windows\system32\BgGamingMonitor.dll 2015-01-28 14:09:51 ----A---- C:\windows\SYSWOW64\BGLsp.dll 2015-01-28 14:09:51 ----A---- C:\windows\system32\BGLsp.dll 2015-01-28 14:09:50 ----A---- C:\windows\system32\drivers\NSKernel.sys 2015-01-17 21:51:19 ----D---- C:\Users\11307625\AppData\Roaming\Arc 2015-01-13 22:13:12 ----A---- C:\windows\SYSWOW64\nlaapi.dll 2015-01-13 22:13:12 ----A---- C:\windows\system32\profsvc.dll 2015-01-13 22:13:12 ----A---- C:\windows\system32\nlasvc.dll 2015-01-13 22:13:12 ----A---- C:\windows\system32\nlaapi.dll 2015-01-13 22:13:12 ----A---- C:\windows\system32\ncsi.dll 2015-01-13 22:13:12 ----A---- C:\windows\system32\drivers\mrxdav.sys 2015-01-13 22:13:11 ----A---- C:\windows\SYSWOW64\wermgr.exe 2015-01-13 22:13:11 ----A---- C:\windows\SYSWOW64\WerFaultSecure.exe 2015-01-13 22:13:11 ----A---- C:\windows\SYSWOW64\WerFault.exe 2015-01-13 22:13:11 ----A---- C:\windows\SYSWOW64\werdiagcontroller.dll 2015-01-13 22:13:11 ----A---- C:\windows\SYSWOW64\wer.dll 2015-01-13 22:13:11 ----A---- C:\windows\SYSWOW64\Faultrep.dll 2015-01-13 22:13:11 ----A---- C:\windows\SYSWOW64\AudioSes.dll 2015-01-13 22:13:11 ----A---- C:\windows\SYSWOW64\AUDIOKSE.dll 2015-01-13 22:13:11 ----A---- C:\windows\SYSWOW64\AudioEng.dll 2015-01-13 22:13:11 ----A---- C:\windows\system32\wermgr.exe 2015-01-13 22:13:11 ----A---- C:\windows\system32\WerFaultSecure.exe 2015-01-13 22:13:11 ----A---- C:\windows\system32\WerFault.exe 2015-01-13 22:13:11 ----A---- C:\windows\system32\werdiagcontroller.dll 2015-01-13 22:13:11 ----A---- C:\windows\system32\wer.dll 2015-01-13 22:13:11 ----A---- C:\windows\system32\TSWbPrxy.exe 2015-01-13 22:13:11 ----A---- C:\windows\system32\Faultrep.dll 2015-01-13 22:13:11 ----A---- C:\windows\system32\EncDump.dll 2015-01-13 22:13:11 ----A---- C:\windows\system32\drivers\ahcache.sys 2015-01-13 22:13:11 ----A---- C:\windows\system32\ci.dll 2015-01-13 22:13:11 ----A---- C:\windows\system32\audiosrv.dll 2015-01-13 22:13:11 ----A---- C:\windows\system32\AudioSes.dll 2015-01-13 22:13:11 ----A---- C:\windows\system32\AUDIOKSE.dll 2015-01-13 22:13:11 ----A---- C:\windows\system32\AudioEng.dll 2015-01-13 22:13:11 ----A---- C:\windows\system32\AudioEndpointBuilder.dll 2015-01-13 22:13:11 ----A---- C:\windows\system32\audiodg.exe 2015-01-02 22:41:26 ----D---- C:\Users\11307625\AppData\Roaming\LolClient 2015-01-02 20:55:10 ----D---- C:\ProgramData\Riot Games 2015-01-02 20:49:40 ----D---- C:\windows\SYSWOW64\Logs 2014-12-22 00:26:03 ----D---- C:\Users\11307625\AppData\Roaming\Nero 2014-12-22 00:25:51 ----D---- C:\Users\11307625\AppData\Roaming\Seagate 2014-12-22 00:25:02 ----D---- C:\ProgramData\Nero 2014-12-22 00:21:46 ----D---- C:\Users\11307625\AppData\Roaming\Leadertech 2014-12-17 17:06:54 ----D---- C:\Program Files (x86)\Seagate 2014-12-17 11:26:38 ----D---- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2014-12-13 22:09:24 ----D---- C:\Program Files (x86)\TeamSpeak 3 Client 2014-12-13 17:09:13 ----A---- C:\windows\SYSWOW64\MrmCoreR.dll 2014-12-13 17:09:13 ----A---- C:\windows\system32\SystemSettingsDatabase.dll 2014-12-13 17:09:13 ----A---- C:\windows\system32\SystemSettingsAdminFlowUI.dll 2014-12-13 17:09:13 ----A---- C:\windows\system32\SystemSettingsAdminFlows.exe 2014-12-13 17:09:13 ----A---- C:\windows\system32\SystemSettings.Handlers.dll 2014-12-13 17:09:13 ----A---- C:\windows\system32\SettingsHandlers.dll 2014-12-13 17:09:13 ----A---- C:\windows\system32\MrmCoreR.dll 2014-12-13 17:09:13 ----A---- C:\windows\system32\MDMAgent.exe 2014-12-12 16:38:23 ----A---- C:\windows\system32\poqexec.exe 2014-12-12 16:38:22 ----A---- C:\windows\SYSWOW64\poqexec.exe 2014-12-11 13:58:14 ----A---- C:\windows\system32\drivers\MBAMSwissArmy.sys 2014-12-11 13:58:06 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware 2014-12-11 13:58:06 ----A---- C:\windows\system32\drivers\mwac.sys 2014-12-11 13:58:06 ----A---- C:\windows\system32\drivers\mbamchameleon.sys 2014-12-11 13:58:06 ----A---- C:\windows\system32\drivers\mbam.sys 2014-12-11 13:50:47 ----D---- C:\windows\system32\appraiser 2014-12-11 12:49:04 ----A---- C:\windows\SYSWOW64\DeviceSetupStatusProvider.dll 2014-12-11 12:49:04 ----A---- C:\windows\system32\DeviceSetupStatusProvider.dll 2014-12-11 12:06:53 ----A---- C:\windows\system32\aepic.dll 2014-12-11 12:06:17 ----A---- C:\windows\SYSWOW64\crypt32.dll 2014-12-11 12:06:17 ----A---- C:\windows\system32\crypt32.dll 2014-12-11 11:13:45 ----A---- C:\windows\SYSWOW64\mshtmled.dll 2014-12-11 11:13:45 ----A---- C:\windows\SYSWOW64\dxtrans.dll 2014-12-11 11:13:45 ----A---- C:\windows\system32\iepeers.dll 2014-12-11 11:13:45 ----A---- C:\windows\system32\dxtrans.dll 2014-12-11 11:13:39 ----AC---- C:\windows\system32\drivers\sdbus.sys 2014-12-11 11:13:39 ----AC---- C:\windows\system32\drivers\intelpep.sys 2014-12-11 11:13:39 ----AC---- C:\windows\system32\drivers\dumpsd.sys 2014-12-11 11:13:39 ----A---- C:\windows\system32\drivers\pdc.sys ======List of files/folders modified in the last 3 months====== 2015-02-27 19:20:10 ----D---- C:\windows\Temp 2015-02-27 19:20:08 ----RD---- C:\Program Files 2015-02-27 19:20:03 ----D---- C:\windows\Prefetch 2015-02-27 19:19:55 ----D---- C:\ProgramData\BullGuard 2015-02-27 19:00:00 ----D---- C:\windows\system32\sru 2015-02-27 17:01:33 ----D---- C:\windows\SoftwareDistribution 2015-02-27 16:54:20 ----D---- C:\windows\System32 2015-02-27 16:54:20 ----D---- C:\windows\Inf 2015-02-27 16:54:20 ----A---- C:\windows\system32\PerfStringBackup.INI 2015-02-27 16:52:46 ----D---- C:\Users\11307625\AppData\Roaming\TS3Client 2015-02-27 16:52:46 ----D---- C:\Program Files (x86)\Steam 2015-02-27 16:51:58 ----D---- C:\windows\system32\Tasks 2015-02-27 16:36:42 ----SHD---- C:\windows\Installer 2015-02-27 16:36:38 ----RD---- C:\Program Files (x86) 2015-02-27 16:36:09 ----DC---- C:\windows\system32\DRVSTORE 2015-02-27 16:36:09 ----D---- C:\windows\SysWOW64 2015-02-27 16:36:09 ----D---- C:\windows\system32\drivers 2015-02-27 16:36:09 ----D---- C:\Program Files\Common Files\Apple 2015-02-27 16:35:18 ----SHD---- C:\System Volume Information 2015-02-27 16:04:50 ----D---- C:\windows\debug 2015-02-27 16:04:50 ----D---- C:\Windows 2015-02-27 16:04:12 ----D---- C:\Users\11307625\AppData\Roaming\Skype 2015-02-27 12:51:25 ----D---- C:\windows\Microsoft.NET 2015-02-25 13:02:54 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2015-02-24 21:43:34 ----D---- C:\windows\system32\config 2015-02-24 21:38:02 ----D---- C:\windows\CbsTemp 2015-02-24 21:38:01 ----D---- C:\windows\WinSxS 2015-02-21 19:29:28 ----D---- C:\windows\AppReadiness 2015-02-19 20:38:56 ----D---- C:\ProgramData\Skype 2015-02-19 20:38:54 ----RD---- C:\Program Files (x86)\Skype 2015-02-17 19:12:31 ----RSD---- C:\windows\assembly 2015-02-17 19:12:13 ----D---- C:\ProgramData\Microsoft Help 2015-02-14 19:37:03 ----D---- C:\windows\rescache 2015-02-12 09:38:46 ----D---- C:\windows\system32\wdi 2015-02-12 09:37:28 ----D---- C:\windows\system32\catroot 2015-02-11 21:05:53 ----D---- C:\windows\SYSWOW64\nl-NL 2015-02-11 21:05:53 ----D---- C:\windows\system32\nl-NL 2015-02-11 21:05:53 ----D---- C:\windows\system32\drivers\nl-NL 2015-02-11 21:05:53 ----D---- C:\windows\PolicyDefinitions 2015-02-11 21:05:52 ----D---- C:\windows\apppatch 2015-02-11 21:05:21 ----D---- C:\windows\system32\MRT 2015-02-11 21:03:46 ----A---- C:\windows\system32\MRT.exe 2015-02-11 21:03:39 ----SD---- C:\windows\system32\CompatTel 2015-02-11 18:28:56 ----HD---- C:\Program Files\WindowsApps 2015-02-11 18:23:37 ----A---- C:\windows\win.ini 2015-02-11 18:23:12 ----D---- C:\ProgramData\Package Cache 2015-02-07 17:56:53 ----D---- C:\windows\system32\DriverStore 2015-02-06 20:09:14 ----SD---- C:\Users\11307625\AppData\Roaming\Microsoft 2015-02-03 20:31:19 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe 2015-02-01 19:54:58 ----A---- C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt 2015-01-31 18:25:17 ----D---- C:\windows\twain_32 2015-01-31 18:25:17 ----D---- C:\ProgramData\HP 2015-01-31 18:25:17 ----D---- C:\Program Files (x86)\HP 2015-01-30 19:07:54 ----D---- C:\windows\Tasks 2015-01-30 19:07:04 ----HD---- C:\ProgramData 2015-01-20 10:34:41 ----D---- C:\Users\11307625\AppData\Roaming\ICAClient 2015-01-17 21:51:09 ----HD---- C:\Program Files (x86)\InstallShield Installation Information 2015-01-16 11:12:20 ----D---- C:\windows\system32\spool 2015-01-15 16:49:07 ----D---- C:\windows\system32\catroot2 2015-01-14 08:24:42 ----D---- C:\windows\system32\CodeIntegrity 2014-12-31 12:14:31 ----A---- C:\windows\system32\MpSigStub.exe 2014-12-22 01:53:39 ----D---- C:\windows\Registration 2014-12-22 00:25:08 ----D---- C:\Program Files (x86)\Common Files 2014-12-22 00:22:46 ----RD---- C:\windows\ImmersiveControlPanel 2014-12-22 00:22:46 ----D---- C:\windows\system32\wbem 2014-12-22 00:22:46 ----D---- C:\windows\system32\en-US 2014-12-22 00:21:56 ----D---- C:\Program Files\Common Files\microsoft shared 2014-12-20 21:18:56 ----D---- C:\windows\system32\NDF 2014-12-17 11:26:36 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-12-11 20:41:43 ----D---- C:\windows\Logs 2014-12-11 13:50:46 ----D---- C:\Program Files\Internet Explorer 2014-12-11 13:50:46 ----D---- C:\Program Files (x86)\Internet Explorer 2014-12-11 13:49:43 ----D---- C:\windows\system32\appmgmt 2014-12-11 13:49:06 ----D---- C:\Program Files\Common Files 2014-12-11 12:56:21 ----D---- C:\windows\system32\sr-Latn-RS 2014-12-11 12:56:21 ----D---- C:\windows\system32\sr-Latn-CS 2014-12-11 12:52:13 ----SD---- C:\ProgramData\Microsoft 2014-12-11 12:13:30 ----D---- C:\AdwCleaner 2014-12-08 22:24:31 ----D---- C:\Users\11307625\AppData\Roaming\vlc ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 amdkmpfd;@oem37.inf,%AMDKMPFD_svcdesc%;AMD PCI Root Bus Lower Filter; C:\windows\System32\drivers\amdkmpfd.sys [2013-05-21 36096] R0 hpdskflt;@oem35.inf,%service_desc%;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2012-11-12 31040] R0 iaStorA;iaStorA; C:\windows\System32\drivers\iaStorA.sys [2013-01-02 641672] R1 AFW;@oem54.inf,%AfwDescriptionFree%;Agnitum Firewall Driver; C:\windows\system32\DRIVERS\afw.sys [2014-09-05 41680] R1 BdAgent;BullGuard Security Agent; C:\windows\system32\DRIVERS\BdAgent.sys [2014-06-13 117184] R1 BdSpy;BdSpy; C:\windows\system32\drivers\BdSpy.sys [2014-02-26 67680] R1 ctxusbm;Citrix USB Monitor Driver; C:\windows\system32\DRIVERS\ctxusbm.sys [2012-12-05 98888] R1 NovaShieldFilterDriver;NovaShieldFilterDriver; C:\windows\system32\DRIVERS\NSKernel.sys [2015-02-25 267528] R3 Accelerometer;@oem35.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor; C:\windows\system32\DRIVERS\Accelerometer.sys [2012-11-12 43328] R3 afwcore;afwcore; C:\windows\system32\DRIVERS\afwcore.sys [2014-09-05 469712] R3 amdkmdag;amdkmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2013-09-11 12760576] R3 amdkmdap;amdkmdap; C:\windows\system32\DRIVERS\atikmpag.sys [2013-09-11 619008] R3 AtiHDAudioService;@oem19.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\windows\system32\drivers\AtihdWB6.sys [2013-09-24 222720] R3 bcbtums;@oem87.inf,%BCBTUMS.SvcDesc%;Bluetooth RAM Firmware Download USB Filter; C:\windows\system32\drivers\bcbtums.sys [2013-11-13 170712] R3 BdNet;BdNet; C:\windows\system32\DRIVERS\BdNet.sys [2014-03-19 34384] R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;USB-stuurprogramma voor Bluetooth-radio; C:\windows\System32\Drivers\BTHUSB.sys [2014-01-31 81920] R3 clwvd;@oem48.inf,%clwvd.DeviceDesc%;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2012-08-03 40944] R3 e1cexpress;@oem24.inf,%e1cExpress.Service.DispName%;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\windows\system32\DRIVERS\e1c64x64.sys [2013-06-20 469264] R3 HpqKbFiltr;@oem49.inf,%HpqKbFiltr.SvcDesc%;HpqKbFilter Driver; C:\windows\System32\drivers\HpqKbFiltr.sys [2014-02-07 28376] R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [2015-02-27 129752] R3 MEIx64;@oem38.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\windows\System32\drivers\HECIx64.sys [2013-11-20 62784] R3 NETwNe64;@oem53.inf,___ %NIC_Service_DispName_WIN8_64%;___ Intel(R) Wireless WiFi Link 5000 Series adapter stuurprogramma onder Windows 8 64 Bit; C:\windows\system32\DRIVERS\NETwew00.sys [2014-03-07 3349984] R3 SensorsServiceDriver;@sensorsservicedriver.inf,%WudfSensorsServiceDriverDisplayName%;UMDF-reflectorservice voor SensorsServiceDriver; C:\windows\system32\DRIVERS\WUDFRd.sys [2014-05-31 227840] R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10305; C:\windows\system32\DRIVERS\stwrt64.sys [2013-03-07 542208] R3 SynTP;@oem86.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver; C:\windows\System32\drivers\SynTP.sys [2014-07-27 555760] R3 Trufos;Trufos; C:\windows\system32\DRIVERS\Trufos.sys [2014-02-26 350160] R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB-videoapparaat (WDM); C:\windows\System32\Drivers\usbvideo.sys [2013-08-22 212224] S0 JRAID;JRAID; C:\windows\System32\drivers\jraid.sys [2012-09-17 123704] S3 A38CCID;@oem56.inf,%ACS.ACSCCID.DevDesc%;CCID USB Smart Card Reader; C:\windows\system32\DRIVERS\a38ccid.sys [2014-05-14 62592] S3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator Service; C:\windows\System32\drivers\BthEnum.sys [2013-08-22 53248] S3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy-stuurprogramma; C:\windows\system32\DRIVERS\BthLEEnum.sys [2013-12-04 226304] S3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\windows\System32\drivers\bthpan.sys [2014-07-24 118272] S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Stuurprogramma voor Bluetooth-poort; C:\windows\System32\Drivers\BTHport.sys [2014-07-24 1200640] S3 btwampfl;@oem87.inf,%btwampfl.ServiceName%;btwampfl; C:\windows\system32\DRIVERS\btwampfl.sys [2013-09-04 166104] S3 btwavdt;@oem7.inf,%btwavdt.SVCDESC%;Bluetooth AVDT Service; C:\windows\System32\drivers\btwavdt.sys [2012-11-12 212792] S3 btwrchid;btwrchid; C:\windows\System32\drivers\btwrchid.sys [2012-11-12 22328] S3 dg_ssudbus;@oem67.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudbus.sys [2014-01-22 108800] S3 dot4;@oem62.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\windows\system32\DRIVERS\Dot4.sys [2012-10-19 151968] S3 Dot4Print;@oem63.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\windows\System32\drivers\Dot4Prt.sys [2012-10-19 27040] S3 dot4usb;@oem62.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\windows\system32\DRIVERS\dot4usb.sys [2012-10-19 49056] S3 JMCR;JMCR; C:\windows\System32\drivers\jmcr.sys [2013-11-20 176880] S3 johci;@oem3.inf,%service_desc%;JMicron 1394 Filter Driver; C:\windows\System32\drivers\johci.sys [2012-11-12 26208] S3 ohci1394;@oem3.inf,%PCI\CC_0C0010.DeviceDesc%;OHCI Compliant IEEE 1394 Host Controller; C:\windows\System32\drivers\ohci1394.sys [] S3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\System32\drivers\rfcomm.sys [2014-01-27 167424] S3 RTL8192su;@net8192su64.inf,%RTL8192su.DeviceDesc.DispName%;Realtek RTL8192SU USB 2.0-netwerkadapter voor draadloos 802.11n-netwerk; C:\windows\system32\DRIVERS\RTL8192su.sys [2013-06-18 694856] S3 SmbDrv;SmbDrv; C:\windows\System32\drivers\Smb_driver_AMDASF.sys [2014-05-28 30448] S3 SmbDrvI;SmbDrvI; C:\windows\System32\drivers\Smb_driver_Intel.sys [2014-05-28 34544] S3 ssudmdm;@oem72.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080] S3 usbscan;@sti.inf,%usbscan.SvcDesc%;Stuurprogramma voor USB-scanner; C:\windows\system32\DRIVERS\usbscan.sys [2013-08-22 44544] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088] R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2013-09-11 239616] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-10-07 60744] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184] R2 BsBackup;BullGuard backup service; C:\windows\System32\SvcHost.exe [2013-08-22 37768] R2 BsBhvScan;BullGuard Behavioural Detection; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardBhvScanner.exe [2015-01-28 601424] R2 BsCache;BullGuard cache service; C:\windows\System32\SvcHost.exe [2013-08-22 37768] R2 BsFileScan;BullGuard on-access service; C:\windows\System32\SvcHost.exe [2013-08-22 37768] R2 BsFire;BullGuard firewall service; C:\windows\System32\SvcHost.exe [2013-08-22 37768] R2 BsMailProxy;BullGuard e-mail monitoring service; C:\windows\System32\SvcHost.exe [2013-08-22 37768] R2 BsMain;BullGuard main service; C:\windows\System32\SvcHost.exe [2013-08-22 37768] R2 BsScanner;BullGuard scanning service; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardScanner.exe [2015-01-28 280912] R2 BsUpdate;BullGuard update service; C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe [2015-02-23 385360] R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2014-01-13 92160] R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2014-02-10 683296] R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\windows\system32\svchost.exe [2013-08-22 37768] R2 HPSLPSVC;HP Network Devices Support; C:\windows\system32\svchost.exe [2013-08-22 37768] R2 hpsrv;@oem35.inf,%hpservice_desc%;HP Service; C:\windows\system32\Hpservice.exe [2012-11-12 33600] R2 Seagate Dashboard Services;Seagate Dashboard Services; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\Seagate.Dashboard.DASWindowsService.exe [2014-04-30 16000] R2 Seagate MobileBackup Service;Seagate MobileBackup Service; C:\Program Files (x86)\Seagate\Seagate Dashboard 2.0\MobileService.exe [2014-04-30 157264] R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2013-03-07 323072] R3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696] R3 hpqcxs08;hpqcxs08; C:\windows\system32\svchost.exe [2013-08-22 37768] R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2013-05-13 1129760] S2 BcmBtRSupport;@oem87.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service; C:\windows\system32\BtwRSupportService.exe [2013-11-13 2251992] S2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2013-08-22 37768] S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2013-08-22 37768] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-01-02 315488] S3 ArcService;Arc Service; G:\Arc\ArcService.exe [] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-02-25 114800] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2014-01-23 150600] S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-02-19 835776] -----------------EOF-----------------