Logfile of random's system information tool 1.10 (written by random/random)
Run by Rene at 2015-03-09 11:00:44
Microsoft Windows 7 Home Premium  Service Pack 1
System drive C: has 331 GB (69%) free of 477 GB
Total RAM: 4077 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:00:48, on 9/03/2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17631)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\AVG\AVG2014\avgui.exe
C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
C:\Windows\SysWOW64\ctfmon.exe
C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe
C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
C:\Program Files (x86)\AVG\AVG2014\avgcsrvx.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Rene.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={12E780C5-0B67-4DB5-9114-797C4D8EAD6D}&mid=5fe4534579e347d698c06de783502227-fd48e0b35dad1df553af9c1d6c25cbc8bcbf1fa0&lang=nl&ds=AVG&coid=avgtbavg&cmpid=0215av&pr=fr&d=2015-02-26 10:19:46&v=4.1.0.411&pid=wtu&sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AVG Web TuneUp - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Web TuneUp\4.1.0.411\AVG Web TuneUp.dll
O2 - BHO: Ads Removal - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [QHSafeTray] "C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe" /start
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Advanced SystemCare 7] "C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" /Auto (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Advanced SystemCare 7] "C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" /Auto (User 'Default user')
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {B60CEFE7-2DD0-4B78-951A-509D951DB1F0} (ExtraFilm Uploader Control) - http://www.smartphoto.be/ExtraFilmUploader6.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} - http://www.photodex.com/pxplay.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NLS Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\SysWOW64\NLSSRV32.EXE
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: 360 Total Security (QHActiveDefense) - Unknown owner - C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Samsung AllShare PC Service (SamsungAllShare) - Unknown owner - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\WiselinkPro.exe
O23 - Service: SimpleSlideShowServer - Samsung Electronics - C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Print Spooler (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - AVG - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater18.4.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: WtuSystemSupport - Unknown owner - C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe

--
End of file - 9483 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
c:\PROGRA~2\AVG\AVG2014\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=4f23b55b-878d-4a79-b0e9-1e4ccacc1136 /coreSdkOptions=4382 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\f2f1fb44-fa4e-497f-8fa0-5f3307d0ab6f-1ac-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\temp\" /logPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2014\log\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe"
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
taskeng.exe {A10A2005-494A-4E09-A37A-A2D4F5EC150D}
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\rundll32.exe "C:\Windows\SysWOW64\mfAACEncs.dll",gfalexp
"C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe"
C:\Windows\SysWOW64\NLSSRV32.EXE
"C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\WiselinkPro.exe"
"C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\http_ss_win_pro.exe"
\??\C:\Windows\system32\conhost.exe "192215812-12114223641653110534-865799525194357517-2074593491-1743983948310462167
C:\Windows\system32\svchost.exe -k imgsvc
"taskhost.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2014\avgemca.exe"
"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
"C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe" 
"C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe" /start
"C:\Program Files (x86)\AVG Web TuneUp\vprot.exe" 
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM" PriorityLow
ctfmon.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-aa9ae288-2d2a-4518-8b0b-0c24faf3662b -SystemEventPortName:HostProcess-d945f39c-1342-4d70-a9be-f6ea89c6fb0b -IoCancelEventPortName:HostProcess-a8cfceaa-663c-4177-b6cb-c60b064c7625 -NonStateChangingEventPortName:HostProcess-97a508a3-139f-4e23-bb38-54ddd9e44ee6 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:780a98ef-f6dc-4d7d-b73e-c0e851c99976 -DeviceGroupId:WpdFsGroup
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe" /watch
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe" --type=renderer --no-sandbox --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" --lang=en-US --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --lang=en-US --uncaught-exception-stack-size=1024 --disable-pepper-3d --disable-accelerated-compositing --disable-accelerated-video-decode --disable-webrtc-hw-encoding --enable-software-compositing --disable-gpu-compositing --disable-pepper-3d --channel="3544.1.272484551\1248817210" /prefetch:673131151
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE" 
C:\Program Files (x86)\AVG\AVG2014\avgcsrvx.exe /pipeName=93c4f625-afe2-4748-95b9-430e98c81f3a /coreSdkOptions=8192 /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" /tempPath="C:\Users\Rene\AppData\Local\Avg2014\temp\" /logPath="C:\Users\Rene\AppData\Local\Avg2014\log\"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "http://mandrillapp.com/track/click/30483147/www.malwareremoval.com?p=eyJzIjoibDdDd0hGYUVMcUZZU3AwcUFfbXoyNF9MVFVvIiwidiI6MSwicCI6IntcInVcIjozMDQ4MzE0NyxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvd3d3Lm1hbHdhcmVyZW1vdmFsLmNvbVxcXC9pbWFnZXNcXFwvcmFuZG9tXFxcL1JTSVR4NjQuZXhlXCIsXCJpZFwiOlwiMDI3NGQwZWE0MGE5NDUzYWIyOWNmZDQzNTcwZWVhYzlcIixcInVybF9pZHNcIjpbXCJlMTI3YWMyMjFhNjZhZDFkOGI1ODBkZDdiOTg2ZWY3ZTRlNDVkNTMzXCJdfSJ9"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3196.0.682540769\1880296751" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40 --gpu-vendor-id=0x1002 --gpu-device-id=0x68f9 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=14.501.1003.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="CTRequiredForEVTrial/Default/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/QUIC/EnabledWithReno/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_77/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=3196 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3196.1.963263446\757706566" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/Default/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group8 pct:10h stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/StandardR4/PasswordGeneration/Disabled/QUIC/EnabledWithReno/RefreshTokenDeviceId/Disabled/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_77/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=3196 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="3196.2.2019247754\1733601566" /prefetch:673131151

"C:\Users\Public\Documents\Downloads\RSITx64.exe" 
taskhost.exe $(Arg0)
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe  
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /c 
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe  /ua /installsource scheduler 
C:\Windows\tasks\HFPHWSY.job -  

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Web TuneUp - C:\Program Files (x86)\AVG Web TuneUp\4.1.0.411\AVG Web TuneUp.dll [2015-02-26 2424856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F}]
Ads Removal - C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll [2014-06-11 464720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 4]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICustomerCare]
C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [2010-05-04 311296]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG_TRAY]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\beid]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\Cyberlink\Power2Go\CLMLSvc.exe [2010-08-20 107816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverTurbo]
C:\Program Files (x86)\DriverTurbo\DriverTurbo.exe [2013-08-21 9029280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EEventManager]
C:\Program Files (x86)\EPSON\Creativity Suite\Event Manager\EEventManager.exe [2006-10-12 102400]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InstantBurn]
C:\PROGRA~2\CYBERL~1\INSTAN~1\Win2K\IBurn.exe [2010-12-07 701736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Internet Explorer]
C:\Program Files\Internet Explorer\iexplore.exe [2015-01-14 813744]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWS]
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [2012-09-13 204136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyDriveConnect.exe]
C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [2013-11-29 473496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Windows\system32\NeroCheck.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl10]
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-12-29 7204568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14 20584608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [2013-08-27 248208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk]
C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2002-04-19 110592]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2002-04-19 110592]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2014-12-16 5188112]
"AllShareAgent"=C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [2011-02-18 250768]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-11-20 767176]
"QHSafeTray"=C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe [2015-02-12 1208944]
"vProt"=C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2015-02-26 3033112]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-09 11:00:45 ----D---- C:\Program Files\trend micro
2015-03-09 11:00:44 ----D---- C:\rsit
2015-03-07 17:44:35 ----D---- C:\Program Files (x86)\HD Tune
2015-03-06 11:53:40 ----A---- C:\Windows\system32\FNTCACHE.DAT
2015-02-28 20:55:19 ----D---- C:\Users\Rene\AppData\Roaming\Solvusoft
2015-02-28 20:55:16 ----A---- C:\Windows\system32\roboot64.exe
2015-02-26 10:20:10 ----D---- C:\ProgramData\AVG Security Toolbar
2015-02-26 10:19:38 ----D---- C:\ProgramData\AVG Secure Search
2015-02-26 10:19:27 ----D---- C:\ProgramData\AVG Web TuneUp
2015-02-26 10:19:17 ----D---- C:\Program Files (x86)\AVG Web TuneUp
2015-02-25 18:53:06 ----D---- C:\ProgramData\TweakBit
2015-02-25 18:53:01 ----D---- C:\Program Files (x86)\TweakBit
2015-02-24 10:59:25 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-02-24 10:59:25 ----A---- C:\Windows\system32\mstscax.dll
2015-02-23 16:06:01 ----D---- C:\00ec4a0a63d6b736ee
2015-02-23 16:05:34 ----A---- C:\Windows\system32\Narrator.exe
2015-02-23 16:05:07 ----SHD---- C:\$360Section
2015-02-23 15:59:55 ----D---- C:\ProgramData\360SD
2015-02-23 14:12:38 ----A---- C:\Windows\SYSWOW64\gpapi.dll
2015-02-23 14:12:37 ----A---- C:\Windows\system32\gpsvc.dll
2015-02-23 14:12:37 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-02-23 14:12:37 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-02-23 14:12:37 ----A---- C:\Windows\system32\drivers\dfsc.sys
2015-02-23 14:12:35 ----A---- C:\Windows\system32\drivers\rdbss.sys
2015-02-23 14:12:35 ----A---- C:\Windows\system32\drivers\mup.sys
2015-02-23 14:12:35 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-02-23 14:09:29 ----A---- C:\Windows\system32\TSWbPrxy.exe
2015-02-23 13:27:42 ----D---- C:\ProgramData\360Quarant
2015-02-23 13:27:18 ----D---- C:\Users\Rene\AppData\Roaming\360safe
2015-02-23 13:26:59 ----D---- C:\ProgramData\360TotalSecurity
2015-02-23 13:26:56 ----D---- C:\ProgramData\360safe
2015-02-23 13:26:51 ----A---- C:\Windows\system32\drivers\360fsflt.sys
2015-02-23 13:26:47 ----RSHD---- C:\360SANDBOX
2015-02-23 13:26:46 ----A---- C:\Windows\system32\drivers\360Camera64.sys
2015-02-23 13:26:46 ----A---- C:\Windows\system32\drivers\360Box64.sys
2015-02-23 13:26:46 ----A---- C:\Windows\system32\drivers\360AntiHacker64.sys
2015-02-23 13:26:45 ----A---- C:\Windows\system32\drivers\BAPIDRV64.SYS
2015-02-23 13:26:42 ----A---- C:\Windows\system32\drivers\360AvFlt.sys
2015-02-23 13:26:17 ----D---- C:\Program Files (x86)\360
2015-02-23 10:28:56 ----D---- C:\Windows\system32\drivers\en-US
2015-02-23 10:23:56 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2015-02-23 10:23:48 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2015-02-23 10:23:48 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2015-02-23 10:23:48 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2015-02-23 10:23:47 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll
2015-02-23 10:23:47 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-02-23 10:23:47 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2015-02-23 10:23:47 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2015-02-23 10:23:47 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll
2015-02-23 10:23:47 ----A---- C:\Windows\system32\wksprtPS.dll
2015-02-23 10:23:47 ----A---- C:\Windows\system32\wksprt.exe
2015-02-23 10:23:47 ----A---- C:\Windows\system32\tsgqec.dll
2015-02-23 10:23:47 ----A---- C:\Windows\system32\rdvidcrl.dll
2015-02-23 10:23:47 ----A---- C:\Windows\system32\mstsc.exe
2015-02-23 10:23:47 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2015-02-22 17:10:55 ----D---- C:\ProgramData\ATI
2015-02-22 17:10:08 ----D---- C:\Users\Rene\AppData\Roaming\library_dir
2015-02-22 17:09:47 ----D---- C:\Program Files (x86)\Raptr
2015-02-22 17:09:42 ----D---- C:\ProgramData\AMD
2015-02-22 17:09:41 ----D---- C:\Program Files (x86)\AMD AVT
2015-02-22 17:08:04 ----D---- C:\Program Files (x86)\AMD
2015-02-22 17:00:27 ----D---- C:\ProgramData\Package Cache
2015-02-22 16:59:51 ----D---- C:\Program Files\AMD
2015-02-20 15:48:07 ----A---- C:\Windows\system32\drivers\CLBUDF.sys
2015-02-20 15:48:04 ----A---- C:\Windows\system32\drivers\CLBStor.sys
2015-02-20 13:42:08 ----D---- C:\ProgramData\SmartSound Software Inc
2015-02-20 13:42:08 ----D---- C:\ProgramData\eSellerate
2015-02-20 13:42:08 ----D---- C:\Program Files (x86)\SmartSound Software
2015-02-20 13:27:05 ----D---- C:\Program Files (x86)\Cyberlink
2015-02-20 13:23:29 ----D---- C:\Program Files\CyberLink
2015-02-20 12:51:16 ----D---- C:\Program Files (x86)\GenDaLim7
2015-02-19 18:53:02 ----D---- C:\Program Files (x86)\GUM6712.tmp
2015-02-19 18:53:02 ----A---- C:\Program Files (x86)\GUT6713.tmp
2015-02-19 12:12:00 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-02-19 12:12:00 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-02-19 12:11:59 ----A---- C:\Windows\system32\jscript9diag.dll
2015-02-19 12:11:59 ----A---- C:\Windows\system32\jscript9.dll
2015-02-19 12:11:53 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2015-02-19 12:11:53 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2015-02-19 12:11:53 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2015-02-19 12:11:53 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2015-02-19 12:11:53 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2015-02-19 12:11:53 ----A---- C:\Windows\system32\KBDYAK.DLL
2015-02-19 12:11:53 ----A---- C:\Windows\system32\KBDTAT.DLL
2015-02-19 12:11:53 ----A---- C:\Windows\system32\KBDRU1.DLL
2015-02-19 12:11:53 ----A---- C:\Windows\system32\KBDRU.DLL
2015-02-19 12:11:53 ----A---- C:\Windows\system32\KBDBASH.DLL
2015-02-18 19:02:43 ----A---- C:\Program Files (x86)\GUT9CDC.tmp
2015-02-18 14:40:29 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-02-18 13:44:17 ----D---- C:\AdwCleaner
2015-02-18 13:22:32 ----D---- C:\Users\Rene\AppData\Roaming\Systweak
2015-02-18 13:22:32 ----D---- C:\Users\Rene\AppData\Roaming\Media Finder
2015-02-18 13:22:32 ----D---- C:\Users\Rene\AppData\Roaming\dvdvideosoftiehelpers
2015-02-18 13:22:20 ----D---- C:\Program Files (x86)\Secure Speed Dial
2015-02-18 13:22:08 ----D---- C:\Program Files (x86)\Movies Toolbar
2015-02-18 13:22:07 ----D---- C:\Program Files (x86)\Minibar
2015-02-18 13:22:06 ----D---- C:\ProgramData\wincert
2015-02-18 13:22:06 ----D---- C:\Program Files (x86)\Advanced System Protector
2015-02-18 13:22:05 ----D---- C:\ProgramData\Systweak
2015-02-18 12:00:20 ----A---- C:\autoexec.bat
2015-02-18 12:00:05 ----D---- C:\Users\Rene\AppData\Roaming\Enigma Software Group
2015-02-18 12:00:02 ----D---- C:\Start Menu
2015-02-18 11:59:58 ----D---- C:\sh4ldr
2015-02-18 11:59:36 ----D---- C:\Program Files\Enigma Software Group
2015-02-17 15:36:48 ----A---- C:\Windows\system32\powertracker.dll
2015-02-17 15:36:48 ----A---- C:\Windows\system32\perftrack.dll
2015-02-17 15:36:47 ----A---- C:\Windows\SYSWOW64\wdi.dll
2015-02-17 15:36:47 ----A---- C:\Windows\system32\wdi.dll
2015-02-17 10:20:05 ----SD---- C:\Windows\system32\CompatTel
2015-02-17 10:20:05 ----D---- C:\Windows\system32\appraiser
2015-02-17 08:53:26 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-02-17 08:53:26 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-02-17 08:53:26 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-02-17 08:53:26 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-02-17 08:53:26 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-02-17 08:53:26 ----A---- C:\Windows\system32\rrinstaller.exe
2015-02-17 08:53:26 ----A---- C:\Windows\system32\mfps.dll
2015-02-17 08:53:26 ----A---- C:\Windows\system32\mfpmp.exe
2015-02-17 08:53:26 ----A---- C:\Windows\system32\mferror.dll
2015-02-17 08:53:26 ----A---- C:\Windows\system32\mf.dll
2015-02-17 08:39:59 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2015-02-17 08:39:59 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2015-02-17 08:28:58 ----A---- C:\Windows\SYSWOW64\infocardapi.dll
2015-02-17 08:28:58 ----A---- C:\Windows\SYSWOW64\icardres.dll
2015-02-17 08:28:58 ----A---- C:\Windows\SYSWOW64\icardagt.exe
2015-02-17 08:28:58 ----A---- C:\Windows\system32\infocardapi.dll
2015-02-17 08:28:58 ----A---- C:\Windows\system32\icardres.dll
2015-02-17 08:28:58 ----A---- C:\Windows\system32\icardagt.exe
2015-02-17 08:28:48 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2015-02-17 08:28:48 ----A---- C:\Windows\system32\TsWpfWrp.exe
2015-02-16 23:19:08 ----D---- C:\ProgramData\VS Revo Group
2015-02-16 22:50:20 ----D---- C:\Users\Rene\AppData\Roaming\ProductData
2015-02-16 22:49:19 ----D---- C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0}
2015-02-16 22:46:13 ----D---- C:\Program Files (x86)\QuickTime
2015-02-16 22:22:42 ----A---- C:\Windows\system32\wwansvc.dll
2015-02-16 22:22:40 ----A---- C:\Windows\system32\invagent.dll
2015-02-16 22:22:40 ----A---- C:\Windows\system32\generaltel.dll
2015-02-16 22:22:40 ----A---- C:\Windows\system32\devinv.dll
2015-02-16 22:22:40 ----A---- C:\Windows\system32\appraiser.dll
2015-02-16 22:22:40 ----A---- C:\Windows\system32\aitstatic.exe
2015-02-16 22:22:40 ----A---- C:\Windows\system32\aepic.dll
2015-02-16 22:22:40 ----A---- C:\Windows\system32\aeinv.dll
2015-02-16 22:22:39 ----A---- C:\Windows\system32\aepdu.dll
2015-02-16 22:22:23 ----A---- C:\Windows\SYSWOW64\usp10.dll
2015-02-16 22:22:23 ----A---- C:\Windows\system32\usp10.dll
2015-02-16 22:22:20 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2015-02-16 22:22:20 ----A---- C:\Windows\system32\TSWorkspace.dll
2015-02-16 22:21:46 ----A---- C:\Windows\system32\profsvc.dll
2015-02-16 22:21:44 ----A---- C:\Windows\SYSWOW64\mscories.dll
2015-02-16 22:21:44 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2015-02-16 22:21:44 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2015-02-16 22:21:44 ----A---- C:\Windows\system32\mscories.dll
2015-02-16 22:21:44 ----A---- C:\Windows\system32\mscorier.dll
2015-02-16 22:21:44 ----A---- C:\Windows\system32\dfshim.dll
2015-02-16 22:21:41 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-02-16 22:21:41 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-02-16 22:21:41 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-02-16 22:21:41 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-02-16 22:21:41 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-02-16 22:21:41 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-02-16 22:21:41 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-02-16 22:21:41 ----A---- C:\Windows\system32\wdigest.dll
2015-02-16 22:21:41 ----A---- C:\Windows\system32\TSpkg.dll
2015-02-16 22:21:41 ----A---- C:\Windows\system32\schannel.dll
2015-02-16 22:21:41 ----A---- C:\Windows\system32\ncrypt.dll
2015-02-16 22:21:41 ----A---- C:\Windows\system32\msv1_0.dll
2015-02-16 22:21:41 ----A---- C:\Windows\system32\kerberos.dll
2015-02-16 22:21:41 ----A---- C:\Windows\system32\credssp.dll
2015-02-16 22:21:27 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-02-16 22:21:27 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-02-16 22:21:27 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-02-16 22:21:27 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-02-16 22:21:27 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-02-16 22:21:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-02-16 22:21:26 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-02-16 22:21:26 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-02-16 22:21:26 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-02-16 22:21:26 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-02-16 22:21:26 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-02-16 22:21:26 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-02-16 22:21:26 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-02-16 22:21:26 ----A---- C:\Windows\system32\iernonce.dll
2015-02-16 22:21:26 ----A---- C:\Windows\system32\ie4uinit.exe
2015-02-16 22:21:25 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-02-16 22:21:25 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-02-16 22:21:25 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-02-16 22:21:25 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-02-16 22:21:25 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-02-16 22:21:25 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-02-16 22:21:25 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-02-16 22:21:25 ----A---- C:\Windows\system32\urlmon.dll
2015-02-16 22:21:25 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-02-16 22:21:25 ----A---- C:\Windows\system32\msfeeds.dll
2015-02-16 22:21:25 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-02-16 22:21:25 ----A---- C:\Windows\system32\iedkcs32.dll
2015-02-16 22:21:25 ----A---- C:\Windows\system32\dxtrans.dll
2015-02-16 22:21:24 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-02-16 22:21:24 ----A---- C:\Windows\system32\iesetup.dll
2015-02-16 22:21:24 ----A---- C:\Windows\system32\ieapfltr.dll
2015-02-16 22:21:23 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-02-16 22:21:23 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-02-16 22:21:23 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-02-16 22:21:23 ----A---- C:\Windows\system32\jsproxy.dll
2015-02-16 22:21:23 ----A---- C:\Windows\system32\iertutil.dll
2015-02-16 22:21:22 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-02-16 22:21:22 ----A---- C:\Windows\system32\ieUnatt.exe
2015-02-16 22:21:22 ----A---- C:\Windows\system32\ieui.dll
2015-02-16 22:21:22 ----A---- C:\Windows\system32\ieframe.dll
2015-02-16 22:21:22 ----A---- C:\Windows\system32\dxtmsft.dll
2015-02-16 22:21:21 ----A---- C:\Windows\system32\wininet.dll
2015-02-16 22:21:21 ----A---- C:\Windows\system32\vbscript.dll
2015-02-16 22:21:21 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-02-16 22:21:21 ----A---- C:\Windows\system32\mshtmled.dll
2015-02-16 22:21:20 ----A---- C:\Windows\system32\msrating.dll
2015-02-16 22:21:20 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-02-16 22:21:20 ----A---- C:\Windows\system32\mshtml.dll
2015-02-16 22:21:05 ----A---- C:\Windows\system32\wer.dll
2015-02-16 22:21:04 ----A---- C:\Windows\SYSWOW64\wer.dll
2015-02-16 22:21:03 ----A---- C:\Windows\system32\drivers\tcpip.sys
2015-02-16 22:21:03 ----A---- C:\Windows\system32\drivers\netio.sys
2015-02-16 22:21:03 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2015-02-16 22:20:51 ----A---- C:\Windows\system32\termsrv.dll
2015-02-16 22:20:43 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2015-02-16 22:20:43 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2015-02-16 22:20:43 ----A---- C:\Windows\system32\nlasvc.dll
2015-02-16 22:20:42 ----A---- C:\Windows\system32\msxml6.dll
2015-02-16 22:20:41 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-02-16 22:20:41 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-02-16 22:20:41 ----A---- C:\Windows\system32\msxml6r.dll
2015-02-16 22:20:40 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2015-02-16 22:20:40 ----A---- C:\Windows\system32\d3d10warp.dll
2015-02-16 22:20:39 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-02-16 22:20:38 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-02-16 22:20:36 ----A---- C:\Windows\SYSWOW64\osk.exe
2015-02-16 22:20:36 ----A---- C:\Windows\system32\osk.exe
2015-02-16 22:20:22 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2015-02-16 22:20:17 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-02-16 22:20:17 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-02-16 22:20:17 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-02-16 22:20:17 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-02-16 22:20:17 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-02-16 22:20:17 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-02-16 22:20:17 ----A---- C:\Windows\system32\sspisrv.dll
2015-02-16 22:20:17 ----A---- C:\Windows\system32\sspicli.dll
2015-02-16 22:20:17 ----A---- C:\Windows\system32\secur32.dll
2015-02-16 22:20:17 ----A---- C:\Windows\system32\msobjs.dll
2015-02-16 22:20:17 ----A---- C:\Windows\system32\msaudite.dll
2015-02-16 22:20:17 ----A---- C:\Windows\system32\lsass.exe
2015-02-16 22:20:17 ----A---- C:\Windows\system32\lsasrv.dll
2015-02-16 22:20:17 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-02-16 22:20:17 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-02-16 22:20:17 ----A---- C:\Windows\system32\drivers\cng.sys
2015-02-16 22:20:17 ----A---- C:\Windows\system32\auditpol.exe
2015-02-16 22:20:17 ----A---- C:\Windows\system32\adtschema.dll
2015-02-16 22:20:08 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-02-16 22:20:08 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-02-16 22:20:08 ----A---- C:\Windows\system32\msxml3r.dll
2015-02-16 22:20:08 ----A---- C:\Windows\system32\msxml3.dll
2015-02-16 22:20:06 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2015-02-16 22:20:06 ----A---- C:\Windows\SYSWOW64\secproc.dll
2015-02-16 22:20:06 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2015-02-16 22:20:06 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2015-02-16 22:20:06 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2015-02-16 22:20:06 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2015-02-16 22:20:06 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2015-02-16 22:20:06 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2015-02-16 22:20:06 ----A---- C:\Windows\system32\secproc_ssp.dll
2015-02-16 22:20:06 ----A---- C:\Windows\system32\secproc_isv.dll
2015-02-16 22:20:06 ----A---- C:\Windows\system32\secproc.dll
2015-02-16 22:20:06 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2015-02-16 22:20:06 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2015-02-16 22:20:06 ----A---- C:\Windows\system32\RMActivate_isv.exe
2015-02-16 22:20:06 ----A---- C:\Windows\system32\RMActivate.exe
2015-02-16 22:20:06 ----A---- C:\Windows\system32\msdrm.dll
2015-02-16 22:20:05 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2015-02-16 22:20:05 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2015-02-16 22:20:01 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2015-02-16 22:20:01 ----A---- C:\Windows\system32\drivers\usbport.sys
2015-02-16 22:20:01 ----A---- C:\Windows\system32\drivers\usbohci.sys
2015-02-16 22:20:01 ----A---- C:\Windows\system32\drivers\usbhub.sys
2015-02-16 22:20:01 ----A---- C:\Windows\system32\drivers\usbehci.sys
2015-02-16 22:20:01 ----A---- C:\Windows\system32\drivers\usbd.sys
2015-02-16 22:20:01 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2015-02-16 22:20:00 ----A---- C:\Windows\SYSWOW64\qedit.dll
2015-02-16 22:20:00 ----A---- C:\Windows\system32\qedit.dll
2015-02-16 22:19:58 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-02-16 22:19:58 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-02-16 22:19:58 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-02-16 22:19:58 ----A---- C:\Windows\system32\wintrust.dll
2015-02-16 22:19:58 ----A---- C:\Windows\system32\cryptsvc.dll
2015-02-16 22:19:58 ----A---- C:\Windows\system32\crypt32.dll
2015-02-16 22:19:50 ----A---- C:\Windows\system32\drivers\afd.sys
2015-02-16 22:19:48 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-02-16 22:19:38 ----A---- C:\Windows\system32\objsel.dll
2015-02-16 22:19:37 ----A---- C:\Windows\SYSWOW64\objsel.dll
2015-02-16 22:19:37 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-02-16 22:19:37 ----A---- C:\Windows\system32\KernelBase.dll
2015-02-16 22:19:36 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2015-02-16 22:19:36 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2015-02-16 22:19:36 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2015-02-16 22:19:36 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2015-02-16 22:19:36 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2015-02-16 22:19:36 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2015-02-16 22:19:36 ----A---- C:\Windows\system32\wincredprovider.dll
2015-02-16 22:19:36 ----A---- C:\Windows\system32\dpapiprovider.dll
2015-02-16 22:19:36 ----A---- C:\Windows\system32\dimsroam.dll
2015-02-16 22:19:36 ----A---- C:\Windows\system32\cngprovider.dll
2015-02-16 22:19:36 ----A---- C:\Windows\system32\capiprovider.dll
2015-02-16 22:19:36 ----A---- C:\Windows\system32\adprovider.dll
2015-02-16 22:19:07 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2015-02-16 22:19:07 ----A---- C:\Windows\system32\d2d1.dll
2015-02-16 22:19:06 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-02-16 22:19:06 ----A---- C:\Windows\system32\qdvd.dll
2015-02-16 22:19:04 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2015-02-16 22:19:04 ----A---- C:\Windows\system32\IMJP10K.DLL
2015-02-16 22:19:03 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2015-02-16 22:19:00 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2015-02-16 22:19:00 ----A---- C:\Windows\system32\oleaut32.dll
2015-02-16 22:18:57 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2015-02-16 22:18:57 ----A---- C:\Windows\system32\pku2u.dll
2015-02-16 22:18:51 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-02-16 22:18:51 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-02-16 22:18:51 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-02-16 22:18:51 ----A---- C:\Windows\system32\EncDump.dll
2015-02-16 22:18:51 ----A---- C:\Windows\system32\audiosrv.dll
2015-02-16 22:18:51 ----A---- C:\Windows\system32\AudioSes.dll
2015-02-16 22:18:51 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-02-16 22:18:51 ----A---- C:\Windows\system32\AudioEng.dll
2015-02-16 22:18:49 ----A---- C:\Windows\system32\drivers\storport.sys
2015-02-16 22:18:49 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2015-02-16 22:18:49 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2015-02-16 22:18:48 ----A---- C:\Windows\SYSWOW64\iologmsg.dll
2015-02-16 22:18:48 ----A---- C:\Windows\system32\iologmsg.dll
2015-02-16 22:18:37 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-02-16 22:18:37 ----A---- C:\Windows\system32\rdpcorets.dll
2015-02-16 22:18:20 ----A---- C:\Windows\SYSWOW64\charmap.exe
2015-02-16 22:18:20 ----A---- C:\Windows\system32\charmap.exe
2015-02-16 22:18:18 ----A---- C:\Windows\SYSWOW64\rastls.dll
2015-02-16 22:18:18 ----A---- C:\Windows\system32\rastls.dll
2015-02-16 22:18:15 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2015-02-16 22:18:15 ----A---- C:\Windows\system32\WsmWmiPl.dll
2015-02-16 22:18:15 ----A---- C:\Windows\system32\WsmSvc.dll
2015-02-16 22:18:15 ----A---- C:\Windows\system32\WsmAuto.dll
2015-02-16 22:18:15 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2015-02-16 22:18:15 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2015-02-16 22:18:14 ----A---- C:\Windows\SYSWOW64\WsmWmiPl.dll
2015-02-16 22:18:14 ----A---- C:\Windows\SYSWOW64\WsmAuto.dll
2015-02-16 22:18:14 ----A---- C:\Windows\SYSWOW64\WSManMigrationPlugin.dll
2015-02-16 22:18:14 ----A---- C:\Windows\SYSWOW64\WSManHTTPConfig.exe
2015-02-16 22:18:09 ----A---- C:\Windows\system32\shell32.dll
2015-02-16 22:18:08 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-02-16 22:17:56 ----A---- C:\Windows\SYSWOW64\tzres.dll
2015-02-16 22:17:56 ----A---- C:\Windows\system32\tzres.dll
2015-02-16 22:17:35 ----A---- C:\Windows\SYSWOW64\packager.dll
2015-02-16 22:17:35 ----A---- C:\Windows\system32\packager.dll
2015-02-16 22:17:32 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-02-16 22:17:32 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-02-16 22:17:32 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-02-16 22:17:32 ----A---- C:\Windows\system32\wow64win.dll
2015-02-16 22:17:32 ----A---- C:\Windows\system32\wow64cpu.dll
2015-02-16 22:17:32 ----A---- C:\Windows\system32\wow64.dll
2015-02-16 22:17:32 ----A---- C:\Windows\system32\ntvdm64.dll
2015-02-16 22:17:32 ----A---- C:\Windows\system32\kernel32.dll
2015-02-16 22:17:31 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-02-16 22:17:31 ----A---- C:\Windows\SYSWOW64\user.exe
2015-02-16 22:17:31 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-02-16 22:16:59 ----A---- C:\Windows\system32\winlogon.exe
2015-02-16 22:16:58 ----A---- C:\Windows\system32\winsta.dll
2015-02-16 22:16:57 ----A---- C:\Windows\SYSWOW64\winsta.dll
2015-02-16 22:16:57 ----A---- C:\Windows\system32\rdpcorekmts.dll
2015-02-16 22:16:57 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2015-02-16 22:16:56 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2015-02-16 22:16:33 ----A---- C:\Windows\system32\drivers\ntfs.sys
2015-02-16 22:16:27 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2015-02-16 22:16:27 ----A---- C:\Windows\system32\scesrv.dll
2015-02-16 22:16:04 ----A---- C:\Windows\system32\msi.dll
2015-02-16 22:16:03 ----A---- C:\Windows\SYSWOW64\msi.dll
2015-02-16 22:16:03 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-02-16 22:16:03 ----A---- C:\Windows\system32\authui.dll
2015-02-16 22:16:02 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2015-02-16 22:16:02 ----A---- C:\Windows\system32\msihnd.dll
2015-02-16 22:16:02 ----A---- C:\Windows\system32\consent.exe
2015-02-16 22:14:28 ----A---- C:\Windows\system32\gdi32.dll
2015-02-16 22:14:27 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-02-16 22:14:22 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-02-16 22:14:21 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-02-16 22:14:21 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-02-16 22:14:19 ----A---- C:\Windows\system32\srcore.dll
2015-02-16 22:14:18 ----A---- C:\Windows\system32\rstrui.exe
2015-02-16 22:14:17 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-02-16 22:14:17 ----A---- C:\Windows\system32\srclient.dll
2015-02-16 22:14:03 ----A---- C:\Windows\system32\win32k.sys
2015-02-16 22:09:11 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-02-16 22:09:11 ----A---- C:\Windows\system32\rpcrt4.dll
2015-02-16 21:54:08 ----A---- C:\Windows\system32\wups2.dll
2015-02-16 21:54:08 ----A---- C:\Windows\system32\wucltux.dll
2015-02-16 21:54:08 ----A---- C:\Windows\system32\wuauclt.exe
2015-02-16 21:54:07 ----A---- C:\Windows\system32\wuaueng.dll
2015-02-16 21:53:59 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-02-16 21:53:59 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-02-16 21:53:59 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-02-16 21:53:59 ----A---- C:\Windows\system32\wups.dll
2015-02-16 21:53:59 ----A---- C:\Windows\system32\wudriver.dll
2015-02-16 21:53:59 ----A---- C:\Windows\system32\wuapi.dll
2015-02-16 21:53:44 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-02-16 21:53:44 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-02-16 21:53:44 ----A---- C:\Windows\system32\wuwebv.dll
2015-02-16 21:53:44 ----A---- C:\Windows\system32\wuapp.exe
2015-02-16 21:43:33 ----A---- C:\Windows\SYSWOW64\drivers\HWiNFO64A.SYS
2015-02-16 21:42:21 ----ASH---- C:\pagefile.sys

======List of files/folders modified in the last 1 month======

2015-03-09 11:00:45 ----RD---- C:\Program Files
2015-03-09 10:59:34 ----D---- C:\Windows\Temp
2015-03-09 10:35:39 ----D---- C:\Windows\system32\config
2015-03-09 10:25:04 ----D---- C:\ProgramData\MFAData
2015-03-09 10:22:56 ----A---- C:\Windows\ntbtlog.txt
2015-03-08 20:11:42 ----D---- C:\Legacy
2015-03-08 19:48:23 ----D---- C:\Windows\inf
2015-03-08 19:30:55 ----D---- C:\Windows\system32\Tasks
2015-03-08 19:30:00 ----RSD---- C:\Windows\Fonts
2015-03-08 19:28:51 ----SHD---- C:\Windows\Installer
2015-03-08 19:24:14 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-03-08 19:23:56 ----SHD---- C:\System Volume Information
2015-03-08 19:15:38 ----D---- C:\Windows\Prefetch
2015-03-07 17:44:35 ----RD---- C:\Program Files (x86)
2015-03-06 17:04:17 ----D---- C:\Users\Rene\AppData\Roaming\CyberLink
2015-03-06 17:03:58 ----AD---- C:\ProgramData\TEMP
2015-03-06 11:53:40 ----D---- C:\Windows\System32
2015-03-05 14:56:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-02 14:35:12 ----D---- C:\ProgramData\CanonIJPLM
2015-02-28 21:06:27 ----D---- C:\Program Files\WinRAR
2015-02-28 21:06:14 ----D---- C:\Windows\Tasks
2015-02-26 10:21:30 ----HD---- C:\ProgramData
2015-02-26 10:19:33 ----D---- C:\Program Files (x86)\Common Files
2015-02-25 22:01:40 ----D---- C:\Windows\SysWOW64
2015-02-25 17:47:04 ----SD---- C:\ProgramData\Microsoft
2015-02-25 16:27:18 ----D---- C:\ProgramData\CyberLink
2015-02-25 14:40:27 ----D---- C:\Windows\winsxs
2015-02-24 21:44:55 ----D---- C:\Windows\system32\catroot
2015-02-24 12:38:06 ----D---- C:\Windows\rescache
2015-02-24 12:08:42 ----D---- C:\Windows\system32\catroot2
2015-02-24 11:51:27 ----D---- C:\Windows\system32\DriverStore
2015-02-24 11:01:02 ----D---- C:\Windows\SYSWOW64\nl-NL
2015-02-24 11:01:02 ----D---- C:\Windows\system32\nl-NL
2015-02-23 17:48:20 ----AD---- C:\Windows
2015-02-23 16:18:47 ----D---- C:\Windows\Microsoft.NET
2015-02-23 16:17:55 ----RSD---- C:\Windows\assembly
2015-02-23 16:02:56 ----D---- C:\Windows\ehome
2015-02-23 16:01:46 ----D---- C:\ProgramData\Microsoft Help
2015-02-23 14:27:53 ----D---- C:\Windows\system32\drivers\nl-NL
2015-02-23 14:27:53 ----D---- C:\Windows\system32\drivers
2015-02-23 14:09:00 ----D---- C:\Windows\SoftwareDistribution
2015-02-23 13:30:18 ----D---- C:\Windows\Downloaded Program Files
2015-02-23 13:30:15 ----D---- C:\Windows\Panther
2015-02-23 13:30:01 ----D---- C:\Program Files (x86)\ImgBurn
2015-02-23 10:28:56 ----D---- C:\Windows\SYSWOW64\wbem
2015-02-23 10:28:56 ----D---- C:\Windows\system32\wbem
2015-02-23 10:25:25 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-02-22 17:07:21 ----SHD---- C:\$Recycle.Bin
2015-02-21 09:19:38 ----D---- C:\Windows\pss
2015-02-20 19:38:17 ----D---- C:\Users\Rene\AppData\Roaming\Samsung
2015-02-20 15:59:13 ----A---- C:\Windows\SYSWOW64\msvcr71.dll
2015-02-20 15:59:13 ----A---- C:\Windows\SYSWOW64\msvcp71.dll
2015-02-20 15:48:06 ----DC---- C:\Windows\system32\DRVSTORE
2015-02-20 13:32:05 ----D---- C:\ProgramData\install_clap
2015-02-19 20:04:00 ----D---- C:\Windows\SYSWOW64\en-US
2015-02-19 20:04:00 ----D---- C:\Windows\system32\en-US
2015-02-19 10:52:03 ----D---- C:\Windows\system32\wfp
2015-02-19 10:52:03 ----D---- C:\Windows\system32\drivers\etc
2015-02-19 10:52:02 ----D---- C:\Windows\system32\CodeIntegrity
2015-02-19 10:51:54 ----D---- C:\ProgramData\IObit
2015-02-19 10:51:53 ----D---- C:\Program Files (x86)\VS Revo Group
2015-02-19 10:51:23 ----D---- C:\Windows\registration
2015-02-19 10:49:40 ----D---- C:\ProgramData\Apple
2015-02-19 10:49:34 ----D---- C:\Program Files (x86)\Samsung
2015-02-18 18:37:36 ----D---- C:\Windows\debug
2015-02-18 14:40:29 ----D---- C:\ProgramData\Malwarebytes
2015-02-17 18:03:29 ----D---- C:\Windows\tracing
2015-02-17 10:23:41 ----D---- C:\Program Files\Microsoft Silverlight
2015-02-17 10:23:39 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-02-17 10:20:05 ----D---- C:\Windows\AppCompat
2015-02-17 10:20:05 ----D---- C:\Program Files\Windows Journal
2015-02-17 10:19:59 ----D---- C:\Program Files\Internet Explorer
2015-02-17 10:19:58 ----D---- C:\Windows\PolicyDefinitions
2015-02-17 10:19:58 ----D---- C:\Program Files (x86)\Internet Explorer
2015-02-17 10:19:53 ----D---- C:\Windows\SYSWOW64\Dism
2015-02-17 10:19:52 ----D---- C:\Windows\system32\Dism
2015-02-17 10:19:38 ----D---- C:\Windows\AppPatch
2015-02-17 10:15:50 ----D---- C:\Windows\system32\drivers\UMDF
2015-02-17 09:14:04 ----D---- C:\ProgramData\Skype
2015-02-17 09:14:02 ----RD---- C:\Program Files (x86)\Skype
2015-02-17 08:39:12 ----D---- C:\Windows\system32\MRT
2015-02-16 23:24:47 ----D---- C:\Program Files (x86)\IObit
2015-02-16 23:22:29 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-02-16 22:49:15 ----D---- C:\Users\Rene\AppData\Roaming\IObit
2015-02-16 22:49:11 ----D---- C:\ProgramData\ProductData
2015-02-16 22:42:46 ----D---- C:\Users\Rene\AppData\Roaming\Dropbox
2015-02-16 22:35:32 ----D---- C:\Users\Rene\AppData\Roaming\newnext.me
2015-02-16 22:35:32 ----D---- C:\ProgramData\AVG2014
2015-02-16 21:43:33 ----D---- C:\Windows\SYSWOW64\drivers
2015-02-16 21:43:32 ----SHD---- C:\Recovery
2015-02-16 21:43:32 ----D---- C:\Windows\system32\Recovery
2015-02-16 21:40:12 ----D---- C:\Windows\system32\Msdtc

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2014-06-17 190744]
R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2014-06-17 328984]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2014-10-29 123672]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2014-06-17 31512]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 360AntiHacker;360Safe Anti Hacker Service; C:\Windows\System32\Drivers\360AntiHacker64.sys [2015-02-12 100424]
R1 360Box64;360Box mini-filter driver; C:\Windows\system32\DRIVERS\360Box64.sys [2015-02-12 305736]
R1 360Camera;360Safe Camera Filter Service; C:\Windows\System32\Drivers\360Camera64.sys [2015-02-12 40520]
R1 360FsFlt;360FsFlt mini-filter driver; C:\Windows\system32\DRIVERS\360FsFlt.sys [2015-02-12 314448]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2013-08-30 22600]
R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2014-06-30 152344]
R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2014-07-21 244504]
R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2014-10-24 237848]
R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2014-10-20 269080]
R1 BAPIDRV;BAPIDRV; C:\Windows\system32\DRIVERS\BAPIDRV64.sys [2015-02-12 180816]
R1 CLBStor;InstantBurn Storage Helper Driver; C:\Windows\system32\DRIVERS\CLBStor.sys [2010-07-15 24560]
R1 ElRawDisk;ElRawDisk; \??\C:\Windows\system32\drivers\rsdrvx64.sys [2009-02-12 26024]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [2015-02-16 26528]
R2 CLBUDF;CyberLink InstantBurn UDF Filesystem; C:\Windows\system32\drivers\CLBUDF.sys [2010-07-15 377840]
R3 360AvFlt;360AvFlt mini-filter driver; C:\Windows\system32\DRIVERS\360AvFlt.sys [2015-02-12 77896]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-11-21 18959360]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-11-21 589312]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2013-12-29 416072]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2014-06-21 94720]
R3 CompFilter64;UVCCompositeFilter; C:\Windows\system32\DRIVERS\lvbflt64.sys [2012-09-21 24608]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-12-29 3707864]
R3 LVRS64;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2012-09-21 351520]
R3 LVUVC64;Logitech HD Webcam C525(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2012-09-21 4763680]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2013-12-29 64624]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-12-29 883928]
S3 ACSSCR;ACR38 Smart Card Reader; C:\Windows\system32\DRIVERS\a38usb.sys [2012-06-04 44672]
S3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2010-11-15 121832]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2013-02-20 19456]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [2013-09-18 14112]
S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUSB.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-11-21 244736]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2014-12-16 3247120]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2014-12-16 289328]
R2 nlsX86cc;NLS Service; C:\Windows\SysWOW64\NLSSRV32.EXE [2011-12-20 68896]
R2 QHActiveDefense;360 Total Security; C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [2015-02-12 813680]
R2 SamsungAllShare;Samsung AllShare PC Service; C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\WiselinkPro.exe [2011-02-18 7233952]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2013-08-27 93072]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 WtuSystemSupport;WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [2015-02-26 620056]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Google Updateservice (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-23 107848]
S2 SimpleSlideShowServer;SimpleSlideShowServer; C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe [2011-02-18 22464]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-16 267440]
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-23 107848]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-01-12 114688]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2011-02-02 244904]
S3 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2012-08-08 390672]
S3 TuneUp.UtilitiesSvc;AVG PC TuneUp Service; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2014-07-14 2253112]
S3 vToolbarUpdater18.4.0;vToolbarUpdater18.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe [2015-02-26 1875480]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-03-05 1255736]
S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------