burdie

[ATTACH]37774[/ATTACH] AdwCleaner_results.txt

[ATTACH]37763[/ATTACH] MBAM_Scanlog.txt

[ATTACH]37705[/ATTACH] zoek-results.txt

[ATTACH]37632[/ATTACH] zoek-results.log

Beste, Logfile of random's system information tool 1.10 (written by random/random) Run by Steven at 2014-11-21 11:23:28 Microsoft Windows 7 Professional Service Pack 1 System drive C: has 103 GB (23%) free of 453 GB Total RAM: 4028 MB (41% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 11:23:41, on 21/11/2014 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17420) Boot mode: Normal Running processes: C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe C:\Program Files (x86)\SupTab\HpUI.exe C:\Program Files (x86)\SupTab\Loader32.exe C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe C:\Program Files (x86)\Origin\Origin.exe C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe C:\windows\SysWOW64\RunDll32.exe C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\windows\SysWOW64\cmd.exe C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe C:\Users\Steven\AppData\Local\Akamai\netsession_win.exe C:\Users\Steven\AppData\Local\Akamai\netsession_win.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_223.exe C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_223.exe C:\Program Files\trend micro\Steven.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = istartsurf R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com/search?q={searchTerms} R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms} R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = istartsurf R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = istartsurf R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds&ts=1410285768&from=amt&uid=TOSHIBAXMK5061GSYN_Y2TQC452TXXY2TQC452T&q={searchTerms} R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds&ts=1410285768&from=amt&uid=TOSHIBAXMK5061GSYN_Y2TQC452TXXY2TQC452T&q={searchTerms} R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = istartsurf R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.bing.com/search?q={searchTerms} R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/search?q={searchTerms} R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll O2 - BHO: BHO_Startup - {3134413B-49B4-425C-98A5-893C1F195601} - c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll O2 - BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: ArcPluginIEBHO - {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file) O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" 60 O4 - HKLM\..\Run: [ADSK DLMSession] C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe O4 - HKLM\..\Run: [uSB3MON] "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" O4 - HKLM\..\Run: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [iMSS] "C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe" O4 - HKLM\..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun O4 - HKLM\..\Run: [brStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN O4 - HKLM\..\Run: [File Sanitizer] c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe /start O4 - HKLM\..\Run: [beid] "C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true O4 - HKLM\..\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Steven\AppData\Local\Akamai\netsession_win.exe" O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Steven\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKCU\..\Run: [EADM] C:\Program Files (x86)\Origin\Origin.exe -AutoStart O4 - HKCU\..\Run: [AccelerometerSysTrayApplet] "C:\Program Files\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.Exe" O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: CurseClientStartup.ccip O4 - Global Startup: Bluetooth.lnk = ? O4 - Global Startup: CodeMeter Control Center.lnk = C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O20 - Winlogon Notify: DeviceNP - DeviceNP.dll (file missing) O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\windows\system32\atiesrxx.exe (file missing) O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Arc Service (ArcService) - Perfect World Entertainment Inc - C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Security Service (BTHSSecurityMgr) - Intel® Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe O23 - Service: CodeMeter Runtime Server (CodeMeter.exe) - WIBU-SYSTEMS AG - C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe O23 - Service: @C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing) O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing) O23 - Service: HP ProtectTools Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Company - c:\windows\SysWOW64\flcdlock.exe O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HP Power Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe O23 - Service: HP Auto (HPAuto) - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe O23 - Service: HP Connection Manager 4 Service (hpCMSrv) - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe O23 - Service: File Sanitizer for HP ProtectTools (HPFSService) - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe O23 - Service: HP Service (hpsrv) - Unknown owner - C:\windows\system32\Hpservice.exe (file missing) O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing) O23 - Service: IePlugin Services (IePluginServices) - Cherished Technololgy LIMITED - C:\ProgramData\IePluginServices\PluginService.exe O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - c:\Program Files (x86)\Hewlett-Packard\Embedded Security Software\ifxspmgt.exe O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - c:\Program Files (x86)\Hewlett-Packard\Embedded Security Software\ifxtcs.exe O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel® Capability Licensing Service TCP IP Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe O23 - Service: Intel® ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing) O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: McAfee Endpoint Encryption Agent - Unknown owner - C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe O23 - Service: mental ray 3.10 Satellite for Autodesk 3ds Max 2013 64-bit (mi-raysat_3dsmax2013_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing) O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing) O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe O23 - Service: Personal Secure Drive Service (PersonalSecureDriveService) - Infineon Technologies AG - c:\Program Files (x86)\Hewlett-Packard\Embedded Security Software\IfxPsdSv.exe O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing) O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe O23 - Service: Roxio Burn Launcher (RoxioBurnLauncher) - Unknown owner - C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe O23 - Service: RoxMediaDB12OEM - Sonic Solutions - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: ArcCapture (uArcCapture) - ArcSoft, Inc. - C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing) O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing) O23 - Service: Mobile Broadband Service (WMCoreService) - Ericsson AB - C:\Program Files (x86)\Ericsson\Mobile Broadband Drivers\WMCore\mini_WMCore.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: Intel® PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- End of file - 23164 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 winlogon.exe C:\windows\system32\services.exe C:\windows\system32\lsass.exe C:\windows\system32\lsm.exe C:\windows\system32\svchost.exe -k DcomLaunch C:\windows\system32\svchost.exe -k RPCSS "c:\Program Files\Microsoft Security Client\MsMpEng.exe" "C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe" C:\windows\system32\atiesrxx.exe C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\windows\system32\svchost.exe -k LocalService C:\windows\system32\svchost.exe -k netsvcs "C:\Program Files\IDT\WDM\STacSV64.exe" C:\windows\system32\svchost.exe -k GPSvcGroup C:\windows\system32\Hpservice.exe C:\windows\system32\vcsFPService.exe C:\windows\system32\svchost.exe -k NetworkService atieclxx C:\windows\system32\WLANExt.exe 31407744 \??\C:\windows\system32\conhost.exe "-947099526164341363-2012008884-12057240021700367419-1145704867-1917257184-1589608012 "C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe" C:\windows\Explorer.EXE "C:\windows\system32\Dwm.exe" C:\windows\system32\svchost.exe -k LocalServiceNoNetwork C:\ProgramData\IePluginServices\PluginService.exe -service "C:\Program Files (x86)\SupTab\HpUI.exe" -run C:\windows\System32\spoolsv.exe C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe" "taskhost.exe" "C:\Program Files\Bonjour\mDNSResponder.exe" "C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe" "C:\Program Files\Intel\WiFi\bin\EvtEng.exe" "C:\Program Files (x86)\SupTab\Loader64.exe" "C:\Program Files (x86)\SupTab\Loader32.exe" "c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe" "C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe" "c:\Program Files (x86)\Hewlett-Packard\Embedded Security Software\ifxspmgt.exe" "C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe" "c:\Program Files (x86)\Hewlett-Packard\Embedded Security Software\ifxtcs.exe" "C:\Program Files\Intel\iCLS Client\HeciServer.exe" "C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe" "C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe" "C:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe" "c:\Program Files (x86)\Hewlett-Packard\Embedded Security Software\IfxPsdSv.exe" C:\windows\SysWOW64\PnkBstrA.exe "C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe" "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe" C:\windows\system32\svchost.exe -k imgsvc C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" WLIDSvcM.exe 3688 "C:\Program Files (x86)\Ericsson\Mobile Broadband Drivers\WMCore\mini_WMCore.exe" servicemode "C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe" "C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe" "C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe" "C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe" C:\windows\system32\wbem\unsecapp.exe -Embedding C:\windows\system32\wbem\wmiprvse.exe "C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE" "C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe" C:\windows\system32\SearchIndexer.exe /Embedding "c:\Program Files\Microsoft Security Client\NisSrv.exe" "C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ff010f8c-03ad-44a2-b5b2-91e2da21bffe -SystemEventPortName:HostProcess-dd7ef78f-aadf-4038-aaca-e8edec48f585 -IoCancelEventPortName:HostProcess-5c9886d4-4cdd-4bb9-ae8d-eccb803c2a4a -NonStateChangingEventPortName:HostProcess-36a00303-0b73-493f-a629-481721e1ef14 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a90dbf9d-b2af-47a0-b0ef-76709c64fac6 -DeviceGroupId: C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\windows\servicing\TrustedInstaller.exe "C:\Program Files\IDT\WDM\sttray64.exe" "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe" "C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE" "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart "C:\Program Files\Hewlett-Packard\HP 3D DriveGuard\accelerometerST.exe" C:\windows\System32\svchost.exe -k LocalServicePeerNet "C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe" "C:\Program Files\Windows Media Player\wmpnetwk.exe" "C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe" "C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" "C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe" "C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe" /AUTORUN -BootProc "C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe" "C:\windows\SysWOW64\RunDll32.exe" "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook "C:\Program Files (x86)\Browny02\BrYNSvc.exe" "C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe" "C:\Users\Steven\AppData\Local\Apps\2.0\YMB3B8MV.6DN\0J5PRTO9.H6Y\curs..tion_9e9e83ddf3ed3ead_0005.0001_36a9b62a0ea0a2ec\CurseClient.exe" "C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" /start "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true "C:\Program Files (x86)\iTunes\iTunesHelper.exe" "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "C:\Program Files\iPod\bin\iPodService.exe" -BootProc C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7} "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe" "-launchedbyvulcan" "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe" "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" C:\windows\system32\wbem\unsecapp.exe -Embedding C:\windows\system32\cmd.exe /c ""C:/Users/Steven/AppData/Local/Akamai/installer_no_upload_silent.exe" & "C:/Users/Steven/AppData/Local/Akamai/netsession_win.exe"" "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe" --type=renderer --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="6036.0.712564315\1973965650" /prefetch:3 "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0 "C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe" "C:/Users/Steven/AppData/Local/Akamai/netsession_win.exe" "C:/Users/Steven/AppData/Local/Akamai/netsession_win.exe" --client "C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PrivacyIconClient.exe" -startup "C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe" "C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe" "C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe" -Minimized "C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe" "C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe" "C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe" "C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe" "C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe" "C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe" "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" Google "C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=8276.ed6f820.665672025 "C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 8276 "\\.\pipe\gecko-crash-server-pipe.8276" plugin "C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_223.exe" --proxy-stub-channel=Flash9172.103BE980.24156 --host-broker-channel=Flash9172.103BE980.16379 --host-pid=9172 --host-npapi-version=27 --plugin-path="C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll" "C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_223.exe" --channel=6736.003EF548.1004016432 --proxy-stub-channel=Flash9172.103BE980.24156 --plugin-path="C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll" --host-npapi-version=27 --type=renderer taskeng.exe {30D1A96F-65C8-4A83-87EC-52C79F420D28} "C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe" /L Analysis C:\windows\system32\wbem\wmiprvse.exe C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe C:\windows\system32\vssvc.exe C:\windows\System32\svchost.exe -k swprv "C:\Users\Steven\Desktop\RSITx64.exe" ======Scheduled tasks folder====== C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3828895511-1117663807-856057220-1002Core.job - C:\Users\Steven\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3828895511-1117663807-856057220-1002UA.job - C:\Users\Steven\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler C:\windows\tasks\HPCeeScheduleForSteven.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForSteven (null) =========Mozilla firefox========= ProfilePath - C:\Users\Steven\AppData\Roaming\Mozilla\Firefox\Profiles\0zvl38dm.default prefs.js - "browser.search.useDBForOrder" - true prefs.js - "browser.startup.homepage" - "about:home" prefs.js - "keyword.URL" - "http://www.google.com/search?rls=org.mozilla:en-US:official&client=firefox-a&q=" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 15.0.0.223 Plugin "Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer] "Description"=Adobe Shockwave Player "Path"=C:\windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=] "Description"=iTunes Detector Plug-in "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0] "Description"= "Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.3] "Description"= "Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.5.1] "Description"= "Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin] "Description"=Google Earth in your browser "Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66] "Description"=Intel IPT WebApi plugin "Path"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater] "Description"=This plugin updates Intel WebAPI component "Path"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.71.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0] "Description"=Office Authorization plug-in for NPAPI browsers "Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205] "Description"=WLPG Install MIME type "Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin] "Description"=This plugin detects and launches Pando Media Booster "Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@perfectworld.com/npArcPlayNowPlugin] "Description"=Arc PlayNow plugin for Mozilla browsers "Path"=C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect] "Description"= "Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 15.0.0.223 Plugin "Path"=C:\windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/npbattlelog,version=2.5.1] "Description"= "Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.11.2] "Description"=Java™ Deployment Toolkit "Path"=C:\windows\system32\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.11.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=disabled [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0] "Description"=Office Authorization plug-in for NPAPI browsers "Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect_x86_64] "Description"= "Path"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll C:\Program Files (x86)\Mozilla Firefox\extensions\ belgiumeid@eid.belgium.be C:\Users\Steven\AppData\Roaming\Mozilla\Firefox\Profiles\0zvl38dm.default\searchplugins\ Google.xml ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 6671064] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-01-28 551840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 690392] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-01-28 209824] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}] HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] DVDVideoSoft WebPageAdjuster Class - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2013-01-30 342176] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}] MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09 96128] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3134413B-49B4-425C-98A5-893C1F195601}] File Sanitizer for HP ProtectTools - c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll [2012-03-22 122456] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}] IETabPage Class - C:\Program Files (x86)\SupTab\SupTab.dll [2014-09-09 515464] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-09-26 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84BFE29A-8139-402a-B2A4-C23AE9E1A75F}] ArcPluginIEBHO Class - C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll [2014-01-21 117072] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Aanmeldhulp voor Microsoft-account - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-09-26 171944] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}] HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}] DVDVideoSoft WebPageAdjuster Class - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2013-01-30 281760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {ae07101b-46d4-4a98-af68-0333ea26e113} [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {ae07101b-46d4-4a98-af68-0333ea26e113} [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Autodesk Sync"=C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2012-02-05 415680] "SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2013-03-05 1664000] "AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27 558496] "MfeEpePcMonitor"=C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe [] "MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2014-08-22 1331288] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2014-07-04 2816240] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "NCPluginUpdater"=c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\NCPluginUpdater.exe [2014-10-21 21720] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Akamai NetSession Interface"=C:\Users\Steven\AppData\Local\Akamai\netsession_win.exe [2012-10-09 4441920] "Pando Media Booster"=C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2013-03-11 3093624] "AdobeBridge"= [] "Facebook Update"=C:\Users\Steven\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-01-31 138096] "EADM"=C:\Program Files (x86)\Origin\Origin.exe [2014-11-20 3618648] "AccelerometerSysTrayApplet"=C:\Program Files\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.Exe [2013-06-11 75584] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176] "IAStorIcon"=C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIconLaunch.exe [2013-02-09 56128] "ADSK DLMSession"=C:\Program Files (x86)\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe [2012-07-23 1632216] "USB3MON"=C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2014-08-08 292088] "BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184] "APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-07-03 43816] "IMSS"=C:\Program Files (x86)\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe [2013-10-25 134616] "ControlCenter4"=C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [2012-09-06 143360] "BrStsMon00"=C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2012-06-06 3076096] "File Sanitizer"=c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [2012-03-22 12310616] "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-09-11 766208] "SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] "AdobeCS6ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312] "QLBController"=C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [2014-02-10 336672] "beid"=C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe /startup [] "Adobe Creative Cloud"=C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2014-03-21 2691480] "HPConnectionManager"=C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [2014-04-09 185144] ""= [] "iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-07-08 152392] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-09-26 271744] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe CodeMeter Control Center.lnk - C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe C:\Users\Steven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup CurseClientStartup.ccip [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] wlnotify.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2013-12-19 6671064] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] "notification packages"=DPPassFilter scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe"="C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe:*:Enabled:CodeMeter Runtime Server" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe"="C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe:*:Enabled:CodeMeter Runtime Server" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 3 months====== 2014-11-20 23:43:06 ----D---- C:\rsit 2014-11-20 23:43:06 ----D---- C:\Program Files\trend micro 2014-11-20 23:29:57 ----A---- C:\windows\SYSWOW64\sho45A.tmp 2014-11-20 16:06:16 ----A---- C:\windows\SYSWOW64\shoDC5A.tmp 2014-11-20 14:12:47 ----A---- C:\windows\SYSWOW64\pku2u.dll 2014-11-20 14:12:47 ----A---- C:\windows\SYSWOW64\kerberos.dll 2014-11-20 14:12:47 ----A---- C:\windows\system32\pku2u.dll 2014-11-20 14:12:47 ----A---- C:\windows\system32\kerberos.dll 2014-11-12 23:12:03 ----A---- C:\windows\SYSWOW64\oleaut32.dll 2014-11-12 23:12:03 ----A---- C:\windows\system32\oleaut32.dll 2014-11-12 15:25:44 ----A---- C:\windows\system32\generaltel.dll 2014-11-12 15:25:44 ----A---- C:\windows\system32\aepdu.dll 2014-11-12 15:25:42 ----A---- C:\windows\system32\aeinv.dll 2014-11-12 15:25:41 ----A---- C:\windows\SYSWOW64\mshtmled.dll 2014-11-12 15:25:41 ----A---- C:\windows\SYSWOW64\iernonce.dll 2014-11-12 15:25:41 ----A---- C:\windows\SYSWOW64\ieetwproxystub.dll 2014-11-12 15:25:41 ----A---- C:\windows\system32\ieetwproxystub.dll 2014-11-12 15:25:41 ----A---- C:\windows\system32\ieetwcollector.exe 2014-11-12 15:25:40 ----A---- C:\windows\SYSWOW64\urlmon.dll 2014-11-12 15:25:40 ----A---- C:\windows\SYSWOW64\mshtml.dll 2014-11-12 15:25:40 ----A---- C:\windows\SYSWOW64\msfeeds.dll 2014-11-12 15:25:40 ----A---- C:\windows\SYSWOW64\JavaScriptCollectionAgent.dll 2014-11-12 15:25:40 ----A---- C:\windows\SYSWOW64\iedkcs32.dll 2014-11-12 15:25:40 ----A---- C:\windows\SYSWOW64\dxtrans.dll 2014-11-12 15:25:40 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll 2014-11-12 15:25:40 ----A---- C:\windows\system32\iernonce.dll 2014-11-12 15:25:40 ----A---- C:\windows\system32\ie4uinit.exe 2014-11-12 15:25:39 ----A---- C:\windows\SYSWOW64\iesetup.dll 2014-11-12 15:25:39 ----A---- C:\windows\SYSWOW64\ieapfltr.dll 2014-11-12 15:25:38 ----A---- C:\windows\SYSWOW64\iertutil.dll 2014-11-12 15:25:38 ----A---- C:\windows\system32\urlmon.dll 2014-11-12 15:25:38 ----A---- C:\windows\system32\iedkcs32.dll 2014-11-12 15:25:37 ----A---- C:\windows\SYSWOW64\jsproxy.dll 2014-11-12 15:25:37 ----A---- C:\windows\SYSWOW64\jscript9diag.dll 2014-11-12 15:25:37 ----A---- C:\windows\system32\ieetwcollectorres.dll 2014-11-12 15:25:36 ----A---- C:\windows\SYSWOW64\ieUnatt.exe 2014-11-12 15:25:36 ----A---- C:\windows\SYSWOW64\ieui.dll 2014-11-12 15:25:36 ----A---- C:\windows\SYSWOW64\ieframe.dll 2014-11-12 15:25:36 ----A---- C:\windows\SYSWOW64\dxtmsft.dll 2014-11-12 15:25:36 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe 2014-11-12 15:25:36 ----A---- C:\windows\system32\msfeeds.dll 2014-11-12 15:25:36 ----A---- C:\windows\system32\dxtrans.dll 2014-11-12 15:25:35 ----A---- C:\windows\system32\iesetup.dll 2014-11-12 15:25:35 ----A---- C:\windows\system32\ieapfltr.dll 2014-11-12 15:25:34 ----A---- C:\windows\SYSWOW64\mshtmlmedia.dll 2014-11-12 15:25:34 ----A---- C:\windows\SYSWOW64\jscript9.dll 2014-11-12 15:25:34 ----A---- C:\windows\system32\iertutil.dll 2014-11-12 15:25:33 ----A---- C:\windows\SYSWOW64\wininet.dll 2014-11-12 15:25:33 ----A---- C:\windows\SYSWOW64\vbscript.dll 2014-11-12 15:25:33 ----A---- C:\windows\SYSWOW64\msrating.dll 2014-11-12 15:25:33 ----A---- C:\windows\SYSWOW64\MshtmlDac.dll 2014-11-12 15:25:33 ----A---- C:\windows\system32\jsproxy.dll 2014-11-12 15:25:33 ----A---- C:\windows\system32\ieUnatt.exe 2014-11-12 15:25:33 ----A---- C:\windows\system32\dxtmsft.dll 2014-11-12 15:25:32 ----A---- C:\windows\system32\mshtmled.dll 2014-11-12 15:25:32 ----A---- C:\windows\system32\ieui.dll 2014-11-12 15:25:32 ----A---- C:\windows\system32\ieframe.dll 2014-11-12 15:25:31 ----A---- C:\windows\system32\vbscript.dll 2014-11-12 15:25:31 ----A---- C:\windows\system32\mshtmlmedia.dll 2014-11-12 15:25:31 ----A---- C:\windows\system32\jscript9diag.dll 2014-11-12 15:25:31 ----A---- C:\windows\system32\jscript9.dll 2014-11-12 15:25:30 ----A---- C:\windows\system32\wininet.dll 2014-11-12 15:25:29 ----A---- C:\windows\system32\msrating.dll 2014-11-12 15:25:29 ----A---- C:\windows\system32\MshtmlDac.dll 2014-11-12 15:25:27 ----A---- C:\windows\system32\mshtml.dll 2014-11-12 15:25:19 ----A---- C:\windows\system32\msxml3.dll 2014-11-12 15:25:18 ----A---- C:\windows\SYSWOW64\msxml3r.dll 2014-11-12 15:25:18 ----A---- C:\windows\SYSWOW64\msxml3.dll 2014-11-12 15:25:18 ----A---- C:\windows\system32\msxml3r.dll 2014-11-12 15:25:16 ----A---- C:\windows\SYSWOW64\adtschema.dll 2014-11-12 15:25:16 ----A---- C:\windows\system32\termsrv.dll 2014-11-12 15:25:16 ----A---- C:\windows\system32\lsasrv.dll 2014-11-12 15:25:16 ----A---- C:\windows\system32\drivers\ksecpkg.sys 2014-11-12 15:25:16 ----A---- C:\windows\system32\adtschema.dll 2014-11-12 15:25:15 ----A---- C:\windows\SYSWOW64\sspicli.dll 2014-11-12 15:25:15 ----A---- C:\windows\SYSWOW64\secur32.dll 2014-11-12 15:25:15 ----A---- C:\windows\SYSWOW64\msaudite.dll 2014-11-12 15:25:15 ----A---- C:\windows\system32\msaudite.dll 2014-11-12 15:25:09 ----A---- C:\windows\SYSWOW64\IMJP10K.DLL 2014-11-12 15:25:09 ----A---- C:\windows\system32\IMJP10K.DLL 2014-11-12 15:25:07 ----A---- C:\windows\SYSWOW64\AUDIOKSE.dll 2014-11-12 15:25:07 ----A---- C:\windows\system32\AUDIOKSE.dll 2014-11-12 15:25:06 ----A---- C:\windows\system32\EncDump.dll 2014-11-12 15:25:06 ----A---- C:\windows\system32\audiosrv.dll 2014-11-12 15:25:06 ----A---- C:\windows\system32\AudioSes.dll 2014-11-12 15:25:06 ----A---- C:\windows\system32\AudioEng.dll 2014-11-12 15:25:05 ----A---- C:\windows\SYSWOW64\AudioSes.dll 2014-11-12 15:25:05 ----A---- C:\windows\SYSWOW64\AudioEng.dll 2014-11-12 15:25:02 ----A---- C:\windows\system32\schannel.dll 2014-11-12 15:25:01 ----A---- C:\windows\SYSWOW64\schannel.dll 2014-11-12 15:25:01 ----A---- C:\windows\SYSWOW64\ncrypt.dll 2014-11-12 15:25:01 ----A---- C:\windows\system32\ncrypt.dll 2014-11-12 15:24:59 ----A---- C:\windows\SYSWOW64\wdigest.dll 2014-11-12 15:24:59 ----A---- C:\windows\SYSWOW64\msv1_0.dll 2014-11-12 15:24:59 ----A---- C:\windows\system32\wdigest.dll 2014-11-12 15:24:59 ----A---- C:\windows\system32\TSpkg.dll 2014-11-12 15:24:59 ----A---- C:\windows\system32\msv1_0.dll 2014-11-12 15:24:58 ----A---- C:\windows\SYSWOW64\TSpkg.dll 2014-11-12 15:24:58 ----A---- C:\windows\SYSWOW64\credssp.dll 2014-11-12 15:24:58 ----A---- C:\windows\system32\credssp.dll 2014-11-12 15:24:51 ----A---- C:\windows\system32\packager.dll 2014-11-12 15:24:50 ----A---- C:\windows\SYSWOW64\packager.dll 2014-11-12 15:24:49 ----A---- C:\windows\system32\win32k.sys 2014-11-12 15:24:47 ----A---- C:\windows\SYSWOW64\msi.dll 2014-11-12 15:24:47 ----A---- C:\windows\system32\msi.dll 2014-11-12 11:38:10 ----D---- C:\Program Files (x86)\Mozilla Firefox 2014-11-10 00:54:27 ----A---- C:\windows\system32\NicInstC.dll 2014-11-10 00:54:27 ----A---- C:\windows\system32\e1cmsg.dll 2014-11-10 00:54:27 ----A---- C:\windows\system32\drivers\e1c62x64.sys 2014-11-05 16:40:15 ----A---- C:\windows\SYSWOW64\javaws.exe 2014-11-05 16:40:05 ----A---- C:\windows\SYSWOW64\WindowsAccessBridge-32.dll 2014-11-05 16:40:05 ----A---- C:\windows\SYSWOW64\javaw.exe 2014-11-05 16:40:05 ----A---- C:\windows\SYSWOW64\java.exe 2014-10-22 23:49:19 ----A---- C:\windows\SYSWOW64\sho2DFC.tmp 2014-10-16 09:44:52 ----A---- C:\windows\SYSWOW64\sho6744.tmp 2014-10-15 17:12:42 ----A---- C:\windows\SYSWOW64\mscorier.dll 2014-10-15 17:12:42 ----A---- C:\windows\SYSWOW64\dfshim.dll 2014-10-15 17:12:42 ----A---- C:\windows\system32\mscorier.dll 2014-10-15 17:12:42 ----A---- C:\windows\system32\dfshim.dll 2014-10-15 17:12:41 ----A---- C:\windows\SYSWOW64\mscories.dll 2014-10-15 17:12:41 ----A---- C:\windows\system32\mscories.dll 2014-10-15 17:12:32 ----A---- C:\windows\SYSWOW64\blackbox.dll 2014-10-15 17:12:32 ----A---- C:\windows\system32\drmv2clt.dll 2014-10-15 17:12:32 ----A---- C:\windows\system32\blackbox.dll 2014-10-15 17:12:31 ----A---- C:\windows\SYSWOW64\drmv2clt.dll 2014-10-15 17:12:30 ----A---- C:\windows\system32\wmp.dll 2014-10-15 17:12:27 ----A---- C:\windows\system32\mf.dll 2014-10-15 17:12:26 ----A---- C:\windows\SYSWOW64\wmp.dll 2014-10-15 17:12:26 ----A---- C:\windows\SYSWOW64\wmdrmsdk.dll 2014-10-15 17:12:26 ----A---- C:\windows\system32\wmdrmsdk.dll 2014-10-15 17:12:25 ----A---- C:\windows\SYSWOW64\mf.dll 2014-10-15 17:12:25 ----A---- C:\windows\SYSWOW64\drmmgrtn.dll 2014-10-15 17:12:25 ----A---- C:\windows\system32\drmmgrtn.dll 2014-10-15 17:12:24 ----A---- C:\windows\system32\drivers\PEAuth.sys 2014-10-15 17:12:24 ----A---- C:\windows\system32\ci.dll 2014-10-15 17:12:23 ----A---- C:\windows\system32\wintrust.dll 2014-10-15 17:12:23 ----A---- C:\windows\system32\winresume.exe 2014-10-15 17:12:23 ----A---- C:\windows\system32\winload.exe 2014-10-15 17:12:23 ----A---- C:\windows\system32\quartz.dll 2014-10-15 17:12:23 ----A---- C:\windows\system32\ntoskrnl.exe 2014-10-15 17:12:23 ----A---- C:\windows\system32\cryptsvc.dll 2014-10-15 17:12:22 ----A---- C:\windows\SYSWOW64\ntkrnlpa.exe 2014-10-15 17:12:22 ----A---- C:\windows\SYSWOW64\cryptsvc.dll 2014-10-15 17:12:22 ----A---- C:\windows\system32\evr.dll 2014-10-15 17:12:22 ----A---- C:\windows\system32\crypt32.dll 2014-10-15 17:12:21 ----A---- C:\windows\SYSWOW64\wintrust.dll 2014-10-15 17:12:21 ----A---- C:\windows\SYSWOW64\ntoskrnl.exe 2014-10-15 17:12:21 ----A---- C:\windows\SYSWOW64\evr.dll 2014-10-15 17:12:21 ----A---- C:\windows\system32\mfplat.dll 2014-10-15 17:12:21 ----A---- C:\windows\system32\cryptui.dll 2014-10-15 17:12:20 ----A---- C:\windows\SYSWOW64\quartz.dll 2014-10-15 17:12:20 ----A---- C:\windows\SYSWOW64\mfplat.dll 2014-10-15 17:12:20 ----A---- C:\windows\SYSWOW64\cryptui.dll 2014-10-15 17:12:20 ----A---- C:\windows\SYSWOW64\crypt32.dll 2014-10-15 17:12:20 ----A---- C:\windows\system32\srcore.dll 2014-10-15 17:12:20 ----A---- C:\windows\system32\pcasvc.dll 2014-10-15 17:12:19 ----A---- C:\windows\SYSWOW64\cryptsp.dll 2014-10-15 17:12:19 ----A---- C:\windows\system32\msscp.dll 2014-10-15 17:12:19 ----A---- C:\windows\system32\cryptsp.dll 2014-10-15 17:12:18 ----A---- C:\windows\system32\rstrui.exe 2014-10-15 17:12:18 ----A---- C:\windows\system32\msnetobj.dll 2014-10-15 17:12:18 ----A---- C:\windows\system32\appidsvc.dll 2014-10-15 17:12:17 ----A---- C:\windows\SYSWOW64\msscp.dll 2014-10-15 17:12:15 ----A---- C:\windows\system32\appidapi.dll 2014-10-15 17:12:11 ----A---- C:\windows\SYSWOW64\rrinstaller.exe 2014-10-15 17:12:11 ----A---- C:\windows\SYSWOW64\msnetobj.dll 2014-10-15 17:12:11 ----A---- C:\windows\system32\rrinstaller.exe 2014-10-15 17:12:11 ----A---- C:\windows\system32\drivers\appid.sys 2014-10-15 17:12:10 ----A---- C:\windows\SYSWOW64\mfps.dll 2014-10-15 17:12:10 ----A---- C:\windows\SYSWOW64\appidapi.dll 2014-10-15 17:12:10 ----A---- C:\windows\system32\mfps.dll 2014-10-15 17:12:10 ----A---- C:\windows\system32\appidpolicyconverter.exe 2014-10-15 17:12:09 ----A---- C:\windows\SYSWOW64\srclient.dll 2014-10-15 17:12:09 ----A---- C:\windows\SYSWOW64\mfpmp.exe 2014-10-15 17:12:09 ----A---- C:\windows\system32\srclient.dll 2014-10-15 17:12:09 ----A---- C:\windows\system32\setbcdlocale.dll 2014-10-15 17:12:09 ----A---- C:\windows\system32\mfpmp.exe 2014-10-15 17:12:09 ----A---- C:\windows\system32\appidcertstorecheck.exe 2014-10-15 17:12:08 ----A---- C:\windows\SYSWOW64\wmploc.DLL 2014-10-15 17:12:08 ----A---- C:\windows\SYSWOW64\spwmp.dll 2014-10-15 17:12:08 ----A---- C:\windows\SYSWOW64\mferror.dll 2014-10-15 17:12:08 ----A---- C:\windows\SYSWOW64\dxmasf.dll 2014-10-15 17:12:08 ----A---- C:\windows\system32\wmploc.DLL 2014-10-15 17:12:08 ----A---- C:\windows\system32\spwmp.dll 2014-10-15 17:12:08 ----A---- C:\windows\system32\mferror.dll 2014-10-15 17:12:08 ----A---- C:\windows\system32\dxmasf.dll 2014-10-15 17:11:02 ----A---- C:\windows\system32\rdpcorets.dll 2014-10-15 17:10:58 ----A---- C:\windows\SYSWOW64\rastls.dll 2014-10-15 17:10:58 ----A---- C:\windows\system32\rastls.dll 2014-10-15 17:10:51 ----A---- C:\windows\SYSWOW64\winsta.dll 2014-10-15 17:10:51 ----A---- C:\windows\system32\winsta.dll 2014-10-15 17:10:50 ----A---- C:\windows\system32\winlogon.exe 2014-10-15 17:10:50 ----A---- C:\windows\system32\rdpcorekmts.dll 2014-10-15 17:10:50 ----A---- C:\windows\system32\drivers\tssecsrv.sys 2014-10-15 17:10:50 ----A---- C:\windows\system32\drivers\rdpwd.sys 2014-10-15 17:10:42 ----A---- C:\windows\system32\mstscax.dll 2014-10-15 17:10:41 ----A---- C:\windows\SYSWOW64\mstscax.dll 2014-10-12 10:33:52 ----A---- C:\windows\system32\RdpGroupPolicyExtension.dll 2014-10-11 20:15:12 ----A---- C:\windows\system32\drivers\rdpvideominiport.sys 2014-10-11 20:15:05 ----A---- C:\windows\SYSWOW64\rdpendp_winip.dll 2014-10-11 20:15:03 ----A---- C:\windows\system32\rdpudd.dll 2014-10-11 20:15:03 ----A---- C:\windows\system32\rdpendp_winip.dll 2014-10-10 08:16:59 ----D---- C:\windows\system32\drivers\en-US 2014-10-10 08:13:09 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll 2014-10-10 08:13:07 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-10-10 08:13:07 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-10-10 08:13:07 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys 2014-10-10 08:13:06 ----A---- C:\windows\SYSWOW64\wksprtPS.dll 2014-10-10 08:13:06 ----A---- C:\windows\SYSWOW64\tsgqec.dll 2014-10-10 08:13:06 ----A---- C:\windows\SYSWOW64\mstsc.exe 2014-10-10 08:13:06 ----A---- C:\windows\SYSWOW64\MsRdpWebAccess.dll 2014-10-10 08:13:06 ----A---- C:\windows\system32\wksprtPS.dll 2014-10-10 08:13:06 ----A---- C:\windows\system32\wksprt.exe 2014-10-10 08:13:06 ----A---- C:\windows\system32\TSWbPrxy.exe 2014-10-10 08:13:06 ----A---- C:\windows\system32\tsgqec.dll 2014-10-10 08:13:06 ----A---- C:\windows\system32\mstsc.exe 2014-10-10 08:13:06 ----A---- C:\windows\system32\MsRdpWebAccess.dll 2014-10-10 08:13:05 ----A---- C:\windows\SYSWOW64\rdvidcrl.dll 2014-10-10 08:13:05 ----A---- C:\windows\system32\rdvidcrl.dll 2014-10-01 11:36:57 ----A---- C:\windows\SYSWOW64\qdvd.dll 2014-10-01 11:36:57 ----A---- C:\windows\system32\qdvd.dll 2014-09-30 17:22:34 ----A---- C:\windows\SYSWOW64\shoC905.tmp 2014-09-28 11:24:13 ----A---- C:\windows\SYSWOW64\tzres.dll 2014-09-28 11:24:13 ----A---- C:\windows\system32\tzres.dll 2014-09-12 15:40:32 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service 2014-09-11 20:25:43 ----A---- C:\windows\SYSWOW64\msmpeg2vdec.dll 2014-09-11 20:25:43 ----A---- C:\windows\system32\msmpeg2vdec.dll 2014-09-11 11:46:03 ----A---- C:\windows\system32\TSWorkspace.dll 2014-09-11 11:46:02 ----A---- C:\windows\SYSWOW64\TSWorkspace.dll 2014-09-11 11:45:51 ----A---- C:\windows\SYSWOW64\d3d10warp.dll 2014-09-11 11:45:51 ----A---- C:\windows\system32\d3d10warp.dll 2014-09-09 19:07:26 ----A---- C:\awhA42E.tmp 2014-09-09 19:04:14 ----D---- C:\s 2014-09-09 19:03:21 ----D---- C:\ProgramData\IePluginServices 2014-09-09 19:03:18 ----D---- C:\ProgramData\WindowsMangerProtect 2014-09-09 19:03:16 ----D---- C:\Program Files (x86)\SupTab 2014-09-09 15:39:34 ----A---- C:\windows\SYSWOW64\installd.exe 2014-08-29 23:58:25 ----A---- C:\windows\SYSWOW64\sho334F.tmp 2014-08-28 14:43:11 ----A---- C:\windows\SYSWOW64\gdi32.dll 2014-08-28 14:43:11 ----A---- C:\windows\system32\gdi32.dll ======List of files/folders modified in the last 3 months====== 2014-11-21 11:23:27 ----D---- C:\windows\Temp 2014-11-21 11:22:16 ----A---- C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt 2014-11-21 11:16:28 ----D---- C:\windows\System32 2014-11-21 11:16:28 ----D---- C:\windows\inf 2014-11-21 11:16:28 ----A---- C:\windows\system32\PerfStringBackup.INI 2014-11-21 11:13:52 ----A---- C:\windows\SYSWOW64\log.txt 2014-11-21 11:13:17 ----SHD---- C:\windows\Installer 2014-11-21 11:13:17 ----SHD---- C:\Config.Msi 2014-11-21 11:11:48 ----D---- C:\Program Files (x86)\Origin 2014-11-21 11:11:06 ----D---- C:\windows\tracing 2014-11-21 11:10:05 ----D---- C:\windows\Minidump 2014-11-21 11:09:59 ----D---- C:\Windows 2014-11-21 11:06:08 ----D---- C:\ProgramData\Origin 2014-11-21 11:04:30 ----D---- C:\windows\system32\config 2014-11-21 11:03:51 ----HD---- C:\ProgramData 2014-11-21 00:34:22 ----SHD---- C:\System Volume Information 2014-11-21 00:33:25 ----RSD---- C:\windows\assembly 2014-11-21 00:31:48 ----D---- C:\windows\Logs 2014-11-21 00:02:22 ----D---- C:\windows\SysWOW64 2014-11-20 23:59:36 ----D---- C:\Users\Steven\AppData\Roaming\BitTorrent 2014-11-20 23:59:19 ----D---- C:\windows\debug 2014-11-20 23:43:06 ----RD---- C:\Program Files 2014-11-20 17:02:02 ----D---- C:\Users\Steven\AppData\Roaming\Origin 2014-11-20 16:57:35 ----D---- C:\Program Files (x86)\Battlelog Web Plugins 2014-11-20 15:34:44 ----A---- C:\windows\SYSWOW64\PnkBstrA.exe 2014-11-20 15:34:31 ----A---- C:\windows\SYSWOW64\PnkBstrB.exe 2014-11-20 15:19:59 ----D---- C:\windows\winsxs 2014-11-20 15:15:44 ----D---- C:\Program Files (x86)\Hearthstone 2014-11-20 15:15:33 ----D---- C:\Program Files (x86)\Battle.net 2014-11-20 14:59:37 ----D---- C:\swsetup 2014-11-20 14:29:52 ----D---- C:\windows\Prefetch 2014-11-20 14:10:26 ----D---- C:\windows\system32\catroot2 2014-11-17 01:10:18 ----D---- C:\Users\Steven\AppData\Roaming\Skype 2014-11-14 12:59:36 ----D---- C:\windows\rescache 2014-11-13 23:26:56 ----RD---- C:\Program Files (x86) 2014-11-13 23:26:49 ----D---- C:\windows\Tasks 2014-11-13 22:10:09 ----D---- C:\windows\Microsoft.NET 2014-11-12 19:26:33 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe 2014-11-12 18:00:08 ----SD---- C:\windows\system32\CompatTel 2014-11-12 18:00:07 ----D---- C:\windows\SYSWOW64\nl-NL 2014-11-12 18:00:07 ----D---- C:\windows\system32\nl-NL 2014-11-12 18:00:06 ----D---- C:\windows\system32\drivers 2014-11-12 18:00:06 ----D---- C:\Program Files\Internet Explorer 2014-11-12 18:00:05 ----D---- C:\windows\SYSWOW64\en-US 2014-11-12 18:00:04 ----D---- C:\windows\system32\en-US 2014-11-12 18:00:03 ----D---- C:\Program Files (x86)\Internet Explorer 2014-11-12 15:49:21 ----D---- C:\ProgramData\Microsoft Help 2014-11-12 15:46:35 ----RSD---- C:\windows\Fonts 2014-11-12 15:45:05 ----D---- C:\windows\system32\MRT 2014-11-12 15:38:13 ----A---- C:\windows\system32\MRT.exe 2014-11-10 00:54:52 ----D---- C:\windows\system32\DriverStore 2014-11-05 16:40:36 ----D---- C:\ProgramData\Oracle 2014-11-05 16:40:21 ----D---- C:\Program Files (x86)\Common Files 2014-11-05 16:40:05 ----D---- C:\Program Files (x86)\Java 2014-10-30 12:25:26 ----N---- C:\windows\system32\MpSigStub.exe 2014-10-28 22:03:51 ----D---- C:\ProgramData\Package Cache 2014-10-28 21:37:02 ----D---- C:\Program Files (x86)\Origin Games 2014-10-16 09:43:51 ----D---- C:\windows\SYSWOW64\Dism 2014-10-16 09:43:51 ----D---- C:\windows\system32\Dism 2014-10-16 09:43:51 ----D---- C:\Program Files\Windows Media Player 2014-10-16 09:43:51 ----D---- C:\Program Files (x86)\Windows Media Player 2014-10-16 09:43:50 ----D---- C:\windows\system32\CodeIntegrity 2014-10-16 09:43:50 ----D---- C:\windows\system32\Boot 2014-10-15 17:10:39 ----D---- C:\windows\system32\catroot 2014-10-11 20:16:27 ----D---- C:\windows\system32\drivers\nl-NL 2014-10-11 20:16:27 ----D---- C:\windows\PolicyDefinitions 2014-10-10 08:30:51 ----D---- C:\windows\system32\Tasks 2014-10-10 08:16:59 ----D---- C:\windows\SYSWOW64\wbem 2014-10-10 08:16:59 ----D---- C:\windows\system32\wbem 2014-10-10 08:12:56 ----A---- C:\windows\SYSWOW64\PerfStringBackup.INI 2014-09-11 20:44:35 ----D---- C:\Program Files\Microsoft Security Client 2014-09-11 20:44:34 ----D---- C:\Program Files (x86)\Microsoft Security Client 2014-09-09 19:18:26 ----D---- C:\windows\AppPatch ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 hpdskflt;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2012-09-07 31040] R0 iaStor;Intel AHCI Controller; C:\windows\system32\drivers\iaStor.sys [2013-02-09 568640] R0 iusb3hcs;Intel® USB 3.0 hostcontrollerswitch-stuurprogramma; C:\windows\system32\DRIVERS\iusb3hcs.sys [2014-08-08 20464] R0 MfeEpeOpal;MfeEpeOpal; C:\windows\system32\drivers\MfeEpeOpal.sys [2013-03-27 91432] R0 MfeEpePc;MfeEpePc; C:\windows\system32\drivers\MfeEpePc.sys [2013-03-27 158760] R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2014-07-17 269008] R0 PxHlpa64;PxHlpa64; C:\windows\System32\Drivers\PxHlpa64.sys [2012-03-08 58000] R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys [2010-11-21 514560] R1 PersonalSecureDrive;PersonalSecureDrive; C:\windows\System32\drivers\psd.sys [2010-01-26 44576] R2 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 125584] R3 Accelerometer;HP Mobile Data Protection Sensor; C:\windows\system32\DRIVERS\Accelerometer.sys [2012-09-07 43328] R3 amdkmdag;amdkmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2014-01-24 12760576] R3 amdkmdap;amdkmdap; C:\windows\system32\DRIVERS\atikmpag.sys [2014-01-24 619008] R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtuele adapter; C:\windows\system32\DRIVERS\AMPPAL.sys [2013-07-29 164832] R3 ARCVCAM;ARCVCAM, ArcSoft Webcam Sharing Manager Driver; C:\windows\system32\DRIVERS\ArcSoftVCapture.sys [2012-02-03 42816] R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\windows\system32\drivers\AtihdW76.sys [2014-01-24 94208] R3 e1cexpress;Intel® PRO/1000 PCI Express Network Connection Driver C; C:\windows\system32\DRIVERS\e1c62x64.sys [2014-05-02 495376] R3 ecnssndis; Mobile Broadband Driver; C:\windows\System32\Drivers\wwuss64.sys [2011-10-05 26664] R3 ecnssndisfltr; Mobile Broadband Driver Filter; C:\windows\System32\Drivers\wwussf64.sys [2011-10-05 29736] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240] R3 h36wgps;HP Mobile Broadband Module NMEA; C:\windows\system32\DRIVERS\h36wgps64.sys [2012-03-02 103184] R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2013-11-04 26936] R3 iusb3hub;Intel® USB 3.0 hub-stuurprogramma; C:\windows\system32\DRIVERS\iusb3hub.sys [2014-08-08 358896] R3 iusb3xhc;Intel® USB 3.0 uitbreidbare hostcontroller-stuurprogramma; C:\windows\system32\DRIVERS\iusb3xhc.sys [2014-08-08 795632] R3 Mbm3CBus;HP hs2350 HSPA+ Mobile Broadband Module USB Device (WDM); C:\windows\system32\DRIVERS\Mbm3CBus.sys [2013-04-22 443648] R3 Mbm3DevMt;HP Mobile Broadband Module Device Management Driver (WDM); C:\windows\system32\DRIVERS\Mbm3DevMt.sys [2013-04-22 455936] R3 Mbm3mdfl;HP Mobile Broadband Module Modem Filter; C:\windows\system32\DRIVERS\Mbm3mdfl.sys [2013-04-22 22272] R3 Mbm3Mdm;HP Mobile Broadband Module Modem Driver; C:\windows\system32\DRIVERS\Mbm3Mdm.sys [2013-04-22 508160] R3 MEIx64;Intel® Management Engine Interface ; C:\windows\system32\DRIVERS\HECIx64.sys [2013-10-25 62784] R3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series adapter stuurprogramma onder Windows 7 64 Bit; C:\windows\system32\DRIVERS\Netwsw00.sys [2013-08-22 11520512] R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144] R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576] R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840] R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208] R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\windows\system32\DRIVERS\snp2uvc.sys [2012-11-28 1866080] R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10305; C:\windows\system32\DRIVERS\stwrt64.sys [2013-03-05 543744] R3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\windows\system32\DRIVERS\serscan.sys [2009-07-14 12288] R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2014-07-04 555760] R3 TPM;TPM; C:\windows\system32\drivers\tpm.sys [2009-07-14 38400] S1 MpKsl5decc2f0;MpKsl5decc2f0; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{CA6DBD1B-2300-470D-ACDE-B6CC15A51A95}\MpKsl5decc2f0.sys [] S3 AgereSoftModem;Agere Systems Soft Modem; C:\windows\system32\DRIVERS\agrsm64.sys [2009-06-10 1146880] S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol; C:\windows\system32\DRIVERS\amppal.sys [2013-07-29 164832] S3 bcbtums;Bluetooth RAM Firmware Download USB Filter; C:\windows\system32\drivers\bcbtums.sys [2014-07-04 172760] S3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984] S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784] S3 BTHPORT;Stuurprogramma voor Bluetooth-poort; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960] S3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio; C:\windows\System32\Drivers\BTHUSB.sys [2012-05-17 80384] S3 btwampfl;btwampfl Bluetooth filter driver; \??\C:\windows\system32\drivers\btwampfl.sys [2014-07-04 598808] S3 btwaudio;Bluetooth-audioapparaat; C:\windows\system32\drivers\btwaudio.sys [2014-07-04 184144] S3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\drivers\btwavdt.sys [2014-07-04 210984] S3 BTWDPAN;Bluetooth Personal Area Network; C:\windows\system32\DRIVERS\btwdpan.sys [2012-02-02 89640] S3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2014-07-04 39976] S3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2014-07-04 21544] S3 cxbu0x64;OMNIKEY 3x21; C:\windows\system32\DRIVERS\cxbu0x64.sys [2014-04-05 191224] S3 DAMDrv;DAMDrv; C:\windows\system32\DRIVERS\DAMDrv64.sys [2012-01-31 64312] S3 dmvsc;dmvsc; C:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168] S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2013-02-05 57840] S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416] S3 JMCR;JMCR; C:\windows\system32\DRIVERS\jmcr.sys [2013-11-01 176880] S3 johci;JMicron 1394 Filter Driver; C:\windows\system32\DRIVERS\johci.sys [2013-05-31 26208] S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys [2010-11-21 165888] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720] S3 s3cap;s3cap; C:\windows\system32\drivers\vms3cap.sys [2010-11-21 6656] S3 sdbus;sdbus; C:\windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056] S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\windows\system32\DRIVERS\ssadbus.sys [2011-05-13 157672] S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 16872] S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 177640] S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\windows\system32\DRIVERS\ssadserd.sys [2011-05-13 146920] S3 storvsc;storvsc; C:\windows\system32\drivers\storvsc.sys [2010-11-21 34688] S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2013-10-02 56832] S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] S3 USBAAPL64;Apple Mobile USB Driver; C:\windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704] R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2014-01-24 239616] R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2013-07-29 772064] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-06-12 43336] R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184] R2 BTHSSecurityMgr;Intel® Centrino® Wireless Bluetooth® + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-09-12 135984] R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2014-03-06 1008344] R2 CodeMeter.exe;CodeMeter Runtime Server; C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe [2012-11-21 2571704] R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 27136] R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504] R2 DpHost;@C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [2012-07-20 494456] R2 EvtEng;Intel® PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2013-10-11 631024] R2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2012-03-14 152992] R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2013-11-04 92160] R2 HPAuto;HP Auto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [2011-02-17 682040] R2 HPFSService;File Sanitizer for HP ProtectTools; c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [2012-03-22 372824] R2 hpHotkeyMonitor;hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [2014-02-10 683296] R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2012-09-07 33600] R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-02-09 13632] R2 IePluginServices;IePlugin Services; C:\ProgramData\IePluginServices\PluginService.exe [2014-09-09 715656] R2 IFXSpMgtSrv;Security Platform Management Service; c:\Program Files (x86)\Hewlett-Packard\Embedded Security Software\ifxspmgt.exe [2012-01-27 1127800] R2 IFXTCS;Trusted Platform Core Service; c:\Program Files (x86)\Hewlett-Packard\Embedded Security Software\ifxtcs.exe [2012-01-27 984440] R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-12-10 732160] R2 Intel® ME Service;Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [2013-10-25 131032] R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [2013-10-25 165336] R2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2013-10-25 279000] R2 McAfee Endpoint Encryption Agent;McAfee Endpoint Encryption Agent; C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [2013-03-27 1327104] R2 mi-raysat_3dsmax2013_64;mental ray 3.10 Satellite for Autodesk 3ds Max 2013 64-bit; C:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe [2011-09-15 86016] R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-08-22 23784] R2 PersonalSecureDriveService;Personal Secure Drive Service; c:\Program Files (x86)\Hewlett-Packard\Embedded Security Software\IfxPsdSv.exe [2012-01-27 212344] R2 PnkBstrA;PnkBstrA; C:\windows\syswow64\PnkBstrA.exe [2014-11-20 76152] R2 RegSrvc;Intel® PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2013-10-11 154864] R2 RoxioBurnLauncher;Roxio Burn Launcher; C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe [2012-03-21 536848] R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944] R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2013-03-05 327680] R2 uArcCapture;ArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [2012-02-03 498352] R2 UNS;Intel® Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2013-10-25 366040] R3 BrYNSvc;BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [2012-06-05 266240] R3 hpCMSrv;HP Connection Manager 4 Service; C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2014-04-09 1448248] R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2013-05-13 1129760] R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2014-07-08 641352] R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-08-22 368624] R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-19 116648] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-12 267440] S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 27136] S3 ArcService;Arc Service; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [2014-01-21 88400] S3 aspnet_state;ASP.NET-statusservice; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808] S3 FLCDLOCK;HP ProtectTools Device Locking / Auditing; c:\windows\SysWOW64\flcdlock.exe [2012-01-31 477056] S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2013-02-16 1432400] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-09-20 1044816] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2013-02-05 1512448] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-19 116648] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2014-11-06 114688] S3 Intel® Capability Licensing Service TCP IP Interface;Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2012-12-10 803872] S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-04-09 289256] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-11-12 114288] S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2013-10-11 284912] S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2014-11-20 1900400] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 27136] S3 RoxMediaDB12OEM;RoxMediaDB12OEM; C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2012-03-07 1118480] S3 stllssvr;stllssvr; C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe [2011-12-08 76416] S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\windows\System32\svchost.exe [2009-07-14 27136] S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 27136] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 PdiService;Portrait Displays SDK Service; C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2012-03-09 117552] -----------------EOF-----------------