Inactive-A Your-04CB4C8045 network.

Cabal18 · 2013/04/10

[Inactive-A] Your-04CB4C8045 network.

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Database version: v2013.04.10.03

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16519
Gordon Vooght :: GORDON-PC [administrator]

Protection: Enabled

10/04/2013 12:55:09
mbam-log-2013-04-10 (12-55-09).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 226916
Time elapsed: 4 minute(s), 15 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
--------
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 8
Boot Device: \Device\HarddiskVolume2
Install Date: 10/12/2012 21:36:47
System Uptime: 10/04/2013 09:45:00 (3 hours ago)
.
Motherboard: Advent | | DT2410
Processor: Intel(R) Core(TM) i5-3330 CPU @ 3.00GHz | SOCKET 0 | 3001/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 1856 GiB total, 1658.221 GiB free.
E: is Removable
F: is CDROM ()
G: is Removable
H: is Removable
I: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP48: 26/03/2013 11:09:32 - Windows Update
RP49: 27/03/2013 12:22:20 - Installed Battlefield 2142
RP51: 29/03/2013 10:41:10 - Revo Uninstaller Pro's restore point - BrowserProtect
RP52: 30/03/2013 23:07:05 - RegCure Pro Backup
RP53: 06/04/2013 12:05:39 - RegCure Pro Backup
RP54: 09/04/2013 20:15:16 - RegCure Pro Backup
.
==== Installed Programs ======================
.
Adobe AIR
Adobe Anchor Service CS4
Adobe Anchor Service x64 CS4
Adobe Bridge CS4
Adobe CMaps CS4
Adobe CMaps x64 CS4
Adobe Color - Photoshop Specific CS4
Adobe Color EU Extra Settings CS4
Adobe Color JA Extra Settings CS4
Adobe Color NA Recommended Settings CS4
Adobe Common File Installer
Adobe Community Help
Adobe CSI CS4
Adobe CSI CS4 x64
Adobe Default Language CS4
Adobe Device Central CS4
Adobe Drive CS4
Adobe Drive CS4 x64
Adobe ExtendScript Toolkit CS4
Adobe Extension Manager CS4
Adobe Flash Player 11 Plugin
Adobe Fonts All
Adobe Fonts All x64
Adobe Linguistics CS4
Adobe Linguistics CS4 x64
Adobe Media Player
Adobe Output Module
Adobe PDF Library Files CS4
Adobe PDF Library Files x64 CS4
Adobe Photoshop CS4
Adobe Photoshop CS4 (64 Bit)
Adobe Photoshop CS4 Support
Adobe Photoshop CS5
Adobe Reader XI (11.0.02)
Adobe Search for Help
Adobe Service Manager Extension
Adobe Setup
Adobe Type Support CS4
Adobe Type Support x64 CS4
Adobe Update Manager CS4
Adobe WinSoft Linguistics Plugin
Adobe WinSoft Linguistics Plugin x64
Adobe XMP Panels CS4
AdobeColorCommonSetCMYK
Advanced Uninstaller PRO - Version 11
AMD Accelerated Video Transcoding
AMD APP SDK Runtime
AMD Catalyst Install Manager
Any Video Converter Ultimate 4.5.9
ArtRage Studio Pro
µTorrent
Auslogics Disk Defrag
Bamboo
Bamboo Dock
Call of Duty(R) - World at War(TM)
Call of Duty(R) - World at War(TM) 1.1 Patch
Call of Duty(R) - World at War(TM) 1.2 Patch
Call of Duty(R) - World at War(TM) 1.3 Patch
Call of Duty(R) - World at War(TM) 1.4 Patch
Call of Duty(R) - World at War(TM) 1.5 Patch
Call of Duty(R) - World at War(TM) 1.6 Patch
Call of Duty(R) - World at War(TM) 1.7 Patch
Call of Duty(R) 4 - Modern Warfare(TM)
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
Catalyst Control Center
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
Catalyst Control Center Localization All
ccc-utility64
CCC Help Chinese Standard
CCC Help Chinese Traditional
CCC Help Czech
CCC Help Danish
CCC Help Dutch
CCC Help English
CCC Help Finnish
CCC Help French
CCC Help German
CCC Help Greek
CCC Help Hungarian
CCC Help Italian
CCC Help Japanese
CCC Help Korean
CCC Help Norwegian
CCC Help Polish
CCC Help Portuguese
CCC Help Russian
CCC Help Spanish
CCC Help Swedish
CCC Help Thai
CCC Help Turkish
Connect
Cross Fire En
D3DX10
DC Universe Online Live
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Gadwin PrintScreen Professional
Glary Utilities Pro 2.54.0.1759
Google Chrome
Google Update Helper
Intel(R) Management Engine Components
Intel® Trusted Connect Service Client
Java 7 Update 17
Java Auto Updater
Java(TM) 6 Update 24
Junk Mail filter update
KNOWHOW APP CENTRE
kuler
Led Indicator Keyboard Driver
Malwarebytes Anti-Malware version 1.75.0.1300
MediaMonkey 4.0
Microsoft Application Error Reporting
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2010
Microsoft Office Home and Student 2010
Microsoft Office Office 64-bit Components 2010
Microsoft Office OneNote MUI (English) 2010
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2010
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared 64-bit MUI (English) 2010
Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Single Image 2010
Microsoft Office Word MUI (English) 2010
Microsoft Silverlight
Microsoft SkyDrive
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft_VC80_ATL_x86
Microsoft_VC80_ATL_x86_x64
Microsoft_VC80_CRT_x86
Microsoft_VC80_CRT_x86_x64
Microsoft_VC80_MFC_x86
Microsoft_VC80_MFC_x86_x64
Microsoft_VC80_MFCLOC_x86
Microsoft_VC80_MFCLOC_x86_x64
Microsoft_VC90_ATL_x86
Microsoft_VC90_ATL_x86_x64
Microsoft_VC90_CRT_x86
Microsoft_VC90_CRT_x86_x64
Microsoft_VC90_MFC_x86
Microsoft_VC90_MFC_x86_x64
Movie Maker
MSVCRT
MSVCRT_amd64
MSVCRT110
MSVCRT110_amd64
Nero 12
Nero Audio Pack 1
Nero BackItUp
Nero BackItUp Help (CHM)
Nero Blu-ray Player
Nero Blu-ray Player Help (CHM)
Nero Burning ROM
Nero Burning ROM Help (CHM)
Nero ControlCenter
Nero ControlCenter Help (CHM)
Nero Core Components
Nero Disc Menus Basic
Nero Effects Basic
Nero Express
Nero Express Help (CHM)
Nero Kwik Media
Nero Kwik Media Help (CHM)
Nero Kwik Themes Basic
Nero Launcher
Nero PiP Effects Basic
Nero Recode
Nero Recode Help (CHM)
Nero RescueAgent
Nero RescueAgent Help (CHM)
Nero SharedVideoCodecs
Nero Update
Nero Video
Nero Video Help (CHM)
neroxml
Pando Media Booster
PDF Settings CS4
PDF Settings CS5
Photo Common
Photo Gallery
Photoshop Camera Raw
Photoshop Camera Raw_x64
Prerequisite installer
Radioplayer
Realtek Ethernet Controller Driver
Realtek High Definition Audio Driver
RegCure Pro
Security Update for Microsoft Excel 2010 (KB2597126) 32-Bit Edition
Security Update for Microsoft Filter Pack 2.0 (KB2553501) 32-Bit Edition
Security Update for Microsoft InfoPath 2010 (KB2687417) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553091)
Security Update for Microsoft Office 2010 (KB2553096)
Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2589337) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687501) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687510) 32-Bit Edition
Security Update for Microsoft OneNote 2010 (KB2760600) 32-Bit Edition
Security Update for Microsoft Visio Viewer 2010 (KB2687505) 32-Bit Edition
Security Update for Microsoft Word 2010 (KB2760410) 32-Bit Edition
Skypeâ„¢ 6.1
Steam
Suite Shared Configuration CS4
Sumo Paint Bamboo 2.2
Temp File Cleaner
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
WBFS Manager 3.0
WebTablet FB Plugin
WebTablet IE Plugin
WebTablet Netscape Plugin
Welcome App (Start-up experience)
Windows Live Communications Platform
Windows Live Essentials
Windows Live Installer
Windows Live Mail
Windows Live Messenger
Windows Live MIME IFilter
Windows Live Photo Common
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
WinRAR archiver
World of Warcraft
Xfire (remove only)
.
==== Event Viewer Messages From Past Week ========
.
10/04/2013 09:46:53, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect.
10/04/2013 09:46:53, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
10/04/2013 09:46:53, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "Unavailable" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}
10/04/2013 09:46:38, Error: Service Control Manager [7031] - The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
10/04/2013 09:46:38, Error: Service Control Manager [7024] -
10/04/2013 09:45:37, Error: Microsoft-Windows-DNS-Client [1012] - There was an error while attempting to read the local hosts file.
09/04/2013 09:09:50, Error: Service Control Manager [7000] - The Yontoo Desktop Updater service failed to start due to the following error: The system cannot find the file specified.
07/04/2013 19:16:00, Error: Schannel [36888] - A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 51. The Windows SChannel error state is 900.
.
==== End Of File ===========================
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2013-04-10 12:44:16
-----------------------------
12:44:16.841 OS Version: Windows x64 6.2.9200
12:44:16.842 Number of processors: 4 586 0x3A09
12:44:16.842 ComputerName: GORDON-PC UserName:
12:44:16.938 Initialze error 1
12:44:24.448 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000039
12:44:24.450 Disk 0 Vendor: WDC_WD20EARX-22PASB0 51.0AB51 Size: 1907729MB BusType: 11
12:44:24.467 Disk 0 MBR read successfully
12:44:24.469 Disk 0 MBR scan
12:44:24.470 Disk 0 unknown MBR code
12:44:24.473 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1
12:44:24.475 Disk 0 scanning C:\Windows\system32\drivers
12:44:24.476 Service scanning
12:44:25.247 Modules scanning
12:44:25.249 Disk 0 trace - called modules:
12:44:25.253 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys storport.sys hal.dll storahci.sys
12:44:25.255 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007d2f060]
12:44:25.258 3 CLASSPNP.SYS[fffff88000b268aa] -> nt!IofCallDriver -> [0xfffffa8007310040]
12:44:25.260 5 ACPI.sys[fffff88001023a91] -> nt!IofCallDriver -> \Device\00000039[0xfffffa80073117f0]
12:44:25.392 Scan finished successfully
12:45:43.496 Disk 0 MBR has been saved successfully to "C:\Users\Gordon Vooght\Documents\MBR.dat "
12:45:43.529 The log file has been saved successfully to "C:\Users\Gordon Vooght\Documents\aswMBR.txt "

PeteC · 2013/04/10

To assist our Malware Removal Analyst it is essential that you ....

Tell us why you are posting, with as much relevant detail as possible. For example, if you are posting because your anti virus finds an infection but can't remove it, tell us if you can, what the name of the file is, where the file is located, what name your anti virus labels it as, etc.
Click to expand...

http://www.windowsbbs.com/malware-virus-removal/announcements.html

broni · 2013/04/10

...and I still need DDS.txt log.

Cabal18 · 2013/04/11

I have a phone icon and "YOUR-04CB4C8045" on my pc so idea what it is ? or how remove it google say it a highjack from a mobile phone ? .

Cabal18 · 2013/04/11

cant put dds in as it too long is there a attch I can use ?

PeteC · 2013/04/11

Spread it over 2 or more posts here.

Cabal18 · 2013/04/11

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 10.0.9200.16519 BrowserJavaVersion: 10.17.2
Run by Gordon Vooght at 11:43:51 on 2013-04-11
#Option Extended Search is enabled.
#Option Whitelisting is disabled.
Microsoft Windows 8 6.2.9200.0.1252.44.1033.18.8148.6131 [GMT 1:00]
.
AV: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\dwm.exe
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\atieclxx.exe
C:\Program Files\Tablet\Pen\Pen_TouchService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\system32\dashost.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Tablet\Pen\Pen_Tablet.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\taskhostex.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\Explorer.EXE
C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Tablet\Pen\Pen_Tablet.exe
C:\Program Files (x86)\Glary Utilities\Integrator.exe
C:\Windows\System32\WUDFHost.exe
C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
C:\Program Files (x86)\Led Indicator Keyboard Driver\KeyboardIndicator.exe
C:\Program Files (x86)\Gadwin Systems\PrintScreenPro\PrintScreenPro.exe
C:\Windows\splwow64.exe
C:\Program Files (x86)\KNOWHOW\KNOWHOWAPPCENTRE\bin\ismagent.exe
C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Nero\Update\NASvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler.exe
C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler64.exe
C:\Windows\System32\Taskmgr.exe
C:\Program Files (x86)\Glary Utilities\regrepair.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Windows\System32\RuntimeBroker.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
uLocal Page = C:\Windows\System32\blank.htm
uSearch Bar = Preserve
mStart Page = hxxp://www.bigseekpro.com/tempcleaner/{8CE9CDA3-641C-47A5-B045-FEF83E808A9A}
mLocal Page = C:\Windows\SysWOW64\blank.htm
mSearch Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
mDefault_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
mDefault_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
uURLSearchHooks: Microsoft Url Search Hook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:

\Windows\SysWOW64\ieframe.dll
mWinlogon: Shell = explorer.exe
mWinlogon: Userinit = userinit.exe,
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files

(x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files

(x86)\Java\jre7\bin\ssv.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program

Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - <orphaned>
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program

Files (x86)\Java\jre7\bin\jp2ssv.dll
uRun: [LedIndicatorKeyboardDriver] "C:\Program Files (x86)\Led Indicator Keyboard Driver

\KeyboardIndicator.exe" showhide
uRun: [Gadwin PrintScreen Pro] "C:\Program Files (x86)\Gadwin Systems\PrintScreenPro

\PrintScreenPro.exe" /nosplash
mRun: [KNOWHOW APP CENTRE] "C:\Program Files (x86)\KNOWHOW\KNOWHOWAPPCENTRE\bin

\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe

\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
mRun: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe

\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe "
mRun: [BambooCore] C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"

MSRun
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update

\jusched.exe "
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: ForceActiveDesktopOn = dword:0
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-System: EnableVirtualization = dword:1
mPolicies-System: EnableInstallerDetection = dword:1
mPolicies-System: PromptOnSecureDesktop = dword:1
mPolicies-System: EnableLUA = dword:1
mPolicies-System: EnableSecureUIAPaths = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ValidateAdminCodeSignatures = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: EnableCursorSuppression = dword:1
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: dontdisplaylastusername = dword:0
mPolicies-System: scforceoption = dword:0
mPolicies-System: shutdownwithoutlogon = dword:1
mPolicies-System: undockwithoutlogon = dword:1
mPolicies-System: FilterAdministratorToken = dword:0
mPolicies-System: EnableLinkedConnections = dword:1
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} -

<orphaned>
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:

\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:

\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
LSP: %SystemRoot%\system32\mswsock.dll
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} -

hxxp://www.pcpitstop.com/betapit/PCPitStop.CAB
DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} -
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} -

hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-

1_7_0_09-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-

1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-

1_6_0_24-windows-i586.cab
TCP: NameServer = 192.168.0.1
TCP: Interfaces\{5501DBE1-77D3-4F06-AE0E-EF582C45AB90} : DHCPNameServer = 192.168.0.1
TCP: Interfaces\{DC97CEAA-9E88-4138-AB4F-169621B5D3A2} : DHCPNameServer = 192.168.0.1
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows

\SysWOW64\mscoree.dll
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows

\SysWOW64\mscoree.dll
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows

\SysWOW64\mscoree.dll
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common

Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll
Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll
Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll
Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows

\SysWOW64\mshtml.dll
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - LocalServer32 - <no file>
Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll
Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files (x86)\Common

Files\Microsoft Shared\Help\hxds.dll
Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - LocalServer32 - <no file>
Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common

Files\Skype\Skype4COM.dll
Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll
Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - <orphaned>
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
Name-Space Handler: mk\* - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows

\SysWOW64\itss.dll
SSODL: WebCheck - <orphaned>
SecurityProviders: SecurityProviders = credssp.dll
LSA: Authentication Packages = msv1_0
LSA: Notification Packages = scecli
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg pku2u livessp
SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 sxssrv,4
mASetup: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\unregmp2.exe

/ShowWMP
mASetup: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "C:\Program Files (x86)\Windows Mail

\WinMail.exe" OCInstallUserConfigOE
mASetup: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\System32\unregmp2.exe

/FirstLogon
mASetup: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:

\Windows\SysWOW64\mscories.dll,Install
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome

\Application\26.0.1410.64\Installer\chrmstp.exe" --configure-user-settings --verbose-

logging --system-level --multi-install --chrome
mASetup: {A6EADE66-0000-0000-484E-7E8A45000000} - "C:\Windows\SysWOW64\Rundll32.exe" "C:

\Program Files (x86)\Adobe\Reader 11.0\Esl\AiodLite.dll ",CreateReaderUserSettings
CLSID: {603D3801-BD81-11d0-A3A5-00C04FD706EC} - C:\Windows\System32\shell32.dll
x64-mStart Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
x64-mLocal Page = C:\Windows\System32\blank.htm
x64-mSearch Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
x64-mDefault_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
x64-mDefault_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
x64-mWinlogon: Shell = explorer.exe
x64-mWinlogon: Userinit = C:\Windows\System32\userinit.exe,
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program

Files\Microsoft Office\Office14\URLREDIR.DLL
x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
x64-mPolicies-Explorer: ForceActiveDesktopOn = dword:0
x64-mPolicies-Explorer: NoActiveDesktopChanges = dword:1
x64-mPolicies-Explorer: NoActiveDesktop = dword:1
x64-mPolicies-System: EnableVirtualization = dword:1
x64-mPolicies-System: EnableInstallerDetection = dword:1
x64-mPolicies-System: PromptOnSecureDesktop = dword:1
x64-mPolicies-System: EnableLUA = dword:1
x64-mPolicies-System: EnableSecureUIAPaths = dword:1
x64-mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
x64-mPolicies-System: ValidateAdminCodeSignatures = dword:0
x64-mPolicies-System: EnableUIADesktopToggle = dword:0
x64-mPolicies-System: EnableCursorSuppression = dword:1
x64-mPolicies-System: ConsentPromptBehaviorUser = dword:3
x64-mPolicies-System: dontdisplaylastusername = dword:0
x64-mPolicies-System: scforceoption = dword:0
x64-mPolicies-System: shutdownwithoutlogon = dword:1
x64-mPolicies-System: undockwithoutlogon = dword:1
x64-mPolicies-System: FilterAdministratorToken = dword:0
x64-mPolicies-System: EnableLinkedConnections = dword:1
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} -

C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} -

C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
x64-Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows

\System32\mscoree.dll
x64-Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows

\System32\mscoree.dll
x64-Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows

\System32\mscoree.dll
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common

Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows

\System32\mshtml.dll
x64-Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll
x64-Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows

\System32\MSVidCtl.dll
x64-Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows

\System32\urlmon.dll
x64-Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll
x64-Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows

\System32\mshtml.dll
x64-Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - <orphaned>
x64-Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows

\System32\urlmon.dll

Cabal18 · 2013/04/11

x64-Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows

\System32\mshtml.dll
x64-Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows

\System32\inetcomm.dll
x64-Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - <orphaned>
x64-Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll
x64-Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - <orphaned>
x64-Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll
x64-Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows

\System32\mshtml.dll
x64-Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Name-Space Handler: mk\* - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows

\System32\itss.dll
x64-SSODL: WebCheck - <orphaned>
x64-mASetup: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\unregmp2.exe

/ShowWMP
x64-mASetup: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\Windows\System32\regsvr32.exe /s

/n /i:/UserInstall C:\Windows\System32\themeui.dll
x64-mASetup: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "C:\Program Files (x86)\Windows Mail

\WinMail.exe" OCInstallUserConfigOE
x64-mASetup: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\System32\unregmp2.exe

/FirstLogon
x64-mASetup: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U C:\Windows

\System32\shell32.dll
x64-mASetup: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -

UserConfig
x64-mASetup: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:

\Windows\System32\mscories.dll,Install
x64-CLSID: {603D3801-BD81-11d0-A3A5-00C04FD706EC} - C:\Windows\System32\shell32.dll
.
============= SERVICES / DRIVERS ===============
.
R0 ACPI;Microsoft ACPI Driver;C:\Windows\System32\Drivers\acpi.sys [2012-12-24 425192]
R0 CLFS;Common Log (CLFS);C:\Windows\System32\Drivers\clfs.sys [2012-7-26 361200]
R0 CNG;CNG;C:\Windows\System32\Drivers\cng.sys [2012-12-15 562392]
R0 disk;Disk Driver;C:\Windows\System32\Drivers\disk.sys [2012-7-26 102640]
R0 FileInfo;File Information FS MiniFilter;C:\Windows\System32\Drivers\fileinfo.sys [2012-

7-26 71920]
R0 FltMgr;FltMgr;C:\Windows\System32\Drivers\fltMgr.sys [2012-7-26 374512]
R0 fvevol;BitLocker Drive Encryption Filter Driver;C:\Windows\System32\Drivers\fvevol.sys

[2012-7-26 465136]
R0 KSecDD;KSecDD;C:\Windows\System32\Drivers\ksecdd.sys [2012-7-26 100080]
R0 KSecPkg;KSecPkg;C:\Windows\System32\Drivers\ksecpkg.sys [2012-12-15 172264]
R0 mountmgr;Mount Point Manager;C:\Windows\System32\Drivers\mountmgr.sys [2012-7-26 93936]
R0 msisadrv;msisadrv;C:\Windows\System32\Drivers\msisadrv.sys [2012-7-26 17136]
R0 Mup;Mup;C:\Windows\System32\Drivers\mup.sys [2012-7-26 83696]
R0 NDIS;NDIS System Driver;C:\Windows\System32\Drivers\ndis.sys [2013-3-15 993512]
R0 partmgr;Partition Manager;C:\Windows\System32\Drivers\partmgr.sys [2013-2-16 91880]
R0 pci;PCI Bus Driver;C:\Windows\System32\Drivers\pci.sys [2012-7-26 234224]
R0 pcw;Performance Counters for Windows Driver;C:\Windows\System32\Drivers\pcw.sys [2012-7

-26 52464]
R0 rdyboost;ReadyBoost;C:\Windows\System32\Drivers\rdyboost.sys [2012-7-26 217328]
R0 Tcpip;TCP/IP Protocol Driver;C:\Windows\System32\Drivers\tcpip.sys [2013-3-15 2226408]
R0 vdrvroot;Microsoft Virtual Drive Enumerator;C:\Windows\System32\Drivers\vdrvroot.sys

[2012-7-26 36080]
R0 volmgr;Volume Manager Driver;C:\Windows\System32\Drivers\volmgr.sys [2012-7-26 83184]
R0 volmgrx;Dynamic Volume Manager;C:\Windows\System32\Drivers\volmgrx.sys [2012-7-26

378608]
R0 volsnap;Storage volumes;C:\Windows\System32\Drivers\volsnap.sys [2012-7-26 332016]
R0 Wdf01000;Kernel Mode Driver Frameworks service;C:\Windows\System32\Drivers\Wdf01000.sys

[2013-2-16 785504]
R1 AFD;Ancillary Function Driver for Winsock;C:\Windows\System32\Drivers\afd.sys [2012-12-

13 560640]
R1 Beep;Beep;C:\Windows\System32\Drivers\beep.sys [2012-7-26 7680]
R1 cdrom;CD-ROM Driver;C:\Windows\System32\Drivers\cdrom.sys [2012-7-26 174080]
R1 Dfsc;DFS Namespace Client Driver;C:\Windows\System32\Drivers\dfsc.sys [2012-7-26 118784]
R1 discache;System Attribute Cache;C:\Windows\System32\Drivers\discache.sys [2012-7-26

50688]
R1 Msfs;Msfs;C:\Windows\System32\Drivers\msfs.sys [2012-7-26 26112]
R1 mssmbios;Microsoft System Management BIOS Driver;C:\Windows\System32\Drivers

\mssmbios.sys [2012-7-26 37616]
R1 NetBIOS;NetBIOS Interface;C:\Windows\System32\Drivers\netbios.sys [2012-7-26 46080]
R1 NetBT;NetBT;C:\Windows\System32\Drivers\netbt.sys [2012-7-26 331776]
R1 Npfs;Npfs;C:\Windows\System32\Drivers\npfs.sys [2012-7-26 49152]
R1 nsiproxy;NSI Proxy Service Driver;C:\Windows\System32\Drivers\nsiproxy.sys [2012-7-26

34304]
R1 Null;Null;C:\Windows\System32\Drivers\null.sys [2012-7-26 5632]
R1 Psched;QoS Packet Scheduler;C:\Windows\System32\Drivers\pacer.sys [2012-7-26 145408]
R1 rdbss;Redirected Buffering Sub System;C:\Windows\System32\Drivers\rdbss.sys [2012-7-26

423936]
R1 tdx;NetIO Legacy TDI Support Driver;C:\Windows\System32\Drivers\tdx.sys [2012-7-26

117248]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\Drivers\vwififlt.sys [2012-7-26

64000]
R1 Wanarpv6;Remote Access IPv6 ARP Driver;C:\Windows\System32\Drivers\wanarp.sys [2012-7-26

83456]
R2 adfs;adfs;C:\Windows\System32\Drivers\adfs.sys [2008-6-27 88632]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe

\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe

[2012-12-19 240640]
R2 AudioEndpointBuilder;Windows Audio Endpoint Builder;C:\Windows\System32\svchost.exe -k

LocalSystemNetworkRestricted [2012-7-26 30208]
R2 Audiosrv;Windows Audio;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

[2012-7-26 30208]
R2 BFE;Base Filtering Engine;C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork

[2012-7-26 30208]
R2 BITS;Background Intelligent Transfer Service;C:\Windows\System32\svchost.exe -k netsvcs

[2012-7-26 30208]
R2 CryptSvc;Cryptographic Services;C:\Windows\System32\svchost.exe -k NetworkService [2012

-7-26 30208]
R2 DcomLaunch;DCOM Server Process Launcher;C:\Windows\System32\svchost.exe -k DcomLaunch

[2012-7-26 30208]
R2 Dhcp;DHCP Client;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2012

-7-26 30208]
R2 Dnscache;DNS Client;C:\Windows\System32\svchost.exe -k NetworkService [2012-7-26 30208]
R2 DPS;Diagnostic Policy Service;C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork

[2012-7-26 30208]
R2 EventLog;Windows Event Log;C:\Windows\System32\svchost.exe -k

LocalServiceNetworkRestricted [2012-7-26 30208]
R2 EventSystem;COM+ Event System;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26

30208]
R2 FontCache;Windows Font Cache Service;C:\Windows\System32\svchost.exe -k LocalService

[2012-7-26 30208]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service

Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-4-20 635104]
R2 iphlpsvc;IP Helper;C:\Windows\System32\svchost.exe -k NetSvcs [2012-7-26 30208]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files

(x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe [2012-8-23 165760]
R2 LanmanServer;Server;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 LanmanWorkstation;Workstation;C:\Windows\System32\svchost.exe -k NetworkService [2012-7

-26 30208]
R2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver;C:\Windows\System32\Drivers

\lltdio.sys [2012-7-26 60416]
R2 lmhosts;TCP/IP NetBIOS Helper;C:\Windows\System32\svchost.exe -k

LocalServiceNetworkRestricted [2012-7-26 30208]
R2 LMS;Intel(R) Management and Security Application Local Management Service;C:\Program

Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-8-23 276864]
R2 luafv;UAC File Virtualization;C:\Windows\System32\Drivers\luafv.sys [2012-7-26 134144]
R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware

\mbamscheduler.exe [2013-1-15 418376]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware

\mbamservice.exe [2013-1-15 701512]
R2 MMCSS;Multimedia Class Scheduler;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26

30208]
R2 MpsSvc;Windows Firewall;C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork [2012-

7-26 30208]
R2 NativeWifiP;NativeWiFi Filter;C:\Windows\System32\Drivers\nwifi.sys [2012-7-26 427520]
R2 NAUpdate;Nero Update;C:\Program Files (x86)\Nero\Update\NASvc.exe [2012-7-13 769432]
R2 NlaSvc;Network Location Awareness;C:\Windows\System32\svchost.exe -k NetworkService

[2012-7-26 30208]
R2 nsi;Network Store Interface Service;C:\Windows\System32\svchost.exe -k LocalService

[2012-7-26 30208]
R2 PcaSvc;Program Compatibility Assistant Service;C:\Windows\System32\svchost.exe -k

LocalSystemNetworkRestricted [2012-7-26 30208]
R2 PEAUTH;PEAUTH;C:\Windows\System32\Drivers\PEAuth.sys [2012-7-26 804864]
R2 Power;Power;C:\Windows\System32\svchost.exe -k DcomLaunch [2012-7-26 30208]
R2 ProfSvc;User Profile Service;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26

30208]
R2 RpcEptMapper;RPC Endpoint Mapper;C:\Windows\System32\svchost.exe -k RPCSS [2012-7-26

30208]
R2 RpcSs;Remote Procedure Call (RPC);C:\Windows\System32\svchost.exe -k rpcss [2012-7-26

30208]
R2 rspndr;Link-Layer Topology Discovery Responder;C:\Windows\System32\Drivers\rspndr.sys

[2012-7-26 78848]
R2 SamSs;Security Accounts Manager;C:\Windows\System32\lsass.exe [2012-7-26 35840]
R2 Schedule;Task Scheduler;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 secdrv;Security Driver;C:\Windows\System32\Drivers\secdrv.sys [2012-7-26 23040]
R2 seclogon;Secondary Logon;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 SENS;System Event Notification Service;C:\Windows\System32\svchost.exe -k netsvcs [2012

-7-26 30208]
R2 ShellHWDetection;Shell Hardware Detection;C:\Windows\System32\svchost.exe -k netsvcs

[2012-7-26 30208]
R2 Spooler;Print Spooler;C:\Windows\System32\spoolsv.exe [2012-7-26 769024]
R2 stisvc;Windows Image Acquisition (WIA);C:\Windows\System32\svchost.exe -k imgsvc [2012-

7-26 30208]
R2 SysMain;Superfetch;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

[2012-7-26 30208]
R2 TabletInputService;Touch Keyboard and Handwriting Panel Service;C:\Windows

\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
R2 TabletServicePen;TabletServicePen;C:\Program Files\Tablet\Pen\Pen_Tablet.exe [2013-1-3

6581624]
R2 tcpipreg;TCP/IP Registry Compatibility;C:\Windows\System32\Drivers\tcpipreg.sys [2012-7

-26 45056]
R2 Themes;Themes;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 TouchServicePen;Wacom Consumer Touch Service;C:\Program Files\Tablet\Pen

\Pen_TouchService.exe [2013-1-3 528760]
R2 TrkWks;Distributed Link Tracking Client;C:\Windows\System32\svchost.exe -k

LocalSystemNetworkRestricted [2012-7-26 30208]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program

Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-8-23 364416]
R2 WinDefend;Windows Defender Service;C:\Program Files\Windows Defender\MsMpEng.exe [2013-

3-26 14920]
R2 Winmgmt;Windows Management Instrumentation;C:\Windows\System32\svchost.exe -k netsvcs

[2012-7-26 30208]
R2 WlanSvc;WLAN AutoConfig;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

[2012-7-26 30208]
R2 WMPNetworkSvc;Windows Media Player Network Sharing Service;C:\Program Files\Windows

Media Player\wmpnetwk.exe [2012-7-26 1314304]
R2 wscsvc;Security Center;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

[2012-7-26 30208]
R2 WSearch;Windows Search;C:\Windows\System32\SearchIndexer.exe [2012-12-15 816128]
R3 AeLookupSvc;Application Experience;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26

30208]
R3 amdkmdag;amdkmdag;C:\Windows\System32\Drivers\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap;C:\Windows\System32\Drivers\atikmpag.sys [2012-12-19 552960]
R3 anvsnddrv;AnvSoft Virtual Sound Device;C:\Windows\System32\Drivers\anvsnddrv.sys [2013-

1-16 33872]
R3 Appinfo;Application Information;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26

30208]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\Drivers

\AtihdW86.sys [2012-12-21 104184]
R3 bowser;Browser Support Driver;C:\Windows\System32\Drivers\bowser.sys [2012-7-26 101888]
R3 CompositeBus;Composite Bus Enumerator Driver;C:\Windows\System32\Drivers

\CompositeBus.sys [2012-7-26 36352]
R3 DXGKrnl;LDDM Graphics Subsystem;C:\Windows\System32\Drivers\dxgkrnl.sys [2013-2-16

1448168]
R3 fastfat;FAT12/16/32 File System Driver;C:\Windows\System32\Drivers\fastfat.sys [2012-7-

26 210672]
R3 fdPHost;Function Discovery Provider Host;C:\Windows\System32\svchost.exe -k LocalService

[2012-7-26 30208]
R3 FDResPub;Function Discovery Resource Publication;C:\Windows\System32\svchost.exe -k

LocalServiceAndNoImpersonation [2012-7-26 30208]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio;C:\Windows\System32\Drivers

\hdaudbus.sys [2012-12-24 71168]
R3 hidserv;Human Interface Device Access;C:\Windows\System32\svchost.exe -k

LocalSystemNetworkRestricted [2012-7-26 30208]
R3 HidUsb;Microsoft HID Class Driver;C:\Windows\System32\Drivers\hidusb.sys [2012-7-26

27648]
R3 HomeGroupListener;HomeGroup Listener;C:\Windows\System32\svchost.exe -k

LocalSystemNetworkRestricted [2012-7-26 30208]
R3 HomeGroupProvider;HomeGroup Provider;C:\Windows\System32\svchost.exe -k

LocalServiceNetworkRestricted [2012-7-26 30208]
R3 HTTP;HTTP Service;C:\Windows\System32\Drivers\http.sys [2012-12-13 859136]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM);C:\Windows\System32\Drivers

\RTKVHD64.sys [2012-8-23 4065296]
R3 intelppm;Intel Processor Driver;C:\Windows\System32\Drivers\intelppm.sys [2012-12-13

89088]
R3 kbdclass;Keyboard Class Driver;C:\Windows\System32\Drivers\kbdclass.sys [2012-7-26

48368]
R3 kbdhid;Keyboard HID Driver;C:\Windows\System32\Drivers\kbdhid.sys [2012-7-26 29184]
R3 ksthunk;Kernel Streaming Thunks;C:\Windows\System32\Drivers\ksthunk.sys [2012-7-26

21376]
R3 MBAMProtector;MBAMProtector;C:\Windows\System32\Drivers\mbam.sys [2012-12-11 25928]
R3 MEIx64;Intel(R) Management Engine Interface ;C:\Windows\System32\Drivers\HECIx64.sys

[2012-8-23 62784]
R3 monitor;Microsoft Monitor Class Function Driver Service;C:\Windows\System32\Drivers

\monitor.sys [2012-7-26 30720]
R3 mouclass;Mouse Class Driver;C:\Windows\System32\Drivers\mouclass.sys [2012-7-26 45808]
R3 mouhid;Mouse HID Driver;C:\Windows\System32\Drivers\mouhid.sys [2012-7-26 26112]
R3 mpsdrv;Windows Firewall Authorization Driver;C:\Windows\System32\Drivers\mpsdrv.sys

[2012-12-15 74752]
R3 mrxsmb;SMB MiniRedirector Wrapper and Engine;C:\Windows\System32\Drivers\mrxsmb.sys

[2013-3-15 370688]
R3 mrxsmb10;SMB 1.x MiniRedirector;C:\Windows\System32\Drivers\mrxsmb10.sys [2012-7-26

279552]
R3 mrxsmb20;SMB 2.0 MiniRedirector;C:\Windows\System32\Drivers\mrxsmb20.sys [2013-3-15

215552]
R3 NdisTapi;Remote Access NDIS TAPI Driver;C:\Windows\System32\Drivers\ndistapi.sys [2012-

7-26 25088]
R3 Ndisuio;NDIS Usermode I/O Protocol;C:\Windows\System32\Drivers\ndisuio.sys [2012-7-26

58880]
R3 NdisWan;Remote Access NDIS WAN Driver;C:\Windows\System32\Drivers\ndiswan.sys [2012-7-26

174080]

Cabal18 · 2013/04/11

R3 NDProxy;NDIS Proxy;C:\Windows\System32\Drivers\ndproxy.sys [2012-7-26 60416]
R3 netprofm;Network List Service;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26

30208]
R3 Ntfs;Ntfs;C:\Windows\System32\Drivers\ntfs.sys [2013-3-15 1933544]
R3 p2pimsvc;Peer Networking Identity Manager;C:\Windows\System32\svchost.exe -k

LocalServicePeerNet [2012-7-26 30208]
R3 p2psvc;Peer Networking Grouping;C:\Windows\System32\svchost.exe -k LocalServicePeerNet

[2012-7-26 30208]
R3 Parport;Parallel port driver;C:\Windows\System32\Drivers\parport.sys [2012-7-26 105984]
R3 PlugPlay;Plug and Play;C:\Windows\System32\svchost.exe -k DcomLaunch [2012-7-26 30208]
R3 PNRPsvc;Peer Name Resolution Protocol;C:\Windows\System32\svchost.exe -k

LocalServicePeerNet [2012-7-26 30208]
R3 PolicyAgent;IPsec Policy Agent;C:\Windows\System32\svchost.exe -k

NetworkServiceNetworkRestricted [2012-7-26 30208]
R3 PptpMiniport;WAN Miniport (PPTP);C:\Windows\System32\Drivers\raspptp.sys [2012-7-26

114176]
R3 RasAgileVpn;WAN Miniport (IKEv2);C:\Windows\System32\Drivers\agilevpn.sys [2012-7-26

68608]
R3 Rasl2tp;WAN Miniport (L2TP);C:\Windows\System32\Drivers\rasl2tp.sys [2012-7-26 124928]
R3 RasPppoe;Remote Access PPPOE Driver;C:\Windows\System32\Drivers\raspppoe.sys [2012-7-26

81920]
R3 RasSstp;WAN Miniport (SSTP);C:\Windows\System32\Drivers\rassstp.sys [2012-7-26 92672]
R3 rdpbus;Remote Desktop Device Redirector Bus Driver;C:\Windows\System32\Drivers

\rdpbus.sys [2012-7-26 22528]
R3 RTL8168;Realtek 8168 NT Driver;C:\Windows\System32\Drivers\Rt630x64.sys [2012-8-23

683664]
R3 Serenum;Serenum Filter Driver;C:\Windows\System32\Drivers\serenum.sys [2012-7-26 23040]
R3 Serial;Serial port driver;C:\Windows\System32\Drivers\serial.sys [2012-7-26 76800]
R3 srv;Server SMB 1.xxx Driver;C:\Windows\System32\Drivers\srv.sys [2012-7-26 416768]
R3 srv2;Server SMB 2.xxx Driver;C:\Windows\System32\Drivers\srv2.sys [2013-3-15 622080]
R3 srvnet;srvnet;C:\Windows\System32\Drivers\srvnet.sys [2013-3-15 247808]
R3 SSDPSRV;SSDP Discovery;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation

[2012-7-26 30208]
R3 swenum;Software Bus Driver;C:\Windows\System32\Drivers\swenum.sys [2012-7-26 13680]
R3 TPM;TPM;C:\Windows\System32\Drivers\tpm.sys [2012-12-24 148712]
R3 tunnel;Microsoft Tunnel Miniport Adapter Driver;C:\Windows\System32\Drivers\tunnel.sys

[2012-7-26 149504]
R3 umbus;UMBus Enumerator Driver;C:\Windows\System32\Drivers\umbus.sys [2012-7-26 48128]
R3 upnphost;UPnP Device Host;C:\Windows\System32\svchost.exe -k

LocalServiceAndNoImpersonation [2012-7-26 30208]
R3 usbccgp;Microsoft USB Generic Parent Driver;C:\Windows\System32\Drivers\usbccgp.sys

[2012-7-26 120832]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver;C:\Windows

\System32\Drivers\usbehci.sys [2012-12-13 79080]
R3 usbhub;Microsoft USB Standard Hub Driver;C:\Windows\System32\Drivers\usbhub.sys [2013-3

-15 496872]
R3 USBSTOR;USB Mass Storage Driver;C:\Windows\System32\Drivers\USBSTOR.SYS [2012-7-26

119024]
R3 VaultSvc;Credential Manager;C:\Windows\System32\lsass.exe [2012-7-26 35840]
R3 wacommousefilter;Wacom Mouse Filter Driver;C:\Windows\System32\Drivers

\wacommousefilter.sys [2013-1-3 12848]
R3 wacomvhid;Wacom Virtual Hid Driver;C:\Windows\System32\Drivers\wacomvhid.sys [2013-1-3

16168]
R3 WdiServiceHost;Diagnostic Service Host;C:\Windows\System32\svchost.exe -k LocalService

[2012-7-26 30208]
R3 WdiSystemHost;Diagnostic System Host;C:\Windows\System32\svchost.exe -k

LocalSystemNetworkRestricted [2012-7-26 30208]
R3 WinHttpAutoProxySvc;WinHTTP Web Proxy Auto-Discovery Service;C:\Windows

\System32\svchost.exe -k LocalService [2012-7-26 30208]
R3 WPDBusEnum;Portable Device Enumerator Service;C:\Windows\System32\svchost.exe -k

LocalSystemNetworkRestricted [2012-7-26 30208]
R3 WudfPf;User Mode Driver Frameworks Platform Driver;C:\Windows\System32\Drivers

\WUDFPf.sys [2012-7-26 87040]
R3 WUDFRd;Windows Driver Foundation - User-mode Driver Framework Reflector;C:\Windows

\System32\Drivers\WUDFRd.sys [2012-7-26 198656]
R3 wudfsvc;Windows Driver Foundation - User-mode Driver Framework;C:\Windows

\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
R3 WUDFWpdFs;WUDFWpdFs;C:\Windows\System32\Drivers\WUDFRd.sys [2012-7-26 198656]
R3 WUDFWpdMtp;WUDFWpdMtp;C:\Windows\System32\Drivers\WUDFRd.sys [2012-7-26 198656]
S0 hwpolicy;Hardware Policy Driver;C:\Windows\System32\Drivers\hwpolicy.sys [2012-7-26

24816]
S2 gpsvc;Group Policy Client;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update

\GoogleUpdate.exe [2013-3-1 116648]
S2 PnkBstrA;PnkBstrA;C:\Windows\System32\PnkBstrA.exe --> C:\Windows\System32\PnkBstrA.exe

[?]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-1-8

161536]
S2 sppsvc;Software Protection;C:\Windows\System32\sppsvc.exe [2012-7-26 4881408]
S2 wuauserv;Windows Update;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 1394ohci;1394 OHCI Compliant Host Controller;C:\Windows\System32\Drivers\1394ohci.sys

[2012-7-26 226304]
S3 AcpiPmi;ACPI Power Meter Driver;C:\Windows\System32\Drivers\acpipmi.sys [2012-7-26

12288]
S3 Adobe LM Service;Adobe LM Service;C:\Program Files (x86)\Common Files\Adobe Systems

Shared\Service\Adobelmsvc.exe [2012-12-11 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows

\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-8-23 250056]
S3 adp94xx;adp94xx;C:\Windows\System32\Drivers\adp94xx.sys [2012-6-2 492272]
S3 adpahci;adpahci;C:\Windows\System32\Drivers\adpahci.sys [2012-7-25 340720]
S3 adpu320;adpu320;C:\Windows\System32\Drivers\adpu320.sys [2012-7-25 184048]
S3 agp440;Intel AGP Bus Filter;C:\Windows\System32\Drivers\AGP440.sys [2012-7-26 63216]
S3 ALG;Application Layer Gateway Service;C:\Windows\System32\alg.exe [2012-7-26 94208]
S3 AmdK8;AMD K8 Processor Driver;C:\Windows\System32\Drivers\amdk8.sys [2012-12-13 90624]
S3 AmdPPM;AMD Processor Driver;C:\Windows\System32\Drivers\amdppm.sys [2012-12-13 88064]
S3 amdsata;amdsata;C:\Windows\System32\Drivers\amdsata.sys [2012-6-24 76016]
S3 amdsbs;amdsbs;C:\Windows\System32\Drivers\amdsbs.sys [2012-6-2 258288]
S3 amdxata;amdxata;C:\Windows\System32\Drivers\amdxata.sys [2012-7-25 26352]
S3 AppID;AppID Driver;C:\Windows\System32\Drivers\appid.sys [2012-7-26 79360]
S3 AppIDSvc;Application Identity;C:\Windows\System32\svchost.exe -k

LocalServiceNetworkRestricted [2012-7-26 30208]
S3 arc;arc;C:\Windows\System32\Drivers\arc.sys [2012-7-25 104688]
S3 arcsas;Adaptec SAS/SATA-II RAID Windows Inbox Miniport Driver;C:\Windows

\System32\Drivers\arcsas.sys [2012-7-25 108272]
S3 AsyncMac;RAS Asynchronous Media Driver;C:\Windows\System32\Drivers\asyncmac.sys [2012-7

-26 26624]
S3 atapi;IDE Channel;C:\Windows\System32\Drivers\atapi.sys [2012-7-26 25840]
S3 AxInstSV;ActiveX Installer (AxInstSV);C:\Windows\System32\svchost.exe -k AxInstSVGroup

[2012-7-26 30208]
S3 b06bdrv;Broadcom NetXtreme II VBD;C:\Windows\System32\Drivers\bxvbda.sys [2012-12-24

533224]
S3 BDESVC;BitLocker Drive Encryption Service;C:\Windows\System32\svchost.exe -k netsvcs

[2012-7-26 30208]
S3 Browser;Computer Browser;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 BTHMODEM;Bluetooth Serial Communications Driver;C:\Windows\System32\Drivers\bthmodem.sys

[2012-7-26 65536]
S3 bthserv;Bluetooth Support Service;C:\Windows\System32\svchost.exe -k LocalService [2012

-7-26 30208]
S3 CertPropSvc;Certificate Propagation;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-

26 30208]
S3 circlass;Consumer IR Devices;C:\Windows\System32\Drivers\circlass.sys [2012-7-26 45056]
S3 CmBatt;Microsoft ACPI Control Method Battery Driver;C:\Windows\System32\Drivers

\CmBatt.sys [2012-7-26 25600]
S3 COMSysApp;COM+ System Application;C:\Windows\System32\dllhost.exe [2012-7-26 10752]
S3 defragsvc;Optimize drives;C:\Windows\System32\svchost.exe -k defragsvc [2012-7-26 30208]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);C:\Windows

\System32\Drivers\ssudbus.sys [2013-2-6 102936]
S3 dot3svc;Wired AutoConfig;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

[2012-7-26 30208]
S3 drmkaud;Microsoft Trusted Audio Drivers;C:\Windows\System32\Drivers\drmkaud.sys [2012-

12-15 5632]
S3 Eaphost;Extensible Authentication Protocol;C:\Windows\System32\svchost.exe -k netsvcs

[2012-7-26 30208]
S3 ebdrv;Broadcom NetXtreme II 10 GigE VBD;C:\Windows\System32\Drivers\evbda.sys [2012-12-

24 3265256]
S3 EFS;Encrypting File System (EFS);C:\Windows\System32\lsass.exe [2012-7-26 35840]
S3 ErrDev;Microsoft Hardware Error Device Driver;C:\Windows\System32\Drivers\errdev.sys

[2012-7-26 10240]
S3 exfat;exFAT File System Driver;C:\Windows\System32\Drivers\exfat.sys [2012-7-26 194560]
S3 Fax;Fax;C:\Windows\System32\FXSSVC.exe [2012-7-26 669696]
S3 fdc;Floppy Disk Controller Driver;C:\Windows\System32\Drivers\fdc.sys [2012-7-26 30720]
S3 Filetrace;Filetrace;C:\Windows\System32\Drivers\filetrace.sys [2012-7-26 34816]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;C:\Program Files\Common Files

\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-12-12 1038088]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service;C:\Program Files (x86)\Common Files

\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2012-12-12 655624]
S3 flpydisk;Floppy Disk Driver;C:\Windows\System32\Drivers\flpydisk.sys [2012-7-26 24576]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0;C:\Windows

\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-8-1 43616]
S3 FsDepends;File System Dependency Minifilter;C:\Windows\System32\Drivers\fsdepends.sys

[2012-7-26 57584]
S3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms;C:\Windows

\System32\Drivers\GAGP30KX.SYS [2012-7-26 66800]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update

\GoogleUpdate.exe [2013-3-1 116648]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service;C:

\Windows\System32\Drivers\HdAudio.sys [2013-2-16 341504]
S3 HidBatt;HID UPS Battery Driver;C:\Windows\System32\Drivers\hidbatt.sys [2012-7-26 27136]
S3 HidBth;Microsoft Bluetooth HID Miniport;C:\Windows\System32\Drivers\hidbth.sys [2012-7-

26 95744]
S3 HidIr;Microsoft Infrared HID Driver;C:\Windows\System32\Drivers\hidir.sys [2012-7-26

46080]
S3 hkmsvc;Health Key and Certificate Management;C:\Windows\System32\svchost.exe -k netsvcs

[2012-7-26 30208]
S3 HpSAMD;HpSAMD;C:\Windows\System32\Drivers\HpSAMD.sys [2012-7-25 64752]
S3 i8042prt;i8042 Keyboard and PS/2 Mouse Port Driver;C:\Windows\System32\Drivers

\i8042prt.sys [2012-7-26 112640]
S3 iaStorV;Intel RAID Controller Windows 7;C:\Windows\System32\Drivers\iaStorV.sys [2012-6

-2 411888]
S3 igfx;igfx;C:\Windows\System32\Drivers\igdkmd64.sys [2012-7-25 15283200]
S3 iirsp;iirsp;C:\Windows\System32\Drivers\iirsp.sys [2012-7-25 45296]
S3 IKEEXT;IKE and AuthIP IPsec Keying Modules;C:\Windows\System32\svchost.exe -k netsvcs

[2012-7-26 30208]
S3 intelide;intelide;C:\Windows\System32\Drivers\intelide.sys [2012-7-26 18672]
S3 IpFilterDriver;IP Traffic Filter Driver;C:\Windows\System32\Drivers\ipfltdrv.sys [2012-

7-26 89088]
S3 IPMIDRV;IPMIDRV;C:\Windows\System32\Drivers\IPMIDrv.sys [2012-7-26 78336]
S3 IPNAT;IP Network Address Translator;C:\Windows\System32\Drivers\ipnat.sys [2012-7-26

145920]
S3 IRENUM;IR Bus Enumerator;C:\Windows\System32\Drivers\irenum.sys [2012-7-26 17920]
S3 isapnp;isapnp;C:\Windows\System32\Drivers\isapnp.sys [2012-7-26 22256]
S3 iScsiPrt;iScsiPort Driver;C:\Windows\System32\Drivers\msiscsi.sys [2012-12-13 277736]
S3 KeyIso;CNG Key Isolation;C:\Windows\System32\lsass.exe [2012-7-26 35840]
S3 KtmRm;KtmRm for Distributed Transaction Coordinator;C:\Windows\System32\svchost.exe -k

NetworkServiceAndNoImpersonation [2012-7-26 30208]
S3 lltdsvc;Link-Layer Topology Discovery Mapper;C:\Windows\System32\svchost.exe -k

LocalService [2012-7-26 30208]
S3 LSI_SAS;LSI_SAS;C:\Windows\System32\Drivers\lsi_sas.sys [2012-7-25 108784]
S3 LSI_SAS2;LSI_SAS2;C:\Windows\System32\Drivers\lsi_sas2.sys [2012-7-25 92400]
S3 LSI_SCSI;LSI_SCSI;C:\Windows\System32\Drivers\lsi_scsi.sys [2012-7-25 116976]
S3 LVRS64;Logitech RightSound Filter Driver;C:\Windows\System32\Drivers\lvrs64.sys [2012-

10-26 351520]
S3 LVUVC64;@oem13.inf,%PID_0802_DD%(UVC);Logitech Webcam 200(UVC);C:\Windows

\System32\Drivers\lvuvc64.sys [2012-10-26 4758176]
S3 megasas;megasas;C:\Windows\System32\Drivers\megasas.sys [2012-6-2 51952]
S3 MegaSR;MegaSR;C:\Windows\System32\Drivers\MegaSR.sys [2012-7-25 353008]
S3 Modem;Modem;C:\Windows\System32\Drivers\modem.sys [2012-7-26 40448]
S3 MRxDAV;WebDav Client Redirector Driver;C:\Windows\System32\Drivers\mrxdav.sys [2012-7-26

141312]
S3 MSDTC;Distributed Transaction Coordinator;C:\Windows\System32\msdtc.exe [2012-7-26

144384]
S3 mshidkmdf;Pass-through HID to KMDF Filter Driver;C:\Windows\System32\Drivers

\mshidkmdf.sys [2012-7-26 8704]
S3 MSiSCSI;Microsoft iSCSI Initiator Service;C:\Windows\System32\svchost.exe -k netsvcs

[2012-7-26 30208]
S3 msiserver;Windows Installer;C:\Windows\System32\msiexec.exe [2012-7-26 124416]
S3 MSKSSRV;Microsoft Streaming Service Proxy;C:\Windows\System32\Drivers\mskssrv.sys [2012

-7-26 11008]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy;C:\Windows\System32\Drivers\mspclock.sys [2012

-7-26 7168]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy;C:\Windows\System32\Drivers\mspqm.sys

[2012-7-26 6912]
S3 MsRPC;MsRPC;C:\Windows\System32\Drivers\msrpc.sys [2012-7-26 390896]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter;C:\Windows\System32\Drivers

\mstee.sys [2012-7-26 8192]
S3 MTConfig;Microsoft Input Configuration Driver;C:\Windows\System32\Drivers\MTConfig.sys

[2012-7-26 14848]
S3 napagent;Network Access Protection Agent;C:\Windows\System32\svchost.exe -k

NetworkService [2012-7-26 30208]
S3 NdisCap;Microsoft NDIS Capture;C:\Windows\System32\Drivers\ndiscap.sys [2012-7-26 46592]
S3 Netlogon;Netlogon;C:\Windows\System32\lsass.exe [2012-7-26 35840]
S3 Netman;Network Connections;C:\Windows\System32\svchost.exe -k

LocalSystemNetworkRestricted [2012-7-26 30208]
S3 netr28ux;RT2870 USB Extensible Wireless LAN Card Driver;C:\Windows\System32\Drivers

\netr28ux.sys [2012-6-2 1855520]
S3 nfrd960;nfrd960;C:\Windows\System32\Drivers\nfrd960.sys [2012-7-25 52464]
S3 nv_agp;NVIDIA nForce AGP Bus Filter;C:\Windows\System32\Drivers\NV_AGP.SYS [2012-7-26

125168]
S3 nvraid;nvraid;C:\Windows\System32\Drivers\nvraid.sys [2012-7-25 150256]
S3 nvstor;nvstor;C:\Windows\System32\Drivers\nvstor.sys [2012-6-2 168176]
S3 ose;Office Source Engine;C:\Program Files (x86)\Common Files\Microsoft Shared\Source

Engine\OSE.EXE [2010-1-9 149352]
S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\microsoft

shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
S3 pciide;pciide;C:\Windows\System32\Drivers\pciide.sys [2012-7-26 14064]
S3 pcmcia;pcmcia;C:\Windows\System32\Drivers\pcmcia.sys [2012-7-26 237808]
S3 PerfHost;Performance Counter DLL Host;C:\Windows\SysWOW64\perfhost.exe [2012-7-26 20992]
S3 pla;Performance Logs & Alerts;C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork

[2012-7-26 30208]
S3 PNRPAutoReg;PNRP Machine Name Publication Service;C:\Windows\System32\svchost.exe -k

LocalServicePeerNet [2012-7-26 30208]
S3 Processor;Processor Driver;C:\Windows\System32\Drivers\processr.sys [2012-12-13 87552]
S3 QWAVE;Quality Windows Audio Video Experience;C:\Windows\System32\svchost.exe -k

LocalServiceAndNoImpersonation [2012-7-26 30208]
S3 QWAVEdrv;QWAVE driver;C:\Windows\System32\Drivers\qwavedrv.sys [2012-7-26 46592]
S3 RasAcd;Remote Access Auto Connection Driver;C:\Windows\System32\Drivers\rasacd.sys

[2012-7-26 16384]
S3 RasAuto;Remote Access Auto Connection Manager;C:\Windows\System32\svchost.exe -k netsvcs

[2012-7-26 30208]
S3 RasMan;Remote Access Connection Manager;C:\Windows\System32\svchost.exe -k netsvcs

[2012-7-26 30208]
S3 RDPDR;Remote Desktop Device Redirector Driver;C:\Windows\System32\Drivers\rdpdr.sys

[2012-7-26 179712]
S3 RDPWD;RDP Winstation Driver;C:\Windows\System32\Drivers\rdpwd.sys [2012-7-26 208384]
S3 RpcLocator;Remote Procedure Call (RPC) Locator;C:\Windows\System32\Locator.exe [2012-7-

26 9728]
S3 s3cap;s3cap;C:\Windows\System32\Drivers\vms3cap.sys [2012-7-26 7168]
S3 sbp2port;SBP-2 Transport/Protocol Bus Driver;C:\Windows\System32\Drivers\sbp2port.sys

[2012-7-26 107760]
S3 scfilter;Smart card PnP Class Filter Driver;C:\Windows\System32\Drivers\scfilter.sys

[2012-7-26 36864]
S3 SCPolicySvc;Smart Card Removal Policy;C:\Windows\System32\svchost.exe -k netsvcs [2012-

7-26 30208]
S3 sdbus;sdbus;C:\Windows\System32\Drivers\sdbus.sys [2013-2-16 194280]
S3 SDRSVC;Windows Backup;C:\Windows\System32\svchost.exe -k SDRSVC [2012-7-26 30208]
S3 SensrSvc;Sensor Monitoring Service;C:\Windows\System32\svchost.exe -k

LocalServiceAndNoImpersonation [2012-7-26 30208]
S3 sermouse;Serial Mouse Driver;C:\Windows\System32\Drivers\sermouse.sys [2012-7-26 27136]
S3 SessionEnv;Remote Desktop Configuration;C:\Windows\System32\svchost.exe -k netsvcs

[2012-7-26 30208]
S3 sfloppy;High-Capacity Floppy Disk Drive;C:\Windows\System32\Drivers\sfloppy.sys [2012-7

-26 16896]
S3 SharedAccess;Internet Connection Sharing (ICS);C:\Windows\System32\svchost.exe -k

netsvcs [2012-7-26 30208]
S3 SiSRaid2;SiSRaid2;C:\Windows\System32\Drivers\sisraid2.sys [2012-6-2 44784]
S3 SiSRaid4;SiSRaid4;C:\Windows\System32\Drivers\sisraid4.sys [2012-7-25 81648]
S3 SNMPTRAP;SNMP Trap;C:\Windows\System32\snmptrap.exe [2012-7-26 14848]
S3 SstpSvc;Secure Socket Tunneling Protocol Service;C:\Windows\System32\svchost.exe -k

LocalService [2012-7-26 30208]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);C:\Windows\System32\Drivers

\ssudmdm.sys [2013-2-6 203544]
S3 Steam Client Service;Steam Client Service;C:\Program Files (x86)\Common Files\Steam

\SteamService.exe [2013-1-30 543656]
S3 stexstor;stexstor;C:\Windows\System32\Drivers\stexstor.sys [2012-7-25 30960]
S3 storflt;Hyper-V Storage Accelerator;C:\Windows\System32\Drivers\vmstorfl.sys [2012-7-26

45160]
S3 storvsc;storvsc;C:\Windows\System32\Drivers\storvsc.sys [2012-7-26 37992]
S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard

\SwitchBoard.exe [2010-2-19 517096]
S3 swprv;Microsoft Software Shadow Copy Provider;C:\Windows\System32\svchost.exe -k swprv

[2012-7-26 30208]
S3 TapiSrv;Telephony;C:\Windows\System32\svchost.exe -k NetworkService [2012-7-26 30208]
S3 TCPIP6;Microsoft IPv6 Protocol Driver;C:\Windows\System32\Drivers\tcpip.sys [2013-3-15

2226408]
S3 TermService;Remote Desktop Services;C:\Windows\System32\svchost.exe -k NetworkService

[2012-7-26 30208]
S3 THREADORDER;Thread Ordering Server;C:\Windows\System32\svchost.exe -k LocalService

[2012-7-26 30208]
S3 TrustedInstaller;Windows Modules Installer;C:\Windows\servicing\TrustedInstaller.exe

[2012-7-26 94208]
S3 uagp35;Microsoft AGPv3.5 Filter;C:\Windows\System32\Drivers\UAGP35.SYS [2012-7-26 65776]
S3 UI0Detect;Interactive Services Detection;C:\Windows\System32\UI0Detect.exe [2012-7-26

40960]
S3 uliagpkx;Uli AGP Bus Filter;C:\Windows\System32\Drivers\ULIAGPKX.SYS [2012-7-26 66800]
S3 UmPass;Microsoft UMPass Driver;C:\Windows\System32\Drivers\umpass.sys [2012-7-26 11776]
S3 UmRdpService;Remote Desktop Services UserMode Port Redirector;C:\Windows

\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
S3 usbaudio;USB Audio Driver (WDM);C:\Windows\System32\Drivers\USBAUDIO.sys [2012-7-26

121856]
S3 usbcir;eHome Infrared Receiver (USBCIR);C:\Windows\System32\Drivers\usbcir.sys [2012-7-

26 99328]
S3 usbohci;Microsoft USB Open Host Controller Miniport Driver;C:\Windows\System32\Drivers

\usbohci.sys [2012-12-13 27136]
S3 usbprint;Microsoft USB PRINTER Class;C:\Windows\System32\Drivers\usbprint.sys [2012-7-26

25600]
S3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver;C:\Windows

\System32\Drivers\usbuhci.sys [2012-12-13 32256]
S3 usbvideo;USB Video Device (WDM);C:\Windows\System32\Drivers\usbvideo.sys [2012-12-24

210304]
S3 vds;Virtual Disk;C:\Windows\System32\vds.exe [2013-1-16 680960]
S3 vhdmp;vhdmp;C:\Windows\System32\Drivers\vhdmp.sys [2012-7-26 496368]
S3 viaide;viaide;C:\Windows\System32\Drivers\viaide.sys [2012-7-26 19184]
S3 vmbus;Virtual Machine Bus;C:\Windows\System32\Drivers\vmbus.sys [2012-7-26 137832]
S3 VMBusHID;VMBusHID;C:\Windows\System32\Drivers\VMBusHID.sys [2012-7-26 22144]
S3 vsmraid;vsmraid;C:\Windows\System32\Drivers\vsmraid.sys [2012-6-2 164080]
S3 VSS;Volume Shadow Copy;C:\Windows\System32\VSSVC.exe [2012-7-26 1482752]
S3 vwifibus;Virtual WiFi Bus Driver;C:\Windows\System32\Drivers\vwifibus.sys [2012-7-26

24064]
S3 vwifimp;Virtual WiFi Miniport Service;C:\Windows\System32\Drivers\vwifimp.sys [2012-7-26

17920]
S3 W32Time;Windows Time;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
S3 WacomPen;Wacom Serial Pen HID Driver;C:\Windows\System32\Drivers\wacompen.sys [2012-7-26

27008]
S3 Wanarp;Remote Access IP ARP Driver;C:\Windows\System32\Drivers\wanarp.sys [2012-7-26

83456]
S3 wbengine;Block Level Backup Engine Service;C:\Windows\System32\wbengine.exe [2012-7-26

1616896]
S3 WbioSrvc;Windows Biometric Service;C:\Windows\System32\svchost.exe -k WbioSvcGroup

[2012-7-26 30208]
S3 wcncsvc;Windows Connect Now - Config Registrar;C:\Windows\System32\svchost.exe -k

LocalServiceAndNoImpersonation [2012-7-26 30208]
S3 WcsPlugInService;Windows Color System;C:\Windows\System32\svchost.exe -k wcssvc [2012-7

-26 30208]
S3 Wd;Microsoft Watchdog Timer Driver;C:\Windows\System32\Drivers\wd.sys [2012-7-26 23792]
S3 WebClient;WebClient;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
S3 Wecsvc;Windows Event Collector;C:\Windows\System32\svchost.exe -k NetworkService [2012-

7-26 30208]
S3 wercplsupport;Problem Reports and Solutions Control Panel Support;C:\Windows

\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 WerSvc;Windows Error Reporting Service;C:\Windows\System32\svchost.exe -k WerSvcGroup

[2012-7-26 30208]
S3 WIMMount;WIMMount;C:\Windows\System32\Drivers\wimmount.sys [2012-7-26 33520]
S3 WinRM;Windows Remote Management (WS-Management);C:\Windows\System32\svchost.exe -k

NetworkService [2012-7-26 30208]
S3 WinUsb;WinUsb;C:\Windows\System32\Drivers\winusb.sys [2012-7-26 57344]
S3 wlidsvc;Microsoft Account Sign-in Assistant;C:\Windows\System32\svchost.exe -k netsvcs

[2012-7-26 30208]
S3 WmiAcpi;Microsoft Windows Management Interface for ACPI;C:\Windows\System32\Drivers

\wmiacpi.sys [2012-7-26 17408]
S3 wmiApSrv;WMI Performance Adapter;C:\Windows\System32\wbem\WmiApSrv.exe [2012-7-26

198144]
S3 WPCSvc;Family Safety;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

[2012-7-26 30208]
S3 WwanSvc;WWAN AutoConfig;C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork [2012-

7-26 30208]
S4 cdfs;CD/DVD File System Reader;C:\Windows\System32\Drivers\cdfs.sys [2012-7-26 108544]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service;C:\Windows\Microsoft.NET

\Framework64\v4.0.30319\SMSvcHost.exe [2012-7-25 139696]
S4 RemoteAccess;Routing and Remote Access;C:\Windows\System32\svchost.exe -k netsvcs [2012

-7-26 30208]
S4 RemoteRegistry;Remote Registry;C:\Windows\System32\svchost.exe -k localService [2012-7-

26 30208]
S4 SCardSvr;Smart Card;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation

[2012-7-26 30208]
S4 udfs;udfs;C:\Windows\System32\Drivers\udfs.sys [2012-7-26 321024]
S4 ws2ifsl;Winsock IFS Driver;C:\Windows\System32\Drivers\ws2ifsl.sys [2012-7-26 22528]
.
=============== File Associations ===============
.
FileExt: .bat: batfile= "%1" %*
FileExt: .cmd: cmdfile= "%1" %*
FileExt: .com: comfile= "%1" %*
FileExt: .exe: exefile= "%1" %*
FileExt: .pif: piffile= "%1" %*
FileExt: .scr: scrfile= "%1" /S
FileExt: .reg: regfile=regedit.exe "%1 "
FileExt: .txt: txtfile=C:\Windows\System32\NOTEPAD.EXE %1
FileExt: .chm: chm.file= "C:\Windows\hh.exe" %1
FileExt: .ini: inifile=C:\Windows\System32\NOTEPAD.EXE %1
FileExt: .inf: inffile=C:\Windows\System32\NOTEPAD.EXE %1 [UserChoice]
ShellExec: AcroRD32.exe: Read= "C:\Program Files (x86)\Adobe\Reader 11.0\Reader

\AcroRd32.exe" "%1 "
ShellExec: iexplore.exe: open= "C:\Program Files\Internet Explorer\iexplore.exe" %1
ShellExec: mspaint.exe: edit= "C:\Windows\System32\mspaint.exe" "%1 "
ShellExec: NeroVision.exe: open= "C:\Program Files (x86)\Nero\Nero 12\Nero Vision

\NeroVision.exe" "%1 "
ShellExec: notepad.exe: edit=C:\Windows\System32\NOTEPAD.EXE %1
ShellExec: notepad.exe: open=C:\Windows\System32\NOTEPAD.EXE %1
ShellExec: ois.exe: Edit=C:\PROGRA~2\MICROS~1\Office14\OIS.EXE /shellEdit "%1 "
ShellExec: ois.exe: Open=C:\PROGRA~2\MICROS~1\Office14\OIS.EXE /shellOpen "%1 "
ShellExec: ois.exe: Preview=C:\PROGRA~2\MICROS~1\Office14\OIS.EXE /shellPreview "%1 "
ShellExec: Photoshop.exe: edit= "C:\Program Files\Adobe\Adobe Photoshop CS4 (64

Bit)\Photoshop.exe" "%1 "
ShellExec: Photoshop.exe: open= "C:\Program Files\Adobe\Adobe Photoshop CS4 (64

Bit)\Photoshop.exe" "%1 "
ShellExec: photoviewer.dll: open=C:\Windows\System32\rundll32.exe "C:\Program Files

(x86)\Windows Photo Viewer\PhotoViewer.dll ", ImageView_Fullscreen %1
ShellExec: photoviewer.dll: print=C:\Windows\System32\rundll32.exe "C:\Program Files

(x86)\Windows Photo Viewer\PhotoViewer.dll ", ImageView_Fullscreen %1
ShellExec: uTorrent.exe: open= "C:\Program Files (x86)\uTorrent\uTorrent.exe" "%1 "
ShellExec: Winword.exe: edit= "C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE"

/n "%1 "
ShellExec: wmplayer.exe: open= "C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

/Open "%L "
ShellExec: wmplayer.exe: play= "C:\Program Files (x86)\Windows Media Player\wmplayer.exe"

/Play "%L "
ShellExec: wordpad.exe: open= "C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE"

"%1 "
.
=============== Created Last 60 ================
.
2013-04-11 10:05:31 -------- d-----w- C:\Windows\CbsTemp
2013-04-11 09:41:44 9311288 ----a-w- C:\ProgramData\Microsoft\Windows Defender

\Definition Updates\{1EF104DD-D800-4579-ADDC-403EF5F45698}\mpengine.dll
2013-04-10 13:04:10 -------- d-----w- C:\Windows\SysWow64\wbem\Logs
2013-04-10 13:04:02 9311288 ------w- C:\ProgramData\Microsoft\Windows Defender

\Definition Updates\Backup\mpengine.dll
2013-04-10 13:00:00 -------- d-sh--w- C:\$RECYCLE.BIN
2013-04-10 12:54:24 -------- d-----w- C:\Windows\Temp
2013-04-09 14:38:25 -------- d-----w- C:\Windows\Sun
2013-04-08 10:59:05 -------- d-----w- C:\Program Files (x86)\EaseUS
2013-04-06 10:55:48 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Roaming\player
2013-04-01 21:21:57 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Local\Updater19962
2013-03-29 10:39:03 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Roaming\OpenCandy
2013-03-27 20:40:32 -------- d-----w- C:\ProgramData\VS Revo Group
2013-03-27 20:36:21 -------- d-----w- C:\Program Files (x86)\MSECache
2013-03-27 14:16:39 81616 ----a-w- C:\Windows\System32\SETA73.tmp
2013-03-27 14:08:26 -------- d-----w- C:\Program Files\Common Files

\EasyInfo
2013-03-27 12:21:06 749568 ----a-w- C:\Program Files (x86)\Common Files

\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll
2013-03-27 12:21:06 69715 ----a-w- C:\Program Files (x86)\Common Files

\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll
2013-03-27 12:21:06 5632 ----a-w- C:\Program Files (x86)\Common Files

\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe
2013-03-27 12:21:06 274432 ----a-w- C:\Program Files (x86)\Common Files

\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll
2013-03-27 12:21:06 180224 ----a-w- C:\Program Files (x86)\Common Files

\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll
2013-03-27 12:20:59 323716 ----a-w- C:\Program Files (x86)\Common Files

\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll
2013-03-27 12:20:59 192644 ----a-w- C:\Program Files (x86)\Common Files

\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll
2013-03-26 16:15:31 682280 ----a-w- C:\Windows\SysWow64\pbsvc.exe
2013-03-26 07:20:48 149264 ----a-w- C:\Program Files\Windows Defender

\SymSrv.dll
2013-03-26 07:20:47 873448 ----a-w- C:\Program Files\Windows Defender

\MpClient.dll
2013-03-26 07:20:47 75240 ----a-w- C:\Program Files\Windows Defender\MpOAV.dll
2013-03-26 07:20:47 646096 ----a-w- C:\Program Files (x86)\Windows Defender

\MpClient.dll
2013-03-26 07:20:47 55272 ----a-w- C:\Program Files\Windows Defender

\MpUXSrv.exe
2013-03-26 07:20:47 493032 ----a-w- C:\Program Files\Windows Defender\MpRtp.dll
2013-03-26 07:20:47 334312 ----a-w- C:\Program Files\Windows Defender

\MpCommu.dll
2013-03-26 07:20:47 27600 ----a-w- C:\Program Files\Windows Defender

\mpuxhostproxy.dll
2013-03-26 07:20:47 19408 ----a-w- C:\Program Files\Windows Defender

\MsMpLics.dll
2013-03-26 07:20:47 1558912 ----a-w- C:\Program Files\Windows Defender

\DbgHelp.dll
2013-03-26 07:20:47 1555920 ----a-w- C:\Program Files\Windows Defender\MpSvc.dll
2013-03-26 07:20:46 78800 ----a-w- C:\Program Files (x86)\Windows Defender

\MpOAV.dll
2013-03-26 07:20:46 70656 ----a-w- C:\Program Files\Windows Defender

\MsMpCom.dll
2013-03-26 07:20:46 50664 ----a-w- C:\Program Files\Windows Defender

\MpTpmAtt.dll
2013-03-26 07:20:46 438840 ----a-w- C:\Program Files\Windows Defender

\MsMpRes.dll
2013-03-26 07:20:46 334064 ----a-w- C:\Program Files\Windows Defender

\MpCmdRun.exe
2013-03-26 07:20:46 230904 ----a-w- C:\Windows\System32\drivers\WdFilter.sys
2013-03-26 07:20:46 19408 ----a-w- C:\Program Files (x86)\Windows Defender

\MsMpLics.dll
2013-03-26 07:20:46 161744 ----a-w- C:\Program Files\Windows Defender

\EppManifest.dll
2013-03-26 07:20:46 150608 ----a-w- C:\Program Files\Windows Defender

\MpAsDesc.dll
2013-03-26 07:20:46 150584 ----a-w- C:\Program Files (x86)\Windows Defender

\MpAsDesc.dll
2013-03-26 07:20:46 14920 ----a-w- C:\Program Files\Windows Defender

\MsMpEng.exe
2013-03-26 07:20:46 1345488 ----a-w- C:\Program Files\Windows Defender

\MSASCui.exe
2013-03-26 07:20:46 109624 ----a-w- C:\Program Files\Windows Defender

\MpEvMsg.dll
2013-03-26 07:20:45 35232 ----a-w- C:\Windows\System32\drivers\WdBoot.sys
2013-03-25 19:34:53 20992 ----a-w- C:\Windows\System32\drivers\usb8023.sys
2013-03-25 13:26:26 281768 ----a-w- C:\Windows\SysWow64\PnkBstrB.xtr
2013-03-25 10:33:14 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Local\GFInstaller
2013-03-25 10:33:10 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Local\TempDIR
2013-03-25 10:26:35 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Local\PunkBuster
2013-03-25 10:06:18 281768 ----a-w- C:\Windows\SysWow64\PnkBstrB.exe
2013-03-25 10:06:18 103736 ----a-w- C:\Windows\SysWow64\PnkBstrB.ex0
2013-03-25 10:06:17 76888 ----a-w- C:\Windows\SysWow64\PnkBstrA.exe
2013-03-25 09:57:04 -------- d-----w- C:\Program Files (x86)\Activision
2013-03-25 07:20:19 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Local\SKIDROW
2013-03-21 04:10:18 42880 ----a-w- C:\Windows\SysWow64\xfcodec.dll
2013-03-21 04:10:16 28544 ----a-w- C:\Windows\System32\xfcodec64.dll
2013-03-15 12:12:47 10115072 ----a-w- C:\Windows\System32\twinui.dll
2013-03-15 12:12:46 8856576 ----a-w- C:\Windows\SysWow64\twinui.dll
2013-03-15 12:12:45 754176 ----a-w- C:\Windows\SysWow64\actxprxy.dll
2013-03-15 12:12:45 69864 ----a-w- C:\Windows\System32\drivers\pdc.sys
2013-03-15 12:12:45 2302464 ----a-w- C:\Windows\System32\authui.dll
2013-03-15 12:12:45 2033664 ----a-w- C:\Windows\SysWow64\authui.dll
2013-03-15 12:12:44 2146816 ----a-w- C:\Windows\System32\actxprxy.dll
2013-03-15 12:12:42 19205632 ----a-w- C:\Windows\System32\mshtml.dll
2013-03-15 12:12:37 14296064 ----a-w- C:\Windows\SysWow64\mshtml.dll
2013-03-15 12:12:30 13761536 ----a-w- C:\Windows\SysWow64\ieframe.dll
2013-03-15 12:12:29 15418368 ----a-w- C:\Windows\System32\ieframe.dll
2013-03-15 12:12:28 2877952 ----a-w- C:\Windows\SysWow64\jscript9.dll
2013-03-15 12:12:27 690688 ----a-w- C:\Windows\SysWow64\jscript.dll
2013-03-15 12:12:27 1766912 ----a-w- C:\Windows\SysWow64\wininet.dll
2013-03-15 12:12:27 1658368 ----a-w- C:\Windows\SysWow64\iertutil.dll
2013-03-15 12:12:27 1128960 ----a-w- C:\Windows\SysWow64\urlmon.dll
2013-03-15 12:12:26 770544 ----a-w- C:\Program Files (x86)\Internet Explorer

\iexplore.exe
2013-03-15 12:12:26 603136 ----a-w- C:\Windows\System32\msfeeds.dll
2013-03-15 12:12:26 534528 ----a-w- C:\Windows\SysWow64\uxtheme.dll
2013-03-15 12:12:26 493056 ----a-w- C:\Windows\SysWow64\msfeeds.dll
2013-03-15 12:12:26 39424 ----a-w- C:\Windows\SysWow64\jsproxy.dll
2013-03-15 12:12:26 235520 ----a-w- C:\Program Files (x86)\Internet Explorer

\IEShims.dll
2013-03-15 12:12:26 2246656 ----a-w- C:\Windows\System32\wininet.dll
2013-03-15 12:12:26 2166272 ----a-w- C:\Windows\System32\iertutil.dll
2013-03-15 12:12:26 1351680 ----a-w- C:\Windows\System32\urlmon.dll
2013-03-15 12:12:25 907776 ----a-w- C:\Windows\System32\uxtheme.dll
2013-03-15 12:12:25 854528 ----a-w- C:\Windows\System32\jscript.dll
2013-03-15 12:12:25 775136 ----a-w- C:\Program Files\Internet Explorer

\iexplore.exe
2013-03-15 12:12:25 61440 ----a-w- C:\Windows\SysWow64\iesetup.dll
2013-03-15 12:12:25 53760 ----a-w- C:\Windows\System32\UXInit.dll
2013-03-15 12:12:25 50688 ----a-w- C:\Windows\System32\ie4uinit.exe
2013-03-15 12:12:25 44032 ----a-w- C:\Windows\SysWow64\UXInit.dll
2013-03-15 12:12:25 3966464 ----a-w- C:\Windows\System32\jscript9.dll
2013-03-15 12:12:25 356352 ----a-w- C:\Program Files\Internet Explorer

\IEShims.dll
2013-03-15 12:12:25 33280 ----a-w- C:\Windows\SysWow64\iernonce.dll
2013-03-15 12:12:25 257024 ----a-w- C:\Program Files (x86)\Internet Explorer

\ieproxy.dll
2013-03-15 12:12:25 136704 ----a-w- C:\Windows\System32\iesysprep.dll
2013-03-15 12:12:25 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll
2013-03-15 12:12:24 700928 ----a-w- C:\Program Files\Internet Explorer

\ieproxy.dll
2013-03-15 12:12:24 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2013-03-15 12:12:24 2706432 ----a-w- C:\Windows\System32\mshtml.tlb
2013-03-15 12:12:19 4041728 ----a-w- C:\Windows\System32\win32k.sys
2013-03-15 12:12:18 468992 ----a-w- C:\Windows\System32\MFMediaEngine.dll
2013-03-15 12:12:18 361984 ----a-w- C:\Windows\SysWow64\MFMediaEngine.dll
2013-03-15 12:12:16 13643264 ----a-w- C:\Windows

\System32\Windows.UI.Xaml.dll
2013-03-15 12:12:14 5977600 ----a-w- C:\Windows\System32\mstscax.dll
2013-03-15 12:12:14 10792448 ----a-w- C:\Windows

\SysWow64\Windows.UI.Xaml.dll
2013-03-15 12:12:13 830464 ----a-w- C:\Windows\System32\wbem\WmiPrvSD.dll
2013-03-15 12:12:13 2226408 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2013-03-15 12:12:12 729600 ----a-w- C:\Windows\System32\duser.dll
2013-03-15 12:12:12 567808 ----a-w- C:\Windows\SysWow64\duser.dll
2013-03-15 12:12:12 543232 ----a-w- C:\Windows\System32\wlroamextension.dll
2013-03-15 12:12:12 5090816 ----a-w- C:\Windows\SysWow64\mstscax.dll
2013-03-15 12:12:11 993512 ----a-w- C:\Windows\System32\drivers\ndis.sys
2013-03-15 12:12:11 475136 ----a-w- C:\Windows\System32\WWanAPI.dll
2013-03-15 12:12:11 467456 ----a-w- C:\Windows\System32\netprofmsvc.dll
2013-03-15 12:12:11 385024 ----a-w- C:\Windows\System32\ncsi.dll
2013-03-15 12:12:11 293376 ----a-w- C:\Windows

\System32\Windows.Networking.Connectivity.dll
2013-03-15 12:12:11 1933544 ----a-w- C:\Windows\System32\drivers\ntfs.sys
2013-03-15 12:12:11 105472 ----a-w- C:\Windows\System32\wpdbusenum.dll
2013-03-15 12:12:10 496872 ----a-w- C:\Windows\System32\drivers\usbhub.sys
2013-03-15 12:12:10 448512 ----a-w- C:\Windows\System32\SettingSync.dll
2013-03-15 12:12:10 260096 ----a-w- C:\Windows\System32\hotspotauth.dll
2013-03-15 12:12:09 79360 ----a-w- C:\Windows\SysWow64\taskkill.exe
2013-03-15 12:12:09 731648 ----a-w- C:\Windows\System32\win32spl.dll
2013-03-15 12:12:09 61672 ----a-w- C:\Windows\System32\drivers\crashdmp.sys
2013-03-15 12:12:09 446184 ----a-w- C:\Windows\System32\drivers\USBHUB3.SYS
2013-03-15 12:12:09 410624 ----a-w- C:\Windows\SysWow64\wlroamextension.dll
2013-03-15 12:12:09 370688 ----a-w- C:\Windows\SysWow64\WWanAPI.dll
2013-03-15 12:12:09 356352 ----a-w- C:\Windows\SysWow64\SettingSync.dll
2013-03-15 12:12:09 329960 ----a-w- C:\Windows\System32\drivers\storport.sys
2013-03-15 12:12:09 297984 ----a-w- C:\Windows\System32\drivers\ks.sys
2013-03-15 12:12:09 228352 ----a-w- C:\Windows\System32\XpsRasterService.dll
2013-03-15 12:12:09 225280 ----a-w- C:\Windows\System32\mbsmsapi.dll
2013-03-15 12:12:09 197632 ----a-w- C:\Windows

\SysWow64\Windows.Networking.Connectivity.dll

Cabal18 · 2013/04/11

2013-03-15 12:12:09 157696 ----a-w- C:\Windows\SysWow64\mbsmsapi.dll
2013-03-15 12:12:09 155136 ----a-w- C:\Windows\SysWow64\XpsRasterService.dll
2013-03-15 12:12:09 107520 ----a-w- C:\Windows\System32\taskkill.exe
2013-03-15 12:12:09 102400 ----a-w- C:\Windows\System32\tasklist.exe
2013-03-15 12:12:08 87552 ----a-w- C:\Windows\System32\wersvc.dll
2013-03-15 12:12:08 82944 ----a-w- C:\Windows\System32\drivers\hidclass.sys
2013-03-15 12:12:08 80896 ----a-w- C:\Windows\SysWow64\tasklist.exe
2013-03-15 12:12:08 611840 ----a-w- C:\Windows\System32\wpd_ci.dll
2013-03-15 12:12:08 55296 ----a-w- C:\Windows\SysWow64\nlaapi.dll
2013-03-15 12:12:08 416256 ----a-w- C:\Windows\System32\schannel.dll
2013-03-15 12:12:08 375808 ----a-w- C:\Windows\SysWow64\wbem\WmiPrvSE.exe
2013-03-15 12:12:08 325632 ----a-w- C:\Windows\SysWow64\schannel.dll
2013-03-15 12:12:08 18432 ----a-w- C:\Windows\SysWow64\npmproxy.dll
2013-03-15 12:12:08 15872 ----a-w- C:\Windows\SysWow64\nlmproxy.dll
2013-03-15 12:12:08 131072 ----a-w- C:\Windows\SysWow64\wbem\WmiDcPrv.dll
2013-03-15 12:12:08 12288 ----a-w- C:\Windows\SysWow64\nlmsprep.dll
2013-03-15 12:12:08 115712 ----a-w- C:\Windows\SysWow64\netprofm.dll
2013-03-15 12:11:50 622080 ----a-w- C:\Windows\System32\drivers\srv2.sys
2013-03-15 12:11:50 370688 ----a-w- C:\Windows\System32\drivers\mrxsmb.sys
2013-03-15 12:11:50 247808 ----a-w- C:\Windows\System32\drivers\srvnet.sys
2013-03-15 12:11:50 215552 ----a-w- C:\Windows\System32\drivers\mrxsmb20.sys
2013-03-15 12:11:07 1690624 ----a-w- C:\Windows\System32\GdiPlus.dll
2013-03-15 12:11:07 1437184 ----a-w- C:\Windows\SysWow64\GdiPlus.dll
2013-03-14 12:24:09 -------- d-----w- C:\Program Files\Microsoft

Silverlight
2013-03-14 12:24:09 -------- d-----w- C:\Program Files (x86)\Microsoft

Silverlight
2013-03-14 11:41:48 -------- d-----w- C:\Program Files\WBFS
2013-03-12 11:51:35 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Local\{4E43A55C-4D96-4A42-B3C9-74CBABADFA73}
2013-03-12 11:22:43 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Local\{15BC537A-3A8E-4F00-A86B-BDDD210521E1}
2013-03-11 08:00:10 17536 ----a-w- C:\ProgramData\Microsoft\windowssampling

\Sqm\Manifest\Sqm3.bin
2013-03-10 18:34:43 -------- d-----w- C:\Program Files (x86)\Common

Files\ParetoLogic
2013-03-10 18:34:40 -------- d-----w- C:\Program Files (x86)\ParetoLogic
2013-03-10 18:11:52 76205 -c----w- C:\ProgramData\Microsoft\Windows\WER

\ReportQueue

\AppCrash_MsMpEng.exe_2ed1181cce49f733ce7cd09171861baef35efe18_cab_1ad67e46\uninstall.exe
2013-03-10 18:08:48 75384 -c----w- C:\ProgramData\Microsoft\Windows\WER

\ReportQueue

\AppCrash_MsMpEng.exe_f091a078b1b684783a4556d985f825f612922f1b_cab_165faf18\Uninstall.exe
2013-03-10 17:40:41 21773888 -c----w- C:\ProgramData\Microsoft\Windows

\WER\ReportQueue

\AppCrash_MsMpEng.exe_f6642f91e343a9679753d3f34d974b49c76da6_cab_127df008\DCUO_setup.exe
2013-03-10 17:34:08 75384 -c----w- C:\ProgramData\Microsoft\Windows\WER

\ReportQueue\AppCrash_MsMpEng.exe_fd4e29fc966626df4b338abf18556d23d7393ecc_cab_03ee71bb

\Uninstall.exe
2013-03-10 14:14:59 75384 -c----w- C:\ProgramData\Microsoft\Windows\WER

\ReportQueue\AppCrash_MsMpEng.exe_cdc40f2abf4f49bb1995f8f1fd9dc861146e1_cab_0cf9ad2f

\Uninstall.exe
2013-03-10 11:31:25 21774152 -c----w- C:\ProgramData\Microsoft\Windows

\WER\ReportQueue

\AppCrash_MsMpEng.exe_5fecf0676f6edbc94613dc1931c98b5213a11b_cab_15efeca3\DCUO_PSG_setup.ex

e
2013-03-10 10:15:15 75384 -c----w- C:\ProgramData\Microsoft\Windows\WER

\ReportQueue\AppCrash_MsMpEng.exe_943f9b9e7e4ad1909ba5d817fcbe7cb3a9bb8c2_cab_363e033b

\Uninstall.exe
2013-03-10 07:30:08 21773888 -c----w- C:\ProgramData\Microsoft\Windows

\WER\ReportQueue

\AppCrash_MsMpEng.exe_116927ac69d6d56c68760ef6749af68ce98135_cab_0692d7c5\DCUO_setup.exe
2013-03-09 12:30:48 21773888 -c----w- C:\ProgramData\Microsoft\Windows

\WER\ReportQueue\AppCrash_MsMpEng.exe_f9c6adf766c0593158c3a0f57052561a31c9c_cab_07ca015d

\DCUO_setup.exe
2013-03-08 10:15:51 95648 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-

32.dll
2013-03-05 17:32:49 -------- d-----w- C:\ProgramData\Stardock
2013-03-05 12:48:25 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Local\WBFSManager
2013-03-05 10:31:17 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Local\{23261E46-2A6A-4C74-927D-2250A1471E41}
2013-03-05 10:23:01 31600 ----a-w- C:\Windows\SysWow64\wldlog.dll
2013-03-05 10:22:45 -------- d-----w- C:\ProgramData\Logs
2013-03-05 10:05:39 94040 -c--a-w- C:\Program Files (x86)\Common Files\Windows

Live\.cache\fad0d8e21ce198804\DSETUP.dll
2013-03-05 10:05:39 525656 -c--a-w- C:\Program Files (x86)\Common Files\Windows

Live\.cache\fad0d8e21ce198804\DXSETUP.exe
2013-03-05 10:05:39 1691480 -c--a-w- C:\Program Files (x86)\Common Files\Windows

Live\.cache\fad0d8e21ce198804\dsetup32.dll
2013-03-05 10:05:34 89944 -c--a-w- C:\Program Files (x86)\Common Files\Windows

Live\.cache\f9e2f52c1ce198803\DSETUP.dll
2013-03-05 10:05:34 537432 -c--a-w- C:\Program Files (x86)\Common Files\Windows

Live\.cache\f9e2f52c1ce198803\DXSETUP.exe
2013-03-05 10:05:34 1801048 -c--a-w- C:\Program Files (x86)\Common Files\Windows

Live\.cache\f9e2f52c1ce198803\dsetup32.dll
2013-03-05 10:05:32 89944 -c--a-w- C:\Program Files (x86)\Common Files\Windows

Live\.cache\f768cb3c1ce198802\DSETUP.dll
2013-03-05 10:05:32 537432 -c--a-w- C:\Program Files (x86)\Common Files\Windows

Live\.cache\f768cb3c1ce198802\DXSETUP.exe
2013-03-05 10:05:32 1801048 -c--a-w- C:\Program Files (x86)\Common Files\Windows

Live\.cache\f768cb3c1ce198802\dsetup32.dll
2013-02-28 21:17:40 -------- d-----w- C:\Windows\SysWow64\searchplugins
2013-02-28 21:17:40 -------- d-----w- C:\Windows\SysWow64\Extensions
2013-02-28 21:17:19 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Roaming\Babylon
2013-02-28 21:17:19 -------- d-----w- C:\ProgramData\Babylon
2013-02-27 13:21:43 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Local\VS Revo Group
2013-02-27 12:39:23 -------- d-----w- C:\ProgramData\DAEMON Tools Lite
2013-02-27 08:28:32 443392 ----a-w- C:\Windows\System32\ReAgent.dll
2013-02-27 08:28:32 375808 ----a-w- C:\Windows\SysWow64\ReAgent.dll
2013-02-27 08:28:32 1010688 ----a-w- C:\Windows\System32\reseteng.dll
2013-02-23 14:36:10 -------- d-----w- C:\ProgramData\Battle.net
2013-02-22 15:21:33 -------- d-----w- C:\Program Files (x86)\MPC-HC
2013-02-16 08:54:06 19791360 ----a-w- C:\Windows\System32\shell32.dll
2013-02-16 08:54:05 2094592 ----a-w- C:\Windows\System32\mmc.exe
2013-02-16 08:54:05 1964544 ----a-w- C:\Windows\System32\wlidsvc.dll
2013-02-16 08:54:05 1918464 ----a-w- C:\Windows\System32\wbem\cimwin32.dll
2013-02-16 08:54:04 17560576 ----a-w- C:\Windows\SysWow64\shell32.dll
2013-02-16 08:54:04 1611776 ----a-w- C:\Windows\SysWow64\mmc.exe
2013-02-16 08:54:04 1448168 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys
2013-02-16 08:54:03 1886208 ----a-w- C:\Windows\System32\setupapi.dll
2013-02-16 08:54:03 1120768 ----a-w- C:\Windows\System32\msctf.dll
2013-02-16 08:54:00 438272 ----a-w- C:\Windows\System32\lsm.dll
2013-02-16 08:54:00 406016 ----a-w- C:\Windows\System32\Windows.Media.dll
2013-02-16 08:54:00 341504 ----a-w- C:\Windows\System32\drivers\HdAudio.sys
2013-02-16 08:53:59 1752064 ----a-w- C:\Windows\SysWow64\setupapi.dll
2013-02-16 08:53:58 91880 ----a-w- C:\Windows\System32\drivers\partmgr.sys
2013-02-16 08:53:58 785504 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys
2013-02-16 08:53:57 894464 ----a-w- C:\Windows\System32\iphlpsvc.dll
2013-02-16 08:53:57 49152 ----a-w- C:\Windows\System32\drivers\UMDF

\HidBthLE.dll
2013-02-16 08:53:56 890880 ----a-w- C:\Windows\SysWow64\msctf.dll
2013-02-16 08:53:56 728064 ----a-w- C:\Windows\System32\samsrv.dll
2013-02-16 08:53:56 666112 ----a-w- C:\Windows\System32\MP4SDECD.DLL
2013-02-16 08:53:56 594944 ----a-w- C:\Windows\System32\Windows.Networking.dll
2013-02-16 08:53:56 410624 ----a-w- C:\Windows\SysWow64\Windows.Networking.dll
2013-02-16 08:53:56 303848 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys
2013-02-16 08:53:56 261120 ----a-w- C:\Windows\SysWow64\Windows.Media.dll
2013-02-16 08:53:56 194280 ----a-w- C:\Windows\System32\drivers\sdbus.sys
2013-02-16 08:53:56 159232 ----a-w- C:\Windows\System32\inetpp.dll
2013-02-16 08:53:56 124648 ----a-w- C:\Windows\System32\drivers\dumpsd.sys
2013-02-16 08:53:55 95232 ----a-w- C:\Windows\System32\wiaacmgr.exe
2013-02-16 08:53:55 83968 ----a-w- C:\Windows\SysWow64\wiaacmgr.exe
2013-02-16 08:53:55 256000 ----a-w- C:\Windows\System32\WSDMon.dll
2013-02-16 08:53:55 171520 ----a-w- C:\Windows\System32\ncbservice.dll
2013-02-16 08:53:54 80896 ----a-w- C:\Windows\System32\wbem\netdacim.dll
2013-02-16 08:53:54 67584 ----a-w- C:\Windows\SysWow64\samlib.dll
2013-02-16 08:53:54 62464 ----a-w- C:\Windows\System32\adhsvc.dll
2013-02-16 08:53:54 44032 ----a-w- C:\Windows\System32\wbem\netnccim.dll
2013-02-16 08:53:54 436736 ----a-w- C:\Windows\SysWow64\MP4SDECD.DLL
2013-02-16 08:53:54 263680 ----a-w- C:\Windows\System32\wbem\netttcim.dll
2013-02-16 08:53:54 22528 ----a-w- C:\Windows\System32\adhapi.dll
2013-02-16 08:53:54 17920 ----a-w- C:\Windows\System32\httpprxp.dll
2013-02-16 08:53:54 15872 ----a-w- C:\Windows\System32\keepaliveprovider.dll
2013-02-16 08:53:54 107520 ----a-w- C:\Windows\System32\httpprxm.dll
2013-02-14 23:34:51 6967016 ----a-w- C:\Windows\System32\ntoskrnl.exe
2013-02-14 07:15:39 817664 ----a-w- C:\Program Files (x86)\Common Files

\Microsoft Shared\VGX\VGX.dll
2013-02-14 07:15:39 1084416 ----a-w- C:\Program Files\Common Files\Microsoft

Shared\VGX\VGX.dll
2013-02-11 00:21:34 262560 ----a-w- C:\Windows\SysWow64\javaws.exe
2013-02-11 00:01:19 -------- d-----w- C:\763cf98cce0fcb2160794431c70562
2013-02-10 23:53:33 -------- d-----w- C:\ProgramData\{CED89F1A-945F-

46EC-B23C-5EAF6D2DB12A}
2013-02-10 23:51:32 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Roaming\Apple Computer
2013-02-10 23:51:32 -------- d-----w- C:\ProgramData\{D76294E6-03B8-4971

-AF2E-3F846161A690}
2013-02-10 23:51:25 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Roaming\IObit
2013-02-10 21:07:23 -------- d-----w- C:\Users\Gordon Vooght\AppData

\Roaming\DivX
.
==================== Find6M ====================
.
2013-04-04 13:50:32 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys
2013-04-02 10:34:28 282744 ------w- C:\Windows\System32\MpSigStub.exe
2013-03-15 12:21:50 72013344 ----a-w- C:\Windows\System32\MRT.exe
2013-03-08 10:15:46 174496 ----a-w- C:\Windows\SysWow64\javaw.exe
2013-03-08 10:15:45 861088 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll
2013-03-08 10:15:45 782240 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2013-03-08 10:15:45 174496 ----a-w- C:\Windows\SysWow64\java.exe
2013-03-05 23:07:25 78168 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2013-03-05 23:07:25 692568 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2013-02-15 07:58:59 39936 ----a-w- C:\Windows\apppatch\apppatch64\acspecfc.dll
2013-02-15 06:35:40 444416 ----a-w- C:\Windows\apppatch\AcSpecfc.dll
2013-02-06 07:42:10 203544 ----a-w- C:\Windows\System32\drivers\ssudmdm.sys
2013-02-06 07:42:08 102936 ----a-w- C:\Windows\System32\drivers\ssudbus.sys
2013-02-02 09:42:07 2207232 ----a-w- C:\Windows\SysWow64\PrintConfig.dll
2012-12-21 06:46:02 104184 ----a-w- C:\Windows\System32\drivers\AtihdW86.sys
2012-12-19 20:50:14 5630200 ----a-w- C:\Windows\SysWow64\atiumdag.dll
2012-12-19 20:48:48 11278336 ----a-w- C:\Windows\System32\drivers

\atikmdag.sys
2012-12-19 20:29:36 23461376 ----a-w- C:\Windows\System32\atio6axx.dll
2012-12-19 20:22:50 70144 ----a-w- C:\Windows\System32\coinst_9.012.dll
2012-12-19 20:19:46 163840 ----a-w- C:\Windows\System32\atiapfxx.exe
2012-12-19 20:18:04 51200 ----a-w- C:\Windows\System32\aticalrt64.dll
2012-12-19 20:18:02 46080 ----a-w- C:\Windows\SysWow64\aticalrt.dll
2012-12-19 20:17:54 44544 ----a-w- C:\Windows\System32\aticalcl64.dll
2012-12-19 20:17:52 44032 ----a-w- C:\Windows\SysWow64\aticalcl.dll
2012-12-19 20:17:40 16082944 ----a-w- C:\Windows\System32\aticaldd64.dll
2012-12-19 20:13:24 13703168 ----a-w- C:\Windows\SysWow64\aticaldd.dll
2012-12-19 20:12:44 18982400 ----a-w- C:\Windows\SysWow64\atioglxx.dll
2012-12-19 20:09:52 960512 ----a-w- C:\Windows\SysWow64\aticfx32.dll
2012-12-19 20:08:04 1151488 ----a-w- C:\Windows\System32\aticfx64.dll
2012-12-19 20:06:00 6681088 ----a-w- C:\Windows\SysWow64\atidxx32.dll
2012-12-19 19:59:44 5087744 ----a-w- C:\Windows\System32\atiumd6a.dll
2012-12-19 19:57:00 442368 ----a-w- C:\Windows\System32\atidemgy.dll
2012-12-19 19:56:46 550912 ----a-w- C:\Windows\System32\atieclxx.exe
2012-12-19 19:56:00 240640 ----a-w- C:\Windows\System32\atiesrxx.exe
2012-12-19 19:54:38 120320 ----a-w- C:\Windows\System32\atitmm64.dll
2012-12-19 19:54:22 21504 ----a-w- C:\Windows\System32\atimuixx.dll
2012-12-19 19:54:18 59392 ----a-w- C:\Windows\System32\atiedu64.dll
2012-12-19 19:54:12 43520 ----a-w- C:\Windows\SysWow64\ati2edxx.dll
2012-12-19 19:49:00 7370752 ----a-w- C:\Windows\System32\atidxx64.dll
2012-12-19 19:44:28 4162048 ----a-w- C:\Windows\SysWow64\atiumdva.dll
2012-12-19 19:44:12 6786560 ----a-w- C:\Windows\System32\atiumd64.dll
2012-12-19 19:33:54 56320 ----a-w- C:\Windows\System32\amdpcom64.dll
2012-12-19 19:33:50 56320 ----a-w- C:\Windows\System32\atimpc64.dll
2012-12-19 19:33:44 56832 ----a-w- C:\Windows\SysWow64\amdpcom32.dll
2012-12-19 19:33:42 619008 ----a-w- C:\Windows\System32\atiadlxx.dll
2012-12-19 19:33:40 56832 ----a-w- C:\Windows\SysWow64\atimpc32.dll
2012-12-19 19:33:32 421888 ----a-w- C:\Windows\SysWow64\atiadlxy.dll
2012-12-19 19:33:18 17920 ----a-w- C:\Windows\System32\atig6pxx.dll
2012-12-19 19:33:14 14848 ----a-w- C:\Windows\SysWow64\atiglpxx.dll
2012-12-19 19:33:14 14848 ----a-w- C:\Windows\System32\atiglpxx.dll
2012-12-19 19:33:10 41984 ----a-w- C:\Windows\System32\atig6txx.dll
2012-12-19 19:33:04 33280 ----a-w- C:\Windows\SysWow64\atigktxx.dll
2012-12-19 19:32:54 552960 ----a-w- C:\Windows\System32\drivers\atikmpag.sys
2012-12-19 19:31:14 130048 ----a-w- C:\Windows\System32\atiuxp64.dll
2012-12-19 19:31:08 109568 ----a-w- C:\Windows\SysWow64\atiuxpag.dll
2012-12-19 19:31:00 104448 ----a-w- C:\Windows\System32\atiu9p64.dll
2012-12-19 19:30:52 83968 ----a-w- C:\Windows\SysWow64\atiu9pag.dll
2012-12-19 19:30:16 53248 ----a-w- C:\Windows\System32\drivers\ati2erec.dll
2012-12-19 15:45:12 222720 ----a-w- C:\Windows\System32\clinfo.exe
2012-12-19 15:44:48 76288 ----a-w- C:\Windows\System32\OpenVideo64.dll
2012-12-19 15:44:42 65536 ----a-w- C:\Windows\SysWow64\OpenVideo.dll
2012-12-19 15:44:36 64000 ----a-w- C:\Windows\System32\OVDecode64.dll
2012-12-19 15:44:32 56320 ----a-w- C:\Windows\SysWow64\OVDecode.dll
2012-12-19 15:44:20 34518016 ----a-w- C:\Windows\System32\amdocl64.dll
2012-12-19 15:38:48 28732928 ----a-w- C:\Windows\SysWow64\amdocl.dll
2012-12-19 15:34:40 54784 ----a-w- C:\Windows\System32\OpenCL.dll
2012-12-19 15:34:38 50176 ----a-w- C:\Windows\SysWow64\OpenCL.dll
2012-12-16 08:28:20 46080 ----a-w- C:\Windows\System32\atmlib.dll
2012-12-16 08:20:01 35328 ----a-w- C:\Windows\SysWow64\atmlib.dll
2012-12-16 08:08:33 362496 ----a-w- C:\Windows\System32\atmfd.dll
2012-12-16 07:57:09 300032 ----a-w- C:\Windows\SysWow64\atmfd.dll
2012-12-11 17:33:49 151552 ----a-w- C:\Windows\KMSEmulator.exe
2012-12-06 04:23:00 170496 ----a-w- C:\Windows\System32\TimeBrokerServer.dll
2012-12-06 04:22:59 178176 ----a-w- C:\Windows

\System32\SystemEventsBrokerServer.dll
2012-12-04 04:21:42 368640 ----a-w- C:\Windows\System32\sppwinob.dll
2012-11-29 05:05:57 707584 ----a-w- C:\Windows

\System32\AppXDeploymentExtensions.dll
2012-11-29 05:05:57 1131520 ----a-w- C:\Windows

\System32\AppXDeploymentServer.dll
2012-11-27 06:39:46 1122768 ----a-w- C:\Windows\System32\Taskmgr.exe
2012-11-27 06:27:11 58288 ----a-w- C:\Windows\System32\wuauclt.exe
2012-11-27 04:49:20 1027152 ----a-w- C:\Windows\SysWow64\Taskmgr.exe
2012-11-27 04:20:50 1048064 ----a-w- C:\Windows\SysWow64\mstsc.exe
2012-11-27 04:20:42 179200 ----a-w- C:\Windows\SysWow64\wpnapps.dll
2012-11-27 04:20:35 891904 ----a-w- C:\Windows\SysWow64\winmde.dll
2012-11-27 04:20:31 798208 ----a-w- C:\Windows\SysWow64\WebcamUi.dll
2012-11-27 04:20:29 46592 ----a-w- C:\Windows\SysWow64\vds_ps.dll
2012-11-27 04:20:28 560128 ----a-w- C:\Windows\SysWow64\UserLanguagesCpl.dll
2012-11-27 04:20:23 1217536 ----a-w- C:\Windows\SysWow64\storagewmi.dll
2012-11-27 04:20:15 680960 ----a-w- C:\Windows\System32\vds.exe
2012-11-27 04:20:07 702464 ----a-w- C:\Windows\SysWow64\nshwfp.dll
2012-11-27 04:20:07 1123840 ----a-w- C:\Windows\System32\mstsc.exe
2012-11-27 04:19:52 3345920 ----a-w- C:\Windows\System32\wuaueng.dll
2012-11-27 04:19:50 244736 ----a-w- C:\Windows\System32\wpnapps.dll
2012-11-27 04:19:48 1096704 ----a-w- C:\Windows\System32\wmpmde.dll
2012-11-27 04:19:42 1145856 ----a-w- C:\Windows\System32\winmde.dll
2012-11-27 04:19:37 955904 ----a-w- C:\Windows\System32\WebcamUi.dll
2012-11-27 04:19:33 631808 ----a-w- C:\Windows\System32\UserLanguagesCpl.dll
2012-11-27 04:19:32 245248 ----a-w- C:\Windows\System32\usbmon.dll
2012-11-27 04:19:25 173568 ----a-w- C:\Windows\System32\storewuauth.dll
2012-11-27 04:19:25 1536512 ----a-w- C:\Windows\System32\storagewmi.dll
2012-11-27 04:19:22 245248 ----a-w- C:\Windows\SysWow64\FWPUCLNT.DLL
2012-11-27 04:19:09 3245568 ----a-w- C:\Windows\System32\rdpcorets.dll
2012-11-27 04:18:59 888832 ----a-w- C:\Windows\System32\nshwfp.dll
2012-11-27 04:18:13 1071104 ----a-w- C:\Windows\System32\IKEEXT.DLL
2012-11-27 04:18:06 378880 ----a-w- C:\Windows\System32\FWPUCLNT.DLL
2012-11-27 04:17:32 718848 ----a-w- C:\Windows\System32\BFE.DLL
2012-11-26 04:21:18 71168 ----a-w- C:\Windows\SysWow64\ncryptsslp.dll
2012-11-26 04:20:09 86016 ----a-w- C:\Windows\System32\ncryptsslp.dll
2012-11-20 05:24:19 1164800 ----a-w- C:\Windows\SysWow64\Display.dll
2012-11-20 05:24:17 36352 ----a-w- C:\Windows\SysWow64\DevDispItemProvider.dll
2012-11-20 05:17:23 1184256 ----a-w- C:\Windows\System32\Display.dll
2012-11-20 05:17:20 49152 ----a-w- C:\Windows\System32\DevDispItemProvider.dll
2012-11-20 05:02:46 6656 ----a-w- C:\Windows\SysWow64\KBDKURD.DLL
2012-11-20 04:59:26 7168 ----a-w- C:\Windows\System32\KBDKURD.DLL
2012-11-20 04:56:27 27136 ----a-w- C:\Windows\System32\drivers\usbohci.sys
2012-11-20 04:54:31 39936 ----a-w- C:\Windows\System32\drivers\hidi2c.sys
2012-11-10 04:23:25 132608 ----a-w- C:\Windows\SysWow64\poqexec.exe
2012-11-10 04:23:18 148480 ----a-w- C:\Windows\System32\poqexec.exe
2012-11-10 04:22:40 122880 ----a-w- C:\Windows\System32\VmHostAI.dll
2012-11-10 04:22:35 144384 ----a-w- C:\Windows\System32\tssdisai.dll
2012-11-10 04:22:14 126976 ----a-w- C:\Windows\System32\RDWebAI.dll
2012-11-10 04:20:20 135680 ----a-w- C:\Windows\System32\appserverai.dll
2012-11-09 04:49:51 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-11-09 04:03:48 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-11-08 04:25:36 523776 ----a-w- C:\Windows\SysWow64\WSShared.dll
2012-11-08 04:25:36 143872 ----a-w- C:\Windows

\SysWow64\Windows.ApplicationModel.Store.dll
2012-11-08 04:25:36 124928 ----a-w- C:\Windows

\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2012-11-08 04:24:19 75776 ----a-w- C:\Windows\SysWow64\fontsub.dll
2012-11-08 04:24:06 10752 ----a-w- C:\Windows\SysWow64\dciman32.dll
2012-11-08 04:22:21 641536 ----a-w- C:\Windows\System32\WSShared.dll
2012-11-08 04:22:20 198656 ----a-w- C:\Windows

\System32\Windows.ApplicationModel.Store.dll
2012-11-08 04:22:20 163840 ----a-w- C:\Windows

\System32\Windows.ApplicationModel.Store.TestingFramework.dll
2012-11-08 04:21:00 53248 ----a-w- C:\Windows\System32\jsproxy.dll
2012-11-08 04:20:56 67072 ----a-w- C:\Windows\System32\iesetup.dll
2012-11-08 04:20:55 39936 ----a-w- C:\Windows\System32\iernonce.dll
2012-11-08 04:20:50 96256 ----a-w- C:\Windows\System32\fontsub.dll
2012-11-08 04:20:37 14336 ----a-w- C:\Windows\System32\dciman32.dll
2012-11-08 04:02:16 3072 ----a-w- C:\Windows\System32\lpk.dll
2012-11-08 04:01:40 3072 ----a-w- C:\Windows\SysWow64\lpk.dll
2012-11-06 07:52:04 277736 ----a-w- C:\Windows\System32\drivers\msiscsi.sys
2012-11-06 07:33:46 522640 ----a-w- C:\Windows\System32\AUDIOKSE.dll
2012-11-06 07:33:46 253512 ----a-w- C:\Windows\System32\audiodg.exe
2012-11-06 07:33:45 490064 ----a-w- C:\Windows\System32\AudioEng.dll
2012-11-06 07:33:45 447792 ----a-w- C:\Windows\System32\AudioSes.dll
2012-11-06 07:33:30 1566432 ----a-w- C:\Windows\System32\ole32.dll
2012-11-06 05:00:06 463768 ----a-w- C:\Windows\SysWow64\AUDIOKSE.dll
2012-11-06 05:00:06 427568 ----a-w- C:\Windows\SysWow64\AudioEng.dll
2012-11-06 05:00:06 324344 ----a-w- C:\Windows\SysWow64\AudioSes.dll
2012-11-06 04:48:27 1150160 ----a-w- C:\Windows\SysWow64\ole32.dll
2012-11-06 04:19:59 470016 ----a-w- C:\Windows\System32\wlanmsm.dll
2012-11-06 04:18:58 84992 ----a-w- C:\Windows\SysWow64\fdWCN.dll
2012-11-06 04:17:58 110080 ----a-w- C:\Windows\System32\dafWCN.dll
2012-11-06 04:17:42 785920 ----a-w- C:\Windows\System32\audiosrv.dll
2012-11-06 04:17:41 169472 ----a-w- C:\Windows

\System32\AudioEndpointBuilder.dll
2012-11-06 04:17:32 212992 ----a-w- C:\Windows\System32\bthprops.cpl
2012-11-06 04:00:44 99328 ----a-w- C:\Windows\System32\wushareduxresources.dll
2012-11-06 04:00:17 16384 ----a-w- C:\Windows\System32\iscsilog.dll
2012-11-06 03:58:53 9728 ----a-w- C:\Windows\System32\wlanhlp.dll
2012-11-06 03:56:35 9728 ----a-w- C:\Windows\SysWow64\wlanhlp.dll
2012-11-06 03:55:44 22528 ----a-w- C:\Windows\System32\drivers\fxppm.sys
2012-11-06 03:55:02 90624 ----a-w- C:\Windows\System32\drivers\amdk8.sys
2012-11-06 03:55:02 89088 ----a-w- C:\Windows\System32\drivers\intelppm.sys
2012-11-06 03:55:02 88064 ----a-w- C:\Windows\System32\drivers\amdppm.sys
2012-11-06 03:55:02 87552 ----a-w- C:\Windows\System32\drivers\processr.sys
2012-11-06 03:54:09 859136 ----a-w- C:\Windows\System32\drivers\http.sys
2012-11-06 03:53:44 560640 ----a-w- C:\Windows\System32\drivers\afd.sys
2012-11-06 03:51:47 665600 ----a-w- C:\Windows\SysWow64\KernelBase.dll
2012-11-03 05:26:59 132096 ----a-w- C:\Windows\System32\sysreset.exe
2012-11-03 05:26:40 34816 ----a-w- C:\Windows\System32\dpnsvr.exe
2012-11-03 05:26:12 32256 ----a-w- C:\Windows\SysWow64\dpnsvr.exe
2012-11-03 05:25:40 945152 ----a-w- C:\Windows\System32\resetengmig.dll
2012-11-03 05:24:34 8192 ----a-w- C:\Windows\SysWow64\dpnhupnp.dll
2012-11-03 05:24:34 8192 ----a-w- C:\Windows\SysWow64\dpnhpast.dll
2012-11-03 05:24:34 58880 ----a-w- C:\Windows\SysWow64\dpnathlp.dll
2012-11-03 05:24:34 375808 ----a-w- C:\Windows\SysWow64\dpnet.dll
2012-11-03 05:24:11 9216 ----a-w- C:\Windows\System32\dpnhupnp.dll
2012-11-03 05:24:11 9216 ----a-w- C:\Windows\System32\dpnhpast.dll
2012-11-03 05:24:11 67584 ----a-w- C:\Windows\System32\dpnathlp.dll
2012-11-03 05:24:11 463872 ----a-w- C:\Windows\System32\dpnet.dll
2012-11-03 05:04:21 4096 ----a-w- C:\Windows\System32\dpnlobby.dll
2012-11-03 05:04:19 3584 ----a-w- C:\Windows\System32\dpnaddr.dll
2012-11-03 05:00:54 3072 ----a-w- C:\Windows\SysWow64\dpnlobby.dll
2012-11-03 05:00:53 2560 ----a-w- C:\Windows\SysWow64\dpnaddr.dll
2012-11-02 05:20:09 48640 ----a-w- C:\Windows\System32\wups2.dll
2012-11-01 04:41:15 1802240 ----a-w- C:\Windows\SysWow64\msxml6.dll
2012-11-01 04:41:15 1438720 ----a-w- C:\Windows\SysWow64\msxml3.dll
2012-11-01 04:40:20 2361344 ----a-w- C:\Windows\System32\msxml6.dll
2012-11-01 04:40:20 1836032 ----a-w- C:\Windows\System32\msxml3.dll
2012-11-01 04:21:51 2048 ----a-w- C:\Windows\System32\msxml6r.dll
2012-11-01 04:21:50 2048 ----a-w- C:\Windows\System32\msxml3r.dll
2012-11-01 04:20:44 2048 ----a-w- C:\Windows\SysWow64\msxml6r.dll
2012-11-01 04:20:37 2048 ----a-w- C:\Windows\SysWow64\msxml3r.dll
2012-10-24 04:54:04 396008 ----a-w- C:\Windows\System32\hal.dll
2012-10-24 03:25:41 26624 ----a-w- C:\Windows\System32\ReAgentc.exe
2012-10-24 03:25:40 13312 ----a-w- C:\Windows\System32\pcalua.exe
2012-10-24 03:24:35 405504 ----a-w- C:\Windows\System32\pcasvc.dll
2012-10-24 03:24:35 31232 ----a-w- C:\Windows\System32\pcadm.dll
2012-10-24 03:05:31 11776 ----a-w- C:\Windows\System32\pcaevts.dll
2012-10-24 02:48:12 24064 ----a-w- C:\Windows\SysWow64\ReAgentc.exe
2012-10-20 02:25:35 310784 ----a-w- C:\Windows\apppatch\AcRes.dll
2012-10-17 04:32:52 1172992 ----a-w- C:\Windows\System32\mfnetsrc.dll
2012-10-17 04:32:51 677888 ----a-w- C:\Windows\System32\mfnetcore.dll
2012-10-17 04:32:51 673280 ----a-w- C:\Windows\System32\mfmpeg2srcsnk.dll
2012-10-17 04:32:50 1048064 ----a-w- C:\Windows\System32\mfasfsrcsnk.dll
2012-10-17 03:57:37 929792 ----a-w- C:\Windows\SysWow64\mfnetsrc.dll
2012-10-17 03:57:37 568832 ----a-w- C:\Windows\SysWow64\mfnetcore.dll
2012-10-17 03:57:37 513024 ----a-w- C:\Windows\SysWow64\mfmpeg2srcsnk.dll
2012-10-17 03:57:36 850944 ----a-w- C:\Windows\SysWow64\mfasfsrcsnk.dll
.
============= FINISH: 11:44:29.97 ===============

broni · 2013/04/11

Please disable "word wrap" in Notepad and repost DDS.txt log.
I can't read it in the form you just posted.

I have a phone icon and "YOUR-04CB4C8045" on my pc
Click to expand...

Where exactly do you see it?

Cabal18 · 2013/04/12

I found this in my Network folder if I click on it ,it ask for PW(password) and ID and doesn't belong to me or the pc this is a new pc Advent 2410 .

Cabal18 · 2013/04/12

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 10.0.9200.16519 BrowserJavaVersion: 10.17.2
Run by Gordon Vooght at 11:43:51 on 2013-04-11
#Option Extended Search is enabled.
#Option Whitelisting is disabled.
Microsoft Windows 8 6.2.9200.0.1252.44.1033.18.8148.6131 [GMT 1:00]
.
AV: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\dwm.exe
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\atieclxx.exe
C:\Program Files\Tablet\Pen\Pen_TouchService.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\system32\dashost.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Tablet\Pen\Pen_Tablet.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\taskhostex.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\Explorer.EXE
C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Tablet\Pen\Pen_Tablet.exe
C:\Program Files (x86)\Glary Utilities\Integrator.exe
C:\Windows\System32\WUDFHost.exe
C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
C:\Program Files (x86)\Led Indicator Keyboard Driver\KeyboardIndicator.exe
C:\Program Files (x86)\Gadwin Systems\PrintScreenPro\PrintScreenPro.exe
C:\Windows\splwow64.exe
C:\Program Files (x86)\KNOWHOW\KNOWHOWAPPCENTRE\bin\ismagent.exe
C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Nero\Update\NASvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler.exe
C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler64.exe
C:\Windows\System32\Taskmgr.exe
C:\Program Files (x86)\Glary Utilities\regrepair.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Windows\System32\RuntimeBroker.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Windows\System32\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
uLocal Page = C:\Windows\System32\blank.htm
uSearch Bar = Preserve
mStart Page = hxxp://www.bigseekpro.com/tempcleaner/{8CE9CDA3-641C-47A5-B045-FEF83E808A9A}
mLocal Page = C:\Windows\SysWOW64\blank.htm
mSearch Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
mDefault_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
mDefault_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
uURLSearchHooks: Microsoft Url Search Hook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll
mWinlogon: Shell = explorer.exe
mWinlogon: Userinit = userinit.exe,
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
BHO: {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - <orphaned>
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
uRun: [LedIndicatorKeyboardDriver] "C:\Program Files (x86)\Led Indicator Keyboard Driver\KeyboardIndicator.exe" showhide
uRun: [Gadwin PrintScreen Pro] "C:\Program Files (x86)\Gadwin Systems\PrintScreenPro\PrintScreenPro.exe" /nosplash
mRun: [KNOWHOW APP CENTRE] "C:\Program Files (x86)\KNOWHOW\KNOWHOWAPPCENTRE\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
mRun: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe "
mRun: [BambooCore] C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe "
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: ForceActiveDesktopOn = dword:0
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-System: EnableVirtualization = dword:1
mPolicies-System: EnableInstallerDetection = dword:1
mPolicies-System: PromptOnSecureDesktop = dword:1
mPolicies-System: EnableLUA = dword:1
mPolicies-System: EnableSecureUIAPaths = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ValidateAdminCodeSignatures = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: EnableCursorSuppression = dword:1
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: dontdisplaylastusername = dword:0
mPolicies-System: scforceoption = dword:0
mPolicies-System: shutdownwithoutlogon = dword:1
mPolicies-System: undockwithoutlogon = dword:1
mPolicies-System: FilterAdministratorToken = dword:0
mPolicies-System: EnableLinkedConnections = dword:1

Cabal18 · 2013/04/12

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - <orphaned>
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
LSP: %SystemRoot%\system32\mswsock.dll
Trusted Zone: clonewarsadventures.com
Trusted Zone: freerealms.com
Trusted Zone: soe.com
Trusted Zone: sony.com
DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} - hxxp://www.pcpitstop.com/betapit/PCPitStop.CAB
DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} -
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
TCP: NameServer = 192.168.0.1
TCP: Interfaces\{5501DBE1-77D3-4F06-AE0E-EF582C45AB90} : DHCPNameServer = 192.168.0.1
TCP: Interfaces\{DC97CEAA-9E88-4138-AB4F-169621B5D3A2} : DHCPNameServer = 192.168.0.1
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll
Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll
Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll
Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - LocalServer32 - <no file>
Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll
Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll
Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - LocalServer32 - <no file>
Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll
Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll
Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - <orphaned>
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
Name-Space Handler: mk\* - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll
SSODL: WebCheck - <orphaned>
SecurityProviders: SecurityProviders = credssp.dll
LSA: Authentication Packages = msv1_0
LSA: Notification Packages = scecli
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg pku2u livessp
SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 sxssrv,4
mASetup: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\unregmp2.exe /ShowWMP
mASetup: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "C:\Program Files (x86)\Windows Mail\WinMail.exe" OCInstallUserConfigOE
mASetup: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\System32\unregmp2.exe /FirstLogon
mASetup: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\26.0.1410.64\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
mASetup: {A6EADE66-0000-0000-484E-7E8A45000000} - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Program Files (x86)\Adobe\Reader 11.0\Esl\AiodLite.dll ",CreateReaderUserSettings
CLSID: {603D3801-BD81-11d0-A3A5-00C04FD706EC} - C:\Windows\System32\shell32.dll
x64-mStart Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
x64-mLocal Page = C:\Windows\System32\blank.htm
x64-mSearch Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
x64-mDefault_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141
x64-mDefault_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
x64-mWinlogon: Shell = explorer.exe
x64-mWinlogon: Userinit = C:\Windows\System32\userinit.exe,
x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
x64-Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
x64-mPolicies-Explorer: ForceActiveDesktopOn = dword:0
x64-mPolicies-Explorer: NoActiveDesktopChanges = dword:1
x64-mPolicies-Explorer: NoActiveDesktop = dword:1
x64-mPolicies-System: EnableVirtualization = dword:1
x64-mPolicies-System: EnableInstallerDetection = dword:1
x64-mPolicies-System: PromptOnSecureDesktop = dword:1
x64-mPolicies-System: EnableLUA = dword:1
x64-mPolicies-System: EnableSecureUIAPaths = dword:1
x64-mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
x64-mPolicies-System: ValidateAdminCodeSignatures = dword:0
x64-mPolicies-System: EnableUIADesktopToggle = dword:0
x64-mPolicies-System: EnableCursorSuppression = dword:1
x64-mPolicies-System: ConsentPromptBehaviorUser = dword:3
x64-mPolicies-System: dontdisplaylastusername = dword:0
x64-mPolicies-System: scforceoption = dword:0
x64-mPolicies-System: shutdownwithoutlogon = dword:1
x64-mPolicies-System: undockwithoutlogon = dword:1
x64-mPolicies-System: FilterAdministratorToken = dword:0
x64-mPolicies-System: EnableLinkedConnections = dword:1
x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
x64-Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll
x64-Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll
x64-Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll
x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
x64-Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
x64-Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll
x64-Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll
x64-Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll
x64-Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
x64-Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - <orphaned>
x64-Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
x64-Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll
x64-Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll
x64-Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - <orphaned>
x64-Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll
x64-Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - <orphaned>
x64-Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll
x64-Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
x64-Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - <orphaned>
x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
x64-Name-Space Handler: mk\* - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll
x64-SSODL: WebCheck - <orphaned>
x64-mASetup: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\unregmp2.exe /ShowWMP
x64-mASetup: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\Windows\System32\regsvr32.exe /s /n /i:/UserInstall C:\Windows\System32\themeui.dll
x64-mASetup: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "C:\Program Files (x86)\Windows Mail\WinMail.exe" OCInstallUserConfigOE
x64-mASetup: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\System32\unregmp2.exe /FirstLogon
x64-mASetup: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U C:\Windows\System32\shell32.dll
x64-mASetup: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
x64-mASetup: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
x64-CLSID: {603D3801-BD81-11d0-A3A5-00C04FD706EC} - C:\Windows\System32\shell32.dll

Cabal18 · 2013/04/12

============= SERVICES / DRIVERS ===============
.
R0 ACPI;Microsoft ACPI Driver;C:\Windows\System32\Drivers\acpi.sys [2012-12-24 425192]
R0 CLFS;Common Log (CLFS);C:\Windows\System32\Drivers\clfs.sys [2012-7-26 361200]
R0 CNG;CNG;C:\Windows\System32\Drivers\cng.sys [2012-12-15 562392]
R0 disk;Disk Driver;C:\Windows\System32\Drivers\disk.sys [2012-7-26 102640]
R0 FileInfo;File Information FS MiniFilter;C:\Windows\System32\Drivers\fileinfo.sys [2012-7-26 71920]
R0 FltMgr;FltMgr;C:\Windows\System32\Drivers\fltMgr.sys [2012-7-26 374512]
R0 fvevol;BitLocker Drive Encryption Filter Driver;C:\Windows\System32\Drivers\fvevol.sys [2012-7-26 465136]
R0 KSecDD;KSecDD;C:\Windows\System32\Drivers\ksecdd.sys [2012-7-26 100080]
R0 KSecPkg;KSecPkg;C:\Windows\System32\Drivers\ksecpkg.sys [2012-12-15 172264]
R0 mountmgr;Mount Point Manager;C:\Windows\System32\Drivers\mountmgr.sys [2012-7-26 93936]
R0 msisadrv;msisadrv;C:\Windows\System32\Drivers\msisadrv.sys [2012-7-26 17136]
R0 Mup;Mup;C:\Windows\System32\Drivers\mup.sys [2012-7-26 83696]
R0 NDIS;NDIS System Driver;C:\Windows\System32\Drivers\ndis.sys [2013-3-15 993512]
R0 partmgr;Partition Manager;C:\Windows\System32\Drivers\partmgr.sys [2013-2-16 91880]
R0 pci;PCI Bus Driver;C:\Windows\System32\Drivers\pci.sys [2012-7-26 234224]
R0 pcw;Performance Counters for Windows Driver;C:\Windows\System32\Drivers\pcw.sys [2012-7-26 52464]
R0 rdyboost;ReadyBoost;C:\Windows\System32\Drivers\rdyboost.sys [2012-7-26 217328]
R0 Tcpip;TCP/IP Protocol Driver;C:\Windows\System32\Drivers\tcpip.sys [2013-3-15 2226408]
R0 vdrvroot;Microsoft Virtual Drive Enumerator;C:\Windows\System32\Drivers\vdrvroot.sys [2012-7-26 36080]
R0 volmgr;Volume Manager Driver;C:\Windows\System32\Drivers\volmgr.sys [2012-7-26 83184]
R0 volmgrx;Dynamic Volume Manager;C:\Windows\System32\Drivers\volmgrx.sys [2012-7-26 378608]
R0 volsnap;Storage volumes;C:\Windows\System32\Drivers\volsnap.sys [2012-7-26 332016]
R0 Wdf01000;Kernel Mode Driver Frameworks service;C:\Windows\System32\Drivers\Wdf01000.sys [2013-2-16 785504]
R1 AFD;Ancillary Function Driver for Winsock;C:\Windows\System32\Drivers\afd.sys [2012-12-13 560640]
R1 Beep;Beep;C:\Windows\System32\Drivers\beep.sys [2012-7-26 7680]
R1 cdrom;CD-ROM Driver;C:\Windows\System32\Drivers\cdrom.sys [2012-7-26 174080]
R1 Dfsc;DFS Namespace Client Driver;C:\Windows\System32\Drivers\dfsc.sys [2012-7-26 118784]
R1 discache;System Attribute Cache;C:\Windows\System32\Drivers\discache.sys [2012-7-26 50688]
R1 Msfs;Msfs;C:\Windows\System32\Drivers\msfs.sys [2012-7-26 26112]
R1 mssmbios;Microsoft System Management BIOS Driver;C:\Windows\System32\Drivers\mssmbios.sys [2012-7-26 37616]
R1 NetBIOS;NetBIOS Interface;C:\Windows\System32\Drivers\netbios.sys [2012-7-26 46080]
R1 NetBT;NetBT;C:\Windows\System32\Drivers\netbt.sys [2012-7-26 331776]
R1 Npfs;Npfs;C:\Windows\System32\Drivers\npfs.sys [2012-7-26 49152]
R1 nsiproxy;NSI Proxy Service Driver;C:\Windows\System32\Drivers\nsiproxy.sys [2012-7-26 34304]
R1 Null;Null;C:\Windows\System32\Drivers\null.sys [2012-7-26 5632]
R1 Psched;QoS Packet Scheduler;C:\Windows\System32\Drivers\pacer.sys [2012-7-26 145408]
R1 rdbss;Redirected Buffering Sub System;C:\Windows\System32\Drivers\rdbss.sys [2012-7-26 423936]
R1 tdx;NetIO Legacy TDI Support Driver;C:\Windows\System32\Drivers\tdx.sys [2012-7-26 117248]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\Drivers\vwififlt.sys [2012-7-26 64000]
R1 Wanarpv6;Remote Access IPv6 ARP Driver;C:\Windows\System32\Drivers\wanarp.sys [2012-7-26 83456]
R2 adfs;adfs;C:\Windows\System32\Drivers\adfs.sys [2008-6-27 88632]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2012-12-19 240640]
R2 AudioEndpointBuilder;Windows Audio Endpoint Builder;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
R2 Audiosrv;Windows Audio;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2012-7-26 30208]
R2 BFE;Base Filtering Engine;C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork [2012-7-26 30208]
R2 BITS;Background Intelligent Transfer Service;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 CryptSvc;Cryptographic Services;C:\Windows\System32\svchost.exe -k NetworkService [2012-7-26 30208]
R2 DcomLaunch;DCOM Server Process Launcher;C:\Windows\System32\svchost.exe -k DcomLaunch [2012-7-26 30208]
R2 Dhcp;DHCP Client;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2012-7-26 30208]
R2 Dnscache;DNS Client;C:\Windows\System32\svchost.exe -k NetworkService [2012-7-26 30208]
R2 DPS;Diagnostic Policy Service;C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork [2012-7-26 30208]
R2 EventLog;Windows Event Log;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2012-7-26 30208]
R2 EventSystem;COM+ Event System;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
R2 FontCache;Windows Font Cache Service;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-4-20 635104]
R2 iphlpsvc;IP Helper;C:\Windows\System32\svchost.exe -k NetSvcs [2012-7-26 30208]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe [2012-8-23 165760]
R2 LanmanServer;Server;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 LanmanWorkstation;Workstation;C:\Windows\System32\svchost.exe -k NetworkService [2012-7-26 30208]
R2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver;C:\Windows\System32\Drivers\lltdio.sys [2012-7-26 60416]
R2 lmhosts;TCP/IP NetBIOS Helper;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2012-7-26 30208]
R2 LMS;Intel(R) Management and Security Application Local Management Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-8-23 276864]
R2 luafv;UAC File Virtualization;C:\Windows\System32\Drivers\luafv.sys [2012-7-26 134144]
R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-1-15 418376]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-1-15 701512]
R2 MMCSS;Multimedia Class Scheduler;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 MpsSvc;Windows Firewall;C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork [2012-7-26 30208]
R2 NativeWifiP;NativeWiFi Filter;C:\Windows\System32\Drivers\nwifi.sys [2012-7-26 427520]
R2 NAUpdate;Nero Update;C:\Program Files (x86)\Nero\Update\NASvc.exe [2012-7-13 769432]
R2 NlaSvc;Network Location Awareness;C:\Windows\System32\svchost.exe -k NetworkService [2012-7-26 30208]
R2 nsi;Network Store Interface Service;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
R2 PcaSvc;Program Compatibility Assistant Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
R2 PEAUTH;PEAUTH;C:\Windows\System32\Drivers\PEAuth.sys [2012-7-26 804864]
R2 Power;Power;C:\Windows\System32\svchost.exe -k DcomLaunch [2012-7-26 30208]
R2 ProfSvc;User Profile Service;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 RpcEptMapper;RPC Endpoint Mapper;C:\Windows\System32\svchost.exe -k RPCSS [2012-7-26 30208]
R2 RpcSs;Remote Procedure Call (RPC);C:\Windows\System32\svchost.exe -k rpcss [2012-7-26 30208]
R2 rspndr;Link-Layer Topology Discovery Responder;C:\Windows\System32\Drivers\rspndr.sys [2012-7-26 78848]
R2 SamSs;Security Accounts Manager;C:\Windows\System32\lsass.exe [2012-7-26 35840]
R2 Schedule;Task Scheduler;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 secdrv;Security Driver;C:\Windows\System32\Drivers\secdrv.sys [2012-7-26 23040]
R2 seclogon;Secondary Logon;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 SENS;System Event Notification Service;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 ShellHWDetection;Shell Hardware Detection;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 Spooler;Print Spooler;C:\Windows\System32\spoolsv.exe [2012-7-26 769024]
R2 stisvc;Windows Image Acquisition (WIA);C:\Windows\System32\svchost.exe -k imgsvc [2012-7-26 30208]
R2 SysMain;Superfetch;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
R2 TabletInputService;Touch Keyboard and Handwriting Panel Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
R2 TabletServicePen;TabletServicePen;C:\Program Files\Tablet\Pen\Pen_Tablet.exe [2013-1-3 6581624]
R2 tcpipreg;TCP/IP Registry Compatibility;C:\Windows\System32\Drivers\tcpipreg.sys [2012-7-26 45056]
R2 Themes;Themes;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 TouchServicePen;Wacom Consumer Touch Service;C:\Program Files\Tablet\Pen\Pen_TouchService.exe [2013-1-3 528760]
R2 TrkWks;Distributed Link Tracking Client;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-8-23 364416]
R2 WinDefend;Windows Defender Service;C:\Program Files\Windows Defender\MsMpEng.exe [2013-3-26 14920]
R2 Winmgmt;Windows Management Instrumentation;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R2 WlanSvc;WLAN AutoConfig;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
R2 WMPNetworkSvc;Windows Media Player Network Sharing Service;C:\Program Files\Windows Media Player\wmpnetwk.exe [2012-7-26 1314304]
R2 wscsvc;Security Center;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2012-7-26 30208]
R2 WSearch;Windows Search;C:\Windows\System32\SearchIndexer.exe [2012-12-15 816128]
R3 AeLookupSvc;Application Experience;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R3 amdkmdag;amdkmdag;C:\Windows\System32\Drivers\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap;C:\Windows\System32\Drivers\atikmpag.sys [2012-12-19 552960]
R3 anvsnddrv;AnvSoft Virtual Sound Device;C:\Windows\System32\Drivers\anvsnddrv.sys [2013-1-16 33872]
R3 Appinfo;Application Information;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\Drivers\AtihdW86.sys [2012-12-21 104184]
R3 bowser;Browser Support Driver;C:\Windows\System32\Drivers\bowser.sys [2012-7-26 101888]
R3 CompositeBus;Composite Bus Enumerator Driver;C:\Windows\System32\Drivers\CompositeBus.sys [2012-7-26 36352]
R3 DXGKrnl;LDDM Graphics Subsystem;C:\Windows\System32\Drivers\dxgkrnl.sys [2013-2-16 1448168]
R3 fastfat;FAT12/16/32 File System Driver;C:\Windows\System32\Drivers\fastfat.sys [2012-7-26 210672]
R3 fdPHost;Function Discovery Provider Host;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]

Cabal18 · 2013/04/12

R3 FDResPub;Function Discovery Resource Publication;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2012-7-26 30208]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio;C:\Windows\System32\Drivers\hdaudbus.sys [2012-12-24 71168]
R3 hidserv;Human Interface Device Access;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
R3 HidUsb;Microsoft HID Class Driver;C:\Windows\System32\Drivers\hidusb.sys [2012-7-26 27648]
R3 HomeGroupListener;HomeGroup Listener;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
R3 HomeGroupProvider;HomeGroup Provider;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2012-7-26 30208]
R3 HTTP;HTTP Service;C:\Windows\System32\Drivers\http.sys [2012-12-13 859136]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM);C:\Windows\System32\Drivers\RTKVHD64.sys [2012-8-23 4065296]
R3 intelppm;Intel Processor Driver;C:\Windows\System32\Drivers\intelppm.sys [2012-12-13 89088]
R3 kbdclass;Keyboard Class Driver;C:\Windows\System32\Drivers\kbdclass.sys [2012-7-26 48368]
R3 kbdhid;Keyboard HID Driver;C:\Windows\System32\Drivers\kbdhid.sys [2012-7-26 29184]
R3 ksthunk;Kernel Streaming Thunks;C:\Windows\System32\Drivers\ksthunk.sys [2012-7-26 21376]
R3 MBAMProtector;MBAMProtector;C:\Windows\System32\Drivers\mbam.sys [2012-12-11 25928]
R3 MEIx64;Intel(R) Management Engine Interface ;C:\Windows\System32\Drivers\HECIx64.sys [2012-8-23 62784]
R3 monitor;Microsoft Monitor Class Function Driver Service;C:\Windows\System32\Drivers\monitor.sys [2012-7-26 30720]
R3 mouclass;Mouse Class Driver;C:\Windows\System32\Drivers\mouclass.sys [2012-7-26 45808]
R3 mouhid;Mouse HID Driver;C:\Windows\System32\Drivers\mouhid.sys [2012-7-26 26112]
R3 mpsdrv;Windows Firewall Authorization Driver;C:\Windows\System32\Drivers\mpsdrv.sys [2012-12-15 74752]
R3 mrxsmb;SMB MiniRedirector Wrapper and Engine;C:\Windows\System32\Drivers\mrxsmb.sys [2013-3-15 370688]
R3 mrxsmb10;SMB 1.x MiniRedirector;C:\Windows\System32\Drivers\mrxsmb10.sys [2012-7-26 279552]
R3 mrxsmb20;SMB 2.0 MiniRedirector;C:\Windows\System32\Drivers\mrxsmb20.sys [2013-3-15 215552]
R3 NdisTapi;Remote Access NDIS TAPI Driver;C:\Windows\System32\Drivers\ndistapi.sys [2012-7-26 25088]
R3 Ndisuio;NDIS Usermode I/O Protocol;C:\Windows\System32\Drivers\ndisuio.sys [2012-7-26 58880]
R3 NdisWan;Remote Access NDIS WAN Driver;C:\Windows\System32\Drivers\ndiswan.sys [2012-7-26 174080]
R3 NDProxy;NDIS Proxy;C:\Windows\System32\Drivers\ndproxy.sys [2012-7-26 60416]
R3 netprofm;Network List Service;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
R3 Ntfs;Ntfs;C:\Windows\System32\Drivers\ntfs.sys [2013-3-15 1933544]
R3 p2pimsvc;Peer Networking Identity Manager;C:\Windows\System32\svchost.exe -k LocalServicePeerNet [2012-7-26 30208]
R3 p2psvc;Peer Networking Grouping;C:\Windows\System32\svchost.exe -k LocalServicePeerNet [2012-7-26 30208]
R3 Parport;Parallel port driver;C:\Windows\System32\Drivers\parport.sys [2012-7-26 105984]
R3 PlugPlay;Plug and Play;C:\Windows\System32\svchost.exe -k DcomLaunch [2012-7-26 30208]
R3 PNRPsvc;Peer Name Resolution Protocol;C:\Windows\System32\svchost.exe -k LocalServicePeerNet [2012-7-26 30208]
R3 PolicyAgent;IPsec Policy Agent;C:\Windows\System32\svchost.exe -k NetworkServiceNetworkRestricted [2012-7-26 30208]
R3 PptpMiniport;WAN Miniport (PPTP);C:\Windows\System32\Drivers\raspptp.sys [2012-7-26 114176]
R3 RasAgileVpn;WAN Miniport (IKEv2);C:\Windows\System32\Drivers\agilevpn.sys [2012-7-26 68608]
R3 Rasl2tp;WAN Miniport (L2TP);C:\Windows\System32\Drivers\rasl2tp.sys [2012-7-26 124928]
R3 RasPppoe;Remote Access PPPOE Driver;C:\Windows\System32\Drivers\raspppoe.sys [2012-7-26 81920]
R3 RasSstp;WAN Miniport (SSTP);C:\Windows\System32\Drivers\rassstp.sys [2012-7-26 92672]
R3 rdpbus;Remote Desktop Device Redirector Bus Driver;C:\Windows\System32\Drivers\rdpbus.sys [2012-7-26 22528]
R3 RTL8168;Realtek 8168 NT Driver;C:\Windows\System32\Drivers\Rt630x64.sys [2012-8-23 683664]
R3 Serenum;Serenum Filter Driver;C:\Windows\System32\Drivers\serenum.sys [2012-7-26 23040]
R3 Serial;Serial port driver;C:\Windows\System32\Drivers\serial.sys [2012-7-26 76800]
R3 srv;Server SMB 1.xxx Driver;C:\Windows\System32\Drivers\srv.sys [2012-7-26 416768]
R3 srv2;Server SMB 2.xxx Driver;C:\Windows\System32\Drivers\srv2.sys [2013-3-15 622080]
R3 srvnet;srvnet;C:\Windows\System32\Drivers\srvnet.sys [2013-3-15 247808]
R3 SSDPSRV;SSDP Discovery;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2012-7-26 30208]
R3 swenum;Software Bus Driver;C:\Windows\System32\Drivers\swenum.sys [2012-7-26 13680]
R3 TPM;TPM;C:\Windows\System32\Drivers\tpm.sys [2012-12-24 148712]
R3 tunnel;Microsoft Tunnel Miniport Adapter Driver;C:\Windows\System32\Drivers\tunnel.sys [2012-7-26 149504]
R3 umbus;UMBus Enumerator Driver;C:\Windows\System32\Drivers\umbus.sys [2012-7-26 48128]
R3 upnphost;UPnP Device Host;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2012-7-26 30208]
R3 usbccgp;Microsoft USB Generic Parent Driver;C:\Windows\System32\Drivers\usbccgp.sys [2012-7-26 120832]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver;C:\Windows\System32\Drivers\usbehci.sys [2012-12-13 79080]
R3 usbhub;Microsoft USB Standard Hub Driver;C:\Windows\System32\Drivers\usbhub.sys [2013-3-15 496872]
R3 USBSTOR;USB Mass Storage Driver;C:\Windows\System32\Drivers\USBSTOR.SYS [2012-7-26 119024]
R3 VaultSvc;Credential Manager;C:\Windows\System32\lsass.exe [2012-7-26 35840]
R3 wacommousefilter;Wacom Mouse Filter Driver;C:\Windows\System32\Drivers\wacommousefilter.sys [2013-1-3 12848]
R3 wacomvhid;Wacom Virtual Hid Driver;C:\Windows\System32\Drivers\wacomvhid.sys [2013-1-3 16168]
R3 WdiServiceHost;Diagnostic Service Host;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
R3 WdiSystemHost;Diagnostic System Host;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
R3 WinHttpAutoProxySvc;WinHTTP Web Proxy Auto-Discovery Service;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
R3 WPDBusEnum;Portable Device Enumerator Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
R3 WudfPf;User Mode Driver Frameworks Platform Driver;C:\Windows\System32\Drivers\WUDFPf.sys [2012-7-26 87040]
R3 WUDFRd;Windows Driver Foundation - User-mode Driver Framework Reflector;C:\Windows\System32\Drivers\WUDFRd.sys [2012-7-26 198656]
R3 wudfsvc;Windows Driver Foundation - User-mode Driver Framework;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
R3 WUDFWpdFs;WUDFWpdFs;C:\Windows\System32\Drivers\WUDFRd.sys [2012-7-26 198656]
R3 WUDFWpdMtp;WUDFWpdMtp;C:\Windows\System32\Drivers\WUDFRd.sys [2012-7-26 198656]
S0 hwpolicy;Hardware Policy Driver;C:\Windows\System32\Drivers\hwpolicy.sys [2012-7-26 24816]
S2 gpsvc;Group Policy Client;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-3-1 116648]
S2 PnkBstrA;PnkBstrA;C:\Windows\System32\PnkBstrA.exe --> C:\Windows\System32\PnkBstrA.exe [?]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-1-8 161536]
S2 sppsvc;Software Protection;C:\Windows\System32\sppsvc.exe [2012-7-26 4881408]
S2 wuauserv;Windows Update;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 1394ohci;1394 OHCI Compliant Host Controller;C:\Windows\System32\Drivers\1394ohci.sys [2012-7-26 226304]
S3 AcpiPmi;ACPI Power Meter Driver;C:\Windows\System32\Drivers\acpipmi.sys [2012-7-26 12288]
S3 Adobe LM Service;Adobe LM Service;C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2012-12-11 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-8-23 250056]
S3 adp94xx;adp94xx;C:\Windows\System32\Drivers\adp94xx.sys [2012-6-2 492272]
S3 adpahci;adpahci;C:\Windows\System32\Drivers\adpahci.sys [2012-7-25 340720]
S3 adpu320;adpu320;C:\Windows\System32\Drivers\adpu320.sys [2012-7-25 184048]
S3 agp440;Intel AGP Bus Filter;C:\Windows\System32\Drivers\AGP440.sys [2012-7-26 63216]
S3 ALG;Application Layer Gateway Service;C:\Windows\System32\alg.exe [2012-7-26 94208]
S3 AmdK8;AMD K8 Processor Driver;C:\Windows\System32\Drivers\amdk8.sys [2012-12-13 90624]
S3 AmdPPM;AMD Processor Driver;C:\Windows\System32\Drivers\amdppm.sys [2012-12-13 88064]
S3 amdsata;amdsata;C:\Windows\System32\Drivers\amdsata.sys [2012-6-24 76016]
S3 amdsbs;amdsbs;C:\Windows\System32\Drivers\amdsbs.sys [2012-6-2 258288]
S3 amdxata;amdxata;C:\Windows\System32\Drivers\amdxata.sys [2012-7-25 26352]
S3 AppID;AppID Driver;C:\Windows\System32\Drivers\appid.sys [2012-7-26 79360]
S3 AppIDSvc;Application Identity;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2012-7-26 30208]
S3 arc;arc;C:\Windows\System32\Drivers\arc.sys [2012-7-25 104688]
S3 arcsas;Adaptec SAS/SATA-II RAID Windows Inbox Miniport Driver;C:\Windows\System32\Drivers\arcsas.sys [2012-7-25 108272]
S3 AsyncMac;RAS Asynchronous Media Driver;C:\Windows\System32\Drivers\asyncmac.sys [2012-7-26 26624]
S3 atapi;IDE Channel;C:\Windows\System32\Drivers\atapi.sys [2012-7-26 25840]
S3 AxInstSV;ActiveX Installer (AxInstSV);C:\Windows\System32\svchost.exe -k AxInstSVGroup [2012-7-26 30208]
S3 b06bdrv;Broadcom NetXtreme II VBD;C:\Windows\System32\Drivers\bxvbda.sys [2012-12-24 533224]
S3 BDESVC;BitLocker Drive Encryption Service;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 Browser;Computer Browser;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 BTHMODEM;Bluetooth Serial Communications Driver;C:\Windows\System32\Drivers\bthmodem.sys [2012-7-26 65536]
S3 bthserv;Bluetooth Support Service;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
S3 CertPropSvc;Certificate Propagation;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 circlass;Consumer IR Devices;C:\Windows\System32\Drivers\circlass.sys [2012-7-26 45056]
S3 CmBatt;Microsoft ACPI Control Method Battery Driver;C:\Windows\System32\Drivers\CmBatt.sys [2012-7-26 25600]
S3 COMSysApp;COM+ System Application;C:\Windows\System32\dllhost.exe [2012-7-26 10752]
S3 defragsvc;Optimize drives;C:\Windows\System32\svchost.exe -k defragsvc [2012-7-26 30208]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);C:\Windows\System32\Drivers\ssudbus.sys [2013-2-6 102936]
S3 dot3svc;Wired AutoConfig;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
S3 drmkaud;Microsoft Trusted Audio Drivers;C:\Windows\System32\Drivers\drmkaud.sys [2012-12-15 5632]
S3 Eaphost;Extensible Authentication Protocol;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 ebdrv;Broadcom NetXtreme II 10 GigE VBD;C:\Windows\System32\Drivers\evbda.sys [2012-12-24 3265256]
S3 EFS;Encrypting File System (EFS);C:\Windows\System32\lsass.exe [2012-7-26 35840]
S3 ErrDev;Microsoft Hardware Error Device Driver;C:\Windows\System32\Drivers\errdev.sys [2012-7-26 10240]
S3 exfat;exFAT File System Driver;C:\Windows\System32\Drivers\exfat.sys [2012-7-26 194560]
S3 Fax;Fax;C:\Windows\System32\FXSSVC.exe [2012-7-26 669696]
S3 fdc;Floppy Disk Controller Driver;C:\Windows\System32\Drivers\fdc.sys [2012-7-26 30720]
S3 Filetrace;Filetrace;C:\Windows\System32\Drivers\filetrace.sys [2012-7-26 34816]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-12-12 1038088]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service;C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2012-12-12 655624]
S3 flpydisk;Floppy Disk Driver;C:\Windows\System32\Drivers\flpydisk.sys [2012-7-26 24576]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0;C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-8-1 43616]
S3 FsDepends;File System Dependency Minifilter;C:\Windows\System32\Drivers\fsdepends.sys [2012-7-26 57584]
S3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms;C:\Windows\System32\Drivers\GAGP30KX.SYS [2012-7-26 66800]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-3-1 116648]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service;C:\Windows\System32\Drivers\HdAudio.sys [2013-2-16 341504]
S3 HidBatt;HID UPS Battery Driver;C:\Windows\System32\Drivers\hidbatt.sys [2012-7-26 27136]
S3 HidBth;Microsoft Bluetooth HID Miniport;C:\Windows\System32\Drivers\hidbth.sys [2012-7-26 95744]
S3 HidIr;Microsoft Infrared HID Driver;C:\Windows\System32\Drivers\hidir.sys [2012-7-26 46080]
S3 hkmsvc;Health Key and Certificate Management;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 HpSAMD;HpSAMD;C:\Windows\System32\Drivers\HpSAMD.sys [2012-7-25 64752]
S3 i8042prt;i8042 Keyboard and PS/2 Mouse Port Driver;C:\Windows\System32\Drivers\i8042prt.sys [2012-7-26 112640]
S3 iaStorV;Intel RAID Controller Windows 7;C:\Windows\System32\Drivers\iaStorV.sys [2012-6-2 411888]
S3 igfx;igfx;C:\Windows\System32\Drivers\igdkmd64.sys [2012-7-25 15283200]
S3 iirsp;iirsp;C:\Windows\System32\Drivers\iirsp.sys [2012-7-25 45296]
S3 IKEEXT;IKE and AuthIP IPsec Keying Modules;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 intelide;intelide;C:\Windows\System32\Drivers\intelide.sys [2012-7-26 18672]
S3 IpFilterDriver;IP Traffic Filter Driver;C:\Windows\System32\Drivers\ipfltdrv.sys [2012-7-26 89088]
S3 IPMIDRV;IPMIDRV;C:\Windows\System32\Drivers\IPMIDrv.sys [2012-7-26 78336]
S3 IPNAT;IP Network Address Translator;C:\Windows\System32\Drivers\ipnat.sys [2012-7-26 145920]
S3 IRENUM;IR Bus Enumerator;C:\Windows\System32\Drivers\irenum.sys [2012-7-26 17920]
S3 isapnp;isapnp;C:\Windows\System32\Drivers\isapnp.sys [2012-7-26 22256]
S3 iScsiPrt;iScsiPort Driver;C:\Windows\System32\Drivers\msiscsi.sys [2012-12-13 277736]
S3 KeyIso;CNG Key Isolation;C:\Windows\System32\lsass.exe [2012-7-26 35840]
S3 KtmRm;KtmRm for Distributed Transaction Coordinator;C:\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation [2012-7-26 30208]
S3 lltdsvc;Link-Layer Topology Discovery Mapper;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
S3 LSI_SAS;LSI_SAS;C:\Windows\System32\Drivers\lsi_sas.sys [2012-7-25 108784]
S3 LSI_SAS2;LSI_SAS2;C:\Windows\System32\Drivers\lsi_sas2.sys [2012-7-25 92400]
S3 LSI_SCSI;LSI_SCSI;C:\Windows\System32\Drivers\lsi_scsi.sys [2012-7-25 116976]
S3 LVRS64;Logitech RightSound Filter Driver;C:\Windows\System32\Drivers\lvrs64.sys [2012-10-26 351520]
S3 LVUVC64;@oem13.inf,%PID_0802_DD%(UVC);Logitech Webcam 200(UVC);C:\Windows\System32\Drivers\lvuvc64.sys [2012-10-26 4758176]
S3 megasas;megasas;C:\Windows\System32\Drivers\megasas.sys [2012-6-2 51952]
S3 MegaSR;MegaSR;C:\Windows\System32\Drivers\MegaSR.sys [2012-7-25 353008]
S3 Modem;Modem;C:\Windows\System32\Drivers\modem.sys [2012-7-26 40448]
S3 MRxDAV;WebDav Client Redirector Driver;C:\Windows\System32\Drivers\mrxdav.sys [2012-7-26 141312]
S3 MSDTC;Distributed Transaction Coordinator;C:\Windows\System32\msdtc.exe [2012-7-26 144384]
S3 mshidkmdf;Pass-through HID to KMDF Filter Driver;C:\Windows\System32\Drivers\mshidkmdf.sys [2012-7-26 8704]
S3 MSiSCSI;Microsoft iSCSI Initiator Service;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 msiserver;Windows Installer;C:\Windows\System32\msiexec.exe [2012-7-26 124416]
S3 MSKSSRV;Microsoft Streaming Service Proxy;C:\Windows\System32\Drivers\mskssrv.sys [2012-7-26 11008]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy;C:\Windows\System32\Drivers\mspclock.sys [2012-7-26 7168]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy;C:\Windows\System32\Drivers\mspqm.sys [2012-7-26 6912]
S3 MsRPC;MsRPC;C:\Windows\System32\Drivers\msrpc.sys [2012-7-26 390896]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter;C:\Windows\System32\Drivers\mstee.sys [2012-7-26 8192]
S3 MTConfig;Microsoft Input Configuration Driver;C:\Windows\System32\Drivers\MTConfig.sys [2012-7-26 14848]
S3 napagent;Network Access Protection Agent;C:\Windows\System32\svchost.exe -k NetworkService [2012-7-26 30208]
S3 NdisCap;Microsoft NDIS Capture;C:\Windows\System32\Drivers\ndiscap.sys [2012-7-26 46592]
S3 Netlogon;Netlogon;C:\Windows\System32\lsass.exe [2012-7-26 35840]
S3 Netman;Network Connections;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
S3 netr28ux;RT2870 USB Extensible Wireless LAN Card Driver;C:\Windows\System32\Drivers\netr28ux.sys [2012-6-2 1855520]
S3 nfrd960;nfrd960;C:\Windows\System32\Drivers\nfrd960.sys [2012-7-25 52464]
S3 nv_agp;NVIDIA nForce AGP Bus Filter;C:\Windows\System32\Drivers\NV_AGP.SYS [2012-7-26 125168]
S3 nvraid;nvraid;C:\Windows\System32\Drivers\nvraid.sys [2012-7-25 150256]
S3 nvstor;nvstor;C:\Windows\System32\Drivers\nvstor.sys [2012-6-2 168176]

Cabal18 · 2013/04/12

S3 ose;Office Source Engine;C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-1-9 149352]
S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
S3 pciide;pciide;C:\Windows\System32\Drivers\pciide.sys [2012-7-26 14064]
S3 pcmcia;pcmcia;C:\Windows\System32\Drivers\pcmcia.sys [2012-7-26 237808]
S3 PerfHost;Performance Counter DLL Host;C:\Windows\SysWOW64\perfhost.exe [2012-7-26 20992]
S3 pla;Performance Logs & Alerts;C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork [2012-7-26 30208]
S3 PNRPAutoReg;PNRP Machine Name Publication Service;C:\Windows\System32\svchost.exe -k LocalServicePeerNet [2012-7-26 30208]
S3 Processor;Processor Driver;C:\Windows\System32\Drivers\processr.sys [2012-12-13 87552]
S3 QWAVE;Quality Windows Audio Video Experience;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2012-7-26 30208]
S3 QWAVEdrv;QWAVE driver;C:\Windows\System32\Drivers\qwavedrv.sys [2012-7-26 46592]
S3 RasAcd;Remote Access Auto Connection Driver;C:\Windows\System32\Drivers\rasacd.sys [2012-7-26 16384]
S3 RasAuto;Remote Access Auto Connection Manager;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 RasMan;Remote Access Connection Manager;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 RDPDR;Remote Desktop Device Redirector Driver;C:\Windows\System32\Drivers\rdpdr.sys [2012-7-26 179712]
S3 RDPWD;RDP Winstation Driver;C:\Windows\System32\Drivers\rdpwd.sys [2012-7-26 208384]
S3 RpcLocator;Remote Procedure Call (RPC) Locator;C:\Windows\System32\Locator.exe [2012-7-26 9728]
S3 s3cap;s3cap;C:\Windows\System32\Drivers\vms3cap.sys [2012-7-26 7168]
S3 sbp2port;SBP-2 Transport/Protocol Bus Driver;C:\Windows\System32\Drivers\sbp2port.sys [2012-7-26 107760]
S3 scfilter;Smart card PnP Class Filter Driver;C:\Windows\System32\Drivers\scfilter.sys [2012-7-26 36864]
S3 SCPolicySvc;Smart Card Removal Policy;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 sdbus;sdbus;C:\Windows\System32\Drivers\sdbus.sys [2013-2-16 194280]
S3 SDRSVC;Windows Backup;C:\Windows\System32\svchost.exe -k SDRSVC [2012-7-26 30208]
S3 SensrSvc;Sensor Monitoring Service;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2012-7-26 30208]
S3 sermouse;Serial Mouse Driver;C:\Windows\System32\Drivers\sermouse.sys [2012-7-26 27136]
S3 SessionEnv;Remote Desktop Configuration;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 sfloppy;High-Capacity Floppy Disk Drive;C:\Windows\System32\Drivers\sfloppy.sys [2012-7-26 16896]
S3 SharedAccess;Internet Connection Sharing (ICS);C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 SiSRaid2;SiSRaid2;C:\Windows\System32\Drivers\sisraid2.sys [2012-6-2 44784]
S3 SiSRaid4;SiSRaid4;C:\Windows\System32\Drivers\sisraid4.sys [2012-7-25 81648]
S3 SNMPTRAP;SNMP Trap;C:\Windows\System32\snmptrap.exe [2012-7-26 14848]
S3 SstpSvc;Secure Socket Tunneling Protocol Service;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);C:\Windows\System32\Drivers\ssudmdm.sys [2013-2-6 203544]
S3 Steam Client Service;Steam Client Service;C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-1-30 543656]
S3 stexstor;stexstor;C:\Windows\System32\Drivers\stexstor.sys [2012-7-25 30960]
S3 storflt;Hyper-V Storage Accelerator;C:\Windows\System32\Drivers\vmstorfl.sys [2012-7-26 45160]
S3 storvsc;storvsc;C:\Windows\System32\Drivers\storvsc.sys [2012-7-26 37992]
S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]
S3 swprv;Microsoft Software Shadow Copy Provider;C:\Windows\System32\svchost.exe -k swprv [2012-7-26 30208]
S3 TapiSrv;Telephony;C:\Windows\System32\svchost.exe -k NetworkService [2012-7-26 30208]
S3 TCPIP6;Microsoft IPv6 Protocol Driver;C:\Windows\System32\Drivers\tcpip.sys [2013-3-15 2226408]
S3 TermService;Remote Desktop Services;C:\Windows\System32\svchost.exe -k NetworkService [2012-7-26 30208]
S3 THREADORDER;Thread Ordering Server;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
S3 TrustedInstaller;Windows Modules Installer;C:\Windows\servicing\TrustedInstaller.exe [2012-7-26 94208]
S3 uagp35;Microsoft AGPv3.5 Filter;C:\Windows\System32\Drivers\UAGP35.SYS [2012-7-26 65776]
S3 UI0Detect;Interactive Services Detection;C:\Windows\System32\UI0Detect.exe [2012-7-26 40960]
S3 uliagpkx;Uli AGP Bus Filter;C:\Windows\System32\Drivers\ULIAGPKX.SYS [2012-7-26 66800]
S3 UmPass;Microsoft UMPass Driver;C:\Windows\System32\Drivers\umpass.sys [2012-7-26 11776]
S3 UmRdpService;Remote Desktop Services UserMode Port Redirector;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-7-26 30208]
S3 usbaudio;USB Audio Driver (WDM);C:\Windows\System32\Drivers\USBAUDIO.sys [2012-7-26 121856]
S3 usbcir;eHome Infrared Receiver (USBCIR);C:\Windows\System32\Drivers\usbcir.sys [2012-7-26 99328]
S3 usbohci;Microsoft USB Open Host Controller Miniport Driver;C:\Windows\System32\Drivers\usbohci.sys [2012-12-13 27136]
S3 usbprint;Microsoft USB PRINTER Class;C:\Windows\System32\Drivers\usbprint.sys [2012-7-26 25600]
S3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver;C:\Windows\System32\Drivers\usbuhci.sys [2012-12-13 32256]
S3 usbvideo;USB Video Device (WDM);C:\Windows\System32\Drivers\usbvideo.sys [2012-12-24 210304]
S3 vds;Virtual Disk;C:\Windows\System32\vds.exe [2013-1-16 680960]
S3 vhdmp;vhdmp;C:\Windows\System32\Drivers\vhdmp.sys [2012-7-26 496368]
S3 viaide;viaide;C:\Windows\System32\Drivers\viaide.sys [2012-7-26 19184]
S3 vmbus;Virtual Machine Bus;C:\Windows\System32\Drivers\vmbus.sys [2012-7-26 137832]
S3 VMBusHID;VMBusHID;C:\Windows\System32\Drivers\VMBusHID.sys [2012-7-26 22144]
S3 vsmraid;vsmraid;C:\Windows\System32\Drivers\vsmraid.sys [2012-6-2 164080]
S3 VSS;Volume Shadow Copy;C:\Windows\System32\VSSVC.exe [2012-7-26 1482752]
S3 vwifibus;Virtual WiFi Bus Driver;C:\Windows\System32\Drivers\vwifibus.sys [2012-7-26 24064]
S3 vwifimp;Virtual WiFi Miniport Service;C:\Windows\System32\Drivers\vwifimp.sys [2012-7-26 17920]
S3 W32Time;Windows Time;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
S3 WacomPen;Wacom Serial Pen HID Driver;C:\Windows\System32\Drivers\wacompen.sys [2012-7-26 27008]
S3 Wanarp;Remote Access IP ARP Driver;C:\Windows\System32\Drivers\wanarp.sys [2012-7-26 83456]
S3 wbengine;Block Level Backup Engine Service;C:\Windows\System32\wbengine.exe [2012-7-26 1616896]
S3 WbioSrvc;Windows Biometric Service;C:\Windows\System32\svchost.exe -k WbioSvcGroup [2012-7-26 30208]
S3 wcncsvc;Windows Connect Now - Config Registrar;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2012-7-26 30208]
S3 WcsPlugInService;Windows Color System;C:\Windows\System32\svchost.exe -k wcssvc [2012-7-26 30208]
S3 Wd;Microsoft Watchdog Timer Driver;C:\Windows\System32\Drivers\wd.sys [2012-7-26 23792]
S3 WebClient;WebClient;C:\Windows\System32\svchost.exe -k LocalService [2012-7-26 30208]
S3 Wecsvc;Windows Event Collector;C:\Windows\System32\svchost.exe -k NetworkService [2012-7-26 30208]
S3 wercplsupport;Problem Reports and Solutions Control Panel Support;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 WerSvc;Windows Error Reporting Service;C:\Windows\System32\svchost.exe -k WerSvcGroup [2012-7-26 30208]
S3 WIMMount;WIMMount;C:\Windows\System32\Drivers\wimmount.sys [2012-7-26 33520]
S3 WinRM;Windows Remote Management (WS-Management);C:\Windows\System32\svchost.exe -k NetworkService [2012-7-26 30208]
S3 WinUsb;WinUsb;C:\Windows\System32\Drivers\winusb.sys [2012-7-26 57344]
S3 wlidsvc;Microsoft Account Sign-in Assistant;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S3 WmiAcpi;Microsoft Windows Management Interface for ACPI;C:\Windows\System32\Drivers\wmiacpi.sys [2012-7-26 17408]
S3 wmiApSrv;WMI Performance Adapter;C:\Windows\System32\wbem\WmiApSrv.exe [2012-7-26 198144]
S3 WPCSvc;Family Safety;C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [2012-7-26 30208]
S3 WwanSvc;WWAN AutoConfig;C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork [2012-7-26 30208]
S4 cdfs;CD/DVD File System Reader;C:\Windows\System32\Drivers\cdfs.sys [2012-7-26 108544]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-7-25 139696]
S4 RemoteAccess;Routing and Remote Access;C:\Windows\System32\svchost.exe -k netsvcs [2012-7-26 30208]
S4 RemoteRegistry;Remote Registry;C:\Windows\System32\svchost.exe -k localService [2012-7-26 30208]
S4 SCardSvr;Smart Card;C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [2012-7-26 30208]
S4 udfs;udfs;C:\Windows\System32\Drivers\udfs.sys [2012-7-26 321024]
S4 ws2ifsl;Winsock IFS Driver;C:\Windows\System32\Drivers\ws2ifsl.sys [2012-7-26 22528]

Cabal18 · 2013/04/12

=============== File Associations ===============
.
FileExt: .bat: batfile= "%1" %*
FileExt: .cmd: cmdfile= "%1" %*
FileExt: .com: comfile= "%1" %*
FileExt: .exe: exefile= "%1" %*
FileExt: .pif: piffile= "%1" %*
FileExt: .scr: scrfile= "%1" /S
FileExt: .reg: regfile=regedit.exe "%1 "
FileExt: .txt: txtfile=C:\Windows\System32\NOTEPAD.EXE %1
FileExt: .chm: chm.file= "C:\Windows\hh.exe" %1
FileExt: .ini: inifile=C:\Windows\System32\NOTEPAD.EXE %1
FileExt: .inf: inffile=C:\Windows\System32\NOTEPAD.EXE %1 [UserChoice]
ShellExec: AcroRD32.exe: Read= "C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" "%1 "
ShellExec: iexplore.exe: open= "C:\Program Files\Internet Explorer\iexplore.exe" %1
ShellExec: mspaint.exe: edit= "C:\Windows\System32\mspaint.exe" "%1 "
ShellExec: NeroVision.exe: open= "C:\Program Files (x86)\Nero\Nero 12\Nero Vision\NeroVision.exe" "%1 "
ShellExec: notepad.exe: edit=C:\Windows\System32\NOTEPAD.EXE %1
ShellExec: notepad.exe: open=C:\Windows\System32\NOTEPAD.EXE %1
ShellExec: ois.exe: Edit=C:\PROGRA~2\MICROS~1\Office14\OIS.EXE /shellEdit "%1 "
ShellExec: ois.exe: Open=C:\PROGRA~2\MICROS~1\Office14\OIS.EXE /shellOpen "%1 "
ShellExec: ois.exe: Preview=C:\PROGRA~2\MICROS~1\Office14\OIS.EXE /shellPreview "%1 "
ShellExec: Photoshop.exe: edit= "C:\Program Files\Adobe\Adobe Photoshop CS4 (64 Bit)\Photoshop.exe" "%1 "
ShellExec: Photoshop.exe: open= "C:\Program Files\Adobe\Adobe Photoshop CS4 (64 Bit)\Photoshop.exe" "%1 "
ShellExec: photoviewer.dll: open=C:\Windows\System32\rundll32.exe "C:\Program Files (x86)\Windows Photo Viewer\PhotoViewer.dll ", ImageView_Fullscreen %1
ShellExec: photoviewer.dll: print=C:\Windows\System32\rundll32.exe "C:\Program Files (x86)\Windows Photo Viewer\PhotoViewer.dll ", ImageView_Fullscreen %1
ShellExec: uTorrent.exe: open= "C:\Program Files (x86)\uTorrent\uTorrent.exe" "%1 "
ShellExec: Winword.exe: edit= "C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE" /n "%1 "
ShellExec: wmplayer.exe: open= "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Open "%L "
ShellExec: wmplayer.exe: play= "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play "%L "
ShellExec: wordpad.exe: open= "C:\Program Files (x86)\Windows NT\Accessories\WORDPAD.EXE" "%1 "

Cabal18 · 2013/04/12

=============== Created Last 60 ================
.
2013-04-11 10:05:31 -------- d-----w- C:\Windows\CbsTemp
2013-04-11 09:41:44 9311288 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1EF104DD-D800-4579-ADDC-403EF5F45698}\mpengine.dll
2013-04-10 13:04:10 -------- d-----w- C:\Windows\SysWow64\wbem\Logs
2013-04-10 13:04:02 9311288 ------w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2013-04-10 13:00:00 -------- d-sh--w- C:\$RECYCLE.BIN
2013-04-10 12:54:24 -------- d-----w- C:\Windows\Temp
2013-04-09 14:38:25 -------- d-----w- C:\Windows\Sun
2013-04-08 10:59:05 -------- d-----w- C:\Program Files (x86)\EaseUS
2013-04-06 10:55:48 -------- d-----w- C:\Users\Gordon Vooght\AppData\Roaming\player
2013-04-01 21:21:57 -------- d-----w- C:\Users\Gordon Vooght\AppData\Local\Updater19962
2013-03-29 10:39:03 -------- d-----w- C:\Users\Gordon Vooght\AppData\Roaming\OpenCandy
2013-03-27 20:40:32 -------- d-----w- C:\ProgramData\VS Revo Group
2013-03-27 20:36:21 -------- d-----w- C:\Program Files (x86)\MSECache
2013-03-27 14:16:39 81616 ----a-w- C:\Windows\System32\SETA73.tmp
2013-03-27 14:08:26 -------- d-----w- C:\Program Files\Common Files\EasyInfo
2013-03-27 12:21:06 749568 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll
2013-03-27 12:21:06 69715 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll
2013-03-27 12:21:06 5632 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe
2013-03-27 12:21:06 274432 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll
2013-03-27 12:21:06 180224 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll
2013-03-27 12:20:59 323716 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll
2013-03-27 12:20:59 192644 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll
2013-03-26 16:15:31 682280 ----a-w- C:\Windows\SysWow64\pbsvc.exe
2013-03-26 07:20:48 149264 ----a-w- C:\Program Files\Windows Defender\SymSrv.dll
2013-03-26 07:20:47 873448 ----a-w- C:\Program Files\Windows Defender\MpClient.dll
2013-03-26 07:20:47 75240 ----a-w- C:\Program Files\Windows Defender\MpOAV.dll
2013-03-26 07:20:47 646096 ----a-w- C:\Program Files (x86)\Windows Defender\MpClient.dll
2013-03-26 07:20:47 55272 ----a-w- C:\Program Files\Windows Defender\MpUXSrv.exe
2013-03-26 07:20:47 493032 ----a-w- C:\Program Files\Windows Defender\MpRtp.dll
2013-03-26 07:20:47 334312 ----a-w- C:\Program Files\Windows Defender\MpCommu.dll
2013-03-26 07:20:47 27600 ----a-w- C:\Program Files\Windows Defender\mpuxhostproxy.dll
2013-03-26 07:20:47 19408 ----a-w- C:\Program Files\Windows Defender\MsMpLics.dll
2013-03-26 07:20:47 1558912 ----a-w- C:\Program Files\Windows Defender\DbgHelp.dll
2013-03-26 07:20:47 1555920 ----a-w- C:\Program Files\Windows Defender\MpSvc.dll
2013-03-26 07:20:46 78800 ----a-w- C:\Program Files (x86)\Windows Defender\MpOAV.dll
2013-03-26 07:20:46 70656 ----a-w- C:\Program Files\Windows Defender\MsMpCom.dll
2013-03-26 07:20:46 50664 ----a-w- C:\Program Files\Windows Defender\MpTpmAtt.dll
2013-03-26 07:20:46 438840 ----a-w- C:\Program Files\Windows Defender\MsMpRes.dll
2013-03-26 07:20:46 334064 ----a-w- C:\Program Files\Windows Defender\MpCmdRun.exe
2013-03-26 07:20:46 230904 ----a-w- C:\Windows\System32\drivers\WdFilter.sys
2013-03-26 07:20:46 19408 ----a-w- C:\Program Files (x86)\Windows Defender\MsMpLics.dll
2013-03-26 07:20:46 161744 ----a-w- C:\Program Files\Windows Defender\EppManifest.dll
2013-03-26 07:20:46 150608 ----a-w- C:\Program Files\Windows Defender\MpAsDesc.dll
2013-03-26 07:20:46 150584 ----a-w- C:\Program Files (x86)\Windows Defender\MpAsDesc.dll
2013-03-26 07:20:46 14920 ----a-w- C:\Program Files\Windows Defender\MsMpEng.exe
2013-03-26 07:20:46 1345488 ----a-w- C:\Program Files\Windows Defender\MSASCui.exe
2013-03-26 07:20:46 109624 ----a-w- C:\Program Files\Windows Defender\MpEvMsg.dll
2013-03-26 07:20:45 35232 ----a-w- C:\Windows\System32\drivers\WdBoot.sys
2013-03-25 19:34:53 20992 ----a-w- C:\Windows\System32\drivers\usb8023.sys
2013-03-25 13:26:26 281768 ----a-w- C:\Windows\SysWow64\PnkBstrB.xtr
2013-03-25 10:33:14 -------- d-----w- C:\Users\Gordon Vooght\AppData\Local\GFInstaller
2013-03-25 10:33:10 -------- d-----w- C:\Users\Gordon Vooght\AppData\Local\TempDIR
2013-03-25 10:26:35 -------- d-----w- C:\Users\Gordon Vooght\AppData\Local\PunkBuster
2013-03-25 10:06:18 281768 ----a-w- C:\Windows\SysWow64\PnkBstrB.exe
2013-03-25 10:06:18 103736 ----a-w- C:\Windows\SysWow64\PnkBstrB.ex0
2013-03-25 10:06:17 76888 ----a-w- C:\Windows\SysWow64\PnkBstrA.exe
2013-03-25 09:57:04 -------- d-----w- C:\Program Files (x86)\Activision
2013-03-25 07:20:19 -------- d-----w- C:\Users\Gordon Vooght\AppData\Local\SKIDROW
2013-03-21 04:10:18 42880 ----a-w- C:\Windows\SysWow64\xfcodec.dll
2013-03-21 04:10:16 28544 ----a-w- C:\Windows\System32\xfcodec64.dll
2013-03-15 12:12:47 10115072 ----a-w- C:\Windows\System32\twinui.dll
2013-03-15 12:12:46 8856576 ----a-w- C:\Windows\SysWow64\twinui.dll
2013-03-15 12:12:45 754176 ----a-w- C:\Windows\SysWow64\actxprxy.dll
2013-03-15 12:12:45 69864 ----a-w- C:\Windows\System32\drivers\pdc.sys
2013-03-15 12:12:45 2302464 ----a-w- C:\Windows\System32\authui.dll
2013-03-15 12:12:45 2033664 ----a-w- C:\Windows\SysWow64\authui.dll
2013-03-15 12:12:44 2146816 ----a-w- C:\Windows\System32\actxprxy.dll
2013-03-15 12:12:42 19205632 ----a-w- C:\Windows\System32\mshtml.dll
2013-03-15 12:12:37 14296064 ----a-w- C:\Windows\SysWow64\mshtml.dll
2013-03-15 12:12:30 13761536 ----a-w- C:\Windows\SysWow64\ieframe.dll
2013-03-15 12:12:29 15418368 ----a-w- C:\Windows\System32\ieframe.dll
2013-03-15 12:12:28 2877952 ----a-w- C:\Windows\SysWow64\jscript9.dll
2013-03-15 12:12:27 690688 ----a-w- C:\Windows\SysWow64\jscript.dll
2013-03-15 12:12:27 1766912 ----a-w- C:\Windows\SysWow64\wininet.dll
2013-03-15 12:12:27 1658368 ----a-w- C:\Windows\SysWow64\iertutil.dll
2013-03-15 12:12:27 1128960 ----a-w- C:\Windows\SysWow64\urlmon.dll
2013-03-15 12:12:26 770544 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe
2013-03-15 12:12:26 603136 ----a-w- C:\Windows\System32\msfeeds.dll
2013-03-15 12:12:26 534528 ----a-w- C:\Windows\SysWow64\uxtheme.dll
2013-03-15 12:12:26 493056 ----a-w- C:\Windows\SysWow64\msfeeds.dll
2013-03-15 12:12:26 39424 ----a-w- C:\Windows\SysWow64\jsproxy.dll
2013-03-15 12:12:26 235520 ----a-w- C:\Program Files (x86)\Internet Explorer\IEShims.dll
2013-03-15 12:12:26 2246656 ----a-w- C:\Windows\System32\wininet.dll
2013-03-15 12:12:26 2166272 ----a-w- C:\Windows\System32\iertutil.dll
2013-03-15 12:12:26 1351680 ----a-w- C:\Windows\System32\urlmon.dll
2013-03-15 12:12:25 907776 ----a-w- C:\Windows\System32\uxtheme.dll
2013-03-15 12:12:25 854528 ----a-w- C:\Windows\System32\jscript.dll
2013-03-15 12:12:25 775136 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe
2013-03-15 12:12:25 61440 ----a-w- C:\Windows\SysWow64\iesetup.dll
2013-03-15 12:12:25 53760 ----a-w- C:\Windows\System32\UXInit.dll
2013-03-15 12:12:25 50688 ----a-w- C:\Windows\System32\ie4uinit.exe
2013-03-15 12:12:25 44032 ----a-w- C:\Windows\SysWow64\UXInit.dll
2013-03-15 12:12:25 3966464 ----a-w- C:\Windows\System32\jscript9.dll
2013-03-15 12:12:25 356352 ----a-w- C:\Program Files\Internet Explorer\IEShims.dll
2013-03-15 12:12:25 33280 ----a-w- C:\Windows\SysWow64\iernonce.dll
2013-03-15 12:12:25 257024 ----a-w- C:\Program Files (x86)\Internet Explorer\ieproxy.dll
2013-03-15 12:12:25 136704 ----a-w- C:\Windows\System32\iesysprep.dll
2013-03-15 12:12:25 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll
2013-03-15 12:12:24 700928 ----a-w- C:\Program Files\Internet Explorer\ieproxy.dll
2013-03-15 12:12:24 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2013-03-15 12:12:24 2706432 ----a-w- C:\Windows\System32\mshtml.tlb
2013-03-15 12:12:19 4041728 ----a-w- C:\Windows\System32\win32k.sys
2013-03-15 12:12:18 468992 ----a-w- C:\Windows\System32\MFMediaEngine.dll
2013-03-15 12:12:18 361984 ----a-w- C:\Windows\SysWow64\MFMediaEngine.dll
2013-03-15 12:12:16 13643264 ----a-w- C:\Windows\System32\Windows.UI.Xaml.dll
2013-03-15 12:12:14 5977600 ----a-w- C:\Windows\System32\mstscax.dll
2013-03-15 12:12:14 10792448 ----a-w- C:\Windows\SysWow64\Windows.UI.Xaml.dll
2013-03-15 12:12:13 830464 ----a-w- C:\Windows\System32\wbem\WmiPrvSD.dll
2013-03-15 12:12:13 2226408 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2013-03-15 12:12:12 729600 ----a-w- C:\Windows\System32\duser.dll
2013-03-15 12:12:12 567808 ----a-w- C:\Windows\SysWow64\duser.dll
2013-03-15 12:12:12 543232 ----a-w- C:\Windows\System32\wlroamextension.dll
2013-03-15 12:12:12 5090816 ----a-w- C:\Windows\SysWow64\mstscax.dll
2013-03-15 12:12:11 993512 ----a-w- C:\Windows\System32\drivers\ndis.sys
2013-03-15 12:12:11 475136 ----a-w- C:\Windows\System32\WWanAPI.dll
2013-03-15 12:12:11 467456 ----a-w- C:\Windows\System32\netprofmsvc.dll
2013-03-15 12:12:11 385024 ----a-w- C:\Windows\System32\ncsi.dll
2013-03-15 12:12:11 293376 ----a-w- C:\Windows\System32\Windows.Networking.Connectivity.dll
2013-03-15 12:12:11 1933544 ----a-w- C:\Windows\System32\drivers\ntfs.sys
2013-03-15 12:12:11 105472 ----a-w- C:\Windows\System32\wpdbusenum.dll
2013-03-15 12:12:10 496872 ----a-w- C:\Windows\System32\drivers\usbhub.sys
2013-03-15 12:12:10 448512 ----a-w- C:\Windows\System32\SettingSync.dll
2013-03-15 12:12:10 260096 ----a-w- C:\Windows\System32\hotspotauth.dll
2013-03-15 12:12:09 79360 ----a-w- C:\Windows\SysWow64\taskkill.exe
2013-03-15 12:12:09 731648 ----a-w- C:\Windows\System32\win32spl.dll
2013-03-15 12:12:09 61672 ----a-w- C:\Windows\System32\drivers\crashdmp.sys
2013-03-15 12:12:09 446184 ----a-w- C:\Windows\System32\drivers\USBHUB3.SYS
2013-03-15 12:12:09 410624 ----a-w- C:\Windows\SysWow64\wlroamextension.dll
2013-03-15 12:12:09 370688 ----a-w- C:\Windows\SysWow64\WWanAPI.dll
2013-03-15 12:12:09 356352 ----a-w- C:\Windows\SysWow64\SettingSync.dll
2013-03-15 12:12:09 329960 ----a-w- C:\Windows\System32\drivers\storport.sys
2013-03-15 12:12:09 297984 ----a-w- C:\Windows\System32\drivers\ks.sys
2013-03-15 12:12:09 228352 ----a-w- C:\Windows\System32\XpsRasterService.dll
2013-03-15 12:12:09 225280 ----a-w- C:\Windows\System32\mbsmsapi.dll
2013-03-15 12:12:09 197632 ----a-w- C:\Windows\SysWow64\Windows.Networking.Connectivity.dll
2013-03-15 12:12:09 157696 ----a-w- C:\Windows\SysWow64\mbsmsapi.dll
2013-03-15 12:12:09 155136 ----a-w- C:\Windows\SysWow64\XpsRasterService.dll
2013-03-15 12:12:09 107520 ----a-w- C:\Windows\System32\taskkill.exe
2013-03-15 12:12:09 102400 ----a-w- C:\Windows\System32\tasklist.exe
2013-03-15 12:12:08 87552 ----a-w- C:\Windows\System32\wersvc.dll
2013-03-15 12:12:08 82944 ----a-w- C:\Windows\System32\drivers\hidclass.sys
2013-03-15 12:12:08 80896 ----a-w- C:\Windows\SysWow64\tasklist.exe
2013-03-15 12:12:08 611840 ----a-w- C:\Windows\System32\wpd_ci.dll
2013-03-15 12:12:08 55296 ----a-w- C:\Windows\SysWow64\nlaapi.dll
2013-03-15 12:12:08 416256 ----a-w- C:\Windows\System32\schannel.dll
2013-03-15 12:12:08 375808 ----a-w- C:\Windows\SysWow64\wbem\WmiPrvSE.exe
2013-03-15 12:12:08 325632 ----a-w- C:\Windows\SysWow64\schannel.dll
2013-03-15 12:12:08 18432 ----a-w- C:\Windows\SysWow64\npmproxy.dll
2013-03-15 12:12:08 15872 ----a-w- C:\Windows\SysWow64\nlmproxy.dll
2013-03-15 12:12:08 131072 ----a-w- C:\Windows\SysWow64\wbem\WmiDcPrv.dll
2013-03-15 12:12:08 12288 ----a-w- C:\Windows\SysWow64\nlmsprep.dll
2013-03-15 12:12:08 115712 ----a-w- C:\Windows\SysWow64\netprofm.dll
2013-03-15 12:11:50 622080 ----a-w- C:\Windows\System32\drivers\srv2.sys
2013-03-15 12:11:50 370688 ----a-w- C:\Windows\System32\drivers\mrxsmb.sys
2013-03-15 12:11:50 247808 ----a-w- C:\Windows\System32\drivers\srvnet.sys
2013-03-15 12:11:50 215552 ----a-w- C:\Windows\System32\drivers\mrxsmb20.sys
2013-03-15 12:11:07 1690624 ----a-w- C:\Windows\System32\GdiPlus.dll
2013-03-15 12:11:07 1437184 ----a-w- C:\Windows\SysWow64\GdiPlus.dll
2013-03-14 12:24:09 -------- d-----w- C:\Program Files\Microsoft Silverlight
2013-03-14 12:24:09 -------- d-----w- C:\Program Files (x86)\Microsoft Silverlight
2013-03-14 11:41:48 -------- d-----w- C:\Program Files\WBFS
2013-03-12 11:51:35 -------- d-----w- C:\Users\Gordon Vooght\AppData\Local\{4E43A55C-4D96-4A42-B3C9-74CBABADFA73}
2013-03-12 11:22:43 -------- d-----w- C:\Users\Gordon Vooght\AppData\Local\{15BC537A-3A8E-4F00-A86B-BDDD210521E1}
2013-03-11 08:00:10 17536 ----a-w- C:\ProgramData\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin
2013-03-10 18:34:43 -------- d-----w- C:\Program Files (x86)\Common Files\ParetoLogic
2013-03-10 18:34:40 -------- d-----w- C:\Program Files (x86)\ParetoLogic
2013-03-10 18:11:52 76205 -c----w- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MsMpEng.exe_2ed1181cce49f733ce7cd09171861baef35efe18_cab_1ad67e46\uninstall.exe
2013-03-10 18:08:48 75384 -c----w- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MsMpEng.exe_f091a078b1b684783a4556d985f825f612922f1b_cab_165faf18\Uninstall.exe
2013-03-10 17:40:41 21773888 -c----w- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MsMpEng.exe_f6642f91e343a9679753d3f34d974b49c76da6_cab_127df008\DCUO_setup.exe
2013-03-10 17:34:08 75384 -c----w- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MsMpEng.exe_fd4e29fc966626df4b338abf18556d23d7393ecc_cab_03ee71bb\Uninstall.exe
2013-03-10 14:14:59 75384 -c----w- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MsMpEng.exe_cdc40f2abf4f49bb1995f8f1fd9dc861146e1_cab_0cf9ad2f\Uninstall.exe
2013-03-10 11:31:25 21774152 -c----w- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MsMpEng.exe_5fecf0676f6edbc94613dc1931c98b5213a11b_cab_15efeca3\DCUO_PSG_setup.exe
2013-03-10 10:15:15 75384 -c----w- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MsMpEng.exe_943f9b9e7e4ad1909ba5d817fcbe7cb3a9bb8c2_cab_363e033b\Uninstall.exe
2013-03-10 07:30:08 21773888 -c----w- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MsMpEng.exe_116927ac69d6d56c68760ef6749af68ce98135_cab_0692d7c5\DCUO_setup.exe
2013-03-09 12:30:48 21773888 -c----w- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MsMpEng.exe_f9c6adf766c0593158c3a0f57052561a31c9c_cab_07ca015d\DCUO_setup.exe
2013-03-08 10:15:51 95648 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2013-03-05 17:32:49 -------- d-----w- C:\ProgramData\Stardock
2013-03-05 12:48:25 -------- d-----w- C:\Users\Gordon Vooght\AppData\Local\WBFSManager
2013-03-05 10:31:17 -------- d-----w- C:\Users\Gordon Vooght\AppData\Local\{23261E46-2A6A-4C74-927D-2250A1471E41}
2013-03-05 10:23:01 31600 ----a-w- C:\Windows\SysWow64\wldlog.dll
2013-03-05 10:22:45 -------- d-----w- C:\ProgramData\Logs
2013-03-05 10:05:39 94040 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\fad0d8e21ce198804\DSETUP.dll
2013-03-05 10:05:39 525656 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\fad0d8e21ce198804\DXSETUP.exe
2013-03-05 10:05:39 1691480 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\fad0d8e21ce198804\dsetup32.dll
2013-03-05 10:05:34 89944 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\f9e2f52c1ce198803\DSETUP.dll
2013-03-05 10:05:34 537432 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\f9e2f52c1ce198803\DXSETUP.exe
2013-03-05 10:05:34 1801048 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\f9e2f52c1ce198803\dsetup32.dll
2013-03-05 10:05:32 89944 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\f768cb3c1ce198802\DSETUP.dll
2013-03-05 10:05:32 537432 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\f768cb3c1ce198802\DXSETUP.exe
2013-03-05 10:05:32 1801048 -c--a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\f768cb3c1ce198802\dsetup32.dll
2013-02-28 21:17:40 -------- d-----w- C:\Windows\SysWow64\searchplugins
2013-02-28 21:17:40 -------- d-----w- C:\Windows\SysWow64\Extensions
2013-02-28 21:17:19 -------- d-----w- C:\Users\Gordon Vooght\AppData\Roaming\Babylon
2013-02-28 21:17:19 -------- d-----w- C:\ProgramData\Babylon
2013-02-27 13:21:43 -------- d-----w- C:\Users\Gordon Vooght\AppData\Local\VS Revo Group
2013-02-27 12:39:23 -------- d-----w- C:\ProgramData\DAEMON Tools Lite
2013-02-27 08:28:32 443392 ----a-w- C:\Windows\System32\ReAgent.dll
2013-02-27 08:28:32 375808 ----a-w- C:\Windows\SysWow64\ReAgent.dll
2013-02-27 08:28:32 1010688 ----a-w- C:\Windows\System32\reseteng.dll
2013-02-23 14:36:10 -------- d-----w- C:\ProgramData\Battle.net
2013-02-22 15:21:33 -------- d-----w- C:\Program Files (x86)\MPC-HC
2013-02-16 08:54:06 19791360 ----a-w- C:\Windows\System32\shell32.dll
2013-02-16 08:54:05 2094592 ----a-w- C:\Windows\System32\mmc.exe
2013-02-16 08:54:05 1964544 ----a-w- C:\Windows\System32\wlidsvc.dll
2013-02-16 08:54:05 1918464 ----a-w- C:\Windows\System32\wbem\cimwin32.dll
2013-02-16 08:54:04 17560576 ----a-w- C:\Windows\SysWow64\shell32.dll
2013-02-16 08:54:04 1611776 ----a-w- C:\Windows\SysWow64\mmc.exe
2013-02-16 08:54:04 1448168 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys
2013-02-16 08:54:03 1886208 ----a-w- C:\Windows\System32\setupapi.dll
2013-02-16 08:54:03 1120768 ----a-w- C:\Windows\System32\msctf.dll
2013-02-16 08:54:00 438272 ----a-w- C:\Windows\System32\lsm.dll
2013-02-16 08:54:00 406016 ----a-w- C:\Windows\System32\Windows.Media.dll
2013-02-16 08:54:00 341504 ----a-w- C:\Windows\System32\drivers\HdAudio.sys
2013-02-16 08:53:59 1752064 ----a-w- C:\Windows\SysWow64\setupapi.dll
2013-02-16 08:53:58 91880 ----a-w- C:\Windows\System32\drivers\partmgr.sys
2013-02-16 08:53:58 785504 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys
2013-02-16 08:53:57 894464 ----a-w- C:\Windows\System32\iphlpsvc.dll
2013-02-16 08:53:57 49152 ----a-w- C:\Windows\System32\drivers\UMDF\HidBthLE.dll
2013-02-16 08:53:56 890880 ----a-w- C:\Windows\SysWow64\msctf.dll
2013-02-16 08:53:56 728064 ----a-w- C:\Windows\System32\samsrv.dll
2013-02-16 08:53:56 666112 ----a-w- C:\Windows\System32\MP4SDECD.DLL
2013-02-16 08:53:56 594944 ----a-w- C:\Windows\System32\Windows.Networking.dll
2013-02-16 08:53:56 410624 ----a-w- C:\Windows\SysWow64\Windows.Networking.dll
2013-02-16 08:53:56 303848 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys
2013-02-16 08:53:56 261120 ----a-w- C:\Windows\SysWow64\Windows.Media.dll
2013-02-16 08:53:56 194280 ----a-w- C:\Windows\System32\drivers\sdbus.sys
2013-02-16 08:53:56 159232 ----a-w- C:\Windows\System32\inetpp.dll
2013-02-16 08:53:56 124648 ----a-w- C:\Windows\System32\drivers\dumpsd.sys
2013-02-16 08:53:55 95232 ----a-w- C:\Windows\System32\wiaacmgr.exe
2013-02-16 08:53:55 83968 ----a-w- C:\Windows\SysWow64\wiaacmgr.exe
2013-02-16 08:53:55 256000 ----a-w- C:\Windows\System32\WSDMon.dll

Cabal18 · 2013/04/12

2013-02-16 08:53:55 171520 ----a-w- C:\Windows\System32\ncbservice.dll
2013-02-16 08:53:54 80896 ----a-w- C:\Windows\System32\wbem\netdacim.dll
2013-02-16 08:53:54 67584 ----a-w- C:\Windows\SysWow64\samlib.dll
2013-02-16 08:53:54 62464 ----a-w- C:\Windows\System32\adhsvc.dll
2013-02-16 08:53:54 44032 ----a-w- C:\Windows\System32\wbem\netnccim.dll
2013-02-16 08:53:54 436736 ----a-w- C:\Windows\SysWow64\MP4SDECD.DLL
2013-02-16 08:53:54 263680 ----a-w- C:\Windows\System32\wbem\netttcim.dll
2013-02-16 08:53:54 22528 ----a-w- C:\Windows\System32\adhapi.dll
2013-02-16 08:53:54 17920 ----a-w- C:\Windows\System32\httpprxp.dll
2013-02-16 08:53:54 15872 ----a-w- C:\Windows\System32\keepaliveprovider.dll
2013-02-16 08:53:54 107520 ----a-w- C:\Windows\System32\httpprxm.dll
2013-02-14 23:34:51 6967016 ----a-w- C:\Windows\System32\ntoskrnl.exe
2013-02-14 07:15:39 817664 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-14 07:15:39 1084416 ----a-w- C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-11 00:21:34 262560 ----a-w- C:\Windows\SysWow64\javaws.exe
2013-02-11 00:01:19 -------- d-----w- C:\763cf98cce0fcb2160794431c70562
2013-02-10 23:53:33 -------- d-----w- C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-02-10 23:51:32 -------- d-----w- C:\Users\Gordon Vooght\AppData\Roaming\Apple Computer
2013-02-10 23:51:32 -------- d-----w- C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2013-02-10 23:51:25 -------- d-----w- C:\Users\Gordon Vooght\AppData\Roaming\IObit
2013-02-10 21:07:23 -------- d-----w- C:\Users\Gordon Vooght\AppData\Roaming\DivX
.
==================== Find6M ====================
.
2013-04-04 13:50:32 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys
2013-04-02 10:34:28 282744 ------w- C:\Windows\System32\MpSigStub.exe
2013-03-15 12:21:50 72013344 ----a-w- C:\Windows\System32\MRT.exe
2013-03-08 10:15:46 174496 ----a-w- C:\Windows\SysWow64\javaw.exe
2013-03-08 10:15:45 861088 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll
2013-03-08 10:15:45 782240 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2013-03-08 10:15:45 174496 ----a-w- C:\Windows\SysWow64\java.exe
2013-03-05 23:07:25 78168 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2013-03-05 23:07:25 692568 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2013-02-15 07:58:59 39936 ----a-w- C:\Windows\apppatch\apppatch64\acspecfc.dll
2013-02-15 06:35:40 444416 ----a-w- C:\Windows\apppatch\AcSpecfc.dll
2013-02-06 07:42:10 203544 ----a-w- C:\Windows\System32\drivers\ssudmdm.sys
2013-02-06 07:42:08 102936 ----a-w- C:\Windows\System32\drivers\ssudbus.sys
2013-02-02 09:42:07 2207232 ----a-w- C:\Windows\SysWow64\PrintConfig.dll
2012-12-21 06:46:02 104184 ----a-w- C:\Windows\System32\drivers\AtihdW86.sys
2012-12-19 20:50:14 5630200 ----a-w- C:\Windows\SysWow64\atiumdag.dll
2012-12-19 20:48:48 11278336 ----a-w- C:\Windows\System32\drivers\atikmdag.sys
2012-12-19 20:29:36 23461376 ----a-w- C:\Windows\System32\atio6axx.dll
2012-12-19 20:22:50 70144 ----a-w- C:\Windows\System32\coinst_9.012.dll
2012-12-19 20:19:46 163840 ----a-w- C:\Windows\System32\atiapfxx.exe
2012-12-19 20:18:04 51200 ----a-w- C:\Windows\System32\aticalrt64.dll
2012-12-19 20:18:02 46080 ----a-w- C:\Windows\SysWow64\aticalrt.dll
2012-12-19 20:17:54 44544 ----a-w- C:\Windows\System32\aticalcl64.dll
2012-12-19 20:17:52 44032 ----a-w- C:\Windows\SysWow64\aticalcl.dll
2012-12-19 20:17:40 16082944 ----a-w- C:\Windows\System32\aticaldd64.dll
2012-12-19 20:13:24 13703168 ----a-w- C:\Windows\SysWow64\aticaldd.dll
2012-12-19 20:12:44 18982400 ----a-w- C:\Windows\SysWow64\atioglxx.dll
2012-12-19 20:09:52 960512 ----a-w- C:\Windows\SysWow64\aticfx32.dll
2012-12-19 20:08:04 1151488 ----a-w- C:\Windows\System32\aticfx64.dll
2012-12-19 20:06:00 6681088 ----a-w- C:\Windows\SysWow64\atidxx32.dll
2012-12-19 19:59:44 5087744 ----a-w- C:\Windows\System32\atiumd6a.dll
2012-12-19 19:57:00 442368 ----a-w- C:\Windows\System32\atidemgy.dll
2012-12-19 19:56:46 550912 ----a-w- C:\Windows\System32\atieclxx.exe
2012-12-19 19:56:00 240640 ----a-w- C:\Windows\System32\atiesrxx.exe
2012-12-19 19:54:38 120320 ----a-w- C:\Windows\System32\atitmm64.dll
2012-12-19 19:54:22 21504 ----a-w- C:\Windows\System32\atimuixx.dll
2012-12-19 19:54:18 59392 ----a-w- C:\Windows\System32\atiedu64.dll
2012-12-19 19:54:12 43520 ----a-w- C:\Windows\SysWow64\ati2edxx.dll
2012-12-19 19:49:00 7370752 ----a-w- C:\Windows\System32\atidxx64.dll
2012-12-19 19:44:28 4162048 ----a-w- C:\Windows\SysWow64\atiumdva.dll
2012-12-19 19:44:12 6786560 ----a-w- C:\Windows\System32\atiumd64.dll
2012-12-19 19:33:54 56320 ----a-w- C:\Windows\System32\amdpcom64.dll
2012-12-19 19:33:50 56320 ----a-w- C:\Windows\System32\atimpc64.dll
2012-12-19 19:33:44 56832 ----a-w- C:\Windows\SysWow64\amdpcom32.dll
2012-12-19 19:33:42 619008 ----a-w- C:\Windows\System32\atiadlxx.dll
2012-12-19 19:33:40 56832 ----a-w- C:\Windows\SysWow64\atimpc32.dll
2012-12-19 19:33:32 421888 ----a-w- C:\Windows\SysWow64\atiadlxy.dll
2012-12-19 19:33:18 17920 ----a-w- C:\Windows\System32\atig6pxx.dll
2012-12-19 19:33:14 14848 ----a-w- C:\Windows\SysWow64\atiglpxx.dll
2012-12-19 19:33:14 14848 ----a-w- C:\Windows\System32\atiglpxx.dll
2012-12-19 19:33:10 41984 ----a-w- C:\Windows\System32\atig6txx.dll
2012-12-19 19:33:04 33280 ----a-w- C:\Windows\SysWow64\atigktxx.dll
2012-12-19 19:32:54 552960 ----a-w- C:\Windows\System32\drivers\atikmpag.sys
2012-12-19 19:31:14 130048 ----a-w- C:\Windows\System32\atiuxp64.dll
2012-12-19 19:31:08 109568 ----a-w- C:\Windows\SysWow64\atiuxpag.dll
2012-12-19 19:31:00 104448 ----a-w- C:\Windows\System32\atiu9p64.dll
2012-12-19 19:30:52 83968 ----a-w- C:\Windows\SysWow64\atiu9pag.dll
2012-12-19 19:30:16 53248 ----a-w- C:\Windows\System32\drivers\ati2erec.dll
2012-12-19 15:45:12 222720 ----a-w- C:\Windows\System32\clinfo.exe
2012-12-19 15:44:48 76288 ----a-w- C:\Windows\System32\OpenVideo64.dll
2012-12-19 15:44:42 65536 ----a-w- C:\Windows\SysWow64\OpenVideo.dll
2012-12-19 15:44:36 64000 ----a-w- C:\Windows\System32\OVDecode64.dll
2012-12-19 15:44:32 56320 ----a-w- C:\Windows\SysWow64\OVDecode.dll
2012-12-19 15:44:20 34518016 ----a-w- C:\Windows\System32\amdocl64.dll
2012-12-19 15:38:48 28732928 ----a-w- C:\Windows\SysWow64\amdocl.dll
2012-12-19 15:34:40 54784 ----a-w- C:\Windows\System32\OpenCL.dll
2012-12-19 15:34:38 50176 ----a-w- C:\Windows\SysWow64\OpenCL.dll
2012-12-16 08:28:20 46080 ----a-w- C:\Windows\System32\atmlib.dll
2012-12-16 08:20:01 35328 ----a-w- C:\Windows\SysWow64\atmlib.dll
2012-12-16 08:08:33 362496 ----a-w- C:\Windows\System32\atmfd.dll
2012-12-16 07:57:09 300032 ----a-w- C:\Windows\SysWow64\atmfd.dll
2012-12-11 17:33:49 151552 ----a-w- C:\Windows\KMSEmulator.exe
2012-12-06 04:23:00 170496 ----a-w- C:\Windows\System32\TimeBrokerServer.dll
2012-12-06 04:22:59 178176 ----a-w- C:\Windows\System32\SystemEventsBrokerServer.dll
2012-12-04 04:21:42 368640 ----a-w- C:\Windows\System32\sppwinob.dll
2012-11-29 05:05:57 707584 ----a-w- C:\Windows\System32\AppXDeploymentExtensions.dll
2012-11-29 05:05:57 1131520 ----a-w- C:\Windows\System32\AppXDeploymentServer.dll
2012-11-27 06:39:46 1122768 ----a-w- C:\Windows\System32\Taskmgr.exe
2012-11-27 06:27:11 58288 ----a-w- C:\Windows\System32\wuauclt.exe
2012-11-27 04:49:20 1027152 ----a-w- C:\Windows\SysWow64\Taskmgr.exe
2012-11-27 04:20:50 1048064 ----a-w- C:\Windows\SysWow64\mstsc.exe
2012-11-27 04:20:42 179200 ----a-w- C:\Windows\SysWow64\wpnapps.dll
2012-11-27 04:20:35 891904 ----a-w- C:\Windows\SysWow64\winmde.dll
2012-11-27 04:20:31 798208 ----a-w- C:\Windows\SysWow64\WebcamUi.dll
2012-11-27 04:20:29 46592 ----a-w- C:\Windows\SysWow64\vds_ps.dll
2012-11-27 04:20:28 560128 ----a-w- C:\Windows\SysWow64\UserLanguagesCpl.dll
2012-11-27 04:20:23 1217536 ----a-w- C:\Windows\SysWow64\storagewmi.dll
2012-11-27 04:20:15 680960 ----a-w- C:\Windows\System32\vds.exe
2012-11-27 04:20:07 702464 ----a-w- C:\Windows\SysWow64\nshwfp.dll
2012-11-27 04:20:07 1123840 ----a-w- C:\Windows\System32\mstsc.exe
2012-11-27 04:19:52 3345920 ----a-w- C:\Windows\System32\wuaueng.dll
2012-11-27 04:19:50 244736 ----a-w- C:\Windows\System32\wpnapps.dll
2012-11-27 04:19:48 1096704 ----a-w- C:\Windows\System32\wmpmde.dll
2012-11-27 04:19:42 1145856 ----a-w- C:\Windows\System32\winmde.dll
2012-11-27 04:19:37 955904 ----a-w- C:\Windows\System32\WebcamUi.dll
2012-11-27 04:19:33 631808 ----a-w- C:\Windows\System32\UserLanguagesCpl.dll
2012-11-27 04:19:32 245248 ----a-w- C:\Windows\System32\usbmon.dll
2012-11-27 04:19:25 173568 ----a-w- C:\Windows\System32\storewuauth.dll
2012-11-27 04:19:25 1536512 ----a-w- C:\Windows\System32\storagewmi.dll
2012-11-27 04:19:22 245248 ----a-w- C:\Windows\SysWow64\FWPUCLNT.DLL
2012-11-27 04:19:09 3245568 ----a-w- C:\Windows\System32\rdpcorets.dll
2012-11-27 04:18:59 888832 ----a-w- C:\Windows\System32\nshwfp.dll
2012-11-27 04:18:13 1071104 ----a-w- C:\Windows\System32\IKEEXT.DLL
2012-11-27 04:18:06 378880 ----a-w- C:\Windows\System32\FWPUCLNT.DLL
2012-11-27 04:17:32 718848 ----a-w- C:\Windows\System32\BFE.DLL
2012-11-26 04:21:18 71168 ----a-w- C:\Windows\SysWow64\ncryptsslp.dll
2012-11-26 04:20:09 86016 ----a-w- C:\Windows\System32\ncryptsslp.dll
2012-11-20 05:24:19 1164800 ----a-w- C:\Windows\SysWow64\Display.dll
2012-11-20 05:24:17 36352 ----a-w- C:\Windows\SysWow64\DevDispItemProvider.dll
2012-11-20 05:17:23 1184256 ----a-w- C:\Windows\System32\Display.dll
2012-11-20 05:17:20 49152 ----a-w- C:\Windows\System32\DevDispItemProvider.dll
2012-11-20 05:02:46 6656 ----a-w- C:\Windows\SysWow64\KBDKURD.DLL
2012-11-20 04:59:26 7168 ----a-w- C:\Windows\System32\KBDKURD.DLL
2012-11-20 04:56:27 27136 ----a-w- C:\Windows\System32\drivers\usbohci.sys
2012-11-20 04:54:31 39936 ----a-w- C:\Windows\System32\drivers\hidi2c.sys
2012-11-10 04:23:25 132608 ----a-w- C:\Windows\SysWow64\poqexec.exe
2012-11-10 04:23:18 148480 ----a-w- C:\Windows\System32\poqexec.exe
2012-11-10 04:22:40 122880 ----a-w- C:\Windows\System32\VmHostAI.dll
2012-11-10 04:22:35 144384 ----a-w- C:\Windows\System32\tssdisai.dll
2012-11-10 04:22:14 126976 ----a-w- C:\Windows\System32\RDWebAI.dll
2012-11-10 04:20:20 135680 ----a-w- C:\Windows\System32\appserverai.dll
2012-11-09 04:49:51 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-11-09 04:03:48 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-11-08 04:25:36 523776 ----a-w- C:\Windows\SysWow64\WSShared.dll
2012-11-08 04:25:36 143872 ----a-w- C:\Windows\SysWow64\Windows.ApplicationModel.Store.dll
2012-11-08 04:25:36 124928 ----a-w- C:\Windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2012-11-08 04:24:19 75776 ----a-w- C:\Windows\SysWow64\fontsub.dll
2012-11-08 04:24:06 10752 ----a-w- C:\Windows\SysWow64\dciman32.dll
2012-11-08 04:22:21 641536 ----a-w- C:\Windows\System32\WSShared.dll
2012-11-08 04:22:20 198656 ----a-w- C:\Windows\System32\Windows.ApplicationModel.Store.dll
2012-11-08 04:22:20 163840 ----a-w- C:\Windows\System32\Windows.ApplicationModel.Store.TestingFramework.dll
2012-11-08 04:21:00 53248 ----a-w- C:\Windows\System32\jsproxy.dll
2012-11-08 04:20:56 67072 ----a-w- C:\Windows\System32\iesetup.dll
2012-11-08 04:20:55 39936 ----a-w- C:\Windows\System32\iernonce.dll
2012-11-08 04:20:50 96256 ----a-w- C:\Windows\System32\fontsub.dll
2012-11-08 04:20:37 14336 ----a-w- C:\Windows\System32\dciman32.dll
2012-11-08 04:02:16 3072 ----a-w- C:\Windows\System32\lpk.dll
2012-11-08 04:01:40 3072 ----a-w- C:\Windows\SysWow64\lpk.dll
2012-11-06 07:52:04 277736 ----a-w- C:\Windows\System32\drivers\msiscsi.sys
2012-11-06 07:33:46 522640 ----a-w- C:\Windows\System32\AUDIOKSE.dll

Log in or Sign up

Inactive-A Your-04CB4C8045 network.

Cabal18 Inactive Thread Starter

PeteC SuperGeek Staff

broni Moderator Malware Analyst

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

PeteC SuperGeek Staff

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

broni Moderator Malware Analyst

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Share This Page

Log in or Sign up

Inactive-A Your-04CB4C8045 network.

Cabal18 Inactive Thread Starter

PeteC SuperGeek Staff

broni Moderator Malware Analyst

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

PeteC SuperGeek Staff

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

broni Moderator Malware Analyst

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Cabal18 Inactive Thread Starter

Share This Page

Useful Searches