Java-virus

[OkashiChan]

Hoi,

Onlangs had ik een virus binnen gekregen via Java Update, Avira heeft het in quarantaine geplaatst en ik heb het het googled en blijkbaar blijft het normaal gezien problemen geven, al dan niet in quarantaine... en ik zit hier met problemen. Mijn laptop is trager, vooral in het opstarten, en hij geraakt ook niet meer uit sluimerstand terug. Mijn ventilator zit ook geweldig te geven voor niks (maar dat is dan weer al eerder voorgekomen met de Dell dat ik heb)

Dit was de melding:

The file 'C:\Users\Ellen\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\222c0b56-1d624911'
contained a virus or unwanted program 'JAVA/OpenConnect.CF' [virus]
Action(s) taken:
The file was moved to the quarantine directory under the name '486f091a.qua'.

Dit is de quarantaine:

http://img145.imageshack.us/img145/3917/quarantaine.jpg/

Dit is het log van Avira. Kan iemand er iets uit vertellen, want ik kan het niet vertalen naar normale mensen taal xP

Avira AntiVir Personal
Report file date: zondag 13 februari 2011 09:43

Scanning for 2468236 virus strains and unwanted programs.

The program is running as an unrestricted full version.
Online services are available:

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows 7 x64
Windows version : (plain) [6.1.7600]
Boot mode : Normally booted
Username : SYSTEM
Computer name : ELLEN-DELL

Version information:
BUILD.DAT : 10.0.0.611 31824 Bytes 14/01/2011 13:42:00
AVSCAN.EXE : 10.0.3.5 435368 Bytes 8/12/2010 12:42:41
AVSCAN.DLL : 10.0.3.0 46440 Bytes 1/04/2010 12:57:04
LUKE.DLL : 10.0.3.2 104296 Bytes 8/12/2010 12:42:42
LUKERES.DLL : 10.0.0.1 12648 Bytes 10/02/2010 23:40:49
VBASE000.VDF : 7.10.0.0 19875328 Bytes 6/11/2009 09:05:36
VBASE001.VDF : 7.11.0.0 13342208 Bytes 14/12/2010 18:48:01
VBASE002.VDF : 7.11.0.1 2048 Bytes 14/12/2010 18:48:01
VBASE003.VDF : 7.11.0.2 2048 Bytes 14/12/2010 18:48:01
VBASE004.VDF : 7.11.0.3 2048 Bytes 14/12/2010 18:48:01
VBASE005.VDF : 7.11.0.4 2048 Bytes 14/12/2010 18:48:01
VBASE006.VDF : 7.11.0.5 2048 Bytes 14/12/2010 18:48:01
VBASE007.VDF : 7.11.0.6 2048 Bytes 14/12/2010 18:48:01
VBASE008.VDF : 7.11.0.7 2048 Bytes 14/12/2010 18:48:01
VBASE009.VDF : 7.11.0.8 2048 Bytes 14/12/2010 18:48:01
VBASE010.VDF : 7.11.0.9 2048 Bytes 14/12/2010 18:48:01
VBASE011.VDF : 7.11.0.10 2048 Bytes 14/12/2010 18:48:01
VBASE012.VDF : 7.11.0.11 2048 Bytes 14/12/2010 18:48:01
VBASE013.VDF : 7.11.0.52 128000 Bytes 16/12/2010 14:35:51
VBASE014.VDF : 7.11.0.91 226816 Bytes 20/12/2010 17:52:40
VBASE015.VDF : 7.11.0.122 136192 Bytes 21/12/2010 12:43:44
VBASE016.VDF : 7.11.0.156 122880 Bytes 24/12/2010 12:43:45
VBASE017.VDF : 7.11.0.185 146944 Bytes 27/12/2010 12:43:45
VBASE018.VDF : 7.11.0.228 132608 Bytes 30/12/2010 10:40:12
VBASE019.VDF : 7.11.1.5 148480 Bytes 3/01/2011 23:07:02
VBASE020.VDF : 7.11.1.37 156672 Bytes 7/01/2011 23:07:03
VBASE021.VDF : 7.11.1.65 140800 Bytes 10/01/2011 09:54:23
VBASE022.VDF : 7.11.1.87 225280 Bytes 11/01/2011 09:54:23
VBASE023.VDF : 7.11.1.124 125440 Bytes 14/01/2011 09:54:23
VBASE024.VDF : 7.11.1.155 132096 Bytes 17/01/2011 09:22:35
VBASE025.VDF : 7.11.1.189 451072 Bytes 20/01/2011 20:48:29
VBASE026.VDF : 7.11.1.230 138752 Bytes 24/01/2011 18:42:49
VBASE027.VDF : 7.11.2.12 164352 Bytes 27/01/2011 08:50:59
VBASE028.VDF : 7.11.2.43 178176 Bytes 1/02/2011 07:23:56
VBASE029.VDF : 7.11.2.78 206336 Bytes 4/02/2011 11:23:25
VBASE030.VDF : 7.11.2.79 2048 Bytes 4/02/2011 11:23:25
VBASE031.VDF : 7.11.2.107 165376 Bytes 9/02/2011 12:17:09
Engineversion : 8.2.4.162
AEVDF.DLL : 8.1.2.1 106868 Bytes 2/08/2010 15:09:54
AESCRIPT.DLL : 8.1.3.53 1282427 Bytes 31/01/2011 10:22:09
AESCN.DLL : 8.1.7.2 127349 Bytes 23/11/2010 08:44:00
AESBX.DLL : 8.1.3.2 254324 Bytes 23/11/2010 08:44:02
AERDL.DLL : 8.1.9.2 635252 Bytes 6/11/2010 10:26:54
AEPACK.DLL : 8.2.4.9 512374 Bytes 31/01/2011 10:22:06
AEOFFICE.DLL : 8.1.1.16 205179 Bytes 31/01/2011 10:22:05
AEHEUR.DLL : 8.1.2.73 3207541 Bytes 4/02/2011 13:42:36
AEHELP.DLL : 8.1.16.1 246134 Bytes 4/02/2011 13:42:32
AEGEN.DLL : 8.1.5.2 397683 Bytes 20/01/2011 20:48:30
AEEMU.DLL : 8.1.3.0 393589 Bytes 23/11/2010 08:43:57
AECORE.DLL : 8.1.19.2 196983 Bytes 20/01/2011 20:48:30
AEBB.DLL : 8.1.1.0 53618 Bytes 2/08/2010 15:09:48
AVWINLL.DLL : 10.0.0.0 19304 Bytes 2/08/2010 15:09:56
AVPREF.DLL : 10.0.0.0 44904 Bytes 2/08/2010 15:09:55
AVREP.DLL : 10.0.0.8 62209 Bytes 17/06/2010 14:27:13
AVREG.DLL : 10.0.3.2 53096 Bytes 2/08/2010 15:09:55
AVSCPLR.DLL : 10.0.3.2 84328 Bytes 8/12/2010 12:42:41
AVARKT.DLL : 10.0.22.6 231784 Bytes 8/12/2010 12:42:40
AVEVTLOG.DLL : 10.0.0.8 203112 Bytes 2/08/2010 15:09:55
SQLITE3.DLL : 3.6.19.0 355688 Bytes 17/06/2010 14:27:22
AVSMTP.DLL : 10.0.0.17 63848 Bytes 2/08/2010 15:09:56
NETNT.DLL : 10.0.0.0 11624 Bytes 17/06/2010 14:27:21
RCIMAGE.DLL : 10.0.0.26 2550120 Bytes 28/01/2010 13:10:20
RCTEXT.DLL : 10.0.58.0 97128 Bytes 2/08/2010 15:10:08

Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:,
Process scan........................: on
Extended process scan...............: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium

Start of the scan: zondag 13 februari 2011 09:43

Starting search for hidden objects.
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{00020D75-0000-0000-C000-000000000046}\ShellFolder\attributes
[NOTE] The registry entry is invisible.
C:\Program Files\Common Files\Microsoft Shared\Windows Live
C:\Program Files\Common Files\Microsoft Shared\Windows Live
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Applets\SysTray\BattMeter\Flyout\381b4222-f694-41f0-9685-ff5bb260df2e
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Applets\SysTray\BattMeter\Flyout\8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c
[NOTE] The registry entry is invisible.

The scan of running processes will be started
Scan process 'wscript.exe' - '45' Module(s) have been scanned
Scan process 'plugin-container.exe' - '72' Module(s) have been scanned
Scan process 'wscript.exe' - '43' Module(s) have been scanned
Scan process 'firefox.exe' - '102' Module(s) have been scanned
Scan process 'avscan.exe' - '75' Module(s) have been scanned
Scan process 'avscan.exe' - '29' Module(s) have been scanned
Scan process 'UNS.exe' - '60' Module(s) have been scanned
Scan process 'sprtsvc.exe' - '91' Module(s) have been scanned
Scan process 'IAStorDataMgrSvc.exe' - '47' Module(s) have been scanned
Scan process 'jusched.exe' - '59' Module(s) have been scanned
Scan process 'AdobeARM.exe' - '49' Module(s) have been scanned
Scan process 'FirewallGUI.exe' - '51' Module(s) have been scanned
Scan process 'avgnt.exe' - '67' Module(s) have been scanned
Scan process 'sprtcmd.exe' - '111' Module(s) have been scanned
Scan process 'RoxioBurnLauncher.exe' - '40' Module(s) have been scanned
Scan process 'WebcamDell2.exe' - '45' Module(s) have been scanned
Scan process 'IAStorIcon.exe' - '50' Module(s) have been scanned
Scan process 'FF_Protection.exe' - '27' Module(s) have been scanned
Scan process 'SeaPort.exe' - '50' Module(s) have been scanned
Scan process 'FWService.exe' - '77' Module(s) have been scanned
Scan process 'LMS.exe' - '29' Module(s) have been scanned
Scan process 'avguard.exe' - '68' Module(s) have been scanned
Scan process 'svchost.exe' - '65' Module(s) have been scanned
Scan process 'sched.exe' - '50' Module(s) have been scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!

Starting to scan executable files (registry).
The registry was scanned ( '95' files ).


Starting the file scan:

Begin scan in 'C:\' <OS>
C:\Users\Ellen\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\222c0b56-1d624911
[0] Archive type: ZIP
[DETECTION] Contains recognition pattern of the JAVA/OpenConnect.CF Java virus
--> bpac/a.class
[DETECTION] Contains recognition pattern of the JAVA/OpenConnect.CF Java virus

Beginning disinfection:
C:\Users\Ellen\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\222c0b56-1d624911
[DETECTION] Contains recognition pattern of the JAVA/OpenConnect.CF Java virus
[NOTE] The file was moved to the quarantine directory under the name '486f091a.qua'.


End of the scan: zondag 13 februari 2011 11:08
Used time: 1:01:13 Hour(s)

The scan has been done completely.

23979 Scanned directories
607227 Files were scanned
1 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
1 Files were moved to quarantine
0 Files were renamed
0 Files cannot be scanned
607226 Files not concerned
3174 Archives were scanned
0 Warnings
1 Notes
522849 Objects were scanned with rootkit scan
4 Hidden objects were found

Dit is het laatste log, op hoogste detectiemodus, dus nogal lang.

-------------

En nog een vraag: is het beter om pictogrammen op je bureaublad te zetten, of kan ik ze gerust gekoppeld aan de taakbalk laten?

 

[mitchjaspers]

Installeer eens Malwarebytes en laat deze eens een scan doen of hij ook wat vindt.

 

[OkashiChan]

Ik heb een log gemaakt met hijackthis na op mijn computer deze programma's te hebben gebruikt: defraggler, ccleaner (was beiden al een tijdje geleden)

Mijn computer toont soms bij de meest simpele dingen een 'zandlopertje' (nu ja, in Windows 7 is het zo'n blauw draaiend onding). Of het scherm wordt... half-doorzichtig melkwit.

Ik heb mijn log geupload in hijackthis.de maar de uitleg daar is niet zo handig... 'probably nasty but was classified as a good one by our visitors' staat bij veel dingen. Of 'unknown' of 'file missing'.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:52:11, on 16/03/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\STMicroelectronics\Accelerometer\FF_Protection.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/USCON/4
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.uk.msn.com/USCON/4
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [Desktop Disc Tool] "c:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MIF5BA~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office14\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Dock Login Service (DockLoginService) - Unknown owner - C:\Program Files\Dell\DellDock\DockLogin.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: FF Install Filter Service (InstallFilterService) - Unknown owner - C:\Program Files (x86)\STMicroelectronics\Accelerometer\InstallFilterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: mental ray 3.8 Satellite for Autodesk 3ds Max 2011 64-bit 64-bit (mi-raysat_3dsmax2011_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - Unknown owner - C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\STacSV64.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TurboBoost - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12109 bytes