O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing) O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel® HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing) O23 - Service: (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe O23 - Service: IconMan_R - Realsil Microelectronics Inc. C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe O23 - Service: GamesAppService - WildTangent, Inc. C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. O23 - Service: (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing) O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe O23 - Service: EgisTec Ticket Service - Egis Technology Inc. O23 - Service: (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing) C:\Program Files (x86)\Launch Manager\dsiwmis.exe O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. C:\Program Files (x86)\AVG\AVG2014\avgfws.exe O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe O23 - Service: (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing) O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: SAS Core Service (!SASCORE) - C:\Program Files (x86)\SUPERAntiSpyware\SASCORE.EXE O2 - BHO: Lync Click to Call BHO - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =į2 - REG:system.ini: UserInit=userinit.exe, R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Boot mode: Safe mode with network supportĬ:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exeĬ:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEĬ:\Users\Ratsami\Desktop\rescue\HijackThis.exe