I think I might be infected

mageisfun · September 9, 2012

I think I might be but I'm not sure, its just that my internet has been disconnecting recently, might just be a router issues but I just feel like something is wrong but just to be sure I thought I'd post here where experts could help me.

Here are my logs: DDS.txt

Attach.txt

Maurice Naggar · September 10, 2012

Hello mageisfun,

Please remember to always Copy & Paste all contents of logs/reports directly into main body of reply box. Do NOT attach :excl:

Step 1

1. Go >> Here << and download ERUNT

(ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)

2. Install ERUNT by following the prompts

(use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)

3. Start ERUNT

(either by double clicking on the desktop icon or choosing to start the program at the end of the setup)

4. Choose a location for the backup

(the default location is C:\WINDOWS\ERDNT which is acceptable).

5. Make sure that at least the first two check boxes are ticked

6. Press OK

7. Press YES to create the folder.

Step 2

To show all files:

Go to your Desktop
Double-Click the Computer icon.
From the menu options, Select Tools, then Folder Options.
Next click the View tab.
Locate and uncheck Hide file extensions for known file types.
Locate and uncheck Hide protected operating system files (Recommended).
Locate and click Show hidden files and folders and drives.
Click Apply > OK.

Step 3

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

For directions on how, see How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Do NOT turn off the firewall

Download aswMBR.exe ( 511KB ) to your desktop.

On Windows 7 or Vista, RIGHT click on aswMBR.exe and select Run As Administrator to start.

On Windows XP, double click the exe to start.

change the a-v scan to None.

uncheck trace disk IO calls

Click the "Scan" button to start scan

On completion of the scan (Note if the Fix button is enabled (not the FixMBR button) and tell me) click save log, save it to your desktop and post in your next reply

Do not click any FIX button. We just need an initial report.

Step 4

Please read carefully and follow these steps.

Download TDSSKiller and save it to your Desktop.
Double-Click on TDSSKiller.exe to run the application, then on Start Scan.
If running Vista or Windows 7, do a RIGHT-Click and select Run as Administrator to start TDSSKILLER.exe.
If an infected file is detected, the default action will be Cure, click on Continue.
If a suspicious file is detected, the default action will be Skip, click on Continue.
If you get the warning about a file UnsignedFile.Multi.Generic or LockedFile.Multi.Generic please choose
Skip and click on Continue
It may ask you to reboot the computer to complete the process. Click on Reboot Now.
If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Step 5

Download & SAVE to your Desktop >> Tigzy's RogueKillerfrom here << or
>> from here <<
Quit all programs that you may have started.
Please disconnect any USB or external drives from the computer before you run this scan!
For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.
For Windows XP, double-click to start.
Wait until Prescan has finished ...
Then Click on Scan button at upper right of screen.
Wait until the Status box shows "Scan Finished"
Click on Report and copy/paste the content of the Notepad into your next reply.
The log should be found in RKreport[1].txt on your Desktop
Exit/Close RogueKiller

Do NOT click any FIX buttons !

Step 6

RE-Enable your antivirus program. :excl:

Then copy/paste the following into your post (in order):

the contents of aswMBR report;
the contents of TDSSKILLER log;
the contents of RKReport log;

Be sure to do a Preview prior to pressing Submit because all reports may not fit into 1 single reply. You may have to do more than 1 reply.

Do not use the attachment feature to place any of your reports. Always put them in-line inside the body of reply.

Download Security Check by screen317 from here.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

mageisfun · September 11, 2012

16:46:11.0040 3508 TDSS rootkit removing tool 2.8.8.0 Aug 24 2012 13:27:48

16:46:11.0322 3508 ============================================================

16:46:11.0322 3508 Current date / time: 2012/09/11 16:46:11.0322

16:46:11.0322 3508 SystemInfo:

16:46:11.0322 3508

16:46:11.0322 3508 OS Version: 6.1.7601 ServicePack: 1.0

16:46:11.0322 3508 Product type: Workstation

16:46:11.0322 3508 ComputerName: SAM-PC

16:46:11.0323 3508 UserName: Sam

16:46:11.0323 3508 Windows directory: C:\Windows

16:46:11.0323 3508 System windows directory: C:\Windows

16:46:11.0323 3508 Running under WOW64

16:46:11.0323 3508 Processor architecture: Intel x64

16:46:11.0323 3508 Number of processors: 8

16:46:11.0323 3508 Page size: 0x1000

16:46:11.0323 3508 Boot type: Normal boot

16:46:11.0323 3508 ============================================================

16:46:14.0662 3508 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

16:46:14.0664 3508 Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

16:46:14.0676 3508 ============================================================

16:46:14.0676 3508 \Device\Harddisk0\DR0:

16:46:14.0676 3508 MBR partitions:

16:46:14.0676 3508 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x33000, BlocksNum 0x1D4C000

16:46:14.0676 3508 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1D7F000, BlocksNum 0x38606830

16:46:14.0676 3508 \Device\Harddisk1\DR1:

16:46:14.0677 3508 MBR partitions:

16:46:14.0677 3508 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x3A385000

16:46:14.0677 3508 ============================================================

16:46:14.0698 3508 C: <-> \Device\Harddisk0\DR0\Partition2

16:46:14.0728 3508 D: <-> \Device\Harddisk1\DR1\Partition1

16:46:14.0728 3508 ============================================================

16:46:14.0728 3508 Initialize success

16:46:14.0728 3508 ============================================================

16:46:25.0805 5496 ============================================================

16:46:25.0805 5496 Scan started

16:46:25.0805 5496 Mode: Manual;

16:46:25.0805 5496 ============================================================

16:46:25.0930 5496 ================ Scan system memory ========================

16:46:25.0930 5496 System memory - ok

16:46:25.0931 5496 ================ Scan services =============================

16:46:26.0127 5496 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys

16:46:26.0135 5496 1394ohci - ok

16:46:26.0169 5496 [ E0065CBF1A25C015C218457D2CD522B9 ] Acceler C:\Windows\system32\DRIVERS\Accelern.sys

16:46:26.0171 5496 Acceler - ok

16:46:26.0203 5496 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys

16:46:26.0212 5496 ACPI - ok

16:46:26.0230 5496 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys

16:46:26.0230 5496 AcpiPmi - ok

16:46:26.0257 5496 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys

16:46:26.0269 5496 adp94xx - ok

16:46:26.0291 5496 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys

16:46:26.0300 5496 adpahci - ok

16:46:26.0312 5496 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys

16:46:26.0321 5496 adpu320 - ok

16:46:26.0362 5496 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll

16:46:26.0365 5496 AeLookupSvc - ok

16:46:26.0413 5496 [ D1E343BC00136CE03C4D403194D06A80 ] AERTFilters C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

16:46:26.0416 5496 AERTFilters - ok

16:46:26.0463 5496 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys

16:46:26.0480 5496 AFD - ok

16:46:26.0499 5496 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys

16:46:26.0503 5496 agp440 - ok

16:46:26.0718 5496 [ 0923671CF87CD511E46D4668B53F5E76 ] Akamai c:\program files (x86)\common files\akamai/netsession_win_5891ae0.dll

16:46:26.0718 5496 Suspicious file (Hidden): c:\program files (x86)\common files\akamai/netsession_win_5891ae0.dll. md5: 0923671CF87CD511E46D4668B53F5E76

16:46:26.0722 5496 Akamai ( HiddenFile.Multi.Generic ) - warning

16:46:26.0722 5496 Akamai - detected HiddenFile.Multi.Generic (1)

16:46:26.0778 5496 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe

16:46:26.0782 5496 ALG - ok

16:46:26.0798 5496 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys

16:46:26.0799 5496 aliide - ok

16:46:26.0806 5496 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys

16:46:26.0807 5496 amdide - ok

16:46:26.0824 5496 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys

16:46:26.0826 5496 AmdK8 - ok

16:46:26.0849 5496 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys

16:46:26.0850 5496 AmdPPM - ok

16:46:26.0892 5496 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys

16:46:26.0896 5496 amdsata - ok

16:46:26.0915 5496 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys

16:46:26.0920 5496 amdsbs - ok

16:46:26.0937 5496 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys

16:46:26.0939 5496 amdxata - ok

16:46:27.0014 5496 [ 1B7D1F0A0DFADBC797C16364792A7AA5 ] Amsp C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe

16:46:27.0019 5496 Amsp - ok

16:46:27.0037 5496 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys

16:46:27.0039 5496 AppID - ok

16:46:27.0055 5496 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll

16:46:27.0058 5496 AppIDSvc - ok

16:46:27.0070 5496 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll

16:46:27.0072 5496 Appinfo - ok

16:46:27.0141 5496 [ F401929EE0CC92BFE7F15161CA535383 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

16:46:27.0146 5496 Apple Mobile Device - ok

16:46:27.0155 5496 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys

16:46:27.0157 5496 arc - ok

16:46:27.0181 5496 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys

16:46:27.0183 5496 arcsas - ok

16:46:27.0295 5496 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

16:46:27.0298 5496 aspnet_state - ok

16:46:27.0317 5496 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys

16:46:27.0319 5496 AsyncMac - ok

16:46:27.0343 5496 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys

16:46:27.0345 5496 atapi - ok

16:46:27.0385 5496 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

16:46:27.0411 5496 AudioEndpointBuilder - ok

16:46:27.0443 5496 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll

16:46:27.0453 5496 AudioSrv - ok

16:46:27.0471 5496 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll

16:46:27.0474 5496 AxInstSV - ok

16:46:27.0507 5496 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys

16:46:27.0528 5496 b06bdrv - ok

16:46:27.0550 5496 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys

16:46:27.0557 5496 b57nd60a - ok

16:46:27.0584 5496 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll

16:46:27.0588 5496 BDESVC - ok

16:46:27.0602 5496 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys

16:46:27.0604 5496 Beep - ok

16:46:27.0645 5496 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll

16:46:27.0671 5496 BFE - ok

16:46:27.0711 5496 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll

16:46:27.0726 5496 BITS - ok

16:46:27.0746 5496 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys

16:46:27.0747 5496 blbdrive - ok

16:46:27.0844 5496 [ C440483A5CE0E0AB03A79A33ACE35D91 ] Bluetooth Device Monitor C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

16:46:27.0852 5496 Bluetooth Device Monitor - ok

16:46:27.0898 5496 [ C8AB8CA3557CCE041AC4C88E76AFBAD0 ] Bluetooth Media Service C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe

16:46:27.0936 5496 Bluetooth Media Service - ok

16:46:27.0993 5496 [ DF83FB0EB35C91339F1C84C6CF426100 ] Bluetooth OBEX Service C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

16:46:28.0018 5496 Bluetooth OBEX Service - ok

16:46:28.0077 5496 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

16:46:28.0098 5496 Bonjour Service - ok

16:46:28.0129 5496 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys

16:46:28.0131 5496 bowser - ok

16:46:28.0150 5496 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys

16:46:28.0152 5496 BrFiltLo - ok

16:46:28.0170 5496 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys

16:46:28.0171 5496 BrFiltUp - ok

16:46:28.0214 5496 [ 8EF0D5C41EC907751B8429162B1239ED ] Browser C:\Windows\System32\browser.dll

16:46:28.0220 5496 Browser - ok

16:46:28.0243 5496 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys

16:46:28.0251 5496 Brserid - ok

16:46:28.0259 5496 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys

16:46:28.0261 5496 BrSerWdm - ok

16:46:28.0269 5496 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys

16:46:28.0270 5496 BrUsbMdm - ok

16:46:28.0272 5496 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys

16:46:28.0272 5496 BrUsbSer - ok

16:46:28.0335 5496 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys

16:46:28.0338 5496 BthEnum - ok

16:46:28.0346 5496 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys

16:46:28.0349 5496 BTHMODEM - ok

16:46:28.0373 5496 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys

16:46:28.0375 5496 BthPan - ok

16:46:28.0403 5496 [ 64C198198501F7560EE41D8D1EFA7952 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys

16:46:28.0429 5496 BTHPORT - ok

16:46:28.0454 5496 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll

16:46:28.0458 5496 bthserv - ok

16:46:28.0470 5496 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys

16:46:28.0473 5496 BTHUSB - ok

16:46:28.0503 5496 [ BA554BFCBF21201D310738A42C9C19E1 ] btmaux C:\Windows\system32\DRIVERS\btmaux.sys

16:46:28.0504 5496 btmaux - ok

16:46:28.0551 5496 [ 40C6FEC49D1CC4D112368A2BCD2BCBB7 ] btmhsf C:\Windows\system32\DRIVERS\btmhsf.sys

16:46:28.0560 5496 btmhsf - ok

16:46:28.0585 5496 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys

16:46:28.0589 5496 cdfs - ok

16:46:28.0617 5496 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys

16:46:28.0622 5496 cdrom - ok

16:46:28.0643 5496 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll

16:46:28.0647 5496 CertPropSvc - ok

16:46:28.0669 5496 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys

16:46:28.0672 5496 circlass - ok

16:46:28.0702 5496 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys

16:46:28.0712 5496 CLFS - ok

16:46:28.0764 5496 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

16:46:28.0768 5496 clr_optimization_v2.0.50727_32 - ok

16:46:28.0815 5496 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

16:46:28.0820 5496 clr_optimization_v2.0.50727_64 - ok

16:46:28.0893 5496 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

16:46:28.0896 5496 clr_optimization_v4.0.30319_32 - ok

16:46:28.0912 5496 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

16:46:28.0915 5496 clr_optimization_v4.0.30319_64 - ok

16:46:28.0932 5496 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys

16:46:28.0933 5496 CmBatt - ok

16:46:28.0951 5496 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys

16:46:28.0954 5496 cmdide - ok

16:46:29.0010 5496 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys

16:46:29.0026 5496 CNG - ok

16:46:29.0045 5496 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys

16:46:29.0046 5496 Compbatt - ok

16:46:29.0076 5496 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys

16:46:29.0077 5496 CompositeBus - ok

16:46:29.0088 5496 COMSysApp - ok

16:46:29.0104 5496 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys

16:46:29.0106 5496 crcdisk - ok

16:46:29.0153 5496 [ 4F5414602E2544A4554D95517948B705 ] CryptSvc C:\Windows\system32\cryptsvc.dll

16:46:29.0159 5496 CryptSvc - ok

16:46:29.0198 5496 [ FBE228ABEAB2BE13B9C3A3A112D4D8DC ] CtClsFlt C:\Windows\system32\DRIVERS\CtClsFlt.sys

16:46:29.0204 5496 CtClsFlt - ok

16:46:29.0255 5496 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll

16:46:29.0266 5496 DcomLaunch - ok

16:46:29.0312 5496 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll

16:46:29.0322 5496 defragsvc - ok

16:46:29.0338 5496 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys

16:46:29.0343 5496 DfsC - ok

16:46:29.0367 5496 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll

16:46:29.0375 5496 Dhcp - ok

16:46:29.0390 5496 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys

16:46:29.0393 5496 discache - ok

16:46:29.0414 5496 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys

16:46:29.0417 5496 Disk - ok

16:46:29.0453 5496 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll

16:46:29.0460 5496 Dnscache - ok

16:46:29.0480 5496 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll

16:46:29.0488 5496 dot3svc - ok

16:46:29.0503 5496 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll

16:46:29.0511 5496 DPS - ok

16:46:29.0545 5496 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys

16:46:29.0546 5496 drmkaud - ok

16:46:29.0590 5496 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys

16:46:29.0604 5496 DXGKrnl - ok

16:46:29.0631 5496 EagleX64 - ok

16:46:29.0654 5496 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll

16:46:29.0659 5496 EapHost - ok

16:46:29.0745 5496 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys

16:46:29.0837 5496 ebdrv - ok

16:46:29.0884 5496 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe

16:46:29.0885 5496 EFS - ok

16:46:29.0939 5496 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe

16:46:29.0964 5496 ehRecvr - ok

16:46:29.0979 5496 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe

16:46:29.0983 5496 ehSched - ok

16:46:30.0014 5496 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys

16:46:30.0030 5496 elxstor - ok

16:46:30.0036 5496 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys

16:46:30.0038 5496 ErrDev - ok

16:46:30.0076 5496 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll

16:46:30.0085 5496 EventSystem - ok

16:46:30.0179 5496 [ 8B6C9924B0D333DBF76086B8258A0891 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe

16:46:30.0193 5496 EvtEng - ok

16:46:30.0214 5496 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys

16:46:30.0218 5496 exfat - ok

16:46:30.0234 5496 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys

16:46:30.0240 5496 fastfat - ok

16:46:30.0276 5496 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe

16:46:30.0303 5496 Fax - ok

16:46:30.0325 5496 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys

16:46:30.0327 5496 fdc - ok

16:46:30.0343 5496 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll

16:46:30.0346 5496 fdPHost - ok

16:46:30.0359 5496 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll

16:46:30.0363 5496 FDResPub - ok

16:46:30.0375 5496 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys

16:46:30.0378 5496 FileInfo - ok

16:46:30.0394 5496 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys

16:46:30.0396 5496 Filetrace - ok

16:46:30.0426 5496 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys

16:46:30.0428 5496 flpydisk - ok

16:46:30.0457 5496 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys

16:46:30.0465 5496 FltMgr - ok

16:46:30.0519 5496 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll

16:46:30.0537 5496 FontCache - ok

16:46:30.0581 5496 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

16:46:30.0583 5496 FontCache3.0.0.0 - ok

16:46:30.0602 5496 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys

16:46:30.0606 5496 FsDepends - ok

16:46:30.0634 5496 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys

16:46:30.0635 5496 Fs_Rec - ok

16:46:30.0656 5496 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys

16:46:30.0663 5496 fvevol - ok

16:46:30.0682 5496 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys

16:46:30.0683 5496 gagp30kx - ok

16:46:30.0718 5496 [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

16:46:30.0719 5496 GEARAspiWDM - ok

16:46:30.0759 5496 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll

16:46:30.0787 5496 gpsvc - ok

16:46:30.0820 5496 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys

16:46:30.0821 5496 hamachi - ok

16:46:30.0943 5496 [ F10C3F2E002100BF8B797DCF283FEA7D ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

16:46:30.0954 5496 Hamachi2Svc - ok

16:46:30.0992 5496 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys

16:46:30.0992 5496 hcw85cir - ok

16:46:31.0020 5496 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys

16:46:31.0025 5496 HDAudBus - ok

16:46:31.0032 5496 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys

16:46:31.0033 5496 HidBatt - ok

16:46:31.0038 5496 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys

16:46:31.0040 5496 HidBth - ok

16:46:31.0045 5496 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys

16:46:31.0047 5496 HidIr - ok

16:46:31.0064 5496 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll

16:46:31.0066 5496 hidserv - ok

16:46:31.0103 5496 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys

16:46:31.0106 5496 HidUsb - ok

16:46:31.0135 5496 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll

16:46:31.0140 5496 hkmsvc - ok

16:46:31.0160 5496 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll

16:46:31.0168 5496 HomeGroupListener - ok

16:46:31.0198 5496 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

16:46:31.0206 5496 HomeGroupProvider - ok

16:46:31.0226 5496 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys

16:46:31.0229 5496 HpSAMD - ok

16:46:31.0266 5496 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys

16:46:31.0292 5496 HTTP - ok

16:46:31.0303 5496 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys

16:46:31.0305 5496 hwpolicy - ok

16:46:31.0344 5496 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys

16:46:31.0348 5496 i8042prt - ok

16:46:31.0399 5496 [ D469B77687E12FE43E344806740B624D ] iaStor C:\Windows\system32\drivers\iaStor.sys

16:46:31.0407 5496 iaStor - ok

16:46:31.0457 5496 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys

16:46:31.0475 5496 iaStorV - ok

16:46:31.0513 5496 [ FC47F5CF561BF0FD897EFD1A9604DCCF ] iBtFltCoex C:\Windows\system32\DRIVERS\iBtFltCoex.sys

16:46:31.0515 5496 iBtFltCoex - ok

16:46:31.0577 5496 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

16:46:31.0606 5496 idsvc - ok

16:46:31.0845 5496 [ 66DC0CE2D1867B8178EAA0E11930DBD7 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys

16:46:32.0061 5496 igfx - ok

16:46:32.0101 5496 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys

16:46:32.0102 5496 iirsp - ok

16:46:32.0142 5496 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll

16:46:32.0171 5496 IKEEXT - ok

16:46:32.0216 5496 [ DD587A55390ED2295BCE6D36AD567DA9 ] Impcd C:\Windows\system32\drivers\Impcd.sys

16:46:32.0220 5496 Impcd - ok

16:46:32.0294 5496 [ 8FED6428FDE53D7F4C105095F22524BE ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

16:46:32.0307 5496 IntcAzAudAddService - ok

16:46:32.0339 5496 [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys

16:46:32.0343 5496 IntcDAud - ok

16:46:32.0379 5496 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys

16:46:32.0381 5496 intelide - ok

16:46:32.0396 5496 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys

16:46:32.0398 5496 intelppm - ok

16:46:32.0421 5496 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll

16:46:32.0426 5496 IPBusEnum - ok

16:46:32.0450 5496 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys

16:46:32.0453 5496 IpFilterDriver - ok

16:46:32.0482 5496 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll

16:46:32.0505 5496 iphlpsvc - ok

16:46:32.0527 5496 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys

16:46:32.0529 5496 IPMIDRV - ok

16:46:32.0538 5496 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys

16:46:32.0541 5496 IPNAT - ok

16:46:32.0610 5496 [ A9AB99EE7D39725EAFEC82732D2B3271 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe

16:46:32.0644 5496 iPod Service - ok

16:46:32.0657 5496 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys

16:46:32.0659 5496 IRENUM - ok

16:46:32.0666 5496 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys

16:46:32.0667 5496 isapnp - ok

16:46:32.0695 5496 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys

16:46:32.0703 5496 iScsiPrt - ok

16:46:32.0739 5496 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys

16:46:32.0741 5496 kbdclass - ok

16:46:32.0763 5496 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys

16:46:32.0766 5496 kbdhid - ok

16:46:32.0781 5496 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe

16:46:32.0784 5496 KeyIso - ok

16:46:32.0823 5496 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys

16:46:32.0827 5496 KSecDD - ok

16:46:32.0840 5496 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys

16:46:32.0845 5496 KSecPkg - ok

16:46:32.0862 5496 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys

16:46:32.0865 5496 ksthunk - ok

16:46:32.0897 5496 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll

16:46:32.0915 5496 KtmRm - ok

16:46:32.0952 5496 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll

16:46:32.0962 5496 LanmanServer - ok

16:46:32.0991 5496 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

16:46:32.0998 5496 LanmanWorkstation - ok

16:46:33.0025 5496 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys

16:46:33.0027 5496 lltdio - ok

16:46:33.0069 5496 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll

16:46:33.0086 5496 lltdsvc - ok

16:46:33.0104 5496 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll

16:46:33.0106 5496 lmhosts - ok

16:46:33.0169 5496 [ 7F32D4C47A50E7223491E8FB9359907D ] LMS C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

16:46:33.0175 5496 LMS - ok

16:46:33.0220 5496 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys

16:46:33.0224 5496 LSI_FC - ok

16:46:33.0240 5496 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys

16:46:33.0243 5496 LSI_SAS - ok

16:46:33.0252 5496 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys

16:46:33.0254 5496 LSI_SAS2 - ok

16:46:33.0292 5496 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys

16:46:33.0296 5496 LSI_SCSI - ok

16:46:33.0313 5496 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys

16:46:33.0317 5496 luafv - ok

16:46:33.0374 5496 [ DC8490812A3B72811AE534F423B4C206 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys

16:46:33.0376 5496 MBAMProtector - ok

16:46:33.0437 5496 [ 43683E970F008C93C9429EF428147A54 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

16:46:33.0463 5496 MBAMService - ok

16:46:33.0495 5496 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll

16:46:33.0501 5496 Mcx2Svc - ok

16:46:33.0516 5496 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys

16:46:33.0519 5496 megasas - ok

16:46:33.0542 5496 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys

16:46:33.0550 5496 MegaSR - ok

16:46:33.0575 5496 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\Windows\system32\DRIVERS\HECIx64.sys

16:46:33.0576 5496 MEIx64 - ok

16:46:33.0607 5496 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll

16:46:33.0612 5496 MMCSS - ok

16:46:33.0619 5496 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys

16:46:33.0621 5496 Modem - ok

16:46:33.0646 5496 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys

16:46:33.0646 5496 monitor - ok

16:46:33.0660 5496 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys

16:46:33.0660 5496 mouclass - ok

16:46:33.0710 5496 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys

16:46:33.0711 5496 mouhid - ok

16:46:33.0734 5496 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys

16:46:33.0738 5496 mountmgr - ok

16:46:33.0763 5496 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys

16:46:33.0768 5496 mpio - ok

16:46:33.0798 5496 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys

16:46:33.0801 5496 mpsdrv - ok

16:46:33.0833 5496 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll

16:46:33.0862 5496 MpsSvc - ok

16:46:33.0873 5496 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys

16:46:33.0877 5496 MRxDAV - ok

16:46:33.0906 5496 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys

16:46:33.0909 5496 mrxsmb - ok

16:46:33.0928 5496 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys

16:46:33.0935 5496 mrxsmb10 - ok

16:46:33.0953 5496 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys

16:46:33.0957 5496 mrxsmb20 - ok

16:46:33.0977 5496 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys

16:46:33.0979 5496 msahci - ok

16:46:33.0998 5496 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys

16:46:34.0004 5496 msdsm - ok

16:46:34.0022 5496 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe

16:46:34.0029 5496 MSDTC - ok

16:46:34.0056 5496 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys

16:46:34.0057 5496 Msfs - ok

16:46:34.0069 5496 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys

16:46:34.0071 5496 mshidkmdf - ok

16:46:34.0089 5496 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys

16:46:34.0090 5496 msisadrv - ok

16:46:34.0123 5496 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll

16:46:34.0129 5496 MSiSCSI - ok

16:46:34.0135 5496 msiserver - ok

16:46:34.0168 5496 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys

16:46:34.0170 5496 MSKSSRV - ok

16:46:34.0188 5496 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys

16:46:34.0189 5496 MSPCLOCK - ok

16:46:34.0201 5496 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys

16:46:34.0204 5496 MSPQM - ok

16:46:34.0224 5496 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys

16:46:34.0230 5496 MsRPC - ok

16:46:34.0243 5496 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys

16:46:34.0244 5496 mssmbios - ok

16:46:34.0266 5496 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys

16:46:34.0267 5496 MSTEE - ok

16:46:34.0273 5496 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys

16:46:34.0275 5496 MTConfig - ok

16:46:34.0290 5496 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys

16:46:34.0291 5496 Mup - ok

16:46:34.0335 5496 [ 6ED8935257672F4CD04A88A0F3DE093D ] MyWiFiDHCPDNS C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

16:46:34.0352 5496 MyWiFiDHCPDNS - ok

16:46:34.0395 5496 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll

16:46:34.0405 5496 napagent - ok

16:46:34.0437 5496 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys

16:46:34.0446 5496 NativeWifiP - ok

16:46:34.0493 5496 [ C38B8AE57F78915905064A9A24DC1586 ] NDIS C:\Windows\system32\drivers\ndis.sys

16:46:34.0527 5496 NDIS - ok

16:46:34.0549 5496 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys

16:46:34.0552 5496 NdisCap - ok

16:46:34.0580 5496 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys

16:46:34.0583 5496 NdisTapi - ok

16:46:34.0594 5496 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys

16:46:34.0597 5496 Ndisuio - ok

16:46:34.0616 5496 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys

16:46:34.0621 5496 NdisWan - ok

16:46:34.0639 5496 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys

16:46:34.0641 5496 NDProxy - ok

16:46:34.0651 5496 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys

16:46:34.0652 5496 NetBIOS - ok

16:46:34.0674 5496 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys

16:46:34.0681 5496 NetBT - ok

16:46:34.0695 5496 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe

16:46:34.0698 5496 Netlogon - ok

16:46:34.0720 5496 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll

16:46:34.0737 5496 Netman - ok

16:46:34.0763 5496 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

16:46:34.0767 5496 NetMsmqActivator - ok

16:46:34.0776 5496 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

16:46:34.0779 5496 NetPipeActivator - ok

16:46:34.0834 5496 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll

16:46:34.0843 5496 netprofm - ok

16:46:34.0851 5496 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

16:46:34.0853 5496 NetTcpActivator - ok

16:46:34.0860 5496 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

16:46:34.0863 5496 NetTcpPortSharing - ok

16:46:35.0072 5496 [ 5D262402B0634C998F8CBCEAD7DD8676 ] NETwNs64 C:\Windows\system32\DRIVERS\NETwNs64.sys

16:46:35.0226 5496 NETwNs64 - ok

16:46:35.0253 5496 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys

16:46:35.0255 5496 nfrd960 - ok

16:46:35.0291 5496 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll

16:46:35.0298 5496 NlaSvc - ok

16:46:35.0413 5496 [ B9B72FAAAA41D59B73B88FE3DD737ED1 ] NOBU C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe

16:46:35.0425 5496 NOBU - ok

16:46:35.0467 5496 [ 351533ACC2A069B94E80BBFC177E8FDF ] NPF C:\Windows\system32\drivers\npf.sys

16:46:35.0468 5496 NPF - ok

16:46:35.0476 5496 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys

16:46:35.0477 5496 Npfs - ok

16:46:35.0494 5496 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll

16:46:35.0498 5496 nsi - ok

16:46:35.0510 5496 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys

16:46:35.0512 5496 nsiproxy - ok

16:46:35.0596 5496 [ A2F74975097F52A00745F9637451FDD8 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys

16:46:35.0664 5496 Ntfs - ok

16:46:35.0676 5496 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys

16:46:35.0678 5496 Null - ok

16:46:35.0702 5496 [ 0EBC9D13CD96C15B1B18D8678A609E4B ] nusb3hub C:\Windows\system32\DRIVERS\nusb3hub.sys

16:46:35.0704 5496 nusb3hub - ok

16:46:35.0717 5496 [ 7BDEC000D56D485021D9C1E63C2F81CA ] nusb3xhc C:\Windows\system32\DRIVERS\nusb3xhc.sys

16:46:35.0723 5496 nusb3xhc - ok

16:46:35.0780 5496 [ 102806B360D0E6BC6E55BF47EF655D43 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys

16:46:35.0786 5496 NVHDA - ok

16:46:35.0852 5496 [ F8219CD9792008144A19691B17EA2993 ] nvkflt C:\Windows\system32\DRIVERS\nvkflt.sys

16:46:35.0856 5496 nvkflt - ok

16:46:36.0206 5496 [ BA0B4889C40380A01ECDF84C227A89C9 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys

16:46:36.0270 5496 nvlddmkm - ok

16:46:36.0305 5496 [ 715D45ED30003FC70CFA0D9C6DD0B538 ] nvpciflt C:\Windows\system32\DRIVERS\nvpciflt.sys

16:46:36.0305 5496 nvpciflt - ok

16:46:36.0333 5496 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys

16:46:36.0338 5496 nvraid - ok

16:46:36.0384 5496 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys

16:46:36.0389 5496 nvstor - ok

16:46:36.0418 5496 [ 92D06926C5DA2A2E62E8FB5104F44D92 ] NvStUSB C:\Windows\system32\drivers\nvstusb.sys

16:46:36.0423 5496 NvStUSB - ok

16:46:36.0473 5496 [ 06633CF95BEA62164C3BFCA24BCE6B11 ] NVSvc C:\Windows\system32\nvvsvc.exe

16:46:36.0488 5496 NVSvc - ok

16:46:36.0576 5496 [ 53B629CE436B110C5689C2F6439E567B ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

16:46:36.0601 5496 nvUpdatusService - ok

16:46:36.0626 5496 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys

16:46:36.0630 5496 nv_agp - ok

16:46:36.0646 5496 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys

16:46:36.0649 5496 ohci1394 - ok

16:46:36.0710 5496 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

16:46:36.0715 5496 ose - ok

16:46:36.0891 5496 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

16:46:37.0006 5496 osppsvc - ok

16:46:37.0035 5496 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll

16:46:37.0052 5496 p2pimsvc - ok

16:46:37.0089 5496 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll

16:46:37.0112 5496 p2psvc - ok

16:46:37.0147 5496 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys

16:46:37.0150 5496 Parport - ok

16:46:37.0179 5496 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys

16:46:37.0182 5496 partmgr - ok

16:46:37.0200 5496 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll

16:46:37.0206 5496 PcaSvc - ok

16:46:37.0233 5496 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys

16:46:37.0238 5496 pci - ok

16:46:37.0269 5496 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys

16:46:37.0271 5496 pciide - ok

16:46:37.0316 5496 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys

16:46:37.0348 5496 pcmcia - ok

16:46:37.0363 5496 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys

16:46:37.0364 5496 pcw - ok

16:46:37.0421 5496 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys

16:46:37.0436 5496 PEAUTH - ok

16:46:38.0229 5496 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe

16:46:38.0237 5496 PerfHost - ok

16:46:38.0374 5496 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll

16:46:38.0408 5496 pla - ok

16:46:38.0445 5496 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll

16:46:38.0451 5496 PlugPlay - ok

16:46:38.0464 5496 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll

16:46:38.0468 5496 PNRPAutoReg - ok

16:46:38.0494 5496 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll

16:46:38.0496 5496 PNRPsvc - ok

16:46:38.0622 5496 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll

16:46:38.0647 5496 PolicyAgent - ok

16:46:38.0755 5496 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll

16:46:38.0764 5496 Power - ok

16:46:38.0826 5496 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys

16:46:38.0833 5496 PptpMiniport - ok

16:46:38.0857 5496 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys

16:46:38.0863 5496 Processor - ok

16:46:38.0915 5496 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll

16:46:38.0923 5496 ProfSvc - ok

16:46:38.0944 5496 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe

16:46:38.0946 5496 ProtectedStorage - ok

16:46:38.0978 5496 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys

16:46:38.0982 5496 Psched - ok

16:46:39.0043 5496 [ 87B04878A6D59D6C79251DC960C674C1 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys

16:46:39.0044 5496 PxHlpa64 - ok

16:46:39.0093 5496 [ 0928BD20273625622722FE1DE5BBDE57 ] qicflt C:\Windows\system32\DRIVERS\qicflt.sys

16:46:39.0094 5496 qicflt - ok

16:46:39.0244 5496 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys

16:46:39.0281 5496 ql2300 - ok

16:46:39.0291 5496 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys

16:46:39.0295 5496 ql40xx - ok

16:46:39.0377 5496 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll

16:46:39.0393 5496 QWAVE - ok

16:46:39.0404 5496 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys

16:46:39.0406 5496 QWAVEdrv - ok

16:46:39.0412 5496 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys

16:46:39.0414 5496 RasAcd - ok

16:46:39.0449 5496 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys

16:46:39.0453 5496 RasAgileVpn - ok

16:46:39.0505 5496 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll

16:46:39.0510 5496 RasAuto - ok

16:46:39.0546 5496 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys

16:46:39.0554 5496 Rasl2tp - ok

16:46:39.0633 5496 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll

16:46:39.0674 5496 RasMan - ok

16:46:39.0696 5496 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys

16:46:39.0698 5496 RasPppoe - ok

16:46:39.0740 5496 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys

16:46:39.0743 5496 RasSstp - ok

16:46:39.0764 5496 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys

16:46:39.0813 5496 rdbss - ok

16:46:39.0836 5496 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys

16:46:39.0841 5496 rdpbus - ok

16:46:39.0871 5496 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys

16:46:39.0873 5496 RDPCDD - ok

16:46:39.0911 5496 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys

16:46:39.0912 5496 RDPENCDD - ok

16:46:39.0957 5496 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys

16:46:39.0958 5496 RDPREFMP - ok

16:46:39.0999 5496 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys

16:46:40.0003 5496 RDPWD - ok

16:46:40.0017 5496 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys

16:46:40.0021 5496 rdyboost - ok

16:46:40.0078 5496 [ 189C5A8D2098E0AA14FD157A954B34FC ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

16:46:40.0082 5496 RegSrvc - ok

16:46:40.0101 5496 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll

16:46:40.0104 5496 RemoteAccess - ok

16:46:40.0127 5496 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll

16:46:40.0131 5496 RemoteRegistry - ok

16:46:40.0143 5496 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys

16:46:40.0146 5496 RFCOMM - ok

16:46:40.0230 5496 [ 3C957189B31C34D3AD21967B12B6AED7 ] RoxMediaDB12OEM C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe

16:46:40.0255 5496 RoxMediaDB12OEM - ok

16:46:40.0287 5496 [ 2B73088CC2CA757A172B425C9398E5BC ] RoxWatch12 C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe

16:46:40.0289 5496 RoxWatch12 - ok

16:46:40.0348 5496 [ B60F58F175DE20A6739194E85B035178 ] rpcapd C:\Program Files (x86)\WinPcap\rpcapd.exe

16:46:40.0351 5496 rpcapd - ok

16:46:40.0361 5496 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll

16:46:40.0367 5496 RpcEptMapper - ok

16:46:40.0384 5496 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe

16:46:40.0388 5496 RpcLocator - ok

16:46:40.0418 5496 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll

16:46:40.0429 5496 RpcSs - ok

16:46:40.0455 5496 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys

16:46:40.0459 5496 rspndr - ok

16:46:40.0513 5496 [ EE082E06A82FF630351D1E0EBBD3D8D0 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys

16:46:40.0522 5496 RTL8167 - ok

16:46:40.0536 5496 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe

16:46:40.0538 5496 SamSs - ok

16:46:40.0556 5496 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys

16:46:40.0557 5496 sbp2port - ok

16:46:40.0576 5496 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll

16:46:40.0585 5496 SCardSvr - ok

16:46:40.0601 5496 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys

16:46:40.0604 5496 scfilter - ok

16:46:40.0643 5496 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll

16:46:40.0685 5496 Schedule - ok

16:46:40.0705 5496 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll

16:46:40.0707 5496 SCPolicySvc - ok

16:46:40.0723 5496 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll

16:46:40.0731 5496 SDRSVC - ok

16:46:40.0761 5496 [ 331E7BDE228914574FC9AE6CD520DAFA ] SeaPort C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

16:46:40.0766 5496 SeaPort - ok

16:46:40.0786 5496 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys

16:46:40.0787 5496 secdrv - ok

16:46:40.0803 5496 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll

16:46:40.0808 5496 seclogon - ok

16:46:40.0828 5496 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll

16:46:40.0832 5496 SENS - ok

16:46:40.0856 5496 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll

16:46:40.0862 5496 SensrSvc - ok

16:46:40.0891 5496 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys

16:46:40.0893 5496 Serenum - ok

16:46:40.0918 5496 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys

16:46:40.0922 5496 Serial - ok

16:46:40.0943 5496 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys

16:46:40.0945 5496 sermouse - ok

16:46:40.0980 5496 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll

16:46:40.0983 5496 SessionEnv - ok

16:46:40.0986 5496 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys

16:46:40.0986 5496 sffdisk - ok

16:46:41.0002 5496 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys

16:46:41.0002 5496 sffp_mmc - ok

16:46:41.0005 5496 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys

16:46:41.0005 5496 sffp_sd - ok

16:46:41.0009 5496 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys

16:46:41.0009 5496 sfloppy - ok

16:46:41.0095 5496 [ E1974A92AC0914A3859359A0A8C82C68 ] SftService C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE

16:46:41.0106 5496 SftService - ok

16:46:41.0138 5496 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll

16:46:41.0147 5496 SharedAccess - ok

16:46:41.0168 5496 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll

16:46:41.0188 5496 ShellHWDetection - ok

16:46:41.0195 5496 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys

16:46:41.0197 5496 SiSRaid2 - ok

16:46:41.0205 5496 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys

16:46:41.0208 5496 SiSRaid4 - ok

16:46:41.0261 5496 [ EA396139541706B4B433641D62EA53CE ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe

16:46:41.0264 5496 SkypeUpdate - ok

16:46:41.0272 5496 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys

16:46:41.0275 5496 Smb - ok

16:46:41.0326 5496 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe

16:46:41.0331 5496 SNMPTRAP - ok

16:46:41.0348 5496 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys

16:46:41.0349 5496 spldr - ok

16:46:41.0366 5496 [ B96C17B5DC1424D56EEA3A99E97428CD ] Spooler C:\Windows\System32\spoolsv.exe

16:46:41.0369 5496 Spooler - ok

16:46:41.0446 5496 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe

16:46:41.0463 5496 sppsvc - ok

16:46:41.0484 5496 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll

16:46:41.0487 5496 sppuinotify - ok

16:46:41.0524 5496 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys

16:46:41.0542 5496 srv - ok

16:46:41.0569 5496 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys

16:46:41.0586 5496 srv2 - ok

16:46:41.0603 5496 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys

16:46:41.0609 5496 srvnet - ok

16:46:41.0637 5496 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll

16:46:41.0646 5496 SSDPSRV - ok

16:46:41.0663 5496 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll

16:46:41.0669 5496 SstpSvc - ok

16:46:41.0694 5496 [ 92E7F6666633D2DD91D527503DAA7BE0 ] stdcfltn C:\Windows\system32\DRIVERS\stdcfltn.sys

16:46:41.0696 5496 stdcfltn - ok

16:46:41.0719 5496 Steam Client Service - ok

16:46:41.0796 5496 [ C354621B6B94E10AE7F5CDBE745FEB86 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

16:46:41.0803 5496 Stereo Service - ok

16:46:41.0826 5496 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys

16:46:41.0829 5496 stexstor - ok

16:46:41.0881 5496 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll

16:46:41.0906 5496 stisvc - ok

16:46:41.0941 5496 [ 7731F46EC0D687A931CBA063E8F90EF0 ] stllssvr C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe

16:46:41.0945 5496 stllssvr - ok

16:46:41.0963 5496 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys

16:46:41.0964 5496 swenum - ok

16:46:41.0993 5496 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll

16:46:42.0019 5496 swprv - ok

16:46:42.0077 5496 [ 5E3B232A614339399ACC71FA3AAAAA6B ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys

16:46:42.0098 5496 SynTP - ok

16:46:42.0169 5496 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll

16:46:42.0191 5496 SysMain - ok

16:46:42.0207 5496 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll

16:46:42.0210 5496 TabletInputService - ok

16:46:42.0248 5496 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll

16:46:42.0269 5496 TapiSrv - ok

16:46:42.0287 5496 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll

16:46:42.0291 5496 TBS - ok

16:46:42.0371 5496 [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] Tcpip C:\Windows\system32\drivers\tcpip.sys

16:46:42.0431 5496 Tcpip - ok

16:46:42.0492 5496 [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys

16:46:42.0500 5496 TCPIP6 - ok

16:46:42.0528 5496 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys

16:46:42.0529 5496 tcpipreg - ok

16:46:42.0546 5496 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys

16:46:42.0547 5496 TDPIPE - ok

16:46:42.0574 5496 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys

16:46:42.0576 5496 TDTCP - ok

16:46:42.0609 5496 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys

16:46:42.0613 5496 tdx - ok

16:46:42.0882 5496 [ 9C1F776825207C203CB44CA3C63B5A6E ] TeamViewer7 C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

16:46:42.0894 5496 TeamViewer7 - ok

16:46:42.0925 5496 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys

16:46:42.0925 5496 TermDD - ok

16:46:42.0960 5496 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll

16:46:42.0985 5496 TermService - ok

16:46:42.0998 5496 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll

16:46:43.0003 5496 Themes - ok

16:46:43.0028 5496 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll

16:46:43.0032 5496 THREADORDER - ok

16:46:43.0072 5496 [ E386DD8EC68C67CA3E2A3ABDC1DF5C56 ] tmactmon C:\Windows\system32\DRIVERS\tmactmon.sys

16:46:43.0075 5496 tmactmon - ok

16:46:43.0098 5496 [ AB011C569487FD65C8944DDF8CBB2572 ] tmcomm C:\Windows\system32\DRIVERS\tmcomm.sys

16:46:43.0101 5496 tmcomm - ok

16:46:43.0120 5496 [ 8870A3D7305455B47ADCCD226F8E51BC ] tmevtmgr C:\Windows\system32\DRIVERS\tmevtmgr.sys

16:46:43.0123 5496 tmevtmgr - ok

16:46:43.0148 5496 [ 065CB7D9278D778FB9EF62CEAD01433F ] tmtdi C:\Windows\system32\DRIVERS\tmtdi.sys

16:46:43.0150 5496 tmtdi - ok

16:46:43.0174 5496 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll

16:46:43.0180 5496 TrkWks - ok

16:46:43.0215 5496 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

16:46:43.0221 5496 TrustedInstaller - ok

16:46:43.0241 5496 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys

16:46:43.0244 5496 tssecsrv - ok

16:46:43.0284 5496 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys

16:46:43.0285 5496 TsUsbFlt - ok

16:46:43.0289 5496 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys

16:46:43.0290 5496 TsUsbGD - ok

16:46:43.0316 5496 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys

16:46:43.0318 5496 tunnel - ok

16:46:43.0349 5496 [ FD24F98D2898BE093FE926604BE7DB99 ] TurboB C:\Windows\system32\DRIVERS\TurboB.sys

16:46:43.0351 5496 TurboB - ok

16:46:43.0385 5496 [ 600B406A04D90F577FEA8A88D7379F08 ] TurboBoost C:\Program Files\Intel\TurboBoost\TurboBoost.exe

16:46:43.0390 5496 TurboBoost - ok

16:46:43.0394 5496 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys

16:46:43.0395 5496 uagp35 - ok

16:46:43.0412 5496 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys

16:46:43.0418 5496 udfs - ok

16:46:43.0436 5496 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe

16:46:43.0439 5496 UI0Detect - ok

16:46:43.0457 5496 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys

16:46:43.0460 5496 uliagpkx - ok

16:46:43.0480 5496 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys

16:46:43.0483 5496 umbus - ok

16:46:43.0505 5496 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys

16:46:43.0508 5496 UmPass - ok

16:46:43.0607 5496 [ 2C16648A12999AE69A9EBF41974B0BA2 ] UNS C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

16:46:43.0619 5496 UNS - ok

16:46:43.0653 5496 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll

16:46:43.0659 5496 upnphost - ok

16:46:43.0702 5496 [ 19AD7990C0B67E48DAC5B26F99628223 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys

16:46:43.0706 5496 usbccgp - ok

16:46:43.0724 5496 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys

16:46:43.0727 5496 usbcir - ok

16:46:43.0769 5496 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys

16:46:43.0772 5496 usbehci - ok

16:46:43.0815 5496 [ 8B892002D7B79312821169A14317AB86 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys

16:46:43.0824 5496 usbhub - ok

16:46:43.0854 5496 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys

16:46:43.0855 5496 usbohci - ok

16:46:43.0883 5496 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys

16:46:43.0885 5496 usbprint - ok

16:46:43.0904 5496 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS

16:46:43.0906 5496 USBSTOR - ok

16:46:43.0928 5496 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys

16:46:43.0931 5496 usbuhci - ok

16:46:43.0958 5496 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys

16:46:43.0963 5496 usbvideo - ok

16:46:43.0989 5496 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll

16:46:43.0994 5496 UxSms - ok

16:46:44.0017 5496 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe

16:46:44.0020 5496 VaultSvc - ok

16:46:44.0037 5496 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys

16:46:44.0038 5496 vdrvroot - ok

16:46:44.0067 5496 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe

16:46:44.0093 5496 vds - ok

16:46:44.0110 5496 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys

16:46:44.0112 5496 vga - ok

16:46:44.0133 5496 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys

16:46:44.0136 5496 VgaSave - ok

16:46:44.0157 5496 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys

16:46:44.0161 5496 vhdmp - ok

16:46:44.0168 5496 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys

16:46:44.0169 5496 viaide - ok

16:46:44.0182 5496 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys

16:46:44.0184 5496 volmgr - ok

16:46:44.0201 5496 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys

16:46:44.0207 5496 volmgrx - ok

16:46:44.0226 5496 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys

16:46:44.0231 5496 volsnap - ok

16:46:44.0243 5496 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys

16:46:44.0246 5496 vsmraid - ok

16:46:44.0283 5496 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe

16:46:44.0317 5496 VSS - ok

16:46:44.0325 5496 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys

16:46:44.0327 5496 vwifibus - ok

16:46:44.0348 5496 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys

16:46:44.0352 5496 vwififlt - ok

16:46:44.0376 5496 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys

16:46:44.0378 5496 vwifimp - ok

16:46:44.0402 5496 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll

16:46:44.0416 5496 W32Time - ok

16:46:44.0420 5496 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys

16:46:44.0421 5496 WacomPen - ok

16:46:44.0429 5496 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys

16:46:44.0430 5496 WANARP - ok

16:46:44.0446 5496 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys

16:46:44.0448 5496 Wanarpv6 - ok

16:46:44.0518 5496 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe

16:46:44.0581 5496 WatAdminSvc - ok

16:46:44.0640 5496 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe

16:46:44.0710 5496 wbengine - ok

16:46:44.0723 5496 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll

16:46:44.0728 5496 WbioSrvc - ok

16:46:44.0739 5496 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll

16:46:44.0747 5496 wcncsvc - ok

16:46:44.0762 5496 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

16:46:44.0768 5496 WcsPlugInService - ok

16:46:44.0784 5496 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys

16:46:44.0786 5496 Wd - ok

16:46:44.0828 5496 [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys

16:46:44.0847 5496 Wdf01000 - ok

16:46:44.0867 5496 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll

16:46:44.0872 5496 WdiServiceHost - ok

16:46:44.0884 5496 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll

16:46:44.0888 5496 WdiSystemHost - ok

16:46:44.0909 5496 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll

16:46:44.0918 5496 WebClient - ok

16:46:44.0935 5496 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll

16:46:44.0944 5496 Wecsvc - ok

16:46:44.0958 5496 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll

16:46:44.0962 5496 wercplsupport - ok

16:46:44.0990 5496 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll

16:46:44.0994 5496 WerSvc - ok

16:46:45.0021 5496 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys

16:46:45.0024 5496 WfpLwf - ok

16:46:45.0060 5496 [ B14EF15BD757FA488F9C970EEE9C0D35 ] WimFltr C:\Windows\system32\DRIVERS\wimfltr.sys

16:46:45.0065 5496 WimFltr - ok

16:46:45.0079 5496 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys

16:46:45.0080 5496 WIMMount - ok

16:46:45.0093 5496 WinDefend - ok

16:46:45.0102 5496 WinHttpAutoProxySvc - ok

16:46:45.0144 5496 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll

16:46:45.0151 5496 Winmgmt - ok

16:46:45.0235 5496 [ 0C0195C48B6B8582FA6F6373032118DA ] WinRing0_1_2_0 C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys

16:46:45.0238 5496 WinRing0_1_2_0 - ok

16:46:45.0320 5496 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll

16:46:45.0402 5496 WinRM - ok

16:46:45.0459 5496 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll

16:46:45.0490 5496 Wlansvc - ok

16:46:45.0530 5496 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe

16:46:45.0533 5496 wlcrasvc - ok

16:46:45.0627 5496 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

16:46:45.0646 5496 wlidsvc - ok

16:46:45.0668 5496 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys

16:46:45.0669 5496 WmiAcpi - ok

16:46:45.0690 5496 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe

16:46:45.0694 5496 wmiApSrv - ok

16:46:45.0719 5496 WMPNetworkSvc - ok

16:46:45.0732 5496 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll

16:46:45.0737 5496 WPCSvc - ok

16:46:45.0749 5496 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll

16:46:45.0756 5496 WPDBusEnum - ok

16:46:45.0782 5496 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys

16:46:45.0782 5496 ws2ifsl - ok

16:46:45.0787 5496 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll

16:46:45.0789 5496 wscsvc - ok

16:46:45.0793 5496 WSearch - ok

16:46:45.0884 5496 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll

16:46:45.0896 5496 wuauserv - ok

16:46:45.0917 5496 [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf C:\Windows\system32\drivers\WudfPf.sys

16:46:45.0918 5496 WudfPf - ok

16:46:45.0952 5496 [ CF8D590BE3373029D57AF80914190682 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys

16:46:45.0957 5496 WUDFRd - ok

16:46:45.0983 5496 [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc C:\Windows\System32\WUDFSvc.dll

16:46:45.0988 5496 wudfsvc - ok

16:46:46.0016 5496 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll

16:46:46.0021 5496 WwanSvc - ok

16:46:46.0097 5496 X6va009 - ok

16:46:46.0144 5496 ================ Scan global ===============================

16:46:46.0160 5496 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll

16:46:46.0188 5496 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll

16:46:46.0206 5496 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll

16:46:46.0252 5496 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

16:46:46.0275 5496 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe

16:46:46.0283 5496 [Global] - ok

16:46:46.0284 5496 ================ Scan MBR ==================================

16:46:46.0295 5496 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0

16:46:46.0530 5496 \Device\Harddisk0\DR0 - ok

16:46:46.0793 5496 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1

16:46:46.0857 5496 \Device\Harddisk1\DR1 - ok

16:46:46.0858 5496 ================ Scan VBR ==================================

16:46:46.0863 5496 [ 44A7FC74811B7ECC43140AE70409A948 ] \Device\Harddisk0\DR0\Partition1

16:46:46.0866 5496 \Device\Harddisk0\DR0\Partition1 - ok

16:46:46.0879 5496 [ C845D5C8BB657EE4EBCDF33A84300C9A ] \Device\Harddisk0\DR0\Partition2

16:46:46.0883 5496 \Device\Harddisk0\DR0\Partition2 - ok

16:46:46.0889 5496 [ A8E55EA7CEA6FCDDA87D1A0122B45A91 ] \Device\Harddisk1\DR1\Partition1

16:46:46.0892 5496 \Device\Harddisk1\DR1\Partition1 - ok

16:46:46.0893 5496 ============================================================

16:46:46.0893 5496 Scan finished

16:46:46.0893 5496 ============================================================

16:46:46.0906 4468 Detected object count: 1

16:46:46.0906 4468 Actual detected object count: 1

16:47:05.0804 4468 Akamai ( HiddenFile.Multi.Generic ) - skipped by user

16:47:05.0804 4468 Akamai ( HiddenFile.Multi.Generic ) - User select action: Skip

16:47:45.0025 3004 ============================================================

16:47:45.0025 3004 Scan started

16:47:45.0025 3004 Mode: Manual;

16:47:45.0025 3004 ============================================================

16:47:48.0007 3004 ================ Scan system memory ========================

16:47:48.0008 3004 System memory - ok

16:47:48.0009 3004 ================ Scan services =============================

16:47:48.0208 3004 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys

16:47:48.0212 3004 1394ohci - ok

16:47:48.0234 3004 [ E0065CBF1A25C015C218457D2CD522B9 ] Acceler C:\Windows\system32\DRIVERS\Accelern.sys

16:47:48.0235 3004 Acceler - ok

16:47:48.0258 3004 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys

16:47:48.0264 3004 ACPI - ok

16:47:48.0272 3004 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys

16:47:48.0273 3004 AcpiPmi - ok

16:47:48.0301 3004 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys

16:47:48.0308 3004 adp94xx - ok

16:47:48.0322 3004 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys

16:47:48.0327 3004 adpahci - ok

16:47:48.0338 3004 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys

16:47:48.0341 3004 adpu320 - ok

16:47:48.0377 3004 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll

16:47:48.0379 3004 AeLookupSvc - ok

16:47:48.0403 3004 [ D1E343BC00136CE03C4D403194D06A80 ] AERTFilters C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

16:47:48.0405 3004 AERTFilters - ok

16:47:48.0452 3004 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys

16:47:48.0460 3004 AFD - ok

16:47:48.0481 3004 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys

16:47:48.0483 3004 agp440 - ok

16:47:48.0675 3004 [ 0923671CF87CD511E46D4668B53F5E76 ] Akamai c:\program files (x86)\common files\akamai/netsession_win_5891ae0.dll

16:47:48.0675 3004 Suspicious file (Hidden): c:\program files (x86)\common files\akamai/netsession_win_5891ae0.dll. md5: 0923671CF87CD511E46D4668B53F5E76

16:47:48.0679 3004 Akamai ( HiddenFile.Multi.Generic ) - warning

16:47:48.0679 3004 Akamai - detected HiddenFile.Multi.Generic (1)

16:47:48.0702 3004 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe

16:47:48.0702 3004 ALG - ok

16:47:48.0706 3004 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys

16:47:48.0706 3004 aliide - ok

16:47:48.0709 3004 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys

16:47:48.0709 3004 amdide - ok

16:47:48.0712 3004 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys

16:47:48.0713 3004 AmdK8 - ok

16:47:48.0716 3004 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys

16:47:48.0716 3004 AmdPPM - ok

16:47:48.0741 3004 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys

16:47:48.0742 3004 amdsata - ok

16:47:48.0748 3004 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys

16:47:48.0749 3004 amdsbs - ok

16:47:48.0762 3004 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys

16:47:48.0764 3004 amdxata - ok

16:47:48.0814 3004 [ 1B7D1F0A0DFADBC797C16364792A7AA5 ] Amsp C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe

16:47:48.0819 3004 Amsp - ok

16:47:48.0838 3004 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys

16:47:48.0840 3004 AppID - ok

16:47:48.0871 3004 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll

16:47:48.0872 3004 AppIDSvc - ok

16:47:48.0878 3004 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll

16:47:48.0879 3004 Appinfo - ok

16:47:48.0933 3004 [ F401929EE0CC92BFE7F15161CA535383 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

16:47:48.0934 3004 Apple Mobile Device - ok

16:47:48.0937 3004 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys

16:47:48.0938 3004 arc - ok

16:47:48.0944 3004 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys

mageisfun · September 11, 2012

16:47:48.0946 3004 arcsas - ok

16:47:49.0045 3004 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

16:47:49.0047 3004 aspnet_state - ok

16:47:49.0055 3004 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys

16:47:49.0056 3004 AsyncMac - ok

16:47:49.0085 3004 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys

16:47:49.0086 3004 atapi - ok

16:47:49.0121 3004 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

16:47:49.0132 3004 AudioEndpointBuilder - ok

16:47:49.0169 3004 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll

16:47:49.0179 3004 AudioSrv - ok

16:47:49.0216 3004 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll

16:47:49.0218 3004 AxInstSV - ok

16:47:49.0249 3004 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys

16:47:49.0257 3004 b06bdrv - ok

16:47:49.0270 3004 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys

16:47:49.0272 3004 b57nd60a - ok

16:47:49.0285 3004 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll

16:47:49.0285 3004 BDESVC - ok

16:47:49.0312 3004 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys

16:47:49.0312 3004 Beep - ok

16:47:49.0346 3004 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll

16:47:49.0357 3004 BFE - ok

16:47:49.0388 3004 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll

16:47:49.0401 3004 BITS - ok

16:47:49.0414 3004 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys

16:47:49.0416 3004 blbdrive - ok

16:47:49.0495 3004 [ C440483A5CE0E0AB03A79A33ACE35D91 ] Bluetooth Device Monitor C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe

16:47:49.0509 3004 Bluetooth Device Monitor - ok

16:47:49.0538 3004 [ C8AB8CA3557CCE041AC4C88E76AFBAD0 ] Bluetooth Media Service C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe

16:47:49.0554 3004 Bluetooth Media Service - ok

16:47:49.0587 3004 [ DF83FB0EB35C91339F1C84C6CF426100 ] Bluetooth OBEX Service C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe

16:47:49.0591 3004 Bluetooth OBEX Service - ok

16:47:49.0638 3004 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

16:47:49.0645 3004 Bonjour Service - ok

16:47:49.0674 3004 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys

16:47:49.0676 3004 bowser - ok

16:47:49.0695 3004 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys

16:47:49.0696 3004 BrFiltLo - ok

16:47:49.0704 3004 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys

16:47:49.0705 3004 BrFiltUp - ok

16:47:49.0734 3004 [ 8EF0D5C41EC907751B8429162B1239ED ] Browser C:\Windows\System32\browser.dll

16:47:49.0737 3004 Browser - ok

16:47:49.0751 3004 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys

16:47:49.0756 3004 Brserid - ok

16:47:49.0764 3004 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys

16:47:49.0766 3004 BrSerWdm - ok

16:47:49.0773 3004 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys

16:47:49.0774 3004 BrUsbMdm - ok

16:47:49.0781 3004 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys

16:47:49.0782 3004 BrUsbSer - ok

16:47:49.0814 3004 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys

16:47:49.0815 3004 BthEnum - ok

16:47:49.0838 3004 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys

16:47:49.0839 3004 BTHMODEM - ok

16:47:49.0869 3004 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys

16:47:49.0872 3004 BthPan - ok

16:47:49.0923 3004 [ 64C198198501F7560EE41D8D1EFA7952 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys

16:47:49.0932 3004 BTHPORT - ok

16:47:49.0949 3004 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll

16:47:49.0952 3004 bthserv - ok

16:47:49.0966 3004 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys

16:47:49.0968 3004 BTHUSB - ok

16:47:49.0998 3004 [ BA554BFCBF21201D310738A42C9C19E1 ] btmaux C:\Windows\system32\DRIVERS\btmaux.sys

16:47:50.0000 3004 btmaux - ok

16:47:50.0046 3004 [ 40C6FEC49D1CC4D112368A2BCD2BCBB7 ] btmhsf C:\Windows\system32\DRIVERS\btmhsf.sys

16:47:50.0051 3004 btmhsf - ok

16:47:50.0072 3004 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys

16:47:50.0074 3004 cdfs - ok

16:47:50.0095 3004 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys

16:47:50.0098 3004 cdrom - ok

16:47:50.0113 3004 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll

16:47:50.0116 3004 CertPropSvc - ok

16:47:50.0131 3004 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys

16:47:50.0133 3004 circlass - ok

16:47:50.0156 3004 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys

16:47:50.0162 3004 CLFS - ok

16:47:50.0209 3004 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

16:47:50.0211 3004 clr_optimization_v2.0.50727_32 - ok

16:47:50.0261 3004 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

16:47:50.0263 3004 clr_optimization_v2.0.50727_64 - ok

16:47:50.0305 3004 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

16:47:50.0308 3004 clr_optimization_v4.0.30319_32 - ok

16:47:50.0325 3004 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

16:47:50.0328 3004 clr_optimization_v4.0.30319_64 - ok

16:47:50.0345 3004 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys

16:47:50.0346 3004 CmBatt - ok

16:47:50.0354 3004 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys

16:47:50.0355 3004 cmdide - ok

16:47:50.0406 3004 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys

16:47:50.0413 3004 CNG - ok

16:47:50.0425 3004 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys

16:47:50.0426 3004 Compbatt - ok

16:47:50.0439 3004 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys

16:47:50.0440 3004 CompositeBus - ok

16:47:50.0443 3004 COMSysApp - ok

16:47:50.0458 3004 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys

16:47:50.0459 3004 crcdisk - ok

16:47:50.0499 3004 [ 4F5414602E2544A4554D95517948B705 ] CryptSvc C:\Windows\system32\cryptsvc.dll

16:47:50.0503 3004 CryptSvc - ok

16:47:50.0536 3004 [ FBE228ABEAB2BE13B9C3A3A112D4D8DC ] CtClsFlt C:\Windows\system32\DRIVERS\CtClsFlt.sys

16:47:50.0539 3004 CtClsFlt - ok

16:47:50.0577 3004 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll

16:47:50.0587 3004 DcomLaunch - ok

16:47:50.0615 3004 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll

16:47:50.0617 3004 defragsvc - ok

16:47:50.0627 3004 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys

16:47:50.0630 3004 DfsC - ok

16:47:50.0648 3004 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll

16:47:50.0654 3004 Dhcp - ok

16:47:50.0671 3004 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys

16:47:50.0672 3004 discache - ok

16:47:50.0686 3004 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys

16:47:50.0688 3004 Disk - ok

16:47:50.0717 3004 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll

16:47:50.0721 3004 Dnscache - ok

16:47:50.0745 3004 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll

16:47:50.0750 3004 dot3svc - ok

16:47:50.0767 3004 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll

16:47:50.0770 3004 DPS - ok

16:47:50.0793 3004 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys

16:47:50.0793 3004 drmkaud - ok

16:47:50.0829 3004 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys

16:47:50.0842 3004 DXGKrnl - ok

16:47:50.0849 3004 EagleX64 - ok

16:47:50.0876 3004 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll

16:47:50.0879 3004 EapHost - ok

16:47:50.0957 3004 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys

16:47:50.0972 3004 ebdrv - ok

16:47:51.0016 3004 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe

16:47:51.0019 3004 EFS - ok

16:47:51.0070 3004 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe

16:47:51.0081 3004 ehRecvr - ok

16:47:51.0119 3004 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe

16:47:51.0122 3004 ehSched - ok

16:47:51.0156 3004 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys

16:47:51.0165 3004 elxstor - ok

16:47:51.0174 3004 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys

16:47:51.0174 3004 ErrDev - ok

16:47:51.0205 3004 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll

16:47:51.0207 3004 EventSystem - ok

16:47:51.0284 3004 [ 8B6C9924B0D333DBF76086B8258A0891 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe

16:47:51.0299 3004 EvtEng - ok

16:47:51.0309 3004 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys

16:47:51.0311 3004 exfat - ok

16:47:51.0338 3004 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys

16:47:51.0339 3004 fastfat - ok

16:47:51.0367 3004 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe

16:47:51.0376 3004 Fax - ok

16:47:51.0383 3004 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys

16:47:51.0384 3004 fdc - ok

16:47:51.0400 3004 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll

16:47:51.0401 3004 fdPHost - ok

16:47:51.0416 3004 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll

16:47:51.0417 3004 FDResPub - ok

16:47:51.0432 3004 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys

16:47:51.0433 3004 FileInfo - ok

16:47:51.0442 3004 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys

16:47:51.0444 3004 Filetrace - ok

16:47:51.0450 3004 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys

16:47:51.0451 3004 flpydisk - ok

16:47:51.0471 3004 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys

16:47:51.0475 3004 FltMgr - ok

16:47:51.0524 3004 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll

16:47:51.0541 3004 FontCache - ok

16:47:51.0596 3004 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

16:47:51.0598 3004 FontCache3.0.0.0 - ok

16:47:51.0618 3004 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys

16:47:51.0620 3004 FsDepends - ok

16:47:51.0649 3004 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys

16:47:51.0651 3004 Fs_Rec - ok

16:47:51.0671 3004 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys

16:47:51.0676 3004 fvevol - ok

16:47:51.0697 3004 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys

16:47:51.0699 3004 gagp30kx - ok

16:47:51.0750 3004 [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

16:47:51.0751 3004 GEARAspiWDM - ok

16:47:51.0791 3004 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll

16:47:51.0803 3004 gpsvc - ok

16:47:51.0827 3004 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys

16:47:51.0829 3004 hamachi - ok

16:47:51.0941 3004 [ F10C3F2E002100BF8B797DCF283FEA7D ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

16:47:51.0951 3004 Hamachi2Svc - ok

16:47:51.0993 3004 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys

16:47:51.0993 3004 hcw85cir - ok

16:47:52.0011 3004 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys

16:47:52.0013 3004 HDAudBus - ok

16:47:52.0021 3004 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys

16:47:52.0022 3004 HidBatt - ok

16:47:52.0031 3004 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys

16:47:52.0032 3004 HidBth - ok

16:47:52.0048 3004 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys

16:47:52.0049 3004 HidIr - ok

16:47:52.0063 3004 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll

16:47:52.0065 3004 hidserv - ok

16:47:52.0102 3004 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys

16:47:52.0104 3004 HidUsb - ok

16:47:52.0134 3004 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll

16:47:52.0138 3004 hkmsvc - ok

16:47:52.0158 3004 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll

16:47:52.0163 3004 HomeGroupListener - ok

16:47:52.0197 3004 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

16:47:52.0202 3004 HomeGroupProvider - ok

16:47:52.0211 3004 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys

16:47:52.0213 3004 HpSAMD - ok

16:47:52.0265 3004 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys

16:47:52.0276 3004 HTTP - ok

16:47:52.0294 3004 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys

16:47:52.0295 3004 hwpolicy - ok

16:47:52.0327 3004 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys

16:47:52.0329 3004 i8042prt - ok

16:47:52.0373 3004 [ D469B77687E12FE43E344806740B624D ] iaStor C:\Windows\system32\drivers\iaStor.sys

16:47:52.0380 3004 iaStor - ok

16:47:52.0423 3004 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys

16:47:52.0430 3004 iaStorV - ok

16:47:52.0471 3004 [ FC47F5CF561BF0FD897EFD1A9604DCCF ] iBtFltCoex C:\Windows\system32\DRIVERS\iBtFltCoex.sys

16:47:52.0473 3004 iBtFltCoex - ok

16:47:52.0534 3004 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

16:47:52.0547 3004 idsvc - ok

16:47:52.0788 3004 [ 66DC0CE2D1867B8178EAA0E11930DBD7 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys

16:47:52.0843 3004 igfx - ok

16:47:52.0869 3004 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys

16:47:52.0869 3004 iirsp - ok

16:47:52.0918 3004 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll

16:47:52.0931 3004 IKEEXT - ok

16:47:52.0959 3004 [ DD587A55390ED2295BCE6D36AD567DA9 ] Impcd C:\Windows\system32\drivers\Impcd.sys

16:47:52.0960 3004 Impcd - ok

16:47:53.0048 3004 [ 8FED6428FDE53D7F4C105095F22524BE ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

16:47:53.0062 3004 IntcAzAudAddService - ok

16:47:53.0091 3004 [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys

16:47:53.0092 3004 IntcDAud - ok

16:47:53.0114 3004 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys

16:47:53.0116 3004 intelide - ok

16:47:53.0131 3004 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys

16:47:53.0133 3004 intelppm - ok

16:47:53.0147 3004 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll

16:47:53.0149 3004 IPBusEnum - ok

16:47:53.0155 3004 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys

16:47:53.0157 3004 IpFilterDriver - ok

16:47:53.0182 3004 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll

16:47:53.0188 3004 iphlpsvc - ok

16:47:53.0195 3004 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys

16:47:53.0196 3004 IPMIDRV - ok

16:47:53.0203 3004 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys

16:47:53.0204 3004 IPNAT - ok

16:47:53.0271 3004 [ A9AB99EE7D39725EAFEC82732D2B3271 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe

16:47:53.0285 3004 iPod Service - ok

16:47:53.0301 3004 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys

16:47:53.0301 3004 IRENUM - ok

16:47:53.0304 3004 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys

16:47:53.0305 3004 isapnp - ok

16:47:53.0321 3004 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys

16:47:53.0326 3004 iScsiPrt - ok

16:47:53.0367 3004 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys

16:47:53.0368 3004 kbdclass - ok

16:47:53.0383 3004 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys

16:47:53.0384 3004 kbdhid - ok

16:47:53.0409 3004 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe

16:47:53.0412 3004 KeyIso - ok

16:47:53.0451 3004 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys

16:47:53.0453 3004 KSecDD - ok

16:47:53.0464 3004 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys

16:47:53.0467 3004 KSecPkg - ok

16:47:53.0481 3004 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys

16:47:53.0483 3004 ksthunk - ok

16:47:53.0533 3004 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll

16:47:53.0541 3004 KtmRm - ok

16:47:53.0564 3004 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll

16:47:53.0570 3004 LanmanServer - ok

16:47:53.0594 3004 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

16:47:53.0599 3004 LanmanWorkstation - ok

16:47:53.0620 3004 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys

16:47:53.0622 3004 lltdio - ok

16:47:53.0655 3004 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll

16:47:53.0662 3004 lltdsvc - ok

16:47:53.0682 3004 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll

16:47:53.0685 3004 lmhosts - ok

16:47:53.0714 3004 [ 7F32D4C47A50E7223491E8FB9359907D ] LMS C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

16:47:53.0720 3004 LMS - ok

16:47:53.0748 3004 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys

16:47:53.0749 3004 LSI_FC - ok

16:47:53.0752 3004 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys

16:47:53.0753 3004 LSI_SAS - ok

16:47:53.0756 3004 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys

16:47:53.0757 3004 LSI_SAS2 - ok

16:47:53.0760 3004 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys

16:47:53.0761 3004 LSI_SCSI - ok

16:47:53.0775 3004 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys

16:47:53.0778 3004 luafv - ok

16:47:53.0796 3004 [ DC8490812A3B72811AE534F423B4C206 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys

16:47:53.0797 3004 MBAMProtector - ok

16:47:53.0842 3004 [ 43683E970F008C93C9429EF428147A54 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

16:47:53.0852 3004 MBAMService - ok

16:47:53.0883 3004 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll

16:47:53.0884 3004 Mcx2Svc - ok

16:47:53.0887 3004 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys

16:47:53.0888 3004 megasas - ok

16:47:53.0898 3004 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys

16:47:53.0903 3004 MegaSR - ok

16:47:53.0955 3004 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\Windows\system32\DRIVERS\HECIx64.sys

16:47:53.0957 3004 MEIx64 - ok

16:47:53.0979 3004 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll

16:47:53.0982 3004 MMCSS - ok

16:47:53.0990 3004 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys

16:47:53.0991 3004 Modem - ok

16:47:54.0002 3004 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys

16:47:54.0003 3004 monitor - ok

16:47:54.0015 3004 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys

16:47:54.0016 3004 mouclass - ok

16:47:54.0049 3004 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys

16:47:54.0050 3004 mouhid - ok

16:47:54.0065 3004 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys

16:47:54.0067 3004 mountmgr - ok

16:47:54.0078 3004 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys

16:47:54.0081 3004 mpio - ok

16:47:54.0096 3004 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys

16:47:54.0098 3004 mpsdrv - ok

16:47:54.0123 3004 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll

16:47:54.0127 3004 MpsSvc - ok

16:47:54.0132 3004 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys

16:47:54.0133 3004 MRxDAV - ok

16:47:54.0154 3004 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys

16:47:54.0155 3004 mrxsmb - ok

16:47:54.0168 3004 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys

16:47:54.0173 3004 mrxsmb10 - ok

16:47:54.0193 3004 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys

16:47:54.0196 3004 mrxsmb20 - ok

16:47:54.0217 3004 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys

16:47:54.0218 3004 msahci - ok

16:47:54.0239 3004 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys

16:47:54.0242 3004 msdsm - ok

16:47:54.0262 3004 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe

16:47:54.0267 3004 MSDTC - ok

16:47:54.0296 3004 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys

16:47:54.0297 3004 Msfs - ok

16:47:54.0309 3004 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys

16:47:54.0310 3004 mshidkmdf - ok

16:47:54.0329 3004 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys

16:47:54.0331 3004 msisadrv - ok

16:47:54.0362 3004 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll

16:47:54.0363 3004 MSiSCSI - ok

16:47:54.0365 3004 msiserver - ok

16:47:54.0369 3004 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys

16:47:54.0369 3004 MSKSSRV - ok

16:47:54.0375 3004 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys

16:47:54.0376 3004 MSPCLOCK - ok

16:47:54.0392 3004 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys

16:47:54.0393 3004 MSPQM - ok

16:47:54.0415 3004 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys

16:47:54.0417 3004 MsRPC - ok

16:47:54.0433 3004 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys

16:47:54.0435 3004 mssmbios - ok

16:47:54.0456 3004 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys

16:47:54.0457 3004 MSTEE - ok

16:47:54.0464 3004 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys

16:47:54.0465 3004 MTConfig - ok

16:47:54.0480 3004 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys

16:47:54.0482 3004 Mup - ok

16:47:54.0506 3004 [ 6ED8935257672F4CD04A88A0F3DE093D ] MyWiFiDHCPDNS C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

16:47:54.0508 3004 MyWiFiDHCPDNS - ok

16:47:54.0544 3004 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll

16:47:54.0554 3004 napagent - ok

16:47:54.0579 3004 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys

16:47:54.0584 3004 NativeWifiP - ok

16:47:54.0626 3004 [ C38B8AE57F78915905064A9A24DC1586 ] NDIS C:\Windows\system32\drivers\ndis.sys

16:47:54.0640 3004 NDIS - ok

16:47:54.0665 3004 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys

16:47:54.0666 3004 NdisCap - ok

16:47:54.0680 3004 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys

16:47:54.0682 3004 NdisTapi - ok

16:47:54.0694 3004 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys

16:47:54.0696 3004 Ndisuio - ok

16:47:54.0716 3004 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys

16:47:54.0720 3004 NdisWan - ok

16:47:54.0730 3004 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys

16:47:54.0731 3004 NDProxy - ok

16:47:54.0742 3004 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys

16:47:54.0742 3004 NetBIOS - ok

16:47:54.0755 3004 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys

16:47:54.0757 3004 NetBT - ok

16:47:54.0770 3004 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe

16:47:54.0773 3004 Netlogon - ok

16:47:54.0795 3004 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll

16:47:54.0802 3004 Netman - ok

16:47:54.0837 3004 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

16:47:54.0840 3004 NetMsmqActivator - ok

16:47:54.0854 3004 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

16:47:54.0857 3004 NetPipeActivator - ok

16:47:54.0884 3004 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll

16:47:54.0892 3004 netprofm - ok

16:47:54.0912 3004 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

16:47:54.0914 3004 NetTcpActivator - ok

16:47:54.0928 3004 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

16:47:54.0931 3004 NetTcpPortSharing - ok

16:47:55.0112 3004 [ 5D262402B0634C998F8CBCEAD7DD8676 ] NETwNs64 C:\Windows\system32\DRIVERS\NETwNs64.sys

16:47:55.0151 3004 NETwNs64 - ok

16:47:55.0179 3004 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys

16:47:55.0181 3004 nfrd960 - ok

16:47:55.0209 3004 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll

16:47:55.0216 3004 NlaSvc - ok

16:47:55.0317 3004 [ B9B72FAAAA41D59B73B88FE3DD737ED1 ] NOBU C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe

16:47:55.0338 3004 NOBU - ok

16:47:55.0377 3004 [ 351533ACC2A069B94E80BBFC177E8FDF ] NPF C:\Windows\system32\drivers\npf.sys

16:47:55.0379 3004 NPF - ok

16:47:55.0394 3004 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys

16:47:55.0395 3004 Npfs - ok

16:47:55.0412 3004 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll

16:47:55.0415 3004 nsi - ok

16:47:55.0428 3004 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys

16:47:55.0429 3004 nsiproxy - ok

16:47:55.0507 3004 [ A2F74975097F52A00745F9637451FDD8 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys

16:47:55.0527 3004 Ntfs - ok

16:47:55.0562 3004 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys

16:47:55.0562 3004 Null - ok

16:47:55.0580 3004 [ 0EBC9D13CD96C15B1B18D8678A609E4B ] nusb3hub C:\Windows\system32\DRIVERS\nusb3hub.sys

16:47:55.0582 3004 nusb3hub - ok

16:47:55.0602 3004 [ 7BDEC000D56D485021D9C1E63C2F81CA ] nusb3xhc C:\Windows\system32\DRIVERS\nusb3xhc.sys

16:47:55.0606 3004 nusb3xhc - ok

16:47:55.0649 3004 [ 102806B360D0E6BC6E55BF47EF655D43 ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys

16:47:55.0653 3004 NVHDA - ok

16:47:55.0704 3004 [ F8219CD9792008144A19691B17EA2993 ] nvkflt C:\Windows\system32\DRIVERS\nvkflt.sys

16:47:55.0709 3004 nvkflt - ok

16:47:55.0980 3004 [ BA0B4889C40380A01ECDF84C227A89C9 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys

16:47:56.0045 3004 nvlddmkm - ok

16:47:56.0083 3004 [ 715D45ED30003FC70CFA0D9C6DD0B538 ] nvpciflt C:\Windows\system32\DRIVERS\nvpciflt.sys

16:47:56.0085 3004 nvpciflt - ok

16:47:56.0103 3004 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys

16:47:56.0106 3004 nvraid - ok

16:47:56.0136 3004 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys

16:47:56.0139 3004 nvstor - ok

16:47:56.0155 3004 [ 92D06926C5DA2A2E62E8FB5104F44D92 ] NvStUSB C:\Windows\system32\drivers\nvstusb.sys

16:47:56.0158 3004 NvStUSB - ok

16:47:56.0210 3004 [ 06633CF95BEA62164C3BFCA24BCE6B11 ] NVSvc C:\Windows\system32\nvvsvc.exe

16:47:56.0225 3004 NVSvc - ok

16:47:56.0297 3004 [ 53B629CE436B110C5689C2F6439E567B ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

16:47:56.0316 3004 nvUpdatusService - ok

16:47:56.0337 3004 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys

16:47:56.0338 3004 nv_agp - ok

16:47:56.0342 3004 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys

16:47:56.0342 3004 ohci1394 - ok

16:47:56.0389 3004 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

16:47:56.0392 3004 ose - ok

16:47:56.0563 3004 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

16:47:56.0585 3004 osppsvc - ok

16:47:56.0612 3004 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll

16:47:56.0614 3004 p2pimsvc - ok

16:47:56.0635 3004 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll

16:47:56.0644 3004 p2psvc - ok

16:47:56.0664 3004 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys

16:47:56.0667 3004 Parport - ok

16:47:56.0693 3004 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys

16:47:56.0695 3004 partmgr - ok

16:47:56.0714 3004 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll

16:47:56.0720 3004 PcaSvc - ok

16:47:56.0747 3004 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys

16:47:56.0750 3004 pci - ok

16:47:56.0774 3004 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys

16:47:56.0775 3004 pciide - ok

16:47:56.0797 3004 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys

16:47:56.0800 3004 pcmcia - ok

16:47:56.0820 3004 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys

16:47:56.0822 3004 pcw - ok

16:47:56.0847 3004 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys

16:47:56.0855 3004 PEAUTH - ok

16:47:56.0943 3004 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe

16:47:56.0946 3004 PerfHost - ok

16:47:56.0998 3004 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll

16:47:57.0005 3004 pla - ok

16:47:57.0036 3004 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll

16:47:57.0043 3004 PlugPlay - ok

16:47:57.0055 3004 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll

16:47:57.0058 3004 PNRPAutoReg - ok

16:47:57.0074 3004 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll

16:47:57.0076 3004 PNRPsvc - ok

16:47:57.0101 3004 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll

16:47:57.0110 3004 PolicyAgent - ok

16:47:57.0139 3004 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll

16:47:57.0145 3004 Power - ok

16:47:57.0168 3004 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys

16:47:57.0171 3004 PptpMiniport - ok

16:47:57.0191 3004 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys

16:47:57.0193 3004 Processor - ok

16:47:57.0239 3004 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll

16:47:57.0244 3004 ProfSvc - ok

16:47:57.0262 3004 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe

16:47:57.0264 3004 ProtectedStorage - ok

16:47:57.0279 3004 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys

16:47:57.0282 3004 Psched - ok

16:47:57.0328 3004 [ 87B04878A6D59D6C79251DC960C674C1 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys

16:47:57.0329 3004 PxHlpa64 - ok

16:47:57.0353 3004 [ 0928BD20273625622722FE1DE5BBDE57 ] qicflt C:\Windows\system32\DRIVERS\qicflt.sys

16:47:57.0355 3004 qicflt - ok

16:47:57.0413 3004 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys

16:47:57.0432 3004 ql2300 - ok

16:47:57.0436 3004 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys

16:47:57.0437 3004 ql40xx - ok

16:47:57.0464 3004 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll

16:47:57.0470 3004 QWAVE - ok

16:47:57.0483 3004 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys

16:47:57.0484 3004 QWAVEdrv - ok

16:47:57.0492 3004 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys

16:47:57.0492 3004 RasAcd - ok

16:47:57.0512 3004 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys

16:47:57.0513 3004 RasAgileVpn - ok

16:47:57.0526 3004 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll

16:47:57.0528 3004 RasAuto - ok

16:47:57.0542 3004 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys

16:47:57.0544 3004 Rasl2tp - ok

16:47:57.0562 3004 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll

16:47:57.0567 3004 RasMan - ok

16:47:57.0577 3004 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys

16:47:57.0578 3004 RasPppoe - ok

16:47:57.0588 3004 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys

16:47:57.0589 3004 RasSstp - ok

16:47:57.0603 3004 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys

16:47:57.0606 3004 rdbss - ok

16:47:57.0619 3004 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys

16:47:57.0619 3004 rdpbus - ok

16:47:57.0637 3004 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys

16:47:57.0638 3004 RDPCDD - ok

16:47:57.0653 3004 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys

16:47:57.0654 3004 RDPENCDD - ok

16:47:57.0674 3004 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys

16:47:57.0674 3004 RDPREFMP - ok

16:47:57.0718 3004 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys

16:47:57.0722 3004 RDPWD - ok

16:47:57.0744 3004 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys

16:47:57.0748 3004 rdyboost - ok

16:47:57.0819 3004 [ 189C5A8D2098E0AA14FD157A954B34FC ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

16:47:57.0830 3004 RegSrvc - ok

16:47:57.0851 3004 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll

16:47:57.0855 3004 RemoteAccess - ok

16:47:57.0878 3004 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll

16:47:57.0883 3004 RemoteRegistry - ok

16:47:57.0903 3004 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys

16:47:57.0906 3004 RFCOMM - ok

16:47:58.0006 3004 [ 3C957189B31C34D3AD21967B12B6AED7 ] RoxMediaDB12OEM C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe

16:47:58.0023 3004 RoxMediaDB12OEM - ok

16:47:58.0053 3004 [ 2B73088CC2CA757A172B425C9398E5BC ] RoxWatch12 C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe

16:47:58.0055 3004 RoxWatch12 - ok

16:47:58.0090 3004 [ B60F58F175DE20A6739194E85B035178 ] rpcapd C:\Program Files (x86)\WinPcap\rpcapd.exe

16:47:58.0093 3004 rpcapd - ok

16:47:58.0111 3004 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll

16:47:58.0115 3004 RpcEptMapper - ok

16:47:58.0141 3004 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe

16:47:58.0142 3004 RpcLocator - ok

16:47:58.0159 3004 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll

16:47:58.0170 3004 RpcSs - ok

16:47:58.0188 3004 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys

16:47:58.0188 3004 rspndr - ok

16:47:58.0229 3004 [ EE082E06A82FF630351D1E0EBBD3D8D0 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys

16:47:58.0238 3004 RTL8167 - ok

16:47:58.0263 3004 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe

16:47:58.0265 3004 SamSs - ok

16:47:58.0282 3004 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys

16:47:58.0285 3004 sbp2port - ok

16:47:58.0309 3004 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll

16:47:58.0314 3004 SCardSvr - ok

16:47:58.0326 3004 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys

16:47:58.0327 3004 scfilter - ok

16:47:58.0367 3004 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll

16:47:58.0386 3004 Schedule - ok

16:47:58.0400 3004 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll

16:47:58.0401 3004 SCPolicySvc - ok

16:47:58.0413 3004 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll

16:47:58.0415 3004 SDRSVC - ok

16:47:58.0445 3004 [ 331E7BDE228914574FC9AE6CD520DAFA ] SeaPort C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

16:47:58.0449 3004 SeaPort - ok

16:47:58.0462 3004 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys

16:47:58.0463 3004 secdrv - ok

16:47:58.0479 3004 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll

16:47:58.0481 3004 seclogon - ok

16:47:58.0487 3004 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll

16:47:58.0490 3004 SENS - ok

16:47:58.0499 3004 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll

16:47:58.0501 3004 SensrSvc - ok

16:47:58.0506 3004 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys

16:47:58.0507 3004 Serenum - ok

16:47:58.0512 3004 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys

16:47:58.0512 3004 Serial - ok

16:47:58.0515 3004 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys

16:47:58.0516 3004 sermouse - ok

16:47:58.0532 3004 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll

16:47:58.0533 3004 SessionEnv - ok

16:47:58.0535 3004 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys

16:47:58.0536 3004 sffdisk - ok

16:47:58.0539 3004 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys

16:47:58.0539 3004 sffp_mmc - ok

16:47:58.0541 3004 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys

16:47:58.0542 3004 sffp_sd - ok

16:47:58.0545 3004 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys

16:47:58.0545 3004 sfloppy - ok

16:47:58.0597 3004 [ E1974A92AC0914A3859359A0A8C82C68 ] SftService C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE

16:47:58.0607 3004 SftService - ok

16:47:58.0643 3004 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll

16:47:58.0649 3004 SharedAccess - ok

16:47:58.0669 3004 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll

16:47:58.0677 3004 ShellHWDetection - ok

16:47:58.0684 3004 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys

16:47:58.0685 3004 SiSRaid2 - ok

16:47:58.0705 3004 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys

16:47:58.0705 3004 SiSRaid4 - ok

16:47:58.0730 3004 [ EA396139541706B4B433641D62EA53CE ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe

16:47:58.0733 3004 SkypeUpdate - ok

16:47:58.0742 3004 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys

16:47:58.0744 3004 Smb - ok

16:47:58.0796 3004 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe

16:47:58.0799 3004 SNMPTRAP - ok

16:47:58.0817 3004 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys

16:47:58.0818 3004 spldr - ok

16:47:58.0848 3004 [ B96C17B5DC1424D56EEA3A99E97428CD ] Spooler C:\Windows\System32\spoolsv.exe

16:47:58.0859 3004 Spooler - ok

16:47:58.0937 3004 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe

16:47:58.0954 3004 sppsvc - ok

16:47:58.0969 3004 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll

16:47:58.0971 3004 sppuinotify - ok

16:47:59.0002 3004 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys

16:47:59.0009 3004 srv - ok

16:47:59.0026 3004 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys

16:47:59.0028 3004 srv2 - ok

16:47:59.0037 3004 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys

16:47:59.0038 3004 srvnet - ok

16:47:59.0056 3004 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll

16:47:59.0063 3004 SSDPSRV - ok

16:47:59.0083 3004 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll

16:47:59.0087 3004 SstpSvc - ok

16:47:59.0122 3004 [ 92E7F6666633D2DD91D527503DAA7BE0 ] stdcfltn C:\Windows\system32\DRIVERS\stdcfltn.sys

16:47:59.0123 3004 stdcfltn - ok

16:47:59.0139 3004 Steam Client Service - ok

16:47:59.0216 3004 [ C354621B6B94E10AE7F5CDBE745FEB86 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

16:47:59.0222 3004 Stereo Service - ok

16:47:59.0246 3004 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys

16:47:59.0247 3004 stexstor - ok

16:47:59.0276 3004 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll

16:47:59.0287 3004 stisvc - ok

16:47:59.0319 3004 [ 7731F46EC0D687A931CBA063E8F90EF0 ] stllssvr C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe

16:47:59.0319 3004 stllssvr - ok

16:47:59.0341 3004 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys

16:47:59.0343 3004 swenum - ok

16:47:59.0379 3004 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll

16:47:59.0389 3004 swprv - ok

16:47:59.0446 3004 [ 5E3B232A614339399ACC71FA3AAAAA6B ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys

16:47:59.0467 3004 SynTP - ok

16:47:59.0500 3004 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll

16:47:59.0528 3004 SysMain - ok

16:47:59.0544 3004 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll

16:47:59.0546 3004 TabletInputService - ok

16:47:59.0557 3004 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll

16:47:59.0560 3004 TapiSrv - ok

16:47:59.0575 3004 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll

16:47:59.0579 3004 TBS - ok

16:47:59.0668 3004 [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] Tcpip C:\Windows\system32\drivers\tcpip.sys

16:47:59.0685 3004 Tcpip - ok

16:47:59.0734 3004 [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys

16:47:59.0747 3004 TCPIP6 - ok

16:47:59.0758 3004 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys

16:47:59.0759 3004 tcpipreg - ok

16:47:59.0776 3004 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys

16:47:59.0776 3004 TDPIPE - ok

16:47:59.0804 3004 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys

16:47:59.0805 3004 TDTCP - ok

16:47:59.0822 3004 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys

16:47:59.0825 3004 tdx - ok

16:48:00.0117 3004 [ 9C1F776825207C203CB44CA3C63B5A6E ] TeamViewer7 C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

16:48:00.0138 3004 TeamViewer7 - ok

16:48:00.0146 3004 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys

16:48:00.0147 3004 TermDD - ok

16:48:00.0176 3004 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll

16:48:00.0180 3004 TermService - ok

16:48:00.0195 3004 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll

16:48:00.0198 3004 Themes - ok

16:48:00.0217 3004 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll

16:48:00.0220 3004 THREADORDER - ok

16:48:00.0253 3004 [ E386DD8EC68C67CA3E2A3ABDC1DF5C56 ] tmactmon C:\Windows\system32\DRIVERS\tmactmon.sys

16:48:00.0255 3004 tmactmon - ok

16:48:00.0279 3004 [ AB011C569487FD65C8944DDF8CBB2572 ] tmcomm C:\Windows\system32\DRIVERS\tmcomm.sys

16:48:00.0282 3004 tmcomm - ok

16:48:00.0301 3004 [ 8870A3D7305455B47ADCCD226F8E51BC ] tmevtmgr C:\Windows\system32\DRIVERS\tmevtmgr.sys

16:48:00.0302 3004 tmevtmgr - ok

16:48:00.0320 3004 [ 065CB7D9278D778FB9EF62CEAD01433F ] tmtdi C:\Windows\system32\DRIVERS\tmtdi.sys

16:48:00.0322 3004 tmtdi - ok

16:48:00.0338 3004 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll

16:48:00.0341 3004 TrkWks - ok

16:48:00.0369 3004 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

16:48:00.0370 3004 TrustedInstaller - ok

16:48:00.0380 3004 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys

16:48:00.0380 3004 tssecsrv - ok

16:48:00.0408 3004 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys

16:48:00.0409 3004 TsUsbFlt - ok

16:48:00.0417 3004 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys

16:48:00.0418 3004 TsUsbGD - ok

16:48:00.0437 3004 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys

16:48:00.0438 3004 tunnel - ok

16:48:00.0463 3004 [ FD24F98D2898BE093FE926604BE7DB99 ] TurboB C:\Windows\system32\DRIVERS\TurboB.sys

16:48:00.0465 3004 TurboB - ok

16:48:00.0499 3004 [ 600B406A04D90F577FEA8A88D7379F08 ] TurboBoost C:\Program Files\Intel\TurboBoost\TurboBoost.exe

16:48:00.0502 3004 TurboBoost - ok

16:48:00.0512 3004 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys

16:48:00.0514 3004 uagp35 - ok

16:48:00.0554 3004 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys

16:48:00.0560 3004 udfs - ok

16:48:00.0583 3004 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe

16:48:00.0585 3004 UI0Detect - ok

16:48:00.0588 3004 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys

16:48:00.0588 3004 uliagpkx - ok

16:48:00.0603 3004 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys

16:48:00.0603 3004 umbus - ok

16:48:00.0606 3004 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys

16:48:00.0606 3004 UmPass - ok

16:48:00.0720 3004 [ 2C16648A12999AE69A9EBF41974B0BA2 ] UNS C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

16:48:00.0739 3004 UNS - ok

16:48:00.0767 3004 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll

16:48:00.0769 3004 upnphost - ok

16:48:00.0808 3004 [ 19AD7990C0B67E48DAC5B26F99628223 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys

16:48:00.0811 3004 usbccgp - ok

16:48:00.0820 3004 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys

16:48:00.0822 3004 usbcir - ok

16:48:00.0875 3004 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys

16:48:00.0877 3004 usbehci - ok

16:48:00.0913 3004 [ 8B892002D7B79312821169A14317AB86 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys

16:48:00.0919 3004 usbhub - ok

16:48:00.0943 3004 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys

16:48:00.0945 3004 usbohci - ok

16:48:00.0964 3004 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys

16:48:00.0965 3004 usbprint - ok

16:48:00.0993 3004 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS

16:48:00.0996 3004 USBSTOR - ok

16:48:01.0026 3004 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys

16:48:01.0028 3004 usbuhci - ok

16:48:01.0047 3004 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys

16:48:01.0051 3004 usbvideo - ok

16:48:01.0078 3004 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll

16:48:01.0079 3004 UxSms - ok

16:48:01.0091 3004 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe

16:48:01.0093 3004 VaultSvc - ok

16:48:01.0110 3004 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys

16:48:01.0112 3004 vdrvroot - ok

16:48:01.0140 3004 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe

16:48:01.0151 3004 vds - ok

16:48:01.0160 3004 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys

16:48:01.0162 3004 vga - ok

16:48:01.0173 3004 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys

16:48:01.0175 3004 VgaSave - ok

16:48:01.0196 3004 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys

16:48:01.0198 3004 vhdmp - ok

16:48:01.0202 3004 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys

16:48:01.0202 3004 viaide - ok

16:48:01.0215 3004 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys

16:48:01.0217 3004 volmgr - ok

16:48:01.0235 3004 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys

16:48:01.0241 3004 volmgrx - ok

16:48:01.0260 3004 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys

16:48:01.0264 3004 volsnap - ok

16:48:01.0284 3004 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys

16:48:01.0286 3004 vsmraid - ok

16:48:01.0337 3004 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe

16:48:01.0360 3004 VSS - ok

16:48:01.0373 3004 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys

16:48:01.0373 3004 vwifibus - ok

16:48:01.0388 3004 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys

16:48:01.0388 3004 vwififlt - ok

16:48:01.0399 3004 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys

16:48:01.0401 3004 vwifimp - ok

16:48:01.0426 3004 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll

16:48:01.0435 3004 W32Time - ok

16:48:01.0447 3004 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys

16:48:01.0448 3004 WacomPen - ok

16:48:01.0461 3004 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys

16:48:01.0462 3004 WANARP - ok

16:48:01.0465 3004 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys

16:48:01.0466 3004 Wanarpv6 - ok

16:48:01.0525 3004 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe

16:48:01.0541 3004 WatAdminSvc - ok

16:48:01.0580 3004 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe

16:48:01.0602 3004 wbengine - ok

16:48:01.0615 3004 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll

16:48:01.0617 3004 WbioSrvc - ok

16:48:01.0633 3004 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll

16:48:01.0642 3004 wcncsvc - ok

16:48:01.0654 3004 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

16:48:01.0658 3004 WcsPlugInService - ok

16:48:01.0662 3004 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys

16:48:01.0663 3004 Wd - ok

16:48:01.0682 3004 [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys

16:48:01.0685 3004 Wdf01000 - ok

16:48:01.0700 3004 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll

16:48:01.0702 3004 WdiServiceHost - ok

16:48:01.0705 3004 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll

16:48:01.0707 3004 WdiSystemHost - ok

16:48:01.0716 3004 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll

16:48:01.0719 3004 WebClient - ok

16:48:01.0734 3004 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll

16:48:01.0736 3004 Wecsvc - ok

16:48:01.0751 3004 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll

16:48:01.0756 3004 wercplsupport - ok

16:48:01.0774 3004 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll

16:48:01.0779 3004 WerSvc - ok

16:48:01.0789 3004 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys

16:48:01.0790 3004 WfpLwf - ok

16:48:01.0819 3004 [ B14EF15BD757FA488F9C970EEE9C0D35 ] WimFltr C:\Windows\system32\DRIVERS\wimfltr.sys

16:48:01.0820 3004 WimFltr - ok

16:48:01.0830 3004 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys

16:48:01.0830 3004 WIMMount - ok

16:48:01.0845 3004 WinDefend - ok

16:48:01.0857 3004 WinHttpAutoProxySvc - ok

16:48:01.0912 3004 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll

16:48:01.0916 3004 Winmgmt - ok

16:48:01.0987 3004 [ 0C0195C48B6B8582FA6F6373032118DA ] WinRing0_1_2_0 C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys

16:48:01.0988 3004 WinRing0_1_2_0 - ok

16:48:02.0063 3004 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll

16:48:02.0085 3004 WinRM - ok

16:48:02.0109 3004 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll

16:48:02.0115 3004 Wlansvc - ok

16:48:02.0149 3004 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe

16:48:02.0151 3004 wlcrasvc - ok

16:48:02.0218 3004 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

16:48:02.0228 3004 wlidsvc - ok

16:48:02.0238 3004 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys

16:48:02.0238 3004 WmiAcpi - ok

16:48:02.0262 3004 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe

16:48:02.0266 3004 wmiApSrv - ok

16:48:02.0289 3004 WMPNetworkSvc - ok

16:48:02.0302 3004 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll

16:48:02.0304 3004 WPCSvc - ok

16:48:02.0318 3004 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll

16:48:02.0322 3004 WPDBusEnum - ok

16:48:02.0352 3004 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys

16:48:02.0353 3004 ws2ifsl - ok

16:48:02.0363 3004 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll

16:48:02.0368 3004 wscsvc - ok

16:48:02.0374 3004 WSearch - ok

16:48:02.0463 3004 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll

16:48:02.0480 3004 wuauserv - ok

16:48:02.0503 3004 [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf C:\Windows\system32\drivers\WudfPf.sys

16:48:02.0504 3004 WudfPf - ok

16:48:02.0521 3004 [ CF8D590BE3373029D57AF80914190682 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys

16:48:02.0522 3004 WUDFRd - ok

16:48:02.0536 3004 [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc C:\Windows\System32\WUDFSvc.dll

16:48:02.0541 3004 wudfsvc - ok

16:48:02.0572 3004 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll

16:48:02.0579 3004 WwanSvc - ok

16:48:02.0673 3004 X6va009 - ok

16:48:02.0699 3004 ================ Scan global ===============================

16:48:02.0747 3004 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll

16:48:02.0774 3004 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll

16:48:02.0799 3004 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll

16:48:02.0830 3004 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

16:48:02.0854 3004 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe

16:48:02.0861 3004 [Global] - ok

16:48:02.0862 3004 ================ Scan MBR ==================================

16:48:02.0873 3004 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0

16:48:03.0129 3004 \Device\Harddisk0\DR0 - ok

16:48:03.0376 3004 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1

16:48:03.0440 3004 \Device\Harddisk1\DR1 - ok

16:48:03.0441 3004 ================ Scan VBR ==================================

16:48:03.0446 3004 [ 44A7FC74811B7ECC43140AE70409A948 ] \Device\Harddisk0\DR0\Partition1

16:48:03.0449 3004 \Device\Harddisk0\DR0\Partition1 - ok

16:48:03.0465 3004 [ C845D5C8BB657EE4EBCDF33A84300C9A ] \Device\Harddisk0\DR0\Partition2

16:48:03.0467 3004 \Device\Harddisk0\DR0\Partition2 - ok

16:48:03.0470 3004 [ A8E55EA7CEA6FCDDA87D1A0122B45A91 ] \Device\Harddisk1\DR1\Partition1

16:48:03.0471 3004 \Device\Harddisk1\DR1\Partition1 - ok

16:48:03.0472 3004 ============================================================

16:48:03.0472 3004 Scan finished

16:48:03.0472 3004 ============================================================

16:48:03.0478 4980 Detected object count: 1

16:48:03.0478 4980 Actual detected object count: 1

16:48:15.0647 4980 c:\program files (x86)\common files\akamai/netsession_win_5891ae0.dll - copied to quarantine

16:48:15.0648 4980 HKLM\SYSTEM\ControlSet001\services\Akamai - will be deleted on reboot

16:48:15.0690 4980 HKLM\SYSTEM\ControlSet002\services\Akamai - will be deleted on reboot

16:48:15.0860 4980 c:\program files (x86)\common files\akamai/netsession_win_5891ae0.dll - will be deleted on reboot

16:48:15.0860 4980 Akamai ( HiddenFile.Multi.Generic ) - User select action: Delete

16:48:28.0305 2080 Deinitialize success

mageisfun · September 11, 2012

Run date: 2012-09-11 17:12:06

-----------------------------

17:12:06.509 OS Version: Windows x64 6.1.7601 Service Pack 1

17:12:06.509 Number of processors: 8 586 0x2A07

17:12:06.525 ComputerName: SAM-PC UserName: Sam

17:12:10.456 Initialize success

17:12:19.904 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1

17:12:19.904 Disk 0 Vendor: ST950042 D005 Size: 476940MB BusType: 3

17:12:19.904 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IAAStorageDevice-2

17:12:19.919 Disk 1 Vendor: ST950042 D005 Size: 476940MB BusType: 3

17:12:19.935 Disk 0 MBR read successfully

17:12:19.935 Disk 0 MBR scan

17:12:19.935 Disk 0 Windows VISTA default MBR code

17:12:19.935 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 101 MB offset 63

17:12:19.951 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 15000 MB offset 208896

17:12:19.966 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 461837 MB offset 30928896

17:12:19.982 Disk 0 scanning C:\Windows\system32\drivers

17:12:27.018 Service scanning

17:12:43.054 Modules scanning

17:12:43.070 Scan finished successfully

17:12:53.319 Disk 0 MBR has been saved successfully to "C:\Users\Sam\Desktop\MBR.dat"

17:12:53.319 The log file has been saved successfully to "C:\Users\Sam\Desktop\aswMBRderp.txt"

RogueKiller V8.0.2 [08/31/2012] by Tigzy

mail: tigzyRK<at>gmail<dot>com

Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/

Blog: http://tigzyrk.blogspot.com

Operating System: Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User : Sam [Admin rights]

Mode : Scan -- Date : 09/11/2012 16:57:04

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 4 ¤¤¤

[HJ SMENU] HKCU\[...]\Advanced : Start_ShowSearch (0) -> FOUND

[HJ SMENU] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> FOUND

[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND

[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤

--> C:\Windows\system32\drivers\etc\hosts

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: ST9500420AS +++++

--- User ---

[MBR] 14a48eda348a9933c8345deb3bdbb880

[bSP] dea9defa67a18cc486b8c709b2ee22f0 : Windows Vista MBR Code

Partition table:

0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 101 Mo

1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 208896 | Size: 15000 Mo

2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 30928896 | Size: 461837 Mo

User = LL1 ... OK!

User = LL2 ... OK!

+++++ PhysicalDrive1: ST9500420AS +++++

--- User ---

[MBR] 7ffcffc114db078c05b97d7ea0c0406f

[bSP] 349ee732c6eaa943e9d3ccc068bf1188 : Windows 7 MBR Code

Partition table:

0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 476938 Mo

User = LL1 ... OK!

User = LL2 ... OK!

Finished : << RKreport[1].txt >>

RKreport[1].txt

Results of screen317's Security Check version 0.99.50

Windows 7 Service Pack 1 x64 (UAC is enabled)

Internet Explorer 9

``````````````Antivirus/Firewall Check:``````````````

Windows Firewall Enabled!

Trend Micro Titanium 2012

Antivirus up to date!

`````````Anti-malware/Other Utilities Check:`````````

Malwarebytes Anti-Malware version 1.62.0.1300

Java 6 Update 33

Java version out of Date!

Adobe Flash Player 10 Flash Player out of Date!

Google Chrome 21.0.1180.83

Google Chrome 21.0.1180.89

````````Process Check: objlist.exe by Laurent````````

Trend Micro AMSP coreServiceShell.exe

Trend Micro UniClient UiFrmWrk uiWatchDog.exe

Trend Micro UniClient UiFrmWrk uiSeAgnt.exe

Trend Micro AMSP coreFrameworkHost.exe

`````````````````System Health check`````````````````

Total Fragmentation on Drive C: 1%

````````````````````End of Log``````````````````````

Maurice Naggar · September 12, 2012

Disable your anti-virus program, How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs
Please disconnect any USB or external drives from the computer before you run this scan!
Right-Click RogueKiller and select Run as Administrator.
Wait until Prescan finishes.
On the RogueKiller console, click the Registry tab.
Then press the Delete button.
When done, logoff & Restart the system.
The log will be found as RKreport
Copy & Paste the contents into next reply.

Step 2

Save and close any work documents, close any apps that you started.

Start your MBAM MalwareBytes' Anti-Malware.

Click the Settings Tab and then the General Settings sub-tab. Make sure all option lines have a checkmark.

Then click the Scanner settings sub-tab in second row of tabs. Make sure all option lines have a checkmark.

Next, Click the Update tab. Press the "Check for Updates" button.

If prompted for a Restart, do that.

When done, click the Scanner tab.

Do a Quick Scan.

When the scan is complete, click OK, then Show Results to view the results.

Make sure that everything is checked, and click Remove Selected.

When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.

When done, Copy & Paste the scan log into a new reply.

Step 3

To de-install Flash Player

Use Programs and Features (Windows 7 & Vista) or Add-or-Remove Programs (Windows XP) to de-install older versions of Flash Player.

For stubborn cases,

Download and save the Flash Player uninstaller >> uninstall Flash Player for 32-bit Windows<<

If you have Windows 64-bit, use this Flash Player uninstaller >> uninstall Flash Player for 64-bit Windows<<

Close all browsers and instant messenger (IM) programs.

Run the uninstaller.

To get latest Flash Player

Go to http://www.adobe.com/go/getflash

and get the latest Flash Player

Un-Check any checkbox for McAfee Security Scan Plus, or Google or any other widget or toolbar !!!

Reference: How to determine whether a computer is running a 32-bit version or 64-bit version of the Windows operating system

http://support.microsoft.com/kb/827218

Step 4

Your Java runtime is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.

Accept the EULA & Download the latest version of >> Windows Offline << from here
or >> from here <<
and save it to your desktop.
Get the Offline version that corresponds to your "bit-tedness" of your Windows (32-bit or 64-bit)
How to determine whether a computer is running a 32-bit version or 64-bit version of the Windows operating system
Close any programs you may have running - especially your web browser(s).
Go to Start > Settings > Control Panel, select Programs and Features and remove all older versions of Java.
Check (highlight) any item with Java Runtime Environment (JRE or J2SE or Java) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java versions.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre-7u7-windows-i586.exe to install the newest version.
( jre-7u7-windows-x64.exe if this is a 64-bit Windows o.s.)

After the install is complete, go into the Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)
- On the General tab, under Temporary Internet Files, click the Settings button.
- Next, click on the Delete Files button
- There are two options in the window to clear the cache - Leave BOTH Checked
  - Applications and Applets
    Trace and Log Files
  [*]Click OK on Delete Temporary Files Window
  Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
  [*]Click OK to leave the Temporary Files Window

Small tweaks for Java runtime, since most all users do not need to load Java at each Windows startup:

Click Advanced Tab. Expand the Miscellaneous item.

UN-check the line Java quick starter

Press Apply then OK. Close the applet when done.

Step 5

Download Dr.Web CureIt to the desktop.

Turn OFF your antivirus program.
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs
Doubleclick the drweb-cureit.exe file, then on Start and allow to run the express scan
This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it. This is only a short scan.
Once the short scan has finished, chose the Complete Scan.
Select all drives. A red dot shows which drives have been chosen.
Click the green arrow at the right, and the scan will start.
Click 'Yes to all' if it asks if you want to cure/move the file.
When the scan has finished, look and see if you can click the following icon next to the files found:
If so, click it and then click the next icon right below and select Move incurable as you'll see in next image:
This will move it to the %userprofile%\DoctorWeb\quarantaine-folder if it can't be cured. (this in case if we need samples)
After selecting, in the Dr.Web CureIt menu on top, click file and choose save report list
Save the report to your desktop. The report will be called DrWeb.csv
Close Dr.Web Cureit.
Reboot your computer to allow files that were in use to be moved/deleted during reboot.
After reboot, post the contents of the log from Dr.Web you saved previously in your next reply.

NOTE: During the scan, a pop-up window will open asking for full version purchase. Simply close the window by clicking on X in upper right corner.

Re-Enable your antivirus program when all done.

mageisfun · September 12, 2012

Ok well, after doing step 1 I restarted my computer but it had to go into a maintenance start-up. I had to restore it to an earlier point and all the downloads I got that you said were removed, also after using ERUNT there was an error and it couldn't make a Registry Backup. I don't know what to do now, or if ERUNT is the problem or a good choice. My computer was ok before, I think my internet disconnections were due to the router somehow. If you still have any reccomendations though, help is appreciated, thanks.

mageisfun · September 12, 2012

Oh, there is also an issue with MBAM. Forgot to mention it.

Maurice Naggar · September 12, 2012

sheesh..... what bad luck.

No, ERUNT does not harm.

I cannot tell how far back things have gone.

Reminder, if you have an MBAM license, you contact the consumer help desk here for help.

IF you suspect router issue, you should really get support from the router manufacturer on their help forum.

If not, make a new run of DDS and post the logs.

Download DDS and save it to your desktop from http://download.bleepingcomputer.com/sUBs/dds.scr here

or http://download.bleepingcomputer.com/sUBs/dds.com or

http://www.infospyware.net/sUBs/dds

Disable any script blocker if your antivirus/antimalware has it.

Then double click dds.scr to run the tool.

DDS will run in a command prompt window and will take 3 to 4 minutes or so.

When done, DDS will open two (2) logs:
DDS.txt
Attach.txt
Save both reports to your desktop.

Please Copy & Paste contents of the following logs in your next reply:

DDS.txt

Attach.txt

mageisfun · September 12, 2012

I'll post the DDS logs just to be safe, I'd like to make sure my computer is not the issue though.

.

DDS (Ver_2011-08-26.01) - NTFSAMD64

Internet Explorer: 9.0.8112.16421

Run by Sam at 18:37:02 on 2012-09-12

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8106.5989 [GMT -4:00]

.

AV: Trend Micro Titanium 2012 *Enabled/Updated* {7193B549-236F-55EE-9AEC-F65279E59A92}

SP: Trend Micro Titanium 2012 *Enabled/Updated* {CAF254AD-0555-5A60-A05C-CD200262D02F}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\WLANExt.exe

C:\Windows\system32\conhost.exe

C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

C:\Windows\system32\nvvsvc.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe

C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe

C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

C:\Windows\system32\conhost.exe

C:\Program Files\Intel\WiFi\bin\EvtEng.exe

C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe

C:\Windows\system32\conhost.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe

C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\svchost.exe -k bthsvcs

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Windows\system32\SearchIndexer.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Users\Sam\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Windows\system32\DllHost.exe

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Windows\SysWOW64\svchost.exe -k Akamai

C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\sppsvc.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

C:\Windows\system32\DllHost.exe

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\conhost.exe

C:\Windows\system32\DllHost.exe

C:\Windows\SysWOW64\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.dell.com

uDefault_Page_URL = hxxp://www.dell.com

uInternet Settings,ProxyOverride = <local>;*.local

mWinlogon: Userinit=userinit.exe

BHO: TmIEPlugInBHO Class: {1ca1377b-dc1d-4a52-9585-6e06050fac53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1313\6.8.1078\TmIEPlg32.dll

BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

BHO: Java Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

BHO: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

TB: @C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100: {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll

uRun: [Google Update] "C:\Users\Sam\AppData\Local\Google\Update\GoogleUpdate.exe" /c

StartupFolder: C:\Users\Sam\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\MRI_DI~1\INTEL(~1.LNK - C:\Program Files (x86)\Intel\TurboBoost\SignalIslandUi.exe

uPolicies-explorer: NoDesktopCleanupWizard = 1 (0x1)

mPolicies-explorer: NoActiveDesktop = 1 (0x1)

mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)

mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000

IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab

TCP: Interfaces\{B3645DC9-06F7-4AE8-A942-3C7DFF60C9B8} : DhcpNameServer = 192.168.1.1

TCP: Interfaces\{DB05C87E-6285-480F-95D0-D42D66510D6F} : DhcpNameServer = 192.168.1.1

TCP: Interfaces\{DB05C87E-6285-480F-95D0-D42D66510D6F}\16474777966696 : DhcpNameServer = 192.168.6.1 64.134.255.2 64.134.255.10

TCP: Interfaces\{DB05C87E-6285-480F-95D0-D42D66510D6F}\34F6070756270556E6765796E6D27657563747 : DhcpNameServer = 192.168.1.1

TCP: Interfaces\{DB05C87E-6285-480F-95D0-D42D66510D6F}\46F6279637 : DhcpNameServer = 192.168.1.1

TCP: Interfaces\{DB05C87E-6285-480F-95D0-D42D66510D6F}\75169707F62747F5143636563737 : DhcpNameServer = 192.168.5.1 64.134.255.2 64.134.255.10

TCP: Interfaces\{DB05C87E-6285-480F-95D0-D42D66510D6F}\B656E6F62696 : DhcpNameServer = 192.168.1.1

TCP: Interfaces\{DB05C87E-6285-480F-95D0-D42D66510D6F}\F467562746279667560527F6441383 : DhcpNameServer = 192.168.0.1

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL

Handler: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - c:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.1.1102\7.1.1102\TmBpIe32.dll

Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\2.0.1313\6.8.1078\TmIEPlg32.dll

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll

BHO-X64: TmIEPlugInBHO Class: {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1313\6.8.1078\TmIEPlg32.dll

BHO-X64: Trend Micro NSC BHO - No File

BHO-X64: Search Helper: {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

BHO-X64: Search Helper - No File

BHO-X64: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll

BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

BHO-X64: URLRedirectionBHO - No File

BHO-X64: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll

BHO-X64: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

TB-X64: @C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll,-100: {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll

AppInit_DLLs-X64: C:\Windows\SysWOW64\nvinit.dll

.

============= SERVICES / DRIVERS ===============

.

R0 nvpciflt;nvpciflt;C:\Windows\system32\DRIVERS\nvpciflt.sys --> C:\Windows\system32\DRIVERS\nvpciflt.sys [?]

R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]

R0 stdcfltn;Disk Class Filter Driver for Accelerometer;C:\Windows\system32\DRIVERS\stdcfltn.sys --> C:\Windows\system32\DRIVERS\stdcfltn.sys [?]

R1 nvkflt;nvkflt;C:\Windows\system32\DRIVERS\nvkflt.sys --> C:\Windows\system32\DRIVERS\nvkflt.sys [?]

R1 tmevtmgr;tmevtmgr;C:\Windows\system32\DRIVERS\tmevtmgr.sys --> C:\Windows\system32\DRIVERS\tmevtmgr.sys [?]

R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]

R2 AERTFilters;Andrea RT Filters Service;C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [2011-6-10 98208]

R2 Akamai;Akamai NetSession Interface;C:\Windows\System32\svchost.exe -k Akamai [2009-7-13 20992]

R2 Amsp;Trend Micro Solution Platform;C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2012-4-20 275912]

R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-9-12 399432]

R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-8-25 676936]

R2 NOBU;Dell DataSafe Online;C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe [2010-8-25 2823000]

R2 SftService;SoftThinks Agent Service;C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe [2011-6-10 689472]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-5-15 382272]

R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-6-10 2656280]

R3 Acceler;Accelerometer Service;C:\Windows\system32\DRIVERS\Accelern.sys --> C:\Windows\system32\DRIVERS\Accelern.sys [?]

R3 btmaux;Intel Bluetooth Auxiliary Service;C:\Windows\system32\DRIVERS\btmaux.sys --> C:\Windows\system32\DRIVERS\btmaux.sys [?]

R3 btmhsf;btmhsf;C:\Windows\system32\DRIVERS\btmhsf.sys --> C:\Windows\system32\DRIVERS\btmhsf.sys [?]

R3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\Windows\system32\DRIVERS\CtClsFlt.sys --> C:\Windows\system32\DRIVERS\CtClsFlt.sys [?]

R3 iBtFltCoex;iBtFltCoex;C:\Windows\system32\DRIVERS\iBtFltCoex.sys --> C:\Windows\system32\DRIVERS\iBtFltCoex.sys [?]

R3 IntcDAud;Intel® Display Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys --> C:\Windows\system32\DRIVERS\IntcDAud.sys [?]

R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]

R3 MEIx64;Intel® Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]

R3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\system32\DRIVERS\NETwNs64.sys --> C:\Windows\system32\DRIVERS\NETwNs64.sys [?]

R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]

R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]

R3 qicflt;upper Device Filter Driver;C:\Windows\system32\DRIVERS\qicflt.sys --> C:\Windows\system32\DRIVERS\qicflt.sys [?]

R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]

R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-6-14 1262400]

S2 RoxWatch12;Roxio Hard Drive Watcher 12;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]

S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-3 160944]

S3 Bluetooth Media Service;Bluetooth Media Service;C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2011-1-24 1298496]

S3 Impcd;Impcd;C:\Windows\system32\drivers\Impcd.sys --> C:\Windows\system32\drivers\Impcd.sys [?]

S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2010-12-17 340240]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]

S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;C:\Windows\system32\drivers\nvstusb.sys --> C:\Windows\system32\drivers\nvstusb.sys [?]

S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]

S3 RoxMediaDB12OEM;RoxMediaDB12OEM;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?]

S3 TurboBoost;Intel® Turbo Boost Technology Monitor 2.0;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]

S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]

S3 WinRing0_1_2_0;WinRing0_1_2_0;C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2012-4-28 14544]

S4 Bluetooth Device Monitor;Bluetooth Device Monitor;C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-1-24 901184]

S4 Bluetooth OBEX Service;Bluetooth OBEX Service;C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2011-1-24 991296]

S4 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-8-29 2369960]

S4 TurboB;Turbo Boost UI Monitor driver;C:\Windows\system32\DRIVERS\TurboB.sys --> C:\Windows\system32\DRIVERS\TurboB.sys [?]

S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]

.

=============== Created Last 30 ================

.

2012-09-11 20:48:15 -------- d-----w- C:\TDSSKiller_Quarantine

2012-09-09 20:22:08 -------- d-----w- C:\Program Files (x86)\TeamViewer

2012-09-03 18:53:23 -------- d-----w- C:\Users\Sam\AppData\Local\ElevatedDiagnostics

2012-08-25 23:43:38 -------- d-----w- C:\Users\Sam\AppData\Roaming\Malwarebytes

2012-08-25 23:43:25 -------- d-----w- C:\ProgramData\Malwarebytes

2012-08-25 23:43:23 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys

2012-08-25 23:43:23 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2012-08-25 23:28:17 -------- d-----w- C:\ProgramData\PC-Doctor for Windows

.

==================== Find3M ====================

.

2012-06-29 00:57:15 178800 ----a-w- C:\Windows\SysWow64\CmdLineExt_x64.dll

.

============= FINISH: 18:38:10.63 ===============

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-08-26.01)

.

Microsoft Windows 7 Home Premium

Boot Device: \Device\HarddiskVolume2

Install Date: 4/20/2012 2:59:09 PM

System Uptime: 9/12/2012 6:34:16 PM (0 hours ago)

.

Motherboard: Dell Inc. | | 0K4H3G

Processor: Intel® Core i7-2630QM CPU @ 2.00GHz | CPU | 2001/100mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 451 GiB total, 303.048 GiB free.

D: is FIXED (NTFS) - 466 GiB total, 208.963 GiB free.

E: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP71: 7/14/2012 1:19:27 AM - Windows Update

RP72: 7/14/2012 10:01:28 PM - Installed Ventrilo Client for Windows x64

RP73: 7/15/2012 7:28:16 PM - Windows Backup

RP74: 8/27/2012 4:01:57 PM - Scheduled Checkpoint

RP75: 9/7/2012 8:01:45 PM - Installed LogMeIn Hamachi

.

==== Installed Programs ======================

.

AccelerometerP11

Adobe Flash Player 10 ActiveX

Adobe Reader X MUI

Advanced Audio FX Engine

Akamai NetSession Interface

Amnesia: The Dark Descent Demo

Apple Application Support

Apple Software Update

Bing Bar

Bing Bar Platform

Bing Rewards Client Installer

Borderlands

Cozi

D3DX10

Dead Rising 2

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition

Dell DataSafe Local Backup

Dell DataSafe Local Backup - Support Software

Dell DataSafe Online

Dell Getting Started Guide

Dell Home Systems Service Agreement

Dell MusicStage

Dell PhotoStage

Dell Product Registration

Dell Stage

Dell VideoStage

Dell Webcam Central

DirectX 9 Runtime

eBay

Elsword version v2.0801.5.1

Game Booster 3

Garry's Mod

GetAmped2_US

Google Chrome

Grand Theft Auto IV

Intel® Control Center

Intel® Management Engine Components

Intel® Processor Graphics

Internet Explorer

Java Auto Updater

Java 6 Update 33

Junk Mail filter update

Killing Floor

Left 4 Dead 2

LogMeIn Hamachi

Mabinogi

Malwarebytes Anti-Malware version 1.65.0.1400

MapleStory

Mesh Runtime

Microsoft Default Manager

Microsoft Games for Windows - LIVE

Microsoft Games for Windows - LIVE Redistributable

Microsoft Office 2010 Service Pack 1 (SP1)

Microsoft Office Access MUI (English) 2010

Microsoft Office Access Setup Metadata MUI (English) 2010

Microsoft Office Excel MUI (English) 2010

Microsoft Office Home and Student 2010

Microsoft Office OneNote MUI (English) 2010

Microsoft Office Outlook MUI (English) 2010

Microsoft Office PowerPoint MUI (English) 2010

Microsoft Office Proof (English) 2010

Microsoft Office Proof (French) 2010

Microsoft Office Proof (Spanish) 2010

Microsoft Office Proofing (English) 2010

Microsoft Office Publisher MUI (English) 2010

Microsoft Office Shared MUI (English) 2010

Microsoft Office Shared Setup Metadata MUI (English) 2010

Microsoft Office Single Image 2010

Microsoft Office Word MUI (English) 2010

Microsoft Search Enhancement Pack

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft XNA Framework Redistributable 4.0

MSVCRT

MSVCRT_amd64

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Nexon Game Manager

NVIDIA PhysX

NVIDIA Stereoscopic 3D Driver

Pando Media Booster

PhotoShowExpress

Python 2.7.3

Realm of the Mad God

Realtek High Definition Audio Driver

Roxio Activation Module

Roxio BackOnTrack

Roxio Burn

Roxio Creator Starter

Roxio Express Labeler 3

S4 League_EU

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Microsoft Excel 2010 (KB2597166) 32-Bit Edition

Security Update for Microsoft InfoPath 2010 (KB2553322) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553091)

Security Update for Microsoft Office 2010 (KB2553096)

Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2598039) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition

Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition

Security Update for Microsoft SharePoint Workspace 2010 (KB2566445)

Security Update for Microsoft Visio Viewer 2010 (KB2597981) 32-Bit Edition

Skype Toolbars

Skype™ 5.10

Sonic CinePlayer Decoder Pack

Steam

Team Fortress 2

Terraria

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2600217)

Update for Microsoft Office 2010 (KB2553065)

Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition

Update for Microsoft Office 2010 (KB2566458)

Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition

Update for Microsoft Office 2010 (KB2597091) 32-Bit Edition

Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition

Update for Microsoft OneNote 2010 (KB2589345) 32-Bit Edition

Update for Microsoft Outlook 2010 (KB2553248) 32-Bit Edition

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition

Vindictus

Windows Live Communications Platform

Windows Live Essentials

Windows Live Installer

Windows Live Mail

Windows Live Mesh

Windows Live Mesh ActiveX Control for Remote Connections

Windows Live Messenger

Windows Live Movie Maker

Windows Live Photo Common

Windows Live Photo Gallery

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

WinPcap 4.1.2

.

==== Event Viewer Messages From Past Week ========

.

9/9/2012 8:56:39 PM, Error: Service Control Manager [7034] - The Trend Micro Solution Platform service terminated unexpectedly. It has done this 1 time(s).

9/7/2012 8:51:47 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.

9/7/2012 8:51:47 PM, Error: Service Control Manager [7000] - The Steam Client Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

9/7/2012 8:02:10 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the LogMeIn Hamachi Tunneling Engine service to connect.

9/7/2012 8:02:10 PM, Error: Service Control Manager [7000] - The LogMeIn Hamachi Tunneling Engine service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

9/7/2012 8:02:09 PM, Error: Service Control Manager [7030] - The LogMeIn Hamachi Tunneling Engine service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

9/12/2012 6:36:53 PM, Error: Service Control Manager [7038] - The nvUpdatusService service was unable to log on as .\UpdatusUser with the currently configured password due to the following error: Logon failure: the specified account password has expired. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

9/12/2012 6:36:53 PM, Error: Service Control Manager [7000] - The NVIDIA Update Service Daemon service failed to start due to the following error: The service did not start due to a logon failure.

9/11/2012 4:52:15 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X86 service to connect.

.

==== End Of File ===========================

mageisfun · September 12, 2012

I mean, I might just be imagining things if anything, I do tend to worry about my computer. But now with the Startup Repair I'm a bit worried. Your the expert though xD

Maurice Naggar · September 13, 2012

How old is your Dell pc ? Is it under factory warranty ?

Irregardless of age, I intend to refer you to the Dell support forum for further follow-up {later}.

I do not quite follow about "startup repair" or why the system went backward. Nothing I had you run would have caused a hiccup.

If there is a problem with your electric supply, you may consider having a UPS uninterruptable power supply.

Do this task and let me know after it is done.

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

For directions on how, see How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Do NOT turn off the firewall

Please download Rkill by Grinler and save it to your desktop.

Link 2
Link 3
Link 4
Double-click on the Rkill desktop icon to run the tool.
If using Vista or Windows 7, right-click on it and Run As Administrator.
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
If the tool does not run from any of the links provided, please let me know.
If your antivirus program gives a prompt message, respond positive to allow RKILL to run.
If a malware-rogue gives a message regarding RKILL, proceed forward to running RKILL

IF you still have a problem running RKILL, you can download iExplore.exe or eXplorer.exe, which are renamed copies of rkill.com, and try them instead.

When all done, rkill.txt log file will be on your desktop. Copy & Paste contents of Rkill.txt into a reply.

More Information about Rkill can be found at this link: http://www.bleepingcomputer.com/forums/topic308364.html

Maurice Naggar · September 16, 2012

Are you still with me? If you still need help, do the items I outlined above and post the logs.

IF you need more time, please advise me.

IF I do not hear back from you by the next two days, I will close this.

Maurice Naggar · September 19, 2012

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

I think I might be infected

Recommended Posts

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Recently Browsing 0 members

Important Information