Services.exe Backdoor Trojan Virus

NunnBetter · December 2, 2012

We have contracted a Trojan backdoor virus on our computer (services.exe). It is quite deeply rooted (I think). I seriously need some help removing this. I've searched and tried everything I can find, and although I'm good with computers, I'm not a tech geek for sure. I have attached a Combofix log should it be helpful. Please help!

username123 Notepad Log.txt

gringo_pr · December 2, 2012

Greetings and Welcome to The Forums!!

My name is Gringo and I'll be glad to help you with your malware problems.

I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of us

Please do not run any tools unless instructed to do so.
- We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
[*]Please do not attach logs or use code boxes, just copy and paste the text.
- Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
[*]Please read every post completely before doing anything.
- Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
[*]Please provide feedback about your experience as we go.
- A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.

NOTE: At the top of your post, click on the Watch Topic Button, select Immediate Notification, and click on Proceed. This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.

These are the programs I would like you to run next, if you have any problems with these just skip it and run the next one.

-Security Check-

Download Security Check by screen317 from

here.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

-AdwCleaner-

Please download

AdwCleaner by Xplode onto your desktop.

Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Delete.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the content of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[s1].txt as well.

--RogueKiller--

Download & SAVE to your Desktop RogueKiller or from here
- Quit all programs that you may have started.
- Please disconnect any USB or external drives from the computer before you run this scan!
- For Vista or Windows 7, right-click and select "Run as Administrator to start"
- For Windows XP, double-click to start.
- Wait until Prescan has finished ...
- Then Click on "Scan" button
- Wait until the Status box shows "Scan Finished"
- click on "delete"
- Wait until the Status box shows "Deleting Finished"
- Click on "Report" and copy/paste the content of the Notepad into your next reply.
- The log should be found in RKreport[1].txt on your Desktop
- Exit/Close RogueKiller+

Gringo

NunnBetter · December 4, 2012

Hi Gringo,

Thanks, so much, for your help with this. I had already started trying to run some programs I'd found in other posts on this website. After running those, and then adding the couple you mentioned, I think I have the system cleaned up. Everything seems to be in working order, and I cannot find any reference to services.exe any longer. Is it possible it's still hidden somewhere, deep in my system, and is still subjecting our data? Should I provide you a specific scan report that would enable you to know this answer?

Your timely response and help is greatly appreciated.

gringo_pr · December 4, 2012

I think it would be best to let me see the reports just to be sure they are clean

gringo

NunnBetter · December 5, 2012

Thanks again. It doesn't look like it was gone. Here's the report from RogueKiller I just ran.

RogueKiller V8.3.1 [Dec 2 2012] by Tigzy

mail : tigzyRK<at>gmail<dot>com

Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/

Website : http://tigzy.geekstogo.com/roguekiller.php

Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User : NunnBetter [Restricted rights]

Mode : Remove -- Date : 12/04/2012 19:51:18

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 1 ¤¤¤

[HOSTS] HKLM\[...]\Parameters : DataBasePath () -> NOT REMOVED, USE HOSTSFIX

¤¤¤ Particular Files / Folders: ¤¤¤

[ZeroAccess][FOLDER] ROOT : C:\Windows\Installer\{5a37711a-8222-fa94-7525-6ebecfc90b5e}\U --> REMOVED

[ZeroAccess][FOLDER] ROOT : C:\Windows\Installer\{5a37711a-8222-fa94-7525-6ebecfc90b5e}\L --> REMOVED

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ Infection : ZeroAccess ¤¤¤

¤¤¤ HOSTS File: ¤¤¤

--> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ MBR Check: ¤¤¤

Finished : << RKreport[2]_D_12042012_02d1951.txt >>

RKreport[1]_S_12042012_02d1950.txt ; RKreport[2]_D_12042012_02d1951.txt

gringo_pr · December 5, 2012

Hello

I Would like you to do the following.

Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links. I want you to save it to the desktop and run it from there.

Link 1
Link 2
Link 3

1. Close any open browsers or any other programs that are open.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.

When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

In your next post I need the following
Log from Combofix
let me know of any problems you may have had
How is the computer doing now?

Gringo

gringo_pr · December 8, 2012

Greetings

I have not heard from you in a couple of days so I am coming by to check on you to see if you are having problems or you just need some more time.

Also to remind you that it is very important that we finish the process completely so as to not get reinfected. I will let you know when we are complete and I will ask to remove our tools

Gringo

NunnBetter · December 9, 2012

Hi Gringo,

Sorry for the delay in responding. I've copied the Combofix log below. I haven't used the computer since running it; however, most things appear to be running okay. I did get errors in a couple of programs prior to running Combofix, but I'm not certain they are related. Thanks again.

ComboFix 12-12-07.01 - Tabatha 12/09/2012 17:26:56.5.4 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8105.5978 [GMT -6:00]

Running from: c:\users\Tabatha\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3VLHAR5H\ComboFix.exe

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}

FW: McAfee Firewall *Disabled* {959DA8E2-3527-57D1-4915-924367AD4FE9}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

* Created a new restore point

.

((((((((((((((((((((((((( Files Created from 2012-11-09 to 2012-12-09 )))))))))))))))))))))))))))))))

.

2012-12-09 23:30 . 2012-12-09 23:30 -------- d-----w- c:\users\NunnBetter\AppData\Local\temp

2012-12-09 23:30 . 2012-12-09 23:30 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-12-03 09:02 . 2012-12-03 09:02 -------- d-----w- c:\program files (x86)\Microsoft.NET

2012-12-02 09:02 . 2012-10-08 11:42 10925568 ----a-w- c:\windows\system32\ieframe.dll

2012-12-02 09:01 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys

2012-12-02 09:01 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys

2012-12-02 09:01 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll

2012-12-02 09:01 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll

2012-12-02 09:01 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe

2012-12-02 09:01 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll

2012-12-02 09:01 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll

2012-12-02 03:39 . 2012-12-02 03:39 -------- d-----w- C:\TDSSKiller_Quarantine

2012-12-02 02:31 . 2012-09-25 22:47 78336 ----a-w- c:\windows\SysWow64\synceng.dll

2012-12-02 02:31 . 2012-09-25 22:46 95744 ----a-w- c:\windows\system32\synceng.dll

2012-12-02 02:11 . 2012-12-02 02:11 -------- d-----w- C:\FRST

2012-12-01 18:47 . 2012-12-09 23:30 -------- d-----w- c:\users\Tabatha\AppData\Local\temp

2012-12-01 00:30 . 2012-10-30 23:51 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys

2012-12-01 00:30 . 2012-10-30 23:51 370288 ----a-w- c:\windows\system32\drivers\aswSP.sys

2012-12-01 00:30 . 2012-10-15 16:59 54072 ----a-w- c:\windows\system32\drivers\aswRdr2.sys

2012-12-01 00:30 . 2012-10-30 23:51 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys

2012-12-01 00:30 . 2012-10-30 23:51 984144 ----a-w- c:\windows\system32\drivers\aswSnx.sys

2012-12-01 00:30 . 2012-10-30 23:51 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys

2012-12-01 00:30 . 2012-10-30 23:50 285328 ----a-w- c:\windows\system32\aswBoot.exe

2012-12-01 00:29 . 2012-10-30 23:51 41224 ----a-w- c:\windows\avastSS.scr

2012-12-01 00:29 . 2012-10-30 23:50 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe

2012-12-01 00:29 . 2012-12-01 00:29 -------- d-----w- c:\programdata\AVAST Software

2012-12-01 00:29 . 2012-12-01 00:29 -------- d-----w- c:\program files\AVAST Software

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-12-02 09:01 . 2012-08-21 22:32 66395536 ----a-w- c:\windows\system32\MRT.exe

2012-10-16 08:38 . 2012-12-02 02:31 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll

2012-10-16 08:38 . 2012-12-02 02:31 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll

2012-10-16 07:39 . 2012-12-02 02:31 561664 ----a-w- c:\windows\apppatch\AcLayers.dll

2012-09-14 19:19 . 2012-10-10 13:16 2048 ----a-w- c:\windows\system32\tzres.dll

2012-09-14 18:28 . 2012-10-10 13:16 2048 ----a-w- c:\windows\SysWow64\tzres.dll

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Dell DataSafe Online"="c:\program files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe" [2010-08-26 1117528]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2012-07-27 35768]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]

"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-11-25 240112]

"Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [2010-11-17 514544]

"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2012-09-12 1535112]

"NeroLauncher"="c:\program files (x86)\Nero\SyncUP\NeroLauncher.exe" [2012-02-06 66872]

"AccuWeatherWidget"="c:\program files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" [2011-04-30 885760]

"Intuit SyncManager"="c:\program files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe" [2012-10-08 2643320]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusDisableNotify"=dword:00000001

"AntiVirusOverride"=dword:00000001

"FirewallDisableNotify"=dword:00000001

"FirewallOverride"=dword:00000001

"UpdatesDisableNotify"=dword:00000001

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 filepathsrv;CDPforFilesSrv;c:\windows\system32\filepathsrv.exe [2010-07-19 628608]

R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]

R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]

R3 HipShieldK;McAfee Inc. HipShieldK;c:\windows\system32\drivers\HipShieldK.sys [2012-04-20 196440]

R3 McAWFwk;McAfee Activation Service;c:\progra~1\mcafee\msc\mcawfwk.exe [2011-03-08 224704]

R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2012-06-22 106112]

R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-02-20 1255736]

R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-08-31 201304]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2012-06-22 335784]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]

S1 aswSnx;aswSnx; [x]

S1 aswSP;aswSP; [x]

S1 FilePath;VitalFile;c:\windows\system32\DRIVERS\fp.sys [2010-07-19 316288]

S2 aswFsBlk;aswFsBlk; [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600]

S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]

S2 DellDigitalDelivery;Dell Digital Delivery Service;c:\program files (x86)\Dell Digital Delivery\DeliveryService.exe [2012-10-09 173568]

S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-08-31 201304]

S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2012-08-31 201304]

S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2012-06-22 218320]

S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2012-06-22 177144]

S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-11-25 687400]

S2 NOBU;Dell DataSafe Online;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE [x]

S2 QBVSS;QBIDPService;c:\program files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe [2011-11-09 1248256]

S2 RalinkRegistryWriter64;RalinkRegistryWriter64;c:\program files (x86)\NETGEAR\WNDA4100\Service\RaRegistry64.exe [2011-11-21 455424]

S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]

S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2011-09-22 1692480]

S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2012-06-22 69672]

S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]

S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2012-06-22 513456]

S3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys [2011-08-01 45416]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]

S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]

S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]

S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]

S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]

S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]

.

--- Other Services/Drivers In Memory ---

.

*Deregistered* - mfeavfk01

.

Contents of the 'Scheduled Tasks' folder

.

2012-09-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2690531696-1917535011-530222184-1001Core.job

- c:\users\NunnBetter\AppData\Local\Google\Update\GoogleUpdate.exe [2012-02-18 21:08]

.

2012-09-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2690531696-1917535011-530222184-1001UA.job

- c:\users\NunnBetter\AppData\Local\Google\Update\GoogleUpdate.exe [2012-02-18 21:08]

.

2012-06-08 c:\windows\Tasks\Norton Security Scan for NunnBetter.job

- c:\progra~2\NORTON~2\Engine\372~1.5\Nss.exe [2012-06-05 09:45]

.

2012-03-12 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job

- c:\program files\Dell Support Center\uaclauncher.exe [2011-03-22 17:20]

.

2012-04-11 c:\windows\Tasks\SystemToolsDailyTest.job

- c:\program files\Dell Support Center\pcdrcui.exe [2011-03-22 17:20]

.

--------- X64 Entries -----------

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2012-10-30 23:50 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-04 167960]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-04 391704]

"Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-04 418328]

"Stage Remote"="c:\program files (x86)\Dell\Stage Remote\StageRemote.exe" [2011-06-28 2022976]

"DellStage"="c:\program files (x86)\Dell Stage\Dell Stage\stage_primary.exe" [2011-04-30 2055016]

"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 2417032]

.

------- Supplementary Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

TCP: DhcpNameServer = 192.168.1.1

.

- - - - ORPHANS REMOVED - - - -

.

Toolbar-Locked - (no file)

Wow6432Node-HKLM-Run-<NO NAME> - (no file)

SafeBoot-33491813.sys

AddRemove-OnDemand5 Manager SU - c:\mitchell1\Manager\Series1\RebootWiz

AddRemove-WT089446 - c:\program files (x86)\WildTangent\Dell Games\Wedding Dash - Ready

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11c_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11c.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\McAfee]

"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Completion time: 2012-12-09 17:31:58

ComboFix-quarantined-files.txt 2012-12-09 23:31

ComboFix2.txt 2012-12-01 18:47

ComboFix3.txt 2012-12-01 04:35

.

Pre-Run: 924,270,768,128 bytes free

Post-Run: 923,996,401,664 bytes free

.

- - End Of File - - FBAEE0EEE16A952A763DAF51FD628077

gringo_pr · December 10, 2012

Greetings

I want you to run these next,

tdsskiller:

Please read carefully and follow these steps.

Download TDSSKiller and save it to your Desktop.
doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
If an infected file is detected, the default action will be Cure, click on Continue.
If a suspicious file is detected, the default action will be Skip, click on Continue.
It may ask you to reboot the computer to complete the process. Click on Reboot Now.
If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Please download aswMBR to your desktop.

Double click the aswMBR.exe icon to run it
it will ask to download extra definitions - ALLOW IT
Click the Scan button to start the scan
On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

If you have any problems running either one come back and let me know

please reply with the reports from TDSSKiller and aswMBR

Gringo

NunnBetter · December 10, 2012

Hi. I tried running tdsskiller.exe; however, when I launch it, I get a warning box that advises "Can't Initialize log". The initialization box reads 10% and never changes until I click "OK" in the Warning box. Once I click "OK", a new warning box appears that advises "Can't load driver" and the initialization box remains at 40% until I click "OK" in the warning box. After I click the final "OK", a new box appears so that I can select Start Scan; however, when I select it, the box immediately changes indicating Process: 1 object, details. All other items read "0". The details report is blank.

Thanks.

gringo_pr · December 10, 2012

Hello

I have changed things some

Please download the latest version of TDSSKiller from here and save it to your Desktop.

Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
Put a checkmark beside loaded modules.
A reboot will be needed to apply the changes. Do it.
TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
Then click on Change parameters in TDSSKiller.
Check all boxes then click OK.
Click the Start Scan button.
The scan should take no longer than 2 minutes.
If a suspicious object is detected, the default action will be Skip, click on Continue.
If malicious objects are found, they will show in the Scan results
Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

NunnBetter · December 10, 2012

Here's the log I found after doing as you instructed above. Cure was NOT an option on anything listed, so as you instructed, I selected "Skip". I've entered the log into multiple posts, because I continue getting an error message indicating "post too long" when I try to enter as one. Thanks.

14:35:30.0321 2876 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35

14:35:31.0003 2876 ============================================================

14:35:31.0003 2876 Current date / time: 2012/12/10 14:35:31.0003

14:35:31.0003 2876 SystemInfo:

14:35:31.0003 2876

14:35:31.0003 2876 OS Version: 6.1.7601 ServicePack: 1.0

14:35:31.0003 2876 Product type: Workstation

14:35:31.0003 2876 ComputerName: NUNNBETTER

14:35:31.0003 2876 UserName: NunnBetter

14:35:31.0003 2876 Windows directory: C:\Windows

14:35:31.0003 2876 System windows directory: C:\Windows

14:35:31.0003 2876 Running under WOW64

14:35:31.0003 2876 Processor architecture: Intel x64

14:35:31.0003 2876 Number of processors: 4

14:35:31.0003 2876 Page size: 0x1000

14:35:31.0003 2876 Boot type: Normal boot

14:35:31.0003 2876 ============================================================

14:35:32.0961 2876 BG loaded

14:35:33.0179 2876 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

14:35:33.0195 2876 ============================================================

14:35:33.0195 2876 \Device\Harddisk0\DR0:

14:35:33.0195 2876 MBR partitions:

14:35:33.0195 2876 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x14000, BlocksNum 0x1DA0000

14:35:33.0195 2876 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1DB4000, BlocksNum 0x72952000

14:35:33.0195 2876 ============================================================

14:35:33.0210 2876 C: <-> \Device\Harddisk0\DR0\Partition2

14:35:33.0210 2876 ============================================================

14:35:33.0210 2876 Initialize success

14:35:33.0210 2876 ============================================================

14:36:38.0660 5064 ============================================================

14:36:38.0660 5064 Scan started

14:36:38.0660 5064 Mode: Manual; SigCheck; TDLFS;

14:36:38.0660 5064 ============================================================

14:36:40.0520 5064 ================ Scan system memory ========================

14:36:40.0520 5064 System memory - ok

14:36:40.0520 5064 ================ Scan services =============================

14:36:40.0635 5064 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys

14:36:40.0780 5064 1394ohci - ok

14:36:40.0800 5064 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys

14:36:40.0816 5064 ACPI - ok

14:36:40.0829 5064 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys

14:36:40.0904 5064 AcpiPmi - ok

14:36:41.0003 5064 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

14:36:41.0023 5064 AdobeARMservice - ok

14:36:41.0050 5064 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys

14:36:41.0069 5064 adp94xx - ok

14:36:41.0099 5064 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys

14:36:41.0124 5064 adpahci - ok

14:36:41.0135 5064 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys

14:36:41.0147 5064 adpu320 - ok

14:36:41.0183 5064 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll

14:36:41.0306 5064 AeLookupSvc - ok

14:36:41.0324 5064 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys

14:36:41.0388 5064 AFD - ok

14:36:41.0404 5064 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys

14:36:41.0416 5064 agp440 - ok

14:36:41.0428 5064 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe

14:36:41.0494 5064 ALG - ok

14:36:41.0509 5064 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys

14:36:41.0521 5064 aliide - ok

14:36:41.0532 5064 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys

14:36:41.0543 5064 amdide - ok

14:36:41.0561 5064 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys

14:36:41.0601 5064 AmdK8 - ok

14:36:41.0623 5064 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys

14:36:41.0663 5064 AmdPPM - ok

14:36:41.0688 5064 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys

14:36:41.0709 5064 amdsata - ok

14:36:41.0719 5064 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys

14:36:41.0733 5064 amdsbs - ok

14:36:41.0743 5064 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys

14:36:41.0753 5064 amdxata - ok

14:36:41.0762 5064 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys

14:36:41.0914 5064 AppID - ok

14:36:41.0935 5064 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll

14:36:42.0001 5064 AppIDSvc - ok

14:36:42.0026 5064 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll

14:36:42.0088 5064 Appinfo - ok

14:36:42.0130 5064 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys

14:36:42.0147 5064 arc - ok

14:36:42.0152 5064 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys

14:36:42.0164 5064 arcsas - ok

14:36:42.0179 5064 [ 4FCAEF0C5BE7629AEB878998E0FE959B ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys

14:36:42.0192 5064 aswFsBlk - ok

14:36:42.0207 5064 [ B50CDD87772D6A11CB90924AAD399DF8 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys

14:36:42.0216 5064 aswMonFlt - ok

14:36:42.0227 5064 [ 57768C7DB4681F2510F247F82EF31D4F ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys

14:36:42.0236 5064 aswRdr - ok

14:36:42.0264 5064 [ E71D826A1F3CE9C9DE3E77F2D02AFFBF ] aswSnx C:\Windows\system32\drivers\aswSnx.sys

14:36:42.0283 5064 aswSnx - ok

14:36:42.0317 5064 [ 538A32E2C99BF073D4CA76C30BEDAA60 ] aswSP C:\Windows\system32\drivers\aswSP.sys

14:36:42.0336 5064 aswSP - ok

14:36:42.0362 5064 [ 6EDC79D73745FD44C41B55B2D13D0B70 ] aswTdi C:\Windows\system32\drivers\aswTdi.sys

14:36:42.0372 5064 aswTdi - ok

14:36:42.0411 5064 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys

14:36:42.0460 5064 AsyncMac - ok

14:36:42.0484 5064 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys

14:36:42.0494 5064 atapi - ok

14:36:42.0511 5064 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

14:36:42.0565 5064 AudioEndpointBuilder - ok

14:36:42.0573 5064 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll

14:36:42.0604 5064 AudioSrv - ok

14:36:42.0669 5064 [ 8FA553E9AE69808D99C164733A0F9590 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe

14:36:42.0685 5064 avast! Antivirus - ok

14:36:42.0697 5064 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll

14:36:42.0794 5064 AxInstSV - ok

14:36:42.0815 5064 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys

14:36:42.0919 5064 b06bdrv - ok

14:36:42.0937 5064 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys

14:36:42.0991 5064 b57nd60a - ok

14:36:43.0028 5064 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll

14:36:43.0092 5064 BDESVC - ok

14:36:43.0116 5064 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys

14:36:43.0193 5064 Beep - ok

14:36:43.0232 5064 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll

14:36:43.0288 5064 BFE - ok

14:36:43.0336 5064 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\system32\qmgr.dll

14:36:43.0401 5064 BITS - ok

14:36:43.0434 5064 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys

14:36:43.0458 5064 blbdrive - ok

14:36:43.0485 5064 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys

14:36:43.0541 5064 bowser - ok

14:36:43.0552 5064 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys

14:36:43.0568 5064 BrFiltLo - ok

14:36:43.0582 5064 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys

14:36:43.0596 5064 BrFiltUp - ok

14:36:43.0608 5064 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys

14:36:43.0655 5064 BridgeMP - ok

14:36:43.0687 5064 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll

14:36:43.0707 5064 Browser - ok

14:36:43.0724 5064 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys

14:36:43.0753 5064 Brserid - ok

14:36:43.0762 5064 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys

14:36:43.0778 5064 BrSerWdm - ok

14:36:43.0792 5064 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys

14:36:43.0807 5064 BrUsbMdm - ok

14:36:43.0812 5064 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys

14:36:43.0825 5064 BrUsbSer - ok

14:36:43.0839 5064 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys

14:36:43.0884 5064 BTHMODEM - ok

14:36:43.0936 5064 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll

14:36:44.0009 5064 bthserv - ok

14:36:44.0029 5064 catchme - ok

14:36:44.0045 5064 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys

14:36:44.0074 5064 cdfs - ok

14:36:44.0098 5064 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys

14:36:44.0111 5064 cdrom - ok

14:36:44.0126 5064 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll

14:36:44.0191 5064 CertPropSvc - ok

14:36:44.0232 5064 [ 45B5A89DC41577282E5BF41B1165EA71 ] cfwids C:\Windows\system32\drivers\cfwids.sys

14:36:44.0247 5064 cfwids - ok

14:36:44.0261 5064 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys

14:36:44.0276 5064 circlass - ok

14:36:44.0308 5064 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys

14:36:44.0334 5064 CLFS - ok

14:36:44.0408 5064 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

14:36:44.0428 5064 clr_optimization_v2.0.50727_32 - ok

14:36:44.0464 5064 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

14:36:44.0484 5064 clr_optimization_v2.0.50727_64 - ok

14:36:44.0528 5064 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

14:36:44.0574 5064 clr_optimization_v4.0.30319_32 - ok

14:36:44.0607 5064 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

14:36:44.0661 5064 clr_optimization_v4.0.30319_64 - ok

14:36:44.0685 5064 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys

14:36:44.0723 5064 CmBatt - ok

14:36:44.0733 5064 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys

14:36:44.0752 5064 cmdide - ok

14:36:44.0778 5064 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys

14:36:44.0814 5064 CNG - ok

14:36:44.0849 5064 [ 5C855932E4DF00B1B6F5F6F57E82B6C5 ] CnxtHdAudService C:\Windows\system32\drivers\CHDRT64.sys

14:36:44.0885 5064 CnxtHdAudService - ok

14:36:44.0899 5064 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys

14:36:44.0910 5064 Compbatt - ok

14:36:44.0933 5064 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys

14:36:44.0967 5064 CompositeBus - ok

14:36:44.0970 5064 COMSysApp - ok

14:36:44.0996 5064 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys

14:36:45.0015 5064 crcdisk - ok

14:36:45.0058 5064 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll

14:36:45.0119 5064 CryptSvc - ok

14:36:45.0190 5064 [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

14:36:45.0214 5064 cvhsvc - ok

14:36:45.0246 5064 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll

14:36:45.0298 5064 DcomLaunch - ok

14:36:45.0348 5064 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll

14:36:45.0395 5064 defragsvc - ok

14:36:45.0437 5064 [ 3A42B00C88E3E68080DAB6B27BB35B6E ] DellDigitalDelivery C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe

14:36:45.0466 5064 DellDigitalDelivery ( UnsignedFile.Multi.Generic ) - warning

14:36:45.0466 5064 DellDigitalDelivery - detected UnsignedFile.Multi.Generic (1)

14:36:45.0487 5064 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys

14:36:45.0569 5064 DfsC - ok

14:36:45.0591 5064 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll

14:36:45.0651 5064 Dhcp - ok

14:36:45.0665 5064 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys

14:36:45.0726 5064 discache - ok

14:36:45.0764 5064 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys

14:36:45.0775 5064 Disk - ok

14:36:45.0805 5064 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll

14:36:45.0869 5064 Dnscache - ok

14:36:45.0887 5064 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll

14:36:45.0958 5064 dot3svc - ok

14:36:45.0968 5064 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll

14:36:46.0016 5064 DPS - ok

14:36:46.0048 5064 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys

14:36:46.0093 5064 drmkaud - ok

14:36:46.0130 5064 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys

14:36:46.0164 5064 DXGKrnl - ok

14:36:46.0176 5064 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll

14:36:46.0234 5064 EapHost - ok

14:36:46.0310 5064 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys

14:36:46.0392 5064 ebdrv - ok

14:36:46.0410 5064 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe

14:36:46.0503 5064 EFS - ok

14:36:46.0558 5064 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe

14:36:46.0591 5064 ehRecvr - ok

14:36:46.0604 5064 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe

14:36:46.0618 5064 ehSched - ok

14:36:46.0644 5064 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys

14:36:46.0662 5064 elxstor - ok

14:36:46.0671 5064 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys

14:36:46.0701 5064 ErrDev - ok

14:36:46.0739 5064 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll

14:36:46.0804 5064 EventSystem - ok

14:36:46.0833 5064 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys

14:36:46.0864 5064 exfat - ok

14:36:46.0878 5064 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys

14:36:46.0909 5064 fastfat - ok

14:36:46.0943 5064 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe

14:36:46.0995 5064 Fax - ok

14:36:47.0041 5064 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys

14:36:47.0091 5064 fdc - ok

14:36:47.0122 5064 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll

14:36:47.0166 5064 fdPHost - ok

14:36:47.0176 5064 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll

14:36:47.0205 5064 FDResPub - ok

14:36:47.0215 5064 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys

14:36:47.0226 5064 FileInfo - ok

14:36:47.0241 5064 [ 1D684EFB269D24E02550536100799F9C ] FilePath C:\Windows\system32\DRIVERS\fp.sys

14:36:47.0253 5064 FilePath - ok

14:36:47.0272 5064 [ 9B09A03D1A47220AE9C6F6627FB317B8 ] filepathsrv C:\Windows\system32\filepathsrv.exe

14:36:47.0291 5064 filepathsrv - ok

14:36:47.0301 5064 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys

14:36:47.0368 5064 Filetrace - ok

14:36:47.0392 5064 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys

14:36:47.0416 5064 flpydisk - ok

14:36:47.0434 5064 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys

14:36:47.0447 5064 FltMgr - ok

14:36:47.0468 5064 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll

14:36:47.0516 5064 FontCache - ok

14:36:47.0557 5064 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

14:36:47.0575 5064 FontCache3.0.0.0 - ok

14:36:47.0586 5064 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys

14:36:47.0602 5064 FsDepends - ok

14:36:47.0614 5064 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys

14:36:47.0624 5064 Fs_Rec - ok

14:36:47.0647 5064 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys

14:36:47.0662 5064 fvevol - ok

14:36:47.0680 5064 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys

14:36:47.0692 5064 gagp30kx - ok

14:36:47.0766 5064 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe

14:36:47.0785 5064 GamesAppService - ok

14:36:47.0804 5064 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll

14:36:47.0837 5064 gpsvc - ok

14:36:47.0860 5064 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys

14:36:47.0918 5064 hcw85cir - ok

14:36:47.0927 5064 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys

14:36:47.0965 5064 HDAudBus - ok

14:36:47.0995 5064 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys

14:36:48.0020 5064 HidBatt - ok

14:36:48.0032 5064 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys

14:36:48.0047 5064 HidBth - ok

14:36:48.0060 5064 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys

14:36:48.0074 5064 HidIr - ok

14:36:48.0093 5064 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll

14:36:48.0154 5064 hidserv - ok

14:36:48.0190 5064 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys

14:36:48.0202 5064 HidUsb - ok

14:36:48.0228 5064 [ A894FB2CAE6A29F5D9C8EDA47B074623 ] HipShieldK C:\Windows\system32\drivers\HipShieldK.sys

14:36:48.0247 5064 HipShieldK - ok

14:36:48.0264 5064 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll

14:36:48.0331 5064 hkmsvc - ok

14:36:48.0367 5064 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll

14:36:48.0399 5064 HomeGroupListener - ok

14:36:48.0424 5064 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

14:36:48.0439 5064 HomeGroupProvider - ok

14:36:48.0448 5064 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys

14:36:48.0460 5064 HpSAMD - ok

14:36:48.0483 5064 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys

14:36:48.0534 5064 HTTP - ok

14:36:48.0554 5064 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys

14:36:48.0565 5064 hwpolicy - ok

14:36:48.0575 5064 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys

14:36:48.0588 5064 i8042prt - ok

14:36:48.0612 5064 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys

14:36:48.0628 5064 iaStorV - ok

14:36:48.0671 5064 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

14:36:48.0702 5064 idsvc - ok

14:36:48.0860 5064 [ EFE5A0AF39A8E179624117C521F1E012 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys

14:36:49.0018 5064 igfx - ok

14:36:49.0037 5064 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys

14:36:49.0054 5064 iirsp - ok

14:36:49.0073 5064 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll

14:36:49.0125 5064 IKEEXT - ok

14:36:49.0164 5064 [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys

14:36:49.0195 5064 IntcDAud - ok

14:36:49.0203 5064 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys

14:36:49.0214 5064 intelide - ok

14:36:49.0228 5064 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys

14:36:49.0241 5064 intelppm - ok

14:36:49.0272 5064 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll

14:36:49.0336 5064 IPBusEnum - ok

14:36:49.0360 5064 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys

14:36:49.0388 5064 IpFilterDriver - ok

14:36:49.0444 5064 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll

14:36:49.0517 5064 iphlpsvc - ok

14:36:49.0532 5064 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys

14:36:49.0570 5064 IPMIDRV - ok

14:36:49.0595 5064 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys

14:36:49.0652 5064 IPNAT - ok

14:36:49.0684 5064 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys

14:36:49.0700 5064 IRENUM - ok

14:36:49.0713 5064 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys

14:36:49.0724 5064 isapnp - ok

14:36:49.0741 5064 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys

14:36:49.0755 5064 iScsiPrt - ok

14:36:49.0768 5064 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys

14:36:49.0779 5064 kbdclass - ok

14:36:49.0786 5064 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys

14:36:49.0819 5064 kbdhid - ok

14:36:49.0840 5064 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe

14:36:49.0852 5064 KeyIso - ok

14:36:49.0862 5064 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys

14:36:49.0874 5064 KSecDD - ok

14:36:49.0883 5064 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys

14:36:49.0895 5064 KSecPkg - ok

14:36:49.0903 5064 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys

14:36:49.0949 5064 ksthunk - ok

14:36:49.0974 5064 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll

14:36:50.0041 5064 KtmRm - ok

14:36:50.0077 5064 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll

14:36:50.0146 5064 LanmanServer - ok

14:36:50.0171 5064 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

14:36:50.0215 5064 LanmanWorkstation - ok

14:36:50.0238 5064 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys

14:36:50.0282 5064 lltdio - ok

14:36:50.0320 5064 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll

14:36:50.0352 5064 lltdsvc - ok

14:36:50.0363 5064 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll

14:36:50.0390 5064 lmhosts - ok

14:36:50.0409 5064 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys

14:36:50.0421 5064 LSI_FC - ok

14:36:50.0427 5064 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys

14:36:50.0439 5064 LSI_SAS - ok

14:36:50.0451 5064 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys

14:36:50.0462 5064 LSI_SAS2 - ok

14:36:50.0474 5064 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys

14:36:50.0486 5064 LSI_SCSI - ok

14:36:50.0497 5064 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys

14:36:50.0543 5064 luafv - ok

14:36:50.0609 5064 [ 9504F1DDA1B67FB8D526FD4F8CC882F3 ] McAWFwk c:\PROGRA~1\mcafee\msc\mcawfwk.exe

14:36:50.0632 5064 McAWFwk - ok

14:36:50.0696 5064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] McMPFSvc C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

14:36:50.0717 5064 McMPFSvc - ok

14:36:50.0729 5064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] mcmscsvc C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe

14:36:50.0740 5064 mcmscsvc - ok

14:36:50.0746 5064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] McNaiAnn C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe

14:36:50.0757 5064 McNaiAnn - ok

14:36:50.0767 5064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] McNASvc C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe

14:36:50.0778 5064 McNASvc - ok

14:36:50.0810 5064 [ BE7C8C3F8FE52D8F7826E14CF11DE949 ] McODS C:\Program Files\mcafee\VirusScan\mcods.exe

14:36:50.0837 5064 McODS - ok

14:36:50.0842 5064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] McOobeSv C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe

14:36:50.0852 5064 McOobeSv - ok

14:36:50.0856 5064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] McProxy C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe

14:36:50.0866 5064 McProxy - ok

14:36:50.0889 5064 [ 4DEC9B5BEDAA97B1FF6A3923E1C4F58A ] McShield C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe

14:36:50.0900 5064 McShield - ok

14:36:50.0916 5064 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll

14:36:50.0932 5064 Mcx2Svc - ok

14:36:50.0948 5064 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys

14:36:50.0959 5064 megasas - ok

14:36:50.0969 5064 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys

14:36:50.0983 5064 MegaSR - ok

14:36:50.0995 5064 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\Windows\system32\DRIVERS\HECIx64.sys

14:36:51.0004 5064 MEIx64 - ok

14:36:51.0026 5064 [ B574522827D94126C03975FD53F0B26B ] mfeapfk C:\Windows\system32\drivers\mfeapfk.sys

14:36:51.0036 5064 mfeapfk - ok

14:36:51.0060 5064 [ B393753ECE9A9E2307CB1984ACF3DA9D ] mfeavfk C:\Windows\system32\drivers\mfeavfk.sys

14:36:51.0072 5064 mfeavfk - ok

14:36:51.0093 5064 mfeavfk01 - ok

14:36:51.0114 5064 [ 97C398750C8E80A48EB63999546F796E ] mfefire C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe

14:36:51.0135 5064 mfefire - ok

14:36:51.0150 5064 [ C52A1ABF03DD219375EA0F6A8BE941C3 ] mfefirek C:\Windows\system32\drivers\mfefirek.sys

14:36:51.0164 5064 mfefirek - ok

14:36:51.0197 5064 [ 7092A6C6158FC4F5AA39EBEB9D5AF03D ] mfehidk C:\Windows\system32\drivers\mfehidk.sys

14:36:51.0231 5064 mfehidk - ok

14:36:51.0257 5064 [ D2A941C82A0A9227CD6F47AD40A40F69 ] mferkdet C:\Windows\system32\drivers\mferkdet.sys

14:36:51.0275 5064 mferkdet - ok

14:36:51.0291 5064 [ 04D48692EFF181DA46DD8EA8BE9FFB2B ] mfevtp C:\Windows\system32\mfevtps.exe

14:36:51.0302 5064 mfevtp - ok

14:36:51.0317 5064 [ 1631E2DA6C4B47D97ECA94842836592E ] mfewfpk C:\Windows\system32\drivers\mfewfpk.sys

14:36:51.0331 5064 mfewfpk - ok

14:36:51.0351 5064 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll

14:36:51.0417 5064 MMCSS - ok

14:36:51.0436 5064 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys

14:36:51.0506 5064 Modem - ok

14:36:51.0537 5064 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys

14:36:51.0596 5064 monitor - ok

14:36:51.0613 5064 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys

14:36:51.0626 5064 mouclass - ok

14:36:51.0650 5064 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys

14:36:51.0688 5064 mouhid - ok

14:36:51.0722 5064 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys

14:36:51.0745 5064 mountmgr - ok

14:36:51.0778 5064 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys

14:36:51.0808 5064 mpio - ok

14:36:51.0852 5064 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys

14:36:51.0893 5064 mpsdrv - ok

14:36:51.0963 5064 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll

14:36:52.0040 5064 MpsSvc - ok

14:36:52.0062 5064 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys

14:36:52.0120 5064 MRxDAV - ok

14:36:52.0136 5064 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys

14:36:52.0193 5064 mrxsmb - ok

14:36:52.0224 5064 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys

14:36:52.0250 5064 mrxsmb10 - ok

14:36:52.0259 5064 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys

14:36:52.0271 5064 mrxsmb20 - ok

14:36:52.0292 5064 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys

14:36:52.0303 5064 msahci - ok

14:36:52.0312 5064 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys

14:36:52.0324 5064 msdsm - ok

14:36:52.0342 5064 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe

14:36:52.0377 5064 MSDTC - ok

14:36:52.0400 5064 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys

14:36:52.0428 5064 Msfs - ok

14:36:52.0447 5064 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys

14:36:52.0476 5064 mshidkmdf - ok

14:36:52.0483 5064 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys

14:36:52.0504 5064 msisadrv - ok

14:36:52.0515 5064 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll

14:36:52.0564 5064 MSiSCSI - ok

14:36:52.0567 5064 msiserver - ok

14:36:52.0585 5064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] MSK80Service C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

14:36:52.0596 5064 MSK80Service - ok

14:36:52.0616 5064 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys

14:36:52.0678 5064 MSKSSRV - ok

14:36:52.0707 5064 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys

14:36:52.0795 5064 MSPCLOCK - ok

14:36:52.0805 5064 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys

14:36:52.0866 5064 MSPQM - ok

14:36:52.0890 5064 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys

14:36:52.0905 5064 MsRPC - ok

14:36:52.0928 5064 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys

14:36:52.0938 5064 mssmbios - ok

14:36:52.0981 5064 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys

14:36:53.0080 5064 MSTEE - ok

14:36:53.0163 5064 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys

14:36:53.0184 5064 MTConfig - ok

14:36:53.0198 5064 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys

14:36:53.0209 5064 Mup - ok

14:36:53.0228 5064 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll

14:36:53.0311 5064 napagent - ok

14:36:53.0343 5064 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys

14:36:53.0392 5064 NativeWifiP - ok

14:36:53.0550 5064 [ 934BB0D23A25C8C136570800A5A149B6 ] NAUpdate C:\Program Files (x86)\Nero\Update\NASvc.exe

14:36:53.0608 5064 NAUpdate - ok

14:36:53.0825 5064 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys

14:36:53.0935 5064 NDIS - ok

14:36:53.0978 5064 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys

14:36:54.0034 5064 NdisCap - ok

14:36:54.0066 5064 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys

14:36:54.0095 5064 NdisTapi - ok

14:36:54.0117 5064 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys

14:36:54.0205 5064 Ndisuio - ok

14:36:54.0234 5064 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys

14:36:54.0304 5064 NdisWan - ok

14:36:54.0325 5064 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys

14:36:54.0352 5064 NDProxy - ok

14:36:54.0369 5064 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys

14:36:54.0426 5064 NetBIOS - ok

14:36:54.0461 5064 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys

14:36:54.0491 5064 NetBT - ok

14:36:54.0543 5064 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe

14:36:54.0564 5064 Netlogon - ok

14:36:54.0594 5064 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll

14:36:54.0656 5064 Netman - ok

14:36:54.0701 5064 [ 3E5A36127E201DDF663176B66828FAFE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe

14:36:54.0712 5064 NetMsmqActivator - ok

14:36:54.0714 5064 [ 3E5A36127E201DDF663176B66828FAFE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe

14:36:54.0724 5064 NetPipeActivator - ok

14:36:54.0743 5064 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll

14:36:54.0797 5064 netprofm - ok

14:36:54.0843 5064 [ B330CE846D1C672F640D3B3647CEF86D ] netr28ux C:\Windows\system32\DRIVERS\netr28ux.sys

14:36:54.0869 5064 netr28ux - ok

14:36:54.0872 5064 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe

14:36:54.0882 5064 NetTcpActivator - ok

14:36:54.0885 5064 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe

14:36:54.0895 5064 NetTcpPortSharing - ok

14:36:54.0909 5064 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys

14:36:54.0920 5064 nfrd960 - ok

14:36:54.0939 5064 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll

14:36:54.0972 5064 NlaSvc - ok

14:36:55.0179 5064 [ B9B72FAAAA41D59B73B88FE3DD737ED1 ] NOBU C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe

14:36:55.0251 5064 NOBU - ok

14:36:55.0273 5064 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys

14:36:55.0300 5064 Npfs - ok

14:36:55.0370 5064 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll

14:36:55.0441 5064 nsi - ok

14:36:55.0484 5064 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys

14:36:55.0582 5064 nsiproxy - ok

14:36:55.0682 5064 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys

14:36:55.0744 5064 Ntfs - ok

14:36:55.0760 5064 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys

14:36:55.0787 5064 Null - ok

14:36:55.0831 5064 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys

14:36:55.0853 5064 nvraid - ok

14:36:55.0871 5064 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys

14:36:55.0884 5064 nvstor - ok

14:36:55.0909 5064 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys

14:36:55.0931 5064 nv_agp - ok

14:36:55.0949 5064 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys

14:36:55.0962 5064 ohci1394 - ok

14:36:56.0008 5064 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

14:36:56.0041 5064 ose - ok

14:36:56.0264 5064 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

14:36:56.0380 5064 osppsvc - ok

14:36:56.0437 5064 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll

14:36:56.0555 5064 p2pimsvc - ok

14:36:56.0581 5064 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll

14:36:56.0599 5064 p2psvc - ok

14:36:56.0612 5064 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys

14:36:56.0626 5064 Parport - ok

14:36:56.0657 5064 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys

14:36:56.0689 5064 partmgr - ok

14:36:56.0708 5064 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll

14:36:56.0754 5064 PcaSvc - ok

14:36:56.0789 5064 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys

14:36:56.0812 5064 pci - ok

14:36:56.0825 5064 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys

14:36:56.0836 5064 pciide - ok

14:36:56.0849 5064 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys

14:36:56.0862 5064 pcmcia - ok

14:36:56.0871 5064 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys

14:36:56.0882 5064 pcw - ok

14:36:56.0898 5064 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys

14:36:56.0962 5064 PEAUTH - ok

14:36:57.0042 5064 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe

14:36:57.0092 5064 PerfHost - ok

14:36:57.0136 5064 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll

14:36:57.0221 5064 pla - ok

14:36:57.0245 5064 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll

14:36:57.0314 5064 PlugPlay - ok

14:36:57.0323 5064 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll

14:36:57.0368 5064 PNRPAutoReg - ok

14:36:57.0394 5064 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll

14:36:57.0417 5064 PNRPsvc - ok

14:36:57.0438 5064 [ 4F0878FD62D5F7444C5F1C4C66D9D293 ] Point64 C:\Windows\system32\DRIVERS\point64.sys

14:36:57.0447 5064 Point64 - ok

14:36:57.0463 5064 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll

14:36:57.0529 5064 PolicyAgent - ok

14:36:57.0563 5064 [ A2CCA4FB273E6050F17A0A416CFF2FCD ] Power C:\Windows\system32\umpo.dll

14:36:57.0629 5064 Power - ok

14:36:57.0652 5064 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys

14:36:57.0719 5064 PptpMiniport - ok

14:36:57.0745 5064 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys

14:36:57.0787 5064 Processor - ok

14:36:57.0825 5064 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll

14:36:57.0865 5064 ProfSvc - ok

14:36:57.0889 5064 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe

14:36:57.0909 5064 ProtectedStorage - ok

14:36:57.0924 5064 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys

14:36:57.0987 5064 Psched - ok

14:36:58.0011 5064 [ 87B04878A6D59D6C79251DC960C674C1 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys

14:36:58.0030 5064 PxHlpa64 - ok

14:36:58.0092 5064 [ DEE107066B957D9846D5036A5D40ED0C ] QBCFMonitorService C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe

14:36:58.0101 5064 QBCFMonitorService ( UnsignedFile.Multi.Generic ) - warning

14:36:58.0101 5064 QBCFMonitorService - detected UnsignedFile.Multi.Generic (1)

14:36:58.0125 5064 [ 6BEE1814470DC12FA20C53DFC3C97EBB ] QBFCService C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe

14:36:58.0155 5064 QBFCService ( UnsignedFile.Multi.Generic ) - warning

14:36:58.0155 5064 QBFCService - detected UnsignedFile.Multi.Generic (1)

14:36:58.0216 5064 [ 147552E28311DB3E86188A356A7A9F9C ] QBVSS C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe

14:36:58.0273 5064 QBVSS ( UnsignedFile.Multi.Generic ) - warning

14:36:58.0273 5064 QBVSS - detected UnsignedFile.Multi.Generic (1)

14:36:58.0326 5064 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys

14:36:58.0376 5064 ql2300 - ok

14:36:58.0393 5064 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys

14:36:58.0405 5064 ql40xx - ok

14:36:58.0427 5064 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll

14:36:58.0446 5064 QWAVE - ok

14:36:58.0456 5064 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys

14:36:58.0489 5064 QWAVEdrv - ok

14:36:58.0574 5064 [ 37C3272E58976598BEF1CDF321019209 ] RalinkRegistryWriter C:\Program Files (x86)\NETGEAR\WNDA4100\Service\RaRegistry.exe

14:36:58.0599 5064 RalinkRegistryWriter - ok

14:36:58.0615 5064 [ 25DAAD73732B51A46B11C6DF788F3322 ] RalinkRegistryWriter64 C:\Program Files (x86)\NETGEAR\WNDA4100\Service\RaRegistry64.exe

14:36:58.0630 5064 RalinkRegistryWriter64 - ok

14:36:58.0641 5064 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys

14:36:58.0706 5064 RasAcd - ok

14:36:58.0741 5064 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys

14:36:58.0778 5064 RasAgileVpn - ok

14:36:58.0787 5064 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll

14:36:58.0853 5064 RasAuto - ok

14:36:58.0873 5064 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys

14:36:58.0940 5064 Rasl2tp - ok

14:36:58.0964 5064 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll

14:36:59.0017 5064 RasMan - ok

14:36:59.0043 5064 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys

14:36:59.0103 5064 RasPppoe - ok

14:36:59.0131 5064 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys

14:36:59.0160 5064 RasSstp - ok

14:36:59.0176 5064 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys

14:36:59.0206 5064 rdbss - ok

14:36:59.0213 5064 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys

14:36:59.0229 5064 rdpbus - ok

14:36:59.0246 5064 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys

14:36:59.0273 5064 RDPCDD - ok

14:36:59.0287 5064 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys

14:36:59.0344 5064 RDPENCDD - ok

14:36:59.0365 5064 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys

14:36:59.0392 5064 RDPREFMP - ok

14:36:59.0408 5064 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys

14:36:59.0435 5064 RDPWD - ok

14:36:59.0453 5064 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys

14:36:59.0466 5064 rdyboost - ok

14:36:59.0480 5064 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll

14:36:59.0511 5064 RemoteAccess - ok

14:36:59.0524 5064 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll

14:36:59.0555 5064 RemoteRegistry - ok

14:36:59.0622 5064 [ 3C957189B31C34D3AD21967B12B6AED7 ] RoxMediaDB12OEM C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe

14:36:59.0670 5064 RoxMediaDB12OEM - ok

14:36:59.0690 5064 [ 2B73088CC2CA757A172B425C9398E5BC ] RoxWatch12 C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe

14:36:59.0702 5064 RoxWatch12 - ok

14:36:59.0711 5064 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll

14:36:59.0757 5064 RpcEptMapper - ok

14:36:59.0793 5064 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe

14:36:59.0816 5064 RpcLocator - ok

14:36:59.0849 5064 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll

14:36:59.0891 5064 RpcSs - ok

14:36:59.0899 5064 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys

14:36:59.0949 5064 rspndr - ok

14:36:59.0982 5064 [ EE082E06A82FF630351D1E0EBBD3D8D0 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys

14:36:59.0996 5064 RTL8167 - ok

14:37:00.0004 5064 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe

14:37:00.0017 5064 SamSs - ok

14:37:00.0025 5064 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys

14:37:00.0037 5064 sbp2port - ok

14:37:00.0052 5064 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll

14:37:00.0083 5064 SCardSvr - ok

14:37:00.0095 5064 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys

14:37:00.0142 5064 scfilter - ok

14:37:00.0196 5064 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll

14:37:00.0258 5064 Schedule - ok

14:37:00.0284 5064 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll

14:37:00.0326 5064 SCPolicySvc - ok

14:37:00.0338 5064 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll

14:37:00.0358 5064 SDRSVC - ok

14:37:00.0372 5064 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys

14:37:00.0436 5064 secdrv - ok

14:37:00.0464 5064 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll

14:37:00.0492 5064 seclogon - ok

14:37:00.0506 5064 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll

14:37:00.0572 5064 SENS - ok

14:37:00.0607 5064 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll

14:37:00.0626 5064 SensrSvc - ok

14:37:00.0633 5064 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys

14:37:00.0678 5064 Serenum - ok

14:37:00.0708 5064 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys

14:37:00.0753 5064 Serial - ok

14:37:00.0791 5064 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys

14:37:00.0828 5064 sermouse - ok

14:37:00.0854 5064 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll

14:37:00.0907 5064 SessionEnv - ok

14:37:00.0917 5064 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys

14:37:00.0931 5064 sffdisk - ok

14:37:00.0935 5064 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys

14:37:00.0950 5064 sffp_mmc - ok

14:37:00.0960 5064 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys

14:37:00.0975 5064 sffp_sd - ok

14:37:00.0986 5064 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys

14:37:00.0998 5064 sfloppy - ok

14:37:01.0027 5064 [ C6CC9297BD53E5229653303E556AA539 ] Sftfs C:\Windows\system32\DRIVERS\Sftfslh.sys

14:37:01.0043 5064 Sftfs - ok

14:37:01.0117 5064 [ 13693B6354DD6E72DC5131DA7D764B90 ] sftlist C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

14:37:01.0138 5064 sftlist - ok

14:37:01.0160 5064 [ 390AA7BC52CEE43F6790CDEA1E776703 ] Sftplay C:\Windows\system32\DRIVERS\Sftplaylh.sys

14:37:01.0171 5064 Sftplay - ok

14:37:01.0179 5064 [ 617E29A0B0A2807466560D4C4E338D3E ] Sftredir C:\Windows\system32\DRIVERS\Sftredirlh.sys

14:37:01.0188 5064 Sftredir - ok

14:37:01.0251 5064 [ 29DDEA72C5BDF61D62F4D438DC0E497C ] SftService C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE

14:37:01.0317 5064 SftService - ok

14:37:01.0325 5064 [ 8F571F016FA1976F445147E9E6C8AE9B ] Sftvol C:\Windows\system32\DRIVERS\Sftvollh.sys

14:37:01.0333 5064 Sftvol - ok

14:37:01.0344 5064 [ C3CDDD18F43D44AB713CF8C4916F7696 ] sftvsa C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

14:37:01.0355 5064 sftvsa - ok

14:37:01.0397 5064 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll

14:37:01.0428 5064 SharedAccess - ok

14:37:01.0443 5064 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll

14:37:01.0491 5064 ShellHWDetection - ok

14:37:01.0520 5064 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys

14:37:01.0541 5064 SiSRaid2 - ok

14:37:01.0552 5064 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys

14:37:01.0564 5064 SiSRaid4 - ok

14:37:01.0571 5064 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys

14:37:01.0621 5064 Smb - ok

14:37:01.0672 5064 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe

14:37:01.0717 5064 SNMPTRAP - ok

14:37:01.0740 5064 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys

14:37:01.0751 5064 spldr - ok

14:37:01.0783 5064 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe

14:37:01.0813 5064 Spooler - ok

14:37:01.0891 5064 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe

14:37:01.0953 5064 sppsvc - ok

14:37:01.0964 5064 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll

14:37:01.0993 5064 sppuinotify - ok

14:37:02.0011 5064 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys

14:37:02.0078 5064 srv - ok

14:37:02.0093 5064 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys

14:37:02.0128 5064 srv2 - ok

14:37:02.0151 5064 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys

14:37:02.0163 5064 srvnet - ok

14:37:02.0176 5064 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll

14:37:02.0206 5064 SSDPSRV - ok

14:37:02.0217 5064 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll

14:37:02.0246 5064 SstpSvc - ok

14:37:02.0255 5064 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys

14:37:02.0266 5064 stexstor - ok

14:37:02.0289 5064 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll

14:37:02.0309 5064 stisvc - ok

14:37:02.0352 5064 [ 7731F46EC0D687A931CBA063E8F90EF0 ] stllssvr C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe

14:37:02.0369 5064 stllssvr - ok

14:37:02.0379 5064 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys

14:37:02.0392 5064 swenum - ok

14:37:02.0404 5064 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll

14:37:02.0461 5064 swprv - ok

14:37:02.0504 5064 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll

14:37:02.0566 5064 SysMain - ok

14:37:02.0593 5064 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll

14:37:02.0611 5064 TabletInputService - ok

14:37:02.0621 5064 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll

14:37:02.0667 5064 TapiSrv - ok

14:37:02.0690 5064 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll

14:37:02.0720 5064 TBS - ok

14:37:02.0766 5064 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\Windows\system32\drivers\tcpip.sys

14:37:02.0828 5064 Tcpip - ok

14:37:02.0869 5064 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys

14:37:02.0897 5064 TCPIP6 - ok

14:37:02.0908 5064 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys

14:37:02.0920 5064 tcpipreg - ok

14:37:02.0933 5064 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys

14:37:02.0997 5064 TDPIPE - ok

14:37:03.0012 5064 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys

14:37:03.0029 5064 TDTCP - ok

14:37:03.0049 5064 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys

14:37:03.0086 5064 tdx - ok

14:37:03.0099 5064 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys

14:37:03.0109 5064 TermDD - ok

14:37:03.0128 5064 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll

14:37:03.0198 5064 TermService - ok

14:37:03.0222 5064 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll

14:37:03.0266 5064 Themes - ok

14:37:03.0297 5064 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll

14:37:03.0337 5064 THREADORDER - ok

14:37:03.0352 5064 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll

14:37:03.0419 5064 TrkWks - ok

14:37:03.0473 5064 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

14:37:03.0515 5064 TrustedInstaller - ok

14:37:03.0523 5064 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys

14:37:03.0569 5064 tssecsrv - ok

14:37:03.0582 5064 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys

14:37:03.0611 5064 TsUsbFlt - ok

14:37:03.0620 5064 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys

14:37:03.0633 5064 TsUsbGD - ok

14:37:03.0652 5064 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys

14:37:03.0700 5064 tunnel - ok

14:37:03.0730 5064 [ 4FD2F1366055D55F0D10B2568526AB78 ] U2SP C:\Windows\system32\DRIVERS\u2s2kxp64.sys

14:37:03.0740 5064 U2SP - ok

14:37:03.0754 5064 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys

14:37:03.0765 5064 uagp35 - ok

14:37:03.0808 5064 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys

14:37:03.0850 5064 udfs - ok

14:37:03.0879 5064 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe

14:37:03.0894 5064 UI0Detect - ok

14:37:03.0916 5064 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys

14:37:03.0927 5064 uliagpkx - ok

14:37:03.0940 5064 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys

14:37:03.0976 5064 umbus - ok

14:37:04.0018 5064 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys

14:37:04.0066 5064 UmPass - ok

14:37:04.0107 5064 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll

14:37:04.0165 5064 upnphost - ok

14:37:04.0189 5064 [ 19AD7990C0B67E48DAC5B26F99628223 ] usbccgp C:\Windows\system32\drivers\usbccgp.sys

14:37:04.0252 5064 usbccgp - ok

14:37:04.0268 5064 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys

14:37:04.0290 5064 usbcir - ok

14:37:04.0300 5064 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys

14:37:04.0331 5064 usbehci - ok

14:37:04.0372 5064 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys

14:37:04.0415 5064 usbhub - ok

14:37:04.0444 5064 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys

14:37:04.0484 5064 usbohci - ok

14:37:04.0515 5064 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys

14:37:04.0554 5064 usbprint - ok

14:37:04.0581 5064 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS

14:37:04.0613 5064 USBSTOR - ok

14:37:04.0627 5064 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys

14:37:04.0669 5064 usbuhci - ok

14:37:04.0703 5064 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll

14:37:04.0772 5064 UxSms - ok

14:37:04.0791 5064 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe

14:37:04.0803 5064 VaultSvc - ok

14:37:04.0812 5064 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys

14:37:04.0823 5064 vdrvroot - ok

14:37:04.0864 5064 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe

14:37:04.0945 5064 vds - ok

14:37:04.0970 5064 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys

14:37:04.0996 5064 vga - ok

14:37:05.0014 5064 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys

14:37:05.0041 5064 VgaSave - ok

14:37:05.0058 5064 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys

14:37:05.0071 5064 vhdmp - ok

14:37:05.0080 5064 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys

14:37:05.0090 5064 viaide - ok

14:37:05.0101 5064 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys

14:37:05.0112 5064 volmgr - ok

14:37:05.0122 5064 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys

14:37:05.0137 5064 volmgrx - ok

14:37:05.0142 5064 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys

14:37:05.0155 5064 volsnap - ok

14:37:05.0183 5064 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys

14:37:05.0205 5064 vsmraid - ok

14:37:05.0237 5064 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe

14:37:05.0332 5064 VSS - ok

14:37:05.0361 5064 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys

14:37:05.0404 5064 vwifibus - ok

14:37:05.0437 5064 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys

14:37:05.0453 5064 vwififlt - ok

14:37:05.0475 5064 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys

14:37:05.0490 5064 vwifimp - ok

14:37:05.0526 5064 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll

14:37:05.0559 5064 W32Time - ok

14:37:05.0569 5064 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys

14:37:05.0600 5064 WacomPen - ok

14:37:05.0628 5064 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys

14:37:05.0696 5064 WANARP - ok

14:37:05.0699 5064 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys

14:37:05.0725 5064 Wanarpv6 - ok

14:37:05.0791 5064 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe

14:37:05.0846 5064 WatAdminSvc - ok

14:37:05.0897 5064 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe

14:37:05.0985 5064 wbengine - ok

14:37:06.0005 5064 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll

14:37:06.0025 5064 WbioSrvc - ok

14:37:06.0037 5064 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll

14:37:06.0059 5064 wcncsvc - ok

14:37:06.0074 5064 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

14:37:06.0098 5064 WcsPlugInService - ok

14:37:06.0110 5064 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys

14:37:06.0121 5064 Wd - ok

14:37:06.0145 5064 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys

14:37:06.0167 5064 Wdf01000 - ok

14:37:06.0200 5064 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll

14:37:06.0306 5064 WdiServiceHost - ok

14:37:06.0311 5064 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll

14:37:06.0333 5064 WdiSystemHost - ok

14:37:06.0350 5064 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll

14:37:06.0386 5064 WebClient - ok

14:37:06.0416 5064 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll

14:37:06.0486 5064 Wecsvc - ok

14:37:06.0514 5064 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll

14:37:06.0545 5064 wercplsupport - ok

14:37:06.0571 5064 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll

14:37:06.0601 5064 WerSvc - ok

14:37:06.0614 5064 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys

14:37:06.0641 5064 WfpLwf - ok

14:37:06.0665 5064 [ B14EF15BD757FA488F9C970EEE9C0D35 ] WimFltr C:\Windows\system32\DRIVERS\wimfltr.sys

14:37:06.0678 5064 WimFltr - ok

14:37:06.0689 5064 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys

14:37:06.0700 5064 WIMMount - ok

14:37:06.0734 5064 WinDefend - ok

14:37:06.0738 5064 WinHttpAutoProxySvc - ok

14:37:06.0773 5064 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll

14:37:06.0821 5064 Winmgmt - ok

14:37:06.0858 5064 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll

14:37:06.0938 5064 WinRM - ok

14:37:06.0958 5064 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys

14:37:06.0972 5064 WinUsb - ok

14:37:06.0998 5064 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll

14:37:07.0048 5064 Wlansvc - ok

14:37:07.0111 5064 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe

14:37:07.0130 5064 wlcrasvc - ok

14:37:07.0196 5064 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

14:37:07.0235 5064 wlidsvc - ok

14:37:07.0243 5064 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys

14:37:07.0274 5064 WmiAcpi - ok

14:37:07.0316 5064 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe

14:37:07.0367 5064 wmiApSrv - ok

14:37:07.0372 5064 WMPNetworkSvc - ok

14:37:07.0398 5064 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll

14:37:07.0432 5064 WPCSvc - ok

14:37:07.0464 5064 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll

14:37:07.0492 5064 WPDBusEnum - ok

14:37:07.0499 5064 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys

14:37:07.0526 5064 ws2ifsl - ok

14:37:07.0554 5064 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll

14:37:07.0602 5064 wscsvc - ok

14:37:07.0635 5064 [ 8D918B1DB190A4D9B1753A66FA8C96E8 ] WSDPrintDevice C:\Windows\system32\DRIVERS\WSDPrint.sys

14:37:07.0649 5064 WSDPrintDevice - ok

14:37:07.0652 5064 WSearch - ok

14:37:07.0712 5064 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll

14:37:07.0756 5064 wuauserv - ok

14:37:07.0783 5064 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys

14:37:07.0822 5064 WudfPf - ok

14:37:07.0845 5064 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys

14:37:07.0883 5064 WUDFRd - ok

14:37:07.0913 5064 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll

14:37:07.0963 5064 wudfsvc - ok

14:37:07.0989 5064 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll

14:37:08.0009 5064 WwanSvc - ok

NunnBetter · December 10, 2012

14:37:08.0024 5064 ================ Scan global ===============================

14:37:08.0041 5064 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll

14:37:08.0049 5064 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll

14:37:08.0055 5064 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll

14:37:08.0071 5064 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

14:37:08.0100 5064 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe

14:37:08.0106 5064 [Global] - ok

14:37:08.0106 5064 ================ Scan MBR ==================================

14:37:08.0120 5064 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0

14:37:08.0330 5064 \Device\Harddisk0\DR0 ( TDSS File System ) - warning

14:37:08.0330 5064 \Device\Harddisk0\DR0 - detected TDSS File System (1)

14:37:08.0331 5064 ================ Scan VBR ==================================

14:37:08.0333 5064 [ 01B7EC96C4E7AD93BD3DECCC0413B802 ] \Device\Harddisk0\DR0\Partition1

14:37:08.0335 5064 \Device\Harddisk0\DR0\Partition1 - ok

14:37:08.0362 5064 [ 1936D34ADE4DD5A75710E703DB221DE3 ] \Device\Harddisk0\DR0\Partition2

14:37:08.0364 5064 \Device\Harddisk0\DR0\Partition2 - ok

14:37:08.0365 5064 ================ Scan active images ========================

14:37:08.0367 5064 [ 3E588B60EC061686BA05D33574A344C6 ] C:\Windows\System32\drivers\crashdmp.sys

14:37:08.0367 5064 C:\Windows\System32\drivers\crashdmp.sys - ok

14:37:08.0371 5064 [ 839B5FE3D48E9F35B22C21A3D5103F6C ] C:\Windows\System32\drivers\Dumpata.sys

14:37:08.0371 5064 C:\Windows\System32\drivers\Dumpata.sys - ok

14:37:08.0375 5064 [ 02062C0B390B7729EDC9E69C680A6F3C ] C:\Windows\System32\drivers\atapi.sys

14:37:08.0375 5064 C:\Windows\System32\drivers\atapi.sys - ok

14:37:08.0379 5064 [ 814DB88F2641691575A455CF25354098 ] C:\Windows\System32\drivers\dumpfve.sys

14:37:08.0379 5064 C:\Windows\System32\drivers\dumpfve.sys - ok

14:37:08.0383 5064 [ E71D826A1F3CE9C9DE3E77F2D02AFFBF ] C:\Windows\System32\drivers\aswSnx.sys

14:37:08.0383 5064 C:\Windows\System32\drivers\aswSnx.sys - ok

14:37:08.0387 5064 [ F036CE71586E93D94DAB220D7BDF4416 ] C:\Windows\System32\drivers\cdrom.sys

14:37:08.0387 5064 C:\Windows\System32\drivers\cdrom.sys - ok

14:37:08.0391 5064 [ 16A47CE2DECC9B099349A5F840654746 ] C:\Windows\System32\drivers\beep.sys

14:37:08.0391 5064 C:\Windows\System32\drivers\beep.sys - ok

14:37:08.0393 5064 [ 9899284589F75FA8724FF3D16AED75C1 ] C:\Windows\System32\drivers\null.sys

14:37:08.0393 5064 C:\Windows\System32\drivers\null.sys - ok

14:37:08.0395 5064 [ 53E92A310193CB3C03BEA963DE7D9CFC ] C:\Windows\System32\drivers\vga.sys

14:37:08.0395 5064 C:\Windows\System32\drivers\vga.sys - ok

14:37:08.0397 5064 [ E7353D59C9842BC7299FAEB7E7E09340 ] C:\Windows\System32\drivers\videoprt.sys

14:37:08.0398 5064 C:\Windows\System32\drivers\videoprt.sys - ok

14:37:08.0400 5064 [ FC438D1430B28618E2D0C7C332A710AD ] C:\Windows\System32\drivers\watchdog.sys

14:37:08.0400 5064 C:\Windows\System32\drivers\watchdog.sys - ok

14:37:08.0402 5064 [ 6EDC79D73745FD44C41B55B2D13D0B70 ] C:\Windows\System32\drivers\aswTdi.sys

14:37:08.0402 5064 C:\Windows\System32\drivers\aswTdi.sys - ok

14:37:08.0404 5064 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] C:\Windows\System32\drivers\msfs.sys

14:37:08.0404 5064 C:\Windows\System32\drivers\msfs.sys - ok

14:37:08.0406 5064 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] C:\Windows\System32\drivers\npfs.sys

14:37:08.0406 5064 C:\Windows\System32\drivers\npfs.sys - ok

14:37:08.0408 5064 [ CEA6CC257FC9B7715F1C2B4849286D24 ] C:\Windows\System32\drivers\RDPCDD.sys

14:37:08.0408 5064 C:\Windows\System32\drivers\RDPCDD.sys - ok

14:37:08.0410 5064 [ BB5971A4F00659529A5C44831AF22365 ] C:\Windows\System32\drivers\RDPENCDD.sys

14:37:08.0410 5064 C:\Windows\System32\drivers\RDPENCDD.sys - ok

14:37:08.0412 5064 [ 216F3FA57533D98E1F74DED70113177A ] C:\Windows\System32\drivers\RDPREFMP.sys

14:37:08.0412 5064 C:\Windows\System32\drivers\RDPREFMP.sys - ok

14:37:08.0414 5064 [ 6F020A220388ECA0AB6062DC27BD16B6 ] C:\Windows\System32\drivers\tdi.sys

14:37:08.0414 5064 C:\Windows\System32\drivers\tdi.sys - ok

14:37:08.0416 5064 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] C:\Windows\System32\drivers\tdx.sys

14:37:08.0416 5064 C:\Windows\System32\drivers\tdx.sys - ok

14:37:08.0418 5064 [ 1C7857B62DE5994A75B054A9FD4C3825 ] C:\Windows\System32\drivers\afd.sys

14:37:08.0418 5064 C:\Windows\System32\drivers\afd.sys - ok

14:37:08.0420 5064 [ 57768C7DB4681F2510F247F82EF31D4F ] C:\Windows\System32\drivers\aswRdr2.sys

14:37:08.0420 5064 C:\Windows\System32\drivers\aswRdr2.sys - ok

14:37:08.0422 5064 [ 09594D1089C523423B32A4229263F068 ] C:\Windows\System32\drivers\netbt.sys

14:37:08.0422 5064 C:\Windows\System32\drivers\netbt.sys - ok

14:37:08.0424 5064 [ 6BCC1D7D2FD2453957C5479A32364E52 ] C:\Windows\System32\drivers\ws2ifsl.sys

14:37:08.0424 5064 C:\Windows\System32\drivers\ws2ifsl.sys - ok

14:37:08.0426 5064 [ 86743D9F5D2B1048062B14B1D84501C4 ] C:\Windows\System32\drivers\netbios.sys

14:37:08.0426 5064 C:\Windows\System32\drivers\netbios.sys - ok

14:37:08.0428 5064 [ E7F5AE18AF4168178A642A9247C63001 ] C:\Windows\System32\drivers\nsiproxy.sys

14:37:08.0428 5064 C:\Windows\System32\drivers\nsiproxy.sys - ok

14:37:08.0430 5064 [ 0557CF5A2556BD58E26384169D72438D ] C:\Windows\System32\drivers\pacer.sys

14:37:08.0430 5064 C:\Windows\System32\drivers\pacer.sys - ok

14:37:08.0432 5064 [ 77F665941019A1594D887A74F301FA2F ] C:\Windows\System32\drivers\rdbss.sys

14:37:08.0432 5064 C:\Windows\System32\drivers\rdbss.sys - ok

14:37:08.0435 5064 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] C:\Windows\System32\drivers\termdd.sys

14:37:08.0435 5064 C:\Windows\System32\drivers\termdd.sys - ok

14:37:08.0437 5064 [ 6A3D66263414FF0D6FA754C646612F3F ] C:\Windows\System32\drivers\vwififlt.sys

14:37:08.0437 5064 C:\Windows\System32\drivers\vwififlt.sys - ok

14:37:08.0439 5064 [ 356AFD78A6ED4457169241AC3965230C ] C:\Windows\System32\drivers\wanarp.sys

14:37:08.0439 5064 C:\Windows\System32\drivers\wanarp.sys - ok

14:37:08.0441 5064 [ 611B23304BF067451A9FDEE01FBDD725 ] C:\Windows\System32\drivers\wfplwf.sys

14:37:08.0441 5064 C:\Windows\System32\drivers\wfplwf.sys - ok

14:37:08.0443 5064 [ 61583EE3C3A17003C4ACD0475646B4D3 ] C:\Windows\System32\drivers\blbdrive.sys

14:37:08.0443 5064 C:\Windows\System32\drivers\blbdrive.sys - ok

14:37:08.0445 5064 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] C:\Windows\System32\drivers\dfsc.sys

14:37:08.0445 5064 C:\Windows\System32\drivers\dfsc.sys - ok

14:37:08.0447 5064 [ 13096B05847EC78F0977F2C0F79E9AB3 ] C:\Windows\System32\drivers\discache.sys

14:37:08.0447 5064 C:\Windows\System32\drivers\discache.sys - ok

14:37:08.0449 5064 [ 1D684EFB269D24E02550536100799F9C ] C:\Windows\System32\drivers\Fp.sys

14:37:08.0449 5064 C:\Windows\System32\drivers\Fp.sys - ok

14:37:08.0451 5064 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] C:\Windows\System32\drivers\mssmbios.sys

14:37:08.0451 5064 C:\Windows\System32\drivers\mssmbios.sys - ok

14:37:08.0453 5064 [ 538A32E2C99BF073D4CA76C30BEDAA60 ] C:\Windows\System32\drivers\aswSP.sys

14:37:08.0453 5064 C:\Windows\System32\drivers\aswSP.sys - ok

14:37:08.0455 5064 [ 3566A8DAAFA27AF944F5D705EAA64894 ] C:\Windows\System32\drivers\tunnel.sys

14:37:08.0455 5064 C:\Windows\System32\drivers\tunnel.sys - ok

14:37:08.0457 5064 [ EFE5A0AF39A8E179624117C521F1E012 ] C:\Windows\System32\drivers\igdkmd64.sys

14:37:08.0457 5064 C:\Windows\System32\drivers\igdkmd64.sys - ok

14:37:08.0460 5064 [ F5BEE30450E18E6B83A5012C100616FD ] C:\Windows\System32\drivers\dxgkrnl.sys

14:37:08.0460 5064 C:\Windows\System32\drivers\dxgkrnl.sys - ok

14:37:08.0461 5064 [ CF95B85FF8D128385ABD411C8CA74DED ] C:\Windows\System32\ntdll.dll

14:37:08.0461 5064 C:\Windows\System32\ntdll.dll - ok

14:37:08.0463 5064 [ 1911A3356FA3F77CCC825CCBAC038C2A ] C:\Windows\System32\smss.exe

14:37:08.0463 5064 C:\Windows\System32\smss.exe - ok

14:37:08.0466 5064 [ 9CD68BDDF322535C02ADC8331013D13D ] C:\Windows\System32\drivers\dxgmms1.sys

14:37:08.0466 5064 C:\Windows\System32\drivers\dxgmms1.sys - ok

14:37:08.0468 5064 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] C:\Windows\System32\drivers\HECIx64.sys

14:37:08.0468 5064 C:\Windows\System32\drivers\HECIx64.sys - ok

14:37:08.0470 5064 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] C:\Windows\System32\drivers\hdaudbus.sys

14:37:08.0470 5064 C:\Windows\System32\drivers\hdaudbus.sys - ok

14:37:08.0472 5064 [ EE082E06A82FF630351D1E0EBBD3D8D0 ] C:\Windows\System32\drivers\Rt64win7.sys

14:37:08.0472 5064 C:\Windows\System32\drivers\Rt64win7.sys - ok

14:37:08.0474 5064 [ C025055FE7B87701EB042095DF1A2D7B ] C:\Windows\System32\drivers\usbehci.sys

14:37:08.0474 5064 C:\Windows\System32\drivers\usbehci.sys - ok

14:37:08.0476 5064 [ AE259C75F9A0B057B6BF9E9695632B09 ] C:\Windows\System32\drivers\usbport.sys

14:37:08.0476 5064 C:\Windows\System32\drivers\usbport.sys - ok

14:37:08.0478 5064 [ 7ECFF9B22276B73F43A99A15A6094E90 ] C:\Windows\System32\drivers\agilevpn.sys

14:37:08.0478 5064 C:\Windows\System32\drivers\agilevpn.sys - ok

14:37:08.0480 5064 [ 03EDB043586CCEBA243D689BDDA370A8 ] C:\Windows\System32\drivers\CompositeBus.sys

14:37:08.0480 5064 C:\Windows\System32\drivers\CompositeBus.sys - ok

14:37:08.0483 5064 [ ADA036632C664CAA754079041CF1F8C1 ] C:\Windows\System32\drivers\intelppm.sys

14:37:08.0483 5064 C:\Windows\System32\drivers\intelppm.sys - ok

14:37:08.0485 5064 [ 30639C932D9FEF22B31268FE25A1B6E5 ] C:\Windows\System32\drivers\ndistapi.sys

14:37:08.0485 5064 C:\Windows\System32\drivers\ndistapi.sys - ok

14:37:08.0487 5064 [ 53F7305169863F0A2BDDC49E116C2E11 ] C:\Windows\System32\drivers\ndiswan.sys

14:37:08.0487 5064 C:\Windows\System32\drivers\ndiswan.sys - ok

14:37:08.0489 5064 [ 471815800AE33E6F1C32FB1B97C490CA ] C:\Windows\System32\drivers\rasl2tp.sys

14:37:08.0489 5064 C:\Windows\System32\drivers\rasl2tp.sys - ok

14:37:08.0491 5064 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] C:\Windows\System32\drivers\kbdclass.sys

14:37:08.0491 5064 C:\Windows\System32\drivers\kbdclass.sys - ok

14:37:08.0493 5064 [ 7D27EA49F3C1F687D357E77A470AEA99 ] C:\Windows\System32\drivers\mouclass.sys

14:37:08.0493 5064 C:\Windows\System32\drivers\mouclass.sys - ok

14:37:08.0495 5064 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] C:\Windows\System32\drivers\raspppoe.sys

14:37:08.0495 5064 C:\Windows\System32\drivers\raspppoe.sys - ok

14:37:08.0497 5064 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] C:\Windows\System32\drivers\raspptp.sys

14:37:08.0497 5064 C:\Windows\System32\drivers\raspptp.sys - ok

14:37:08.0500 5064 [ E8B1E447B008D07FF47D016C2B0EEECB ] C:\Windows\System32\drivers\rassstp.sys

14:37:08.0500 5064 C:\Windows\System32\drivers\rassstp.sys - ok

14:37:08.0502 5064 [ 3B536A8BEC3B4F23FFDFD78B11A2AB93 ] C:\Windows\System32\autochk.exe

14:37:08.0502 5064 C:\Windows\System32\autochk.exe - ok

14:37:08.0504 5064 [ 24FBF5CC5C04150073C315A7C83521EE ] C:\Windows\System32\drivers\ks.sys

14:37:08.0504 5064 C:\Windows\System32\drivers\ks.sys - ok

14:37:08.0506 5064 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] C:\Windows\System32\drivers\swenum.sys

14:37:08.0506 5064 C:\Windows\System32\drivers\swenum.sys - ok

14:37:08.0508 5064 [ DC54A574663A895C8763AF0FA1FF7561 ] C:\Windows\System32\drivers\umbus.sys

14:37:08.0508 5064 C:\Windows\System32\drivers\umbus.sys - ok

14:37:08.0510 5064 [ 287C6C9410B111B68B52CA298F7B8C24 ] C:\Windows\System32\drivers\usbhub.sys

14:37:08.0510 5064 C:\Windows\System32\drivers\usbhub.sys - ok

14:37:08.0512 5064 [ A19DB004D954BBC9C4EC125711E1D1C2 ] C:\Windows\System32\wininet.dll

14:37:08.0512 5064 C:\Windows\System32\wininet.dll - ok

14:37:08.0514 5064 [ 9835E63E09F824D22B689D2BB789BAB9 ] C:\Windows\System32\comdlg32.dll

14:37:08.0514 5064 C:\Windows\System32\comdlg32.dll - ok

14:37:08.0516 5064 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] C:\Windows\System32\drivers\ndproxy.sys

14:37:08.0516 5064 C:\Windows\System32\drivers\ndproxy.sys - ok

14:37:08.0518 5064 [ 21D26064AEDB4988F785BB4A3A2C051E ] C:\Windows\System32\drivers\drmk.sys

14:37:08.0518 5064 C:\Windows\System32\drivers\drmk.sys - ok

14:37:08.0520 5064 [ 5C855932E4DF00B1B6F5F6F57E82B6C5 ] C:\Windows\System32\drivers\CHDRT64.sys

14:37:08.0521 5064 C:\Windows\System32\drivers\CHDRT64.sys - ok

14:37:08.0523 5064 [ FC727061C0F47C8059E88E05D5C8E381 ] C:\Windows\System32\drivers\IntcDAud.sys

14:37:08.0523 5064 C:\Windows\System32\drivers\IntcDAud.sys - ok

14:37:08.0525 5064 [ 6869281E78CB31A43E969F06B57347C4 ] C:\Windows\System32\drivers\ksthunk.sys

14:37:08.0525 5064 C:\Windows\System32\drivers\ksthunk.sys - ok

14:37:08.0527 5064 [ 32E11315B5126921FFD9074840EF13D3 ] C:\Windows\System32\drivers\portcls.sys

14:37:08.0527 5064 C:\Windows\System32\drivers\portcls.sys - ok

14:37:08.0529 5064 [ 044FE45FFD6AD40E3BBBE60B7F41BABE ] C:\Windows\System32\nsi.dll

14:37:08.0529 5064 C:\Windows\System32\nsi.dll - ok

14:37:08.0531 5064 [ 4BBFA57F594F7E8A8EDC8F377184C3F0 ] C:\Windows\System32\ws2_32.dll

14:37:08.0531 5064 C:\Windows\System32\ws2_32.dll - ok

14:37:08.0533 5064 [ B393753ECE9A9E2307CB1984ACF3DA9D ] C:\Windows\System32\drivers\mfeavfk.sys

14:37:08.0533 5064 C:\Windows\System32\drivers\mfeavfk.sys - ok

14:37:08.0535 5064 [ C52A1ABF03DD219375EA0F6A8BE941C3 ] C:\Windows\System32\drivers\mfefirek.sys

14:37:08.0535 5064 C:\Windows\System32\drivers\mfefirek.sys - ok

14:37:08.0537 5064 [ E519FD2CE6D57062400537C95C3B17FD ] C:\Windows\System32\urlmon.dll

14:37:08.0537 5064 C:\Windows\System32\urlmon.dll - ok

14:37:08.0539 5064 [ EAF41CFBA5281834CBC383C710AC7965 ] C:\Windows\System32\kernel32.dll

14:37:08.0539 5064 C:\Windows\System32\kernel32.dll - ok

14:37:08.0541 5064 [ C391FC68282A000CDF953F8B6B55D2EF ] C:\Windows\System32\msvcrt.dll

14:37:08.0541 5064 C:\Windows\System32\msvcrt.dll - ok

14:37:08.0543 5064 [ D202223587518B13D72D68937B7E3F70 ] C:\Windows\System32\lpk.dll

14:37:08.0543 5064 C:\Windows\System32\lpk.dll - ok

14:37:08.0545 5064 [ C06B32165E23A72A898B7A89679AD754 ] C:\Windows\System32\oleaut32.dll

14:37:08.0545 5064 C:\Windows\System32\oleaut32.dll - ok

14:37:08.0547 5064 [ 0611473C1AD9E2D991CD9482068417F7 ] C:\Windows\System32\rpcrt4.dll

14:37:08.0547 5064 C:\Windows\System32\rpcrt4.dll - ok

14:37:08.0549 5064 [ 83404DCBCE4925B6A5A77C5170F46D86 ] C:\Windows\System32\sechost.dll

14:37:08.0549 5064 C:\Windows\System32\sechost.dll - ok

14:37:08.0551 5064 [ EAF32CB8C1F810E4715B4DFBE785C7FF ] C:\Windows\System32\shlwapi.dll

14:37:08.0551 5064 C:\Windows\System32\shlwapi.dll - ok

14:37:08.0553 5064 [ C6689007B3A749C49A5438DCF36E0CE4 ] C:\Windows\System32\shell32.dll

14:37:08.0553 5064 C:\Windows\System32\shell32.dll - ok

14:37:08.0555 5064 [ 6F6D81F3D513D927EB6D393EEC7FF851 ] C:\Windows\System32\usp10.dll

14:37:08.0555 5064 C:\Windows\System32\usp10.dll - ok

14:37:08.0557 5064 [ C431EAF5CAA1C82CAC2534A2EAB348A3 ] C:\Windows\System32\msctf.dll

14:37:08.0557 5064 C:\Windows\System32\msctf.dll - ok

14:37:08.0559 5064 [ D87E1E59C73C1F98D5DED5B3850C40F5 ] C:\Windows\System32\psapi.dll

14:37:08.0559 5064 C:\Windows\System32\psapi.dll - ok

14:37:08.0561 5064 [ 6DF46D2BD74E3DA1B45F08F10D172732 ] C:\Windows\System32\advapi32.dll

14:37:08.0561 5064 C:\Windows\System32\advapi32.dll - ok

14:37:08.0563 5064 [ FE70103391A64039A921DBFFF9C7AB1B ] C:\Windows\System32\user32.dll

14:37:08.0563 5064 C:\Windows\System32\user32.dll - ok

14:37:08.0565 5064 [ AA2C08CE85653B1A0D2E4AB407FA176C ] C:\Windows\System32\imm32.dll

14:37:08.0565 5064 C:\Windows\System32\imm32.dll - ok

14:37:08.0567 5064 [ 4E4FFB09D895AA000DD56D1404F69A7E ] C:\Windows\System32\Wldap32.dll

14:37:08.0567 5064 C:\Windows\System32\Wldap32.dll - ok

14:37:08.0569 5064 [ F7CE0C81C545364020ED8203CF0A633E ] C:\Windows\System32\difxapi.dll

14:37:08.0569 5064 C:\Windows\System32\difxapi.dll - ok

14:37:08.0571 5064 [ 5D8E6C95156ED1F79A63D1EADE6F9ED5 ] C:\Windows\System32\setupapi.dll

14:37:08.0571 5064 C:\Windows\System32\setupapi.dll - ok

14:37:08.0573 5064 [ D25968D163EC487A50C8C6A91D4134B4 ] C:\Windows\System32\iertutil.dll

14:37:08.0573 5064 C:\Windows\System32\iertutil.dll - ok

14:37:08.0575 5064 [ A1BE6A720D02E37F72E9CD89AE9CB3CF ] C:\Windows\System32\imagehlp.dll

14:37:08.0575 5064 C:\Windows\System32\imagehlp.dll - ok

14:37:08.0577 5064 [ 6C60B5ACA7442EFB794082CDACFC001C ] C:\Windows\System32\ole32.dll

14:37:08.0577 5064 C:\Windows\System32\ole32.dll - ok

14:37:08.0579 5064 [ 25983DE69B57142039AC8D95E71CD9C9 ] C:\Windows\System32\clbcatq.dll

14:37:08.0579 5064 C:\Windows\System32\clbcatq.dll - ok

14:37:08.0581 5064 [ 1084AA52CCC324EA54C7121FA24C2221 ] C:\Windows\System32\gdi32.dll

14:37:08.0581 5064 C:\Windows\System32\gdi32.dll - ok

14:37:08.0584 5064 [ 28C0B5024F5C5A438E78B188CFC81B7F ] C:\Windows\System32\normaliz.dll

14:37:08.0584 5064 C:\Windows\System32\normaliz.dll - ok

14:37:08.0586 5064 [ 2477A28081BDAEE622CF045ACF8EE124 ] C:\Windows\System32\cfgmgr32.dll

14:37:08.0586 5064 C:\Windows\System32\cfgmgr32.dll - ok

14:37:08.0588 5064 [ 06FEC9E8117103BB1141A560E98077DA ] C:\Windows\System32\devobj.dll

14:37:08.0588 5064 C:\Windows\System32\devobj.dll - ok

14:37:08.0590 5064 [ CF0997050DB2B359D7F4103092296A1B ] C:\Windows\System32\KernelBase.dll

14:37:08.0590 5064 C:\Windows\System32\KernelBase.dll - ok

14:37:08.0592 5064 [ 12EE6FE9268CEE6D90FDCCBF89236C65 ] C:\Windows\System32\crypt32.dll

14:37:08.0592 5064 C:\Windows\System32\crypt32.dll - ok

14:37:08.0594 5064 [ 14DFDEAF4E589ED3F1FF187A86B9408C ] C:\Windows\System32\comctl32.dll

14:37:08.0594 5064 C:\Windows\System32\comctl32.dll - ok

14:37:08.0596 5064 [ AA06902362B1422D7A7DA7061E07C624 ] C:\Windows\System32\wintrust.dll

14:37:08.0596 5064 C:\Windows\System32\wintrust.dll - ok

14:37:08.0598 5064 [ 884415BD4269C02EAF8E2613BF85500D ] C:\Windows\System32\msasn1.dll

14:37:08.0598 5064 C:\Windows\System32\msasn1.dll - ok

14:37:08.0600 5064 [ 9C278785347BCC991F8EA2999D90F58D ] C:\Windows\SysWOW64\normaliz.dll

14:37:08.0600 5064 C:\Windows\SysWOW64\normaliz.dll - ok

14:37:08.0602 5064 [ 8B0E40E7E8BBF5ACF390465609D89FF1 ] C:\Windows\System32\drivers\hidclass.sys

14:37:08.0602 5064 C:\Windows\System32\drivers\hidclass.sys - ok

14:37:08.0604 5064 [ 49EE2E52E6CD03947DAD72F65367BE06 ] C:\Windows\System32\drivers\hidparse.sys

14:37:08.0604 5064 C:\Windows\System32\drivers\hidparse.sys - ok

14:37:08.0607 5064 [ 9592090A7E2B61CD582B612B6DF70536 ] C:\Windows\System32\drivers\hidusb.sys

14:37:08.0607 5064 C:\Windows\System32\drivers\hidusb.sys - ok

14:37:08.0609 5064 [ CCA2AB1752A61F29C3C941CD79D78CEA ] C:\Windows\System32\drivers\usbd.sys

14:37:08.0609 5064 C:\Windows\System32\drivers\usbd.sys - ok

14:37:08.0611 5064 [ BF24D6F2ED97FE830BFD52B246F98E67 ] C:\Windows\System32\drivers\dxapi.sys

14:37:08.0611 5064 C:\Windows\System32\drivers\dxapi.sys - ok

14:37:08.0613 5064 [ 34B419EDEAC6F12B34908DE3758F98C9 ] C:\Windows\System32\win32k.sys

14:37:08.0613 5064 C:\Windows\System32\win32k.sys - ok

14:37:08.0615 5064 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] C:\Windows\System32\drivers\kbdhid.sys

14:37:08.0615 5064 C:\Windows\System32\drivers\kbdhid.sys - ok

14:37:08.0617 5064 [ 73188F58FB384E75C4063D29413CEE3D ] C:\Windows\System32\drivers\usbprint.sys

14:37:08.0617 5064 C:\Windows\System32\drivers\usbprint.sys - ok

14:37:08.0619 5064 [ FED648B01349A3C8395A5169DB5FB7D6 ] C:\Windows\System32\drivers\USBSTOR.SYS

14:37:08.0619 5064 C:\Windows\System32\drivers\USBSTOR.SYS - ok

14:37:08.0621 5064 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] C:\Windows\System32\drivers\mouhid.sys

14:37:08.0621 5064 C:\Windows\System32\drivers\mouhid.sys - ok

14:37:08.0623 5064 [ 60C2862B4BF0FD9F582EF344C2B1EC72 ] C:\Windows\System32\csrss.exe

14:37:08.0623 5064 C:\Windows\System32\csrss.exe - ok

14:37:08.0625 5064 [ 96F587CA26A6AA894BD8CACE4540CFFC ] C:\Windows\System32\csrsrv.dll

14:37:08.0625 5064 C:\Windows\System32\csrsrv.dll - ok

14:37:08.0627 5064 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\System32\basesrv.dll

14:37:08.0627 5064 C:\Windows\System32\basesrv.dll - ok

14:37:08.0629 5064 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\System32\winsrv.dll

14:37:08.0629 5064 C:\Windows\System32\winsrv.dll - ok

14:37:08.0631 5064 [ B330CE846D1C672F640D3B3647CEF86D ] C:\Windows\System32\drivers\netr28ux.sys

14:37:08.0631 5064 C:\Windows\System32\drivers\netr28ux.sys - ok

14:37:08.0633 5064 [ CB624C0035412AF0DEBEC78C41F5CA1B ] C:\Windows\System32\drivers\serenum.sys

14:37:08.0633 5064 C:\Windows\System32\drivers\serenum.sys - ok

14:37:08.0635 5064 [ 4FD2F1366055D55F0D10B2568526AB78 ] C:\Windows\System32\drivers\u2s2kxp64.sys

14:37:08.0635 5064 C:\Windows\System32\drivers\u2s2kxp64.sys - ok

14:37:08.0637 5064 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] C:\Windows\System32\drivers\vwifibus.sys

14:37:08.0637 5064 C:\Windows\System32\drivers\vwifibus.sys - ok

14:37:08.0640 5064 [ B03D591DC7DA45ECE20B3B467E6AADAA ] C:\Windows\System32\drivers\monitor.sys

14:37:08.0640 5064 C:\Windows\System32\drivers\monitor.sys - ok

14:37:08.0642 5064 [ 4F0878FD62D5F7444C5F1C4C66D9D293 ] C:\Windows\System32\drivers\point64.sys

14:37:08.0642 5064 C:\Windows\System32\drivers\point64.sys - ok

14:37:08.0644 5064 [ F29FE765E1448EF371CFE05BFAC74ADB ] C:\Windows\System32\tsddd.dll

14:37:08.0644 5064 C:\Windows\System32\tsddd.dll - ok

14:37:08.0645 5064 [ 78523A26F5604C0568FE9D1CE86E36F4 ] C:\Windows\System32\KBDUS.DLL

14:37:08.0646 5064 C:\Windows\System32\KBDUS.DLL - ok

14:37:08.0648 5064 [ 2C942733A5983DD4502219FF37C7EBC7 ] C:\Windows\System32\profapi.dll

14:37:08.0648 5064 C:\Windows\System32\profapi.dll - ok

14:37:08.0650 5064 [ C2A8CB1275ECB85D246A9ECC02A728E3 ] C:\Windows\System32\RpcRtRemote.dll

14:37:08.0650 5064 C:\Windows\System32\RpcRtRemote.dll - ok

14:37:08.0652 5064 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\System32\sxssrv.dll

14:37:08.0652 5064 C:\Windows\System32\sxssrv.dll - ok

14:37:08.0654 5064 [ 94355C28C1970635A31B3FE52EB7CEBA ] C:\Windows\System32\wininit.exe

14:37:08.0654 5064 C:\Windows\System32\wininit.exe - ok

14:37:08.0656 5064 [ 05569A79BF4693670B709144382D02D4 ] C:\Windows\System32\cdd.dll

14:37:08.0656 5064 C:\Windows\System32\cdd.dll - ok

14:37:08.0658 5064 [ B26B1801356760841C3BC69F9F91537F ] C:\Windows\System32\WlS0WndH.dll

14:37:08.0658 5064 C:\Windows\System32\WlS0WndH.dll - ok

14:37:08.0660 5064 [ 9CEAD32E79A62150FE9F8557E58E008B ] C:\Windows\System32\sxs.dll

14:37:08.0660 5064 C:\Windows\System32\sxs.dll - ok

14:37:08.0661 5064 [ 784FA3DF338E2E8F5F0389D6FAC428AF ] C:\Windows\System32\cryptbase.dll

14:37:08.0661 5064 C:\Windows\System32\cryptbase.dll - ok

14:37:08.0663 5064 [ 90499F3163A9F815CF196A205EA3CD5D ] C:\Windows\System32\apphelp.dll

14:37:08.0663 5064 C:\Windows\System32\apphelp.dll - ok

14:37:08.0665 5064 [ 1151B1BAA6F350B1DB6598E0FEA7C457 ] C:\Windows\System32\winlogon.exe

14:37:08.0665 5064 C:\Windows\System32\winlogon.exe - ok

14:37:08.0667 5064 [ 0D9764D58C5EFD672B7184854B152E5E ] C:\Windows\System32\winsta.dll

14:37:08.0667 5064 C:\Windows\System32\winsta.dll - ok

14:37:08.0669 5064 [ 66A6063D0BAAD3F7B2B9868859E0743B ] C:\Windows\System32\lsasrv.dll

14:37:08.0669 5064 C:\Windows\System32\lsasrv.dll - ok

14:37:08.0671 5064 [ C118A82CD78818C29AB228366EBF81C3 ] C:\Windows\System32\lsass.exe

14:37:08.0671 5064 C:\Windows\System32\lsass.exe - ok

14:37:08.0673 5064 [ 9662EE182644511439F1C53745DC1C88 ] C:\Windows\System32\lsm.exe

14:37:08.0673 5064 C:\Windows\System32\lsm.exe - ok

14:37:08.0675 5064 [ E914A50A151DFFE63D3935226DB5E2C1 ] C:\Windows\System32\scext.dll

14:37:08.0675 5064 C:\Windows\System32\scext.dll - ok

14:37:08.0677 5064 [ 0144D8D75A0B12938AEEE859E3310A46 ] C:\Windows\System32\secur32.dll

14:37:08.0677 5064 C:\Windows\System32\secur32.dll - ok

14:37:08.0679 5064 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\System32\Services.exe

14:37:08.0679 5064 C:\Windows\System32\Services.exe - ok

14:37:08.0681 5064 [ B66BC8B20B7F33975865B1DF99783FD8 ] C:\Windows\System32\sspicli.dll

14:37:08.0681 5064 C:\Windows\System32\sspicli.dll - ok

14:37:08.0683 5064 [ 3A0CE5FE781708CD6ABD55313607EC8B ] C:\Windows\System32\sspisrv.dll

14:37:08.0683 5064 C:\Windows\System32\sspisrv.dll - ok

14:37:08.0685 5064 [ BBCDF350817BA86416C0F06B6981BE8D ] C:\Windows\System32\scesrv.dll

14:37:08.0685 5064 C:\Windows\System32\scesrv.dll - ok

14:37:08.0687 5064 [ 68083118797CAF30FB2EA3E71494D67E ] C:\Windows\System32\sysntfy.dll

14:37:08.0687 5064 C:\Windows\System32\sysntfy.dll - ok

14:37:08.0689 5064 [ DEE7267C5D232A3B816866872CE199E6 ] C:\Windows\System32\wmsgapi.dll

14:37:08.0689 5064 C:\Windows\System32\wmsgapi.dll - ok

14:37:08.0691 5064 [ 3A061472B38233BAFF9CFEFF2E49C46B ] C:\Windows\System32\cryptdll.dll

14:37:08.0691 5064 C:\Windows\System32\cryptdll.dll - ok

14:37:08.0693 5064 [ A744BA6E04C8AA4592818178DBF89521 ] C:\Windows\System32\samsrv.dll

14:37:08.0693 5064 C:\Windows\System32\samsrv.dll - ok

14:37:08.0695 5064 [ 3A9C9BAF610B0DD4967086040B3B62A9 ] C:\Windows\System32\srvcli.dll

14:37:08.0695 5064 C:\Windows\System32\srvcli.dll - ok

14:37:08.0697 5064 [ 3C073B0C596A0AF84933E7406766B040 ] C:\Windows\System32\wevtapi.dll

14:37:08.0697 5064 C:\Windows\System32\wevtapi.dll - ok

14:37:08.0699 5064 [ 7FBEBD2229EA5FD48D41B199EC2D541C ] C:\Windows\System32\authz.dll

14:37:08.0699 5064 C:\Windows\System32\authz.dll - ok

14:37:08.0701 5064 [ B9A95365E52F421A20E1501935FADDA5 ] C:\Windows\System32\bcrypt.dll

14:37:08.0701 5064 C:\Windows\System32\bcrypt.dll - ok

14:37:08.0703 5064 [ 86FE1B1F8FD42CD0DB641AB1CDB13093 ] C:\Windows\System32\cngaudit.dll

14:37:08.0703 5064 C:\Windows\System32\cngaudit.dll - ok

14:37:08.0705 5064 [ 02B64609F865A39365FF88580DF11738 ] C:\Windows\System32\msprivs.dll

14:37:08.0705 5064 C:\Windows\System32\msprivs.dll - ok

14:37:08.0707 5064 [ 400645085A91BF3EB0271329B95AE0BE ] C:\Windows\System32\ncrypt.dll

14:37:08.0707 5064 C:\Windows\System32\ncrypt.dll - ok

14:37:08.0709 5064 [ C6505DE3561537BA1004D638C2F93F2F ] C:\Windows\System32\netjoin.dll

14:37:08.0709 5064 C:\Windows\System32\netjoin.dll - ok

14:37:08.0711 5064 [ 50532FCD7ECF02DD169CE5C485F02534 ] C:\Windows\System32\negoexts.dll

14:37:08.0711 5064 C:\Windows\System32\negoexts.dll - ok

14:37:08.0713 5064 [ D0C2FBB6D97416B0166478FC7AE2B212 ] C:\Windows\System32\cryptsp.dll

14:37:08.0713 5064 C:\Windows\System32\cryptsp.dll - ok

14:37:08.0715 5064 [ 44E1A196DFCB53B01FE4B855C3B56A15 ] C:\Windows\System32\kerberos.dll

14:37:08.0715 5064 C:\Windows\System32\kerberos.dll - ok

14:37:08.0717 5064 [ EF12B8385AA2849999008A977918F96B ] C:\Windows\System32\msv1_0.dll

14:37:08.0717 5064 C:\Windows\System32\msv1_0.dll - ok

14:37:08.0719 5064 [ 1D5185A4C7E6695431AE4B55C3D7D333 ] C:\Windows\System32\mswsock.dll

14:37:08.0719 5064 C:\Windows\System32\mswsock.dll - ok

14:37:08.0721 5064 [ EC7CBFF96B05ECF3D366355B3C64ADCF ] C:\Windows\System32\wship6.dll

14:37:08.0721 5064 C:\Windows\System32\wship6.dll - ok

14:37:08.0723 5064 [ AA339DD8BB128EF66660DFBBB59043D3 ] C:\Windows\System32\netlogon.dll

14:37:08.0723 5064 C:\Windows\System32\netlogon.dll - ok

14:37:08.0725 5064 [ 4AC74A462F3A0506B929F599B5E1B1FB ] C:\Windows\System32\atmfd.dll

14:37:08.0725 5064 C:\Windows\System32\atmfd.dll - ok

14:37:08.0727 5064 [ 492D07D79E7024CA310867B526D9636D ] C:\Windows\System32\dnsapi.dll

14:37:08.0727 5064 C:\Windows\System32\dnsapi.dll - ok

14:37:08.0729 5064 [ 8FFE297B8449386E7B6851458B6E474E ] C:\Windows\System32\logoncli.dll

14:37:08.0729 5064 C:\Windows\System32\logoncli.dll - ok

14:37:08.0731 5064 [ 1573C45E65DE32B1BC3572634F8F1E8E ] C:\Windows\System32\schannel.dll

14:37:08.0731 5064 C:\Windows\System32\schannel.dll - ok

14:37:08.0733 5064 [ 95FB6CA4374E343DDD653FCC43F9D26B ] C:\Windows\System32\wdigest.dll

14:37:08.0734 5064 C:\Windows\System32\wdigest.dll - ok

14:37:08.0735 5064 [ 5D8874A8C11DDDDE29E12DE0E2013493 ] C:\Windows\System32\rsaenh.dll

14:37:08.0735 5064 C:\Windows\System32\rsaenh.dll - ok

14:37:08.0737 5064 [ 8A25506B6948EFBD5A7F37E53CCD36D9 ] C:\Windows\System32\TSpkg.dll

14:37:08.0737 5064 C:\Windows\System32\TSpkg.dll - ok

14:37:08.0739 5064 [ E08088A97F95345E181C3DFCE2C615EF ] C:\Windows\System32\pku2u.dll

14:37:08.0739 5064 C:\Windows\System32\pku2u.dll - ok

14:37:08.0741 5064 [ D6C7780A364C6BBACFA796BAB9F1B374 ] C:\Windows\System32\bcryptprimitives.dll

14:37:08.0741 5064 C:\Windows\System32\bcryptprimitives.dll - ok

14:37:08.0744 5064 [ 55C892560C1B42BC57FB61AEFCED2F22 ] C:\Windows\System32\LIVESSP.DLL

14:37:08.0744 5064 C:\Windows\System32\LIVESSP.DLL - ok

14:37:08.0746 5064 [ 52D3D5E3586988D4D9E34ACAAC33105C ] C:\Windows\System32\credssp.dll

14:37:08.0746 5064 C:\Windows\System32\credssp.dll - ok

14:37:08.0748 5064 [ 90BDEFC5DF334E5100EAA781D798DE1A ] C:\Windows\System32\efslsaext.dll

14:37:08.0748 5064 C:\Windows\System32\efslsaext.dll - ok

14:37:08.0750 5064 [ ED78427259134C63ED69804D2132B86C ] C:\Windows\System32\scecli.dll

14:37:08.0750 5064 C:\Windows\System32\scecli.dll - ok

14:37:08.0752 5064 [ 7CC7DF5B654DA579613F811D8C637E29 ] C:\Windows\System32\ubpm.dll

14:37:08.0752 5064 C:\Windows\System32\ubpm.dll - ok

14:37:08.0754 5064 [ C78655BC80301D76ED4FEF1C1EA40A7D ] C:\Windows\System32\svchost.exe

14:37:08.0754 5064 C:\Windows\System32\svchost.exe - ok

14:37:08.0756 5064 [ 25FBDEF06C4D92815B353F6E792C8129 ] C:\Windows\System32\umpnpmgr.dll

14:37:08.0756 5064 C:\Windows\System32\umpnpmgr.dll - ok

14:37:08.0758 5064 [ E6EB44ABAAF1F330119F854856C53EBE ] C:\Windows\System32\SPInf.dll

14:37:08.0758 5064 C:\Windows\System32\SPInf.dll - ok

14:37:08.0760 5064 [ CD1B5AD07E5F7FEF30E055DCC9E96180 ] C:\Windows\System32\devrtl.dll

14:37:08.0760 5064 C:\Windows\System32\devrtl.dll - ok

14:37:08.0762 5064 [ 9C9307C95671AC962F3D6EB3A4A89BAE ] C:\Windows\System32\gpapi.dll

14:37:08.0762 5064 C:\Windows\System32\gpapi.dll - ok

14:37:08.0764 5064 [ 7A17485DC7D8A7AC81321A42CD034519 ] C:\Windows\System32\userenv.dll

14:37:08.0764 5064 C:\Windows\System32\userenv.dll - ok

14:37:08.0766 5064 [ A2CCA4FB273E6050F17A0A416CFF2FCD ] C:\Windows\System32\umpo.dll

14:37:08.0766 5064 C:\Windows\System32\umpo.dll - ok

14:37:08.0768 5064 [ F6C011B46FAEEF33536B2E80F48B5CBE ] C:\Windows\System32\pcwum.dll

14:37:08.0768 5064 C:\Windows\System32\pcwum.dll - ok

14:37:08.0770 5064 [ 716175021BDA290504CE434273F666BC ] C:\Windows\System32\powrprof.dll

14:37:08.0770 5064 C:\Windows\System32\powrprof.dll - ok

14:37:08.0772 5064 [ 4FCAEF0C5BE7629AEB878998E0FE959B ] C:\Windows\System32\drivers\aswFsBlk.sys

14:37:08.0772 5064 C:\Windows\System32\drivers\aswFsBlk.sys - ok

14:37:08.0774 5064 [ B50CDD87772D6A11CB90924AAD399DF8 ] C:\Windows\System32\drivers\aswMonFlt.sys

14:37:08.0774 5064 C:\Windows\System32\drivers\aswMonFlt.sys - ok

14:37:08.0776 5064 [ 8F571F016FA1976F445147E9E6C8AE9B ] C:\Windows\System32\drivers\Sftvollh.sys

14:37:08.0776 5064 C:\Windows\System32\drivers\Sftvollh.sys - ok

14:37:08.0778 5064 [ AB886378EEB55C6C75B4F2D14B6C869F ] C:\Windows\System32\drivers\WUDFPf.sys

14:37:08.0778 5064 C:\Windows\System32\drivers\WUDFPf.sys - ok

14:37:08.0780 5064 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] C:\Windows\System32\RpcEpMap.dll

14:37:08.0780 5064 C:\Windows\System32\RpcEpMap.dll - ok

14:37:08.0782 5064 [ 5C627D1B1138676C0A7AB2C2C190D123 ] C:\Windows\System32\rpcss.dll

14:37:08.0782 5064 C:\Windows\System32\rpcss.dll - ok

14:37:08.0785 5064 [ 31559F3244C6BC00A52030CAA83B6B91 ] C:\Windows\System32\WSHTCPIP.DLL

14:37:08.0785 5064 C:\Windows\System32\WSHTCPIP.DLL - ok

14:37:08.0787 5064 [ 16E964ABF6D1E0F0CC7822FCA9BA754D ] C:\Windows\System32\wshqos.dll

14:37:08.0787 5064 C:\Windows\System32\wshqos.dll - ok

14:37:08.0789 5064 [ 9AD9E06F8656F296D91FAE8EE5B95A27 ] C:\Windows\System32\FirewallAPI.dll

14:37:08.0789 5064 C:\Windows\System32\FirewallAPI.dll - ok

14:37:08.0791 5064 [ 94E026870A55AAEAFF7853C1754091E9 ] C:\Windows\System32\version.dll

14:37:08.0791 5064 C:\Windows\System32\version.dll - ok

14:37:08.0793 5064 [ 6011714C8C5C55CBFFAD24D61E879FBD ] C:\Windows\System32\wevtsvc.dll

14:37:08.0793 5064 C:\Windows\System32\wevtsvc.dll - ok

14:37:08.0795 5064 [ 78A1E65207484B7F8D3217507745F47C ] C:\Windows\System32\avrt.dll

14:37:08.0795 5064 C:\Windows\System32\avrt.dll - ok

14:37:08.0797 5064 [ E40E80D0304A73E8D269F7141D77250B ] C:\Windows\System32\mmcss.dll

14:37:08.0797 5064 C:\Windows\System32\mmcss.dll - ok

14:37:08.0799 5064 [ F23FEF6D569FCE88671949894A8BECF1 ] C:\Windows\System32\audiosrv.dll

14:37:08.0799 5064 C:\Windows\System32\audiosrv.dll - ok

14:37:08.0801 5064 [ 227E2C382A1E02F8D4965E664D3BBE43 ] C:\Windows\System32\MMDevAPI.dll

14:37:08.0801 5064 C:\Windows\System32\MMDevAPI.dll - ok

14:37:08.0803 5064 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] C:\Windows\System32\netprofm.dll

14:37:08.0803 5064 C:\Windows\System32\netprofm.dll - ok

14:37:08.0805 5064 [ F06BB4E336EA57511FDBAFAFCC47DE62 ] C:\Windows\System32\propsys.dll

14:37:08.0805 5064 C:\Windows\System32\propsys.dll - ok

14:37:08.0807 5064 [ D5CCA1453B98A5801E6D5FF0FF89DC6C ] C:\Windows\System32\audiodg.exe

14:37:08.0807 5064 C:\Windows\System32\audiodg.exe - ok

14:37:08.0809 5064 [ 715F03B4C7223349768013EA95D9E5B7 ] C:\Windows\System32\LogonUI.exe

14:37:08.0809 5064 C:\Windows\System32\LogonUI.exe - ok

14:37:08.0811 5064 [ 1F4492FE41767CDB8B89D17655847CDD ] C:\Windows\System32\ntmarta.dll

14:37:08.0811 5064 C:\Windows\System32\ntmarta.dll - ok

14:37:08.0813 5064 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] C:\Windows\System32\gpsvc.dll

14:37:08.0813 5064 C:\Windows\System32\gpsvc.dll - ok

14:37:08.0815 5064 [ 46BB91A169B9B31FF44EB04C48EC1D41 ] C:\Windows\System32\nlaapi.dll

14:37:08.0815 5064 C:\Windows\System32\nlaapi.dll - ok

14:37:08.0817 5064 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] C:\Windows\System32\profsvc.dll

14:37:08.0817 5064 C:\Windows\System32\profsvc.dll - ok

14:37:08.0819 5064 [ 58775492FFD419248B08325E583C527F ] C:\Windows\System32\atl.dll

14:37:08.0819 5064 C:\Windows\System32\atl.dll - ok

14:37:08.0821 5064 [ A77BE7CB3222B4FB0AC6C71D1C2698D4 ] C:\Windows\System32\dsrole.dll

14:37:08.0821 5064 C:\Windows\System32\dsrole.dll - ok

14:37:08.0823 5064 [ BE097F5BB10F9079FCEB2DC4E7E20F02 ] C:\Windows\System32\slc.dll

14:37:08.0823 5064 C:\Windows\System32\slc.dll - ok

14:37:08.0825 5064 [ F0344071948D1A1FA732231785A0664C ] C:\Windows\System32\themeservice.dll

14:37:08.0825 5064 C:\Windows\System32\themeservice.dll - ok

14:37:08.0827 5064 [ 4166F82BE4D24938977DD1746BE9B8A0 ] C:\Windows\System32\es.dll

14:37:08.0827 5064 C:\Windows\System32\es.dll - ok

14:37:08.0829 5064 [ C32AB8FA018EF34C0F113BD501436D21 ] C:\Windows\System32\Sens.dll

14:37:08.0829 5064 C:\Windows\System32\Sens.dll - ok

14:37:08.0831 5064 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] C:\Windows\System32\uxsms.dll

14:37:08.0831 5064 C:\Windows\System32\uxsms.dll - ok

14:37:08.0833 5064 [ BD3674BE7FC9D8D3732C83E8499576ED ] C:\Windows\System32\wtsapi32.dll

14:37:08.0833 5064 C:\Windows\System32\wtsapi32.dll - ok

14:37:08.0835 5064 [ B1DF2D87DC8BF6072699AC8301B37796 ] C:\Windows\System32\WUDFPlatform.dll

14:37:08.0835 5064 C:\Windows\System32\WUDFPlatform.dll - ok

14:37:08.0837 5064 [ B20F051B03A966392364C83F009F7D17 ] C:\Windows\System32\WUDFSvc.dll

14:37:08.0837 5064 C:\Windows\System32\WUDFSvc.dll - ok

14:37:08.0840 5064 [ 1538831CF8AD2979A04C423779465827 ] C:\Windows\System32\drivers\lltdio.sys

14:37:08.0840 5064 C:\Windows\System32\drivers\lltdio.sys - ok

14:37:08.0842 5064 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] C:\Windows\System32\drivers\nwifi.sys

14:37:08.0842 5064 C:\Windows\System32\drivers\nwifi.sys - ok

14:37:08.0844 5064 [ 136185F9FB2CC61E573E676AA5402356 ] C:\Windows\System32\drivers\ndisuio.sys

14:37:08.0844 5064 C:\Windows\System32\drivers\ndisuio.sys - ok

14:37:08.0846 5064 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] C:\Windows\System32\dhcpcore.dll

14:37:08.0846 5064 C:\Windows\System32\dhcpcore.dll - ok

14:37:08.0848 5064 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] C:\Windows\System32\dnsrslvr.dll

14:37:08.0848 5064 C:\Windows\System32\dnsrslvr.dll - ok

14:37:08.0850 5064 [ DDC86E4F8E7456261E637E3552E804FF ] C:\Windows\System32\drivers\rspndr.sys

14:37:08.0850 5064 C:\Windows\System32\drivers\rspndr.sys - ok

14:37:08.0852 5064 [ 2B81776DA02017A37FE26C662827470E ] C:\Windows\System32\IPHLPAPI.DLL

14:37:08.0852 5064 C:\Windows\System32\IPHLPAPI.DLL - ok

14:37:08.0854 5064 [ F9EC845C5EECF20E9A67F9F805F2EF1F ] C:\Windows\System32\keyiso.dll

14:37:08.0854 5064 C:\Windows\System32\keyiso.dll - ok

14:37:08.0856 5064 [ F993A32249B66C9D622EA5592A8B76B8 ] C:\Windows\System32\lmhsvc.dll

14:37:08.0856 5064 C:\Windows\System32\lmhsvc.dll - ok

14:37:08.0858 5064 [ B73A6E4B319AFFE64582AC5C1801BB3F ] C:\Windows\System32\nrpsrv.dll

14:37:08.0858 5064 C:\Windows\System32\nrpsrv.dll - ok

14:37:08.0860 5064 [ D54BFDF3E0C953F823B3D0BFE4732528 ] C:\Windows\System32\nsisvc.dll

14:37:08.0860 5064 C:\Windows\System32\nsisvc.dll - ok

14:37:08.0862 5064 [ 4C9210E8F4E052F6A4EB87716DA0C24C ] C:\Windows\System32\winnsi.dll

14:37:08.0862 5064 C:\Windows\System32\winnsi.dll - ok

14:37:08.0864 5064 [ 3CC16A849E6092E43909F48EF0E60306 ] C:\Windows\System32\dhcpcore6.dll

14:37:08.0864 5064 C:\Windows\System32\dhcpcore6.dll - ok

14:37:08.0866 5064 [ 87356377F31DA5F20A833811CD59499C ] C:\Windows\System32\eapphost.dll

14:37:08.0866 5064 C:\Windows\System32\eapphost.dll - ok

14:37:08.0868 5064 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] C:\Windows\System32\eapsvc.dll

14:37:08.0868 5064 C:\Windows\System32\eapsvc.dll - ok

14:37:08.0870 5064 [ 0040C486584A8E582C861CFB57AB5387 ] C:\Windows\System32\FWPUCLNT.DLL

14:37:08.0870 5064 C:\Windows\System32\FWPUCLNT.DLL - ok

14:37:08.0872 5064 [ F568F7C08458D69E4FCD8675BBB107E4 ] C:\Windows\System32\dhcpcsvc.dll

14:37:08.0872 5064 C:\Windows\System32\dhcpcsvc.dll - ok

14:37:08.0874 5064 [ 3C06D5A929B798D0B13F6481242A0FD2 ] C:\Windows\System32\dhcpcsvc6.dll

14:37:08.0874 5064 C:\Windows\System32\dhcpcsvc6.dll - ok

14:37:08.0876 5064 [ 885D0942E0F28DB90919BE3129ECF279 ] C:\Windows\System32\dnsext.dll

14:37:08.0876 5064 C:\Windows\System32\dnsext.dll - ok

14:37:08.0878 5064 [ 588CD0C78A7FAAE4186B5EEA0AF3ED67 ] C:\Windows\System32\adtschema.dll

14:37:08.0878 5064 C:\Windows\System32\adtschema.dll - ok

14:37:08.0880 5064 [ 9FCA3A84338ADEF2AFF67CDA46EF8539 ] C:\Windows\System32\umb.dll

14:37:08.0880 5064 C:\Windows\System32\umb.dll - ok

14:37:08.0882 5064 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] C:\Windows\System32\wlansvc.dll

14:37:08.0882 5064 C:\Windows\System32\wlansvc.dll - ok

14:37:08.0884 5064 [ 73FCB7919DEE80EE556F2E498594EBAE ] C:\Windows\System32\onex.dll

14:37:08.0884 5064 C:\Windows\System32\onex.dll - ok

14:37:08.0886 5064 [ A648C4A06DE367065B24056D067B4460 ] C:\Windows\System32\wlanmsm.dll

14:37:08.0886 5064 C:\Windows\System32\wlanmsm.dll - ok

14:37:08.0888 5064 [ 06A1386B6E3A0CBC368665C1840906F4 ] C:\Windows\System32\wlansec.dll

14:37:08.0888 5064 C:\Windows\System32\wlansec.dll - ok

14:37:08.0891 5064 [ 0D753307D274F3688BD21C377B616700 ] C:\Windows\System32\eappcfg.dll

14:37:08.0891 5064 C:\Windows\System32\eappcfg.dll - ok

14:37:08.0893 5064 [ 65522E77A1360DBC8D199DA3BF5EFFE4 ] C:\Windows\System32\eappprxy.dll

14:37:08.0893 5064 C:\Windows\System32\eappprxy.dll - ok

14:37:08.0895 5064 [ 97E43F324BE1503CB2FFB058534688DA ] C:\Windows\System32\l2gpstore.dll

14:37:08.0895 5064 C:\Windows\System32\l2gpstore.dll - ok

14:37:08.0897 5064 [ 7D5645EE0EA77D539828433D9B95F5EB ] C:\Windows\System32\WinSCard.dll

14:37:08.0897 5064 C:\Windows\System32\WinSCard.dll - ok

14:37:08.0899 5064 [ 7F1B4C6FF3B85F9ADF74055187B8A22C ] C:\Windows\System32\wlanutil.dll

14:37:08.0899 5064 C:\Windows\System32\wlanutil.dll - ok

14:37:08.0901 5064 [ 730BF204A595D5B6D7DC57A247CC741C ] C:\Windows\System32\wlgpclnt.dll

14:37:08.0901 5064 C:\Windows\System32\wlgpclnt.dll - ok

14:37:08.0903 5064 [ 4FFDE68C4B7C9993FA551E7E36DDB34D ] C:\Windows\System32\msxml6.dll

14:37:08.0903 5064 C:\Windows\System32\msxml6.dll - ok

14:37:08.0905 5064 [ 43FAB56AE5F639AD59D7209693F4C4C2 ] C:\Windows\System32\wlanext.exe

14:37:08.0905 5064 C:\Windows\System32\wlanext.exe - ok

14:37:08.0907 5064 [ 402B44B31C7183FCF2C4E1083AF317FA ] C:\Windows\System32\conhost.exe

14:37:08.0907 5064 C:\Windows\System32\conhost.exe - ok

14:37:08.0909 5064 [ A12F562D3520B78FC5FD7791BA2C1A6B ] C:\Windows\System32\RaIHV.dll

14:37:08.0909 5064 C:\Windows\System32\RaIHV.dll - ok

14:37:08.0910 5064 [ 0BEE002C68E28CE6DA161DCF1376D7D7 ] C:\Windows\System32\authui.dll

14:37:08.0910 5064 C:\Windows\System32\authui.dll - ok

14:37:08.0912 5064 [ 1A47D52E303B7543E4E6026595B95422 ] C:\Windows\System32\comres.dll

14:37:08.0912 5064 C:\Windows\System32\comres.dll - ok

14:37:08.0914 5064 [ B3BFBD758506ECB50C5804AAA76318F9 ] C:\Windows\System32\cryptui.dll

14:37:08.0914 5064 C:\Windows\System32\cryptui.dll - ok

14:37:08.0917 5064 [ 7FA8FDC2C2A27817FD0F624E78D3B50C ] C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll

14:37:08.0917 5064 C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll - ok

14:37:08.0919 5064 [ 5B3EBFC3DA142324B388DDCC4465E1FF ] C:\Windows\System32\samlib.dll

14:37:08.0919 5064 C:\Windows\System32\samlib.dll - ok

14:37:08.0921 5064 [ 4E9C2DB10F7E6AE91BF761139D4B745B ] C:\Windows\System32\shacct.dll

14:37:08.0921 5064 C:\Windows\System32\shacct.dll - ok

14:37:08.0923 5064 [ D29E998E8277666982B4F0303BF4E7AF ] C:\Windows\System32\uxtheme.dll

14:37:08.0923 5064 C:\Windows\System32\uxtheme.dll - ok

14:37:08.0925 5064 [ 8560FFFC8EB3A806DCD4F82252CFC8C6 ] C:\Windows\System32\ksuser.dll

14:37:08.0925 5064 C:\Windows\System32\ksuser.dll - ok

14:37:08.0927 5064 [ 1473768973453DE50DC738C2955FC4DD ] C:\Windows\System32\wdmaud.drv

14:37:08.0927 5064 C:\Windows\System32\wdmaud.drv - ok

14:37:08.0929 5064 [ EF2AE43BCD46ABB13FC3E5B2B1935C73 ] C:\Windows\System32\winmm.dll

14:37:08.0929 5064 C:\Windows\System32\winmm.dll - ok

14:37:08.0931 5064 [ DC220AE6F64819099F7EBD6F137E32E7 ] C:\Windows\System32\AudioSes.dll

14:37:08.0931 5064 C:\Windows\System32\AudioSes.dll - ok

14:37:08.0933 5064 [ CA2A0750ED830678997695FF61B04C30 ] C:\Windows\System32\midimap.dll

14:37:08.0933 5064 C:\Windows\System32\midimap.dll - ok

14:37:08.0935 5064 [ 10AC5CE9F78DC281A1BBD9B8CC587B8A ] C:\Windows\System32\msacm32.dll

14:37:08.0935 5064 C:\Windows\System32\msacm32.dll - ok

14:37:08.0937 5064 [ 1B7C3A37362C7B2890168C5FC61C8D9B ] C:\Windows\System32\msacm32.drv

14:37:08.0937 5064 C:\Windows\System32\msacm32.drv - ok

14:37:08.0939 5064 [ 5EDBB34736DD7AC1A73CF8792A835E10 ] C:\Windows\System32\AudioEng.dll

14:37:08.0939 5064 C:\Windows\System32\AudioEng.dll - ok

14:37:08.0941 5064 [ C1395286B822E306B4FE1568A8A77813 ] C:\Windows\System32\AUDIOKSE.dll

14:37:08.0941 5064 C:\Windows\System32\AUDIOKSE.dll - ok

14:37:08.0943 5064 [ AA0B1A7B4750F655936F2F82B5E84428 ] C:\Windows\System32\CX64AP40.dll

14:37:08.0943 5064 C:\Windows\System32\CX64AP40.dll - ok

14:37:08.0945 5064 [ 6F3C559B82F2912354BE5B098744CC8C ] C:\Windows\System32\WMALFXGFXDSP.dll

14:37:08.0945 5064 C:\Windows\System32\WMALFXGFXDSP.dll - ok

14:37:08.0947 5064 [ 54B5DCD55B223BC5DF50B82E1E9E86B1 ] C:\Windows\System32\mfplat.dll

14:37:08.0947 5064 C:\Windows\System32\mfplat.dll - ok

14:37:08.0950 5064 [ 50544D04AD845C43130B70212EC05CCD ] C:\Windows\System32\microsoft-windows-kernel-power-events.dll

14:37:08.0950 5064 C:\Windows\System32\microsoft-windows-kernel-power-events.dll - ok

14:37:08.0952 5064 [ 179E8401224D557ECFF3695F2016EA5B ] C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765\GdiPlus.dll

14:37:08.0952 5064 C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765\GdiPlus.dll - ok

14:37:08.0954 5064 [ 8FA553E9AE69808D99C164733A0F9590 ] C:\Program Files\AVAST Software\Avast\AvastSvc.exe

14:37:08.0954 5064 C:\Program Files\AVAST Software\Avast\AvastSvc.exe - ok

14:37:08.0956 5064 [ 3CB6A7286422C72C34DAB54A5DFF1A34 ] C:\Windows\System32\dui70.dll

14:37:08.0956 5064 C:\Windows\System32\dui70.dll - ok

14:37:08.0958 5064 [ 8CCDE014A4CDF84564E03ACE064CA753 ] C:\Windows\System32\duser.dll

14:37:08.0958 5064 C:\Windows\System32\duser.dll - ok

14:37:08.0960 5064 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] C:\Windows\System32\MPSSVC.dll

14:37:08.0960 5064 C:\Windows\System32\MPSSVC.dll - ok

14:37:08.0962 5064 [ DA1B7075260F3872585BFCDD668C648B ] C:\Windows\System32\dwmapi.dll

14:37:08.0962 5064 C:\Windows\System32\dwmapi.dll - ok

14:37:08.0964 5064 [ 896F15A6434D93EDB42519D5E18E6B50 ] C:\Windows\System32\hid.dll

14:37:08.0964 5064 C:\Windows\System32\hid.dll - ok

14:37:08.0966 5064 [ D7F1EF374A90709B31591823B002F918 ] C:\Windows\System32\SndVolSSO.dll

14:37:08.0966 5064 C:\Windows\System32\SndVolSSO.dll - ok

14:37:08.0968 5064 [ D29902687A6110FE637F87189C6A3FB5 ] C:\Windows\System32\wow64.dll

14:37:08.0968 5064 C:\Windows\System32\wow64.dll - ok

14:37:08.0970 5064 [ CFBE90EF20EE550F4A6B74CED16DAFCA ] C:\Windows\System32\wow64win.dll

14:37:08.0970 5064 C:\Windows\System32\wow64win.dll - ok

14:37:08.0972 5064 [ 6F8B48F3D343E4B186AB6A9E302B7E16 ] C:\Windows\System32\xmllite.dll

14:37:08.0972 5064 C:\Windows\System32\xmllite.dll - ok

14:37:08.0974 5064 [ E73B0F1819602CB6EF176FB78D76A47B ] C:\Windows\SysWOW64\ntdll.dll

14:37:08.0974 5064 C:\Windows\SysWOW64\ntdll.dll - ok

14:37:08.0976 5064 [ 26B73A85855681500BCC25C7CD9FF5B1 ] C:\Windows\System32\WindowsCodecs.dll

14:37:08.0976 5064 C:\Windows\System32\WindowsCodecs.dll - ok

14:37:08.0978 5064 [ E9EEC159B08BFDD76FAD2C1C333223B3 ] C:\Windows\System32\wow64cpu.dll

14:37:08.0978 5064 C:\Windows\System32\wow64cpu.dll - ok

14:37:08.0980 5064 [ 9B98D47916EAD4F69EF51B56B0C2323C ] C:\Windows\SysWOW64\kernel32.dll

14:37:08.0980 5064 C:\Windows\SysWOW64\kernel32.dll - ok

14:37:08.0982 5064 [ DA6B67270FD9DB3697B20FCE94950741 ] C:\Windows\System32\drivers\fltMgr.sys

14:37:08.0982 5064 C:\Windows\System32\drivers\fltMgr.sys - ok

14:37:08.0984 5064 [ A3DB3C17EE6CAE65D53602B4E80BCCBC ] C:\Windows\System32\PSHED.DLL

14:37:08.0984 5064 C:\Windows\System32\PSHED.DLL - ok

14:37:08.0986 5064 [ 9F2BACD5E1776A4BB7CC0EC3C3A4F96D ] C:\Windows\System32\winbrand.dll

14:37:08.0986 5064 C:\Windows\System32\winbrand.dll - ok

14:37:08.0988 5064 [ C2762A57DF0EE85E63CE4893C5215313 ] C:\Windows\System32\VaultCredProvider.dll

14:37:08.0988 5064 C:\Windows\System32\VaultCredProvider.dll - ok

14:37:08.0991 5064 [ CA2985996BB49924B677113DF95CFEA7 ] C:\Windows\System32\SmartcardCredentialProvider.dll

14:37:08.0991 5064 C:\Windows\System32\SmartcardCredentialProvider.dll - ok

14:37:08.0993 5064 [ BF352E73615F5461AA6884472435A544 ] C:\Windows\System32\BioCredProv.dll

14:37:08.0993 5064 C:\Windows\System32\BioCredProv.dll - ok

14:37:08.0995 5064 [ B0945E538CF906BBDDC5A11C8EE868CC ] C:\Windows\System32\microsoft-windows-kernel-processor-power-events.dll

14:37:08.0995 5064 C:\Windows\System32\microsoft-windows-kernel-processor-power-events.dll - ok

14:37:08.0997 5064 [ 53BB811ED12D2C867B354390FABF9612 ] C:\Windows\SysWOW64\KernelBase.dll

14:37:08.0997 5064 C:\Windows\SysWOW64\KernelBase.dll - ok

14:37:08.0999 5064 [ 7FF15A4F092CD4A96055BA69F903E3E9 ] C:\Windows\SysWOW64\ws2_32.dll

14:37:08.0999 5064 C:\Windows\SysWOW64\ws2_32.dll - ok

14:37:09.0001 5064 [ CC0AB40F02D2C2A12209715A3C1B07B8 ] C:\Windows\System32\credui.dll

14:37:09.0001 5064 C:\Windows\System32\credui.dll - ok

14:37:09.0003 5064 [ 796B8123A7859AFD3A4AE10514DBAEB5 ] C:\Windows\System32\winbio.dll

14:37:09.0003 5064 C:\Windows\System32\winbio.dll - ok

14:37:09.0005 5064 [ EEEA40F0EDB0A6E5359E539E15D0BC77 ] C:\Windows\System32\netapi32.dll

14:37:09.0005 5064 C:\Windows\System32\netapi32.dll - ok

14:37:09.0007 5064 [ 44B9C66177651F3F53C87B665D58D17A ] C:\Windows\System32\vaultcli.dll

14:37:09.0007 5064 C:\Windows\System32\vaultcli.dll - ok

14:37:09.0009 5064 [ 9DC80A8AAAAAC397BDAB3C67165A824E ] C:\Windows\SysWOW64\msvcrt.dll

14:37:09.0009 5064 C:\Windows\SysWOW64\msvcrt.dll - ok

14:37:09.0011 5064 [ 6CECA4C6A489C9B2E6073AFDAAE3F607 ] C:\Windows\System32\netutils.dll

14:37:09.0011 5064 C:\Windows\System32\netutils.dll - ok

14:37:09.0013 5064 [ 3C91392D448F6E5D525A85B7550D8BA9 ] C:\Windows\System32\wkscli.dll

14:37:09.0013 5064 C:\Windows\System32\wkscli.dll - ok

14:37:09.0015 5064 [ FC51229C7D4AFA0D6F186133728B95AB ] C:\Windows\System32\samcli.dll

14:37:09.0015 5064 C:\Windows\System32\samcli.dll - ok

14:37:09.0017 5064 [ 972C3301DB3DA91AE06A95F6B4160B1B ] C:\Windows\System32\certCredProvider.dll

14:37:09.0017 5064 C:\Windows\System32\certCredProvider.dll - ok

14:37:09.0019 5064 [ C5AD8083CF94201F1F8084ECC696A8B7 ] C:\Windows\SysWOW64\rpcrt4.dll

14:37:09.0019 5064 C:\Windows\SysWOW64\rpcrt4.dll - ok

14:37:09.0021 5064 [ EB398DED91CFF2F425610EAA2CCF2A23 ] C:\Program Files\AVAST Software\Avast\aswCmnBS.dll

14:37:09.0021 5064 C:\Program Files\AVAST Software\Avast\aswCmnBS.dll - ok

14:37:09.0023 5064 [ 7097425051CE67B450EBF2B1390AE492 ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL

14:37:09.0023 5064 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL - ok

14:37:09.0025 5064 [ F08F6FCD09F9BE94C37ACC1B344685FF ] C:\Windows\SysWOW64\cryptbase.dll

14:37:09.0025 5064 C:\Windows\SysWOW64\cryptbase.dll - ok

14:37:09.0027 5064 [ 6377051C63D5552A311935C67E9FDFDC ] C:\Windows\SysWOW64\nsi.dll

14:37:09.0027 5064 C:\Windows\SysWOW64\nsi.dll - ok

14:37:09.0029 5064 [ CFC97F07904067A1E5FAE195D534DA3A ] C:\Windows\SysWOW64\sechost.dll

14:37:09.0029 5064 C:\Windows\SysWOW64\sechost.dll - ok

14:37:09.0032 5064 [ EDA7AD21DF8945528F01F0A86D69E524 ] C:\Windows\SysWOW64\sspicli.dll

14:37:09.0032 5064 C:\Windows\SysWOW64\sspicli.dll - ok

14:37:09.0034 5064 [ BABE99A18A382A5E2F99B48E0BC3E0D4 ] C:\Program Files\AVAST Software\Avast\aswCmnIS.dll

14:37:09.0034 5064 C:\Program Files\AVAST Software\Avast\aswCmnIS.dll - ok

14:37:09.0036 5064 [ 178B51198B7B46CD3C5E744474459A63 ] C:\Program Files\AVAST Software\Avast\aswCmnOS.dll

14:37:09.0036 5064 C:\Program Files\AVAST Software\Avast\aswCmnOS.dll - ok

14:37:09.0038 5064 [ 019CD868461B646E09BDF04474C19341 ] C:\Windows\System32\rasapi32.dll

14:37:09.0038 5064 C:\Windows\System32\rasapi32.dll - ok

14:37:09.0040 5064 [ 87FA0C48C3B2E9FEE518818FE26B15B5 ] C:\Windows\System32\rasplap.dll

14:37:09.0040 5064 C:\Windows\System32\rasplap.dll - ok

14:37:09.0042 5064 [ CDBE9690CF2B8409FACAD94FAC9479C9 ] C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll

14:37:09.0042 5064 C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll - ok

14:37:09.0044 5064 [ B28DEEC597C8DEB70C744C7CF9210E3E ] C:\Windows\System32\rasman.dll

14:37:09.0044 5064 C:\Windows\System32\rasman.dll - ok

14:37:09.0046 5064 [ B53C4B69B695EDA1B7E41D35CA4244E2 ] C:\Windows\System32\rtutils.dll

14:37:09.0046 5064 C:\Windows\System32\rtutils.dll - ok

14:37:09.0048 5064 [ 5E0DB2D8B2750543CD2EBB9EA8E6CDD3 ] C:\Windows\SysWOW64\user32.dll

14:37:09.0048 5064 C:\Windows\SysWOW64\user32.dll - ok

14:37:09.0050 5064 [ 9BC8610C32C96A2983A65DC21CAFA921 ] C:\Windows\System32\UXInit.dll

14:37:09.0050 5064 C:\Windows\System32\UXInit.dll - ok

14:37:09.0052 5064 [ D6D3AD7BF1D6F6CE9547613ED5E170A2 ] C:\Windows\SysWOW64\gdi32.dll

14:37:09.0052 5064 C:\Windows\SysWOW64\gdi32.dll - ok

14:37:09.0054 5064 [ 384721EF4024890092625E20CADFAF85 ] C:\Windows\SysWOW64\lpk.dll

14:37:09.0054 5064 C:\Windows\SysWOW64\lpk.dll - ok

14:37:09.0056 5064 [ CC19A4AE696C2191E965A9835F1E6399 ] C:\Windows\SysWOW64\usp10.dll

14:37:09.0056 5064 C:\Windows\SysWOW64\usp10.dll - ok

14:37:09.0058 5064 [ 95E2376B3323F062EB562B8586D0F14A ] C:\Windows\SysWOW64\advapi32.dll

14:37:09.0058 5064 C:\Windows\SysWOW64\advapi32.dll - ok

14:37:09.0061 5064 [ 4C39358EBDD2FFCD9132A30E1EC31E16 ] C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcp90.dll

14:37:09.0061 5064 C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcp90.dll - ok

14:37:09.0063 5064 [ 55AFA63F5F2A6CED0C09E2AFE57ECA8D ] C:\Program Files\AVAST Software\Avast\ashBase.dll

14:37:09.0063 5064 C:\Program Files\AVAST Software\Avast\ashBase.dll - ok

14:37:09.0065 5064 [ DF13A51A5C591887D2EC6AE64CEED0FA ] C:\Windows\SysWOW64\wsock32.dll

14:37:09.0065 5064 C:\Windows\SysWOW64\wsock32.dll - ok

14:37:09.0067 5064 [ C515CAEC6B3C6970007954C0250A124C ] C:\Program Files\AVAST Software\Avast\aswEngLdr.dll

14:37:09.0067 5064 C:\Program Files\AVAST Software\Avast\aswEngLdr.dll - ok

14:37:09.0069 5064 [ A543AC1F7138376D778D630A35FCBC4C ] C:\Windows\SysWOW64\psapi.dll

14:37:09.0069 5064 C:\Windows\SysWOW64\psapi.dll - ok

14:37:09.0071 5064 [ 702254574E7E52052DE39408457B7149 ] C:\Windows\SysWOW64\version.dll

14:37:09.0071 5064 C:\Windows\SysWOW64\version.dll - ok

14:37:09.0073 5064 [ 9CB0D2A9A77D91D9614355EE9FF00519 ] C:\Windows\SysWOW64\wininet.dll

14:37:09.0073 5064 C:\Windows\SysWOW64\wininet.dll - ok

14:37:09.0075 5064 [ 3178C47DB9F1615E5334029607BD3459 ] C:\Windows\SysWOW64\iertutil.dll

14:37:09.0075 5064 C:\Windows\SysWOW64\iertutil.dll - ok

14:37:09.0077 5064 [ 8CC3C111D653E96F3EA1590891491D71 ] C:\Windows\SysWOW64\shlwapi.dll

14:37:09.0077 5064 C:\Windows\SysWOW64\shlwapi.dll - ok

14:37:09.0079 5064 [ FC4EE980C3BD87D35816EC55007E00B5 ] C:\Windows\SysWOW64\urlmon.dll

14:37:09.0079 5064 C:\Windows\SysWOW64\urlmon.dll - ok

14:37:09.0081 5064 [ 5AA945234E9D4CCE4F715276B9AA712C ] C:\Windows\System32\imageres.dll

14:37:09.0081 5064 C:\Windows\System32\imageres.dll - ok

14:37:09.0083 5064 [ 928CF7268086631F54C3D8E17238C6DD ] C:\Windows\SysWOW64\ole32.dll

14:37:09.0084 5064 C:\Windows\SysWOW64\ole32.dll - ok

14:37:09.0085 5064 [ 6C765E82B57F2E66CE9C54AC238471D9 ] C:\Windows\SysWOW64\oleaut32.dll

14:37:09.0086 5064 C:\Windows\SysWOW64\oleaut32.dll - ok

14:37:09.0087 5064 [ A6F09E5669D9A19035F6D942CAA15882 ] C:\Windows\SysWOW64\imm32.dll

14:37:09.0088 5064 C:\Windows\SysWOW64\imm32.dll - ok

14:37:09.0089 5064 [ C9618BC9B2B0FD7C1138D8774795A79B ] C:\Windows\SysWOW64\msctf.dll

14:37:09.0089 5064 C:\Windows\SysWOW64\msctf.dll - ok

14:37:09.0091 5064 [ 53223B673A3FA2F9A4D1C31C8D3F6CD8 ] C:\Windows\SysWOW64\dbghelp.dll

14:37:09.0091 5064 C:\Windows\SysWOW64\dbghelp.dll - ok

14:37:09.0093 5064 [ B316906B4A04DD39985350D29DE31068 ] C:\Program Files\AVAST Software\Avast\1033\Base.dll

14:37:09.0093 5064 C:\Program Files\AVAST Software\Avast\1033\Base.dll - ok

14:37:09.0095 5064 [ 465BEA35F7ED4A4A57686DEA7EA10F47 ] C:\Windows\SysWOW64\cscapi.dll

14:37:09.0096 5064 C:\Windows\SysWOW64\cscapi.dll - ok

14:37:09.0097 5064 [ 2FCA0D2C59A855C54BAFA22AA329DF0F ] C:\Windows\SysWOW64\netapi32.dll

14:37:09.0098 5064 C:\Windows\SysWOW64\netapi32.dll - ok

14:37:09.0100 5064 [ 20B3934DB73EABA2B49B7177873CB81F ] C:\Windows\SysWOW64\netutils.dll

14:37:09.0100 5064 C:\Windows\SysWOW64\netutils.dll - ok

14:37:09.0102 5064 [ 5CCDCD40E732D54E0F7451AC66AC1C87 ] C:\Windows\SysWOW64\srvcli.dll

14:37:09.0102 5064 C:\Windows\SysWOW64\srvcli.dll - ok

14:37:09.0104 5064 [ E5A4A1326A02F8E7B59E6C3270CE7202 ] C:\Windows\SysWOW64\wkscli.dll

14:37:09.0104 5064 C:\Windows\SysWOW64\wkscli.dll - ok

14:37:09.0106 5064 [ 977C54291BFA6FEE7FF865630E51757B ] C:\Program Files\AVAST Software\Avast\ashServ.dll

14:37:09.0106 5064 C:\Program Files\AVAST Software\Avast\ashServ.dll - ok

14:37:09.0108 5064 [ 16CE3ED063923253905341C9AF850FE7 ] C:\Program Files\AVAST Software\Avast\ashTask.dll

14:37:09.0108 5064 C:\Program Files\AVAST Software\Avast\ashTask.dll - ok

14:37:09.0110 5064 [ 045EE3DC56B12B404DC07848D8597C66 ] C:\Program Files\AVAST Software\Avast\aswAux.dll

14:37:09.0110 5064 C:\Program Files\AVAST Software\Avast\aswAux.dll - ok

14:37:09.0112 5064 [ AAF932B4011D14052955D4B212A4DA8D ] C:\Windows\System32\shsvcs.dll

14:37:09.0112 5064 C:\Windows\System32\shsvcs.dll - ok

14:37:09.0114 5064 [ 4FF19AC422B7709D786DE58B385C9647 ] C:\Program Files\AVAST Software\Avast\ashTaskEx.dll

14:37:09.0114 5064 C:\Program Files\AVAST Software\Avast\ashTaskEx.dll - ok

14:37:09.0116 5064 [ FCA9CC8611654B790DD6242BF862B7F5 ] C:\Program Files\AVAST Software\Avast\aswLog.dll

14:37:09.0116 5064 C:\Program Files\AVAST Software\Avast\aswLog.dll - ok

14:37:09.0118 5064 [ F186897E0A3B9D0784041221D0265069 ] C:\Program Files\AVAST Software\Avast\aswSqLt.dll

14:37:09.0119 5064 C:\Program Files\AVAST Software\Avast\aswSqLt.dll - ok

14:37:09.0121 5064 [ A7A8CA53D9C9FD90C07AB0EB38E5316B ] C:\Windows\System32\dbghelp.dll

14:37:09.0121 5064 C:\Windows\System32\dbghelp.dll - ok

14:37:09.0123 5064 [ 6F367A9B88CFDD46F42C1D11E5CB7964 ] C:\Program Files\AVAST Software\Avast\Aavm4h.dll

14:37:09.0123 5064 C:\Program Files\AVAST Software\Avast\Aavm4h.dll - ok

14:37:09.0125 5064 [ C2434DEA392826C1687D9BD7FA4845BC ] C:\Program Files\AVAST Software\Avast\AavmRpch.dll

14:37:09.0125 5064 C:\Program Files\AVAST Software\Avast\AavmRpch.dll - ok

14:37:09.0127 5064 [ 12B9869E74F9E698F550F04F8989C591 ] C:\Program Files\AVAST Software\Avast\aswProperty.dll

14:37:09.0127 5064 C:\Program Files\AVAST Software\Avast\aswProperty.dll - ok

14:37:09.0129 5064 [ 264B5D8F4C70A26749FF2CEDDE06BA30 ] C:\Program Files\AVAST Software\Avast\aswDld.dll

14:37:09.0129 5064 C:\Program Files\AVAST Software\Avast\aswDld.dll - ok

14:37:09.0131 5064 [ 902F670F58193A2BC30AA342B11B2C7B ] C:\Program Files\AVAST Software\Avast\aswIdle.dll

14:37:09.0132 5064 C:\Program Files\AVAST Software\Avast\aswIdle.dll - ok

14:37:09.0134 5064 [ 273FD83FC8C4E12F8C55381674F92A44 ] C:\Program Files\AVAST Software\Avast\aswStrm.dll

14:37:09.0134 5064 C:\Program Files\AVAST Software\Avast\aswStrm.dll - ok

14:37:09.0136 5064 [ F436E847FA799ECD75AD8C313673F450 ] C:\Windows\SysWOW64\cfgmgr32.dll

14:37:09.0136 5064 C:\Windows\SysWOW64\cfgmgr32.dll - ok

14:37:09.0138 5064 [ 6A6B2EE4565A178035BE2A4FF6F2C968 ] C:\Windows\SysWOW64\wtsapi32.dll

14:37:09.0138 5064 C:\Windows\SysWOW64\wtsapi32.dll - ok

14:37:09.0140 5064 [ 262F6592C3299C005FD6BEC90FC4463A ] C:\Windows\System32\schedsvc.dll

14:37:09.0140 5064 C:\Windows\System32\schedsvc.dll - ok

14:37:09.0142 5064 [ 5997D769CDB108390DCFAEBF442BF816 ] C:\Windows\SysWOW64\RpcRtRemote.dll

14:37:09.0142 5064 C:\Windows\SysWOW64\RpcRtRemote.dll - ok

14:37:09.0144 5064 [ A8CDF3768604FF95B54669E20053D569 ] C:\Windows\SysWOW64\wscapi.dll

14:37:09.0144 5064 C:\Windows\SysWOW64\wscapi.dll - ok

14:37:09.0146 5064 [ 8258362DDB18B644A82D8B5061AD9426 ] C:\Windows\SysWOW64\wscisvif.dll

14:37:09.0146 5064 C:\Windows\SysWOW64\wscisvif.dll - ok

14:37:09.0148 5064 [ BC414631876B2F28B8DAB08E849C12C5 ] C:\Windows\System32\ktmw32.dll

14:37:09.0148 5064 C:\Windows\System32\ktmw32.dll - ok

14:37:09.0150 5064 [ 07875861B582427B8B97D720DB5EAF39 ] C:\Program Files\AVAST Software\Avast\defs\12121000\aswEngin.dll

14:37:09.0150 5064 C:\Program Files\AVAST Software\Avast\defs\12121000\aswEngin.dll - ok

14:37:09.0152 5064 [ 945E54F23C72D37B8CD1987AF0DB63BF ] C:\Windows\System32\fveapi.dll

14:37:09.0152 5064 C:\Windows\System32\fveapi.dll - ok

14:37:09.0154 5064 [ 891ECFD08E2C538B7948CBC45106D697 ] C:\Windows\System32\fvecerts.dll

14:37:09.0154 5064 C:\Windows\System32\fvecerts.dll - ok

14:37:09.0156 5064 [ 694865362F0965779F92BCFE97712323 ] C:\Windows\System32\tbs.dll

14:37:09.0156 5064 C:\Windows\System32\tbs.dll - ok

14:37:09.0159 5064 [ A94AF354E4EA9C835DCF3E60EC75911C ] C:\Program Files\AVAST Software\Avast\defs\12121000\aswCmnOS.dll

14:37:09.0159 5064 C:\Program Files\AVAST Software\Avast\defs\12121000\aswCmnOS.dll - ok

14:37:09.0160 5064 [ 6DC4A7242F565C9E9C9CCC7BB0FA75C7 ] C:\Windows\System32\taskcomp.dll

14:37:09.0160 5064 C:\Windows\System32\taskcomp.dll - ok

14:37:09.0162 5064 [ F8AC522C1DAEED05BDA7C0E4E394BCD7 ] C:\Program Files\AVAST Software\Avast\defs\12121000\aswCmnIS.dll

14:37:09.0162 5064 C:\Program Files\AVAST Software\Avast\defs\12121000\aswCmnIS.dll - ok

14:37:09.0165 5064 [ 8269210DAF3B12BC8300631B28A2A442 ] C:\Windows\System32\wiarpc.dll

14:37:09.0165 5064 C:\Windows\System32\wiarpc.dll - ok

14:37:09.0167 5064 [ 1E7EAFF858538C516D7358C360605E3A ] C:\Program Files\AVAST Software\Avast\defs\12121000\aswCmnBS.dll

14:37:09.0167 5064 C:\Program Files\AVAST Software\Avast\defs\12121000\aswCmnBS.dll - ok

14:37:09.0169 5064 [ 2E929D6CF669AEF225552EEA9BE7E150 ] C:\Program Files\AVAST Software\Avast\defs\12121000\aswScan.dll

14:37:09.0169 5064 C:\Program Files\AVAST Software\Avast\defs\12121000\aswScan.dll - ok

14:37:09.0171 5064 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] C:\Windows\System32\drivers\http.sys

14:37:09.0171 5064 C:\Windows\System32\drivers\http.sys - ok

14:37:09.0173 5064 [ 1752EE915B9003E1FD1FFB4DE63E538B ] C:\Program Files\AVAST Software\Avast\defs\12121000\aswRep.dll

14:37:09.0173 5064 C:\Program Files\AVAST Software\Avast\defs\12121000\aswRep.dll - ok

14:37:09.0176 5064 [ CE7828A0EA430338BBCFFC6914462BAA ] C:\Program Files\AVAST Software\Avast\defs\12121000\aswFiDb.dll

14:37:09.0176 5064 C:\Program Files\AVAST Software\Avast\defs\12121000\aswFiDb.dll - ok

14:37:09.0178 5064 [ 2BD243BA4CD50EC05146317B7093FE6D ] C:\Program Files\AVAST Software\Avast\defs\12121000\algo.dll

14:37:09.0178 5064 C:\Program Files\AVAST Software\Avast\defs\12121000\algo.dll - ok

14:37:09.0180 5064 [ D025E95247353BA8ADB53CFF3A4E5BBB ] C:\Program Files\AVAST Software\Avast\Setup\setiface.dll

14:37:09.0180 5064 C:\Program Files\AVAST Software\Avast\Setup\setiface.dll - ok

14:37:09.0182 5064 [ 29E9794708DF51DB5DC89FB2E903A0F6 ] C:\Windows\SysWOW64\shell32.dll

14:37:09.0182 5064 C:\Windows\SysWOW64\shell32.dll - ok

14:37:09.0184 5064 [ F93674263F6B07C77956E966953242D9 ] C:\Windows\SysWOW64\secur32.dll

14:37:09.0184 5064 C:\Windows\SysWOW64\secur32.dll - ok

14:37:09.0186 5064 [ 1EBE9524683C7C4EED8B8BC93FB6FBCC ] C:\Windows\SysWOW64\fltLib.dll

14:37:09.0186 5064 C:\Windows\SysWOW64\fltLib.dll - ok

14:37:09.0188 5064 [ 418E881201583A3039D81F43E39E6C78 ] C:\Windows\SysWOW64\winsta.dll

14:37:09.0188 5064 C:\Windows\SysWOW64\winsta.dll - ok

14:37:09.0190 5064 [ 9C09AF87AC7351985AB5FFBA3FC52575 ] C:\Program Files\AVAST Software\Avast\AhResBhv.dll

14:37:09.0190 5064 C:\Program Files\AVAST Software\Avast\AhResBhv.dll - ok

14:37:09.0192 5064 [ E844C96552989FA1ECA95778583A904C ] C:\Program Files\AVAST Software\Avast\AhResJs.dll

14:37:09.0192 5064 C:\Program Files\AVAST Software\Avast\AhResJs.dll - ok

14:37:09.0195 5064 [ 17F5861A03516864A5F4CC04C7324278 ] C:\Program Files\AVAST Software\Avast\AhResMai.dll

14:37:09.0195 5064 C:\Program Files\AVAST Software\Avast\AhResMai.dll - ok

14:37:09.0197 5064 [ 8BEC10C53E927CD5E442FE332804F1AC ] C:\Program Files\AVAST Software\Avast\AhResMes.dll

14:37:09.0197 5064 C:\Program Files\AVAST Software\Avast\AhResMes.dll - ok

14:37:09.0199 5064 [ 9B2F20ECF609EDF54FEC43E792028261 ] C:\Program Files\AVAST Software\Avast\AhResNS.dll

14:37:09.0199 5064 C:\Program Files\AVAST Software\Avast\AhResNS.dll - ok

14:37:09.0201 5064 [ 857661F2E5A677CFB6D3B2CF6E428227 ] C:\Program Files\AVAST Software\Avast\AhResP2P.dll

14:37:09.0201 5064 C:\Program Files\AVAST Software\Avast\AhResP2P.dll - ok

14:37:09.0203 5064 [ 2466ED58B8EFB3320BCA73ACF8179D24 ] C:\Program Files\AVAST Software\Avast\AhResStd.dll

14:37:09.0203 5064 C:\Program Files\AVAST Software\Avast\AhResStd.dll - ok

14:37:09.0205 5064 [ 5D9550E02D981B92B133E5F8F7BDF8D2 ] C:\Program Files\AVAST Software\Avast\AhResWS.dll

14:37:09.0205 5064 C:\Program Files\AVAST Software\Avast\AhResWS.dll - ok

14:37:09.0208 5064 [ 8999B8631C7FD9F7F9EC3CAFD953BA24 ] C:\Windows\SysWOW64\mswsock.dll

14:37:09.0208 5064 C:\Windows\SysWOW64\mswsock.dll - ok

14:37:09.0210 5064 [ 357BE883C5236BFC7341CB9E82308908 ] C:\Windows\System32\wlanapi.dll

14:37:09.0210 5064 C:\Windows\System32\wlanapi.dll - ok

14:37:09.0212 5064 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] C:\Windows\System32\spoolsv.exe

14:37:09.0212 5064 C:\Windows\System32\spoolsv.exe - ok

14:37:09.0214 5064 [ 03706015DB44368375AEBE6339490E66 ] C:\Windows\System32\netcfgx.dll

14:37:09.0214 5064 C:\Windows\System32\netcfgx.dll - ok

14:37:09.0217 5064 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] C:\Windows\System32\drivers\vwifimp.sys

14:37:09.0217 5064 C:\Windows\System32\drivers\vwifimp.sys - ok

14:37:09.0219 5064 [ B40420876B9288E0A1C8CCA8A84E5DC9 ] C:\Windows\SysWOW64\dnsapi.dll

14:37:09.0219 5064 C:\Windows\SysWOW64\dnsapi.dll - ok

14:37:09.0221 5064 [ 26BA928D3FBA2A12589A8A9B1A47FB08 ] C:\Program Files\AVAST Software\Avast\defs\12121000\aswAR.dll

14:37:09.0221 5064 C:\Program Files\AVAST Software\Avast\defs\12121000\aswAR.dll - ok

14:37:09.0223 5064 [ 0B7E85364CB878E2AD531DB7B601A9E5 ] C:\Windows\SysWOW64\NapiNSP.dll

14:37:09.0223 5064 C:\Windows\SysWOW64\NapiNSP.dll - ok

14:37:09.0225 5064 [ 5CF640EDDB1E40A5AB1BB743BCDEC610 ] C:\Windows\SysWOW64\pnrpnsp.dll

14:37:09.0225 5064 C:\Windows\SysWOW64\pnrpnsp.dll - ok

14:37:09.0227 5064 [ EE5C8E27C37B79CB54A2FCEEED2DC262 ] C:\Windows\SysWOW64\WSHTCPIP.DLL

14:37:09.0227 5064 C:\Windows\SysWOW64\WSHTCPIP.DLL - ok

14:37:09.0229 5064 [ 0D0FA4434A9434641AB0A6332AC5560A ] C:\Program Files\AVAST Software\Avast\defs\12121000\aswRawFS.dll

14:37:09.0229 5064 C:\Program Files\AVAST Software\Avast\defs\12121000\aswRawFS.dll - ok

14:37:09.0231 5064 [ 5DF5D8CFD9B9573FA3B2C89D9061A240 ] C:\Windows\SysWOW64\winrnr.dll

14:37:09.0231 5064 C:\Windows\SysWOW64\winrnr.dll - ok

14:37:09.0233 5064 [ 9D4A1690AF93F233E15380398BEC7431 ] C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL

14:37:09.0233 5064 C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL - ok

14:37:09.0235 5064 [ A90DC9ABD65DB1A8902F361103029952 ] C:\Windows\SysWOW64\IPHLPAPI.DLL

14:37:09.0235 5064 C:\Windows\SysWOW64\IPHLPAPI.DLL - ok

14:37:09.0237 5064 [ ED6EE83D61EBC683C2CD8E899EA6FEBE ] C:\Windows\SysWOW64\rasadhlp.dll

14:37:09.0237 5064 C:\Windows\SysWOW64\rasadhlp.dll - ok

14:37:09.0239 5064 [ CFF35B879D1618D42C86644C717BA947 ] C:\Windows\SysWOW64\winnsi.dll

14:37:09.0239 5064 C:\Windows\SysWOW64\winnsi.dll - ok

14:37:09.0241 5064 [ 73E8667A19FEEDD856DF2695E9E511D4 ] C:\Windows\SysWOW64\wship6.dll

14:37:09.0242 5064 C:\Windows\SysWOW64\wship6.dll - ok

14:37:09.0243 5064 [ 82974D6A2FD19445CC5171FC378668A4 ] C:\Windows\System32\BFE.DLL

14:37:09.0243 5064 C:\Windows\System32\BFE.DLL - ok

14:37:09.0245 5064 [ 6C02A83164F5CC0A262F4199F0871CF5 ] C:\Windows\System32\drivers\bowser.sys

14:37:09.0246 5064 C:\Windows\System32\drivers\bowser.sys - ok

14:37:09.0248 5064 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] C:\Windows\System32\drivers\mpsdrv.sys

14:37:09.0248 5064 C:\Windows\System32\drivers\mpsdrv.sys - ok

14:37:09.0250 5064 [ A5D9106A73DC88564C825D317CAC68AC ] C:\Windows\System32\drivers\mrxsmb.sys

14:37:09.0250 5064 C:\Windows\System32\drivers\mrxsmb.sys - ok

14:37:09.0252 5064 [ D711B3C1D5F42C0C2415687BE09FC163 ] C:\Windows\System32\drivers\mrxsmb10.sys

14:37:09.0252 5064 C:\Windows\System32\drivers\mrxsmb10.sys - ok

14:37:09.0254 5064 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] C:\Windows\System32\drivers\mrxsmb20.sys

14:37:09.0254 5064 C:\Windows\System32\drivers\mrxsmb20.sys - ok

14:37:09.0256 5064 [ 851A1382EED3E3A7476DB004F4EE3E1A ] C:\Windows\System32\wkssvc.dll

14:37:09.0256 5064 C:\Windows\System32\wkssvc.dll - ok

14:37:09.0258 5064 [ 8792BAB371B4B1589E015B6FD1ED3B15 ] C:\Windows\System32\cryptnet.dll

14:37:09.0258 5064 C:\Windows\System32\cryptnet.dll - ok

14:37:09.0260 5064 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] C:\Windows\System32\cryptsvc.dll

14:37:09.0260 5064 C:\Windows\System32\cryptsvc.dll - ok

14:37:09.0262 5064 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] C:\Windows\System32\dps.dll

14:37:09.0262 5064 C:\Windows\System32\dps.dll - ok

14:37:09.0264 5064 [ FCD84C381E0140AF901E58D48882D26B ] C:\Windows\System32\IKEEXT.DLL

14:37:09.0264 5064 C:\Windows\System32\IKEEXT.DLL - ok

14:37:09.0266 5064 [ 04D48692EFF181DA46DD8EA8BE9FFB2B ] C:\Windows\System32\mfevtps.exe

14:37:09.0266 5064 C:\Windows\System32\mfevtps.exe - ok

14:37:09.0268 5064 [ 847D3AE376C0817161A14A82C8922A9E ] C:\Windows\System32\netman.dll

14:37:09.0268 5064 C:\Windows\System32\netman.dll - ok

14:37:09.0270 5064 [ C6DCD1D11ED6827F05C00773C3E7053C ] C:\Windows\System32\sfc.dll

14:37:09.0270 5064 C:\Windows\System32\sfc.dll - ok

14:37:09.0272 5064 [ 895C9AB0A855547445C4181195230757 ] C:\Windows\System32\sfc_os.dll

14:37:09.0272 5064 C:\Windows\System32\sfc_os.dll - ok

14:37:09.0274 5064 [ BAAFAF9CEAEC0B73C2A3550A01F6CECB ] C:\Windows\System32\taskschd.dll

14:37:09.0274 5064 C:\Windows\System32\taskschd.dll - ok

14:37:09.0276 5064 [ 0E2F58F6E698EDCB9E58FAD0CBCD0567 ] C:\Windows\System32\vssapi.dll

14:37:09.0276 5064 C:\Windows\System32\vssapi.dll - ok

14:37:09.0278 5064 [ 3AEAA8B561E63452C655DC0584922257 ] C:\Windows\System32\pcasvc.dll

14:37:09.0278 5064 C:\Windows\System32\pcasvc.dll - ok

14:37:09.0280 5064 [ 287923557447D7E4BDD7E65B1F0F5428 ] C:\Windows\System32\vsstrace.dll

14:37:09.0280 5064 C:\Windows\System32\vsstrace.dll - ok

14:37:09.0282 5064 [ C67F8A962B2534224D5908D16D2AD3CE ] C:\Windows\System32\wfapigp.dll

14:37:09.0282 5064 C:\Windows\System32\wfapigp.dll - ok

14:37:09.0284 5064 [ 68769C3356B3BE5D1C732C97B9A80D6E ] C:\Windows\System32\drivers\PEAuth.sys

14:37:09.0284 5064 C:\Windows\System32\drivers\PEAuth.sys - ok

14:37:09.0286 5064 [ 3EA8A16169C26AFBEB544E0E48421186 ] C:\Windows\System32\drivers\secdrv.sys

14:37:09.0286 5064 C:\Windows\System32\drivers\secdrv.sys - ok

14:37:09.0288 5064 [ D4FAC263861BAE06971C7F7D0A8EBF15 ] C:\Windows\System32\ncsi.dll

14:37:09.0288 5064 C:\Windows\System32\ncsi.dll - ok

14:37:09.0290 5064 [ 8AD77806D336673F270DB31645267293 ] C:\Windows\System32\nlasvc.dll

14:37:09.0290 5064 C:\Windows\System32\nlasvc.dll - ok

14:37:09.0292 5064 [ C6CC9297BD53E5229653303E556AA539 ] C:\Windows\System32\drivers\Sftfslh.sys

14:37:09.0292 5064 C:\Windows\System32\drivers\Sftfslh.sys - ok

14:37:09.0294 5064 [ 58F4493BF748A3A89689997B7BD00E95 ] C:\Windows\System32\winhttp.dll

14:37:09.0294 5064 C:\Windows\System32\winhttp.dll - ok

14:37:09.0296 5064 [ 1834B31C749B86DAC233BBBA1C03BC48 ] C:\Windows\System32\mscms.dll

14:37:09.0296 5064 C:\Windows\System32\mscms.dll - ok

14:37:09.0298 5064 [ 1727B2A2F379A32B864C096FA794AADC ] C:\Windows\System32\aepic.dll

14:37:09.0298 5064 C:\Windows\System32\aepic.dll - ok

14:37:09.0300 5064 [ BC617A4E1B4FA8DF523A061739A0BD87 ] C:\Windows\System32\seclogon.dll

14:37:09.0300 5064 C:\Windows\System32\seclogon.dll - ok

14:37:09.0302 5064 [ 77B5035BC6EDF4D1B6265391AECEE4C0 ] C:\Windows\System32\vpnikeapi.dll

14:37:09.0302 5064 C:\Windows\System32\vpnikeapi.dll - ok

14:37:09.0304 5064 [ 603EBD34E216C5654A2D774EAC98D278 ] C:\Windows\System32\webio.dll

14:37:09.0304 5064 C:\Windows\System32\webio.dll - ok

14:37:09.0306 5064 [ 2BBF3FDB70B8965DFA0258CBAB41ECCE ] C:\Windows\System32\ssdpapi.dll

14:37:09.0306 5064 C:\Windows\System32\ssdpapi.dll - ok

14:37:09.0308 5064 [ 210FCACAF902B2CD47CF9FD17D846146 ] C:\Windows\System32\aeevts.dll

14:37:09.0308 5064 C:\Windows\System32\aeevts.dll - ok

14:37:09.0310 5064 [ 390AA7BC52CEE43F6790CDEA1E776703 ] C:\Windows\System32\drivers\Sftplaylh.sys

14:37:09.0310 5064 C:\Windows\System32\drivers\Sftplaylh.sys - ok

14:37:09.0312 5064 [ 6313F223E817CC09AA41811DAA7F541D ] C:\Windows\System32\snmptrap.exe

14:37:09.0312 5064 C:\Windows\System32\snmptrap.exe - ok

14:37:09.0315 5064 [ C3CDDD18F43D44AB713CF8C4916F7696 ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

14:37:09.0315 5064 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe - ok

14:37:09.0317 5064 [ 908ACB1F594274965A53926B10C81E89 ] C:\Windows\System32\provsvc.dll

14:37:09.0317 5064 C:\Windows\System32\provsvc.dll - ok

14:37:09.0319 5064 [ C733D233B623B7FFCE5031E4B756EE26 ] C:\Windows\SysWOW64\profapi.dll

14:37:09.0319 5064 C:\Windows\SysWOW64\profapi.dll - ok

14:37:09.0321 5064 [ D15618A0FF8DBC2C5BF3726BACC75A0B ] C:\Windows\SysWOW64\userenv.dll

14:37:09.0321 5064 C:\Windows\SysWOW64\userenv.dll - ok

14:37:09.0323 5064 [ BDAC1AA64495D0F7E1FF810EBBF1F018 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll

14:37:09.0323 5064 C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll - ok

14:37:09.0326 5064 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] C:\Windows\System32\sstpsvc.dll

14:37:09.0326 5064 C:\Windows\System32\sstpsvc.dll - ok

14:37:09.0328 5064 [ 27E461F0BE5BFF5FC737328F749538C3 ] C:\Windows\System32\drivers\srvnet.sys

14:37:09.0328 5064 C:\Windows\System32\drivers\srvnet.sys - ok

14:37:09.0330 5064 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] C:\Windows\System32\drivers\tcpipreg.sys

14:37:09.0330 5064 C:\Windows\System32\drivers\tcpipreg.sys - ok

14:37:09.0332 5064 [ BCEA9AB347E53BC03B2E36BE0B8BA0EF ] C:\Windows\System32\httpapi.dll

14:37:09.0332 5064 C:\Windows\System32\httpapi.dll - ok

14:37:09.0334 5064 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] C:\Windows\System32\sysmain.dll

14:37:09.0334 5064 C:\Windows\System32\sysmain.dll - ok

14:37:09.0336 5064 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] C:\Windows\System32\tapisrv.dll

14:37:09.0336 5064 C:\Windows\System32\tapisrv.dll - ok

14:37:09.0338 5064 [ 4E5FE39C1076D115EC8BFCFE14D75B80 ] C:\Windows\SysWOW64\credssp.dll

14:37:09.0338 5064 C:\Windows\SysWOW64\credssp.dll - ok

14:37:09.0340 5064 [ 7321F18D1F820612ED0E9F2D4B578A7E ] C:\Windows\SysWOW64\cryptsp.dll

14:37:09.0340 5064 C:\Windows\SysWOW64\cryptsp.dll - ok

14:37:09.0342 5064 [ F15C619AB2084DA83AEFA8641C4B55A7 ] C:\Users\Shop\AppData\Local\temp\TeamViewer\Version6\TeamViewer_Service.exe

14:37:09.0342 5064 C:\Users\Shop\AppData\Local\temp\TeamViewer\Version6\TeamViewer_Service.exe - ok

14:37:09.0344 5064 [ B9A8CBCFCD3EC9D2EA4740AF347BF108 ] C:\Windows\SysWOW64\mpr.dll

14:37:09.0344 5064 C:\Windows\SysWOW64\mpr.dll - ok

14:37:09.0346 5064 [ 10FB16B50AFFDA6D44588F3C445DC273 ] C:\Windows\SysWOW64\setupapi.dll

14:37:09.0346 5064 C:\Windows\SysWOW64\setupapi.dll - ok

14:37:09.0348 5064 [ 60D21799A4AF4EDCE65FB98830E4B0C8 ] C:\Windows\SysWOW64\crypt32.dll

14:37:09.0349 5064 C:\Windows\SysWOW64\crypt32.dll - ok

14:37:09.0351 5064 [ 2EEFF4502F5E13B1BED4A04CCAD64C08 ] C:\Windows\SysWOW64\devobj.dll

14:37:09.0351 5064 C:\Windows\SysWOW64\devobj.dll - ok

14:37:09.0353 5064 [ 938F39B50BAFE13D6F58C7790682C010 ] C:\Windows\SysWOW64\msasn1.dll

14:37:09.0353 5064 C:\Windows\SysWOW64\msasn1.dll - ok

14:37:09.0355 5064 [ B2DB6ABA2E292235749B80A9C3DFA867 ] C:\Windows\SysWOW64\imagehlp.dll

14:37:09.0355 5064 C:\Windows\SysWOW64\imagehlp.dll - ok

14:37:09.0357 5064 [ 6F8E3B7B70E1BBA871212940C1FBDF60 ] C:\Windows\SysWOW64\SensApi.dll

14:37:09.0357 5064 C:\Windows\SysWOW64\SensApi.dll - ok

14:37:09.0359 5064 [ 7E7AFD841694F6AC397E99D75CEAD49D ] C:\Windows\System32\trkwks.dll

14:37:09.0359 5064 C:\Windows\System32\trkwks.dll - ok

14:37:09.0361 5064 [ 19B07E7E8915D701225DA41CB3877306 ] C:\Windows\System32\wbem\WMIsvc.dll

14:37:09.0361 5064 C:\Windows\System32\wbem\WMIsvc.dll - ok

14:37:09.0363 5064 [ 39C5F32747B3414D1BB216FDB1DEFC58 ] C:\Windows\SysWOW64\dwmapi.dll

14:37:09.0363 5064 C:\Windows\SysWOW64\dwmapi.dll - ok

14:37:09.0365 5064 [ 18AB2E5A40064ED5F7791AC5946A90F3 ] C:\Windows\SysWOW64\msimg32.dll

14:37:09.0365 5064 C:\Windows\SysWOW64\msimg32.dll - ok

14:37:09.0367 5064 [ 17448AF0BBA9E7AB5EC955AF93F271BD ] C:\Windows\SysWOW64\wintrust.dll

14:37:09.0367 5064 C:\Windows\SysWOW64\wintrust.dll - ok

14:37:09.0369 5064 [ 43964FA89CCF97BA6BE34D69455AC65F ] C:\Windows\SysWOW64\uxtheme.dll

14:37:09.0369 5064 C:\Windows\SysWOW64\uxtheme.dll - ok

14:37:09.0371 5064 [ 539C49CEBB3C50957AC8A09D95ECD880 ] C:\Windows\SysWOW64\shfolder.dll

14:37:09.0371 5064 C:\Windows\SysWOW64\shfolder.dll - ok

14:37:09.0373 5064 [ 7DB5AA22A8A8E5C2D335F44853C1F6DE ] C:\Windows\System32\wbemcomn.dll

14:37:09.0373 5064 C:\Windows\System32\wbemcomn.dll - ok

14:37:09.0375 5064 [ 50D09C6DBD5D5E447B284116D1A26F62 ] C:\Windows\SysWOW64\jsproxy.dll

14:37:09.0375 5064 C:\Windows\SysWOW64\jsproxy.dll - ok

14:37:09.0377 5064 [ 0255C22D99602534F15CBB8D9B6F152F ] C:\Windows\System32\wbem\WinMgmtR.dll

14:37:09.0377 5064 C:\Windows\System32\wbem\WinMgmtR.dll - ok

14:37:09.0379 5064 [ 0C52762C606BCF6A377D5E4688191A6B ] C:\Windows\System32\wbem\WmiDcPrv.dll

14:37:09.0379 5064 C:\Windows\System32\wbem\WmiDcPrv.dll - ok

14:37:09.0381 5064 [ 68ECCA523ED760AAFC03C5D587569859 ] C:\Windows\SysWOW64\samcli.dll

14:37:09.0381 5064 C:\Windows\SysWOW64\samcli.dll - ok

14:37:09.0383 5064 [ A3F5E8EC1316C3E2562B82694A251C9E ] C:\Windows\System32\wbem\fastprox.dll

14:37:09.0383 5064 C:\Windows\System32\wbem\fastprox.dll - ok

14:37:09.0385 5064 [ 72910F1DEB838E6E08A9017BFB7D4F0B ] C:\Windows\SysWOW64\browcli.dll

14:37:09.0385 5064 C:\Windows\SysWOW64\browcli.dll - ok

14:37:09.0387 5064 [ EE26D130808D16C0E417BBBED0451B34 ] C:\Windows\System32\ntdsapi.dll

14:37:09.0387 5064 C:\Windows\System32\ntdsapi.dll - ok

14:37:09.0389 5064 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] C:\Windows\System32\wiaservc.dll

14:37:09.0389 5064 C:\Windows\System32\wiaservc.dll - ok

14:37:09.0391 5064 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

14:37:09.0391 5064 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE - ok

14:37:09.0394 5064 [ 93812FDC01AA864195816CD814445F95 ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\SQMAPI.DLL

14:37:09.0394 5064 C:\Program Files\Common Files\Microsoft Shared\Windows Live\SQMAPI.DLL - ok

14:37:09.0396 5064 [ B837D1528CE2E3CB79F09496BC08DDC6 ] C:\Windows\System32\SensApi.dll

14:37:09.0396 5064 C:\Windows\System32\SensApi.dll - ok

14:37:09.0398 5064 [ 9689A9C7F7C2A1A423CDA2C3B43FFF65 ] C:\Windows\System32\wer.dll

14:37:09.0398 5064 C:\Windows\System32\wer.dll - ok

14:37:09.0400 5064 [ A8EDB86FC2A4D6D1285E4C70384AC35A ] C:\Windows\System32\dllhost.exe

14:37:09.0400 5064 C:\Windows\System32\dllhost.exe - ok

14:37:09.0402 5064 [ 666A60F6F5E719856FF6254E0966EFF7 ] C:\Windows\System32\wbem\wbemprox.dll

14:37:09.0402 5064 C:\Windows\System32\wbem\wbemprox.dll - ok

14:37:09.0404 5064 [ 3FD15B4611D9BDA3F8013548C0ECAECA ] C:\Windows\SysWOW64\ntmarta.dll

14:37:09.0404 5064 C:\Windows\SysWOW64\ntmarta.dll - ok

14:37:09.0406 5064 [ 4DEC9B5BEDAA97B1FF6A3923E1C4F58A ] C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe

14:37:09.0406 5064 C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe - ok

14:37:09.0408 5064 [ 08C2957BB30058E663720C5606885653 ] C:\Windows\System32\iphlpsvc.dll

14:37:09.0408 5064 C:\Windows\System32\iphlpsvc.dll - ok

14:37:09.0411 5064 [ 6BFDC58CEACB90417FCE6BBBD7F3C660 ] C:\Program Files\Common Files\mcafee\systemcore\lockdown.dll

14:37:09.0411 5064 C:\Program Files\Common Files\mcafee\systemcore\lockdown.dll - ok

14:37:09.0412 5064 [ 9F688D9EE28AD1282DCB0F25F26775AE ] C:\Program Files\Common Files\mcafee\systemcore\mytilus3.dll

14:37:09.0412 5064 C:\Program Files\Common Files\mcafee\systemcore\mytilus3.dll - ok

14:37:09.0415 5064 [ 43478C48F97846E7251EE48DFB698652 ] C:\Program Files\Common Files\mcafee\systemcore\mytilus3_server.dll

14:37:09.0415 5064 C:\Program Files\Common Files\mcafee\systemcore\mytilus3_server.dll - ok

14:37:09.0417 5064 [ 915CCD0159ECD7957890E525A629E6DD ] C:\Program Files\Common Files\mcafee\systemcore\mytilus3_worker.dll

14:37:09.0417 5064 C:\Program Files\Common Files\mcafee\systemcore\mytilus3_worker.dll - ok

14:37:09.0419 5064 [ 295657F93F6B19DEEA804048E1CB4FF9 ] C:\Windows\System32\lz32.dll

14:37:09.0419 5064 C:\Windows\System32\lz32.dll - ok

14:37:09.0421 5064 [ CDAD3376DFF3D9AC7FDCBE2B94B0D3C8 ] C:\Windows\System32\shfolder.dll

14:37:09.0421 5064 C:\Windows\System32\shfolder.dll - ok

14:37:09.0423 5064 [ 0ACBDACAE25FF643049F5E9C7FB19E70 ] C:\Program Files\Common Files\mcafee\systemcore\mcshield.dll

14:37:09.0423 5064 C:\Program Files\Common Files\mcafee\systemcore\mcshield.dll - ok

14:37:09.0425 5064 [ A8BB45F9ECAD993461E0FEF8E2A99152 ] C:\Windows\SysWOW64\Wldap32.dll

14:37:09.0425 5064 C:\Windows\SysWOW64\Wldap32.dll - ok

14:37:09.0428 5064 [ BA9315165B80B742EA81FD4B745EBE71 ] C:\Program Files\Common Files\mcafee\systemcore\ftl.dll

14:37:09.0428 5064 C:\Program Files\Common Files\mcafee\systemcore\ftl.dll - ok

14:37:09.0430 5064 [ 4575380ECBAAB6C812731B0D4588D364 ] C:\Program Files\Common Files\mcafee\systemcore\mfeelama.dll

14:37:09.0430 5064 C:\Program Files\Common Files\mcafee\systemcore\mfeelama.dll - ok

14:37:09.0432 5064 [ 97C398750C8E80A48EB63999546F796E ] C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe

14:37:09.0432 5064 C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe - ok

14:37:09.0434 5064 [ B3455B5D864BD1E4F48D4E76FAFD8163 ] C:\Program Files\Common Files\mcafee\systemcore\mfehida.dll

14:37:09.0434 5064 C:\Program Files\Common Files\mcafee\systemcore\mfehida.dll - ok

14:37:09.0437 5064 [ 14DFDEAF4E589ED3F1FF187A86B9408C ] C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll

14:37:09.0437 5064 C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll - ok

14:37:09.0439 5064 [ 71C32E0008B01EDF7657D886662D21D5 ] C:\Program Files\Common Files\mcafee\systemcore\mfevtpa.dll

14:37:09.0439 5064 C:\Program Files\Common Files\mcafee\systemcore\mfevtpa.dll - ok

14:37:09.0441 5064 [ 27B9E163740A226B65E4B9E186117911 ] C:\Windows\System32\sqmapi.dll

14:37:09.0441 5064 C:\Windows\System32\sqmapi.dll - ok

14:37:09.0443 5064 [ 13693B6354DD6E72DC5131DA7D764B90 ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

14:37:09.0443 5064 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe - ok

14:37:09.0446 5064 [ 7B38D7916A7CD058C16A0A6CA5077901 ] C:\Windows\System32\wdscore.dll

14:37:09.0446 5064 C:\Windows\System32\wdscore.dll - ok

14:37:09.0448 5064 [ 0364256B4A2A93A8C8CDA6B3B5A0EFF5 ] C:\Windows\System32\wiatrace.dll

14:37:09.0448 5064 C:\Windows\System32\wiatrace.dll - ok

14:37:09.0450 5064 [ ED8EC63F7522DF4852147C84EC62C36A ] C:\Windows\SysWOW64\rsaenh.dll

14:37:09.0450 5064 C:\Windows\SysWOW64\rsaenh.dll - ok

14:37:09.0452 5064 [ 5731B230C7D6ADD88CC7CD07D247BEA8 ] C:\Program Files\Common Files\mcafee\systemcore\mfeavfa.dll

NunnBetter · December 10, 2012

14:37:09.0452 5064 C:\Program Files\Common Files\mcafee\systemcore\mfeavfa.dll - ok

14:37:09.0454 5064 [ A0A2C1D812C231C9BFE119FDC68E341B ] C:\Windows\System32\IDStore.dll

14:37:09.0454 5064 C:\Windows\System32\IDStore.dll - ok

14:37:09.0456 5064 [ EE867A0870FC9E4972BA9EAAD35651E2 ] C:\Windows\System32\rasmans.dll

14:37:09.0456 5064 C:\Windows\System32\rasmans.dll - ok

14:37:09.0458 5064 [ 44C96B48112EB24AE7764EBF1C527000 ] C:\Windows\System32\rastapi.dll

14:37:09.0458 5064 C:\Windows\System32\rastapi.dll - ok

14:37:09.0460 5064 [ FAFAE01E889DC9C05A6CA2138CFC220B ] C:\Windows\System32\tapi32.dll

14:37:09.0460 5064 C:\Windows\System32\tapi32.dll - ok

14:37:09.0462 5064 [ 079FD1D59EAD19270C979AF174D881A3 ] C:\ProgramData\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

14:37:09.0462 5064 C:\ProgramData\Microsoft\IdentityCRL\production\ppcrlconfig600.dll - ok

14:37:09.0464 5064 [ 0B2D65FDDE31069299AA6330F359FF9C ] C:\Windows\System32\msxml3.dll

14:37:09.0464 5064 C:\Windows\System32\msxml3.dll - ok

14:37:09.0467 5064 [ 6177E1A8F215576A56D437B48A00848B ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftsync.dll

14:37:09.0467 5064 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftsync.dll - ok

14:37:09.0469 5064 [ 3B367397320C26DBA890B260F80D1B1B ] C:\Windows\System32\hnetcfg.dll

14:37:09.0469 5064 C:\Windows\System32\hnetcfg.dll - ok

14:37:09.0471 5064 [ 517110BD83835338C037269E603DB55D ] C:\Windows\System32\taskhost.exe

14:37:09.0471 5064 C:\Windows\System32\taskhost.exe - ok

14:37:09.0473 5064 [ 295E1F2BC1AFDAFD98FF426BCE524BA9 ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftuser.dll

14:37:09.0473 5064 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftuser.dll - ok

14:37:09.0475 5064 [ 7760899D95C2D1AAC5C1D34AF41A11C7 ] C:\Program Files\mcafee\virusscan\Engine\5500.1093\mscan64a.dll

14:37:09.0475 5064 C:\Program Files\mcafee\virusscan\Engine\5500.1093\mscan64a.dll - ok

14:37:09.0478 5064 [ 1F1CA9E99DD5BF918BE0BF30B5A42FDA ] C:\Windows\System32\MsCtfMonitor.dll

14:37:09.0478 5064 C:\Windows\System32\MsCtfMonitor.dll - ok

14:37:09.0480 5064 [ F09A9A1AD21FE618C4C8B0A0D830C886 ] C:\Windows\System32\msutb.dll

14:37:09.0480 5064 C:\Windows\System32\msutb.dll - ok

14:37:09.0482 5064 [ 6CEF7856A3EFAC59470F6208F0F585CE ] C:\Windows\System32\mpr.dll

14:37:09.0482 5064 C:\Windows\System32\mpr.dll - ok

14:37:09.0484 5064 [ F162D5F5E845B9DC352DD1BAD8CEF1BC ] C:\Windows\System32\dwm.exe

14:37:09.0484 5064 C:\Windows\System32\dwm.exe - ok

14:37:09.0485 5064 [ D2A0FFA75AB181B19B5EB93BB29C7686 ] C:\Windows\System32\unimdm.tsp

14:37:09.0486 5064 C:\Windows\System32\unimdm.tsp - ok

14:37:09.0488 5064 [ BAFE84E637BF7388C96EF48D4D3FDD53 ] C:\Windows\System32\userinit.exe

14:37:09.0488 5064 C:\Windows\System32\userinit.exe - ok

14:37:09.0490 5064 [ FCFCD1101C5DA23B4B95F93D02B2C169 ] C:\Windows\System32\dwmredir.dll

14:37:09.0490 5064 C:\Windows\System32\dwmredir.dll - ok

14:37:09.0492 5064 [ 4BA77A5EF71C14C764B0ED4701683E3E ] C:\Windows\System32\dwmcore.dll

14:37:09.0492 5064 C:\Windows\System32\dwmcore.dll - ok

14:37:09.0494 5064 [ 5EB55F661DEBF156E126160BCD4D89F8 ] C:\Windows\System32\wbem\wbemcore.dll

14:37:09.0494 5064 C:\Windows\System32\wbem\wbemcore.dll - ok

14:37:09.0496 5064 [ 9BB99503D6A4DD62569EDE9E5E2672A5 ] C:\Windows\System32\HotStartUserAgent.dll

14:37:09.0496 5064 C:\Windows\System32\HotStartUserAgent.dll - ok

14:37:09.0498 5064 [ 94EEAC26F57811BD1AEFC164412F7FCE ] C:\Windows\System32\PlaySndSrv.dll

14:37:09.0498 5064 C:\Windows\System32\PlaySndSrv.dll - ok

14:37:09.0500 5064 [ 94B7DF336815B47236724019FAB24B7C ] C:\Windows\System32\uniplat.dll

14:37:09.0500 5064 C:\Windows\System32\uniplat.dll - ok

14:37:09.0502 5064 [ 41326DD08ACC0CDC5F8177AF96C066E8 ] C:\Windows\System32\kmddsp.tsp

14:37:09.0502 5064 C:\Windows\System32\kmddsp.tsp - ok

14:37:09.0504 5064 [ A733CC986EB51F8FBF598B981DC19FBA ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftcore.dll

14:37:09.0504 5064 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftcore.dll - ok

14:37:09.0506 5064 [ 1D6BC2769DA66C1145F4DA5A65F52E61 ] C:\Windows\System32\ndptsp.tsp

14:37:09.0506 5064 C:\Windows\System32\ndptsp.tsp - ok

14:37:09.0508 5064 [ 7C1BAE7D23D4874FEE256A2B9C00E019 ] C:\Windows\System32\hidphone.tsp

14:37:09.0508 5064 C:\Windows\System32\hidphone.tsp - ok

14:37:09.0510 5064 [ 591FE0A6CEB19BF886CEB1331F591940 ] C:\Windows\SysWOW64\ncrypt.dll

14:37:09.0510 5064 C:\Windows\SysWOW64\ncrypt.dll - ok

14:37:09.0512 5064 [ CE71B9119A258EDD0A05B37D7B0F92E3 ] C:\Windows\SysWOW64\bcrypt.dll

14:37:09.0512 5064 C:\Windows\SysWOW64\bcrypt.dll - ok

14:37:09.0514 5064 [ E8449FE262D7406BCB2AC2A45C53EC5F ] C:\Windows\SysWOW64\bcryptprimitives.dll

14:37:09.0514 5064 C:\Windows\SysWOW64\bcryptprimitives.dll - ok

14:37:09.0517 5064 [ 70A176BF2ED362862944C371838262F8 ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

14:37:09.0517 5064 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE - ok

14:37:09.0519 5064 [ 1097F3035BAF46CED8B332B3564C5108 ] C:\Windows\SysWOW64\gpapi.dll

14:37:09.0519 5064 C:\Windows\SysWOW64\gpapi.dll - ok

14:37:09.0520 5064 [ 332FEAB1435662FC6C672E25BEB37BE3 ] C:\Windows\explorer.exe

14:37:09.0521 5064 C:\Windows\explorer.exe - ok

14:37:09.0523 5064 [ 087D8668C71634A3A3761135ABF16EEE ] C:\Windows\System32\wbem\esscli.dll

14:37:09.0523 5064 C:\Windows\System32\wbem\esscli.dll - ok

14:37:09.0525 5064 [ 12C45E3CB6D65F73209549E2D02ECA7A ] C:\Windows\SysWOW64\propsys.dll

14:37:09.0525 5064 C:\Windows\SysWOW64\propsys.dll - ok

14:37:09.0527 5064 [ E1374D37477322D4956604711008C69D ] C:\Windows\System32\d3d10_1.dll

14:37:09.0527 5064 C:\Windows\System32\d3d10_1.dll - ok

14:37:09.0529 5064 [ 718B6F51AB7F6FE2988A36868F9AD3AB ] C:\Windows\System32\wbem\wbemsvc.dll

14:37:09.0529 5064 C:\Windows\System32\wbem\wbemsvc.dll - ok

14:37:09.0531 5064 [ F11A57E91FDAECFB41A5CB21EB1EBC8E ] C:\Windows\System32\dssenh.dll

14:37:09.0531 5064 C:\Windows\System32\dssenh.dll - ok

14:37:09.0533 5064 [ A717A35120DBAB5AB707AB40662AF9DD ] C:\Windows\System32\rasppp.dll

14:37:09.0533 5064 C:\Windows\System32\rasppp.dll - ok

14:37:09.0535 5064 [ 0FE5CD5F9C9248F42D1EF56E495B182E ] C:\Windows\System32\vpnike.dll

14:37:09.0535 5064 C:\Windows\System32\vpnike.dll - ok

14:37:09.0537 5064 [ 426BA4E737A7988FD1202AF2F2B2F4A6 ] C:\Windows\System32\d3d10_1core.dll

14:37:09.0537 5064 C:\Windows\System32\d3d10_1core.dll - ok

14:37:09.0539 5064 [ 28AD5E311996A34025CFB07E131058DD ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

14:37:09.0539 5064 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL - ok

14:37:09.0541 5064 [ F404E59DB6A0F122AB26BF4F3E2FD0FA ] C:\Windows\System32\dxgi.dll

14:37:09.0541 5064 C:\Windows\System32\dxgi.dll - ok

14:37:09.0543 5064 [ 0143DB80DACFB7C2B5B7009ED9063353 ] C:\Windows\System32\wbem\wmiutils.dll

14:37:09.0543 5064 C:\Windows\System32\wbem\wmiutils.dll - ok

14:37:09.0545 5064 [ 6A84E68B538B8B04608BF2F0D426CE6F ] C:\Windows\System32\raschap.dll

14:37:09.0545 5064 C:\Windows\System32\raschap.dll - ok

14:37:09.0547 5064 [ 88351B29B622B30962D2FEB6CA8D860B ] C:\Windows\System32\rasadhlp.dll

14:37:09.0547 5064 C:\Windows\System32\rasadhlp.dll - ok

14:37:09.0549 5064 [ 45CFBFA8EDC3DF4E2B7FB0D0260FE051 ] C:\Windows\System32\localspl.dll

14:37:09.0549 5064 C:\Windows\System32\localspl.dll - ok

14:37:09.0552 5064 [ 352B3DC62A0D259A82A052238425C872 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll

14:37:09.0552 5064 C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll - ok

14:37:09.0554 5064 [ 0AB34456654C283DAA13B8D2BA21439B ] C:\Windows\System32\wbem\repdrvfs.dll

14:37:09.0554 5064 C:\Windows\System32\wbem\repdrvfs.dll - ok

14:37:09.0556 5064 [ CE291A12090CBB2A4BCB1F7A547DEC37 ] C:\Windows\System32\igd10umd64.dll

14:37:09.0556 5064 C:\Windows\System32\igd10umd64.dll - ok

14:37:09.0558 5064 [ 65EA57712340C09B1B0C427B4848AE05 ] C:\Windows\System32\taskeng.exe

14:37:09.0558 5064 C:\Windows\System32\taskeng.exe - ok

14:37:09.0560 5064 [ 32BFCF1CA719F2A3A31C721BD5F90303 ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftpsr.dll

14:37:09.0560 5064 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftpsr.dll - ok

14:37:09.0562 5064 [ 3285481F5C12305CA104A6C493CA5A0B ] C:\Windows\System32\spoolss.dll

14:37:09.0562 5064 C:\Windows\System32\spoolss.dll - ok

14:37:09.0564 5064 [ 0015ACFBBDD164A8A730009908868CA7 ] C:\Windows\System32\winspool.drv

14:37:09.0564 5064 C:\Windows\System32\winspool.drv - ok

14:37:09.0567 5064 [ 19E41CCCEE697CC9465396B370929792 ] C:\Windows\System32\FXSMON.dll

14:37:09.0567 5064 C:\Windows\System32\FXSMON.dll - ok

14:37:09.0569 5064 [ 2E1729779D60F4003508F393E8343ED8 ] C:\Windows\System32\hpf3lw73.dll

14:37:09.0569 5064 C:\Windows\System32\hpf3lw73.dll - ok

14:37:09.0571 5064 [ C5AC93CF3BA30D367FB49148A2B673B9 ] C:\Windows\System32\PrintIsolationProxy.dll

14:37:09.0571 5064 C:\Windows\System32\PrintIsolationProxy.dll - ok

14:37:09.0573 5064 [ 32A3C8600AF124CBAAD845F13CFAE3CB ] C:\Windows\System32\tcpmon.dll

14:37:09.0573 5064 C:\Windows\System32\tcpmon.dll - ok

14:37:09.0575 5064 [ FF5688D309347F2720911D8796912834 ] C:\Windows\SysWOW64\clbcatq.dll

14:37:09.0575 5064 C:\Windows\SysWOW64\clbcatq.dll - ok

14:37:09.0577 5064 [ 805A52C5AE26C28E88FDD9BCCFE6F312 ] C:\Windows\System32\TSChannel.dll

14:37:09.0577 5064 C:\Windows\System32\TSChannel.dll - ok

14:37:09.0579 5064 [ 40EE4E67311F4019CCA2120D88C60576 ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftfsi_wow64.dll

14:37:09.0579 5064 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftfsi_wow64.dll - ok

14:37:09.0582 5064 [ 93518C6EDE0B61BCBD02BDB02BD05FEE ] C:\Windows\System32\snmpapi.dll

14:37:09.0582 5064 C:\Windows\System32\snmpapi.dll - ok

14:37:09.0584 5064 [ DF72A9936D0C3F517083119648814B09 ] C:\Windows\System32\usbmon.dll

14:37:09.0584 5064 C:\Windows\System32\usbmon.dll - ok

14:37:09.0586 5064 [ F1B205F932F62F94506A5F332C895DAF ] C:\Windows\System32\WSDApi.dll

14:37:09.0586 5064 C:\Windows\System32\WSDApi.dll - ok

14:37:09.0588 5064 [ A1D7E3ADCDB07DDB6F423862DCB1A52B ] C:\Windows\System32\WSDMon.dll

14:37:09.0588 5064 C:\Windows\System32\WSDMon.dll - ok

14:37:09.0590 5064 [ FFF9D00CF16397C64317F213484F94BD ] C:\Windows\System32\wsnmp32.dll

14:37:09.0590 5064 C:\Windows\System32\wsnmp32.dll - ok

14:37:09.0592 5064 [ A7E1129289E833FC9E52018BBEE20C4D ] C:\Program Files (x86)\Mitchell1\DPR Client Manager\DPRClientManager.exe

14:37:09.0592 5064 C:\Program Files (x86)\Mitchell1\DPR Client Manager\DPRClientManager.exe - ok

14:37:09.0594 5064 [ EED05D42D91835064703E2318552ED25 ] C:\Windows\System32\ExplorerFrame.dll

14:37:09.0594 5064 C:\Windows\System32\ExplorerFrame.dll - ok

14:37:09.0596 5064 [ 863F793D15B4026B1A5FDECA873D4D84 ] C:\Windows\SysWOW64\apphelp.dll

14:37:09.0596 5064 C:\Windows\SysWOW64\apphelp.dll - ok

14:37:09.0598 5064 [ DDD0357A92FA843EFF8915ED17253D6C ] C:\Windows\System32\wbem\WmiPrvSD.dll

14:37:09.0598 5064 C:\Windows\System32\wbem\WmiPrvSD.dll - ok

14:37:09.0600 5064 [ C55516D98DD5D8F0153C2A9B4227DA86 ] C:\Windows\System32\webservices.dll

14:37:09.0600 5064 C:\Windows\System32\webservices.dll - ok

14:37:09.0602 5064 [ D41FEBD098234F02485A4EA98D4730A4 ] C:\Windows\System32\ncobjapi.dll

14:37:09.0602 5064 C:\Windows\System32\ncobjapi.dll - ok

14:37:09.0604 5064 [ 6F40D6FB05E0C1E5402812B426971AF0 ] C:\Windows\System32\wbem\wbemess.dll

14:37:09.0604 5064 C:\Windows\System32\wbem\wbemess.dll - ok

14:37:09.0606 5064 [ B5055B51BAA0FD0A736A88653DA3C1C0 ] C:\Windows\System32\fundisc.dll

14:37:09.0606 5064 C:\Windows\System32\fundisc.dll - ok

14:37:09.0608 5064 [ A08C010D859F8EB42BDD7E1D55B8CA27 ] C:\Windows\System32\mscoree.dll

14:37:09.0608 5064 C:\Windows\System32\mscoree.dll - ok

14:37:09.0610 5064 [ 4581716B4BF76ACFD8E167EB0B26D82A ] C:\Windows\System32\fdPnp.dll

14:37:09.0610 5064 C:\Windows\System32\fdPnp.dll - ok

14:37:09.0612 5064 [ 4C1244FEF74C60A4B1B151C76609CBE2 ] C:\Windows\System32\wsdchngr.dll

14:37:09.0612 5064 C:\Windows\System32\wsdchngr.dll - ok

14:37:09.0614 5064 [ 09AB81CEE443569D9A3CC151DDF70444 ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftcomp.dll

14:37:09.0615 5064 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftcomp.dll - ok

14:37:09.0617 5064 [ 1D626FE2E13C1CE49CA0136CFF214E93 ] C:\Windows\System32\spool\prtprocs\x64\winprint.dll

14:37:09.0617 5064 C:\Windows\System32\spool\prtprocs\x64\winprint.dll - ok

14:37:09.0619 5064 [ CA9F7888B524D8100B977C81F44C3234 ] C:\Windows\SysWOW64\winhttp.dll

14:37:09.0619 5064 C:\Windows\SysWOW64\winhttp.dll - ok

14:37:09.0621 5064 [ AD911EBC4FADCCAA243E379FF23AB959 ] C:\Windows\System32\spool\prtprocs\x64\hpfppw73.dll

14:37:09.0621 5064 C:\Windows\System32\spool\prtprocs\x64\hpfppw73.dll - ok

14:37:09.0623 5064 [ 9F463B07C8EFA35FFA581844A9F4FE79 ] C:\Windows\System32\spool\prtprocs\x64\LXKPTPRC.DLL

14:37:09.0623 5064 C:\Windows\System32\spool\prtprocs\x64\LXKPTPRC.DLL - ok

14:37:09.0625 5064 [ 8EA53101FF2B15BDFF934B62A8FB326D ] C:\Windows\SysWOW64\logoncli.dll

14:37:09.0625 5064 C:\Windows\SysWOW64\logoncli.dll - ok

14:37:09.0627 5064 [ FB19FC5951A88F3C523E35C2C98D23C0 ] C:\Windows\SysWOW64\webio.dll

14:37:09.0627 5064 C:\Windows\SysWOW64\webio.dll - ok

14:37:09.0629 5064 [ 867C93CE4B4CCFCDE65CE48A769CD227 ] C:\Program Files\AVAST Software\Avast\ashShA64.dll

14:37:09.0629 5064 C:\Program Files\AVAST Software\Avast\ashShA64.dll - ok

14:37:09.0631 5064 [ 5EB6E9C8BE1ACC5830780E0F9A846255 ] C:\Windows\System32\msi.dll

14:37:09.0631 5064 C:\Windows\System32\msi.dll - ok

14:37:09.0633 5064 [ 548CB980D7876E207CC9F8B60C1587A3 ] C:\Windows\System32\win32spl.dll

14:37:09.0633 5064 C:\Windows\System32\win32spl.dll - ok

14:37:09.0635 5064 [ A6C29DB53ECA94FA8591C5388D604B82 ] C:\Windows\SysWOW64\msi.dll

14:37:09.0635 5064 C:\Windows\SysWOW64\msi.dll - ok

14:37:09.0637 5064 [ 507D5567A0A4EE86C4B0CE2CE1777025 ] C:\Windows\System32\inetpp.dll

14:37:09.0637 5064 C:\Windows\System32\inetpp.dll - ok

14:37:09.0639 5064 [ 1BF0CB861A48FEB1638228760750F3CB ] C:\Windows\System32\cscapi.dll

14:37:09.0639 5064 C:\Windows\System32\cscapi.dll - ok

14:37:09.0641 5064 [ 024352FEEC9042260BB4CFB4D79A206B ] C:\Windows\System32\EhStorShell.dll

14:37:09.0641 5064 C:\Windows\System32\EhStorShell.dll - ok

14:37:09.0643 5064 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] C:\Windows\System32\drivers\srv2.sys

14:37:09.0643 5064 C:\Windows\System32\drivers\srv2.sys - ok

14:37:09.0645 5064 [ B95F6501A2F8B2E78C697FEC401970CE ] C:\Windows\System32\ipnathlp.dll

14:37:09.0645 5064 C:\Windows\System32\ipnathlp.dll - ok

14:37:09.0648 5064 [ 2DF29664ED261F0FC448E58F338F0671 ] C:\Windows\System32\mprapi.dll

14:37:09.0648 5064 C:\Windows\System32\mprapi.dll - ok

14:37:09.0650 5064 [ 64A48342A57BC34943FA2014A2650550 ] C:\Program Files\Common Files\mcafee\systemcore\mfeapfa.dll

14:37:09.0650 5064 C:\Program Files\Common Files\mcafee\systemcore\mfeapfa.dll - ok

14:37:09.0652 5064 [ A42F2C1EB3B66C54FB3C7B79D30C1A6D ] C:\Windows\System32\netshell.dll

14:37:09.0652 5064 C:\Windows\System32\netshell.dll - ok

14:37:09.0654 5064 [ 49E5753D923F1AC63B22D3DCB0B47E00 ] C:\Windows\System32\uDWM.dll

14:37:09.0654 5064 C:\Windows\System32\uDWM.dll - ok

14:37:09.0656 5064 [ 037A719DAD50603202C978CD802623E4 ] C:\Windows\System32\ntshrui.dll

14:37:09.0656 5064 C:\Windows\System32\ntshrui.dll - ok

14:37:09.0658 5064 [ F928E5E72BBA15DD0CE9A26E0413D236 ] C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe

14:37:09.0658 5064 C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe - ok

14:37:09.0660 5064 [ 1D63F4366288B8A7595397E27010FD44 ] C:\Windows\System32\IconCodecService.dll

14:37:09.0660 5064 C:\Windows\System32\IconCodecService.dll - ok

14:37:09.0661 5064 [ B574522827D94126C03975FD53F0B26B ] C:\Windows\System32\drivers\mfeapfk.sys

14:37:09.0661 5064 C:\Windows\System32\drivers\mfeapfk.sys - ok

14:37:09.0664 5064 [ 617E29A0B0A2807466560D4C4E338D3E ] C:\Windows\System32\drivers\Sftredirlh.sys

14:37:09.0664 5064 C:\Windows\System32\drivers\Sftredirlh.sys - ok

14:37:09.0666 5064 [ DF3CA8D16BDED6A54977B30E66864D33 ] C:\Windows\System32\msvcr100.dll

14:37:09.0666 5064 C:\Windows\System32\msvcr100.dll - ok

14:37:09.0668 5064 [ 025E7DBDB98866ED3CB2D4DDA70B364D ] C:\Windows\System32\runonce.exe

14:37:09.0668 5064 C:\Windows\System32\runonce.exe - ok

14:37:09.0670 5064 [ D44741F65A1D71F65814A12CF6E2400A ] C:\Windows\SysWOW64\runonce.exe

14:37:09.0670 5064 C:\Windows\SysWOW64\runonce.exe - ok

14:37:09.0672 5064 [ 3D3CBD1847F980FB03343A63671E7886 ] C:\Windows\SysWOW64\schannel.dll

14:37:09.0672 5064 C:\Windows\SysWOW64\schannel.dll - ok

14:37:09.0674 5064 [ 2C0D7AA2DACF6E11C71F22BFC0050147 ] C:\Program Files\Common Files\mcafee\msc\LogCntrl.dll

14:37:09.0674 5064 C:\Program Files\Common Files\mcafee\msc\LogCntrl.dll - ok

14:37:09.0676 5064 [ AD7B9C14083B52BC532FBA5948342B98 ] C:\Windows\SysWOW64\cmd.exe

14:37:09.0676 5064 C:\Windows\SysWOW64\cmd.exe - ok

14:37:09.0678 5064 [ 8422CE4E53738275C4C8539F91790A7F ] C:\PROGRA~1\mcafee\msc\McOobeSv.dll

14:37:09.0678 5064 C:\PROGRA~1\mcafee\msc\McOobeSv.dll - ok

14:37:09.0680 5064 [ 326C7F76A29897A892AA7726E91C1C67 ] C:\Windows\SysWOW64\winbrand.dll

14:37:09.0680 5064 C:\Windows\SysWOW64\winbrand.dll - ok

14:37:09.0683 5064 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] C:\Windows\System32\drivers\srv.sys

14:37:09.0683 5064 C:\Windows\System32\drivers\srv.sys - ok

14:37:09.0685 5064 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] C:\Windows\System32\browser.dll

14:37:09.0685 5064 C:\Windows\System32\browser.dll - ok

14:37:09.0687 5064 [ D9F42719019740BAA6D1C6D536CBDAA6 ] C:\Windows\System32\srvsvc.dll

14:37:09.0687 5064 C:\Windows\System32\srvsvc.dll - ok

14:37:09.0689 5064 [ A6B73FCB9496DB101F3066CAF5A7DA4B ] C:\Windows\SysWOW64\ieframe.dll

14:37:09.0689 5064 C:\Windows\SysWOW64\ieframe.dll - ok

14:37:09.0691 5064 [ CFEFA40DDE34659BE5211966EAD86437 ] C:\Windows\System32\netmsg.dll

14:37:09.0691 5064 C:\Windows\System32\netmsg.dll - ok

14:37:09.0693 5064 [ FF80CAD87555E8E4D2CFD7B9058343F8 ] C:\Windows\System32\sscore.dll

14:37:09.0693 5064 C:\Windows\System32\sscore.dll - ok

14:37:09.0695 5064 [ 81749E073AC5857B044A686B406E5244 ] C:\Windows\System32\clusapi.dll

14:37:09.0695 5064 C:\Windows\System32\clusapi.dll - ok

14:37:09.0697 5064 [ 344FCC9850C3A8A3B4D3C65151AF8E4C ] C:\Windows\System32\resutils.dll

14:37:09.0697 5064 C:\Windows\System32\resutils.dll - ok

14:37:09.0699 5064 [ E36112A8A6C7F840169A7E92C12F4203 ] C:\Windows\System32\wsock32.dll

14:37:09.0699 5064 C:\Windows\System32\wsock32.dll - ok

14:37:09.0701 5064 [ E30E33FEA53642563CF4C240CACA5D2E ] C:\PROGRA~1\mcafee\mpf\MpfSvc.dll

14:37:09.0701 5064 C:\PROGRA~1\mcafee\mpf\MpfSvc.dll - ok

14:37:09.0703 5064 [ D9A9702E43A5859896F34898D5FD3FEC ] C:\Windows\SysWOW64\msxml6.dll

14:37:09.0703 5064 C:\Windows\SysWOW64\msxml6.dll - ok

14:37:09.0705 5064 [ AA794B099F776B37ACCDEAD00E0FBFC9 ] C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll

14:37:09.0705 5064 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - ok

14:37:09.0707 5064 [ 8E01332CC4B68BC6B5B7EFFE374442AA ] C:\Windows\SysWOW64\oleacc.dll

14:37:09.0707 5064 C:\Windows\SysWOW64\oleacc.dll - ok

14:37:09.0709 5064 [ BE247AE996A9FDE007A27B51413A6C79 ] C:\Windows\SysWOW64\shdocvw.dll

14:37:09.0709 5064 C:\Windows\SysWOW64\shdocvw.dll - ok

14:37:09.0711 5064 [ EBC984F0CE40E0DAF0454D806EC2A7EC ] C:\Users\NunnBetter\AppData\Local\temp\1A671DDC-65E4-4D1B-B396-5B1CD53375BD.exe

14:37:09.0711 5064 C:\Users\NunnBetter\AppData\Local\temp\1A671DDC-65E4-4D1B-B396-5B1CD53375BD.exe - ok

14:37:09.0713 5064 [ FDC385A0F7D7DD880C4622D1DF08ABE9 ] C:\Windows\System32\ntprint.dll

14:37:09.0713 5064 C:\Windows\System32\ntprint.dll - ok

14:37:09.0715 5064 [ CA79539D3D4C0BA66F0F051A5EE5E923 ] C:\Windows\SysWOW64\cryptnet.dll

14:37:09.0715 5064 C:\Windows\SysWOW64\cryptnet.dll - ok

14:37:09.0717 5064 [ 1DB71A41DAEE6B3F8CD0DDA8209FA2D5 ] C:\Windows\SysWOW64\WindowsCodecs.dll

14:37:09.0717 5064 C:\Windows\SysWOW64\WindowsCodecs.dll - ok

14:37:09.0719 5064 [ 846D0E4DB261CFAF363902E41498E961 ] C:\Windows\SysWOW64\EhStorShell.dll

14:37:09.0720 5064 C:\Windows\SysWOW64\EhStorShell.dll - ok

14:37:09.0722 5064 [ 03F3B770DFBED6131653CEDA8CA780F0 ] C:\Windows\SysWOW64\ntshrui.dll

14:37:09.0722 5064 C:\Windows\SysWOW64\ntshrui.dll - ok

14:37:09.0724 5064 [ 827CB0D6C3F8057EA037FF271F8E9795 ] C:\Windows\SysWOW64\imageres.dll

14:37:09.0724 5064 C:\Windows\SysWOW64\imageres.dll - ok

14:37:09.0726 5064 [ 8B74CEC6980D4816B0037AE9A27E538F ] C:\Windows\SysWOW64\slc.dll

14:37:09.0726 5064 C:\Windows\SysWOW64\slc.dll - ok

14:37:09.0728 5064 [ 72794D112CBAFF3BC0C29BF7350D4741 ] C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

14:37:09.0728 5064 C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE - ok

14:37:09.0730 5064 [ C797D1677BA81306AFBB9FA8A9A8F483 ] C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSHARED.DLL

14:37:09.0730 5064 C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSHARED.DLL - ok

14:37:09.0732 5064 [ 108C2CFA5527458C096A699929ECBD80 ] C:\Windows\SysWOW64\credui.dll

14:37:09.0732 5064 C:\Windows\SysWOW64\credui.dll - ok

14:37:09.0734 5064 [ 7717F84F483002815490033BF069DABD ] C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\GdiPlus.dll

14:37:09.0735 5064 C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\GdiPlus.dll - ok

14:37:09.0737 5064 [ 565A30B70BE8A9B171839003F2D69683 ] C:\Windows\SysWOW64\hlink.dll

14:37:09.0737 5064 C:\Windows\SysWOW64\hlink.dll - ok

14:37:09.0739 5064 [ 74AF1FFCAFD60DA88A386AE161F56438 ] C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\en-us\CVHIntl.dll

14:37:09.0739 5064 C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\en-us\CVHIntl.dll - ok

14:37:09.0741 5064 [ 02CD5B2C3B017122CAC00BDB520CD7AC ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll

14:37:09.0741 5064 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll - ok

14:37:09.0743 5064 [ B08E3476F0874DBAD672D0AC4FB2580B ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftintf.dll

14:37:09.0743 5064 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftintf.dll - ok

14:37:09.0746 5064 [ 4C1E16B9A53102C8D6FBA587CBCB95DE ] C:\Windows\SysWOW64\msv1_0.dll

14:37:09.0746 5064 C:\Windows\SysWOW64\msv1_0.dll - ok

14:37:09.0748 5064 [ 1128637CAD49A8E3C8B5FA5D0A061525 ] C:\Windows\SysWOW64\cryptdll.dll

14:37:09.0748 5064 C:\Windows\SysWOW64\cryptdll.dll - ok

14:37:09.0750 5064 [ 06A754FE28A06F780A099703CFCAAA22 ] C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6\msvcr80.dll

14:37:09.0750 5064 C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6\msvcr80.dll - ok

14:37:09.0752 5064 [ 01AEA2F16FE0C522DDFD7FAFFC959C6A ] C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\74a5f0c2bc0d0e6e3c4ec4886b9be891\mscorlib.ni.dll

14:37:09.0752 5064 C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\74a5f0c2bc0d0e6e3c4ec4886b9be891\mscorlib.ni.dll - ok

14:37:09.0754 5064 [ 3ABB7ADB9CCBCD24D6C55201A3842A94 ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll

14:37:09.0755 5064 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll - ok

14:37:09.0757 5064 [ 1CDEA9188899E76D4FFD54C9D512CCDB ] C:\Windows\SysWOW64\msxml3.dll

14:37:09.0757 5064 C:\Windows\SysWOW64\msxml3.dll - ok

14:37:09.0758 5064 [ BF1FC3F79B863C914687A737C2F3D681 ] C:\Windows\System32\wdi.dll

14:37:09.0758 5064 C:\Windows\System32\wdi.dll - ok

14:37:09.0760 5064 [ 9A85ABCE0FDD1AF8E79E731EB0B679F3 ] C:\Windows\SysWOW64\dhcpcsvc.dll

14:37:09.0760 5064 C:\Windows\SysWOW64\dhcpcsvc.dll - ok

14:37:09.0762 5064 [ 4449D23E8F197862F1B16F1E6C89C36C ] C:\Windows\System32\diagperf.dll

14:37:09.0762 5064 C:\Windows\System32\diagperf.dll - ok

14:37:09.0765 5064 [ 58A0CDABEA255616827B1C22C9994466 ] C:\Windows\System32\NapiNSP.dll

14:37:09.0765 5064 C:\Windows\System32\NapiNSP.dll - ok

14:37:09.0767 5064 [ F7073C962C4FB7C415565DDE109DE49F ] C:\Windows\System32\npmproxy.dll

14:37:09.0767 5064 C:\Windows\System32\npmproxy.dll - ok

14:37:09.0769 5064 [ 93221146D4EBBF314C29B23CD6CC391D ] C:\Windows\System32\wpdbusenum.dll

14:37:09.0769 5064 C:\Windows\System32\wpdbusenum.dll - ok

14:37:09.0771 5064 [ 613C8CE10A5FDE582BA5FA64C4D56AAA ] C:\Windows\System32\pnrpnsp.dll

14:37:09.0771 5064 C:\Windows\System32\pnrpnsp.dll - ok

14:37:09.0773 5064 [ E64D9EC8018C55873B40FDEE9DBEF5B3 ] C:\Windows\System32\PortableDeviceApi.dll

14:37:09.0773 5064 C:\Windows\System32\PortableDeviceApi.dll - ok

14:37:09.0775 5064 [ 2E2072EB48238FCA8FBB7A9F5FABAC45 ] C:\Windows\System32\winrnr.dll

14:37:09.0775 5064 C:\Windows\System32\winrnr.dll - ok

14:37:09.0777 5064 [ E1B22739C933BE33F53DB58C5393ADD3 ] C:\Windows\System32\Apphlpdm.dll

14:37:09.0777 5064 C:\Windows\System32\Apphlpdm.dll - ok

14:37:09.0779 5064 [ 9719E3D834F5C8C43F56A93DFA497023 ] C:\Windows\System32\pnpts.dll

14:37:09.0779 5064 C:\Windows\System32\pnpts.dll - ok

14:37:09.0781 5064 [ AFA79C343F9D1555F7E5D5FA70BB2A14 ] C:\Windows\System32\PortableDeviceConnectApi.dll

14:37:09.0781 5064 C:\Windows\System32\PortableDeviceConnectApi.dll - ok

14:37:09.0783 5064 [ 46863C4CC5B68EB09EA2D5EEF0F1193A ] C:\Windows\System32\radardt.dll

14:37:09.0783 5064 C:\Windows\System32\radardt.dll - ok

14:37:09.0785 5064 [ BF4AC709BE5BF64F331F5D67773A0C82 ] C:\Windows\System32\perftrack.dll

14:37:09.0786 5064 C:\Windows\System32\perftrack.dll - ok

14:37:09.0788 5064 [ E811F8510B133E70CF6E509FB809824F ] C:\Windows\System32\wdiasqmmodule.dll

14:37:09.0788 5064 C:\Windows\System32\wdiasqmmodule.dll - ok

14:37:09.0790 5064 [ DDA4CAF29D8C0A297F886BFE561E6659 ] C:\Windows\System32\drivers\WUDFRd.sys

14:37:09.0790 5064 C:\Windows\System32\drivers\WUDFRd.sys - ok

14:37:09.0792 5064 [ 1CF21800E337F4039AAD4C94B4280EE4 ] C:\Windows\System32\mprmsg.dll

14:37:09.0792 5064 C:\Windows\System32\mprmsg.dll - ok

14:37:09.0794 5064 [ 79AFFC7FEEA9CD2FEFEA5EF3B631A02C ] C:\Windows\System32\ndiscapCfg.dll

14:37:09.0794 5064 C:\Windows\System32\ndiscapCfg.dll - ok

14:37:09.0796 5064 [ 3D6AF45673C4B31CDECD7F80AF09D443 ] C:\Windows\System32\rascfg.dll

14:37:09.0796 5064 C:\Windows\System32\rascfg.dll - ok

14:37:09.0798 5064 [ 55DE45B116711881C852D2841E4C84DD ] C:\Windows\System32\tcpipcfg.dll

14:37:09.0798 5064 C:\Windows\System32\tcpipcfg.dll - ok

14:37:09.0800 5064 [ 8ABFE00F213F2571498F1B8FD7939A98 ] C:\Windows\System32\WUDFHost.exe

14:37:09.0800 5064 C:\Windows\System32\WUDFHost.exe - ok

14:37:09.0802 5064 [ 8BE887F1743FBB39ED2C9CA2937742D6 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System\f3888a2c7b096d416ca0cfc5405219b4\System.ni.dll

14:37:09.0803 5064 C:\Windows\assembly\NativeImages_v2.0.50727_64\System\f3888a2c7b096d416ca0cfc5405219b4\System.ni.dll - ok

14:37:09.0805 5064 [ 25AE683DCB4AE7E6F1B193A0CB9DB35F ] C:\Windows\System32\WUDFx.dll

14:37:09.0805 5064 C:\Windows\System32\WUDFx.dll - ok

14:37:09.0807 5064 [ 91D6F0AB79AA36FFB932157865206F35 ] C:\Windows\System32\drivers\UMDF\WpdFs.dll

14:37:09.0807 5064 C:\Windows\System32\drivers\UMDF\WpdFs.dll - ok

14:37:09.0809 5064 [ 9864D52F15AD32094A636C6B5281D9E7 ] C:\Windows\System32\WMVCORE.DLL

14:37:09.0809 5064 C:\Windows\System32\WMVCORE.DLL - ok

14:37:09.0811 5064 [ AACC48FE239F0DF126DA2F28930A5B83 ] C:\Windows\System32\WMASF.DLL

14:37:09.0811 5064 C:\Windows\System32\WMASF.DLL - ok

14:37:09.0813 5064 [ 389CA818132C1D7DCF0C791E8D9035DE ] C:\Windows\System32\PortableDeviceClassExtension.dll

14:37:09.0813 5064 C:\Windows\System32\PortableDeviceClassExtension.dll - ok

14:37:09.0815 5064 [ 4F3CD1C59EA71401E155C432BCECE180 ] C:\Windows\System32\PortableDeviceTypes.dll

14:37:09.0815 5064 C:\Windows\System32\PortableDeviceTypes.dll - ok

14:37:09.0817 5064 [ 4B78B431F225FD8624C5655CB1DE7B61 ] C:\Windows\System32\aelupsvc.dll

14:37:09.0817 5064 C:\Windows\System32\aelupsvc.dll - ok

14:37:09.0819 5064 [ E629F1A051C82795DDFFD3E8D4855811 ] C:\Windows\System32\dimsjob.dll

14:37:09.0819 5064 C:\Windows\System32\dimsjob.dll - ok

14:37:09.0821 5064 [ 35CB97CBC3EDC463418ED4997AAB29B6 ] C:\Windows\System32\pautoenr.dll

14:37:09.0821 5064 C:\Windows\System32\pautoenr.dll - ok

14:37:09.0823 5064 [ 94DFBB481BF51158B216E23C5C1C9D6E ] C:\Windows\System32\certcli.dll

14:37:09.0823 5064 C:\Windows\System32\certcli.dll - ok

14:37:09.0825 5064 [ 263B26106606A010CF877472B535E4BB ] C:\Windows\System32\CertEnroll.dll

14:37:09.0825 5064 C:\Windows\System32\CertEnroll.dll - ok

14:37:09.0827 5064 [ D79D19EC66106119DCD45D042C6B5170 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\88f8a6436dc95497fce0dae347646e53\System.Drawing.ni.dll

14:37:09.0827 5064 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\88f8a6436dc95497fce0dae347646e53\System.Drawing.ni.dll - ok

14:37:09.0830 5064 [ EADFC95980BC24DF3C7EE5B2CD38F043 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\d6af7216038720b1adeca71e81c14bd6\System.Windows.Forms.ni.dll

14:37:09.0830 5064 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\d6af7216038720b1adeca71e81c14bd6\System.Windows.Forms.ni.dll - ok

14:37:09.0832 5064 [ A4B3A9FFA483F8CB36E56C19448DDE36 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\52e2da35b160dbd254683f72a0f1b937\System.Xml.ni.dll

14:37:09.0832 5064 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\52e2da35b160dbd254683f72a0f1b937\System.Xml.ni.dll - ok

14:37:09.0835 5064 [ 2571D556FC661E22397D627AA2DDBD69 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\e56d345b174428dabaf908fa64a9642c\System.Web.Services.ni.dll

14:37:09.0835 5064 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web.Services\e56d345b174428dabaf908fa64a9642c\System.Web.Services.ni.dll - ok

14:37:09.0837 5064 [ 5D0E28A22860E487148B2820309C0063 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\ac14913a11af4bfae0b8eb913a46a161\System.Configuration.ni.dll

14:37:09.0837 5064 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\ac14913a11af4bfae0b8eb913a46a161\System.Configuration.ni.dll - ok

14:37:09.0839 5064 [ D64D99EC088B54FFE8EE67A480386C20 ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Culture.dll

14:37:09.0839 5064 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Culture.dll - ok

14:37:09.0842 5064 [ 625D390D5CBA512166571019E5EFECFB ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management\98059f32b988a3e2d869e9b3bf56db17\System.Management.ni.dll

14:37:09.0842 5064 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management\98059f32b988a3e2d869e9b3bf56db17\System.Management.ni.dll - ok

14:37:09.0844 5064 [ 30830E9DA7F0BA3946665827D5247EC0 ] C:\PROGRA~1\mcafee\mpf\MpfEvt.dll

14:37:09.0844 5064 C:\PROGRA~1\mcafee\mpf\MpfEvt.dll - ok

14:37:09.0846 5064 [ 45375DF47ED4D0535739465105AAABE3 ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\WMINet_Utils.dll

14:37:09.0846 5064 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\WMINet_Utils.dll - ok

14:37:09.0848 5064 [ 5A55E3E6F53592F8170623DEFA2B7954 ] C:\Windows\System32\atl100.dll

14:37:09.0848 5064 C:\Windows\System32\atl100.dll - ok

14:37:09.0850 5064 [ 4F096D96285E06CD51AEF7D2D3DE04DA ] C:\Windows\System32\msvcp100.dll

14:37:09.0850 5064 C:\Windows\System32\msvcp100.dll - ok

14:37:09.0852 5064 [ 619A67C9F617B7E69315BB28ECD5E1DF ] C:\Windows\System32\wbem\WmiPrvSE.exe

14:37:09.0852 5064 C:\Windows\System32\wbem\WmiPrvSE.exe - ok

14:37:09.0854 5064 [ 6607C2182C6A53ED983813AFE2F85768 ] C:\Windows\System32\wbem\cimwin32.dll

14:37:09.0854 5064 C:\Windows\System32\wbem\cimwin32.dll - ok

14:37:09.0856 5064 [ F1F438402FC37991A0502F09CC0AA284 ] C:\PROGRA~1\COMMON~1\mcafee\HACKER~1\HWAPI.dll

14:37:09.0856 5064 C:\PROGRA~1\COMMON~1\mcafee\HACKER~1\HWAPI.dll - ok

14:37:09.0859 5064 [ 8ED06C74B9BC9CE0E24EA0CB0C5CF2A7 ] C:\PROGRA~1\COMMON~1\mcafee\core\McEvtBrk.dll

14:37:09.0859 5064 C:\PROGRA~1\COMMON~1\mcafee\core\McEvtBrk.dll - ok

14:37:09.0861 5064 [ 19B8FEB9455D9D63425514271F5752E6 ] C:\PROGRA~1\mcafee\msc\mclwapi.dll

14:37:09.0861 5064 C:\PROGRA~1\mcafee\msc\mclwapi.dll - ok

14:37:09.0863 5064 [ 1484B9EBF567346582DE571B0E164AE0 ] C:\Windows\System32\framedynos.dll

14:37:09.0863 5064 C:\Windows\System32\framedynos.dll - ok

14:37:09.0865 5064 [ 254C46A466484D4169DFF44B29F6A979 ] C:\PROGRA~1\COMMON~1\mcafee\msc\mcutil\11_6_2~1\mcutil.dll

14:37:09.0865 5064 C:\PROGRA~1\COMMON~1\mcafee\msc\mcutil\11_6_2~1\mcutil.dll - ok

14:37:09.0867 5064 [ A7B282F4153D7E6715A1BB70113CF7EB ] C:\Program Files\Common Files\mcafee\VSCore\lockdown.dll

14:37:09.0867 5064 C:\Program Files\Common Files\mcafee\VSCore\lockdown.dll - ok

14:37:09.0869 5064 [ 0D893F8D145D3B125B0226727C243A69 ] C:\Windows\System32\security.dll

14:37:09.0869 5064 C:\Windows\System32\security.dll - ok

14:37:09.0871 5064 [ 012787CEB35505EB78DF82E0A0072888 ] C:\Windows\System32\browcli.dll

14:37:09.0871 5064 C:\Windows\System32\browcli.dll - ok

14:37:09.0873 5064 [ C4BFE4B61086416B0529212F92BCE081 ] C:\Windows\System32\schedcli.dll

14:37:09.0873 5064 C:\Windows\System32\schedcli.dll - ok

14:37:09.0875 5064 [ 49442BA6DCE4B4E3C1CB0AB193FE29AD ] C:\Program Files\Internet Explorer\iexplore.exe

14:37:09.0875 5064 C:\Program Files\Internet Explorer\iexplore.exe - ok

14:37:09.0877 5064 [ C97C8EC408AC6F2453EB9417E5EF355A ] C:\Program Files\Common Files\mcafee\msc\McRTMui.dll

14:37:09.0877 5064 C:\Program Files\Common Files\mcafee\msc\McRTMui.dll - ok

14:37:09.0879 5064 [ 57FA62B72A77EA12B95EB73501D92B63 ] C:\Program Files\Common Files\mcafee\msc\LangSel.dll

14:37:09.0879 5064 C:\Program Files\Common Files\mcafee\msc\LangSel.dll - ok

14:37:09.0882 5064 [ A444C15772749F572E61DAFED66F51C4 ] C:\Program Files\mcafee\msc\oemui.dll

14:37:09.0882 5064 C:\Program Files\mcafee\msc\oemui.dll - ok

14:37:09.0884 5064 [ 88FD96AD1B0C56474ADDC97100FFFA39 ] C:\Program Files\mcafee\mpf\L10N.dll

14:37:09.0884 5064 C:\Program Files\mcafee\mpf\L10N.dll - ok

14:37:09.0886 5064 [ 97E0EC3D6D99E8CC2B17EF2D3760E8FC ] C:\Windows\System32\schtasks.exe

14:37:09.0886 5064 C:\Windows\System32\schtasks.exe - ok

14:37:09.0888 5064 [ FEB91B4DA0D540865260A33838654FA3 ] C:\Windows\System32\nci.dll

14:37:09.0888 5064 C:\Windows\System32\nci.dll - ok

14:37:09.0890 5064 [ AC0C9CEA1218DAB1994AF8B28E680BD9 ] C:\Windows\System32\wlaninst.dll

14:37:09.0890 5064 C:\Windows\System32\wlaninst.dll - ok

14:37:09.0892 5064 [ 5A406C9C8E0880D3EABADC5DFD1ACDAE ] C:\Windows\System32\wwaninst.dll

14:37:09.0892 5064 C:\Windows\System32\wwaninst.dll - ok

14:37:09.0894 5064 [ DD81D91FF3B0763C392422865C9AC12E ] C:\Windows\System32\rundll32.exe

14:37:09.0894 5064 C:\Windows\System32\rundll32.exe - ok

14:37:09.0896 5064 [ E6F0F82788E8BD0F7A616350EFA0761C ] C:\Windows\System32\actxprxy.dll

14:37:09.0896 5064 C:\Windows\System32\actxprxy.dll - ok

14:37:09.0898 5064 [ 0017163E0D5985168792BEE5CF70D5DF ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\diasymreader.dll

14:37:09.0898 5064 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\diasymreader.dll - ok

14:37:09.0900 5064 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] C:\Windows\System32\IPSECSVC.DLL

14:37:09.0900 5064 C:\Windows\System32\IPSECSVC.DLL - ok

14:37:09.0902 5064 [ 9BC93C9ACFA34DB5A41B89357B31E4ED ] C:\Windows\System32\FwRemoteSvr.dll

14:37:09.0902 5064 C:\Windows\System32\FwRemoteSvr.dll - ok

14:37:09.0904 5064 [ C00DB14550E4BD49737F311C644E45FF ] C:\Windows\System32\wmi.dll

14:37:09.0904 5064 C:\Windows\System32\wmi.dll - ok

14:37:09.0906 5064 [ 17880C5A11373D67993FA652358DC306 ] C:\Program Files\Common Files\mcafee\systemcore\mfefwctl.dll

14:37:09.0906 5064 C:\Program Files\Common Files\mcafee\systemcore\mfefwctl.dll - ok

14:37:09.0908 5064 [ 45B5A89DC41577282E5BF41B1165EA71 ] C:\Windows\System32\drivers\cfwids.sys

14:37:09.0908 5064 C:\Windows\System32\drivers\cfwids.sys - ok

14:37:09.0910 5064 [ 198803E5E93E29967DFB0BCFD0186151 ] C:\Windows\System32\spfileq.dll

14:37:09.0910 5064 C:\Windows\System32\spfileq.dll - ok

14:37:09.0912 5064 [ D01AECEB5D1E1C137AF7D755DDBCC549 ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll

14:37:09.0912 5064 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll - ok

14:37:09.0914 5064 [ 0ADC83218B66A6DB380C330836F3E36D ] C:\Windows\System32\drivers\fastfat.sys

14:37:09.0914 5064 C:\Windows\System32\drivers\fastfat.sys - ok

14:37:09.0917 5064 [ 893F8E81D1117C48CB9D6E9E5F64BAB1 ] C:\Program Files\AVAST Software\Avast\Setup\avast.setup

14:37:09.0917 5064 C:\Program Files\AVAST Software\Avast\Setup\avast.setup - ok

14:37:09.0919 5064 [ D1DE1EAFDE97BE41CF6585027FF3E732 ] C:\Windows\SysWOW64\comdlg32.dll

14:37:09.0919 5064 C:\Windows\SysWOW64\comdlg32.dll - ok

14:37:09.0921 5064 [ 9E4B0E7472B4CEBA9E17F440B8CB0AB8 ] C:\Windows\SysWOW64\winspool.drv

14:37:09.0921 5064 C:\Windows\SysWOW64\winspool.drv - ok

14:37:09.0923 5064 [ 08DFDBD2FD4EA951DC46B1C7661ED35A ] C:\Windows\SysWOW64\powrprof.dll

14:37:09.0923 5064 C:\Windows\SysWOW64\powrprof.dll - ok

14:37:09.0925 5064 [ 9C17DCD6DDFEB1A012544FAF4F2789F6 ] C:\Windows\AppPatch\AcGenral.dll

14:37:09.0925 5064 C:\Windows\AppPatch\AcGenral.dll - ok

14:37:09.0927 5064 [ 936F728E04ACCF3F38801CFFCF1E3F40 ] C:\Windows\SysWOW64\oledlg.dll

14:37:09.0927 5064 C:\Windows\SysWOW64\oledlg.dll - ok

14:37:09.0929 5064 [ D5AEFAD57C08349A4393D987DF7C715D ] C:\Windows\SysWOW64\winmm.dll

14:37:09.0929 5064 C:\Windows\SysWOW64\winmm.dll - ok

14:37:09.0931 5064 [ 85683DF1F917E4D7F6BE1A04986BF1C8 ] C:\Windows\SysWOW64\msacm32.dll

14:37:09.0931 5064 C:\Windows\SysWOW64\msacm32.dll - ok

14:37:09.0933 5064 [ 40CAEEE0EAF1B8569F7C8DF6420F2CB9 ] C:\Windows\SysWOW64\sfc.dll

14:37:09.0933 5064 C:\Windows\SysWOW64\sfc.dll - ok

14:37:09.0935 5064 [ 84799328D87B3091A3BDD251E1AD31F9 ] C:\Windows\SysWOW64\sfc_os.dll

14:37:09.0935 5064 C:\Windows\SysWOW64\sfc_os.dll - ok

14:37:09.0937 5064 [ 839F96DBAAFD3353E0B248A5E0BD2A51 ] C:\Windows\SysWOW64\rasapi32.dll

14:37:09.0937 5064 C:\Windows\SysWOW64\rasapi32.dll - ok

14:37:09.0939 5064 [ 8C338238C16777A802D6A9211EB2BA50 ] C:\Windows\SysWOW64\netprofm.dll

14:37:09.0939 5064 C:\Windows\SysWOW64\netprofm.dll - ok

14:37:09.0941 5064 [ 0BA65122FFA7E37564EE86422DBF7AE8 ] C:\Windows\SysWOW64\nlaapi.dll

14:37:09.0941 5064 C:\Windows\SysWOW64\nlaapi.dll - ok

14:37:09.0943 5064 [ FFA7172354B9256DBB2CDD75F16F33FE ] C:\Windows\SysWOW64\rasman.dll

14:37:09.0943 5064 C:\Windows\SysWOW64\rasman.dll - ok

14:37:09.0945 5064 [ 0915C4DB6DBC3BB9E11B7ECBBE4B7159 ] C:\Windows\SysWOW64\rtutils.dll

14:37:09.0945 5064 C:\Windows\SysWOW64\rtutils.dll - ok

14:37:09.0947 5064 [ 81F6C1AE23B1C493D9E996C3103915D7 ] C:\Windows\SysWOW64\dhcpcsvc6.dll

14:37:09.0947 5064 C:\Windows\SysWOW64\dhcpcsvc6.dll - ok

14:37:09.0949 5064 [ 15E298B5EC5B89C5994A59863969D9FF ] C:\Windows\SysWOW64\npmproxy.dll

14:37:09.0949 5064 C:\Windows\SysWOW64\npmproxy.dll - ok

14:37:09.0951 5064 [ 162D247E995EAEBF3EF4289069E1111C ] C:\Windows\SysWOW64\devrtl.dll

14:37:09.0951 5064 C:\Windows\SysWOW64\devrtl.dll - ok

14:37:09.0953 5064 [ B519848DFA30AE2B306576B51321D102 ] C:\Windows\System32\ie4uinit.exe

14:37:09.0953 5064 C:\Windows\System32\ie4uinit.exe - ok

14:37:09.0955 5064 [ C3E98C42EDF7EF237A4BAB91FEAC7426 ] C:\Windows\System32\iedkcs32.dll

14:37:09.0955 5064 C:\Windows\System32\iedkcs32.dll - ok

14:37:09.0958 5064 [ FB10715E4099AF9FA389C71873245226 ] C:\Windows\System32\timedate.cpl

14:37:09.0958 5064 C:\Windows\System32\timedate.cpl - ok

14:37:09.0960 5064 [ C4F40F6CACD796A8E16671D0E9A2F319 ] C:\Windows\System32\shdocvw.dll

14:37:09.0960 5064 C:\Windows\System32\shdocvw.dll - ok

14:37:09.0962 5064 [ A0A65D306A5490D2EB8E7DE66898ECFD ] C:\Windows\System32\linkinfo.dll

14:37:09.0962 5064 C:\Windows\System32\linkinfo.dll - ok

14:37:09.0964 5064 [ FA752544EE1EE59E8AD938CBB43CAC93 ] C:\PROGRA~2\WIC4A1~1\MESSEN~1\msgslang.dll

14:37:09.0964 5064 C:\PROGRA~2\WIC4A1~1\MESSEN~1\msgslang.dll - ok

14:37:09.0966 5064 [ 1EAC1A8CA6874BF5B15E2EFB9A9A7B86 ] C:\Windows\System32\msftedit.dll

14:37:09.0966 5064 C:\Windows\System32\msftedit.dll - ok

14:37:09.0968 5064 [ E62FF21F5B5F69CFA5BB2F97C03C0A5B ] C:\PROGRA~2\Dell\VIDEOS~1\MUITRA~1\STMTEN~1.DLL

14:37:09.0968 5064 C:\PROGRA~2\Dell\VIDEOS~1\MUITRA~1\STMTEN~1.DLL - ok

14:37:09.0970 5064 [ 7FCAB194F01E3403C300EB034E480B36 ] C:\Windows\System32\msls31.dll

14:37:09.0970 5064 C:\Windows\System32\msls31.dll - ok

14:37:09.0972 5064 [ 7DBA84667DC18877AEF693E3543DFAD7 ] C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll

14:37:09.0972 5064 C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll - ok

14:37:09.0974 5064 [ 3504B34CD2DE00BA3CC1A195F1B739BD ] C:\Windows\System32\gameux.dll

14:37:09.0974 5064 C:\Windows\System32\gameux.dll - ok

14:37:09.0976 5064 [ 4C2C4640BF23AAFCF90519E0F34436CE ] C:\Windows\System32\DeviceCenter.dll

14:37:09.0976 5064 C:\Windows\System32\DeviceCenter.dll - ok

14:37:09.0978 5064 [ 083649EF692A066880C9326020915AFE ] C:\Program Files\AVAST Software\Avast\AvastUI.exe

14:37:09.0978 5064 C:\Program Files\AVAST Software\Avast\AvastUI.exe - ok

14:37:09.0980 5064 [ 180A7380320AF73CCF7F7D8880CA2193 ] C:\Windows\System32\ieframe.dll

14:37:09.0980 5064 C:\Windows\System32\ieframe.dll - ok

14:37:09.0982 5064 [ 179EED57FED3C7422A559633641032BA ] C:\Program Files\AVAST Software\Avast\aswUtil.dll

14:37:09.0982 5064 C:\Program Files\AVAST Software\Avast\aswUtil.dll - ok

14:37:09.0985 5064 [ CA6ADE4F7761BB15B3325356DC3B82BB ] C:\Windows\winsxs\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c\mfc90u.dll

14:37:09.0985 5064 C:\Windows\winsxs\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c\mfc90u.dll - ok

14:37:09.0987 5064 [ CF636C92B762B26F0B39B38E92380A09 ] C:\Windows\System32\oleacc.dll

14:37:09.0987 5064 C:\Windows\System32\oleacc.dll - ok

14:37:09.0989 5064 [ FBFCA1A574D47EE575448B719CBBF2E4 ] C:\Windows\winsxs\x86_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_49768ef57548175e\MFC90ENU.DLL

14:37:09.0989 5064 C:\Windows\winsxs\x86_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_49768ef57548175e\MFC90ENU.DLL - ok

14:37:09.0991 5064 [ 03A03A453F1AAAE0C73AAAF895321C7A ] C:\Windows\SysWOW64\FWPUCLNT.DLL

14:37:09.0991 5064 C:\Windows\SysWOW64\FWPUCLNT.DLL - ok

14:37:09.0993 5064 [ 69754747274B76E7FAF287239333D7E6 ] C:\Windows\System32\msiltcfg.dll

14:37:09.0993 5064 C:\Windows\System32\msiltcfg.dll - ok

14:37:09.0995 5064 [ 13790C4FB6311ECE6D6763A7EC2313FB ] C:\Program Files\AVAST Software\Avast\aswAra.dll

14:37:09.0995 5064 C:\Program Files\AVAST Software\Avast\aswAra.dll - ok

14:37:09.0997 5064 [ 24F4B480F335A6C724AF352253C5D98B ] C:\Windows\System32\thumbcache.dll

14:37:09.0997 5064 C:\Windows\System32\thumbcache.dll - ok

14:37:09.0999 5064 [ F0E7DEC6F7A3610949BDED0CA8CCB3EA ] C:\Program Files\AVAST Software\Avast\aswData.dll

14:37:09.0999 5064 C:\Program Files\AVAST Software\Avast\aswData.dll - ok

14:37:10.0001 5064 [ AB6E3DF509C6BD59062F685A40395C23 ] C:\Program Files\AVAST Software\Avast\1033\uiLangRes.dll

14:37:10.0001 5064 C:\Program Files\AVAST Software\Avast\1033\uiLangRes.dll - ok

14:37:10.0004 5064 [ AB04C6CE5DF23819B914F822E9AA0EDF ] C:\Program Files\AVAST Software\Avast\CommonRes.dll

14:37:10.0004 5064 C:\Program Files\AVAST Software\Avast\CommonRes.dll - ok

14:37:10.0006 5064 [ 405F4D32D2185F1F1BD753D8EEAFFB3A ] C:\Windows\System32\networkexplorer.dll

14:37:10.0006 5064 C:\Windows\System32\networkexplorer.dll - ok

14:37:10.0008 5064 [ BD007D624E4CD905AB2E8DF2C6DE891C ] C:\Windows\SysWOW64\Macromed\Flash\Flash11c.ocx

14:37:10.0008 5064 C:\Windows\SysWOW64\Macromed\Flash\Flash11c.ocx - ok

14:37:10.0010 5064 [ 0E85C11F8850D524B02181C6E02BA9AE ] C:\Windows\SysWOW64\dsound.dll

14:37:10.0010 5064 C:\Windows\SysWOW64\dsound.dll - ok

14:37:10.0012 5064 [ 6EF5F3F18413C367195F06E503AB86A6 ] C:\Windows\SysWOW64\d3d9.dll

14:37:10.0012 5064 C:\Windows\SysWOW64\d3d9.dll - ok

14:37:10.0014 5064 [ 77B1471A490B53B24EFE136F09F76550 ] C:\Windows\SysWOW64\d3d8thk.dll

14:37:10.0014 5064 C:\Windows\SysWOW64\d3d8thk.dll - ok

14:37:10.0016 5064 [ 7F8678C59F188528D60104E697C2361E ] C:\Windows\SysWOW64\mscms.dll

14:37:10.0016 5064 C:\Windows\SysWOW64\mscms.dll - ok

14:37:10.0018 5064 [ DCA3940E902C2C90C5639505B77BFD1B ] C:\Windows\SysWOW64\igdumdx32.dll

14:37:10.0018 5064 C:\Windows\SysWOW64\igdumdx32.dll - ok

14:37:10.0020 5064 [ F4AE686A174689A3B44B05D0CB2F5D58 ] C:\Windows\SysWOW64\igdumd32.dll

14:37:10.0020 5064 C:\Windows\SysWOW64\igdumd32.dll - ok

14:37:10.0022 5064 [ 243974EC02F7AE49E4179C54624143AB ] C:\Windows\SysWOW64\MMDevAPI.dll

14:37:10.0022 5064 C:\Windows\SysWOW64\MMDevAPI.dll - ok

14:37:10.0024 5064 [ 919001D2BB17DF06CA3F8AC16AD039F6 ] C:\Windows\SysWOW64\sxs.dll

14:37:10.0024 5064 C:\Windows\SysWOW64\sxs.dll - ok

14:37:10.0026 5064 [ 1B2E6F9665DE9FF4A5A1812D397BE473 ] C:\Program Files\AVAST Software\Avast\defs\12121000\uiext.dll

14:37:10.0026 5064 C:\Program Files\AVAST Software\Avast\defs\12121000\uiext.dll - ok

14:37:10.0028 5064 [ F146E2BA475893DD77B2370DC1211FC6 ] C:\Windows\System32\drivers\98879821.sys

14:37:10.0028 5064 C:\Windows\System32\drivers\98879821.sys - ok

14:37:10.0030 5064 [ 102CF6879887BBE846A00C459E6D4ABC ] C:\Windows\SysWOW64\riched20.dll

14:37:10.0030 5064 C:\Windows\SysWOW64\riched20.dll - ok

14:37:10.0033 5064 [ E2A17BCC08D92F42E08AF6BA2F93ABA7 ] C:\Windows\SysWOW64\ExplorerFrame.dll

14:37:10.0033 5064 C:\Windows\SysWOW64\ExplorerFrame.dll - ok

14:37:10.0035 5064 [ 6E1F8165C365D35C8E3C045AF0CDD481 ] C:\Windows\SysWOW64\duser.dll

14:37:10.0035 5064 C:\Windows\SysWOW64\duser.dll - ok

14:37:10.0037 5064 [ EE06B85BC69F18826302348A2AD089E0 ] C:\Windows\SysWOW64\dui70.dll

14:37:10.0037 5064 C:\Windows\SysWOW64\dui70.dll - ok

14:37:10.0038 5064 [ 3819AD4329303EAC88480CA16A650735 ] C:\Windows\System32\UIAnimation.dll

14:37:10.0038 5064 C:\Windows\System32\UIAnimation.dll - ok

14:37:10.0040 5064 [ C3761661C17C2248A9379A8FB89E3DE1 ] C:\Windows\System32\stobject.dll

14:37:10.0040 5064 C:\Windows\System32\stobject.dll - ok

14:37:10.0043 5064 [ F832EEEA97CDDA1AF577E721F652A0D1 ] C:\Windows\System32\batmeter.dll

14:37:10.0043 5064 C:\Windows\System32\batmeter.dll - ok

14:37:10.0045 5064 [ 2D2A6EC8EAD30EC3ACE2FD6FB1B3E122 ] C:\Windows\System32\prnfldr.dll

14:37:10.0045 5064 C:\Windows\System32\prnfldr.dll - ok

14:37:10.0046 5064 [ 42A9CB6906D9A8BEDC83B57163E62924 ] C:\Windows\System32\DXP.dll

14:37:10.0046 5064 C:\Windows\System32\DXP.dll - ok

14:37:10.0049 5064 [ 2BC7C9FD0A9F2C9AFC373F3AD1EE3891 ] C:\Windows\System32\Syncreg.dll

14:37:10.0049 5064 C:\Windows\System32\Syncreg.dll - ok

14:37:10.0051 5064 [ C836175870E00ACC546066632E15BD10 ] C:\Windows\ehome\ehSSO.dll

14:37:10.0051 5064 C:\Windows\ehome\ehSSO.dll - ok

14:37:10.0053 5064 [ E7368F0A8D19445EAF5C5D0DBB8B8DAB ] C:\Windows\System32\AltTab.dll

14:37:10.0053 5064 C:\Windows\System32\AltTab.dll - ok

14:37:10.0055 5064 [ C8FDF0FA9E97E2FAAF3F814716AAA881 ] C:\Windows\System32\WPDShServiceObj.dll

14:37:10.0055 5064 C:\Windows\System32\WPDShServiceObj.dll - ok

14:37:10.0057 5064 [ E0B340996A41C9A75DFA3B99BBA9C500 ] C:\Windows\System32\SearchIndexer.exe

14:37:10.0057 5064 C:\Windows\System32\SearchIndexer.exe - ok

14:37:10.0059 5064 [ 589DF683A6C81424A6CECE52ABF98A50 ] C:\Windows\System32\tquery.dll

14:37:10.0059 5064 C:\Windows\System32\tquery.dll - ok

14:37:10.0060 5064 [ 7568CC720ACE4D03B84AF97817E745EF ] C:\Windows\System32\mssrch.dll

14:37:10.0060 5064 C:\Windows\System32\mssrch.dll - ok

14:37:10.0062 5064 [ 10F815BE90A66AAFC6C713D1BD626064 ] C:\Windows\System32\pnidui.dll

14:37:10.0062 5064 C:\Windows\System32\pnidui.dll - ok

14:37:10.0064 5064 [ B9F0A4020AA98B7A20287BF7FE99A1FD ] C:\Windows\System32\QUTIL.DLL

14:37:10.0064 5064 C:\Windows\System32\QUTIL.DLL - ok

14:37:10.0066 5064 [ 522B0466ED967A0762E9AF5B37D8F40A ] C:\Windows\System32\esent.dll

14:37:10.0066 5064 C:\Windows\System32\esent.dll - ok

14:37:10.0068 5064 [ 8569E35D00F45972E506502EEE622BA4 ] C:\Windows\System32\srchadmin.dll

14:37:10.0068 5064 C:\Windows\System32\srchadmin.dll - ok

14:37:10.0070 5064 [ 3121A79D13A61562BE9CC902CD46B542 ] C:\Windows\System32\msidle.dll

14:37:10.0070 5064 C:\Windows\System32\msidle.dll - ok

14:37:10.0072 5064 [ D2155709E336C3BC15729EB87FEC6064 ] C:\Windows\System32\rasdlg.dll

14:37:10.0072 5064 C:\Windows\System32\rasdlg.dll - ok

14:37:10.0075 5064 [ ACE1BB07E0377E37A2C514CD2EC119B1 ] C:\Windows\System32\mssprxy.dll

14:37:10.0075 5064 C:\Windows\System32\mssprxy.dll - ok

14:37:10.0077 5064 [ F9AFD12BB4B1CFA5FCC0A5B37C604FD2 ] C:\Windows\System32\dot3api.dll

14:37:10.0077 5064 C:\Windows\System32\dot3api.dll - ok

14:37:10.0079 5064 [ E4FCA0F99A41E460C84016DEFD31E6EF ] C:\Windows\System32\wlanhlp.dll

14:37:10.0079 5064 C:\Windows\System32\wlanhlp.dll - ok

14:37:10.0081 5064 [ 6699A112A3BDC9B52338512894EBA9D6 ] C:\Program Files\Windows Media Player\wmpnscfg.exe

14:37:10.0081 5064 C:\Program Files\Windows Media Player\wmpnscfg.exe - ok

14:37:10.0083 5064 [ 5DA219F57A9076FB6FBD3C9C3713A672 ] C:\Windows\System32\WWanAPI.dll

14:37:10.0083 5064 C:\Windows\System32\WWanAPI.dll - ok

14:37:10.0085 5064 [ C9FB9038B15036CA28CF0B4BE2BED9BD ] C:\Windows\System32\en-US\tquery.dll.mui

14:37:10.0085 5064 C:\Windows\System32\en-US\tquery.dll.mui - ok

14:37:10.0087 5064 [ 62C7AACC746C9723468A8F2169ED3E85 ] C:\Windows\System32\wwapi.dll

14:37:10.0087 5064 C:\Windows\System32\wwapi.dll - ok

14:37:10.0089 5064 [ C7494C67A6BF6FE914808E42F8265FEF ] C:\Program Files\Windows Media Player\wmpnssci.dll

14:37:10.0089 5064 C:\Program Files\Windows Media Player\wmpnssci.dll - ok

14:37:10.0091 5064 [ 6B851E682A36453E1B1EE297FFB6E2AB ] C:\Windows\System32\QAGENT.DLL

14:37:10.0091 5064 C:\Windows\System32\QAGENT.DLL - ok

14:37:10.0093 5064 [ F7A256EC899C72B4ECDD2C02CB592EFD ] C:\Windows\System32\bthprops.cpl

14:37:10.0093 5064 C:\Windows\System32\bthprops.cpl - ok

14:37:10.0095 5064 [ A9F3BFC9345F49614D5859EC95B9E994 ] C:\Program Files\Windows Media Player\wmpnetwk.exe

14:37:10.0095 5064 C:\Program Files\Windows Media Player\wmpnetwk.exe - ok

14:37:10.0097 5064 [ A555EC9827745E760BBABB7C6D4CE37F ] C:\Program Files\Internet Explorer\ieproxy.dll

14:37:10.0097 5064 C:\Program Files\Internet Explorer\ieproxy.dll - ok

14:37:10.0099 5064 [ 423982DD851406A52B6399DDB196C606 ] C:\Windows\System32\wmdrmdev.dll

14:37:10.0099 5064 C:\Windows\System32\wmdrmdev.dll - ok

14:37:10.0101 5064 [ 1EB82516F21F27EED1833B4F9FD9614E ] C:\Windows\System32\wmp.dll

14:37:10.0101 5064 C:\Windows\System32\wmp.dll - ok

14:37:10.0103 5064 [ 9209994CFBDF2814AC8CB16DA267600D ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\chrome.exe

14:37:10.0104 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\chrome.exe - ok

14:37:10.0106 5064 [ 2C1055E2C6D42753241FB2A129136994 ] C:\Windows\System32\drmv2clt.dll

14:37:10.0106 5064 C:\Windows\System32\drmv2clt.dll - ok

14:37:10.0108 5064 [ F52634E7D7A363F2AB4AB2120E4A8ACE ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\chrome.dll

14:37:10.0108 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\chrome.dll - ok

14:37:10.0110 5064 [ 885FD19118BC7514590C5EEF31CD7D71 ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\icudt.dll

14:37:10.0110 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\icudt.dll - ok

14:37:10.0112 5064 [ D7CEAEDD5F75D2C8A2E80887D7C114CE ] C:\Windows\System32\webcheck.dll

14:37:10.0112 5064 C:\Windows\System32\webcheck.dll - ok

14:37:10.0114 5064 [ 8494E126F0B10180F3293AF861CE1F7A ] C:\Windows\System32\mlang.dll

14:37:10.0114 5064 C:\Windows\System32\mlang.dll - ok

14:37:10.0116 5064 [ 101797BA603D227946B4B5109867EB19 ] C:\Windows\System32\SyncCenter.dll

14:37:10.0116 5064 C:\Windows\System32\SyncCenter.dll - ok

14:37:10.0118 5064 [ C746F3BF98E92FB137B5BD2B8B5925BD ] C:\Windows\System32\FXSST.dll

14:37:10.0118 5064 C:\Windows\System32\FXSST.dll - ok

14:37:10.0120 5064 [ 650CAEA856943E29F25A25D31E004B18 ] C:\Windows\System32\FXSAPI.dll

14:37:10.0120 5064 C:\Windows\System32\FXSAPI.dll - ok

14:37:10.0122 5064 [ C8E8B8239FCF17BEA10E751BE5854631 ] C:\Windows\System32\FXSRESM.dll

14:37:10.0122 5064 C:\Windows\System32\FXSRESM.dll - ok

14:37:10.0124 5064 [ 97A891E2BF7FDA830BCFC6269DA3F5E9 ] C:\Windows\System32\blackbox.dll

14:37:10.0124 5064 C:\Windows\System32\blackbox.dll - ok

14:37:10.0126 5064 [ 8130391F82D52D36C0441F714136957F ] C:\Windows\System32\imapi2.dll

14:37:10.0126 5064 C:\Windows\System32\imapi2.dll - ok

14:37:10.0128 5064 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] C:\Windows\System32\FXSSVC.exe

14:37:10.0128 5064 C:\Windows\System32\FXSSVC.exe - ok

14:37:10.0130 5064 [ 96DB78C9C50CEED9DA5050EFFEE272A2 ] C:\Windows\System32\upnp.dll

14:37:10.0130 5064 C:\Windows\System32\upnp.dll - ok

14:37:10.0132 5064 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] C:\Windows\System32\ssdpsrv.dll

14:37:10.0132 5064 C:\Windows\System32\ssdpsrv.dll - ok

14:37:10.0134 5064 [ 6A5C1A8AC0B572679361026D0E900420 ] C:\Windows\System32\hgcpl.dll

14:37:10.0134 5064 C:\Windows\System32\hgcpl.dll - ok

14:37:10.0136 5064 [ 71C4F42DC8DB668E826DA79462EA741E ] C:\Windows\SysWOW64\KBDUS.DLL

14:37:10.0136 5064 C:\Windows\SysWOW64\KBDUS.DLL - ok

14:37:10.0138 5064 [ 1CBF15FDB0310345A68972EB5C5B948F ] C:\Windows\SysWOW64\mssprxy.dll

14:37:10.0138 5064 C:\Windows\SysWOW64\mssprxy.dll - ok

14:37:10.0140 5064 [ E19AD0D49BFF5938B3E374873AC174DE ] C:\Windows\System32\wmploc.DLL

14:37:10.0140 5064 C:\Windows\System32\wmploc.DLL - ok

14:37:10.0142 5064 [ 236360CE5E4C3F063AC110533747C0A8 ] C:\Windows\SysWOW64\Wpc.dll

14:37:10.0142 5064 C:\Windows\SysWOW64\Wpc.dll - ok

14:37:10.0144 5064 [ 82C089EA2A3EEFADF3588EA71E8BDADA ] C:\Windows\SysWOW64\wevtapi.dll

14:37:10.0144 5064 C:\Windows\SysWOW64\wevtapi.dll - ok

14:37:10.0146 5064 [ C30A3E5DEEEBA22E782AC54C5AF5F352 ] C:\Windows\SysWOW64\samlib.dll

14:37:10.0146 5064 C:\Windows\SysWOW64\samlib.dll - ok

14:37:10.0148 5064 [ 3A16EA01FCFAAB40882DB5BFEE632322 ] C:\Windows\SysWOW64\msftedit.dll

14:37:10.0148 5064 C:\Windows\SysWOW64\msftedit.dll - ok

14:37:10.0151 5064 [ 1C9B45E87528B8BB8CFA884EA0099A85 ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\d3dcompiler_43.dll

14:37:10.0151 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\d3dcompiler_43.dll - ok

14:37:10.0153 5064 [ 0F2F2C982672FAD5D55450298E7E962C ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\pdf.dll

14:37:10.0153 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\pdf.dll - ok

14:37:10.0155 5064 [ 5987EA8A82C53359BCD2C29D6588583E ] C:\Windows\SysWOW64\linkinfo.dll

14:37:10.0155 5064 C:\Windows\SysWOW64\linkinfo.dll - ok

14:37:10.0157 5064 [ 86E39E9161C3D930D93822F1563C280D ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\d3dx9_43.dll

14:37:10.0157 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\d3dx9_43.dll - ok

14:37:10.0160 5064 [ 8B62C93760524569B9254DB70B16D98B ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\ppgooglenaclpluginchrome.dll

14:37:10.0160 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\ppgooglenaclpluginchrome.dll - ok

14:37:10.0162 5064 [ 5BCFBC1BD4F8BAB9A2A15DFEAE5CE1DD ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\libglesv2.dll

14:37:10.0162 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\libglesv2.dll - ok

14:37:10.0163 5064 [ F37B4AEB402CE4DC7DDCC55AD0FD2EDF ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\avcodec-54.dll

14:37:10.0163 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\avcodec-54.dll - ok

14:37:10.0166 5064 [ 28EE522EC405CC08A69F16A16921EF99 ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\libegl.dll

14:37:10.0166 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\libegl.dll - ok

14:37:10.0168 5064 [ 1F27643C4C626457FCE8F047AE1CD7E1 ] C:\Windows\SysWOW64\dxva2.dll

14:37:10.0168 5064 C:\Windows\SysWOW64\dxva2.dll - ok

14:37:10.0170 5064 [ FDBA1DEC4F9BE4274A00B9B850C63484 ] C:\Windows\SysWOW64\mf.dll

14:37:10.0170 5064 C:\Windows\SysWOW64\mf.dll - ok

14:37:10.0172 5064 [ 355A138ABDFD43FBABCAE3A1B06AB93D ] C:\Windows\System32\wmpps.dll

14:37:10.0172 5064 C:\Windows\System32\wmpps.dll - ok

14:37:10.0174 5064 [ F2C7BB8ACC97F92E987A2D4087D021B1 ] C:\Windows\System32\notepad.exe

14:37:10.0174 5064 C:\Windows\System32\notepad.exe - ok

14:37:10.0176 5064 [ 732E668096B1A37B7BFD4B9021E69A8E ] C:\Windows\System32\oleres.dll

14:37:10.0176 5064 C:\Windows\System32\oleres.dll - ok

14:37:10.0178 5064 [ 8862D4B7722A3E631435C33A78BB7B20 ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\avutil-51.dll

14:37:10.0178 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\avutil-51.dll - ok

14:37:10.0180 5064 [ F10E5311E5093FA3C00FF88C54C32FCA ] C:\Windows\SysWOW64\atl.dll

14:37:10.0180 5064 C:\Windows\SysWOW64\atl.dll - ok

14:37:10.0182 5064 [ 92E76B2B0382A89E6A0C897D88065952 ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\avformat-54.dll

14:37:10.0182 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\avformat-54.dll - ok

14:37:10.0184 5064 [ 40B82688907A7DBA4DB3B5ADDE3EAB3B ] C:\Windows\SysWOW64\mfplat.dll

14:37:10.0184 5064 C:\Windows\SysWOW64\mfplat.dll - ok

14:37:10.0186 5064 [ 139D3AB6AA920C34C50CBFFB9EB7D222 ] C:\Windows\SysWOW64\avrt.dll

14:37:10.0186 5064 C:\Windows\SysWOW64\avrt.dll - ok

14:37:10.0188 5064 [ 9C67F6BBDA3881CFD02095160CF91576 ] C:\Windows\SysWOW64\ksuser.dll

14:37:10.0188 5064 C:\Windows\SysWOW64\ksuser.dll - ok

14:37:10.0190 5064 [ 3DE43BFDAF3F8979699650202AA18B12 ] C:\Windows\SysWOW64\msmpeg2vdec.dll

14:37:10.0190 5064 C:\Windows\SysWOW64\msmpeg2vdec.dll - ok

14:37:10.0192 5064 [ 53AF1750FD45DDD705C9B68C7DC58827 ] C:\Windows\SysWOW64\evr.dll

14:37:10.0192 5064 C:\Windows\SysWOW64\evr.dll - ok

14:37:10.0194 5064 [ CE292C4C10B8DB6070F262EA2733F0DC ] C:\Windows\SysWOW64\sqmapi.dll

14:37:10.0194 5064 C:\Windows\SysWOW64\sqmapi.dll - ok

14:37:10.0196 5064 [ 50180B04EC08921D30B736122A691FA3 ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\PepperFlash\pepflashplayer.dll

14:37:10.0197 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\23.0.1271.95\PepperFlash\pepflashplayer.dll - ok

14:37:10.0199 5064 [ 0A7B01235B1CBFA387B04A91E2F2B7D0 ] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll

14:37:10.0199 5064 C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll - ok

14:37:10.0201 5064 [ 71DAA9A24C288CB7DF2DD5652A349A41 ] C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll

14:37:10.0201 5064 C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll - ok

14:37:10.0204 5064 [ 41700402834F793A8C06731E5CFBA62A ] C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

14:37:10.0204 5064 C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll - ok

14:37:10.0206 5064 [ 07BE13E5344FE1765BD10B9121CBD5A5 ] C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\plugins\npatgpc.dll

14:37:10.0206 5064 C:\Users\NunnBetter\AppData\Local\Google\Chrome\Application\plugins\npatgpc.dll - ok

14:37:10.0208 5064 [ 7B882AEBC5F6DBEA4E0361C0FC3E36D4 ] C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

14:37:10.0208 5064 C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL - ok

14:37:10.0210 5064 [ 84CBD6F6AA7EE399FBDC265B8EA64474 ] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

14:37:10.0210 5064 C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - ok

14:37:10.0213 5064 [ 7F7DB35D3F3EF1A860BB100A694912F8 ] C:\Program Files (x86)\Roblox\Versions\version-3ebe0cca16b6421c\NPRobloxProxy.dll

14:37:10.0213 5064 C:\Program Files (x86)\Roblox\Versions\version-3ebe0cca16b6421c\NPRobloxProxy.dll - ok

14:37:10.0215 5064 [ 7DD91826994E43192ABD0BD2AABE7954 ] C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

14:37:10.0215 5064 C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll - ok

14:37:10.0217 5064 [ AC421A44DE902F2627F1E63793ED89CD ] C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

14:37:10.0217 5064 C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll - ok

14:37:10.0220 5064 [ 6A8A6B3C42CA4D1403C8FEA50BACEC63 ] C:\Users\NunnBetter\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll

14:37:10.0220 5064 C:\Users\NunnBetter\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - ok

14:37:10.0222 5064 [ 586FDC4E02623EE228EC35B9604AE5F2 ] C:\Users\NunnBetter\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll

14:37:10.0222 5064 C:\Users\NunnBetter\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll - ok

14:37:10.0224 5064 [ 3D3CAF586124C4E8102764C8B3063BB6 ] C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll

14:37:10.0224 5064 C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll - ok

14:37:10.0226 5064 [ 9013599B12923A45C029C34E8D2211AC ] C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

14:37:10.0226 5064 C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll - ok

14:37:10.0229 5064 [ A44BFFA5D6CC1E909E6A3C16D9BB009B ] C:\PROGRA~2\McAfee\msc\NPMCSN~1.DLL

14:37:10.0229 5064 C:\PROGRA~2\McAfee\msc\NPMCSN~1.DLL - ok

14:37:10.0231 5064 [ 5BB8C06EB5EA4BA22EE8A678F2D79B25 ] C:\Windows\SysWOW64\devenum.dll

14:37:10.0231 5064 C:\Windows\SysWOW64\devenum.dll - ok

14:37:10.0233 5064 [ 7069AAB8536F29ED7323140973A2894B ] C:\Windows\SysWOW64\msdmo.dll

14:37:10.0233 5064 C:\Windows\SysWOW64\msdmo.dll - ok

14:37:10.0235 5064 [ E24FE90E9DE8D8AE70E59F7B01675DEF ] C:\Windows\SysWOW64\avicap32.dll

14:37:10.0235 5064 C:\Windows\SysWOW64\avicap32.dll - ok

14:37:10.0237 5064 [ C335EC1182AC10B188705554E0BC1186 ] C:\Windows\SysWOW64\msvfw32.dll

14:37:10.0237 5064 C:\Windows\SysWOW64\msvfw32.dll - ok

14:37:10.0239 5064 [ 220159496484D34009DE71CA1A68E0D4 ] C:\Windows\System32\wbem\NCProv.dll

14:37:10.0239 5064 C:\Windows\System32\wbem\NCProv.dll - ok

14:37:10.0241 5064 [ 2898035F522BA2989BBA8B9CFB020FD2 ] C:\Program Files\AVAST Software\Avast\defs\12121000\aspColl.dll

14:37:10.0241 5064 C:\Program Files\AVAST Software\Avast\defs\12121000\aspColl.dll - ok

14:37:10.0243 5064 ============================================================

14:37:10.0243 5064 Scan finished

14:37:10.0243 5064 ============================================================

14:37:10.0247 5056 Detected object count: 5

14:37:10.0247 5056 Actual detected object count: 5

14:37:49.0594 5056 DellDigitalDelivery ( UnsignedFile.Multi.Generic ) - skipped by user

14:37:49.0594 5056 DellDigitalDelivery ( UnsignedFile.Multi.Generic ) - User select action: Skip

14:37:49.0594 5056 QBCFMonitorService ( UnsignedFile.Multi.Generic ) - skipped by user

14:37:49.0594 5056 QBCFMonitorService ( UnsignedFile.Multi.Generic ) - User select action: Skip

14:37:49.0596 5056 QBFCService ( UnsignedFile.Multi.Generic ) - skipped by user

14:37:49.0596 5056 QBFCService ( UnsignedFile.Multi.Generic ) - User select action: Skip

14:37:49.0597 5056 QBVSS ( UnsignedFile.Multi.Generic ) - skipped by user

14:37:49.0597 5056 QBVSS ( UnsignedFile.Multi.Generic ) - User select action: Skip

14:37:49.0598 5056 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user

14:37:49.0598 5056 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip

gringo_pr · December 10, 2012

Hello

download Farbar Recovery Scan Tool x64 and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select the Repair your computer menu item.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.

To enter System Recovery Options by using Windows installation disc:

Insert the installation disc.
Restart your computer.
If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
Click Repair your computer.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account and click Next.

On the System Recovery Options menu you will get the following options:

- Startup Repair
  System Restore
  Windows Complete PC Restore
  Windows Memory Diagnostic Tool
  Command Prompt

[*]Select Command Prompt

[*]In the command window type in notepad and press Enter.

[*]The notepad opens. Under File menu select Open.

[*]Select "Computer" and find your flash drive letter and close the notepad.

[*]In the command window type e:\frst64.exe and press Enter

Note: Replace letter e with the drive letter of your flash drive.

[*]The tool will start to run.

[*]When the tool opens click Yes to disclaimer.

[*]First Press the Scan button.

[*]It will make a log (FRST.txt)

[*]Second Type the following in the edit box after "Search:". services.exe

[*]Click the Search button

[*]It will make a log (Search.txt)

I want you to poste Both the FRST.txt report and the Search.txt into your reply to me

Gringo

NunnBetter · December 10, 2012

Okay. I've run the Farbar Recovery Scan Tool and other steps as you indicated. Here are the logs you need. Again, they are in multiple posts due to the size. Thanks.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-12-2012

Ran by SYSTEM at 10-12-2012 17:23:39

Running from F:\

Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)

The current controlset is ControlSet001

==================== Registry (Whitelisted) ===================

HKLM-x32\...\Run: [] [x]

HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4297136 2012-10-30] (AVAST Software)

HKU\NunnBetter\...\Policies\system: [LogonHoursAction] 2

HKU\NunnBetter\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\Shop\...\Policies\system: [LogonHoursAction] 2

HKU\Shop\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

HKU\Tabatha\...\Policies\system: [LogonHoursAction] 2

HKU\Tabatha\...\Policies\system: [DontDisplayLogonHoursWarnings] 1

Tcpip\Parameters: [DhcpNameServer] 192.168.1.235

==================== Services (Whitelisted) ===================

2 avast! Antivirus; "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" [44808 2012-10-30] (AVAST Software)

4 filepathsrv; C:\Windows\system32\filepathsrv.exe [628608 2010-07-19] (IBM Corporation)

4 McAWFwk; C:\PROGRA~1\mcafee\msc\mcawfwk.exe [224704 2011-03-08] (McAfee, Inc.)

2 McMPFSvc; "C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [201304 2012-08-31] (McAfee, Inc.)

4 mcmscsvc; "C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [201304 2012-08-31] (McAfee, Inc.)

4 McNaiAnn; "C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [201304 2012-08-31] (McAfee, Inc.)

4 McNASvc; "C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [201304 2012-08-31] (McAfee, Inc.)

4 McODS; "C:\Program Files\mcafee\VirusScan\mcods.exe" [383608 2012-09-10] (McAfee, Inc.)

4 McOobeSv; "C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [201304 2012-08-31] (McAfee, Inc.)

4 McProxy; "C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe" /McCoreSvc [201304 2012-08-31] (McAfee, Inc.)

2 McShield; "C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe" [237920 2012-06-22] (McAfee, Inc.)

2 mfefire; "C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" [218320 2012-06-22] (McAfee, Inc.)

2 mfevtp; "C:\Windows\system32\mfevtps.exe" [177144 2012-06-22] (McAfee, Inc.)

4 MSK80Service; "C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [201304 2012-08-31] (McAfee, Inc.)

4 RalinkRegistryWriter; "C:\Program Files (x86)\NETGEAR\WNDA4100\Service\RaRegistry.exe" [377088 2011-11-21] (Ralink Technology, Corp.)

4 RalinkRegistryWriter64; "C:\Program Files (x86)\NETGEAR\WNDA4100\Service\RaRegistry64.exe" [455424 2011-11-21] (Ralink Technology, Corp.)

3 catchme; \??\C:\username123.exe\catchme.sys [x]

==================== Drivers (Whitelisted) =====================

2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [25232 2012-10-30] (AVAST Software)

2 aswMonFlt; C:\Windows\System32\Drivers\aswMonFlt.sys [71600 2012-10-30] (AVAST Software)

1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [54072 2012-10-15] (AVAST Software)

1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [984144 2012-10-30] (AVAST Software)

1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [370288 2012-10-30] (AVAST Software)

1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [59728 2012-10-30] (AVAST Software)

3 cfwids; C:\Windows\System32\Drivers\cfwids.sys [69672 2012-06-22] (McAfee, Inc.)

1 FilePath; C:\Windows\System32\DRIVERS\fp.sys [316288 2010-07-19] (IBM Corporation)

3 HipShieldK; C:\Windows\System32\Drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)

3 mfeapfk; C:\Windows\System32\Drivers\mfeapfk.sys [169320 2012-06-22] (McAfee, Inc.)

3 mfeavfk; C:\Windows\System32\Drivers\mfeavfk.sys [300392 2012-06-22] (McAfee, Inc.)

3 mfefirek; C:\Windows\System32\Drivers\mfefirek.sys [513456 2012-06-22] (McAfee, Inc.)

0 mfehidk; C:\Windows\System32\Drivers\mfehidk.sys [752672 2012-06-22] (McAfee, Inc.)

3 mferkdet; C:\Windows\System32\Drivers\mferkdet.sys [106112 2012-06-22] (McAfee, Inc.)

0 mfewfpk; C:\Windows\System32\Drivers\mfewfpk.sys [335784 2012-06-22] (McAfee, Inc.)

3 U2SP; C:\Windows\System32\DRIVERS\u2s2kxp64.sys [91008 2010-05-27] (Magic Control Technology Corp.)

3 mfeavfk01; [x]

==================== NetSvcs (Whitelisted) ====================

==================== One Month Created Files and Folders ========

2012-12-10 17:16 - 2012-12-10 17:16 - 01461029 ____A (Farbar) C:\Users\NunnBetter\Downloads\FRST64.exe

2012-12-10 14:32 - 2012-12-10 14:32 - 02213976 ____A (Kaspersky Lab ZAO) C:\Users\NunnBetter\Downloads\tdsskiller (7).exe

2012-12-10 14:32 - 2012-12-10 14:32 - 00001486 ____A C:\Users\NunnBetter\Desktop\tdsskiller (7) - Shortcut.lnk

2012-12-10 14:22 - 2012-12-10 14:22 - 00079616 ____A C:\Users\Shop\Local Settings\GDIPFONTCACHEV1.DAT

2012-12-10 14:22 - 2012-12-10 14:22 - 00079616 ____A C:\Users\Shop\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2012-12-10 14:22 - 2012-12-10 14:22 - 00079616 ____A C:\Users\Shop\AppData\Local\GDIPFONTCACHEV1.DAT

2012-12-10 14:17 - 2012-12-10 14:17 - 00000000 ____D C:\Users\Shop\Local Settings\Dell

2012-12-10 14:17 - 2012-12-10 14:17 - 00000000 ____D C:\Users\Shop\Local Settings\Application Data\Dell

2012-12-10 14:17 - 2012-12-10 14:17 - 00000000 ____D C:\Users\Shop\Application Data\TeamViewer

2012-12-10 14:17 - 2012-12-10 14:17 - 00000000 ____D C:\Users\Shop\Application Data\Roxio

2012-12-10 14:17 - 2012-12-10 14:17 - 00000000 ____D C:\Users\Shop\Application Data\Dell Touch Zone

2012-12-10 14:17 - 2012-12-10 14:17 - 00000000 ____D C:\Users\Shop\Application Data\Dell

2012-12-10 14:17 - 2012-12-10 14:17 - 00000000 ____D C:\Users\Shop\Application Data\Adobe

2012-12-10 14:17 - 2012-12-10 14:17 - 00000000 ____D C:\Users\Shop\AppData\Roaming\TeamViewer

2012-12-10 14:17 - 2012-12-10 14:17 - 00000000 ____D C:\Users\Shop\AppData\Roaming\Roxio

2012-12-10 14:17 - 2012-12-10 14:17 - 00000000 ____D C:\Users\Shop\AppData\Roaming\Dell Touch Zone

2012-12-10 14:17 - 2012-12-10 14:17 - 00000000 ____D C:\Users\Shop\AppData\Roaming\Dell

2012-12-10 14:17 - 2012-12-10 14:17 - 00000000 ____D C:\Users\Shop\AppData\Roaming\Adobe

2012-12-10 14:17 - 2012-12-10 14:17 - 00000000 ____D C:\Users\Shop\AppData\Local\Dell

2012-12-10 14:16 - 2012-12-10 14:16 - 00000632 _RASH C:\Users\Shop\ntuser.pol

2012-12-10 14:16 - 2012-12-10 14:16 - 00000020 __ASH C:\Users\Shop\ntuser.ini

2012-12-10 14:16 - 2012-12-10 14:16 - 00000000 ____D C:\users\Shop

2012-12-10 14:16 - 2012-12-09 17:38 - 00000000 ____D C:\Users\Shop\Local Settings\SoftThinks

2012-12-10 14:16 - 2012-12-09 17:38 - 00000000 ____D C:\Users\Shop\Local Settings\Application Data\SoftThinks

2012-12-10 14:16 - 2012-12-09 17:38 - 00000000 ____D C:\Users\Shop\AppData\Local\SoftThinks

2012-12-10 14:16 - 2012-02-16 01:41 - 00000000 ____D C:\Users\Shop\Application Data\Macromedia

2012-12-10 14:16 - 2012-02-16 01:41 - 00000000 ____D C:\Users\Shop\AppData\Roaming\Macromedia

2012-12-10 14:16 - 2012-02-16 01:28 - 00000000 ___RD C:\Users\Shop\Desktop\Play Games

2012-12-10 14:08 - 2012-12-10 14:08 - 00024576 ____A C:\Users\NunnBetter\Desktop\OD5Browser.exe

2012-12-10 13:39 - 2012-12-10 13:39 - 02213976 ____A (Kaspersky Lab ZAO) C:\Users\NunnBetter\Downloads\tdsskiller (6).exe

2012-12-10 13:37 - 2012-12-10 13:37 - 02213976 ____A (Kaspersky Lab ZAO) C:\Users\NunnBetter\Downloads\tdsskiller (5).exe

2012-12-10 13:36 - 2012-12-10 13:36 - 00180000 ____A (Kaspersky Lab) C:\Users\NunnBetter\Downloads\kss12.0.1.117EN_RU_DE_FR_2926.exe

2012-12-10 13:33 - 2012-12-10 13:33 - 02213976 ____A (Kaspersky Lab ZAO) C:\Users\NunnBetter\Downloads\tdsskiller (4).exe

2012-12-10 13:32 - 2012-12-10 13:32 - 02213976 ____A (Kaspersky Lab ZAO) C:\Users\NunnBetter\Downloads\tdsskiller (3).exe

2012-12-10 13:32 - 2012-12-10 13:32 - 02213976 ____A (Kaspersky Lab ZAO) C:\Users\NunnBetter\Downloads\tdsskiller (2).exe

2012-12-10 13:31 - 2012-12-10 13:31 - 02213976 ____A (Kaspersky Lab ZAO) C:\Users\NunnBetter\Downloads\tdsskiller (1).exe

2012-12-09 17:31 - 2012-12-09 17:31 - 00016805 ____A C:\ComboFix.txt

2012-12-09 17:21 - 2012-12-10 13:49 - 00001592 ____A C:\Users\NunnBetter\Desktop\Virus Instructions.txt

2012-12-05 15:58 - 2012-12-05 16:00 - 53825744 ____A (Friday Systems Inc. ) C:\Users\NunnBetter\Downloads\lwsetup (2).exe

2012-12-05 15:36 - 2012-12-05 16:00 - 52023296 ____A C:\Users\NunnBetter\Downloads\Lot Wizard.msi

2012-12-05 15:34 - 2012-12-05 15:36 - 53825744 ____A (Friday Systems Inc. ) C:\Users\NunnBetter\Downloads\lwsetup (1).exe

2012-12-05 15:31 - 2012-12-05 15:33 - 53825744 ____A (Friday Systems Inc. ) C:\Users\NunnBetter\Downloads\lwsetup.exe

2012-12-05 12:42 - 2012-12-05 12:42 - 00021875 ____A C:\Users\NunnBetter\Downloads\Resume2012.odt

2012-12-04 19:56 - 2012-12-04 19:56 - 00386366 ____A C:\Users\NunnBetter\Downloads\Receipts to Print.zip

2012-12-04 19:51 - 2012-12-04 19:51 - 00001171 ____A C:\Users\NunnBetter\Desktop\RKreport[2]_D_12042012_02d1951.txt

2012-12-04 19:50 - 2012-12-04 19:50 - 00000000 ____D C:\Users\NunnBetter\Desktop\RK_Quarantine

2012-12-04 19:49 - 2012-12-04 19:50 - 00752128 ____A C:\Users\NunnBetter\Downloads\RogueKiller (1).exe

2012-12-02 03:03 - 2012-10-08 06:19 - 17811968 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2012-12-02 03:03 - 2012-10-08 05:31 - 02312704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2012-12-02 03:03 - 2012-10-08 05:24 - 01346048 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2012-12-02 03:03 - 2012-10-08 05:23 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2012-12-02 03:03 - 2012-10-08 05:22 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl

2012-12-02 03:03 - 2012-10-08 05:22 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll

2012-12-02 03:03 - 2012-10-08 05:20 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2012-12-02 03:03 - 2012-10-08 05:18 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe

2012-12-02 03:03 - 2012-10-08 05:17 - 00816640 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2012-12-02 03:03 - 2012-10-08 05:17 - 00599040 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll

2012-12-02 03:03 - 2012-10-08 05:15 - 02144768 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2012-12-02 03:03 - 2012-10-08 05:15 - 00729088 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2012-12-02 03:03 - 2012-10-08 05:13 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2012-12-02 03:03 - 2012-10-08 05:13 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll

2012-12-02 03:03 - 2012-10-08 05:09 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2012-12-02 03:03 - 2012-10-08 02:28 - 12320768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2012-12-02 03:03 - 2012-10-08 01:56 - 01800704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2012-12-02 03:03 - 2012-10-08 01:48 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2012-12-02 03:03 - 2012-10-08 01:48 - 01103872 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2012-12-02 03:03 - 2012-10-08 01:47 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2012-12-02 03:03 - 2012-10-08 01:46 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2012-12-02 03:03 - 2012-10-08 01:45 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2012-12-02 03:03 - 2012-10-08 01:44 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2012-12-02 03:03 - 2012-10-08 01:43 - 00717824 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2012-12-02 03:03 - 2012-10-08 01:43 - 00420864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2012-12-02 03:03 - 2012-10-08 01:42 - 00607744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2012-12-02 03:03 - 2012-10-08 01:41 - 01793024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2012-12-02 03:03 - 2012-10-08 01:41 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2012-12-02 03:03 - 2012-10-08 01:40 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2012-12-02 03:03 - 2012-10-08 01:37 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2012-12-02 03:03 - 2012-07-25 22:55 - 00785512 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\Wdf01000.sys

2012-12-02 03:03 - 2012-07-25 22:55 - 00054376 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\WdfLdr.sys

2012-12-02 03:03 - 2012-07-25 20:36 - 00009728 ____A (Microsoft Corporation) C:\Windows\System32\Wdfres.dll

2012-12-02 03:03 - 2012-06-02 08:35 - 00000003 ____A C:\Windows\System32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

2012-12-02 03:02 - 2012-10-08 05:42 - 10925568 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2012-12-02 03:02 - 2012-10-08 02:02 - 09738240 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2012-12-02 03:01 - 2012-07-25 21:08 - 00744448 ____A (Microsoft Corporation) C:\Windows\System32\WUDFx.dll

2012-12-02 03:01 - 2012-07-25 21:08 - 00229888 ____A (Microsoft Corporation) C:\Windows\System32\WUDFHost.exe

2012-12-02 03:01 - 2012-07-25 21:08 - 00194048 ____A (Microsoft Corporation) C:\Windows\System32\WUDFPlatform.dll

2012-12-02 03:01 - 2012-07-25 21:08 - 00084992 ____A (Microsoft Corporation) C:\Windows\System32\WUDFSvc.dll

2012-12-02 03:01 - 2012-07-25 21:08 - 00045056 ____A (Microsoft Corporation) C:\Windows\System32\WUDFCoinstaller.dll

2012-12-02 03:01 - 2012-07-25 20:26 - 00198656 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\WUDFRd.sys

2012-12-02 03:01 - 2012-07-25 20:26 - 00087040 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\WUDFPf.sys

2012-12-02 03:01 - 2012-06-02 08:57 - 00000003 ____A C:\Windows\System32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

2012-12-02 00:00 - 2012-12-10 14:23 - 00001242 _RASH C:\Users\NunnBetter\ntuser.pol

2012-12-02 00:00 - 2012-12-02 00:01 - 00000632 _RASH C:\Users\Tabatha\ntuser.pol

2012-12-01 23:56 - 2012-12-01 23:56 - 00000000 ____D C:\Users\Tabatha\Application Data\Adobe

2012-12-01 23:56 - 2012-12-01 23:56 - 00000000 ____D C:\Users\Tabatha\AppData\Roaming\Adobe

2012-12-01 21:39 - 2012-12-01 21:39 - 00000000 ____D C:\TDSSKiller_Quarantine

2012-12-01 21:38 - 2012-12-01 21:38 - 02213976 ____A (Kaspersky Lab ZAO) C:\Users\NunnBetter\Downloads\tdsskiller.exe

2012-12-01 21:01 - 2012-12-01 21:01 - 00752128 ____A C:\Users\NunnBetter\Downloads\RogueKiller.exe

2012-12-01 20:32 - 2012-10-18 12:25 - 03149824 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys

2012-12-01 20:32 - 2012-10-09 12:17 - 00226816 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcore6.dll

2012-12-01 20:32 - 2012-10-09 12:17 - 00055296 ____A (Microsoft Corporation) C:\Windows\System32\dhcpcsvc6.dll

2012-12-01 20:32 - 2012-10-09 11:40 - 00193536 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll

2012-12-01 20:32 - 2012-10-09 11:40 - 00044032 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll

2012-12-01 20:32 - 2012-10-03 11:56 - 01914248 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys

2012-12-01 20:32 - 2012-10-03 11:44 - 00303104 ____A (Microsoft Corporation) C:\Windows\System32\nlasvc.dll

2012-12-01 20:32 - 2012-10-03 11:44 - 00246272 ____A (Microsoft Corporation) C:\Windows\System32\netcorehc.dll

2012-12-01 20:32 - 2012-10-03 11:44 - 00216576 ____A (Microsoft Corporation) C:\Windows\System32\ncsi.dll

2012-12-01 20:32 - 2012-10-03 11:44 - 00070656 ____A (Microsoft Corporation) C:\Windows\System32\nlaapi.dll

2012-12-01 20:32 - 2012-10-03 11:44 - 00018944 ____A (Microsoft Corporation) C:\Windows\System32\netevent.dll

2012-12-01 20:32 - 2012-10-03 11:42 - 00569344 ____A (Microsoft Corporation) C:\Windows\System32\iphlpsvc.dll

2012-12-01 20:32 - 2012-10-03 10:42 - 00175104 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll

2012-12-01 20:32 - 2012-10-03 10:42 - 00156672 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2012-12-01 20:32 - 2012-10-03 10:42 - 00018944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll

2012-12-01 20:32 - 2012-10-03 10:07 - 00045568 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpipreg.sys

2012-12-01 20:32 - 2012-01-13 01:12 - 00052224 ____A (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2012-12-01 20:31 - 2012-09-25 16:47 - 00078336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll

2012-12-01 20:31 - 2012-09-25 16:46 - 00095744 ____A (Microsoft Corporation) C:\Windows\System32\synceng.dll

2012-12-01 20:11 - 2012-12-01 20:11 - 00000000 ____D C:\FRST

2012-11-30 21:46 - 2011-06-26 00:45 - 00256000 ____A C:\Windows\PEV.exe

2012-11-30 21:46 - 2010-11-07 11:20 - 00208896 ____A C:\Windows\MBR.exe

2012-11-30 21:46 - 2009-04-19 22:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe

2012-11-30 21:46 - 2000-08-30 18:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe

2012-11-30 21:46 - 2000-08-30 18:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe

2012-11-30 21:46 - 2000-08-30 18:00 - 00098816 ____A C:\Windows\sed.exe

2012-11-30 21:46 - 2000-08-30 18:00 - 00080412 ____A C:\Windows\grep.exe

2012-11-30 21:46 - 2000-08-30 18:00 - 00068096 ____A C:\Windows\zip.exe

2012-11-30 21:39 - 2012-12-09 17:32 - 00000000 ____D C:\Qoobox

2012-11-30 21:39 - 2012-11-30 22:32 - 00000000 ____D C:\Windows\erdnt

2012-11-30 21:38 - 2012-11-30 21:38 - 05009291 ____R (Swearware) C:\Users\NunnBetter\Downloads\username123.exe.exe

2012-11-30 19:26 - 2012-11-30 19:27 - 00262144 ____A C:\Windows\Minidump\113012-3102282-01.dmp

2012-11-30 18:30 - 2012-11-30 18:30 - 00001920 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk

2012-11-30 18:30 - 2012-11-30 18:30 - 00001920 ____A C:\Users\All Users\Desktop\avast! Free Antivirus.lnk

2012-11-30 18:30 - 2012-11-30 18:30 - 00000000 ____A C:\Windows\SysWOW64\config.nt

2012-11-30 18:30 - 2012-10-30 17:51 - 00984144 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys

2012-11-30 18:30 - 2012-10-30 17:51 - 00370288 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys

2012-11-30 18:30 - 2012-10-30 17:51 - 00071600 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys

2012-11-30 18:30 - 2012-10-30 17:51 - 00059728 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys

2012-11-30 18:30 - 2012-10-30 17:51 - 00025232 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys

2012-11-30 18:30 - 2012-10-30 17:50 - 00285328 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe

2012-11-30 18:30 - 2012-10-15 10:59 - 00054072 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys

2012-11-30 18:29 - 2012-11-30 18:29 - 00000000 ____D C:\Users\All Users\AVAST Software

2012-11-30 18:29 - 2012-11-30 18:29 - 00000000 ____D C:\Users\All Users\Application Data\AVAST Software

2012-11-30 18:29 - 2012-11-30 18:29 - 00000000 ____D C:\Program Files\AVAST Software

2012-11-30 18:29 - 2012-10-30 17:51 - 00041224 ____A (AVAST Software) C:\Windows\avastSS.scr

2012-11-30 18:29 - 2012-10-30 17:50 - 00227648 ____A (AVAST Software) C:\Windows\SysWOW64\aswBoot.exe

2012-11-30 18:25 - 2012-11-30 18:28 - 97495576 ____A C:\Users\NunnBetter\Downloads\avast_free_antivirus_setup.exe

2012-11-16 16:29 - 2012-11-16 16:29 - 00001317 ____A C:\Users\NunnBetter\Desktop\ROBLOX Player.lnk

2012-11-16 16:28 - 2012-11-16 16:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2012-11-16 16:27 - 2012-11-16 16:27 - 00201400 ____A C:\Users\NunnBetter\Downloads\roblox (2).exe

==================== One Month Modified Files and Folders =======

2012-12-10 17:17 - 2012-02-17 16:04 - 00002133 ____A C:\Windows\Series10.ini

2012-12-10 17:17 - 2012-02-16 02:52 - 01869351 ____A C:\Windows\WindowsUpdate.log

2012-12-10 17:17 - 2009-07-13 23:13 - 00725096 ____A C:\Windows\System32\PerfStringBackup.INI

2012-12-10 17:16 - 2012-12-10 17:16 - 01461029 ____A (Farbar) C:\Users\NunnBetter\Downloads\FRST64.exe

2012-12-10 17:13 - 2012-05-29 11:20 - 06356992 ___RA C:\Users\NunnBetter\Downloads\Nunn Better, LLC (QuickBooks2011 Apr 30,2012 03 21 PM).QBW.TLG

2012-12-10 17:13 - 2012-05-29 11:20 - 00000391 ____A C:\Users\NunnBetter\Downloads\Nunn Better, LLC (QuickBooks2011 Apr 30,2012 03 21 PM).QBW.ND

2012-12-10 17:13 - 2012-05-29 11:19 - 19279872 ___RA C:\Users\NunnBetter\Downloads\Nunn Better, LLC (QuickBooks2011 Apr 30,2012 03 21 PM).QBW

2012-12-10 15:50 - 2012-02-17 17:17 - 00000148 ____A C:\Windows\PickList.ini

2012-12-10 14:48 - 2012-02-17 16:06 - 00000109 ____A C:\Windows\mrid32

2012-12-10 14:48 - 2012-02-17 16:06 - 00000092 ____A C:\Windows\crw.ini

2012-12-10 14:41 - 2009-07-13 22:45 - 00021296 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2012-12-10 14:41 - 2009-07-13 22:45 - 00021296 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2012-12-10 14:34 - 2009-07-13 23:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2012-12-10 14:34 - 2009-07-13 22:51 - 00039639 ____A C:\Windows\setupact.log

2012-12-10 14:32 - 2012-12-10 14:32 - 02213976 ____A (Kaspersky Lab ZAO) C:\Users\NunnBetter\Downloads\tdsskiller (7).exe

2012-12-10 14:32 - 2012-12-10 14:32 - 00001486 ____A C:\Users\NunnBetter\Desktop\tdsskiller (7) - Shortcut.lnk

2012-12-10 14:23 - 2012-12-02 00:00 - 00001242 _RASH C:\Users\NunnBetter\ntuser.pol

2012-12-10 14:23 - 2012-02-17 16:36 - 00000000 ____D C:\users\NunnBetter

2012-12-10 14:22 - 2012-12-10 14:22 - 00079616 ____A C:\Users\Shop\Local Settings\GDIPFONTCACHEV1.DAT

2012-12-10 14:22 - 2012-12-10 14:22 - 00079616 ____A C:\Users\Shop\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2012-12-10 14:22 - 2012-12-10 14:22 - 00079616 ____A C:\Users\Shop\AppData\Local\GDIPFONTCACHEV1.DAT

2012-12-10 14:21 - 2010-11-20 21:47 - 00070228 ____A C:\Windows\PFRO.log