Computer experiencing startup blue screens

SilverMailman · December 8, 2012

A continuation on a earlier conversation...

gringo_pr · December 9, 2012

Greetings and Welcome to The Forums!!

My name is Gringo and I'll be glad to help you with your malware problems.

I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of us

Please do not run any tools unless instructed to do so.
- We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
[*]Please do not attach logs or use code boxes, just copy and paste the text.
- Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
[*]Please read every post completely before doing anything.
- Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
[*]Please provide feedback about your experience as we go.
- A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.

NOTE: At the top of your post, click on the Watch Topic Button, select Immediate Notification, and click on Proceed. This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.

I need to get some reports to get a base to start from so I need you to run these programs first.

-DeFogger-

Please download

DeFogger to your desktop.
Double click DeFogger to run the tool.

The application window will appear
Click the Disable button to disable your CD Emulation drivers
Click Yes to continue
A 'Finished!' message will appear
Click OK
DeFogger may ask you to reboot the machine, if it does - click OK

Do not re-enable these drivers until otherwise instructed.

-Security Check-

Download Security Check by screen317 from

here.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

-Download DDS-

Please download DDS from one of the links below and save it to your desktop:

Download DDS and save it to your desktop

Link1
Link2
Link3

Double-Click on dds.scr and a command window will appear. This is normal.
Shortly after two logs will appear:
- DDS.txt
- Attach.txt
[*]A window will open instructing you save & post the logs
[*]Save the logs to a convenient place such as your desktop
[*]Copy the contents of both logs & post in your next reply

information and logs

In your next post I need the following

both reports from DDS
report from security check
let me know of any problems you may have had

Gringo

SilverMailman · December 9, 2012

DDS

DDS (Ver_2012-11-20.01) - NTFS_AMD64

Internet Explorer: 9.0.8112.16455 BrowserJavaVersion: 10.9.2

Run by Owner at 11:56:55 on 2012-12-09

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.6051.3972 [GMT -8:00]

.

AV: Norton AntiVirus *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Norton AntiVirus *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}

.

============== Running Processes ===============

.

C:\windows\system32\lsm.exe

C:\windows\system32\svchost.exe -k DcomLaunch

C:\windows\system32\svchost.exe -k RPCSS

C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\windows\system32\svchost.exe -k netsvcs

C:\windows\system32\svchost.exe -k LocalService

C:\windows\system32\svchost.exe -k NetworkService

C:\windows\system32\WLANExt.exe

C:\windows\System32\spoolsv.exe

C:\windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Intel\WiFi\bin\EvtEng.exe

C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe

C:\windows\SysWOW64\PnkBstrA.exe

C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

C:\windows\system32\svchost.exe -k imgsvc

C:\windows\system32\ThpSrv.exe

C:\windows\system32\TODDSrv.exe

C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe

C:\Program Files\TOSHIBA\TECO\TecoService.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\windows\system32\wbem\wmiprvse.exe

C:\windows\system32\wbem\unsecapp.exe

C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\windows\system32\taskhost.exe

C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\windows\system32\Dwm.exe

C:\windows\Explorer.EXE

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe

C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe

C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Windows\System32\ThpSrv.exe

C:\Program Files\TOSHIBA\TECO\Teco.exe

C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe

C:\Program Files\TOSHIBA\FlashCards\Hotkey\TcrdKBB.exe

C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe

C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe

C:\windows\system32\wbem\unsecapp.exe

C:\Program Files (x86)\Toshiba\Utilities\KeNotify.exe

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files (x86)\Toshiba\TOSHIBA Service Station\ToshibaServiceStation.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

C:\windows\system32\SearchIndexer.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\windows\system32\taskeng.exe

C:\Program Files (x86)\TOSHIBA\widimon\widimon.exe

C:\windows\system32\igfxext.exe

C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe

C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

C:\windows\system32\SearchProtocolHost.exe

C:\windows\system32\SearchFilterHost.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\windows\system32\igfxsrvc.exe

C:\windows\system32\wbem\wmiprvse.exe

C:\windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com/

uProxyOverride = <local>;*.local

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\ips\ipsbho.dll

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

BHO: TOSHIBA Media Controller Plug-in: {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\Toshiba\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll

mRun: [sVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL

mRun: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP

mRun: [KeNotify] "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM

mRun: [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60

mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start

uPolicies-Explorer: NoDrives = dword:0

mPolicies-Explorer: NoDrives = dword:0

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000

IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

Trusted Zone: clonewarsadventures.com

Trusted Zone: freerealms.com

Trusted Zone: soe.com

Trusted Zone: sony.com

DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab

TCP: NameServer = 75.75.75.75 75.75.76.76

TCP: Interfaces\{4FA11B9D-4722-4B3D-BD8C-0934B3AE5050} : DHCPNameServer = 100.100.0.102

TCP: Interfaces\{F2364834-9ECB-4969-BE82-FCFA71825AC5} : DHCPNameServer = 75.75.75.75 75.75.76.76

TCP: Interfaces\{F2364834-9ECB-4969-BE82-FCFA71825AC5}\2375942554630323 : DHCPNameServer = 192.168.1.254

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

SSODL: WebCheck - <orphaned>

x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

x64-BHO: TOSHIBA Media Controller Plug-in: {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\Toshiba\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll

x64-Run: [igfxTray] C:\windows\System32\igfxtray.exe

x64-Run: [HotKeysCmds] C:\windows\System32\hkcmd.exe

x64-Run: [Persistence] C:\windows\System32\igfxpers.exe

x64-Run: [TPwrMain] C:\Program Files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE

x64-Run: [HSON] C:\Program Files (x86)\TOSHIBA\TBS\HSON.exe

x64-Run: [TCrdMain] C:\Program Files (x86)\TOSHIBA\FlashCards\TCrdMain.exe

x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

x64-Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 /MAXX3

x64-Run: [synTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe

x64-Run: [ThpSrv] C:\windows\System32\thpsrv /logon

x64-Run: [Teco] "C:\Program Files (x86)\TOSHIBA\TECO\Teco.exe" /r

x64-Run: [intelPAN] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray

x64-Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe

x64-Run: [TosWaitSrv] C:\Program Files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe

x64-Run: [TosVolRegulator] C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe

x64-Run: [TosNC] C:\Program Files (x86)\Toshiba\BulletinBoard\TosNcCore.exe

x64-Run: [TosReelTimeMonitor] C:\Program Files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe

x64-Run: [Logitech Download Assistant] C:\windows\System32\rundll32.exe C:\windows\System32\LogiLDA.dll,LogiFetch

x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

x64-Notify: igfxcui - igfxdev.dll

.

============= SERVICES / DRIVERS ===============

.

P2 HiPatchService;Hi-Rez Studios Authenticate and Update Service;C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [2012-6-30 8704]

R0 SymDS;Symantec Data Store;C:\windows\System32\drivers\NAVx64\1309000.009\symds64.sys [2012-10-1 451192]

R0 SymEFA;Symantec Extended File Attributes;C:\windows\System32\drivers\NAVx64\1309000.009\symefa64.sys [2012-10-1 1129120]

R0 Thpdrv;TOSHIBA HDD Protection Driver;C:\windows\System32\drivers\thpdrv.sys [2011-3-23 36992]

R0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver;C:\windows\System32\drivers\Thpevm.sys [2009-6-29 14784]

R0 tos_sps64;TOSHIBA tos_sps64 Service;C:\windows\System32\drivers\tos_sps64.sys [2011-9-24 482384]

R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\BASHDefs\20121130.005_fd0\BHDrvx64.sys [2012-11-30 1384608]

R1 ccSet_NAV;Norton AntiVirus Settings Manager;C:\windows\System32\drivers\NAVx64\1309000.009\ccsetx64.sys [2012-10-1 167072]

R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\IPSDefs\20121205.001\IDSviA64.sys [2012-12-5 513184]

R1 SymIRON;Symantec Iron Driver;C:\windows\System32\drivers\NAVx64\1309000.009\ironx64.sys [2012-10-1 190072]

R1 SymNetS;Symantec Network Security WFP Driver;C:\windows\System32\drivers\NAVx64\1309000.009\symnets.sys [2012-10-1 405624]

R2 DMAgent;Intel® PROSet/Wireless WiMAX Red Bend Device Management Service;C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe [2011-6-14 498688]

R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-11-19 2462128]

R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-10-28 399432]

R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-10-28 676936]

R2 NAV;Norton AntiVirus;C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccsvchst.exe [2012-10-1 138272]

R2 regi;regi;C:\windows\System32\drivers\regi.sys [2011-9-24 14112]

R2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;C:\Program Files\TOSHIBA\TECO\TecoService.exe [2011-5-24 294848]

R2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;C:\windows\System32\drivers\TVALZFL.sys [2009-6-19 14472]

R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-9-24 2656280]

R2 WiMAXAppSrv;Intel® PROSet/Wireless WiMAX Service;C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe [2011-6-14 986112]

R3 bpenum;Intel® Centrino® WiMAX Enumerator;C:\windows\System32\drivers\bpenum.sys [2011-5-19 84480]

R3 bpmp;Intel® Centrino® WiMAX 6050 Series;C:\windows\System32\drivers\bpmp.sys [2011-5-19 182272]

R3 bpusb;Intel® Centrino® WiMAX 6050 Series Function Driver;C:\windows\System32\drivers\bpusb.sys [2011-5-19 83968]

R3 CeKbFilter;CeKbFilter;C:\windows\System32\drivers\CeKbFilter.sys [2011-9-24 20592]

R3 IntcDAud;Intel® Display Audio;C:\windows\System32\drivers\IntcDAud.sys [2010-10-15 317440]

R3 iwdbus;IWD Bus Enumerator;C:\windows\System32\drivers\iwdbus.sys [2011-6-21 25496]

R3 MBAMProtector;MBAMProtector;C:\windows\System32\drivers\mbam.sys [2012-10-28 25928]

R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\windows\System32\drivers\nusb3hub.sys [2011-2-10 82432]

R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\windows\System32\drivers\nusb3xhc.sys [2011-2-10 181760]

R3 PGEffect;Pangu effect driver;C:\windows\System32\drivers\PGEffect.sys [2011-9-24 38096]

R3 RTL8167;Realtek 8167 NT Driver;C:\windows\System32\drivers\Rt64win7.sys [2011-9-24 413800]

R3 TMachInfo;TMachInfo;C:\Program Files (x86)\Toshiba\TOSHIBA Service Station\TMachInfo.exe [2011-9-24 57216]

R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2011-6-9 138152]

R3 TPCHSrv;TPCH Service;C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe [2011-7-1 828856]

R3 WDC_SAM;WD SCSI Pass Thru driver;C:\windows\System32\drivers\wdcsam64.sys [2008-5-6 14464]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S3 intaud_WaveExtensible;Intel WiDi Audio Device;C:\windows\System32\drivers\intelaud.sys [2011-6-21 34200]

S3 JMCR;JMCR;C:\windows\System32\drivers\jmcr.sys [2011-5-2 175192]

S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-6-1 340240]

S3 TsUsbFlt;TsUsbFlt;C:\windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:\windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232]

S3 USBAAPL64;Apple Mobile USB Driver;C:\windows\System32\drivers\usbaapl64.sys [2012-2-15 52736]

S3 WatAdminSvc;Windows Activation Technologies Service;C:\windows\System32\Wat\WatAdminSvc.exe [2011-12-21 1255736]

S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]

.

=============== Created Last 30 ================

.

2012-11-21 01:35:10 -------- d-----w- C:\Games

2012-11-21 01:34:46 -------- d-----w- C:\Users\Owner\AppData\Local\Package Cache

2012-11-19 21:59:39 -------- d-----w- C:\Program Files (x86)\LogMeIn Hamachi

2012-11-15 02:42:39 9728 ----a-w- C:\windows\System32\Wdfres.dll

2012-11-15 02:42:39 785512 ----a-w- C:\windows\System32\drivers\Wdf01000.sys

2012-11-15 02:42:39 54376 ----a-w- C:\windows\System32\drivers\WdfLdr.sys

2012-11-15 02:42:39 2560 ----a-w- C:\windows\System32\drivers\en-US\wdf01000.sys.mui

2012-11-15 02:40:02 87040 ----a-w- C:\windows\System32\drivers\WUDFPf.sys

2012-11-15 02:40:02 198656 ----a-w- C:\windows\System32\drivers\WUDFRd.sys

2012-11-15 02:40:01 84992 ----a-w- C:\windows\System32\WUDFSvc.dll

2012-11-15 02:40:01 744448 ----a-w- C:\windows\System32\WUDFx.dll

2012-11-15 02:40:01 45056 ----a-w- C:\windows\System32\WUDFCoinstaller.dll

2012-11-15 02:40:01 229888 ----a-w- C:\windows\System32\WUDFHost.exe

2012-11-15 02:40:01 194048 ----a-w- C:\windows\System32\WUDFPlatform.dll

2012-11-15 02:38:19 226816 ----a-w- C:\windows\System32\dhcpcore6.dll

2012-11-15 02:38:18 55296 ----a-w- C:\windows\System32\dhcpcsvc6.dll

2012-11-15 02:38:18 44032 ----a-w- C:\windows\SysWow64\dhcpcsvc6.dll

2012-11-15 02:38:18 193536 ----a-w- C:\windows\SysWow64\dhcpcore6.dll

.

==================== Find3M ====================

.

2012-10-28 15:47:53 95208 ----a-w- C:\windows\SysWow64\WindowsAccessBridge-32.dll

2012-10-28 15:47:53 821736 ----a-w- C:\windows\SysWow64\npDeployJava1.dll

2012-10-28 15:46:42 0 ----a-w- C:\windows\SysWow64\RENADEE.tmp

2012-10-28 15:46:42 0 ----a-w- C:\windows\SysWow64\RENADED.tmp

2012-10-28 15:46:39 0 ----a-w- C:\windows\SysWow64\RENA5D1.tmp

2012-10-28 15:46:39 0 ----a-w- C:\windows\SysWow64\RENA5D0.tmp

2012-10-18 18:25:58 3149824 ----a-w- C:\windows\System32\win32k.sys

2012-10-16 08:38:37 135168 ----a-w- C:\windows\apppatch\AppPatch64\AcXtrnal.dll

2012-10-16 08:38:34 350208 ----a-w- C:\windows\apppatch\AppPatch64\AcLayers.dll

2012-10-16 07:39:52 561664 ----a-w- C:\windows\apppatch\AcLayers.dll

2012-10-08 11:31:03 2312704 ----a-w- C:\windows\System32\jscript9.dll

2012-10-08 11:23:52 1392128 ----a-w- C:\windows\System32\wininet.dll

2012-10-08 11:22:55 1494528 ----a-w- C:\windows\System32\inetcpl.cpl

2012-10-08 11:18:22 173056 ----a-w- C:\windows\System32\ieUnatt.exe

2012-10-08 11:17:35 599040 ----a-w- C:\windows\System32\vbscript.dll

2012-10-08 11:13:33 2382848 ----a-w- C:\windows\System32\mshtml.tlb

2012-10-08 07:56:24 1800704 ----a-w- C:\windows\SysWow64\jscript9.dll

2012-10-08 07:48:03 1129472 ----a-w- C:\windows\SysWow64\wininet.dll

2012-10-08 07:47:44 1427968 ----a-w- C:\windows\SysWow64\inetcpl.cpl

2012-10-08 07:44:05 142848 ----a-w- C:\windows\SysWow64\ieUnatt.exe

2012-10-08 07:43:21 420864 ----a-w- C:\windows\SysWow64\vbscript.dll

2012-10-08 07:40:56 2382848 ----a-w- C:\windows\SysWow64\mshtml.tlb

2012-10-03 17:56:54 1914248 ----a-w- C:\windows\System32\drivers\tcpip.sys

2012-10-03 17:44:21 70656 ----a-w- C:\windows\System32\nlaapi.dll

2012-10-03 17:44:21 303104 ----a-w- C:\windows\System32\nlasvc.dll

2012-10-03 17:44:17 246272 ----a-w- C:\windows\System32\netcorehc.dll

2012-10-03 17:44:17 18944 ----a-w- C:\windows\System32\netevent.dll

2012-10-03 17:44:16 216576 ----a-w- C:\windows\System32\ncsi.dll

2012-10-03 17:42:16 569344 ----a-w- C:\windows\System32\iphlpsvc.dll

2012-10-03 16:42:24 18944 ----a-w- C:\windows\SysWow64\netevent.dll

2012-10-03 16:42:24 175104 ----a-w- C:\windows\SysWow64\netcorehc.dll

2012-10-03 16:42:23 156672 ----a-w- C:\windows\SysWow64\ncsi.dll

2012-10-03 16:07:26 45568 ----a-w- C:\windows\System32\drivers\tcpipreg.sys

2012-09-30 02:54:26 25928 ----a-w- C:\windows\System32\drivers\mbam.sys

2012-09-25 22:47:43 78336 ----a-w- C:\windows\SysWow64\synceng.dll

2012-09-25 22:46:17 95744 ----a-w- C:\windows\System32\synceng.dll

2012-09-14 19:19:29 2048 ----a-w- C:\windows\System32\tzres.dll

2012-09-14 18:28:53 2048 ----a-w- C:\windows\SysWow64\tzres.dll

2012-09-14 00:29:35 746984 ----a-w- C:\windows\SysWow64\deployJava1.dll

.

============= FINISH: 11:57:17.57 ===============

DDS Attach

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Home Premium

Boot Device: \Device\HarddiskVolume1

Install Date: 12/21/2011 4:01:09 PM

System Uptime: 12/9/2012 11:39:11 AM (0 hours ago)

.

Motherboard: TOSHIBA | | PHRAA

Processor: Intel® Core i7-2670QM CPU @ 2.20GHz | CPU 1 | 2201/100mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 682 GiB total, 507.585 GiB free.

D: is CDROM ()

E: is FIXED (NTFS) - 1863 GiB total, 1846.994 GiB free.

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP87: 11/27/2012 10:03:56 PM - Windows Update

RP88: 12/6/2012 7:21:20 PM - Windows Update

RP89: 12/8/2012 2:34:17 PM - Windows Update

RP90: 12/9/2012 3:00:21 AM - Windows Update

.

==== Installed Programs ======================

.

7-zip v9.20

Adobe AIR

Adobe Flash Player 10 ActiveX

Adobe Flash Player 10 Plugin

Adobe Reader X MUI

Akamai NetSession Interface

Amnesia: The Dark Descent

APB Reloaded

Apple Application Support

Apple Mobile Device Support

Apple Software Update

Best Buy Connect

Best Buy pc app

Blacklight: Retribution

Bonjour

C9

CCleaner

Champions Online: Free For All

Corel WinDVD

Creation Kit

D3DX10

Dear Esther

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition

Fallen Earth

Fallout: New Vegas

GameMaker: Studio

Gimp 2.6.2 Debug

Google Chrome

Google Update Helper

Hi-Rez Studios Authenticate and Update Service

iCloud

InstallIQ Updater

Intel PROSet Wireless

Intel® Management Engine Components

Intel® Processor Graphics

Intel® PROSet/Wireless WiFi Software

Intel® Rapid Storage Technology

Intel® WiDi

Intel® Wireless Display

Intel® PROSet/Wireless WiMAX Software

iTunes

Java 7 Update 9

Java Auto Updater

JMicron Flash Media Controller Driver

Junk Mail filter update

Label@Once 1.0

League of Legends

LogMeIn Hamachi

Malwarebytes Anti-Malware version 1.65.1.1000

MechWarrior Online

Mesh Runtime

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Application Error Reporting

Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170)

Microsoft Office 2010 Service Pack 1 (SP1)

Microsoft Office Access MUI (English) 2010

Microsoft Office Access Setup Metadata MUI (English) 2010

Microsoft Office Excel MUI (English) 2010

Microsoft Office Home and Student 2010

Microsoft Office Office 64-bit Components 2010

Microsoft Office OneNote MUI (English) 2010

Microsoft Office Outlook MUI (English) 2010

Microsoft Office PowerPoint MUI (English) 2010

Microsoft Office Proof (English) 2010

Microsoft Office Proof (French) 2010

Microsoft Office Proof (Spanish) 2010

Microsoft Office Proofing (English) 2010

Microsoft Office Publisher MUI (English) 2010

Microsoft Office Shared 64-bit MUI (English) 2010

Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010

Microsoft Office Shared MUI (English) 2010

Microsoft Office Shared Setup Metadata MUI (English) 2010

Microsoft Office Single Image 2010

Microsoft Office Word MUI (English) 2010

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

MicroVolts

MSVCRT

MSVCRT_amd64

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

MyTomTom 3.2.0.700

Norton AntiVirus

NVIDIA PhysX

Pando Media Booster

PlayReady PC Runtime amd64

PlayReady PC Runtime x86

Portal

Portal 2

Portal 2 - The Final Hours

PunkBuster Services

Realtek Ethernet Controller Driver

Realtek High Definition Audio Driver

Renesas Electronics USB 3.0 Host Controller Driver

Revo Uninstaller 1.94

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Microsoft Excel 2010 (KB2597126) 32-Bit Edition

Security Update for Microsoft InfoPath 2010 (KB2687417) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553091)

Security Update for Microsoft Office 2010 (KB2553096)

Security Update for Microsoft Office 2010 (KB2553260) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2589322) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2597986) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition

Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition

Security Update for Microsoft Visio Viewer 2010 (KB2598287) 32-Bit Edition

Security Update for Microsoft Word 2010 (KB2553488) 32-Bit Edition

Source Filmmaker

Source SDK

Spiral Knights

Steam

Synaptics Pointing Device Driver

Team Fortress 2

Team Fortress 2 Beta

The Elder Scrolls V: Skyrim

TOSHIBA Application Installer

TOSHIBA Assist

Toshiba Book Place

TOSHIBA Bulletin Board

TOSHIBA Disc Creator

TOSHIBA eco Utility

TOSHIBA Face Recognition

TOSHIBA Flash Cards Support Utility

TOSHIBA Hardware Setup

TOSHIBA HDD Protection

TOSHIBA HDD/SSD Alert

TOSHIBA Media Controller

TOSHIBA Media Controller Plug-in

TOSHIBA PC Health Monitor

TOSHIBA Quality Application

TOSHIBA Recovery Media Creator

TOSHIBA ReelTime

TOSHIBA Resolution+ Plug-in for Windows Media Player

TOSHIBA Service Station

TOSHIBA Sleep Utility

TOSHIBA Supervisor Password

TOSHIBA Value Added Package

TOSHIBA VIDEO PLAYER

TOSHIBA Web Camera Application

TOSHIBA Wireless Display Monitor

TOSHIBA Wireless LAN Indicator

TOSHIBARegistration

Tribes: Ascend

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft .NET Framework 4 Extended (KB2600217)

Update for Microsoft Office 2010 (KB2494150)

Update for Microsoft Office 2010 (KB2553065)

Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553272) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition

Update for Microsoft Office 2010 (KB2566458)

Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition

Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition

Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition

Update for Microsoft OneNote 2010 (KB2687277) 32-Bit Edition

Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition

Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition

Utility Common Driver

Vindictus

Visual Studio C++ 10.0 Runtime

Windows Live Communications Platform

Windows Live Essentials

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Language Selector

Windows Live Mail

Windows Live Mesh

Windows Live Mesh ActiveX Control for Remote Connections

Windows Live Messenger

Windows Live MIME IFilter

Windows Live Movie Maker

Windows Live Photo Common

Windows Live Photo Gallery

Windows Live PIMT Platform

Windows Live Remote Client

Windows Live Remote Client Resources

Windows Live Remote Service

Windows Live Remote Service Resources

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

.

==== Event Viewer Messages From Past Week ========

.

12/8/2012 6:26:15 PM, Error: Service Control Manager [7038] - The WinHttpAutoProxySvc service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The security account manager (SAM) or local security authority (LSA) server was in the wrong state to perform the security operation. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

12/8/2012 6:26:15 PM, Error: Service Control Manager [7038] - The WinHttpAutoProxySvc service was unable to log on as NT AUTHORITY\LocalService with the currently configured password due to the following error: The request is not supported. To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

12/8/2012 6:26:15 PM, Error: Service Control Manager [7000] - The WinHTTP Web Proxy Auto-Discovery Service service failed to start due to the following error: The service did not start due to a logon failure.

12/8/2012 6:26:10 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000000a (0x0000000000000000, 0x0000000000000002, 0x0000000000000000, 0xfffff80002ee5f74). A dump was saved in: C:\windows\MEMORY.DMP. Report Id: 120812-39905-01.

12/8/2012 12:00:45 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000000a (0x0000000000000000, 0x0000000000000002, 0x0000000000000000, 0xfffff80002e94f74). A dump was saved in: C:\windows\MEMORY.DMP. Report Id: 120812-37799-01.

12/6/2012 4:53:21 PM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.

12/6/2012 4:53:21 PM, Error: Service Control Manager [7000] - The Steam Client Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.

12/6/2012 4:33:17 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: BHDrvx64

12/5/2012 7:41:11 PM, Error: Service Control Manager [7023] - The Superfetch service terminated with the following error: The data is invalid.

12/5/2012 7:40:32 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000000a (0x0000000000000000, 0x0000000000000002, 0x0000000000000000, 0xfffff80002ea1f74). A dump was saved in: C:\windows\MEMORY.DMP. Report Id: 120512-42541-01.

.

==== End Of File ===========================

Security Checkup

Results of screen317's Security Check version 0.99.56

Windows 7 Service Pack 1 x64 (UAC is enabled)

Internet Explorer 9

``````````````Antivirus/Firewall Check:``````````````

Windows Firewall Enabled!

Norton AntiVirus

WMI entry may not exist for antivirus; attempting automatic update.

`````````Anti-malware/Other Utilities Check:`````````

Malwarebytes Anti-Malware version 1.65.1.1000

Java 7 Update 9

Adobe Flash Player 10 Flash Player out of Date!

Google Chrome 21.0.1180.83

Google Chrome 21.0.1180.89

Google Chrome 22.0.1229.79

Google Chrome 22.0.1229.92

Google Chrome 22.0.1229.94

Google Chrome 23.0.1271.64

Google Chrome 23.0.1271.95

````````Process Check: objlist.exe by Laurent````````

Norton ccSvcHst.exe

Malwarebytes Anti-Malware mbamservice.exe

Malwarebytes Anti-Malware mbamgui.exe

Norton AntiVirus Engine 19.9.0.9 ccSvcHst.exe

Malwarebytes' Anti-Malware mbamscheduler.exe

`````````````````System Health check`````````````````

Total Fragmentation on Drive C: 6%

````````````````````End of Log``````````````````````

Problems:

Have not encountered any problems yet.

gringo_pr · December 9, 2012

Hello

These are the programs I would like you to run next, if you have any problems with these just skip it and run the next one.

-AdwCleaner-

Please download

AdwCleaner by Xplode onto your desktop.

Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Delete.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the content of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[s1].txt as well.

--RogueKiller--

Download & SAVE to your Desktop RogueKiller or from here
- Quit all programs that you may have started.
- Please disconnect any USB or external drives from the computer before you run this scan!
- For Vista or Windows 7, right-click and select "Run as Administrator to start"
- For Windows XP, double-click to start.
- Wait until Prescan has finished ...
- Then Click on "Scan" button
- Wait until the Status box shows "Scan Finished"
- click on "delete"
- Wait until the Status box shows "Deleting Finished"
- Click on "Report" and copy/paste the content of the Notepad into your next reply.
- The log should be found in RKreport[1].txt on your Desktop
- Exit/Close RogueKiller+

Gringo

SilverMailman · December 10, 2012

Here is the log from AdwCleaner

# AdwCleaner v2.100 - Logfile created 12/09/2012 at 15:50:12

# Updated 09/12/2012 by Xplode

# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)

# User : Owner - OWNER-PC

# Boot Mode : Normal

# Running from : C:\Users\Owner\Desktop\adwcleaner.exe

# Option [Delete]

***** [services] *****

***** [Files / Folders] *****

Folder Deleted : C:\ProgramData\InstallMate

***** [Registry] *****

***** [internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16455

[OK] Registry is clean.

-\\ Google Chrome v23.0.1271.95

File : C:\Users\Owner\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [1224 octets] - [27/10/2012 19:01:30]

AdwCleaner[R2].txt - [1284 octets] - [27/10/2012 19:01:55]

AdwCleaner[s2].txt - [821 octets] - [09/12/2012 15:50:12]

########## EOF - C:\AdwCleaner[s2].txt - [880 octets] ##########

As for the other program Nortan Antivirus told me it was unsafe because of a cloud file so I figured I should consult with you before overriding Nortan's command.

Also, every time i log onto my computer jusched.exe asks to make changes on my computer saying that my version of java is not up to date but the java sight begs to differ, I havent pressed yes yet because it seems suspicios to me, I don't know though. Im not very good with this kind of thing.

gringo_pr · December 10, 2012

norton has been complaining lately of rougkiller but it is safe - as far as java we will update it later if needed

gringo

SilverMailman · December 10, 2012

There was two notepads for some reason so here is the first one

RogueKiller V8.3.2 [Dec 7 2012] by Tigzy

mail : tigzyRK<at>gmail<dot>com

Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/

Website : http://tigzy.geekstogo.com/roguekiller.php

Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User : Owner [Admin rights]

Mode : Scan -- Date : 12/09/2012 18:49:09

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 3 ¤¤¤

[HJPOL] HKCU\[...]\System : disableregistrytools (0) -> FOUND

[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> FOUND

[HJPOL] HKLM\[...]\Wow6432Node\System : DisableRegistryTools (0) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤

--> C:\windows\system32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: TOSHIBA MK7575GSX +++++

--- User ---

[MBR] 0b292c56c97b6fbfa1b1d56de2f48584

[bSP] a27490fbeb28f455b23c4767051a7e3d : Windows Vista MBR Code

Partition table:

0 - [ACTIVE] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 1500 Mo

1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 3074048 | Size: 698469 Mo

2 - [XXXXXX] NTFS (0x17) [HIDDEN!] Offset (sectors): 1433538560 | Size: 15434 Mo

User = LL1 ... OK!

User = LL2 ... OK!

Finished : << RKreport[1]_S_12092012_02d1849.txt >>

RKreport[1]_S_12092012_02d1849.txt

And here is the second one

RogueKiller V8.3.2 [Dec 7 2012] by Tigzy

mail : tigzyRK<at>gmail<dot>com

Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/

Website : http://tigzy.geekstogo.com/roguekiller.php

Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version

Started in : Normal mode

User : Owner [Admin rights]

Mode : Remove -- Date : 12/09/2012 18:49:35

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 2 ¤¤¤

[HJPOL] HKCU\[...]\System : disableregistrytools (0) -> DELETED

[HJPOL] HKLM\[...]\System : DisableRegistryTools (0) -> DELETED

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤

--> C:\windows\system32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: TOSHIBA MK7575GSX +++++

--- User ---

[MBR] 0b292c56c97b6fbfa1b1d56de2f48584

[bSP] a27490fbeb28f455b23c4767051a7e3d : Windows Vista MBR Code

Partition table:

0 - [ACTIVE] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 1500 Mo

1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 3074048 | Size: 698469 Mo

2 - [XXXXXX] NTFS (0x17) [HIDDEN!] Offset (sectors): 1433538560 | Size: 15434 Mo

User = LL1 ... OK!

User = LL2 ... OK!

Finished : << RKreport[2]_D_12092012_02d1849.txt >>

RKreport[1]_S_12092012_02d1849.txt ; RKreport[2]_D_12092012_02d1849.txt

gringo_pr · December 10, 2012

Hello

I Would like you to do the following.

Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links. I want you to save it to the desktop and run it from there.

Link 1
Link 2
Link 3

1. Close any open browsers or any other programs that are open.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.

When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

In your next post I need the following
Log from Combofix
let me know of any problems you may have had
How is the computer doing now?

Gringo

SilverMailman · December 10, 2012

Here is the log

ComboFix 12-12-07.01 - Owner 12/09/2012 19:11:36.4.8 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.6051.4066 [GMT -8:00]

Running from: c:\users\Owner\Desktop\ComboFix.exe

AV: Norton AntiVirus *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}

SP: Norton AntiVirus *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

((((((((((((((((((((((((( Files Created from 2012-11-10 to 2012-12-10 )))))))))))))))))))))))))))))))

.

2012-12-10 03:19 . 2012-12-10 03:19 -------- d-----w- c:\users\Public\AppData\Local\temp

2012-12-10 03:19 . 2012-12-10 03:19 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-11-21 01:35 . 2012-11-21 01:35 -------- d-----w- C:\Games

2012-11-21 01:34 . 2012-11-28 04:19 -------- d-----w- c:\users\Owner\AppData\Local\Package Cache

2012-11-19 21:59 . 2012-11-28 03:39 -------- d-----w- c:\program files (x86)\LogMeIn Hamachi

2012-11-15 02:42 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys

2012-11-15 02:42 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys

2012-11-15 02:42 . 2012-07-26 04:47 2560 ----a-w- c:\windows\system32\drivers\en-US\wdf01000.sys.mui

2012-11-15 02:42 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll

2012-11-15 02:40 . 2012-10-08 12:19 17811968 ----a-w- c:\windows\system32\mshtml.dll

2012-11-15 02:40 . 2012-10-08 11:42 10925568 ----a-w- c:\windows\system32\ieframe.dll

2012-11-15 02:40 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys

2012-11-15 02:40 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys

2012-11-15 02:40 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe

2012-11-15 02:40 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll

2012-11-15 02:40 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll

2012-11-15 02:40 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll

2012-11-15 02:40 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll

2012-11-15 02:38 . 2012-10-09 18:17 226816 ----a-w- c:\windows\system32\dhcpcore6.dll

2012-11-15 02:38 . 2012-10-09 18:17 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll

2012-11-15 02:38 . 2012-10-09 17:40 44032 ----a-w- c:\windows\SysWow64\dhcpcsvc6.dll

2012-11-15 02:38 . 2012-10-09 17:40 193536 ----a-w- c:\windows\SysWow64\dhcpcore6.dll

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-11-15 05:19 . 2011-12-22 02:56 66395536 ----a-w- c:\windows\system32\MRT.exe

2012-10-28 15:47 . 2012-10-28 15:48 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll

2012-10-28 15:47 . 2012-08-25 23:14 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll

2012-10-28 15:46 . 2012-10-28 15:46 0 ----a-w- c:\windows\SysWow64\RENADEE.tmp

2012-10-28 15:46 . 2012-10-28 15:46 0 ----a-w- c:\windows\SysWow64\RENADED.tmp

2012-10-28 15:46 . 2012-10-28 15:46 0 ----a-w- c:\windows\SysWow64\RENA5D1.tmp

2012-10-28 15:46 . 2012-10-28 15:46 0 ----a-w- c:\windows\SysWow64\RENA5D0.tmp

2012-10-28 15:45 . 2012-10-28 15:45 163056 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10142.bin

2012-10-16 08:38 . 2012-12-09 02:35 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll

2012-10-16 08:38 . 2012-12-09 02:35 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll

2012-10-16 07:39 . 2012-12-09 02:35 561664 ----a-w- c:\windows\apppatch\AcLayers.dll

2012-09-30 02:54 . 2012-10-28 15:59 25928 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-09-14 19:19 . 2012-10-10 04:06 2048 ----a-w- c:\windows\system32\tzres.dll

2012-09-14 18:28 . 2012-10-10 04:06 2048 ----a-w- c:\windows\SysWow64\tzres.dll

2012-09-14 00:29 . 2011-08-22 03:18 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"SVPWUTIL"="c:\program files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe" [2010-11-09 532480]

"HWSetup"="c:\program files\TOSHIBA\Utilities\HWSetup.exe" [2011-03-10 423936]

"KeNotify"="c:\program files (x86)\TOSHIBA\Utilities\KeNotify.exe" [2010-08-16 34160]

"ToshibaServiceStation"="c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" [2011-07-12 1298816]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-31 59280]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]

"LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-11-20 2254768]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x]

R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [2011-06-21 34200]

R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2011-05-03 175192]

R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-06-01 340240]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-02-15 52736]

R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-12-22 1255736]

R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys [2008-05-07 14464]

R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x]

R3 X6va009;X6va009;c:\windows\SysWOW64\Drivers\X6va009 [x]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NAVx64\1309000.009\SYMDS64.SYS [2011-07-26 451192]

S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NAVx64\1309000.009\SYMEFA64.SYS [2012-05-22 1129120]

S0 Thpdrv;TOSHIBA HDD Protection Driver;c:\windows\system32\DRIVERS\thpdrv.sys [2011-03-24 36992]

S0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver;c:\windows\system32\DRIVERS\Thpevm.SYS [2009-06-29 14784]

S0 tos_sps64;TOSHIBA tos_sps64 Service;c:\windows\system32\DRIVERS\tos_sps64.sys [2011-06-10 482384]

S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\BASHDefs\20121130.005_fd0\BHDrvx64.sys [2012-11-30 1384608]

S1 ccSet_NAV;Norton AntiVirus Settings Manager;c:\windows\system32\drivers\NAVx64\1309000.009\ccSetx64.sys [2012-06-07 167072]

S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\IPSDefs\20121205.001\IDSvia64.sys [2012-12-05 513184]

S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NAVx64\1309000.009\Ironx64.SYS [2012-04-18 190072]

S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NAVx64\1309000.009\SYMNETS.SYS [2012-04-18 405624]

S2 DMAgent;Intel® PROSet/Wireless WiMAX Red Bend Device Management Service;c:\program files\Intel\WiMAX\Bin\DMAgent.exe [2011-06-14 498688]

S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-11-20 2462128]

S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-09-30 399432]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-30 676936]

S2 NAV;Norton AntiVirus;c:\program files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe [2012-06-16 138272]

S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-17 14112]

S2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;c:\program files\TOSHIBA\TECO\TecoService.exe [2011-05-24 294848]

S2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;c:\windows\system32\DRIVERS\TVALZFL.sys [2009-06-20 14472]

S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]

S2 WiMAXAppSrv;Intel® PROSet/Wireless WiMAX Service;c:\program files\Intel\WiMAX\Bin\AppSrv.exe [2011-06-14 986112]

S3 bpenum;Intel® Centrino® WiMAX Enumerator;c:\windows\system32\DRIVERS\bpenum.sys [2011-05-19 84480]

S3 bpmp;Intel® Centrino® WiMAX 6050 Series;c:\windows\system32\DRIVERS\bpmp.sys [2011-05-19 182272]

S3 bpusb;Intel® Centrino® WiMAX 6050 Series Function Driver;c:\windows\system32\Drivers\bpusb.sys [2011-05-19 83968]

S3 CeKbFilter;CeKbFilter;c:\windows\system32\DRIVERS\CeKbFilter.sys [2011-09-25 20592]

S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-12-09 138912]

S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]

S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [2011-06-21 25496]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-30 25928]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2011-02-10 82432]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2011-02-10 181760]

S3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys [2011-02-09 38096]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-01-14 413800]

S3 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2011-07-12 57216]

S3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2011-06-10 138152]

S3 TPCHSrv;TPCH Service;c:\program files\TOSHIBA\TPHM\TPCHSrv.exe [2011-07-01 828856]

.

Contents of the 'Scheduled Tasks' folder

.

2012-12-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-09-25 06:12]

.

2012-12-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-09-25 06:12]

.

--------- X64 Entries -----------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ThpSrv"="c:\windows\system32\thpsrv" [X]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-07-02 167704]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-07-02 392472]

"Persistence"="c:\windows\system32\igfxpers.exe" [2011-07-02 416024]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-03-05 11780712]

"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-03-01 2189416]

"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-06-01 1935120]

"TosSENotify"="c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" [2011-06-10 710560]

"TosVolRegulator"="c:\program files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" [2009-11-11 24376]

"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2010-11-04 1580368]

.

------- Supplementary Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.com/

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = <local>;*.local

IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000

IE: Se&nd to OneNote - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105

Trusted Zone: clonewarsadventures.com

Trusted Zone: freerealms.com

Trusted Zone: soe.com

Trusted Zone: sony.com

.

- - - - ORPHANS REMOVED - - - -

.

Toolbar-Locked - (no file)

HKLM-Run-TPwrMain - c:\program files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE

HKLM-Run-HSON - c:\program files (x86)\TOSHIBA\TBS\HSON.exe

HKLM-Run-TCrdMain - c:\program files (x86)\TOSHIBA\FlashCards\TCrdMain.exe

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

HKLM-Run-Teco - c:\program files (x86)\TOSHIBA\TECO\Teco.exe

HKLM-Run-TosWaitSrv - c:\program files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe

HKLM-Run-TosNC - c:\program files (x86)\Toshiba\BulletinBoard\TosNcCore.exe

HKLM-Run-TosReelTimeMonitor - c:\program files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\services\NAV]

"ImagePath"="\"c:\program files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe\" /s \"NAV\" /m \"c:\program files (x86)\Norton AntiVirus\Engine\19.9.0.9\diMaster.dll\" /prefetch:1"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va008]

"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va009]

"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va009"

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Completion time: 2012-12-09 19:21:43

ComboFix-quarantined-files.txt 2012-12-10 03:21

.

Pre-Run: 544,679,198,720 bytes free

Post-Run: 544,970,911,744 bytes free

.

- - End Of File - - 5EECDE0C22ED18A52E3C254B8FAE735F

Problems:

I had no problems in doing this

How is my computer doing:

As far as how well it is working compared to beforehand it has not changed, or at least not that I can see, but i havent gotten bluescreen during any of the times any of these programs restarted my computer so I would consiter that an improvement. Also it might just be me but the programs seem to respond better. As for if it has been doing worse in any case, no nothing has changed.

gringo_pr · December 10, 2012

Greetings

I want you to run these next,

tdsskiller:

Please read carefully and follow these steps.

Download TDSSKiller and save it to your Desktop.
doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
If an infected file is detected, the default action will be Cure, click on Continue.
If a suspicious file is detected, the default action will be Skip, click on Continue.
It may ask you to reboot the computer to complete the process. Click on Reboot Now.
If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Please download aswMBR to your desktop.

Double click the aswMBR.exe icon to run it
it will ask to download extra definitions - ALLOW IT
Click the Scan button to start the scan
On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

If you have any problems running either one come back and let me know

please reply with the reports from TDSSKiller and aswMBR

Gringo

SilverMailman · December 10, 2012

TDSSKiller:

19:38:48.0970 3068 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35

19:38:49.0407 3068 ============================================================

19:38:49.0407 3068 Current date / time: 2012/12/09 19:38:49.0407

19:38:49.0407 3068 SystemInfo:

19:38:49.0407 3068

19:38:49.0407 3068 OS Version: 6.1.7601 ServicePack: 1.0

19:38:49.0407 3068 Product type: Workstation

19:38:49.0407 3068 ComputerName: OWNER-PC

19:38:49.0407 3068 UserName: Owner

19:38:49.0407 3068 Windows directory: C:\windows

19:38:49.0407 3068 System windows directory: C:\windows

19:38:49.0407 3068 Running under WOW64

19:38:49.0407 3068 Processor architecture: Intel x64

19:38:49.0407 3068 Number of processors: 8

19:38:49.0407 3068 Page size: 0x1000

19:38:49.0407 3068 Boot type: Normal boot

19:38:49.0407 3068 ============================================================

19:38:50.0047 3068 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

19:38:50.0062 3068 ============================================================

19:38:50.0109 3068 \Device\Harddisk0\DR0:

19:38:50.0109 3068 MBR partitions:

19:38:50.0109 3068 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0x55432800

19:38:50.0109 3068 ============================================================

19:38:50.0187 3068 C: <-> \Device\Harddisk0\DR0\Partition1

19:38:50.0187 3068 ============================================================

19:38:50.0187 3068 Initialize success

19:38:50.0187 3068 ============================================================

19:38:59.0001 2980 ============================================================

19:38:59.0001 2980 Scan started

19:38:59.0001 2980 Mode: Manual;

19:38:59.0001 2980 ============================================================

19:38:59.0485 2980 ================ Scan system memory ========================

19:38:59.0485 2980 System memory - ok

19:38:59.0485 2980 ================ Scan services =============================

19:38:59.0719 2980 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\windows\system32\drivers\1394ohci.sys

19:38:59.0719 2980 1394ohci - ok

19:38:59.0750 2980 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\windows\system32\drivers\ACPI.sys

19:38:59.0766 2980 ACPI - ok

19:38:59.0797 2980 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\windows\system32\drivers\acpipmi.sys

19:38:59.0797 2980 AcpiPmi - ok

19:38:59.0859 2980 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\windows\system32\drivers\adp94xx.sys

19:38:59.0859 2980 adp94xx - ok

19:38:59.0890 2980 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\windows\system32\drivers\adpahci.sys

19:38:59.0906 2980 adpahci - ok

19:38:59.0906 2980 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\windows\system32\drivers\adpu320.sys

19:38:59.0922 2980 adpu320 - ok

19:38:59.0953 2980 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\windows\System32\aelupsvc.dll

19:38:59.0968 2980 AeLookupSvc - ok

19:39:00.0015 2980 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\windows\system32\drivers\afd.sys

19:39:00.0015 2980 AFD - ok

19:39:00.0062 2980 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\windows\system32\drivers\agp440.sys

19:39:00.0062 2980 agp440 - ok

19:39:00.0093 2980 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\windows\System32\alg.exe

19:39:00.0093 2980 ALG - ok

19:39:00.0124 2980 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\windows\system32\drivers\aliide.sys

19:39:00.0124 2980 aliide - ok

19:39:00.0156 2980 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\windows\system32\drivers\amdide.sys

19:39:00.0156 2980 amdide - ok

19:39:00.0187 2980 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\windows\system32\drivers\amdk8.sys

19:39:00.0187 2980 AmdK8 - ok

19:39:00.0202 2980 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\windows\system32\drivers\amdppm.sys

19:39:00.0202 2980 AmdPPM - ok

19:39:00.0234 2980 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\windows\system32\drivers\amdsata.sys

19:39:00.0249 2980 amdsata - ok

19:39:00.0296 2980 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\windows\system32\drivers\amdsbs.sys

19:39:00.0296 2980 amdsbs - ok

19:39:00.0312 2980 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\windows\system32\drivers\amdxata.sys

19:39:00.0312 2980 amdxata - ok

19:39:00.0374 2980 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\windows\system32\drivers\appid.sys

19:39:00.0374 2980 AppID - ok

19:39:00.0405 2980 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\windows\System32\appidsvc.dll

19:39:00.0405 2980 AppIDSvc - ok

19:39:00.0436 2980 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\windows\System32\appinfo.dll

19:39:00.0436 2980 Appinfo - ok

19:39:00.0561 2980 [ F401929EE0CC92BFE7F15161CA535383 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

19:39:00.0561 2980 Apple Mobile Device - ok

19:39:00.0624 2980 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\windows\system32\drivers\arc.sys

19:39:00.0624 2980 arc - ok

19:39:00.0655 2980 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\windows\system32\drivers\arcsas.sys

19:39:00.0655 2980 arcsas - ok

19:39:00.0780 2980 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

19:39:00.0795 2980 aspnet_state - ok

19:39:00.0826 2980 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\windows\system32\DRIVERS\asyncmac.sys

19:39:00.0826 2980 AsyncMac - ok

19:39:00.0889 2980 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\windows\system32\drivers\atapi.sys

19:39:00.0889 2980 atapi - ok

19:39:00.0982 2980 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll

19:39:00.0982 2980 AudioEndpointBuilder - ok

19:39:00.0998 2980 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\windows\System32\Audiosrv.dll

19:39:00.0998 2980 AudioSrv - ok

19:39:01.0045 2980 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\windows\System32\AxInstSV.dll

19:39:01.0045 2980 AxInstSV - ok

19:39:01.0092 2980 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\windows\system32\drivers\bxvbda.sys

19:39:01.0107 2980 b06bdrv - ok

19:39:01.0154 2980 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\windows\system32\DRIVERS\b57nd60a.sys

19:39:01.0154 2980 b57nd60a - ok

19:39:01.0216 2980 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\windows\System32\bdesvc.dll

19:39:01.0216 2980 BDESVC - ok

19:39:01.0263 2980 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\windows\system32\drivers\Beep.sys

19:39:01.0263 2980 Beep - ok

19:39:01.0341 2980 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\windows\System32\bfe.dll

19:39:01.0357 2980 BFE - ok

19:39:01.0528 2980 [ ED97ADAF00A61F57A2CCBBB1CE58C600 ] BHDrvx64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\BASHDefs\20121130.005_fd0\BHDrvx64.sys

19:39:01.0544 2980 BHDrvx64 - ok

19:39:01.0606 2980 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\windows\system32\qmgr.dll

19:39:01.0622 2980 BITS - ok

19:39:01.0653 2980 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\windows\system32\drivers\blbdrive.sys

19:39:01.0653 2980 blbdrive - ok

19:39:01.0716 2980 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

19:39:01.0716 2980 Bonjour Service - ok

19:39:01.0747 2980 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\windows\system32\DRIVERS\bowser.sys

19:39:01.0747 2980 bowser - ok

19:39:01.0794 2980 [ 56E4345F392F17D66683225E214840CB ] bpenum C:\windows\system32\DRIVERS\bpenum.sys

19:39:01.0794 2980 bpenum - ok

19:39:01.0825 2980 [ D50B07C4D7AFEC4CA6AC8FCB72583C5B ] bpmp C:\windows\system32\DRIVERS\bpmp.sys

19:39:01.0825 2980 bpmp - ok

19:39:01.0856 2980 [ A85BA55E4FE9CB2F342F281AAF7DE810 ] bpusb C:\windows\system32\Drivers\bpusb.sys

19:39:01.0856 2980 bpusb - ok

19:39:01.0903 2980 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\windows\system32\drivers\BrFiltLo.sys

19:39:01.0903 2980 BrFiltLo - ok

19:39:01.0918 2980 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\windows\system32\drivers\BrFiltUp.sys

19:39:01.0918 2980 BrFiltUp - ok

19:39:01.0965 2980 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\windows\system32\DRIVERS\bridge.sys

19:39:01.0965 2980 BridgeMP - ok

19:39:02.0012 2980 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\windows\System32\browser.dll

19:39:02.0012 2980 Browser - ok

19:39:02.0043 2980 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\windows\System32\Drivers\Brserid.sys

19:39:02.0043 2980 Brserid - ok

19:39:02.0074 2980 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\windows\System32\Drivers\BrSerWdm.sys

19:39:02.0090 2980 BrSerWdm - ok

19:39:02.0121 2980 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\windows\System32\Drivers\BrUsbMdm.sys

19:39:02.0121 2980 BrUsbMdm - ok

19:39:02.0152 2980 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\windows\System32\Drivers\BrUsbSer.sys

19:39:02.0152 2980 BrUsbSer - ok

19:39:02.0168 2980 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\windows\system32\drivers\bthmodem.sys

19:39:02.0184 2980 BTHMODEM - ok

19:39:02.0215 2980 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\windows\system32\bthserv.dll

19:39:02.0230 2980 bthserv - ok

19:39:02.0246 2980 catchme - ok

19:39:02.0340 2980 [ 2C6FFCCA37B002AAB3C7C31A6D780A76 ] ccSet_NAV C:\windows\system32\drivers\NAVx64\1309000.009\ccSetx64.sys

19:39:02.0340 2980 ccSet_NAV - ok

19:39:02.0371 2980 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\windows\system32\DRIVERS\cdfs.sys

19:39:02.0371 2980 cdfs - ok

19:39:02.0418 2980 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\windows\system32\DRIVERS\cdrom.sys

19:39:02.0418 2980 cdrom - ok

19:39:02.0480 2980 [ A965B206921C55F2D1481789D609B711 ] CeKbFilter C:\windows\system32\DRIVERS\CeKbFilter.sys

19:39:02.0480 2980 CeKbFilter - ok

19:39:02.0527 2980 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\windows\System32\certprop.dll

19:39:02.0527 2980 CertPropSvc - ok

19:39:02.0558 2980 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\windows\system32\drivers\circlass.sys

19:39:02.0558 2980 circlass - ok

19:39:02.0589 2980 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\windows\system32\CLFS.sys

19:39:02.0605 2980 CLFS - ok

19:39:02.0667 2980 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

19:39:02.0667 2980 clr_optimization_v2.0.50727_32 - ok

19:39:02.0714 2980 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

19:39:02.0714 2980 clr_optimization_v2.0.50727_64 - ok

19:39:02.0776 2980 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

19:39:02.0792 2980 clr_optimization_v4.0.30319_32 - ok

19:39:02.0808 2980 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

19:39:02.0808 2980 clr_optimization_v4.0.30319_64 - ok

19:39:02.0854 2980 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\windows\system32\drivers\CmBatt.sys

19:39:02.0854 2980 CmBatt - ok

19:39:02.0870 2980 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\windows\system32\drivers\cmdide.sys

19:39:02.0870 2980 cmdide - ok

19:39:02.0917 2980 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\windows\system32\Drivers\cng.sys

19:39:02.0932 2980 CNG - ok

19:39:02.0979 2980 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\windows\system32\drivers\compbatt.sys

19:39:02.0979 2980 Compbatt - ok

19:39:02.0995 2980 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\windows\system32\drivers\CompositeBus.sys

19:39:03.0010 2980 CompositeBus - ok

19:39:03.0026 2980 COMSysApp - ok

19:39:03.0042 2980 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\windows\system32\drivers\crcdisk.sys

19:39:03.0042 2980 crcdisk - ok

19:39:03.0089 2980 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\windows\system32\cryptsvc.dll

19:39:03.0105 2980 CryptSvc - ok

19:39:03.0152 2980 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\windows\system32\rpcss.dll

19:39:03.0152 2980 DcomLaunch - ok

19:39:03.0199 2980 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\windows\System32\defragsvc.dll

19:39:03.0214 2980 defragsvc - ok

19:39:03.0245 2980 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\windows\system32\Drivers\dfsc.sys

19:39:03.0245 2980 DfsC - ok

19:39:03.0277 2980 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\windows\system32\dhcpcore.dll

19:39:03.0277 2980 Dhcp - ok

19:39:03.0308 2980 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\windows\system32\drivers\discache.sys

19:39:03.0308 2980 discache - ok

19:39:03.0339 2980 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\windows\system32\drivers\disk.sys

19:39:03.0355 2980 Disk - ok

19:39:03.0401 2980 [ E7B489FA5B15D2FEC3E52066E015B788 ] DMAgent C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe

19:39:03.0417 2980 DMAgent - ok

19:39:03.0448 2980 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\windows\System32\dnsrslvr.dll

19:39:03.0464 2980 Dnscache - ok

19:39:03.0495 2980 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\windows\System32\dot3svc.dll

19:39:03.0495 2980 dot3svc - ok

19:39:03.0511 2980 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\windows\system32\dps.dll

19:39:03.0511 2980 DPS - ok

19:39:03.0542 2980 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\windows\system32\drivers\drmkaud.sys

19:39:03.0542 2980 drmkaud - ok

19:39:03.0589 2980 [ 85DBF6EC7BDFA6187F4A1EC8F3145CD0 ] DXGKrnl C:\windows\System32\drivers\dxgkrnl.sys

19:39:03.0604 2980 DXGKrnl - ok

19:39:03.0635 2980 EagleX64 - ok

19:39:03.0667 2980 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\windows\System32\eapsvc.dll

19:39:03.0682 2980 EapHost - ok

19:39:03.0776 2980 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\windows\system32\drivers\evbda.sys

19:39:03.0791 2980 ebdrv - ok

19:39:03.0869 2980 [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys

19:39:03.0885 2980 eeCtrl - ok

19:39:03.0916 2980 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\windows\System32\lsass.exe

19:39:03.0916 2980 EFS - ok

19:39:03.0979 2980 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\windows\ehome\ehRecvr.exe

19:39:03.0994 2980 ehRecvr - ok

19:39:04.0010 2980 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\windows\ehome\ehsched.exe

19:39:04.0010 2980 ehSched - ok

19:39:04.0041 2980 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\windows\system32\drivers\elxstor.sys

19:39:04.0057 2980 elxstor - ok

19:39:04.0119 2980 [ C5BCCB378D0A896304A3E71BE7215983 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

19:39:04.0119 2980 EraserUtilRebootDrv - ok

19:39:04.0181 2980 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\windows\system32\drivers\errdev.sys

19:39:04.0181 2980 ErrDev - ok

19:39:04.0228 2980 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\windows\system32\es.dll

19:39:04.0244 2980 EventSystem - ok

19:39:04.0322 2980 [ 57E61DC4F7980D57C0B162FC5B9F0B38 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe

19:39:04.0337 2980 EvtEng - ok

19:39:04.0369 2980 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\windows\system32\drivers\exfat.sys

19:39:04.0369 2980 exfat - ok

19:39:04.0384 2980 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\windows\system32\drivers\fastfat.sys

19:39:04.0384 2980 fastfat - ok

19:39:04.0431 2980 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\windows\system32\fxssvc.exe

19:39:04.0447 2980 Fax - ok

19:39:04.0478 2980 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\windows\system32\drivers\fdc.sys

19:39:04.0478 2980 fdc - ok

19:39:04.0509 2980 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\windows\system32\fdPHost.dll

19:39:04.0509 2980 fdPHost - ok

19:39:04.0525 2980 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\windows\system32\fdrespub.dll

19:39:04.0525 2980 FDResPub - ok

19:39:04.0540 2980 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\windows\system32\drivers\fileinfo.sys

19:39:04.0540 2980 FileInfo - ok

19:39:04.0556 2980 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\windows\system32\drivers\filetrace.sys

19:39:04.0556 2980 Filetrace - ok

19:39:04.0587 2980 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\windows\system32\drivers\flpydisk.sys

19:39:04.0587 2980 flpydisk - ok

19:39:04.0618 2980 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\windows\system32\drivers\fltmgr.sys

19:39:04.0618 2980 FltMgr - ok

19:39:04.0712 2980 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\windows\system32\FntCache.dll

19:39:04.0727 2980 FontCache - ok

19:39:04.0774 2980 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

19:39:04.0774 2980 FontCache3.0.0.0 - ok

19:39:04.0790 2980 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\windows\system32\drivers\FsDepends.sys

19:39:04.0790 2980 FsDepends - ok

19:39:04.0821 2980 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\windows\system32\drivers\Fs_Rec.sys

19:39:04.0821 2980 Fs_Rec - ok

19:39:04.0852 2980 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\windows\system32\DRIVERS\fvevol.sys

19:39:04.0868 2980 fvevol - ok

19:39:04.0899 2980 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\windows\system32\drivers\gagp30kx.sys

19:39:04.0899 2980 gagp30kx - ok

19:39:04.0946 2980 [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM C:\windows\system32\DRIVERS\GEARAspiWDM.sys

19:39:04.0946 2980 GEARAspiWDM - ok

19:39:04.0993 2980 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\windows\System32\gpsvc.dll

19:39:04.0993 2980 gpsvc - ok

19:39:05.0055 2980 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

19:39:05.0055 2980 gupdate - ok

19:39:05.0086 2980 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

19:39:05.0086 2980 gupdatem - ok

19:39:05.0117 2980 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi C:\windows\system32\DRIVERS\hamachi.sys

19:39:05.0117 2980 hamachi - ok

19:39:05.0211 2980 [ A5963114373834D78782013BC803043E ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

19:39:05.0242 2980 Hamachi2Svc - ok

19:39:05.0273 2980 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\windows\system32\drivers\hcw85cir.sys

19:39:05.0273 2980 hcw85cir - ok

19:39:05.0305 2980 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys

19:39:05.0305 2980 HdAudAddService - ok

19:39:05.0351 2980 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\windows\system32\drivers\HDAudBus.sys

19:39:05.0351 2980 HDAudBus - ok

19:39:05.0367 2980 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\windows\system32\drivers\HidBatt.sys

19:39:05.0367 2980 HidBatt - ok

19:39:05.0398 2980 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\windows\system32\drivers\hidbth.sys

19:39:05.0398 2980 HidBth - ok

19:39:05.0429 2980 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\windows\system32\drivers\hidir.sys

19:39:05.0429 2980 HidIr - ok

19:39:05.0476 2980 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\windows\System32\hidserv.dll

19:39:05.0476 2980 hidserv - ok

19:39:05.0523 2980 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\windows\system32\DRIVERS\hidusb.sys

19:39:05.0523 2980 HidUsb - ok

19:39:05.0585 2980 [ 00C71C3FB915BA353740999ADF447927 ] HiPatchService C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

19:39:05.0585 2980 HiPatchService - ok

19:39:05.0617 2980 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\windows\system32\kmsvc.dll

19:39:05.0617 2980 hkmsvc - ok

19:39:05.0648 2980 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\windows\system32\ListSvc.dll

19:39:05.0648 2980 HomeGroupListener - ok

19:39:05.0679 2980 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\windows\system32\provsvc.dll

19:39:05.0679 2980 HomeGroupProvider - ok

19:39:05.0726 2980 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\windows\system32\drivers\HpSAMD.sys

19:39:05.0726 2980 HpSAMD - ok

19:39:05.0757 2980 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\windows\system32\drivers\HTTP.sys

19:39:05.0773 2980 HTTP - ok

19:39:05.0788 2980 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\windows\system32\drivers\hwpolicy.sys

19:39:05.0788 2980 hwpolicy - ok

19:39:05.0819 2980 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\windows\system32\drivers\i8042prt.sys

19:39:05.0819 2980 i8042prt - ok

19:39:05.0866 2980 [ D469B77687E12FE43E344806740B624D ] iaStor C:\windows\system32\DRIVERS\iaStor.sys

19:39:05.0882 2980 iaStor - ok

19:39:05.0929 2980 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\windows\system32\drivers\iaStorV.sys

19:39:05.0944 2980 iaStorV - ok

19:39:05.0991 2980 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

19:39:06.0007 2980 idsvc - ok

19:39:06.0131 2980 [ A48928D4CCA6F8B731989DB08CF2C0AB ] IDSVia64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\IPSDefs\20121205.001\IDSvia64.sys

19:39:06.0131 2980 IDSVia64 - ok

19:39:06.0397 2980 [ 93C8115D4BAEB1BD047AB0A9B265EE7A ] igfx C:\windows\system32\DRIVERS\igdkmd64.sys

19:39:06.0443 2980 igfx - ok

19:39:06.0475 2980 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\windows\system32\drivers\iirsp.sys

19:39:06.0475 2980 iirsp - ok

19:39:06.0521 2980 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\windows\System32\ikeext.dll

19:39:06.0537 2980 IKEEXT - ok

19:39:06.0584 2980 [ CADDF0927DAC63EDAE48F5C35A61D87D ] intaud_WaveExtensible C:\windows\system32\drivers\intelaud.sys

19:39:06.0584 2980 intaud_WaveExtensible - ok

19:39:06.0677 2980 [ 4B2151F04BB466EC1924AA27315E1118 ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHD64.sys

19:39:06.0693 2980 IntcAzAudAddService - ok

19:39:06.0755 2980 [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud C:\windows\system32\DRIVERS\IntcDAud.sys

19:39:06.0755 2980 IntcDAud - ok

19:39:06.0802 2980 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\windows\system32\drivers\intelide.sys

19:39:06.0802 2980 intelide - ok

19:39:06.0833 2980 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\windows\system32\DRIVERS\intelppm.sys

19:39:06.0833 2980 intelppm - ok

19:39:06.0865 2980 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\windows\system32\ipbusenum.dll

19:39:06.0880 2980 IPBusEnum - ok

19:39:06.0896 2980 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\windows\system32\DRIVERS\ipfltdrv.sys

19:39:06.0896 2980 IpFilterDriver - ok

19:39:06.0958 2980 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\windows\System32\iphlpsvc.dll

19:39:06.0974 2980 iphlpsvc - ok

19:39:06.0989 2980 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\windows\system32\drivers\IPMIDrv.sys

19:39:06.0989 2980 IPMIDRV - ok

19:39:07.0005 2980 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\windows\system32\drivers\ipnat.sys

19:39:07.0005 2980 IPNAT - ok

19:39:07.0099 2980 [ A9AB99EE7D39725EAFEC82732D2B3271 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe

19:39:07.0099 2980 iPod Service - ok

19:39:07.0130 2980 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\windows\system32\drivers\irenum.sys

19:39:07.0145 2980 IRENUM - ok

19:39:07.0161 2980 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\windows\system32\drivers\isapnp.sys

19:39:07.0161 2980 isapnp - ok

19:39:07.0192 2980 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\windows\system32\drivers\msiscsi.sys

19:39:07.0192 2980 iScsiPrt - ok

19:39:07.0239 2980 [ F415A88162D23977B5EDAE4F0410E903 ] IviRegMgr C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe

19:39:07.0239 2980 IviRegMgr - ok

19:39:07.0255 2980 [ 716F66336F10885D935B08174DC54242 ] iwdbus C:\windows\system32\DRIVERS\iwdbus.sys

19:39:07.0270 2980 iwdbus - ok

19:39:07.0286 2980 [ 935301DD8306CEEAEF0B84DD6ABFFDC6 ] JMCR C:\windows\system32\DRIVERS\jmcr.sys

19:39:07.0286 2980 JMCR - ok

19:39:07.0317 2980 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\windows\system32\DRIVERS\kbdclass.sys

19:39:07.0317 2980 kbdclass - ok

19:39:07.0348 2980 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\windows\system32\DRIVERS\kbdhid.sys

19:39:07.0348 2980 kbdhid - ok

19:39:07.0364 2980 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\windows\system32\lsass.exe

19:39:07.0364 2980 KeyIso - ok

19:39:07.0395 2980 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\windows\system32\Drivers\ksecdd.sys

19:39:07.0395 2980 KSecDD - ok

19:39:07.0426 2980 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\windows\system32\Drivers\ksecpkg.sys

19:39:07.0426 2980 KSecPkg - ok

19:39:07.0457 2980 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\windows\system32\drivers\ksthunk.sys

19:39:07.0457 2980 ksthunk - ok

19:39:07.0489 2980 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\windows\system32\msdtckrm.dll

19:39:07.0489 2980 KtmRm - ok

19:39:07.0535 2980 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\windows\System32\srvsvc.dll

19:39:07.0535 2980 LanmanServer - ok

19:39:07.0567 2980 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\windows\System32\wkssvc.dll

19:39:07.0567 2980 LanmanWorkstation - ok

19:39:07.0598 2980 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\windows\system32\DRIVERS\lltdio.sys

19:39:07.0598 2980 lltdio - ok

19:39:07.0629 2980 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\windows\System32\lltdsvc.dll

19:39:07.0629 2980 lltdsvc - ok

19:39:07.0660 2980 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\windows\System32\lmhsvc.dll

19:39:07.0660 2980 lmhosts - ok

19:39:07.0738 2980 [ 50C7CE53EF461870410355F1F2E7D515 ] LMS C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

19:39:07.0738 2980 LMS - ok

19:39:07.0801 2980 [ 2825A71E7501CB33B3B9F856610C729D ] LPCFilter C:\windows\system32\DRIVERS\LPCFilter.sys

19:39:07.0801 2980 LPCFilter - ok

19:39:07.0832 2980 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\windows\system32\drivers\lsi_fc.sys

19:39:07.0832 2980 LSI_FC - ok

19:39:07.0863 2980 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\windows\system32\drivers\lsi_sas.sys

19:39:07.0863 2980 LSI_SAS - ok

19:39:07.0863 2980 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\windows\system32\drivers\lsi_sas2.sys

19:39:07.0863 2980 LSI_SAS2 - ok

19:39:07.0894 2980 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\windows\system32\drivers\lsi_scsi.sys

19:39:07.0894 2980 LSI_SCSI - ok

19:39:07.0925 2980 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\windows\system32\drivers\luafv.sys

19:39:07.0925 2980 luafv - ok

19:39:07.0988 2980 [ A8FE8F2783B2929B56F5370A89356CE9 ] MBAMProtector C:\windows\system32\drivers\mbam.sys

19:39:07.0988 2980 MBAMProtector - ok

19:39:08.0050 2980 [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

19:39:08.0050 2980 MBAMScheduler - ok

19:39:08.0113 2980 [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

19:39:08.0128 2980 MBAMService - ok

19:39:08.0159 2980 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\windows\system32\Mcx2Svc.dll

19:39:08.0159 2980 Mcx2Svc - ok

19:39:08.0191 2980 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\windows\system32\drivers\megasas.sys

19:39:08.0191 2980 megasas - ok

19:39:08.0237 2980 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\windows\system32\drivers\MegaSR.sys

19:39:08.0237 2980 MegaSR - ok

19:39:08.0269 2980 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\windows\system32\DRIVERS\HECIx64.sys

19:39:08.0269 2980 MEIx64 - ok

19:39:08.0300 2980 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\windows\system32\mmcss.dll

19:39:08.0300 2980 MMCSS - ok

19:39:08.0331 2980 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\windows\system32\drivers\modem.sys

19:39:08.0331 2980 Modem - ok

19:39:08.0362 2980 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\windows\system32\DRIVERS\monitor.sys

19:39:08.0362 2980 monitor - ok

19:39:08.0393 2980 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\windows\system32\DRIVERS\mouclass.sys

19:39:08.0393 2980 mouclass - ok

19:39:08.0425 2980 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\windows\system32\DRIVERS\mouhid.sys

19:39:08.0425 2980 mouhid - ok

19:39:08.0456 2980 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\windows\system32\drivers\mountmgr.sys

19:39:08.0456 2980 mountmgr - ok

19:39:08.0471 2980 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\windows\system32\drivers\mpio.sys

19:39:08.0471 2980 mpio - ok

19:39:08.0487 2980 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\windows\system32\drivers\mpsdrv.sys

19:39:08.0503 2980 mpsdrv - ok

19:39:08.0534 2980 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\windows\system32\mpssvc.dll

19:39:08.0549 2980 MpsSvc - ok

19:39:08.0565 2980 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\windows\system32\drivers\mrxdav.sys

19:39:08.0565 2980 MRxDAV - ok

19:39:08.0581 2980 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\windows\system32\DRIVERS\mrxsmb.sys

19:39:08.0596 2980 mrxsmb - ok

19:39:08.0612 2980 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\windows\system32\DRIVERS\mrxsmb10.sys

19:39:08.0612 2980 mrxsmb10 - ok

19:39:08.0643 2980 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\windows\system32\DRIVERS\mrxsmb20.sys

19:39:08.0643 2980 mrxsmb20 - ok

19:39:08.0659 2980 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\windows\system32\DRIVERS\msahci.sys

19:39:08.0659 2980 msahci - ok

19:39:08.0674 2980 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\windows\system32\drivers\msdsm.sys

19:39:08.0690 2980 msdsm - ok

19:39:08.0721 2980 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\windows\System32\msdtc.exe

19:39:08.0721 2980 MSDTC - ok

19:39:08.0752 2980 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\windows\system32\drivers\Msfs.sys

19:39:08.0752 2980 Msfs - ok

19:39:08.0799 2980 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\windows\System32\drivers\mshidkmdf.sys

19:39:08.0799 2980 mshidkmdf - ok

19:39:08.0815 2980 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\windows\system32\drivers\msisadrv.sys

19:39:08.0815 2980 msisadrv - ok

19:39:08.0846 2980 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\windows\system32\iscsiexe.dll

19:39:08.0846 2980 MSiSCSI - ok

19:39:08.0846 2980 msiserver - ok

19:39:08.0893 2980 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\windows\system32\drivers\MSKSSRV.sys

19:39:08.0893 2980 MSKSSRV - ok

19:39:08.0939 2980 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\windows\system32\drivers\MSPCLOCK.sys

19:39:08.0939 2980 MSPCLOCK - ok

19:39:08.0955 2980 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\windows\system32\drivers\MSPQM.sys

19:39:08.0955 2980 MSPQM - ok

19:39:08.0971 2980 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\windows\system32\drivers\MsRPC.sys

19:39:08.0986 2980 MsRPC - ok

19:39:09.0002 2980 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\windows\system32\drivers\mssmbios.sys

19:39:09.0002 2980 mssmbios - ok

19:39:09.0033 2980 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\windows\system32\drivers\MSTEE.sys

19:39:09.0033 2980 MSTEE - ok

19:39:09.0064 2980 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\windows\system32\drivers\MTConfig.sys

19:39:09.0064 2980 MTConfig - ok

19:39:09.0080 2980 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\windows\system32\Drivers\mup.sys

19:39:09.0080 2980 Mup - ok

19:39:09.0142 2980 [ 50B99D53BC013458381C6476D790C9F3 ] MyWiFiDHCPDNS C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

19:39:09.0158 2980 MyWiFiDHCPDNS - ok

19:39:09.0205 2980 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\windows\system32\qagentRT.dll

19:39:09.0205 2980 napagent - ok

19:39:09.0251 2980 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\windows\system32\DRIVERS\nwifi.sys

19:39:09.0267 2980 NativeWifiP - ok

19:39:09.0345 2980 [ F2840DBFE9322F35557219AE82CC4597 ] NAV C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe

19:39:09.0345 2980 NAV - ok

19:39:09.0454 2980 [ C58D8A669D6551F616D90244BD2C2D4F ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20121209.006\ENG64.SYS

19:39:09.0454 2980 NAVENG - ok

19:39:09.0548 2980 [ A3DBDB412ADFA5882DD6843B11FE0828 ] NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20121209.006\EX64.SYS

19:39:09.0548 2980 NAVEX15 - ok

19:39:09.0595 2980 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\windows\system32\drivers\ndis.sys

19:39:09.0610 2980 NDIS - ok

19:39:09.0641 2980 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\windows\system32\DRIVERS\ndiscap.sys

19:39:09.0641 2980 NdisCap - ok

19:39:09.0673 2980 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\windows\system32\DRIVERS\ndistapi.sys

19:39:09.0673 2980 NdisTapi - ok

19:39:09.0704 2980 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\windows\system32\DRIVERS\ndisuio.sys

19:39:09.0704 2980 Ndisuio - ok

19:39:09.0719 2980 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\windows\system32\DRIVERS\ndiswan.sys

19:39:09.0719 2980 NdisWan - ok

19:39:09.0751 2980 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\windows\system32\drivers\NDProxy.sys

19:39:09.0751 2980 NDProxy - ok

19:39:09.0797 2980 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\windows\system32\DRIVERS\netbios.sys

19:39:09.0797 2980 NetBIOS - ok

19:39:09.0813 2980 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\windows\system32\DRIVERS\netbt.sys

19:39:09.0829 2980 NetBT - ok

19:39:09.0844 2980 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\windows\system32\lsass.exe

19:39:09.0844 2980 Netlogon - ok

19:39:09.0891 2980 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\windows\System32\netman.dll

19:39:09.0891 2980 Netman - ok

19:39:09.0938 2980 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

19:39:09.0938 2980 NetMsmqActivator - ok

19:39:09.0938 2980 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

19:39:09.0953 2980 NetPipeActivator - ok

19:39:09.0969 2980 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\windows\System32\netprofm.dll

19:39:09.0985 2980 netprofm - ok

19:39:09.0985 2980 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

19:39:09.0985 2980 NetTcpActivator - ok

19:39:09.0985 2980 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

19:39:10.0000 2980 NetTcpPortSharing - ok

19:39:10.0234 2980 [ AC69618DE5BCCE8747C9AB0AAE1003C1 ] NETwNs64 C:\windows\system32\DRIVERS\NETwNs64.sys

19:39:10.0265 2980 NETwNs64 - ok

19:39:10.0297 2980 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\windows\system32\drivers\nfrd960.sys

19:39:10.0297 2980 nfrd960 - ok

19:39:10.0343 2980 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\windows\System32\nlasvc.dll

19:39:10.0359 2980 NlaSvc - ok

19:39:10.0359 2980 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\windows\system32\drivers\Npfs.sys

19:39:10.0359 2980 Npfs - ok

19:39:10.0390 2980 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\windows\system32\nsisvc.dll

19:39:10.0390 2980 nsi - ok

19:39:10.0406 2980 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\windows\system32\drivers\nsiproxy.sys

19:39:10.0406 2980 nsiproxy - ok

19:39:10.0484 2980 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\windows\system32\drivers\Ntfs.sys

19:39:10.0499 2980 Ntfs - ok

19:39:10.0515 2980 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\windows\system32\drivers\Null.sys

19:39:10.0515 2980 Null - ok

19:39:10.0562 2980 [ 0EBC9D13CD96C15B1B18D8678A609E4B ] nusb3hub C:\windows\system32\DRIVERS\nusb3hub.sys

19:39:10.0562 2980 nusb3hub - ok

19:39:10.0577 2980 [ 7BDEC000D56D485021D9C1E63C2F81CA ] nusb3xhc C:\windows\system32\DRIVERS\nusb3xhc.sys

19:39:10.0577 2980 nusb3xhc - ok

19:39:10.0609 2980 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\windows\system32\drivers\nvraid.sys

19:39:10.0609 2980 nvraid - ok

19:39:10.0609 2980 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\windows\system32\drivers\nvstor.sys

19:39:10.0609 2980 nvstor - ok

19:39:10.0655 2980 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\windows\system32\drivers\nv_agp.sys

19:39:10.0655 2980 nv_agp - ok

19:39:10.0671 2980 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\windows\system32\drivers\ohci1394.sys

19:39:10.0671 2980 ohci1394 - ok

19:39:10.0749 2980 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

19:39:10.0749 2980 ose - ok

19:39:10.0905 2980 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

19:39:10.0936 2980 osppsvc - ok

19:39:10.0983 2980 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\windows\system32\pnrpsvc.dll

19:39:10.0983 2980 p2pimsvc - ok

19:39:10.0999 2980 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\windows\system32\p2psvc.dll

19:39:11.0014 2980 p2psvc - ok

19:39:11.0045 2980 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\windows\system32\drivers\parport.sys

19:39:11.0045 2980 Parport - ok

19:39:11.0061 2980 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\windows\system32\drivers\partmgr.sys

19:39:11.0077 2980 partmgr - ok

19:39:11.0092 2980 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\windows\System32\pcasvc.dll

19:39:11.0108 2980 PcaSvc - ok

19:39:11.0123 2980 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\windows\system32\drivers\pci.sys

19:39:11.0123 2980 pci - ok

19:39:11.0155 2980 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\windows\system32\DRIVERS\pciide.sys

19:39:11.0155 2980 pciide - ok

19:39:11.0186 2980 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\windows\system32\drivers\pcmcia.sys

19:39:11.0186 2980 pcmcia - ok

19:39:11.0217 2980 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\windows\system32\drivers\pcw.sys

19:39:11.0217 2980 pcw - ok

19:39:11.0233 2980 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\windows\system32\drivers\peauth.sys

19:39:11.0248 2980 PEAUTH - ok

19:39:11.0326 2980 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\windows\SysWow64\perfhost.exe

19:39:11.0326 2980 PerfHost - ok

19:39:11.0373 2980 [ 91111CEBBDE8015E822C46120ED9537C ] PGEffect C:\windows\system32\DRIVERS\pgeffect.sys

19:39:11.0373 2980 PGEffect - ok

19:39:11.0435 2980 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\windows\system32\pla.dll

19:39:11.0451 2980 pla - ok

19:39:11.0498 2980 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\windows\system32\umpnpmgr.dll

19:39:11.0513 2980 PlugPlay - ok

19:39:11.0529 2980 PnkBstrA - ok

19:39:11.0560 2980 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\windows\system32\pnrpauto.dll

19:39:11.0560 2980 PNRPAutoReg - ok

19:39:11.0576 2980 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\windows\system32\pnrpsvc.dll

19:39:11.0591 2980 PNRPsvc - ok

19:39:11.0623 2980 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\windows\System32\ipsecsvc.dll

19:39:11.0638 2980 PolicyAgent - ok

19:39:11.0669 2980 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\windows\system32\umpo.dll

19:39:11.0669 2980 Power - ok

19:39:11.0701 2980 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\windows\system32\DRIVERS\raspptp.sys

19:39:11.0701 2980 PptpMiniport - ok

19:39:11.0716 2980 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\windows\system32\drivers\processr.sys

19:39:11.0716 2980 Processor - ok

19:39:11.0763 2980 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\windows\system32\profsvc.dll

19:39:11.0763 2980 ProfSvc - ok

19:39:11.0779 2980 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\windows\system32\lsass.exe

19:39:11.0779 2980 ProtectedStorage - ok

19:39:11.0810 2980 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\windows\system32\DRIVERS\pacer.sys

19:39:11.0825 2980 Psched - ok

19:39:11.0857 2980 [ F036CFB275D0C55F4E45FBBF5F98B3C8 ] PSI_SVC_2 C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

19:39:11.0857 2980 PSI_SVC_2 - ok

19:39:11.0919 2980 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\windows\system32\drivers\ql2300.sys

19:39:11.0935 2980 ql2300 - ok

19:39:11.0966 2980 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\windows\system32\drivers\ql40xx.sys

19:39:11.0966 2980 ql40xx - ok

19:39:11.0997 2980 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\windows\system32\qwave.dll

19:39:11.0997 2980 QWAVE - ok

19:39:12.0013 2980 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\windows\system32\drivers\qwavedrv.sys

19:39:12.0013 2980 QWAVEdrv - ok

19:39:12.0028 2980 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\windows\system32\DRIVERS\rasacd.sys

19:39:12.0028 2980 RasAcd - ok

19:39:12.0075 2980 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\windows\system32\DRIVERS\AgileVpn.sys

19:39:12.0075 2980 RasAgileVpn - ok

19:39:12.0106 2980 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\windows\System32\rasauto.dll

19:39:12.0122 2980 RasAuto - ok

19:39:12.0137 2980 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\windows\system32\DRIVERS\rasl2tp.sys

19:39:12.0153 2980 Rasl2tp - ok

19:39:12.0200 2980 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\windows\System32\rasmans.dll

19:39:12.0200 2980 RasMan - ok

19:39:12.0231 2980 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\windows\system32\DRIVERS\raspppoe.sys

19:39:12.0247 2980 RasPppoe - ok

19:39:12.0262 2980 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\windows\system32\DRIVERS\rassstp.sys

19:39:12.0262 2980 RasSstp - ok

19:39:12.0293 2980 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\windows\system32\DRIVERS\rdbss.sys

19:39:12.0293 2980 rdbss - ok

19:39:12.0309 2980 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\windows\system32\drivers\rdpbus.sys

19:39:12.0309 2980 rdpbus - ok

19:39:12.0325 2980 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\windows\system32\DRIVERS\RDPCDD.sys

19:39:12.0325 2980 RDPCDD - ok

19:39:12.0340 2980 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\windows\system32\drivers\rdpencdd.sys

19:39:12.0340 2980 RDPENCDD - ok

19:39:12.0356 2980 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\windows\system32\drivers\rdprefmp.sys

19:39:12.0356 2980 RDPREFMP - ok

19:39:12.0387 2980 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\windows\system32\drivers\RDPWD.sys

19:39:12.0387 2980 RDPWD - ok

19:39:12.0418 2980 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\windows\system32\drivers\rdyboost.sys

19:39:12.0418 2980 rdyboost - ok

19:39:12.0449 2980 [ 4D9AFDDDA0EFE97CDBFD3B5FA48B05F6 ] regi C:\windows\system32\drivers\regi.sys

19:39:12.0449 2980 regi - ok

19:39:12.0527 2980 [ 18505D90FEE940EE9EAE4C5B421F22B4 ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

19:39:12.0527 2980 RegSrvc - ok

19:39:12.0559 2980 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\windows\System32\mprdim.dll

19:39:12.0574 2980 RemoteAccess - ok

19:39:12.0605 2980 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\windows\system32\regsvc.dll

19:39:12.0621 2980 RemoteRegistry - ok

19:39:12.0621 2980 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\windows\System32\RpcEpMap.dll

19:39:12.0637 2980 RpcEptMapper - ok

19:39:12.0652 2980 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\windows\system32\locator.exe

19:39:12.0652 2980 RpcLocator - ok

19:39:12.0683 2980 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\windows\system32\rpcss.dll

19:39:12.0683 2980 RpcSs - ok

19:39:12.0715 2980 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\windows\system32\DRIVERS\rspndr.sys

19:39:12.0715 2980 rspndr - ok

19:39:12.0761 2980 [ 6D3C7E7D82D3DC92DC2A8B0DF9F20F8A ] RTL8167 C:\windows\system32\DRIVERS\Rt64win7.sys

19:39:12.0761 2980 RTL8167 - ok

19:39:12.0777 2980 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\windows\system32\lsass.exe

19:39:12.0777 2980 SamSs - ok

19:39:12.0808 2980 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\windows\system32\drivers\sbp2port.sys

19:39:12.0808 2980 sbp2port - ok

19:39:12.0839 2980 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\windows\System32\SCardSvr.dll

19:39:12.0839 2980 SCardSvr - ok

19:39:12.0839 2980 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\windows\system32\DRIVERS\scfilter.sys

19:39:12.0839 2980 scfilter - ok

19:39:12.0886 2980 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\windows\system32\schedsvc.dll

19:39:12.0902 2980 Schedule - ok

19:39:12.0933 2980 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\windows\System32\certprop.dll

19:39:12.0933 2980 SCPolicySvc - ok

19:39:12.0980 2980 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\windows\system32\DRIVERS\sdbus.sys

19:39:12.0980 2980 sdbus - ok

19:39:13.0011 2980 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\windows\System32\SDRSVC.dll

19:39:13.0027 2980 SDRSVC - ok

19:39:13.0042 2980 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\windows\system32\drivers\secdrv.sys

19:39:13.0042 2980 secdrv - ok

19:39:13.0058 2980 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\windows\system32\seclogon.dll

19:39:13.0058 2980 seclogon - ok

19:39:13.0089 2980 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\windows\system32\sens.dll

19:39:13.0089 2980 SENS - ok

19:39:13.0120 2980 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\windows\system32\sensrsvc.dll

19:39:13.0120 2980 SensrSvc - ok

19:39:13.0136 2980 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\windows\system32\drivers\serenum.sys

19:39:13.0136 2980 Serenum - ok

19:39:13.0183 2980 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\windows\system32\drivers\serial.sys

19:39:13.0183 2980 Serial - ok

19:39:13.0229 2980 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\windows\system32\drivers\sermouse.sys

19:39:13.0229 2980 sermouse - ok

19:39:13.0245 2980 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\windows\system32\sessenv.dll

19:39:13.0261 2980 SessionEnv - ok

19:39:13.0276 2980 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\windows\system32\drivers\sffdisk.sys

19:39:13.0276 2980 sffdisk - ok

19:39:13.0292 2980 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\windows\system32\drivers\sffp_mmc.sys

19:39:13.0292 2980 sffp_mmc - ok

19:39:13.0323 2980 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\windows\system32\drivers\sffp_sd.sys

19:39:13.0323 2980 sffp_sd - ok

19:39:13.0339 2980 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\windows\system32\drivers\sfloppy.sys

19:39:13.0339 2980 sfloppy - ok

19:39:13.0385 2980 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\windows\System32\ipnathlp.dll

19:39:13.0385 2980 SharedAccess - ok

19:39:13.0417 2980 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\windows\System32\shsvcs.dll

19:39:13.0417 2980 ShellHWDetection - ok

19:39:13.0463 2980 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\windows\system32\drivers\SiSRaid2.sys

19:39:13.0463 2980 SiSRaid2 - ok

19:39:13.0479 2980 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\windows\system32\drivers\sisraid4.sys

19:39:13.0479 2980 SiSRaid4 - ok

19:39:13.0510 2980 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\windows\system32\DRIVERS\smb.sys

19:39:13.0510 2980 Smb - ok

19:39:13.0573 2980 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\windows\System32\snmptrap.exe

19:39:13.0573 2980 SNMPTRAP - ok

19:39:13.0588 2980 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\windows\system32\drivers\spldr.sys

19:39:13.0588 2980 spldr - ok

19:39:13.0635 2980 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\windows\System32\spoolsv.exe

19:39:13.0651 2980 Spooler - ok

19:39:13.0744 2980 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\windows\system32\sppsvc.exe

19:39:13.0760 2980 sppsvc - ok

19:39:13.0775 2980 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\windows\system32\sppuinotify.dll

19:39:13.0775 2980 sppuinotify - ok

19:39:13.0885 2980 [ 891793E00432FA055CF040605C260E49 ] SRTSP C:\windows\System32\Drivers\NAVx64\1309000.009\SRTSP64.SYS

19:39:13.0885 2980 SRTSP - ok

19:39:13.0900 2980 [ 1CB7BB3B0561FB5ECFE37F7731E8BF3E ] SRTSPX C:\windows\system32\drivers\NAVx64\1309000.009\SRTSPX64.SYS

19:39:13.0916 2980 SRTSPX - ok

19:39:13.0931 2980 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\windows\system32\DRIVERS\srv.sys

19:39:13.0947 2980 srv - ok

19:39:13.0963 2980 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\windows\system32\DRIVERS\srv2.sys

19:39:13.0963 2980 srv2 - ok

19:39:13.0978 2980 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\windows\system32\DRIVERS\srvnet.sys

19:39:13.0978 2980 srvnet - ok

19:39:14.0025 2980 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\windows\System32\ssdpsrv.dll

19:39:14.0025 2980 SSDPSRV - ok

19:39:14.0041 2980 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\windows\system32\sstpsvc.dll

19:39:14.0041 2980 SstpSvc - ok

19:39:14.0087 2980 [ D21FF3592DAEE244EE8376830A672B52 ] ss_bus C:\windows\system32\DRIVERS\ss_bus.sys

19:39:14.0087 2980 ss_bus - ok

19:39:14.0119 2980 [ 451DB3D10E6112E06B4506D4A7BECEC1 ] ss_mdfl C:\windows\system32\DRIVERS\ss_mdfl.sys

19:39:14.0119 2980 ss_mdfl - ok

19:39:14.0150 2980 [ EF40C8A268A5263A0EF48FED8E57CBED ] ss_mdm C:\windows\system32\DRIVERS\ss_mdm.sys

19:39:14.0165 2980 ss_mdm - ok

19:39:14.0212 2980 Steam Client Service - ok

19:39:14.0228 2980 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\windows\system32\drivers\stexstor.sys

19:39:14.0228 2980 stexstor - ok

19:39:14.0275 2980 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\windows\System32\wiaservc.dll

19:39:14.0290 2980 stisvc - ok

19:39:14.0321 2980 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\windows\system32\drivers\swenum.sys

19:39:14.0321 2980 swenum - ok

19:39:14.0353 2980 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\windows\System32\swprv.dll

19:39:14.0353 2980 swprv - ok

19:39:14.0415 2980 [ 8B2430762099598DA40686F754632EFD ] SymDS C:\windows\system32\drivers\NAVx64\1309000.009\SYMDS64.SYS

19:39:14.0415 2980 SymDS - ok

19:39:14.0477 2980 [ 5CB7F2FD7E30A0F52F93574BFC3A8041 ] SymEFA C:\windows\system32\drivers\NAVx64\1309000.009\SYMEFA64.SYS

19:39:14.0493 2980 SymEFA - ok

19:39:14.0509 2980 [ 894579207E39C465737E850A252CE4F2 ] SymEvent C:\windows\system32\Drivers\SYMEVENT64x86.SYS

19:39:14.0524 2980 SymEvent - ok

19:39:14.0555 2980 [ 5013A76CAAA1D7CF1C55214B490B4E35 ] SymIRON C:\windows\system32\drivers\NAVx64\1309000.009\Ironx64.SYS

19:39:14.0571 2980 SymIRON - ok

19:39:14.0587 2980 [ 3911BD0E68C010E5438A87706ABBE9AB ] SymNetS C:\windows\System32\Drivers\NAVx64\1309000.009\SYMNETS.SYS

19:39:14.0602 2980 SymNetS - ok

19:39:14.0665 2980 [ F5B46DF59FEAA48A442AED7EEB754D4B ] SynTP C:\windows\system32\DRIVERS\SynTP.sys

19:39:14.0680 2980 SynTP - ok

19:39:14.0727 2980 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\windows\system32\sysmain.dll

19:39:14.0743 2980 SysMain - ok

19:39:14.0758 2980 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\windows\System32\TabSvc.dll

19:39:14.0774 2980 TabletInputService - ok

19:39:14.0789 2980 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\windows\System32\tapisrv.dll

19:39:14.0789 2980 TapiSrv - ok

19:39:14.0821 2980 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\windows\System32\tbssvc.dll

19:39:14.0821 2980 TBS - ok

19:39:14.0914 2980 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\windows\system32\drivers\tcpip.sys

19:39:14.0930 2980 Tcpip - ok

19:39:14.0961 2980 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\windows\system32\DRIVERS\tcpip.sys

19:39:14.0977 2980 TCPIP6 - ok

19:39:15.0008 2980 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\windows\system32\drivers\tcpipreg.sys

19:39:15.0008 2980 tcpipreg - ok

19:39:15.0039 2980 [ FD542B661BD22FA69CA789AD0AC58C29 ] tdcmdpst C:\windows\system32\DRIVERS\tdcmdpst.sys

19:39:15.0039 2980 tdcmdpst - ok

19:39:15.0070 2980 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\windows\system32\drivers\tdpipe.sys

19:39:15.0070 2980 TDPIPE - ok

19:39:15.0101 2980 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\windows\system32\drivers\tdtcp.sys

19:39:15.0101 2980 TDTCP - ok

19:39:15.0133 2980 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\windows\system32\DRIVERS\tdx.sys

19:39:15.0133 2980 tdx - ok

19:39:15.0148 2980 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\windows\system32\drivers\termdd.sys

19:39:15.0148 2980 TermDD - ok

19:39:15.0179 2980 [ 2E648163254233755035B46DD7B89123 ] TermService C:\windows\System32\termsrv.dll

19:39:15.0195 2980 TermService - ok

19:39:15.0195 2980 [ F0344071948D1A1FA732231785A0664C ] Themes C:\windows\system32\themeservice.dll

19:39:15.0195 2980 Themes - ok

19:39:15.0242 2980 [ 7F35CA8296A52C7161088EB1D952E8ED ] Thpdrv C:\windows\system32\DRIVERS\thpdrv.sys

19:39:15.0242 2980 Thpdrv - ok

19:39:15.0257 2980 [ B4E609047434ED948AF7BDEF2FA66E38 ] Thpevm C:\windows\system32\DRIVERS\Thpevm.SYS

19:39:15.0257 2980 Thpevm - ok

19:39:15.0304 2980 [ 0B4734AE9EC70B843DF02E7B1C056377 ] Thpsrv C:\windows\system32\ThpSrv.exe

19:39:15.0320 2980 Thpsrv - ok

19:39:15.0335 2980 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\windows\system32\mmcss.dll

19:39:15.0335 2980 THREADORDER - ok

19:39:15.0413 2980 [ 71C321649B28638EE80A2EEB164C1DC8 ] TMachInfo C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe

19:39:15.0413 2980 TMachInfo - ok

19:39:15.0460 2980 [ 8E2C799D3476EAC32C3BA0DF7CE6AF19 ] TODDSrv C:\windows\system32\TODDSrv.exe

19:39:15.0460 2980 TODDSrv - ok

19:39:15.0538 2980 [ 1C73689B900428C7D054A41C4687F55C ] TosCoSrv C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

19:39:15.0538 2980 TosCoSrv - ok

19:39:15.0601 2980 [ 63AAFCF3EA5DBB17123E0BAE9AFE4D58 ] TOSHIBA eco Utility Service C:\Program Files\TOSHIBA\TECO\TecoService.exe

19:39:15.0616 2980 TOSHIBA eco Utility Service - ok

19:39:15.0663 2980 [ 29D0886CF250FCEF1BF9E65AB8D2C0C8 ] TOSHIBA HDD SSD Alert Service C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

19:39:15.0663 2980 TOSHIBA HDD SSD Alert Service - ok

19:39:15.0725 2980 [ 09FF7B0B1B5C3D225495CB6F5A9B39F8 ] tos_sps64 C:\windows\system32\DRIVERS\tos_sps64.sys

19:39:15.0725 2980 tos_sps64 - ok

19:39:15.0788 2980 [ 098B8A408C17E125A3D9A8E1166780C8 ] TPCHSrv C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

19:39:15.0803 2980 TPCHSrv - ok

19:39:15.0835 2980 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\windows\System32\trkwks.dll

19:39:15.0835 2980 TrkWks - ok

19:39:15.0897 2980 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe

19:39:15.0913 2980 TrustedInstaller - ok

19:39:15.0944 2980 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\windows\system32\DRIVERS\tssecsrv.sys

19:39:15.0944 2980 tssecsrv - ok

19:39:15.0959 2980 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\windows\system32\drivers\tsusbflt.sys

19:39:15.0959 2980 TsUsbFlt - ok

19:39:15.0991 2980 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\windows\system32\drivers\TsUsbGD.sys

19:39:15.0991 2980 TsUsbGD - ok

19:39:16.0053 2980 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\windows\system32\DRIVERS\tunnel.sys

19:39:16.0053 2980 tunnel - ok

19:39:16.0131 2980 [ 550B567F9364D8F7684C3FB3EA665A72 ] TVALZ C:\windows\system32\DRIVERS\TVALZ_O.SYS

19:39:16.0131 2980 TVALZ - ok

19:39:16.0162 2980 [ 9C7191F4B2E49BFF47A6C1144B5923FA ] TVALZFL C:\windows\system32\DRIVERS\TVALZFL.sys

19:39:16.0162 2980 TVALZFL - ok

19:39:16.0193 2980 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\windows\system32\drivers\uagp35.sys

19:39:16.0193 2980 uagp35 - ok

19:39:16.0240 2980 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\windows\system32\DRIVERS\udfs.sys

19:39:16.0240 2980 udfs - ok

19:39:16.0271 2980 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\windows\system32\UI0Detect.exe

19:39:16.0271 2980 UI0Detect - ok

19:39:16.0303 2980 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\windows\system32\drivers\uliagpkx.sys

19:39:16.0303 2980 uliagpkx - ok

19:39:16.0334 2980 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\windows\system32\DRIVERS\umbus.sys

19:39:16.0334 2980 umbus - ok

19:39:16.0365 2980 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\windows\system32\drivers\umpass.sys

19:39:16.0365 2980 UmPass - ok

19:39:16.0474 2980 [ 374EBDA379A8F38E0CFC2211611E7167 ] UNS C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

19:39:16.0521 2980 UNS - ok

19:39:16.0537 2980 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\windows\System32\upnphost.dll

19:39:16.0552 2980 upnphost - ok

19:39:16.0583 2980 [ FB251567F41BC61988B26731DEC19E4B ] USBAAPL64 C:\windows\system32\Drivers\usbaapl64.sys

19:39:16.0583 2980 USBAAPL64 - ok

19:39:16.0630 2980 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\windows\system32\DRIVERS\usbccgp.sys

19:39:16.0630 2980 usbccgp - ok

19:39:16.0661 2980 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\windows\system32\drivers\usbcir.sys

19:39:16.0661 2980 usbcir - ok

19:39:16.0677 2980 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\windows\system32\DRIVERS\usbehci.sys

19:39:16.0677 2980 usbehci - ok

19:39:16.0708 2980 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\windows\system32\DRIVERS\usbhub.sys

19:39:16.0708 2980 usbhub - ok

19:39:16.0724 2980 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\windows\system32\drivers\usbohci.sys

19:39:16.0724 2980 usbohci - ok

19:39:16.0739 2980 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\windows\system32\drivers\usbprint.sys

19:39:16.0739 2980 usbprint - ok

19:39:16.0755 2980 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\windows\system32\DRIVERS\USBSTOR.SYS

19:39:16.0755 2980 USBSTOR - ok

19:39:16.0771 2980 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\windows\system32\drivers\usbuhci.sys

19:39:16.0771 2980 usbuhci - ok

19:39:16.0802 2980 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\windows\system32\Drivers\usbvideo.sys

19:39:16.0802 2980 usbvideo - ok

19:39:16.0833 2980 [ 70D05EE263568A742D14E1876DF80532 ] usb_rndisx C:\windows\system32\drivers\usb8023x.sys

19:39:16.0833 2980 usb_rndisx - ok

19:39:16.0864 2980 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\windows\System32\uxsms.dll

19:39:16.0864 2980 UxSms - ok

19:39:16.0880 2980 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\windows\system32\lsass.exe

19:39:16.0880 2980 VaultSvc - ok

19:39:16.0895 2980 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\windows\system32\drivers\vdrvroot.sys

19:39:16.0895 2980 vdrvroot - ok

19:39:16.0927 2980 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\windows\System32\vds.exe

19:39:16.0927 2980 vds - ok

19:39:16.0958 2980 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\windows\system32\DRIVERS\vgapnp.sys

19:39:16.0958 2980 vga - ok

19:39:16.0973 2980 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\windows\System32\drivers\vga.sys

19:39:16.0973 2980 VgaSave - ok

19:39:16.0989 2980 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\windows\system32\drivers\vhdmp.sys

19:39:16.0989 2980 vhdmp - ok

19:39:17.0020 2980 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\windows\system32\drivers\viaide.sys

19:39:17.0020 2980 viaide - ok

19:39:17.0051 2980 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\windows\system32\drivers\volmgr.sys

19:39:17.0051 2980 volmgr - ok

19:39:17.0083 2980 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\windows\system32\drivers\volmgrx.sys

19:39:17.0083 2980 volmgrx - ok

19:39:17.0098 2980 [ DF8126BD41180351A093A3AD2FC8903B ] volsnap C:\windows\system32\drivers\volsnap.sys

19:39:17.0098 2980 volsnap - ok

19:39:17.0129 2980 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\windows\system32\drivers\vsmraid.sys

19:39:17.0129 2980 vsmraid - ok

19:39:17.0192 2980 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\windows\system32\vssvc.exe

19:39:17.0207 2980 VSS - ok

19:39:17.0223 2980 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\windows\system32\DRIVERS\vwifibus.sys

19:39:17.0223 2980 vwifibus - ok

19:39:17.0254 2980 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\windows\system32\DRIVERS\vwififlt.sys

19:39:17.0254 2980 vwififlt - ok

19:39:17.0285 2980 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\windows\system32\DRIVERS\vwifimp.sys

19:39:17.0285 2980 vwifimp - ok

19:39:17.0332 2980 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\windows\system32\w32time.dll

19:39:17.0348 2980 W32Time - ok

19:39:17.0363 2980 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\windows\system32\drivers\wacompen.sys

19:39:17.0363 2980 WacomPen - ok

19:39:17.0395 2980 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\windows\system32\DRIVERS\wanarp.sys

19:39:17.0395 2980 WANARP - ok

19:39:17.0410 2980 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\windows\system32\DRIVERS\wanarp.sys

19:39:17.0410 2980 Wanarpv6 - ok

19:39:17.0457 2980 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\windows\system32\Wat\WatAdminSvc.exe

19:39:17.0473 2980 WatAdminSvc - ok

19:39:17.0551 2980 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\windows\system32\wbengine.exe

19:39:17.0566 2980 wbengine - ok

19:39:17.0566 2980 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\windows\System32\wbiosrvc.dll

19:39:17.0582 2980 WbioSrvc - ok

19:39:17.0582 2980 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\windows\System32\wcncsvc.dll

19:39:17.0597 2980 wcncsvc - ok

19:39:17.0613 2980 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll

19:39:17.0613 2980 WcsPlugInService - ok

19:39:17.0644 2980 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\windows\system32\drivers\wd.sys

19:39:17.0644 2980 Wd - ok

19:39:17.0691 2980 [ A3D04EBF5227886029B4532F20D026F7 ] WDC_SAM C:\windows\system32\DRIVERS\wdcsam64.sys

19:39:17.0691 2980 WDC_SAM - ok

19:39:17.0753 2980 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\windows\system32\drivers\Wdf01000.sys

19:39:17.0753 2980 Wdf01000 - ok

19:39:17.0785 2980 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\windows\system32\wdi.dll

19:39:17.0785 2980 WdiServiceHost - ok

19:39:17.0785 2980 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\windows\system32\wdi.dll

19:39:17.0800 2980 WdiSystemHost - ok

19:39:17.0831 2980 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\windows\System32\webclnt.dll

19:39:17.0831 2980 WebClient - ok

19:39:17.0863 2980 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\windows\system32\wecsvc.dll

19:39:17.0863 2980 Wecsvc - ok

19:39:17.0894 2980 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\windows\System32\wercplsupport.dll

19:39:17.0894 2980 wercplsupport - ok

19:39:17.0909 2980 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\windows\System32\WerSvc.dll

19:39:17.0925 2980 WerSvc - ok

19:39:17.0956 2980 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\windows\system32\DRIVERS\wfplwf.sys

19:39:17.0956 2980 WfpLwf - ok

19:39:18.0019 2980 [ 245EA6A2CFAE7B183EE9A14A4673B1F1 ] WiMAXAppSrv C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe

19:39:18.0034 2980 WiMAXAppSrv - ok

19:39:18.0065 2980 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\windows\system32\drivers\wimmount.sys

19:39:18.0065 2980 WIMMount - ok

19:39:18.0081 2980 WinDefend - ok

19:39:18.0097 2980 WinHttpAutoProxySvc - ok

19:39:18.0190 2980 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\windows\system32\wbem\WMIsvc.dll

19:39:18.0190 2980 Winmgmt - ok

19:39:18.0284 2980 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\windows\system32\WsmSvc.dll

19:39:18.0315 2980 WinRM - ok

19:39:18.0362 2980 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\windows\system32\DRIVERS\WinUsb.sys

19:39:18.0362 2980 WinUsb - ok

19:39:18.0409 2980 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\windows\System32\wlansvc.dll

19:39:18.0409 2980 Wlansvc - ok

19:39:18.0487 2980 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe

19:39:18.0487 2980 wlcrasvc - ok

19:39:18.0596 2980 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

19:39:18.0611 2980 wlidsvc - ok

19:39:18.0643 2980 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\windows\system32\drivers\wmiacpi.sys

19:39:18.0643 2980 WmiAcpi - ok

19:39:18.0674 2980 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\windows\system32\wbem\WmiApSrv.exe

19:39:18.0674 2980 wmiApSrv - ok

19:39:18.0705 2980 WMPNetworkSvc - ok

19:39:18.0752 2980 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\windows\System32\wpcsvc.dll

19:39:18.0752 2980 WPCSvc - ok

19:39:18.0783 2980 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\windows\system32\wpdbusenum.dll

19:39:18.0783 2980 WPDBusEnum - ok

19:39:18.0799 2980 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\windows\system32\drivers\ws2ifsl.sys

19:39:18.0799 2980 ws2ifsl - ok

19:39:18.0814 2980 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\windows\system32\wscsvc.dll

19:39:18.0814 2980 wscsvc - ok

19:39:18.0814 2980 WSearch - ok

19:39:18.0908 2980 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\windows\system32\wuaueng.dll

19:39:18.0923 2980 wuauserv - ok

19:39:18.0955 2980 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\windows\system32\drivers\WudfPf.sys

19:39:18.0955 2980 WudfPf - ok

19:39:19.0001 2980 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\windows\system32\DRIVERS\WUDFRd.sys

19:39:19.0001 2980 WUDFRd - ok

19:39:19.0017 2980 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\windows\System32\WUDFSvc.dll

19:39:19.0033 2980 wudfsvc - ok

19:39:19.0064 2980 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\windows\System32\wwansvc.dll

19:39:19.0064 2980 WwanSvc - ok

19:39:19.0173 2980 X6va008 - ok

19:39:19.0204 2980 X6va009 - ok

19:39:19.0267 2980 ================ Scan global ===============================

19:39:19.0282 2980 [ BA0CD8C393E8C9F83354106093832C7B ] C:\windows\system32\basesrv.dll

19:39:19.0329 2980 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\windows\system32\winsrv.dll

19:39:19.0345 2980 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\windows\system32\winsrv.dll

19:39:19.0376 2980 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\windows\system32\sxssrv.dll

19:39:19.0423 2980 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\windows\system32\services.exe

19:39:19.0423 2980 [Global] - ok

19:39:19.0423 2980 ================ Scan MBR ==================================

19:39:19.0454 2980 [ 5B5E648D12FCADC244C1EC30318E1EB9 ] \Device\Harddisk0\DR0

19:39:19.0703 2980 \Device\Harddisk0\DR0 - ok

19:39:19.0703 2980 ================ Scan VBR ==================================

19:39:19.0719 2980 [ 01DC71CFDF6F5BA7AFCA83B0124D6033 ] \Device\Harddisk0\DR0\Partition1

19:39:19.0719 2980 \Device\Harddisk0\DR0\Partition1 - ok

19:39:19.0719 2980 ============================================================

19:39:19.0719 2980 Scan finished

19:39:19.0719 2980 ============================================================

19:39:19.0719 4176 Detected object count: 0

19:39:19.0719 4176 Actual detected object count: 0

awsMBR

Run date: 2012-12-09 19:41:41

-----------------------------

19:41:41.803 OS Version: Windows x64 6.1.7601 Service Pack 1

19:41:41.803 Number of processors: 8 586 0x2A07

19:41:41.803 ComputerName: OWNER-PC UserName: Owner

19:41:43.659 Initialize success

19:42:34.057 AVAST engine defs: 12120902

19:42:39.080 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1

19:42:39.080 Disk 0 Vendor: TOSHIBA_ GT00 Size: 715404MB BusType: 3

19:42:39.143 Disk 0 MBR read successfully

19:42:39.143 Disk 0 MBR scan

19:42:39.158 Disk 0 Windows VISTA default MBR code

19:42:39.158 Disk 0 Partition 1 80 (A) 27 Hidden NTFS WinRE NTFS 1500 MB offset 2048

19:42:39.174 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 698469 MB offset 3074048

19:42:39.205 Disk 0 Partition 3 00 17 Hidd HPFS/NTFS NTFS 15434 MB offset 1433538560

19:42:39.252 Disk 0 scanning C:\windows\system32\drivers

19:42:52.777 Service scanning

19:43:33.025 Modules scanning

19:43:33.041 Disk 0 trace - called modules:

19:43:33.072 ntoskrnl.exe CLASSPNP.SYS disk.sys thpdrv.sys iaStor.sys hal.dll

19:43:33.602 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006326790]

19:43:33.602 3 CLASSPNP.SYS[fffff8800199343f] -> nt!IofCallDriver -> \Device\THPDRV1[0xfffffa8006320710]

19:43:33.618 5 thpdrv.sys[fffff88001d5c2b0] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8005e46050]

19:43:34.991 AVAST engine scan C:\windows

19:43:37.814 AVAST engine scan C:\windows\system32

19:46:26.061 AVAST engine scan C:\windows\system32\drivers

19:46:43.455 AVAST engine scan C:\Users\Owner

19:49:38.222 Disk 0 MBR has been saved successfully to "C:\Users\Owner\Desktop\MBR.dat"

19:49:38.237 The log file has been saved successfully to "C:\Users\Owner\Desktop\aswMBR.txt"

19:52:36.344 AVAST engine scan C:\ProgramData

19:54:34.937 Scan finished successfully

19:56:43.216 Disk 0 MBR has been saved successfully to "C:\Users\Owner\Desktop\MBR.dat"

19:56:43.216 The log file has been saved successfully to "C:\Users\Owner\Desktop\aswMBR.txt"

No problems were encountered

My computer does not seem to be experiencing any changes, everything is funtioning and running smoothly and the programs you have asked me to run seem to run just fine. As for the programs I usually use, I'm not sure how well they are doing because right now feels like the worst time to download an update of some sort at risk of a problem backtracking us back to the begining, but if you feel it will provide a more thorough evaluation than say so and I will be sure to give some of my programs a run in the future.

SilverMailman · December 10, 2012

TDSSKiller:

19:38:48.0970 3068 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35

19:38:49.0407 3068 ============================================================

19:38:49.0407 3068 Current date / time: 2012/12/09 19:38:49.0407

19:38:49.0407 3068 SystemInfo:

19:38:49.0407 3068

19:38:49.0407 3068 OS Version: 6.1.7601 ServicePack: 1.0

19:38:49.0407 3068 Product type: Workstation

19:38:49.0407 3068 ComputerName: OWNER-PC

19:38:49.0407 3068 UserName: Owner

19:38:49.0407 3068 Windows directory: C:\windows

19:38:49.0407 3068 System windows directory: C:\windows

19:38:49.0407 3068 Running under WOW64

19:38:49.0407 3068 Processor architecture: Intel x64

19:38:49.0407 3068 Number of processors: 8

19:38:49.0407 3068 Page size: 0x1000

19:38:49.0407 3068 Boot type: Normal boot

19:38:49.0407 3068 ============================================================

19:38:50.0047 3068 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

19:38:50.0062 3068 ============================================================

19:38:50.0109 3068 \Device\Harddisk0\DR0:

19:38:50.0109 3068 MBR partitions:

19:38:50.0109 3068 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0x55432800

19:38:50.0109 3068 ============================================================

19:38:50.0187 3068 C: <-> \Device\Harddisk0\DR0\Partition1

19:38:50.0187 3068 ============================================================

19:38:50.0187 3068 Initialize success

19:38:50.0187 3068 ============================================================

19:38:59.0001 2980 ============================================================

19:38:59.0001 2980 Scan started

19:38:59.0001 2980 Mode: Manual;

19:38:59.0001 2980 ============================================================

19:38:59.0485 2980 ================ Scan system memory ========================

19:38:59.0485 2980 System memory - ok

19:38:59.0485 2980 ================ Scan services =============================

19:38:59.0719 2980 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\windows\system32\drivers\1394ohci.sys

19:38:59.0719 2980 1394ohci - ok

19:38:59.0750 2980 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\windows\system32\drivers\ACPI.sys

19:38:59.0766 2980 ACPI - ok

19:38:59.0797 2980 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\windows\system32\drivers\acpipmi.sys

19:38:59.0797 2980 AcpiPmi - ok

19:38:59.0859 2980 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\windows\system32\drivers\adp94xx.sys

19:38:59.0859 2980 adp94xx - ok

19:38:59.0890 2980 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\windows\system32\drivers\adpahci.sys

19:38:59.0906 2980 adpahci - ok

19:38:59.0906 2980 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\windows\system32\drivers\adpu320.sys

19:38:59.0922 2980 adpu320 - ok

19:38:59.0953 2980 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\windows\System32\aelupsvc.dll

19:38:59.0968 2980 AeLookupSvc - ok

19:39:00.0015 2980 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\windows\system32\drivers\afd.sys

19:39:00.0015 2980 AFD - ok

19:39:00.0062 2980 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\windows\system32\drivers\agp440.sys

19:39:00.0062 2980 agp440 - ok

19:39:00.0093 2980 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\windows\System32\alg.exe

19:39:00.0093 2980 ALG - ok

19:39:00.0124 2980 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\windows\system32\drivers\aliide.sys

19:39:00.0124 2980 aliide - ok

19:39:00.0156 2980 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\windows\system32\drivers\amdide.sys

19:39:00.0156 2980 amdide - ok

19:39:00.0187 2980 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\windows\system32\drivers\amdk8.sys

19:39:00.0187 2980 AmdK8 - ok

19:39:00.0202 2980 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\windows\system32\drivers\amdppm.sys

19:39:00.0202 2980 AmdPPM - ok

19:39:00.0234 2980 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\windows\system32\drivers\amdsata.sys

19:39:00.0249 2980 amdsata - ok

19:39:00.0296 2980 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\windows\system32\drivers\amdsbs.sys

19:39:00.0296 2980 amdsbs - ok

19:39:00.0312 2980 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\windows\system32\drivers\amdxata.sys

19:39:00.0312 2980 amdxata - ok

19:39:00.0374 2980 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\windows\system32\drivers\appid.sys

19:39:00.0374 2980 AppID - ok

19:39:00.0405 2980 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\windows\System32\appidsvc.dll

19:39:00.0405 2980 AppIDSvc - ok

19:39:00.0436 2980 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\windows\System32\appinfo.dll

19:39:00.0436 2980 Appinfo - ok

19:39:00.0561 2980 [ F401929EE0CC92BFE7F15161CA535383 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

19:39:00.0561 2980 Apple Mobile Device - ok

19:39:00.0624 2980 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\windows\system32\drivers\arc.sys

19:39:00.0624 2980 arc - ok

19:39:00.0655 2980 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\windows\system32\drivers\arcsas.sys

19:39:00.0655 2980 arcsas - ok

19:39:00.0780 2980 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

19:39:00.0795 2980 aspnet_state - ok

19:39:00.0826 2980 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\windows\system32\DRIVERS\asyncmac.sys

19:39:00.0826 2980 AsyncMac - ok

19:39:00.0889 2980 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\windows\system32\drivers\atapi.sys

19:39:00.0889 2980 atapi - ok

19:39:00.0982 2980 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll

19:39:00.0982 2980 AudioEndpointBuilder - ok

19:39:00.0998 2980 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\windows\System32\Audiosrv.dll

19:39:00.0998 2980 AudioSrv - ok

19:39:01.0045 2980 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\windows\System32\AxInstSV.dll

19:39:01.0045 2980 AxInstSV - ok

19:39:01.0092 2980 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\windows\system32\drivers\bxvbda.sys

19:39:01.0107 2980 b06bdrv - ok

19:39:01.0154 2980 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\windows\system32\DRIVERS\b57nd60a.sys

19:39:01.0154 2980 b57nd60a - ok

19:39:01.0216 2980 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\windows\System32\bdesvc.dll

19:39:01.0216 2980 BDESVC - ok

19:39:01.0263 2980 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\windows\system32\drivers\Beep.sys

19:39:01.0263 2980 Beep - ok

19:39:01.0341 2980 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\windows\System32\bfe.dll

19:39:01.0357 2980 BFE - ok

19:39:01.0528 2980 [ ED97ADAF00A61F57A2CCBBB1CE58C600 ] BHDrvx64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\BASHDefs\20121130.005_fd0\BHDrvx64.sys

19:39:01.0544 2980 BHDrvx64 - ok

19:39:01.0606 2980 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\windows\system32\qmgr.dll

19:39:01.0622 2980 BITS - ok

19:39:01.0653 2980 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\windows\system32\drivers\blbdrive.sys

19:39:01.0653 2980 blbdrive - ok

19:39:01.0716 2980 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

19:39:01.0716 2980 Bonjour Service - ok

19:39:01.0747 2980 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\windows\system32\DRIVERS\bowser.sys

19:39:01.0747 2980 bowser - ok

19:39:01.0794 2980 [ 56E4345F392F17D66683225E214840CB ] bpenum C:\windows\system32\DRIVERS\bpenum.sys

19:39:01.0794 2980 bpenum - ok

19:39:01.0825 2980 [ D50B07C4D7AFEC4CA6AC8FCB72583C5B ] bpmp C:\windows\system32\DRIVERS\bpmp.sys

19:39:01.0825 2980 bpmp - ok

19:39:01.0856 2980 [ A85BA55E4FE9CB2F342F281AAF7DE810 ] bpusb C:\windows\system32\Drivers\bpusb.sys

19:39:01.0856 2980 bpusb - ok

19:39:01.0903 2980 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\windows\system32\drivers\BrFiltLo.sys

19:39:01.0903 2980 BrFiltLo - ok

19:39:01.0918 2980 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\windows\system32\drivers\BrFiltUp.sys

19:39:01.0918 2980 BrFiltUp - ok

19:39:01.0965 2980 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\windows\system32\DRIVERS\bridge.sys

19:39:01.0965 2980 BridgeMP - ok

19:39:02.0012 2980 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\windows\System32\browser.dll

19:39:02.0012 2980 Browser - ok

19:39:02.0043 2980 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\windows\System32\Drivers\Brserid.sys

19:39:02.0043 2980 Brserid - ok

19:39:02.0074 2980 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\windows\System32\Drivers\BrSerWdm.sys

19:39:02.0090 2980 BrSerWdm - ok

19:39:02.0121 2980 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\windows\System32\Drivers\BrUsbMdm.sys

19:39:02.0121 2980 BrUsbMdm - ok

19:39:02.0152 2980 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\windows\System32\Drivers\BrUsbSer.sys

19:39:02.0152 2980 BrUsbSer - ok

19:39:02.0168 2980 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\windows\system32\drivers\bthmodem.sys

19:39:02.0184 2980 BTHMODEM - ok

19:39:02.0215 2980 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\windows\system32\bthserv.dll

19:39:02.0230 2980 bthserv - ok

19:39:02.0246 2980 catchme - ok

19:39:02.0340 2980 [ 2C6FFCCA37B002AAB3C7C31A6D780A76 ] ccSet_NAV C:\windows\system32\drivers\NAVx64\1309000.009\ccSetx64.sys

19:39:02.0340 2980 ccSet_NAV - ok

19:39:02.0371 2980 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\windows\system32\DRIVERS\cdfs.sys

19:39:02.0371 2980 cdfs - ok

19:39:02.0418 2980 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\windows\system32\DRIVERS\cdrom.sys

19:39:02.0418 2980 cdrom - ok

19:39:02.0480 2980 [ A965B206921C55F2D1481789D609B711 ] CeKbFilter C:\windows\system32\DRIVERS\CeKbFilter.sys

19:39:02.0480 2980 CeKbFilter - ok

19:39:02.0527 2980 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\windows\System32\certprop.dll

19:39:02.0527 2980 CertPropSvc - ok

19:39:02.0558 2980 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\windows\system32\drivers\circlass.sys

19:39:02.0558 2980 circlass - ok

19:39:02.0589 2980 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\windows\system32\CLFS.sys

19:39:02.0605 2980 CLFS - ok

19:39:02.0667 2980 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

19:39:02.0667 2980 clr_optimization_v2.0.50727_32 - ok

19:39:02.0714 2980 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

19:39:02.0714 2980 clr_optimization_v2.0.50727_64 - ok

19:39:02.0776 2980 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

19:39:02.0792 2980 clr_optimization_v4.0.30319_32 - ok

19:39:02.0808 2980 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

19:39:02.0808 2980 clr_optimization_v4.0.30319_64 - ok

19:39:02.0854 2980 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\windows\system32\drivers\CmBatt.sys

19:39:02.0854 2980 CmBatt - ok

19:39:02.0870 2980 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\windows\system32\drivers\cmdide.sys

19:39:02.0870 2980 cmdide - ok

19:39:02.0917 2980 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\windows\system32\Drivers\cng.sys

19:39:02.0932 2980 CNG - ok

19:39:02.0979 2980 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\windows\system32\drivers\compbatt.sys

19:39:02.0979 2980 Compbatt - ok

19:39:02.0995 2980 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\windows\system32\drivers\CompositeBus.sys

19:39:03.0010 2980 CompositeBus - ok

19:39:03.0026 2980 COMSysApp - ok

19:39:03.0042 2980 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\windows\system32\drivers\crcdisk.sys

19:39:03.0042 2980 crcdisk - ok

19:39:03.0089 2980 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\windows\system32\cryptsvc.dll

19:39:03.0105 2980 CryptSvc - ok

19:39:03.0152 2980 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\windows\system32\rpcss.dll

19:39:03.0152 2980 DcomLaunch - ok

19:39:03.0199 2980 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\windows\System32\defragsvc.dll

19:39:03.0214 2980 defragsvc - ok

19:39:03.0245 2980 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\windows\system32\Drivers\dfsc.sys

19:39:03.0245 2980 DfsC - ok

19:39:03.0277 2980 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\windows\system32\dhcpcore.dll

19:39:03.0277 2980 Dhcp - ok

19:39:03.0308 2980 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\windows\system32\drivers\discache.sys

19:39:03.0308 2980 discache - ok

19:39:03.0339 2980 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\windows\system32\drivers\disk.sys

19:39:03.0355 2980 Disk - ok

19:39:03.0401 2980 [ E7B489FA5B15D2FEC3E52066E015B788 ] DMAgent C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe

19:39:03.0417 2980 DMAgent - ok

19:39:03.0448 2980 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\windows\System32\dnsrslvr.dll

19:39:03.0464 2980 Dnscache - ok

19:39:03.0495 2980 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\windows\System32\dot3svc.dll

19:39:03.0495 2980 dot3svc - ok

19:39:03.0511 2980 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\windows\system32\dps.dll

19:39:03.0511 2980 DPS - ok

19:39:03.0542 2980 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\windows\system32\drivers\drmkaud.sys

19:39:03.0542 2980 drmkaud - ok

19:39:03.0589 2980 [ 85DBF6EC7BDFA6187F4A1EC8F3145CD0 ] DXGKrnl C:\windows\System32\drivers\dxgkrnl.sys

19:39:03.0604 2980 DXGKrnl - ok

19:39:03.0635 2980 EagleX64 - ok

19:39:03.0667 2980 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\windows\System32\eapsvc.dll

19:39:03.0682 2980 EapHost - ok

19:39:03.0776 2980 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\windows\system32\drivers\evbda.sys

19:39:03.0791 2980 ebdrv - ok

19:39:03.0869 2980 [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys

19:39:03.0885 2980 eeCtrl - ok

19:39:03.0916 2980 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\windows\System32\lsass.exe

19:39:03.0916 2980 EFS - ok

19:39:03.0979 2980 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\windows\ehome\ehRecvr.exe

19:39:03.0994 2980 ehRecvr - ok

19:39:04.0010 2980 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\windows\ehome\ehsched.exe

19:39:04.0010 2980 ehSched - ok

19:39:04.0041 2980 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\windows\system32\drivers\elxstor.sys

19:39:04.0057 2980 elxstor - ok

19:39:04.0119 2980 [ C5BCCB378D0A896304A3E71BE7215983 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

19:39:04.0119 2980 EraserUtilRebootDrv - ok

19:39:04.0181 2980 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\windows\system32\drivers\errdev.sys

19:39:04.0181 2980 ErrDev - ok

19:39:04.0228 2980 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\windows\system32\es.dll

19:39:04.0244 2980 EventSystem - ok

19:39:04.0322 2980 [ 57E61DC4F7980D57C0B162FC5B9F0B38 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe

19:39:04.0337 2980 EvtEng - ok

19:39:04.0369 2980 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\windows\system32\drivers\exfat.sys

19:39:04.0369 2980 exfat - ok

19:39:04.0384 2980 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\windows\system32\drivers\fastfat.sys

19:39:04.0384 2980 fastfat - ok

19:39:04.0431 2980 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\windows\system32\fxssvc.exe

19:39:04.0447 2980 Fax - ok

19:39:04.0478 2980 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\windows\system32\drivers\fdc.sys

19:39:04.0478 2980 fdc - ok

19:39:04.0509 2980 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\windows\system32\fdPHost.dll

19:39:04.0509 2980 fdPHost - ok

19:39:04.0525 2980 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\windows\system32\fdrespub.dll

19:39:04.0525 2980 FDResPub - ok

19:39:04.0540 2980 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\windows\system32\drivers\fileinfo.sys

19:39:04.0540 2980 FileInfo - ok

19:39:04.0556 2980 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\windows\system32\drivers\filetrace.sys

19:39:04.0556 2980 Filetrace - ok

19:39:04.0587 2980 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\windows\system32\drivers\flpydisk.sys

19:39:04.0587 2980 flpydisk - ok

19:39:04.0618 2980 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\windows\system32\drivers\fltmgr.sys

19:39:04.0618 2980 FltMgr - ok

19:39:04.0712 2980 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\windows\system32\FntCache.dll

19:39:04.0727 2980 FontCache - ok

19:39:04.0774 2980 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

19:39:04.0774 2980 FontCache3.0.0.0 - ok

19:39:04.0790 2980 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\windows\system32\drivers\FsDepends.sys

19:39:04.0790 2980 FsDepends - ok

19:39:04.0821 2980 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\windows\system32\drivers\Fs_Rec.sys

19:39:04.0821 2980 Fs_Rec - ok

19:39:04.0852 2980 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\windows\system32\DRIVERS\fvevol.sys

19:39:04.0868 2980 fvevol - ok

19:39:04.0899 2980 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\windows\system32\drivers\gagp30kx.sys

19:39:04.0899 2980 gagp30kx - ok

19:39:04.0946 2980 [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM C:\windows\system32\DRIVERS\GEARAspiWDM.sys

19:39:04.0946 2980 GEARAspiWDM - ok

19:39:04.0993 2980 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\windows\System32\gpsvc.dll

19:39:04.0993 2980 gpsvc - ok

19:39:05.0055 2980 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

19:39:05.0055 2980 gupdate - ok

19:39:05.0086 2980 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

19:39:05.0086 2980 gupdatem - ok

19:39:05.0117 2980 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi C:\windows\system32\DRIVERS\hamachi.sys

19:39:05.0117 2980 hamachi - ok

19:39:05.0211 2980 [ A5963114373834D78782013BC803043E ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

19:39:05.0242 2980 Hamachi2Svc - ok

19:39:05.0273 2980 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\windows\system32\drivers\hcw85cir.sys

19:39:05.0273 2980 hcw85cir - ok

19:39:05.0305 2980 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys

19:39:05.0305 2980 HdAudAddService - ok

19:39:05.0351 2980 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\windows\system32\drivers\HDAudBus.sys

19:39:05.0351 2980 HDAudBus - ok

19:39:05.0367 2980 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\windows\system32\drivers\HidBatt.sys

19:39:05.0367 2980 HidBatt - ok

19:39:05.0398 2980 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\windows\system32\drivers\hidbth.sys

19:39:05.0398 2980 HidBth - ok

19:39:05.0429 2980 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\windows\system32\drivers\hidir.sys

19:39:05.0429 2980 HidIr - ok

19:39:05.0476 2980 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\windows\System32\hidserv.dll

19:39:05.0476 2980 hidserv - ok

19:39:05.0523 2980 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\windows\system32\DRIVERS\hidusb.sys

19:39:05.0523 2980 HidUsb - ok

19:39:05.0585 2980 [ 00C71C3FB915BA353740999ADF447927 ] HiPatchService C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

19:39:05.0585 2980 HiPatchService - ok

19:39:05.0617 2980 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\windows\system32\kmsvc.dll

19:39:05.0617 2980 hkmsvc - ok

19:39:05.0648 2980 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\windows\system32\ListSvc.dll

19:39:05.0648 2980 HomeGroupListener - ok

19:39:05.0679 2980 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\windows\system32\provsvc.dll

19:39:05.0679 2980 HomeGroupProvider - ok

19:39:05.0726 2980 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\windows\system32\drivers\HpSAMD.sys

19:39:05.0726 2980 HpSAMD - ok

19:39:05.0757 2980 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\windows\system32\drivers\HTTP.sys

19:39:05.0773 2980 HTTP - ok

19:39:05.0788 2980 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\windows\system32\drivers\hwpolicy.sys

19:39:05.0788 2980 hwpolicy - ok

19:39:05.0819 2980 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\windows\system32\drivers\i8042prt.sys

19:39:05.0819 2980 i8042prt - ok

19:39:05.0866 2980 [ D469B77687E12FE43E344806740B624D ] iaStor C:\windows\system32\DRIVERS\iaStor.sys

19:39:05.0882 2980 iaStor - ok

19:39:05.0929 2980 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\windows\system32\drivers\iaStorV.sys

19:39:05.0944 2980 iaStorV - ok

19:39:05.0991 2980 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

19:39:06.0007 2980 idsvc - ok

19:39:06.0131 2980 [ A48928D4CCA6F8B731989DB08CF2C0AB ] IDSVia64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\IPSDefs\20121205.001\IDSvia64.sys

19:39:06.0131 2980 IDSVia64 - ok

19:39:06.0397 2980 [ 93C8115D4BAEB1BD047AB0A9B265EE7A ] igfx C:\windows\system32\DRIVERS\igdkmd64.sys

19:39:06.0443 2980 igfx - ok

19:39:06.0475 2980 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\windows\system32\drivers\iirsp.sys

19:39:06.0475 2980 iirsp - ok

19:39:06.0521 2980 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\windows\System32\ikeext.dll

19:39:06.0537 2980 IKEEXT - ok

19:39:06.0584 2980 [ CADDF0927DAC63EDAE48F5C35A61D87D ] intaud_WaveExtensible C:\windows\system32\drivers\intelaud.sys

19:39:06.0584 2980 intaud_WaveExtensible - ok

19:39:06.0677 2980 [ 4B2151F04BB466EC1924AA27315E1118 ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHD64.sys

19:39:06.0693 2980 IntcAzAudAddService - ok

19:39:06.0755 2980 [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud C:\windows\system32\DRIVERS\IntcDAud.sys

19:39:06.0755 2980 IntcDAud - ok

19:39:06.0802 2980 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\windows\system32\drivers\intelide.sys

19:39:06.0802 2980 intelide - ok

19:39:06.0833 2980 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\windows\system32\DRIVERS\intelppm.sys

19:39:06.0833 2980 intelppm - ok

19:39:06.0865 2980 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\windows\system32\ipbusenum.dll

19:39:06.0880 2980 IPBusEnum - ok

19:39:06.0896 2980 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\windows\system32\DRIVERS\ipfltdrv.sys

19:39:06.0896 2980 IpFilterDriver - ok

19:39:06.0958 2980 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\windows\System32\iphlpsvc.dll

19:39:06.0974 2980 iphlpsvc - ok

19:39:06.0989 2980 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\windows\system32\drivers\IPMIDrv.sys

19:39:06.0989 2980 IPMIDRV - ok

19:39:07.0005 2980 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\windows\system32\drivers\ipnat.sys

19:39:07.0005 2980 IPNAT - ok

19:39:07.0099 2980 [ A9AB99EE7D39725EAFEC82732D2B3271 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe

19:39:07.0099 2980 iPod Service - ok

19:39:07.0130 2980 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\windows\system32\drivers\irenum.sys

19:39:07.0145 2980 IRENUM - ok

19:39:07.0161 2980 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\windows\system32\drivers\isapnp.sys

19:39:07.0161 2980 isapnp - ok

19:39:07.0192 2980 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\windows\system32\drivers\msiscsi.sys

19:39:07.0192 2980 iScsiPrt - ok

19:39:07.0239 2980 [ F415A88162D23977B5EDAE4F0410E903 ] IviRegMgr C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe

19:39:07.0239 2980 IviRegMgr - ok

19:39:07.0255 2980 [ 716F66336F10885D935B08174DC54242 ] iwdbus C:\windows\system32\DRIVERS\iwdbus.sys

19:39:07.0270 2980 iwdbus - ok

19:39:07.0286 2980 [ 935301DD8306CEEAEF0B84DD6ABFFDC6 ] JMCR C:\windows\system32\DRIVERS\jmcr.sys

19:39:07.0286 2980 JMCR - ok

19:39:07.0317 2980 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\windows\system32\DRIVERS\kbdclass.sys

19:39:07.0317 2980 kbdclass - ok

19:39:07.0348 2980 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\windows\system32\DRIVERS\kbdhid.sys

19:39:07.0348 2980 kbdhid - ok

19:39:07.0364 2980 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\windows\system32\lsass.exe

19:39:07.0364 2980 KeyIso - ok

19:39:07.0395 2980 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\windows\system32\Drivers\ksecdd.sys

19:39:07.0395 2980 KSecDD - ok

19:39:07.0426 2980 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\windows\system32\Drivers\ksecpkg.sys

19:39:07.0426 2980 KSecPkg - ok

19:39:07.0457 2980 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\windows\system32\drivers\ksthunk.sys

19:39:07.0457 2980 ksthunk - ok

19:39:07.0489 2980 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\windows\system32\msdtckrm.dll

19:39:07.0489 2980 KtmRm - ok

19:39:07.0535 2980 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\windows\System32\srvsvc.dll

19:39:07.0535 2980 LanmanServer - ok

19:39:07.0567 2980 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\windows\System32\wkssvc.dll

19:39:07.0567 2980 LanmanWorkstation - ok

19:39:07.0598 2980 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\windows\system32\DRIVERS\lltdio.sys

19:39:07.0598 2980 lltdio - ok

19:39:07.0629 2980 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\windows\System32\lltdsvc.dll

19:39:07.0629 2980 lltdsvc - ok

19:39:07.0660 2980 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\windows\System32\lmhsvc.dll

19:39:07.0660 2980 lmhosts - ok

19:39:07.0738 2980 [ 50C7CE53EF461870410355F1F2E7D515 ] LMS C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

19:39:07.0738 2980 LMS - ok

19:39:07.0801 2980 [ 2825A71E7501CB33B3B9F856610C729D ] LPCFilter C:\windows\system32\DRIVERS\LPCFilter.sys

19:39:07.0801 2980 LPCFilter - ok

19:39:07.0832 2980 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\windows\system32\drivers\lsi_fc.sys

19:39:07.0832 2980 LSI_FC - ok

19:39:07.0863 2980 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\windows\system32\drivers\lsi_sas.sys

19:39:07.0863 2980 LSI_SAS - ok

19:39:07.0863 2980 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\windows\system32\drivers\lsi_sas2.sys

19:39:07.0863 2980 LSI_SAS2 - ok

19:39:07.0894 2980 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\windows\system32\drivers\lsi_scsi.sys

19:39:07.0894 2980 LSI_SCSI - ok

19:39:07.0925 2980 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\windows\system32\drivers\luafv.sys

19:39:07.0925 2980 luafv - ok

19:39:07.0988 2980 [ A8FE8F2783B2929B56F5370A89356CE9 ] MBAMProtector C:\windows\system32\drivers\mbam.sys

19:39:07.0988 2980 MBAMProtector - ok

19:39:08.0050 2980 [ 85B16A92B117A5A800032ECD904B86DB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

19:39:08.0050 2980 MBAMScheduler - ok

19:39:08.0113 2980 [ 20E2469DB709FC675E655CEAA11BE312 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

19:39:08.0128 2980 MBAMService - ok

19:39:08.0159 2980 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\windows\system32\Mcx2Svc.dll

19:39:08.0159 2980 Mcx2Svc - ok

19:39:08.0191 2980 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\windows\system32\drivers\megasas.sys

19:39:08.0191 2980 megasas - ok

19:39:08.0237 2980 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\windows\system32\drivers\MegaSR.sys

19:39:08.0237 2980 MegaSR - ok

19:39:08.0269 2980 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\windows\system32\DRIVERS\HECIx64.sys

19:39:08.0269 2980 MEIx64 - ok

19:39:08.0300 2980 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\windows\system32\mmcss.dll

19:39:08.0300 2980 MMCSS - ok

19:39:08.0331 2980 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\windows\system32\drivers\modem.sys

19:39:08.0331 2980 Modem - ok

19:39:08.0362 2980 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\windows\system32\DRIVERS\monitor.sys

19:39:08.0362 2980 monitor - ok

19:39:08.0393 2980 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\windows\system32\DRIVERS\mouclass.sys

19:39:08.0393 2980 mouclass - ok

19:39:08.0425 2980 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\windows\system32\DRIVERS\mouhid.sys

19:39:08.0425 2980 mouhid - ok

19:39:08.0456 2980 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\windows\system32\drivers\mountmgr.sys

19:39:08.0456 2980 mountmgr - ok

19:39:08.0471 2980 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\windows\system32\drivers\mpio.sys

19:39:08.0471 2980 mpio - ok

19:39:08.0487 2980 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\windows\system32\drivers\mpsdrv.sys

19:39:08.0503 2980 mpsdrv - ok

19:39:08.0534 2980 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\windows\system32\mpssvc.dll

19:39:08.0549 2980 MpsSvc - ok

19:39:08.0565 2980 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\windows\system32\drivers\mrxdav.sys

19:39:08.0565 2980 MRxDAV - ok

19:39:08.0581 2980 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\windows\system32\DRIVERS\mrxsmb.sys

19:39:08.0596 2980 mrxsmb - ok

19:39:08.0612 2980 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\windows\system32\DRIVERS\mrxsmb10.sys

19:39:08.0612 2980 mrxsmb10 - ok

19:39:08.0643 2980 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\windows\system32\DRIVERS\mrxsmb20.sys

19:39:08.0643 2980 mrxsmb20 - ok

19:39:08.0659 2980 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\windows\system32\DRIVERS\msahci.sys

19:39:08.0659 2980 msahci - ok

19:39:08.0674 2980 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\windows\system32\drivers\msdsm.sys

19:39:08.0690 2980 msdsm - ok

19:39:08.0721 2980 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\windows\System32\msdtc.exe

19:39:08.0721 2980 MSDTC - ok

19:39:08.0752 2980 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\windows\system32\drivers\Msfs.sys

19:39:08.0752 2980 Msfs - ok

19:39:08.0799 2980 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\windows\System32\drivers\mshidkmdf.sys

19:39:08.0799 2980 mshidkmdf - ok

19:39:08.0815 2980 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\windows\system32\drivers\msisadrv.sys

19:39:08.0815 2980 msisadrv - ok

19:39:08.0846 2980 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\windows\system32\iscsiexe.dll

19:39:08.0846 2980 MSiSCSI - ok

19:39:08.0846 2980 msiserver - ok

19:39:08.0893 2980 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\windows\system32\drivers\MSKSSRV.sys

19:39:08.0893 2980 MSKSSRV - ok

19:39:08.0939 2980 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\windows\system32\drivers\MSPCLOCK.sys

19:39:08.0939 2980 MSPCLOCK - ok

19:39:08.0955 2980 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\windows\system32\drivers\MSPQM.sys

19:39:08.0955 2980 MSPQM - ok

19:39:08.0971 2980 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\windows\system32\drivers\MsRPC.sys

19:39:08.0986 2980 MsRPC - ok

19:39:09.0002 2980 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\windows\system32\drivers\mssmbios.sys

19:39:09.0002 2980 mssmbios - ok

19:39:09.0033 2980 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\windows\system32\drivers\MSTEE.sys

19:39:09.0033 2980 MSTEE - ok

19:39:09.0064 2980 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\windows\system32\drivers\MTConfig.sys

19:39:09.0064 2980 MTConfig - ok

19:39:09.0080 2980 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\windows\system32\Drivers\mup.sys

19:39:09.0080 2980 Mup - ok

19:39:09.0142 2980 [ 50B99D53BC013458381C6476D790C9F3 ] MyWiFiDHCPDNS C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

19:39:09.0158 2980 MyWiFiDHCPDNS - ok

19:39:09.0205 2980 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\windows\system32\qagentRT.dll

19:39:09.0205 2980 napagent - ok

19:39:09.0251 2980 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\windows\system32\DRIVERS\nwifi.sys

19:39:09.0267 2980 NativeWifiP - ok

19:39:09.0345 2980 [ F2840DBFE9322F35557219AE82CC4597 ] NAV C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe

19:39:09.0345 2980 NAV - ok

19:39:09.0454 2980 [ C58D8A669D6551F616D90244BD2C2D4F ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20121209.006\ENG64.SYS

19:39:09.0454 2980 NAVENG - ok

19:39:09.0548 2980 [ A3DBDB412ADFA5882DD6843B11FE0828 ] NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20121209.006\EX64.SYS

19:39:09.0548 2980 NAVEX15 - ok

19:39:09.0595 2980 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\windows\system32\drivers\ndis.sys

19:39:09.0610 2980 NDIS - ok

19:39:09.0641 2980 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\windows\system32\DRIVERS\ndiscap.sys

19:39:09.0641 2980 NdisCap - ok

19:39:09.0673 2980 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\windows\system32\DRIVERS\ndistapi.sys

19:39:09.0673 2980 NdisTapi - ok

19:39:09.0704 2980 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\windows\system32\DRIVERS\ndisuio.sys

19:39:09.0704 2980 Ndisuio - ok

19:39:09.0719 2980 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\windows\system32\DRIVERS\ndiswan.sys

19:39:09.0719 2980 NdisWan - ok

19:39:09.0751 2980 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\windows\system32\drivers\NDProxy.sys

19:39:09.0751 2980 NDProxy - ok

19:39:09.0797 2980 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\windows\system32\DRIVERS\netbios.sys

19:39:09.0797 2980 NetBIOS - ok

19:39:09.0813 2980 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\windows\system32\DRIVERS\netbt.sys

19:39:09.0829 2980 NetBT - ok

19:39:09.0844 2980 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\windows\system32\lsass.exe

19:39:09.0844 2980 Netlogon - ok

19:39:09.0891 2980 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\windows\System32\netman.dll

19:39:09.0891 2980 Netman - ok

19:39:09.0938 2980 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

19:39:09.0938 2980 NetMsmqActivator - ok

19:39:09.0938 2980 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

19:39:09.0953 2980 NetPipeActivator - ok

19:39:09.0969 2980 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\windows\System32\netprofm.dll

19:39:09.0985 2980 netprofm - ok

19:39:09.0985 2980 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

19:39:09.0985 2980 NetTcpActivator - ok

19:39:09.0985 2980 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

19:39:10.0000 2980 NetTcpPortSharing - ok

19:39:10.0234 2980 [ AC69618DE5BCCE8747C9AB0AAE1003C1 ] NETwNs64 C:\windows\system32\DRIVERS\NETwNs64.sys

19:39:10.0265 2980 NETwNs64 - ok

19:39:10.0297 2980 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\windows\system32\drivers\nfrd960.sys

19:39:10.0297 2980 nfrd960 - ok

19:39:10.0343 2980 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\windows\System32\nlasvc.dll

19:39:10.0359 2980 NlaSvc - ok

19:39:10.0359 2980 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\windows\system32\drivers\Npfs.sys

19:39:10.0359 2980 Npfs - ok

19:39:10.0390 2980 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\windows\system32\nsisvc.dll

19:39:10.0390 2980 nsi - ok

19:39:10.0406 2980 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\windows\system32\drivers\nsiproxy.sys

19:39:10.0406 2980 nsiproxy - ok

19:39:10.0484 2980 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\windows\system32\drivers\Ntfs.sys

19:39:10.0499 2980 Ntfs - ok

19:39:10.0515 2980 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\windows\system32\drivers\Null.sys

19:39:10.0515 2980 Null - ok

19:39:10.0562 2980 [ 0EBC9D13CD96C15B1B18D8678A609E4B ] nusb3hub C:\windows\system32\DRIVERS\nusb3hub.sys

19:39:10.0562 2980 nusb3hub - ok

19:39:10.0577 2980 [ 7BDEC000D56D485021D9C1E63C2F81CA ] nusb3xhc C:\windows\system32\DRIVERS\nusb3xhc.sys

19:39:10.0577 2980 nusb3xhc - ok

19:39:10.0609 2980 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\windows\system32\drivers\nvraid.sys

19:39:10.0609 2980 nvraid - ok

19:39:10.0609 2980 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\windows\system32\drivers\nvstor.sys

19:39:10.0609 2980 nvstor - ok

19:39:10.0655 2980 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\windows\system32\drivers\nv_agp.sys

19:39:10.0655 2980 nv_agp - ok

19:39:10.0671 2980 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\windows\system32\drivers\ohci1394.sys

19:39:10.0671 2980 ohci1394 - ok

19:39:10.0749 2980 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

19:39:10.0749 2980 ose - ok

19:39:10.0905 2980 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

19:39:10.0936 2980 osppsvc - ok

19:39:10.0983 2980 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\windows\system32\pnrpsvc.dll

19:39:10.0983 2980 p2pimsvc - ok

19:39:10.0999 2980 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\windows\system32\p2psvc.dll

19:39:11.0014 2980 p2psvc - ok

19:39:11.0045 2980 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\windows\system32\drivers\parport.sys

19:39:11.0045 2980 Parport - ok

19:39:11.0061 2980 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\windows\system32\drivers\partmgr.sys

19:39:11.0077 2980 partmgr - ok

19:39:11.0092 2980 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\windows\System32\pcasvc.dll

19:39:11.0108 2980 PcaSvc - ok

19:39:11.0123 2980 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\windows\system32\drivers\pci.sys

19:39:11.0123 2980 pci - ok

19:39:11.0155 2980 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\windows\system32\DRIVERS\pciide.sys

19:39:11.0155 2980 pciide - ok

19:39:11.0186 2980 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\windows\system32\drivers\pcmcia.sys

19:39:11.0186 2980 pcmcia - ok

19:39:11.0217 2980 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\windows\system32\drivers\pcw.sys

19:39:11.0217 2980 pcw - ok

19:39:11.0233 2980 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\windows\system32\drivers\peauth.sys

19:39:11.0248 2980 PEAUTH - ok

19:39:11.0326 2980 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\windows\SysWow64\perfhost.exe

19:39:11.0326 2980 PerfHost - ok

19:39:11.0373 2980 [ 91111CEBBDE8015E822C46120ED9537C ] PGEffect C:\windows\system32\DRIVERS\pgeffect.sys

19:39:11.0373 2980 PGEffect - ok

19:39:11.0435 2980 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\windows\system32\pla.dll

19:39:11.0451 2980 pla - ok

19:39:11.0498 2980 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\windows\system32\umpnpmgr.dll

19:39:11.0513 2980 PlugPlay - ok

19:39:11.0529 2980 PnkBstrA - ok

19:39:11.0560 2980 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\windows\system32\pnrpauto.dll

19:39:11.0560 2980 PNRPAutoReg - ok

19:39:11.0576 2980 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\windows\system32\pnrpsvc.dll

19:39:11.0591 2980 PNRPsvc - ok

19:39:11.0623 2980 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\windows\System32\ipsecsvc.dll

19:39:11.0638 2980 PolicyAgent - ok

19:39:11.0669 2980 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\windows\system32\umpo.dll

19:39:11.0669 2980 Power - ok

19:39:11.0701 2980 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\windows\system32\DRIVERS\raspptp.sys

19:39:11.0701 2980 PptpMiniport - ok

19:39:11.0716 2980 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\windows\system32\drivers\processr.sys

19:39:11.0716 2980 Processor - ok

19:39:11.0763 2980 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\windows\system32\profsvc.dll

19:39:11.0763 2980 ProfSvc - ok

19:39:11.0779 2980 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\windows\system32\lsass.exe

19:39:11.0779 2980 ProtectedStorage - ok

19:39:11.0810 2980 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\windows\system32\DRIVERS\pacer.sys

19:39:11.0825 2980 Psched - ok

19:39:11.0857 2980 [ F036CFB275D0C55F4E45FBBF5F98B3C8 ] PSI_SVC_2 C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

19:39:11.0857 2980 PSI_SVC_2 - ok

19:39:11.0919 2980 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\windows\system32\drivers\ql2300.sys

19:39:11.0935 2980 ql2300 - ok

19:39:11.0966 2980 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\windows\system32\drivers\ql40xx.sys

19:39:11.0966 2980 ql40xx - ok

19:39:11.0997 2980 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\windows\system32\qwave.dll

19:39:11.0997 2980 QWAVE - ok

19:39:12.0013 2980 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\windows\system32\drivers\qwavedrv.sys

19:39:12.0013 2980 QWAVEdrv - ok

19:39:12.0028 2980 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\windows\system32\DRIVERS\rasacd.sys

19:39:12.0028 2980 RasAcd - ok

19:39:12.0075 2980 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\windows\system32\DRIVERS\AgileVpn.sys

19:39:12.0075 2980 RasAgileVpn - ok

19:39:12.0106 2980 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\windows\System32\rasauto.dll

19:39:12.0122 2980 RasAuto - ok

19:39:12.0137 2980 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\windows\system32\DRIVERS\rasl2tp.sys

19:39:12.0153 2980 Rasl2tp - ok

19:39:12.0200 2980 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\windows\System32\rasmans.dll

19:39:12.0200 2980 RasMan - ok

19:39:12.0231 2980 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\windows\system32\DRIVERS\raspppoe.sys

19:39:12.0247 2980 RasPppoe - ok

19:39:12.0262 2980 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\windows\system32\DRIVERS\rassstp.sys

19:39:12.0262 2980 RasSstp - ok

19:39:12.0293 2980 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\windows\system32\DRIVERS\rdbss.sys

19:39:12.0293 2980 rdbss - ok

19:39:12.0309 2980 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\windows\system32\drivers\rdpbus.sys

19:39:12.0309 2980 rdpbus - ok

19:39:12.0325 2980 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\windows\system32\DRIVERS\RDPCDD.sys

19:39:12.0325 2980 RDPCDD - ok

19:39:12.0340 2980 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\windows\system32\drivers\rdpencdd.sys

19:39:12.0340 2980 RDPENCDD - ok

19:39:12.0356 2980 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\windows\system32\drivers\rdprefmp.sys

19:39:12.0356 2980 RDPREFMP - ok

19:39:12.0387 2980 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\windows\system32\drivers\RDPWD.sys

19:39:12.0387 2980 RDPWD - ok

19:39:12.0418 2980 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\windows\system32\drivers\rdyboost.sys

19:39:12.0418 2980 rdyboost - ok

19:39:12.0449 2980 [ 4D9AFDDDA0EFE97CDBFD3B5FA48B05F6 ] regi C:\windows\system32\drivers\regi.sys

19:39:12.0449 2980 regi - ok

19:39:12.0527 2980 [ 18505D90FEE940EE9EAE4C5B421F22B4 ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

19:39:12.0527 2980 RegSrvc - ok

19:39:12.0559 2980 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\windows\System32\mprdim.dll

19:39:12.0574 2980 RemoteAccess - ok

19:39:12.0605 2980 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\windows\system32\regsvc.dll

19:39:12.0621 2980 RemoteRegistry - ok

19:39:12.0621 2980 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\windows\System32\RpcEpMap.dll

19:39:12.0637 2980 RpcEptMapper - ok

19:39:12.0652 2980 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\windows\system32\locator.exe

19:39:12.0652 2980 RpcLocator - ok

19:39:12.0683 2980 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\windows\system32\rpcss.dll

19:39:12.0683 2980 RpcSs - ok

19:39:12.0715 2980 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\windows\system32\DRIVERS\rspndr.sys

19:39:12.0715 2980 rspndr - ok

19:39:12.0761 2980 [ 6D3C7E7D82D3DC92DC2A8B0DF9F20F8A ] RTL8167 C:\windows\system32\DRIVERS\Rt64win7.sys

19:39:12.0761 2980 RTL8167 - ok

19:39:12.0777 2980 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\windows\system32\lsass.exe

19:39:12.0777 2980 SamSs - ok

19:39:12.0808 2980 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\windows\system32\drivers\sbp2port.sys

19:39:12.0808 2980 sbp2port - ok

19:39:12.0839 2980 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\windows\System32\SCardSvr.dll

19:39:12.0839 2980 SCardSvr - ok

19:39:12.0839 2980 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\windows\system32\DRIVERS\scfilter.sys

19:39:12.0839 2980 scfilter - ok

19:39:12.0886 2980 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\windows\system32\schedsvc.dll

19:39:12.0902 2980 Schedule - ok

19:39:12.0933 2980 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\windows\System32\certprop.dll

19:39:12.0933 2980 SCPolicySvc - ok

19:39:12.0980 2980 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\windows\system32\DRIVERS\sdbus.sys

19:39:12.0980 2980 sdbus - ok

19:39:13.0011 2980 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\windows\System32\SDRSVC.dll

19:39:13.0027 2980 SDRSVC - ok

19:39:13.0042 2980 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\windows\system32\drivers\secdrv.sys

19:39:13.0042 2980 secdrv - ok

19:39:13.0058 2980 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\windows\system32\seclogon.dll

19:39:13.0058 2980 seclogon - ok

19:39:13.0089 2980 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\windows\system32\sens.dll

19:39:13.0089 2980 SENS - ok

19:39:13.0120 2980 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\windows\system32\sensrsvc.dll

19:39:13.0120 2980 SensrSvc - ok

19:39:13.0136 2980 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\windows\system32\drivers\serenum.sys

19:39:13.0136 2980 Serenum - ok

19:39:13.0183 2980 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\windows\system32\drivers\serial.sys

19:39:13.0183 2980 Serial - ok

19:39:13.0229 2980 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\windows\system32\drivers\sermouse.sys

19:39:13.0229 2980 sermouse - ok

19:39:13.0245 2980 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\windows\system32\sessenv.dll

19:39:13.0261 2980 SessionEnv - ok

19:39:13.0276 2980 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\windows\system32\drivers\sffdisk.sys

19:39:13.0276 2980 sffdisk - ok

19:39:13.0292 2980 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\windows\system32\drivers\sffp_mmc.sys

19:39:13.0292 2980 sffp_mmc - ok

19:39:13.0323 2980 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\windows\system32\drivers\sffp_sd.sys

19:39:13.0323 2980 sffp_sd - ok

19:39:13.0339 2980 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\windows\system32\drivers\sfloppy.sys

19:39:13.0339 2980 sfloppy - ok

19:39:13.0385 2980 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\windows\System32\ipnathlp.dll

19:39:13.0385 2980 SharedAccess - ok

19:39:13.0417 2980 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\windows\System32\shsvcs.dll

19:39:13.0417 2980 ShellHWDetection - ok

19:39:13.0463 2980 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\windows\system32\drivers\SiSRaid2.sys

19:39:13.0463 2980 SiSRaid2 - ok

19:39:13.0479 2980 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\windows\system32\drivers\sisraid4.sys

19:39:13.0479 2980 SiSRaid4 - ok

19:39:13.0510 2980 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\windows\system32\DRIVERS\smb.sys

19:39:13.0510 2980 Smb - ok

19:39:13.0573 2980 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\windows\System32\snmptrap.exe

19:39:13.0573 2980 SNMPTRAP - ok

19:39:13.0588 2980 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\windows\system32\drivers\spldr.sys

19:39:13.0588 2980 spldr - ok

19:39:13.0635 2980 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\windows\System32\spoolsv.exe

19:39:13.0651 2980 Spooler - ok

19:39:13.0744 2980 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\windows\system32\sppsvc.exe

19:39:13.0760 2980 sppsvc - ok

19:39:13.0775 2980 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\windows\system32\sppuinotify.dll

19:39:13.0775 2980 sppuinotify - ok

19:39:13.0885 2980 [ 891793E00432FA055CF040605C260E49 ] SRTSP C:\windows\System32\Drivers\NAVx64\1309000.009\SRTSP64.SYS

19:39:13.0885 2980 SRTSP - ok

19:39:13.0900 2980 [ 1CB7BB3B0561FB5ECFE37F7731E8BF3E ] SRTSPX C:\windows\system32\drivers\NAVx64\1309000.009\SRTSPX64.SYS

19:39:13.0916 2980 SRTSPX - ok

19:39:13.0931 2980 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\windows\system32\DRIVERS\srv.sys

19:39:13.0947 2980 srv - ok

19:39:13.0963 2980 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\windows\system32\DRIVERS\srv2.sys

19:39:13.0963 2980 srv2 - ok

19:39:13.0978 2980 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\windows\system32\DRIVERS\srvnet.sys

19:39:13.0978 2980 srvnet - ok

19:39:14.0025 2980 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\windows\System32\ssdpsrv.dll

19:39:14.0025 2980 SSDPSRV - ok

19:39:14.0041 2980 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\windows\system32\sstpsvc.dll

19:39:14.0041 2980 SstpSvc - ok

19:39:14.0087 2980 [ D21FF3592DAEE244EE8376830A672B52 ] ss_bus C:\windows\system32\DRIVERS\ss_bus.sys

19:39:14.0087 2980 ss_bus - ok

19:39:14.0119 2980 [ 451DB3D10E6112E06B4506D4A7BECEC1 ] ss_mdfl C:\windows\system32\DRIVERS\ss_mdfl.sys

19:39:14.0119 2980 ss_mdfl - ok

19:39:14.0150 2980 [ EF40C8A268A5263A0EF48FED8E57CBED ] ss_mdm C:\windows\system32\DRIVERS\ss_mdm.sys

19:39:14.0165 2980 ss_mdm - ok

19:39:14.0212 2980 Steam Client Service - ok

19:39:14.0228 2980 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\windows\system32\drivers\stexstor.sys

19:39:14.0228 2980 stexstor - ok

19:39:14.0275 2980 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\windows\System32\wiaservc.dll

19:39:14.0290 2980 stisvc - ok

19:39:14.0321 2980 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\windows\system32\drivers\swenum.sys

19:39:14.0321 2980 swenum - ok

19:39:14.0353 2980 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\windows\System32\swprv.dll

19:39:14.0353 2980 swprv - ok

19:39:14.0415 2980 [ 8B2430762099598DA40686F754632EFD ] SymDS C:\windows\system32\drivers\NAVx64\1309000.009\SYMDS64.SYS

19:39:14.0415 2980 SymDS - ok

19:39:14.0477 2980 [ 5CB7F2FD7E30A0F52F93574BFC3A8041 ] SymEFA C:\windows\system32\drivers\NAVx64\1309000.009\SYMEFA64.SYS

19:39:14.0493 2980 SymEFA - ok

19:39:14.0509 2980 [ 894579207E39C465737E850A252CE4F2 ] SymEvent C:\windows\system32\Drivers\SYMEVENT64x86.SYS

19:39:14.0524 2980 SymEvent - ok

19:39:14.0555 2980 [ 5013A76CAAA1D7CF1C55214B490B4E35 ] SymIRON C:\windows\system32\drivers\NAVx64\1309000.009\Ironx64.SYS

19:39:14.0571 2980 SymIRON - ok

19:39:14.0587 2980 [ 3911BD0E68C010E5438A87706ABBE9AB ] SymNetS C:\windows\System32\Drivers\NAVx64\1309000.009\SYMNETS.SYS

19:39:14.0602 2980 SymNetS - ok

19:39:14.0665 2980 [ F5B46DF59FEAA48A442AED7EEB754D4B ] SynTP C:\windows\system32\DRIVERS\SynTP.sys

19:39:14.0680 2980 SynTP - ok

19:39:14.0727 2980 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\windows\system32\sysmain.dll

19:39:14.0743 2980 SysMain - ok

19:39:14.0758 2980 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\windows\System32\TabSvc.dll

19:39:14.0774 2980 TabletInputService - ok

19:39:14.0789 2980 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\windows\System32\tapisrv.dll

19:39:14.0789 2980 TapiSrv - ok

19:39:14.0821 2980 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\windows\System32\tbssvc.dll

19:39:14.0821 2980 TBS - ok

19:39:14.0914 2980 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\windows\system32\drivers\tcpip.sys

19:39:14.0930 2980 Tcpip - ok

19:39:14.0961 2980 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\windows\system32\DRIVERS\tcpip.sys

19:39:14.0977 2980 TCPIP6 - ok

19:39:15.0008 2980 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\windows\system32\drivers\tcpipreg.sys

19:39:15.0008 2980 tcpipreg - ok

19:39:15.0039 2980 [ FD542B661BD22FA69CA789AD0AC58C29 ] tdcmdpst C:\windows\system32\DRIVERS\tdcmdpst.sys

19:39:15.0039 2980 tdcmdpst - ok

19:39:15.0070 2980 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\windows\system32\drivers\tdpipe.sys

19:39:15.0070 2980 TDPIPE - ok

19:39:15.0101 2980 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\windows\system32\drivers\tdtcp.sys

19:39:15.0101 2980 TDTCP - ok

19:39:15.0133 2980 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\windows\system32\DRIVERS\tdx.sys

19:39:15.0133 2980 tdx - ok

19:39:15.0148 2980 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\windows\system32\drivers\termdd.sys

19:39:15.0148 2980 TermDD - ok

19:39:15.0179 2980 [ 2E648163254233755035B46DD7B89123 ] TermService C:\windows\System32\termsrv.dll

19:39:15.0195 2980 TermService - ok

19:39:15.0195 2980 [ F0344071948D1A1FA732231785A0664C ] Themes C:\windows\system32\themeservice.dll

19:39:15.0195 2980 Themes - ok

19:39:15.0242 2980 [ 7F35CA8296A52C7161088EB1D952E8ED ] Thpdrv C:\windows\system32\DRIVERS\thpdrv.sys

19:39:15.0242 2980 Thpdrv - ok

19:39:15.0257 2980 [ B4E609047434ED948AF7BDEF2FA66E38 ] Thpevm C:\windows\system32\DRIVERS\Thpevm.SYS

19:39:15.0257 2980 Thpevm - ok

19:39:15.0304 2980 [ 0B4734AE9EC70B843DF02E7B1C056377 ] Thpsrv C:\windows\system32\ThpSrv.exe

19:39:15.0320 2980 Thpsrv - ok

19:39:15.0335 2980 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\windows\system32\mmcss.dll

19:39:15.0335 2980 THREADORDER - ok

19:39:15.0413 2980 [ 71C321649B28638EE80A2EEB164C1DC8 ] TMachInfo C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe

19:39:15.0413 2980 TMachInfo - ok

19:39:15.0460 2980 [ 8E2C799D3476EAC32C3BA0DF7CE6AF19 ] TODDSrv C:\windows\system32\TODDSrv.exe

19:39:15.0460 2980 TODDSrv - ok

19:39:15.0538 2980 [ 1C73689B900428C7D054A41C4687F55C ] TosCoSrv C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

19:39:15.0538 2980 TosCoSrv - ok

19:39:15.0601 2980 [ 63AAFCF3EA5DBB17123E0BAE9AFE4D58 ] TOSHIBA eco Utility Service C:\Program Files\TOSHIBA\TECO\TecoService.exe

19:39:15.0616 2980 TOSHIBA eco Utility Service - ok

19:39:15.0663 2980 [ 29D0886CF250FCEF1BF9E65AB8D2C0C8 ] TOSHIBA HDD SSD Alert Service C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

19:39:15.0663 2980 TOSHIBA HDD SSD Alert Service - ok

19:39:15.0725 2980 [ 09FF7B0B1B5C3D225495CB6F5A9B39F8 ] tos_sps64 C:\windows\system32\DRIVERS\tos_sps64.sys

19:39:15.0725 2980 tos_sps64 - ok

19:39:15.0788 2980 [ 098B8A408C17E125A3D9A8E1166780C8 ] TPCHSrv C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

19:39:15.0803 2980 TPCHSrv - ok

19:39:15.0835 2980 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\windows\System32\trkwks.dll

19:39:15.0835 2980 TrkWks - ok

19:39:15.0897 2980 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe

19:39:15.0913 2980 TrustedInstaller - ok

19:39:15.0944 2980 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\windows\system32\DRIVERS\tssecsrv.sys

19:39:15.0944 2980 tssecsrv - ok

19:39:15.0959 2980 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\windows\system32\drivers\tsusbflt.sys

19:39:15.0959 2980 TsUsbFlt - ok

19:39:15.0991 2980 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\windows\system32\drivers\TsUsbGD.sys

19:39:15.0991 2980 TsUsbGD - ok

19:39:16.0053 2980 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\windows\system32\DRIVERS\tunnel.sys

19:39:16.0053 2980 tunnel - ok

19:39:16.0131 2980 [ 550B567F9364D8F7684C3FB3EA665A72 ] TVALZ C:\windows\system32\DRIVERS\TVALZ_O.SYS

19:39:16.0131 2980 TVALZ - ok

19:39:16.0162 2980 [ 9C7191F4B2E49BFF47A6C1144B5923FA ] TVALZFL C:\windows\system32\DRIVERS\TVALZFL.sys

19:39:16.0162 2980 TVALZFL - ok

19:39:16.0193 2980 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\windows\system32\drivers\uagp35.sys

19:39:16.0193 2980 uagp35 - ok

19:39:16.0240 2980 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\windows\system32\DRIVERS\udfs.sys

19:39:16.0240 2980 udfs - ok

19:39:16.0271 2980 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\windows\system32\UI0Detect.exe

19:39:16.0271 2980 UI0Detect - ok

19:39:16.0303 2980 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\windows\system32\drivers\uliagpkx.sys

19:39:16.0303 2980 uliagpkx - ok

19:39:16.0334 2980 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\windows\system32\DRIVERS\umbus.sys

19:39:16.0334 2980 umbus - ok

19:39:16.0365 2980 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\windows\system32\drivers\umpass.sys

19:39:16.0365 2980 UmPass - ok

19:39:16.0474 2980 [ 374EBDA379A8F38E0CFC2211611E7167 ] UNS C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

19:39:16.0521 2980 UNS - ok

19:39:16.0537 2980 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\windows\System32\upnphost.dll

19:39:16.0552 2980 upnphost - ok

19:39:16.0583 2980 [ FB251567F41BC61988B26731DEC19E4B ] USBAAPL64 C:\windows\system32\Drivers\usbaapl64.sys

19:39:16.0583 2980 USBAAPL64 - ok

19:39:16.0630 2980 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\windows\system32\DRIVERS\usbccgp.sys

19:39:16.0630 2980 usbccgp - ok

19:39:16.0661 2980 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\windows\system32\drivers\usbcir.sys

19:39:16.0661 2980 usbcir - ok

19:39:16.0677 2980 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\windows\system32\DRIVERS\usbehci.sys

19:39:16.0677 2980 usbehci - ok

19:39:16.0708 2980 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\windows\system32\DRIVERS\usbhub.sys

19:39:16.0708 2980 usbhub - ok

19:39:16.0724 2980 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\windows\system32\drivers\usbohci.sys

19:39:16.0724 2980 usbohci - ok

19:39:16.0739 2980 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\windows\system32\drivers\usbprint.sys

19:39:16.0739 2980 usbprint - ok

19:39:16.0755 2980 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\windows\system32\DRIVERS\USBSTOR.SYS

19:39:16.0755 2980 USBSTOR - ok

19:39:16.0771 2980 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\windows\system32\drivers\usbuhci.sys

19:39:16.0771 2980 usbuhci - ok

19:39:16.0802 2980 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\windows\system32\Drivers\usbvideo.sys

19:39:16.0802 2980 usbvideo - ok

19:39:16.0833 2980 [ 70D05EE263568A742D14E1876DF80532 ] usb_rndisx C:\windows\system32\drivers\usb8023x.sys

19:39:16.0833 2980 usb_rndisx - ok

19:39:16.0864 2980 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\windows\System32\uxsms.dll

19:39:16.0864 2980 UxSms - ok

19:39:16.0880 2980 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\windows\system32\lsass.exe

19:39:16.0880 2980 VaultSvc - ok

19:39:16.0895 2980 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\windows\system32\drivers\vdrvroot.sys

19:39:16.0895 2980 vdrvroot - ok

19:39:16.0927 2980 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\windows\System32\vds.exe

19:39:16.0927 2980 vds - ok

19:39:16.0958 2980 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\windows\system32\DRIVERS\vgapnp.sys

19:39:16.0958 2980 vga - ok

19:39:16.0973 2980 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\windows\System32\drivers\vga.sys

19:39:16.0973 2980 VgaSave - ok

19:39:16.0989 2980 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\windows\system32\drivers\vhdmp.sys

19:39:16.0989 2980 vhdmp - ok

19:39:17.0020 2980 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\windows\system32\drivers\viaide.sys

19:39:17.0020 2980 viaide - ok

19:39:17.0051 2980 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\windows\system32\drivers\volmgr.sys

19:39:17.0051 2980 volmgr - ok

19:39:17.0083 2980 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\windows\system32\drivers\volmgrx.sys

19:39:17.0083 2980 volmgrx - ok

19:39:17.0098 2980 [ DF8126BD41180351A093A3AD2FC8903B ] volsnap C:\windows\system32\drivers\volsnap.sys

19:39:17.0098 2980 volsnap - ok

19:39:17.0129 2980 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\windows\system32\drivers\vsmraid.sys

19:39:17.0129 2980 vsmraid - ok

19:39:17.0192 2980 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\windows\system32\vssvc.exe

19:39:17.0207 2980 VSS - ok

19:39:17.0223 2980 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\windows\system32\DRIVERS\vwifibus.sys

19:39:17.0223 2980 vwifibus - ok

19:39:17.0254 2980 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\windows\system32\DRIVERS\vwififlt.sys

19:39:17.0254 2980 vwififlt - ok

19:39:17.0285 2980 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\windows\system32\DRIVERS\vwifimp.sys

19:39:17.0285 2980 vwifimp - ok

19:39:17.0332 2980 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\windows\system32\w32time.dll

19:39:17.0348 2980 W32Time - ok

19:39:17.0363 2980 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\windows\system32\drivers\wacompen.sys

19:39:17.0363 2980 WacomPen - ok

19:39:17.0395 2980 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\windows\system32\DRIVERS\wanarp.sys

19:39:17.0395 2980 WANARP - ok

19:39:17.0410 2980 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\windows\system32\DRIVERS\wanarp.sys

19:39:17.0410 2980 Wanarpv6 - ok

19:39:17.0457 2980 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\windows\system32\Wat\WatAdminSvc.exe

19:39:17.0473 2980 WatAdminSvc - ok

19:39:17.0551 2980 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\windows\system32\wbengine.exe

19:39:17.0566 2980 wbengine - ok

19:39:17.0566 2980 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\windows\System32\wbiosrvc.dll

19:39:17.0582 2980 WbioSrvc - ok

19:39:17.0582 2980 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\windows\System32\wcncsvc.dll

19:39:17.0597 2980 wcncsvc - ok

19:39:17.0613 2980 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll

19:39:17.0613 2980 WcsPlugInService - ok

19:39:17.0644 2980 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\windows\system32\drivers\wd.sys

19:39:17.0644 2980 Wd - ok

19:39:17.0691 2980 [ A3D04EBF5227886029B4532F20D026F7 ] WDC_SAM C:\windows\system32\DRIVERS\wdcsam64.sys

19:39:17.0691 2980 WDC_SAM - ok

19:39:17.0753 2980 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\windows\system32\drivers\Wdf01000.sys

19:39:17.0753 2980 Wdf01000 - ok

19:39:17.0785 2980 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\windows\system32\wdi.dll

19:39:17.0785 2980 WdiServiceHost - ok

19:39:17.0785 2980 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\windows\system32\wdi.dll

19:39:17.0800 2980 WdiSystemHost - ok

19:39:17.0831 2980 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\windows\System32\webclnt.dll

19:39:17.0831 2980 WebClient - ok

19:39:17.0863 2980 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\windows\system32\wecsvc.dll

19:39:17.0863 2980 Wecsvc - ok

19:39:17.0894 2980 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\windows\System32\wercplsupport.dll

19:39:17.0894 2980 wercplsupport - ok

19:39:17.0909 2980 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\windows\System32\WerSvc.dll

19:39:17.0925 2980 WerSvc - ok

19:39:17.0956 2980 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\windows\system32\DRIVERS\wfplwf.sys

19:39:17.0956 2980 WfpLwf - ok

19:39:18.0019 2980 [ 245EA6A2CFAE7B183EE9A14A4673B1F1 ] WiMAXAppSrv C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe

19:39:18.0034 2980 WiMAXAppSrv - ok

19:39:18.0065 2980 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\windows\system32\drivers\wimmount.sys

19:39:18.0065 2980 WIMMount - ok

19:39:18.0081 2980 WinDefend - ok

19:39:18.0097 2980 WinHttpAutoProxySvc - ok

19:39:18.0190 2980 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\windows\system32\wbem\WMIsvc.dll

19:39:18.0190 2980 Winmgmt - ok

19:39:18.0284 2980 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\windows\system32\WsmSvc.dll

19:39:18.0315 2980 WinRM - ok

19:39:18.0362 2980 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\windows\system32\DRIVERS\WinUsb.sys

19:39:18.0362 2980 WinUsb - ok

19:39:18.0409 2980 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\windows\System32\wlansvc.dll

19:39:18.0409 2980 Wlansvc - ok

19:39:18.0487 2980 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe

19:39:18.0487 2980 wlcrasvc - ok

19:39:18.0596 2980 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

19:39:18.0611 2980 wlidsvc - ok

19:39:18.0643 2980 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\windows\system32\drivers\wmiacpi.sys

19:39:18.0643 2980 WmiAcpi - ok

19:39:18.0674 2980 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\windows\system32\wbem\WmiApSrv.exe

19:39:18.0674 2980 wmiApSrv - ok

19:39:18.0705 2980 WMPNetworkSvc - ok

19:39:18.0752 2980 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\windows\System32\wpcsvc.dll

19:39:18.0752 2980 WPCSvc - ok

19:39:18.0783 2980 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\windows\system32\wpdbusenum.dll

19:39:18.0783 2980 WPDBusEnum - ok

19:39:18.0799 2980 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\windows\system32\drivers\ws2ifsl.sys

19:39:18.0799 2980 ws2ifsl - ok

19:39:18.0814 2980 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\windows\system32\wscsvc.dll

19:39:18.0814 2980 wscsvc - ok

19:39:18.0814 2980 WSearch - ok

19:39:18.0908 2980 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\windows\system32\wuaueng.dll

19:39:18.0923 2980 wuauserv - ok

19:39:18.0955 2980 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\windows\system32\drivers\WudfPf.sys

19:39:18.0955 2980 WudfPf - ok

19:39:19.0001 2980 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\windows\system32\DRIVERS\WUDFRd.sys

19:39:19.0001 2980 WUDFRd - ok

19:39:19.0017 2980 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\windows\System32\WUDFSvc.dll

19:39:19.0033 2980 wudfsvc - ok

19:39:19.0064 2980 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\windows\System32\wwansvc.dll

19:39:19.0064 2980 WwanSvc - ok

19:39:19.0173 2980 X6va008 - ok

19:39:19.0204 2980 X6va009 - ok

19:39:19.0267 2980 ================ Scan global ===============================

19:39:19.0282 2980 [ BA0CD8C393E8C9F83354106093832C7B ] C:\windows\system32\basesrv.dll

19:39:19.0329 2980 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\windows\system32\winsrv.dll

19:39:19.0345 2980 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\windows\system32\winsrv.dll

19:39:19.0376 2980 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\windows\system32\sxssrv.dll

19:39:19.0423 2980 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\windows\system32\services.exe

19:39:19.0423 2980 [Global] - ok

19:39:19.0423 2980 ================ Scan MBR ==================================

19:39:19.0454 2980 [ 5B5E648D12FCADC244C1EC30318E1EB9 ] \Device\Harddisk0\DR0

19:39:19.0703 2980 \Device\Harddisk0\DR0 - ok

19:39:19.0703 2980 ================ Scan VBR ==================================

19:39:19.0719 2980 [ 01DC71CFDF6F5BA7AFCA83B0124D6033 ] \Device\Harddisk0\DR0\Partition1

19:39:19.0719 2980 \Device\Harddisk0\DR0\Partition1 - ok

19:39:19.0719 2980 ============================================================

19:39:19.0719 2980 Scan finished

19:39:19.0719 2980 ============================================================

19:39:19.0719 4176 Detected object count: 0

19:39:19.0719 4176 Actual detected object count: 0

awsMBR

Run date: 2012-12-09 19:41:41

-----------------------------

19:41:41.803 OS Version: Windows x64 6.1.7601 Service Pack 1

19:41:41.803 Number of processors: 8 586 0x2A07

19:41:41.803 ComputerName: OWNER-PC UserName: Owner

19:41:43.659 Initialize success

19:42:34.057 AVAST engine defs: 12120902

19:42:39.080 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1

19:42:39.080 Disk 0 Vendor: TOSHIBA_ GT00 Size: 715404MB BusType: 3

19:42:39.143 Disk 0 MBR read successfully

19:42:39.143 Disk 0 MBR scan

19:42:39.158 Disk 0 Windows VISTA default MBR code

19:42:39.158 Disk 0 Partition 1 80 (A) 27 Hidden NTFS WinRE NTFS 1500 MB offset 2048

19:42:39.174 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 698469 MB offset 3074048

19:42:39.205 Disk 0 Partition 3 00 17 Hidd HPFS/NTFS NTFS 15434 MB offset 1433538560

19:42:39.252 Disk 0 scanning C:\windows\system32\drivers

19:42:52.777 Service scanning

19:43:33.025 Modules scanning

19:43:33.041 Disk 0 trace - called modules:

19:43:33.072 ntoskrnl.exe CLASSPNP.SYS disk.sys thpdrv.sys iaStor.sys hal.dll

19:43:33.602 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006326790]

19:43:33.602 3 CLASSPNP.SYS[fffff8800199343f] -> nt!IofCallDriver -> \Device\THPDRV1[0xfffffa8006320710]

19:43:33.618 5 thpdrv.sys[fffff88001d5c2b0] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8005e46050]

19:43:34.991 AVAST engine scan C:\windows

19:43:37.814 AVAST engine scan C:\windows\system32

19:46:26.061 AVAST engine scan C:\windows\system32\drivers

19:46:43.455 AVAST engine scan C:\Users\Owner

19:49:38.222 Disk 0 MBR has been saved successfully to "C:\Users\Owner\Desktop\MBR.dat"

19:49:38.237 The log file has been saved successfully to "C:\Users\Owner\Desktop\aswMBR.txt"

19:52:36.344 AVAST engine scan C:\ProgramData

19:54:34.937 Scan finished successfully

19:56:43.216 Disk 0 MBR has been saved successfully to "C:\Users\Owner\Desktop\MBR.dat"

19:56:43.216 The log file has been saved successfully to "C:\Users\Owner\Desktop\aswMBR.txt"

No problems were encountered

My computer does not seem to be experiencing any changes, everything is funtioning and running smoothly and the programs you have asked me to run seem to run just fine. As for the programs I usually use, I'm not sure how well they are doing because right now feels like the worst time to download an update of some sort at risk of a problem backtracking us back to the begining, but if you feel it will provide a more thorough evaluation than say so and I will be sure to give some of my programs a run in the future.

gringo_pr · December 10, 2012

now is a great time to check things out and let me know how they are doing

gringo

SilverMailman · December 10, 2012

ran some of the applications I usually run and there is about an increase of one to two increase in frames per second. So I guess my computer is doing better.

gringo_pr · December 10, 2012

Greetings

At this time I would like you to run this script for me and it is a good time to check out the computer to see if there is anything else that needs to be addressed.

:Run CFScript:

Open Notepad and copy/paste the text in the box into the window:

 ClearJavaCache::

Save it to your desktop as CFScript.txt

Refering to the picture above, drag CFScript.txt into ComboFix.exe

This will let ComboFix run again.

Restart if you have to.

Save the produced logfile to your desktop.

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Note 2: If you recieve an error "Illegal operation attempted on a registery key that has been marked for deletion." Please restart the computer

"information and logs"

In your next post I need the following

report from Combofix
let me know of any problems you may have had
How is the computer doing now after running the script?

Gringo

SilverMailman · December 10, 2012

Here is the log:

ComboFix 12-12-07.01 - Owner 12/09/2012 21:51:47.5.8 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.6051.3599 [GMT -8:00]

Running from: c:\users\Owner\Desktop\ComboFix.exe

Command switches used :: c:\users\Owner\Desktop\CFScript.txt.txt

AV: Norton AntiVirus *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}

SP: Norton AntiVirus *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

((((((((((((((((((((((((( Files Created from 2012-11-10 to 2012-12-10 )))))))))))))))))))))))))))))))

.

2012-12-10 05:56 . 2012-12-10 05:56 -------- d-----w- c:\users\Public\AppData\Local\temp

2012-12-10 05:56 . 2012-12-10 05:56 -------- d-----w- c:\users\Default\AppData\Local\temp