Trojan.Agent SvcHost.exe (Please Help)

[Woke20]

Have had this for long enough. MB detects it everytime but just comes back as I'm sure you already know. Already downloaded Rougue Killer and ListParts64 (have not ran yet waiting for instructions). Thanks in advance.

Attach.txt

DDS.txt

[Maniac]

Hello Woke20 and ! My name is Maniac and I will be glad to help you solve your malware problem.

Please note:

• If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
  
• I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
  
• Make sure you read all of the instructions and fixes thoroughly before continuing with them.
  
• Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
  
• Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
  
• Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.
  

BACKDOOR WARNING

One or more of the identified infections is known to use a backdoor.

This allows hackers to remotely control your computer, steal critical system information and download and execute files.

I would advice you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.

Though the infection has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:

Help: I Got Hacked. Now What Do I Do?

Help: I Got Hacked. Now What Do I Do? Part II

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

When Should I Format, How Should I Reinstall

We can still clean this machine but I can't guarantee that it will be 100% secure afterwards. Let me know what you decide to do. If you decide to go through with the cleanup, please let me know.

[Woke20]

Woh that Backdoor Warning deffinately scared me. I would still like to go through with the cleanup.

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Home Premium

Boot Device: \Device\HarddiskVolume2

Install Date: 1/11/2011 10:52:31 PM

System Uptime: 12/15/2012 5:10:50 PM (0 hours ago)

.

Motherboard: Sony Corporation | | VAIO

Processor: AMD Athlon II P340 Dual-Core Processor | N/A | 792/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 456 GiB total, 333.38 GiB free.

E: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP252: 11/22/2012 2:19:55 AM - Windows Update

RP253: 11/23/2012 3:00:19 AM - Windows Update

RP254: 11/30/2012 1:28:28 AM - Windows Update

RP255: 12/1/2012 8:02:12 PM - Windows Update

RP256: 12/1/2012 10:24:41 PM - Windows Update

RP257: 12/3/2012 7:30:53 AM - Windows Update

RP258: 12/4/2012 12:54:08 AM - Windows Update

RP259: 12/5/2012 5:33:11 PM - Windows Update

RP260: 12/6/2012 3:00:32 AM - Windows Update

RP261: 12/7/2012 1:47:45 AM - Windows Update

RP262: 12/9/2012 10:05:41 PM - Windows Update

RP263: 12/12/2012 1:16:06 AM - Windows Update

RP264: 12/12/2012 3:00:16 AM - Windows Update

RP265: 12/13/2012 3:00:26 AM - Windows Update

RP266: 12/14/2012 3:08:02 AM - Windows Update

RP267: 12/14/2012 4:28:56 AM - Windows Update

RP268: 12/15/2012 3:00:17 AM - Windows Update

RP269: 12/15/2012 3:55:06 AM - Windows Update

RP270: 12/15/2012 1:07:23 PM - Restore Operation

RP271: 12/15/2012 1:18:37 PM - Windows Update

RP272: 12/15/2012 4:41:44 PM - Windows Update

.

==== Installed Programs ======================

.

µTorrent

AccuWeather.com Cirrus

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader 9.4.4

Alps Pointing-device for VAIO

AMD USB Filter Driver

Antares Autotune VST v5.09

Apple Application Support

Apple Mobile Device Support

Apple Software Update

Application Manager for VAIO

ArcSoft WebCam Companion 3

ASIO4ALL

ATI Catalyst Install Manager

Avira Free Antivirus

BlackBerry Device Manager 7.0

Bonjour

Catalyst Control Center - Branding

Catalyst Control Center Core Implementation

Catalyst Control Center Graphics Full Existing

Catalyst Control Center Graphics Full New

Catalyst Control Center Graphics Light

Catalyst Control Center Graphics Previews Common

Catalyst Control Center Graphics Previews Vista

Catalyst Control Center InstallProxy

Catalyst Control Center Localization All

ccc-core-static

ccc-utility64

CCC Help Chinese Standard

CCC Help Chinese Traditional

CCC Help Czech

CCC Help Danish

CCC Help Dutch

CCC Help English

CCC Help Finnish

CCC Help French

CCC Help German

CCC Help Greek

CCC Help Hungarian

CCC Help Italian

CCC Help Japanese

CCC Help Korean

CCC Help Norwegian

CCC Help Polish

CCC Help Portuguese

CCC Help Russian

CCC Help Spanish

CCC Help Swedish

CCC Help Thai

CCC Help Turkish

Click to Disc MergeModules x64

Clip Extractor 3.5

Clip Extractor Toolbar

Coupon Printer for Windows

D3DX10

DivX Setup

EA SPORTS Game Face Browser Plugin 1.8.0.0

eLicenser Control

Evernote

FL Studio 9

FlipShare

Google Chrome

Google Toolbar for Internet Explorer

Google Update Helper

Hardcore

HP Deskjet 1000 J110 series Basic Device Software

HP Deskjet 1000 J110 series Help

HP Deskjet 1000 J110 series Product Improvement Study

HP Photo Creations

HP Update

IL Download Manager

iTunes

Java Auto Updater

Java 6 Update 20

Java 6 Update 20 (64-bit)

Junk Mail filter update

Malwarebytes Anti-Malware version 1.65.0.1400

McAfee SiteAdvisor

Media Gallery

Media Gallery MergeModules x64

Microsoft .NET Framework 4 Client Profile

Microsoft Application Error Reporting

Microsoft Office 2010

Microsoft Office Click-to-Run 2010

Microsoft Office Starter 2010 - English

Microsoft Office XP Professional with FrontPage

Microsoft Primary Interoperability Assemblies 2005

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft SQL Server Compact 3.5 SP2 ENU

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Mozilla Firefox 13.0.1 (x86 en-US)

Mozilla Maintenance Service

MSI_SPF_x64

MSVCRT

MSVCRT Redists

MSVCRT_amd64

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Oasis2Service

OOBE

PlayReady PC Runtime amd64

PMB

PMB VAIO Edition Guide

PMB VAIO Edition plug-in (Click to Disc)

PMB VAIO Edition plug-in (VAIO Image Optimizer)

PMB VAIO Edition plug-in (VAIO Movie Story)

PoiZone

QuickTime

Realtek HDMI Audio Driver for ATI

Realtek High Definition Audio Driver

Realtek USB 2.0 Card Reader

Remote Keyboard

Sawer

Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Setting Utility Series

SmartWi Connection Utility

Sony Home Network Library

Steinberg Cubase LE 5

Steinberg HALionOne

Steinberg HALionOne Essential Set

Tango

Toxic Biohazard

Unity Web Player

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

uTorrentControl2 Toolbar

VAIO - Remote Keyboard

VAIO Care

VAIO Content Monitoring Settings

VAIO Control Center

VAIO Data Restore Tool

VAIO DVD Menu Data

VAIO Entertainment Platform

VAIO Event Service

VAIO Gate

VAIO Gate Default

VAIO Hardware Diagnostics

VAIO Help and Support

VAIO Manual

VAIO Media plus

VAIO Media plus Opening Movie

VAIO Messenger

VAIO Movie Story MergeModules x64

VAIO Movie Story Template Data

VAIO Original Function Settings

VAIO Power Management

VAIO Sample Contents

VAIO Survey

VAIO Transfer Support

VAIO Update

VAIO Update Merge Module x64

VAIO Wallpaper Contents

VC80CRTRedist - 8.0.50727.4053

Vegas Pro 11.0

VLC media player 2.0.1

VMp MergeModule x64

WIDCOMM Bluetooth Software

Windows Driver Package - Broadcom Bluetooth (09/09/2009 6.2.0.9405)

Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800)

Windows Live Communications Platform

Windows Live Essentials

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Language Selector

Windows Live Mail

Windows Live Messenger

Windows Live MIME IFilter

Windows Live Movie Maker

Windows Live Photo Common

Windows Live Photo Gallery

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live Sync

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

WinRAR archiver

.

==== Event Viewer Messages From Past Week ========

.

12/15/2012 5:12:47 PM, Error: Service Control Manager [7024] - The HomeGroup Listener service terminated with service-specific error %%-2147023143.

12/15/2012 5:11:55 PM, Error: Service Control Manager [7003] - The IPsec Policy Agent service depends the following service: BFE. This service might not be installed.

12/15/2012 5:11:42 PM, Error: Service Control Manager [7003] - The IKE and AuthIP IPsec Keying Modules service depends the following service: BFE. This service might not be installed.

12/15/2012 5:11:25 PM, Error: Service Control Manager [7023] - The Computer Browser service terminated with the following error: The specified service does not exist as an installed service.

12/15/2012 4:46:06 PM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The dependency service or group failed to start.

12/15/2012 4:44:53 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {9E175B6D-F52A-11D8-B9A5-505054503030}

12/15/2012 4:44:53 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

12/15/2012 4:44:40 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

12/15/2012 4:44:29 PM, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1084" attempting to start the service ShellHWDetection with arguments "" in order to run the server: {DD522ACC-F821-461A-A407-50B198B896DC}

12/15/2012 4:44:15 PM, Error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: avipbb avkmgr discache spldr Wanarpv6

12/15/2012 4:44:15 PM, Error: Service Control Manager [7001] - The Client Virtualization Handler service depends on the Application Virtualization Client service which failed to start because of the following error: The dependency service or group failed to start.

12/15/2012 4:44:14 PM, Error: Service Control Manager [7001] - The Computer Browser service depends on the Server service which failed to start because of the following error: The dependency service or group failed to start.

12/15/2012 4:42:18 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Windows 7 for x64-based Systems (KB2676562).

12/15/2012 4:42:17 PM, Error: Microsoft-Windows-WindowsUpdateClient [20] - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Windows 7 for x64-based Systems (KB2724197).

12/15/2012 4:12:46 PM, Error: Service Control Manager [7034] - The Oasis2Service service terminated unexpectedly. It has done this 1 time(s).

12/15/2012 12:26:30 PM, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x0000000a (0x0000000000100041, 0x0000000000000002, 0x0000000000000001, 0xfffff800038a5e38). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 121512-29452-01.

12/14/2012 3:03:23 AM, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Microsoft .NET Framework NGEN v4.0.30319_X86 service to connect.

12/10/2012 12:16:27 AM, Error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Apple Mobile Device service, but this action failed with the following error: An instance of the service is already running.

12/10/2012 12:15:27 AM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

12/10/2012 12:15:03 AM, Error: Service Control Manager [7031] - The Apple Mobile Device service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

.

==== End Of File ===========================

DDS (Ver_2012-11-20.01) - NTFS_AMD64

Internet Explorer: 9.0.8112.16457

Run by Ariel at 17:30:04 on 2012-12-15

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3835.2461 [GMT -5:00]

.

AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}

FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\atieclxx.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe

C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler.exe

c:\PROGRA~2\mcafee\SITEAD~1\McSACore.exe

C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

C:\Windows\system32\rundll32.exe

C:\Windows\system32\rundll32.exe

C:\Windows\SysWOW64\rundll32.exe

C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler64.exe

C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe

C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe

C:\Windows\SysWOW64\DllHost.exe

C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe

C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe

-netsvcs

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe

C:\Program Files\Sony\VAIO Update Common\VUAgent.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files (x86)\DDNi\Oasis2Service\Oasis2Service.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files\Sony\VAIO Care\VCPerfService.exe

C:\Program Files (x86)\DDNi\Oasis\VAIO Messenger.exe

C:\Program Files\Sony\VAIO Care\listener.exe

C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService.exe

C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe

C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

C:\Program Files\Sony\VAIO Care\VCsystray.exe

C:\Program Files\Sony\VAIO Care\VCService.exe

C:\Program Files\Sony\VAIO Care\VCAgent.exe

C:\Windows\System32\vds.exe

C:\Windows\servicing\TrustedInstaller.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.facebook.com/home.php?ref=hp

uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT

mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT

mDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT

uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

uURLSearchHooks: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - <orphaned>

uURLSearchHooks: {ba14329e-9550-4989-b3f2-9732e92d17cc} - <orphaned>

uURLSearchHooks: uTorrentControl2 Toolbar: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTo0.dll

mURLSearchHooks: uTorrentControl2 Toolbar: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTo0.dll

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: uTorrentControl2 Toolbar: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTo0.dll

BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

BHO: Somoto Toolbar: {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} - C:\Program Files (x86)\somototoolbar\vmntemplateX.dll

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

TB: uTorrentControl2 Toolbar: {687578B9-7132-4A7A-80E4-30EE31099E03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTo0.dll

TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

TB: Somoto Toolbar: {c3721e85-f0ac-4b7e-ae4c-3e738011dc9d} - C:\Program Files (x86)\somototoolbar\vmntemplateX.dll

TB: uTorrentControl2 Toolbar: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTo0.dll

TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

uRun: [{04469BE6-4865-472C-8631-26BC266EE322}] rundll32.exe ",DllRegisterServerW

mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min

mRun: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe

mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

dRunOnce: [DeleteEngineAfterUpdate] reg DELETE HKCU\Software\AppDataLow\Software\ConduitEngine /f

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-Explorer: NoActiveDesktopChanges = dword:1

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~3\Office10\EXCEL.EXE/3000

IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_70C5B381380DB17F.dll/cmsidewiki.html

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

IE: {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - {BC0E0A5D-AB5A-4fa4-A5FA-280E1D58EEEE} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll

DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} - hxxp://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab

DPF: {4A85DBE0-BFB2-4119-8401-186A7C6EB653} - hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/Default/mjss/MJSS.cab109791.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

TCP: NameServer = 65.32.5.111 65.32.5.112

TCP: Interfaces\{37026458-AE80-4DB9-B16D-424E3595298C} : DHCPNameServer = 65.32.5.111 65.32.5.112

TCP: Interfaces\{37026458-AE80-4DB9-B16D-424E3595298C}\2375942554233333 : DHCPNameServer = 192.168.1.254

TCP: Interfaces\{37026458-AE80-4DB9-B16D-424E3595298C}\C696E6B6379737 : DHCPNameServer = 75.75.75.75 75.75.76.76

TCP: Interfaces\{37026458-AE80-4DB9-B16D-424E3595298C}\E4544574541425 : DHCPNameServer = 192.168.0.1

Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

SSODL: WebCheck - <orphaned>

x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

x64-BHO: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

x64-BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

x64-TB: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

x64-Run: [MRT] "C:\Windows\System32\MRT.exe" /R

x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

x64-DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

x64-Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

x64-Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll

x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

x64-SSODL: WebCheck - <orphaned>

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\

FF - prefs.js: browser.search.selectedEngine - Search The Web

FF - component: C:\Program Files (x86)\McAfee\SiteAdvisor\components\McFFPlg.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko10.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko19.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko5.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko6.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko7.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko8.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko9.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko19.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko5.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko6.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko7.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko8.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko9.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}\components\dtTransparency.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}\components\dtTransparency3.5.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}\components\dtTransparency3.6.dll

FF - plugin: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\McAfee\SiteAdvisor\NPMcFFPlg32.dll

FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll

.

---- FIREFOX POLICIES ----

FF - user.js: network.cookie.cookieBehavior - 0

FF - user.js: privacy.clearOnShutdown.cookies - false

FF - user.js: security.warn_viewing_mixed - false

FF - user.js: security.warn_viewing_mixed.show_once - false

FF - user.js: security.warn_submit_insecure - false

FF - user.js: security.warn_submit_insecure.show_once - false

.

.

============= SERVICES / DRIVERS ===============

.

R0 amd_sata;amd_sata;C:\Windows\System32\drivers\amd_sata.sys [2010-7-21 73856]

R0 amd_xata;amd_xata;C:\Windows\System32\drivers\amd_xata.sys [2010-7-21 28800]

R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2010-8-10 55856]

R1 avkmgr;avkmgr;C:\Windows\System32\drivers\avkmgr.sys [2012-1-18 27760]

R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2010-7-7 202752]

R2 AntiVirSchedulerService;Avira Scheduler;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2012-1-18 86224]

R2 AntiVirService;Avira Realtime Protection;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2012-1-18 110032]

R2 avgntflt;avgntflt;C:\Windows\System32\drivers\avgntflt.sys [2012-1-18 98848]

R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2012-1-4 822624]

R2 FlipShareServer;FlipShare Server;C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe [2010-12-15 1085440]

R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-12-15 399432]

R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-9-12 676936]

R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;C:\PROGRA~2\mcafee\SITEAD~1\McSACore.exe [2012-12-14 103440]

R2 Oasis2Service;Oasis2Service;C:\Program Files (x86)\DDNi\Oasis2Service\Oasis2Service.exe [2012-11-13 60416]

R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2011-10-1 25928]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2010-8-10 242720]

R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2010-4-7 346144]

R3 SFEP;Sony Firmware Extension Parser;C:\Windows\System32\drivers\SFEP.sys [2010-4-8 12032]

R3 Sftfs;Sftfs;C:\Windows\System32\drivers\Sftfslh.sys [2011-10-1 764264]

R3 Sftplay;Sftplay;C:\Windows\System32\drivers\Sftplaylh.sys [2011-10-1 268648]

R3 Sftredir;Sftredir;C:\Windows\System32\drivers\Sftredirlh.sys [2011-10-1 25960]

R3 Sftvol;Sftvol;C:\Windows\System32\drivers\Sftvollh.sys [2011-10-1 22376]

R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2010-8-10 38456]

S2 0030791355472485mcinstcleanup;McAfee Application Installer Cleanup (0030791355472485);C:\Windows\TEMP\003079~1.EXE -cleanup -nolog --> C:\Windows\TEMP\003079~1.EXE -cleanup -nolog [?]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-7-2 59392]

S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 52736]

S3 WDC_SAM;WD SCSI Pass Thru driver;C:\Windows\System32\drivers\wdcsam64.sys [2008-5-6 14464]

.

=============== Created Last 30 ================

.

2012-12-15 20:55:23 20480 ----a-w- C:\Windows\svchost.exe

2012-12-15 18:39:17 -------- d-----w- C:\Program Files\iPod

2012-12-15 18:39:16 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2012-12-15 18:39:16 -------- d-----w- C:\Program Files\iTunes

2012-12-15 18:39:16 -------- d-----w- C:\Program Files (x86)\iTunes

2012-12-13 07:42:29 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

2012-12-13 07:41:40 478208 ----a-w- C:\Windows\System32\dpnet.dll

2012-12-13 07:41:40 376832 ----a-w- C:\Windows\SysWow64\dpnet.dll

2012-12-04 02:09:45 -------- d-----w- C:\Program Files (x86)\Tango

2012-12-04 02:09:34 -------- d-----w- C:\Users\Ariel\AppData\Local\tango

2012-11-17 06:04:30 -------- dc-h--w- C:\ProgramData\{54907AB1-7CB5-448D-8FED-78973B1D2830}

.

==================== Find3M ====================

.

2012-12-15 18:19:19 73656 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2012-12-15 18:19:19 697272 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

2012-11-22 03:26:40 3149824 ----a-w- C:\Windows\System32\win32k.sys

2012-11-14 06:11:44 2312704 ----a-w- C:\Windows\System32\jscript9.dll

2012-11-14 06:04:11 1392128 ----a-w- C:\Windows\System32\wininet.dll

2012-11-14 06:02:49 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl

2012-11-14 05:57:46 599040 ----a-w- C:\Windows\System32\vbscript.dll

2012-11-14 05:57:35 173056 ----a-w- C:\Windows\System32\ieUnatt.exe

2012-11-14 05:52:40 2382848 ----a-w- C:\Windows\System32\mshtml.tlb

2012-11-14 02:09:22 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll

2012-11-14 01:58:15 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl

2012-11-14 01:57:37 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll

2012-11-14 01:49:25 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe

2012-11-14 01:48:27 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll

2012-11-14 01:44:42 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb

2012-11-09 05:45:09 2048 ----a-w- C:\Windows\System32\tzres.dll

2012-11-05 21:35:16 46080 ----a-w- C:\Windows\System32\atmlib.dll

2012-11-05 20:41:32 367616 ----a-w- C:\Windows\System32\atmfd.dll

2012-11-05 20:32:16 295424 ----a-w- C:\Windows\SysWow64\atmfd.dll

2012-11-05 20:32:09 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll

2012-10-25 08:12:26 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx

2012-10-25 08:12:26 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts

2012-10-16 08:38:37 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll

2012-10-16 08:38:34 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll

2012-10-16 07:39:52 561664 ----a-w- C:\Windows\apppatch\AcLayers.dll

2012-10-09 18:17:13 55296 ----a-w- C:\Windows\System32\dhcpcsvc6.dll

2012-10-09 18:17:13 226816 ----a-w- C:\Windows\System32\dhcpcore6.dll

2012-10-09 17:40:31 44032 ----a-w- C:\Windows\SysWow64\dhcpcsvc6.dll

2012-10-09 17:40:31 193536 ----a-w- C:\Windows\SysWow64\dhcpcore6.dll

2012-10-04 17:46:16 362496 ----a-w- C:\Windows\System32\wow64win.dll

2012-10-04 17:46:15 243200 ----a-w- C:\Windows\System32\wow64.dll

2012-10-04 17:46:15 13312 ----a-w- C:\Windows\System32\wow64cpu.dll

2012-10-04 17:45:55 215040 ----a-w- C:\Windows\System32\winsrv.dll

2012-10-04 17:43:28 16384 ----a-w- C:\Windows\System32\ntvdm64.dll

2012-10-04 17:41:16 424960 ----a-w- C:\Windows\System32\KernelBase.dll

2012-10-04 16:47:41 5120 ----a-w- C:\Windows\SysWow64\wow32.dll

2012-10-04 16:47:41 274944 ----a-w- C:\Windows\SysWow64\KernelBase.dll

2012-10-04 15:21:55 338432 ----a-w- C:\Windows\System32\conhost.exe

2012-10-04 14:46:46 7680 ----a-w- C:\Windows\SysWow64\instnm.exe

2012-10-04 14:46:46 25600 ----a-w- C:\Windows\SysWow64\setup16.exe

2012-10-04 14:46:44 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll

2012-10-04 14:46:43 2048 ----a-w- C:\Windows\SysWow64\user.exe

2012-10-04 14:41:50 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

2012-10-04 14:41:50 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

2012-10-04 14:41:50 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

2012-10-04 14:41:50 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

2012-10-03 17:56:54 1914248 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2012-10-03 17:44:21 70656 ----a-w- C:\Windows\System32\nlaapi.dll

2012-10-03 17:44:21 303104 ----a-w- C:\Windows\System32\nlasvc.dll

2012-10-03 17:44:17 246272 ----a-w- C:\Windows\System32\netcorehc.dll

2012-10-03 17:44:17 18944 ----a-w- C:\Windows\System32\netevent.dll

2012-10-03 17:44:16 216576 ----a-w- C:\Windows\System32\ncsi.dll

2012-10-03 17:42:16 569344 ----a-w- C:\Windows\System32\iphlpsvc.dll

2012-10-03 16:42:24 18944 ----a-w- C:\Windows\SysWow64\netevent.dll

2012-10-03 16:42:24 175104 ----a-w- C:\Windows\SysWow64\netcorehc.dll

2012-10-03 16:42:23 156672 ----a-w- C:\Windows\SysWow64\ncsi.dll

2012-10-03 16:07:26 45568 ----a-w- C:\Windows\System32\drivers\tcpipreg.sys

2012-09-25 22:47:43 78336 ----a-w- C:\Windows\SysWow64\synceng.dll

2012-09-25 22:46:17 95744 ----a-w- C:\Windows\System32\synceng.dll

.

============= FINISH: 17:33:09.50 ===============

[Maniac]

Looks like you already have installed Avira, but there are some active McAfee remnants.

Step 1

Please uninstall the following applications:

µTorrent

uTorrentControl2 Toolbar

Coupon Printer for Windows

Clip Extractor Toolbar

Step 2

Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
  
• Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
  
• The tool will open and start scanning your system.
  
• Please be patient as this can take a while to complete depending on your system's specifications.
  
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  
• Post the contents of JRT.txt into your next message.
  

Step 3

Follow the instructions here to clean McAfee:

http://service.mcafee.com/FAQDocument.aspx?id=TS101331

Step 4

Please download AppRemover and save it on your desktop. Start the application and click Next and then select Clean Up a Failed Uninstall. Wait until AppRemover finishes scanning the computer and determines which security applications have elements installed. For some applications, AppRemover requires that you restart your computer to finish the uninstallation. If prompted, restart your computer before exiting AppRemover.

Step 5

Please download Malwarebytes Anti-Rootkit from here.

1. Unzip the contents to a folder in a convenient location.
   
2. Open the folder where the contents were unzipped and run mbar.exe ( right click and select Run as adminsistrator for Vista and Windows 7)
   
3. Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
   
4. Click on the Cleanup button to remove any threats and reboot if prompted to do so.
   
5. Wait while the system shuts down and the cleanup process is performed.
   
6. Please post the two logs produced.
   

In your next reply, post the following log files:

• Malwarebytes Anti-Rootkit log
  
• Junkware Removal Tool log
  
• a new fresh DDS log

[Woke20]

I'm having some trouble with step 3 as I don't recall making an account with Mcafee, the service was offered to me by my internet service. Any suggestions?

[Woke20]

I did however go into add/remove programs and deleted Mcafee site advisor which was the only McAfee program I found.

[Woke20]

Please disregard my last posts I was able to locate MCPR.

[Woke20]

Please disregard my last posts I was able to locate MCPR.

[Woke20]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 4.1.8 (12.17.2012:1)

OS: Windows 7 Home Premium x64

Ran by Ariel on Mon 12/17/2012 at 22:32:12.22

Blog: http://thisisudax.blogspot.com

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\internet explorer\toolbar\webbrowser\\{30f9b915-b755-4826-820b-08fba6bd249d}

Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\internet explorer\toolbar\webbrowser\\{687578b9-7132-4a7a-80e4-30ee31099e03}

Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\internet explorer\urlsearchhooks\\{687578b9-7132-4a7a-80e4-30ee31099e03}

Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\internet explorer\toolbar\webbrowser\\{ba14329e-9550-4989-b3f2-9732e92d17cc}

Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\internet explorer\urlsearchhooks\\{ba14329e-9550-4989-b3f2-9732e92d17cc}

Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\internet explorer\toolbar\webbrowser\\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}

Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\internet explorer\urlsearchhooks\\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}

Successfully deleted: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\toolbar\\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}

~~~ Registry Keys

Successfully deleted: [Registry Key] hkey_current_user\software\conduit

Successfully deleted: [Registry Key] hkey_local_machine\software\conduit

Successfully deleted: [Registry Key] hkey_current_user\software\zugo

Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\software\conduit

Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\software\conduitengine

Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\software\pricegong

Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\software\smartbar

Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\tbcommonutils.dll

Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\tbhelper.exe

Successfully deleted: [Registry Key] hkey_local_machine\software\classes\conduit.engine

Successfully deleted: [Registry Key] hkey_local_machine\software\classes\tbcommonutils.commonutils

Successfully deleted: [Registry Key] hkey_local_machine\software\classes\tbcommonutils.commonutils.1

Successfully deleted: [Registry Key] hkey_local_machine\software\classes\tbhelper.tbdownloadmanager

Successfully deleted: [Registry Key] hkey_local_machine\software\classes\tbhelper.tbdownloadmanager.1

Successfully deleted: [Registry Key] hkey_local_machine\software\classes\tbhelper.tbpropertymanager

Successfully deleted: [Registry Key] hkey_local_machine\software\classes\tbhelper.tbpropertymanager.1

Successfully deleted: [Registry Key] hkey_local_machine\software\classes\tbhelper.tbrequest

Successfully deleted: [Registry Key] hkey_local_machine\software\classes\tbhelper.tbrequest.1

Successfully deleted: [Registry Key] hkey_local_machine\software\classes\tbhelper.toolbarhelper

Successfully deleted: [Registry Key] hkey_local_machine\software\classes\tbhelper.toolbarhelper.1

Successfully deleted: [Registry Key-Heur] HKEY_LOCAL_MACHINE\software\classes\Toolbar.CT2504091

Successfully deleted: [Registry Key-Heur] HKEY_LOCAL_MACHINE\software\classes\Toolbar.CT2786678

Successfully deleted: [Registry Key-Heur] HKEY_LOCAL_MACHINE\software\classes\Toolbar.CT3072253

Successfully deleted: [Registry Key] hkey_classes_root\clsid\{3c471948-f874-49f5-b338-4f214a2ee0b1}

Successfully deleted: [Registry Key] hkey_classes_root\clsid\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}

Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}

~~~ Files

Failed to delete [File] C:\Windows\svchost.exe [Check for TDL4 Rootkit!]

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\partner"

Successfully deleted: [Folder] "C:\ProgramData\tarma installer"

Successfully deleted: [Folder] "C:\Users\Ariel\appdata\local\conduit"

Successfully deleted: [Folder] "C:\Users\Ariel\appdata\locallow\conduit"

Successfully deleted: [Folder] "C:\Users\Ariel\appdata\locallow\conduitengine"

Successfully deleted: [Folder] "C:\Users\Ariel\appdata\locallow\pricegong"

Successfully deleted: [Folder] "C:\Users\Ariel\appdata\locallow\toolbar4"

Successfully deleted: [Folder] "C:\Program Files (x86)\conduit"

~~~ FireFox

Successfully deleted: [File] "C:\Program Files (x86)\Mozilla Firefox\searchplugins\search.xml"

Successfully deleted: [File] C:\Users\Ariel\AppData\Roaming\mozilla\firefox\profiles\hsp88b6q.default\user.js

Successfully deleted: [File] C:\Users\Ariel\AppData\Roaming\mozilla\firefox\profiles\hsp88b6q.default\extensions\icfrfnrugj@icfrfnrugj.org.xpi [Tracur]

Successfully deleted: [Folder] C:\Users\Ariel\AppData\Roaming\mozilla\firefox\profiles\hsp88b6q.default\conduitcommon

Successfully deleted: [Folder] C:\Users\Ariel\AppData\Roaming\mozilla\firefox\profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}

Successfully deleted: [Folder] C:\Users\Ariel\AppData\Roaming\mozilla\firefox\profiles\hsp88b6q.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}

Successfully deleted the following from C:\Users\Ariel\AppData\Roaming\mozilla\firefox\profiles\hsp88b6q.default\prefs.js

user_pref("CT2504091..clientLogIsEnabled", false);

user_pref("CT2504091..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");

user_pref("CT2504091..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");

user_pref("CT2504091.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);

user_pref("CT2504091.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");

user_pref("CT2504091.AppTrackingLastCheckTime", "Wed Jun 20 2012 15:25:30 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.BrowserCompStateIsOpen_129707804829376918", true);

user_pref("CT2504091.CTID", "CT2504091");

user_pref("CT2504091.CurrentServerDate", "20-6-2012");

user_pref("CT2504091.DSInstall", false);

user_pref("CT2504091.DialogsAlignMode", "LTR");

user_pref("CT2504091.DialogsGetterLastCheckTime", "Wed Jun 20 2012 15:25:18 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.DownloadReferralCookieData", "");

user_pref("CT2504091.EMailNotifierPollDate", "Wed Jun 20 2012 15:30:20 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.FeedLastCount129079840422964131", 11);

user_pref("CT2504091.FeedPollDate128891351169457140", "Wed Jun 20 2012 15:25:23 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.FeedPollDate129079840422964131", "Wed Jun 20 2012 15:25:23 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.FeedTTL128891351169457140", 40);

user_pref("CT2504091.FirstServerDate", "5-1-2012");

user_pref("CT2504091.FirstTime", true);

user_pref("CT2504091.FirstTimeFF3", true);

user_pref("CT2504091.FixPageNotFoundErrors", true);

user_pref("CT2504091.GroupingServerCheckInterval", 1440);

user_pref("CT2504091.GroupingServiceUrl", "http://grouping.services.conduit.com/");

user_pref("CT2504091.HPInstall", false);

user_pref("CT2504091.HasUserGlobalKeys", true);

user_pref("CT2504091.HomePageProtectorEnabled", false);

user_pref("CT2504091.HomepageBeforeUnload", "resource:/browserconfig.properties");

user_pref("CT2504091.Initialize", true);

user_pref("CT2504091.InitializeCommonPrefs", true);

user_pref("CT2504091.InstallationAndCookieDataSentCount", 3);

user_pref("CT2504091.InstallationId", "ConduitNSISIntegration");

user_pref("CT2504091.InstallationType", "ConduitXPEIntegration");

user_pref("CT2504091.InstalledDate", "Thu Jan 05 2012 01:35:19 GMT-0500 (Eastern Standard Time)");

user_pref("CT2504091.IsAlertDBUpdated", true);

user_pref("CT2504091.IsGrouping", false);

user_pref("CT2504091.IsInitSetupIni", true);

user_pref("CT2504091.IsMulticommunity", false);

user_pref("CT2504091.IsOpenThankYouPage", false);

user_pref("CT2504091.IsOpenUninstallPage", false);

user_pref("CT2504091.LanguagePackLastCheckTime", "Wed Jun 20 2012 15:25:15 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.LanguagePackReloadIntervalMM", 1440);

user_pref("CT2504091.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");

user_pref("CT2504091.LastLogin_3.8.1.0", "Wed Jun 20 2012 15:25:15 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.LatestVersion", "3.13.0.6");

user_pref("CT2504091.Locale", "en-us");

user_pref("CT2504091.MCDetectTooltipHeight", "83");

user_pref("CT2504091.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

user_pref("CT2504091.MCDetectTooltipWidth", "295");

user_pref("CT2504091.MyStuffEnabledAtInstallation", true);

user_pref("CT2504091.OriginalFirstVersion", "3.8.1.0");

user_pref("CT2504091.SearchCaption", "Web Search");

user_pref("CT2504091.SearchEngineBeforeUnload", "Search The Web");

user_pref("CT2504091.SearchFromAddressBarIsInit", true);

user_pref("CT2504091.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=2&q=");

user_pref("CT2504091.SearchInNewTabEnabled", true);

user_pref("CT2504091.SearchInNewTabIntervalMM", 1440);

user_pref("CT2504091.SearchInNewTabLastCheckTime", "Wed Jun 20 2012 15:25:14 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");

user_pref("CT2504091.SearchInNewTabUsageUrl", "http://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");

user_pref("CT2504091.SearchProtectorEnabled", false);

user_pref("CT2504091.SearchProtectorToolbarDisabled", false);

user_pref("CT2504091.SendProtectorDataViaLogin", true);

user_pref("CT2504091.ServiceMapLastCheckTime", "Wed Jun 20 2012 15:25:09 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.SettingsLastCheckTime", "Wed Jun 20 2012 15:25:08 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.SettingsLastUpdate", "1339926569");

user_pref("CT2504091.TBHomePageUrl", "http://search.conduit.com/?ctid=CT2504091&SearchSource=13");

user_pref("CT2504091.ThirdPartyComponentsInterval", 504);

user_pref("CT2504091.ThirdPartyComponentsLastCheck", "Wed Jun 20 2012 15:25:08 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.ThirdPartyComponentsLastUpdate", "1331805997");

user_pref("CT2504091.ToolbarShrinkedFromSetup", false);

user_pref("CT2504091.TrusteLinkUrl", "http://trust.conduit.com/CT2504091");

user_pref("CT2504091.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com

user_pref("CT2504091.UserID", "UN08589313850243641");

user_pref("CT2504091.alertChannelId", "897164");

user_pref("CT2504091.backendstorage.cbcountry_000", "5553");

user_pref("CT2504091.backendstorage.cbcountry_001", "5553");

user_pref("CT2504091.backendstorage.cbfirsttime", "5475652041707220323420323031322031373A32343A303420474D542D3034303020284561737465726E204461796C696768742054696D6529");

user_pref("CT2504091.backendstorage.shoppingapp.gk.exipres", "4D6F6E204A756E20323520323031322031353A32353A323420474D542D3034303020284561737465726E204461796C696768742054696D652

user_pref("CT2504091.backendstorage.shoppingapp.gk.geolocation", "756E6974656420737461746573");

user_pref("CT2504091.backendstorage.url_history0001", "687474703A2F2F7777772E73706F72747368756E7465722E65752F73706F7274732F626F78696E672D7777652D7566632E68746D6C3A3A3A636C6963

user_pref("CT2504091.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlP

user_pref("CT2504091.globalFirstTimeInfoLastCheckTime", "Wed Jun 20 2012 15:25:19 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.homepageProtectorEnableByLogin", true);

user_pref("CT2504091.initDone", true);

user_pref("CT2504091.isAppTrackingManagerOn", true);

user_pref("CT2504091.myStuffEnabled", true);

user_pref("CT2504091.myStuffPublihserMinWidth", 400);

user_pref("CT2504091.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");

user_pref("CT2504091.myStuffServiceIntervalMM", 1440);

user_pref("CT2504091.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");

user_pref("CT2504091.oldAppsList", "129079840421557838,129079840422026594,111,129079849636241789,129079840422182852,129079840422339107,129079840422964131,1000034,1297078048293

user_pref("CT2504091.revertSettingsEnabled", false);

user_pref("CT2504091.searchProtectorDialogDelayInSec", 10);

user_pref("CT2504091.searchProtectorEnableByLogin", true);

user_pref("CT2504091.testingCtid", "");

user_pref("CT2504091.toolbarAppMetaDataLastCheckTime", "Wed Jun 20 2012 15:25:15 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.toolbarContextMenuLastCheckTime", "Wed Jun 20 2012 15:25:15 GMT-0400 (Eastern Daylight Time)");

user_pref("CT2504091.undefined", "Thu Jan 05 2012 01:35:19 GMT-0500 (Eastern Standard Time)");

user_pref("CT2504091.usagesFlag", 1);

user_pref("CT3072253..clientLogIsEnabled", true);

user_pref("CT3072253..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");

user_pref("CT3072253..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");

user_pref("CT3072253.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);

user_pref("CT3072253.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");

user_pref("CT3072253.AppTrackingLastCheckTime", "Wed Jun 20 2012 15:25:34 GMT-0400 (Eastern Daylight Time)");

user_pref("CT3072253.BrowserCompStateIsOpen_129573915102477663", true);

user_pref("CT3072253.BrowserCompStateIsOpen_129749445530228833", true);

user_pref("CT3072253.BrowserCompStateIsOpen_129749445881800338", true);

user_pref("CT3072253.BrowserCompStateIsOpen_129805375651312503", true);

user_pref("CT3072253.CTID", "CT3072253");

user_pref("CT3072253.CurrentServerDate", "20-6-2012");

user_pref("CT3072253.DSInstall", false);

user_pref("CT3072253.DialogsAlignMode", "LTR");

user_pref("CT3072253.DialogsGetterLastCheckTime", "Wed Jun 20 2012 15:25:25 GMT-0400 (Eastern Daylight Time)");

user_pref("CT3072253.DownloadReferralCookieData", "");

user_pref("CT3072253.FirstServerDate", "25-4-2012");

user_pref("CT3072253.FirstTime", true);

user_pref("CT3072253.FirstTimeFF3", true);

user_pref("CT3072253.FixPageNotFoundErrors", true);

user_pref("CT3072253.GroupingServerCheckInterval", 1440);

user_pref("CT3072253.GroupingServiceUrl", "http://grouping.services.conduit.com/");

user_pref("CT3072253.HPInstall", false);

user_pref("CT3072253.HasUserGlobalKeys", true);

user_pref("CT3072253.HomePageProtectorEnabled", false);

user_pref("CT3072253.HomepageBeforeUnload", "resource:/browserconfig.properties");

user_pref("CT3072253.Initialize", true);

user_pref("CT3072253.InitializeCommonPrefs", true);

user_pref("CT3072253.InstallationAndCookieDataSentCount", 3);

user_pref("CT3072253.InstallationId", "ConduitXPEIntegration");

user_pref("CT3072253.InstallationType", "ConduitXPEIntegration");

user_pref("CT3072253.InstalledDate", "Tue Apr 24 2012 17:23:50 GMT-0400 (Eastern Daylight Time)");

user_pref("CT3072253.IsAlertDBUpdated", true);

user_pref("CT3072253.IsGrouping", false);

user_pref("CT3072253.IsInitSetupIni", true);

user_pref("CT3072253.IsMulticommunity", false);

user_pref("CT3072253.IsOpenThankYouPage", true);

user_pref("CT3072253.IsOpenUninstallPage", false);

user_pref("CT3072253.LanguagePackLastCheckTime", "Wed Jun 20 2012 15:25:24 GMT-0400 (Eastern Daylight Time)");

user_pref("CT3072253.LanguagePackReloadIntervalMM", 1440);

user_pref("CT3072253.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");

user_pref("CT3072253.LastLogin_3.9.0.3", "Wed Jun 20 2012 15:25:24 GMT-0400 (Eastern Daylight Time)");

user_pref("CT3072253.LatestVersion", "3.13.0.6");

user_pref("CT3072253.Locale", "en");

user_pref("CT3072253.MCDetectTooltipHeight", "83");

user_pref("CT3072253.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

user_pref("CT3072253.MCDetectTooltipWidth", "295");

user_pref("CT3072253.MyStuffEnabledAtInstallation", true);

user_pref("CT3072253.OriginalFirstVersion", "3.9.0.3");

user_pref("CT3072253.SearchCaption", "uTorrentControl2 Customized Web Search");

user_pref("CT3072253.SearchEngineBeforeUnload", "Search The Web");

user_pref("CT3072253.SearchFromAddressBarIsInit", true);

user_pref("CT3072253.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=");

user_pref("CT3072253.SearchInNewTabEnabled", true);

user_pref("CT3072253.SearchInNewTabIntervalMM", 1440);

user_pref("CT3072253.SearchInNewTabLastCheckTime", "Wed Jun 20 2012 15:25:21 GMT-0400 (Eastern Daylight Time)");

user_pref("CT3072253.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");

user_pref("CT3072253.SearchProtectorEnabled", false);

user_pref("CT3072253.SearchProtectorToolbarDisabled", false);

user_pref("CT3072253.SendProtectorDataViaLogin", true);

user_pref("CT3072253.ServiceMapLastCheckTime", "Wed Jun 20 2012 15:25:19 GMT-0400 (Eastern Daylight Time)");

user_pref("CT3072253.SettingsLastCheckTime", "Wed Jun 20 2012 15:25:17 GMT-0400 (Eastern Daylight Time)");

user_pref("CT3072253.SettingsLastUpdate", "1339665152");

user_pref("CT3072253.TBHomePageUrl", "http://search.conduit.com/?ctid=CT3072253&SearchSource=13");

user_pref("CT3072253.ThirdPartyComponentsInterval", 504);

user_pref("CT3072253.ThirdPartyComponentsLastCheck", "Wed Jun 20 2012 15:25:17 GMT-0400 (Eastern Daylight Time)");

user_pref("CT3072253.ThirdPartyComponentsLastUpdate", "1331805997");

user_pref("CT3072253.ToolbarShrinkedFromSetup", false);

user_pref("CT3072253.TrusteLinkUrl", "http://trust.conduit.com/CT3072253");

user_pref("CT3072253.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com

user_pref("CT3072253.UserID", "UN82016403327165245");

user_pref("CT3072253.alertChannelId", "1463702");

user_pref("CT3072253.autoDisableScopes", -1);

user_pref("CT3072253.backendstorage.cbcountry_000", "5553");

user_pref("CT3072253.backendstorage.cbcountry_001", "5553");

user_pref("CT3072253.backendstorage.cbfirsttime", "5475652041707220323420323031322031373A32343A303520474D542D3034303020284561737465726E204461796C696768742054696D6529");

user_pref("CT3072253.backendstorage.url_history0001", "687474703A2F2F7777772E73706F72747368756E7465722E65752F73706F7274732F626F78696E672D7777652D7566632E68746D6C3A3A3A636C6963

user_pref("CT3072253.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlP

user_pref("CT3072253.globalFirstTimeInfoLastCheckTime", "Wed Jun 20 2012 15:25:29 GMT-0400 (Eastern Daylight Time)");

user_pref("CT3072253.homepageProtectorEnableByLogin", true);

user_pref("CT3072253.initDone", true);

user_pref("CT3072253.isAppTrackingManagerOn", true);

user_pref("CT3072253.myStuffEnabled", true);

user_pref("CT3072253.myStuffPublihserMinWidth", 400);

user_pref("CT3072253.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");

user_pref("CT3072253.myStuffServiceIntervalMM", 1440);

user_pref("CT3072253.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");

user_pref("CT3072253.oldAppsList", "129295695672325902,129571859753931591,111,129593762370823811,129805375651312503,129749445881800338,129573915102477663,1000080,1000515,1000,

user_pref("CT3072253.revertSettingsEnabled", false);

user_pref("CT3072253.searchProtectorDialogDelayInSec", 10);

user_pref("CT3072253.searchProtectorEnableByLogin", true);

user_pref("CT3072253.testingCtid", "");

user_pref("CT3072253.toolbarAppMetaDataLastCheckTime", "Wed Jun 20 2012 15:25:24 GMT-0400 (Eastern Daylight Time)");

user_pref("CT3072253.toolbarContextMenuLastCheckTime", "Wed Jun 20 2012 15:25:24 GMT-0400 (Eastern Daylight Time)");

user_pref("CommunityToolbar.ETag.http://Settings.toolbar.search.conduit.com/root/CT2504091/CT2504091", "\"9168eb9b4b9fed9a97b4d56cad4ae7921\"");

user_pref("CommunityToolbar.ETag.http://Settings.toolbar.search.conduit.com/root/CT3072253/CT3072253", "\"855c0149f6eee656fc46e123af79ec731\"");

user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/1463702/1459356/US", "\"0\"");

user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/897164/892962/US", "\"0\"");

user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT2504091", "\"1326306883\"");

user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT3072253", "\"1336063965\"");

user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "G9mW7heT/8xIX1frcduu0A==");

user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en-us", "G9mW7heT/8xIX1frcduu0A==");

user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "mfQ70fvlD2zuBxSBj8rQqA==");

user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en-us", "2E1/v7EfCEDbv3VaBQMELg==");

user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "UgzXjW7BIkfdx+x39Ruv3w==");

user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en-us", "k9un27OkAvkwB2ZmvXxTnA==");

user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "4BgM4MhF/sOgPsDNmIs3Yw==");

user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en-us", "FqddrIU7eyJgaaLyHDeVMQ==");

user_pref("CommunityToolbar.ETag.http://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"8076e3ce381dcd1:1462\"");

user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.1.0", "\"0d648794549cd1:0\"");

user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.0.3", "\"0d648794549cd1:14d1\"");

user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT2504091", "\"84df7a85bec3b2a3dd055a4bedea5adc\"");

user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT3072253", "\"84df7a85bec3b2a3dd055a4bedea5adc\"");

user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=en", "\"21ba1682b5b6825cbfd420592a540476\"");

user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=en-us", "\"4be6dcf5c20c0cd98a0ae8a1b386d47e\"");

user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Ariel\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\hsp88b6q.default\\conduitCommon\\modules\\3.9.0.3");

user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.9.0.3");

user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");

user_pref("CommunityToolbar.ToolbarsList", "CT2504091,CT3072253");

user_pref("CommunityToolbar.ToolbarsList2", "CT2504091,CT3072253");

user_pref("CommunityToolbar.ToolbarsList4", "CT2504091,CT3072253");

user_pref("CommunityToolbar.globalUserId", "a437ab58-f23c-4466-ae09-4b35644e634a");

user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);

user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);

user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");

user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed Jun 20 2012 15:25:17 GMT-0400 (Eastern Daylight Time)");

user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);

user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Wed Jun 20 2012 15:25:21 GMT-0400 (Eastern Daylight Time)");

user_pref("CommunityToolbar.notifications.clientsServerUrl", "http://alert.client.conduit.com");

user_pref("CommunityToolbar.notifications.locale", "en");

user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);

user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Jun 20 2012 15:25:14 GMT-0400 (Eastern Daylight Time)");

user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");

user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);

user_pref("CommunityToolbar.notifications.servicesServerUrl", "http://alert.services.conduit.com");

user_pref("CommunityToolbar.notifications.showTrayIcon", false);

user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);

user_pref("CommunityToolbar.notifications.userId", "6cf60fa0-c0e1-4e7e-b24a-e03177321c2d");

user_pref("CommunityToolbar.originalHomepage", "resource:/browserconfig.properties");

user_pref("CommunityToolbar.originalSearchEngine", "Search The Web");

~~~ Chrome

Dumping contents of C:\Users\Ariel\appdata\local\Google\Chrome\User Data\Default\Default

C:\Users\Ariel\appdata\local\Google\Chrome\User Data\Default\Default\aagfggdcgedddbdfgegbdfdjdedggfdb

C:\Users\Ariel\appdata\local\Google\Chrome\User Data\Default\Default\aagfggdcgedddbdfgegbdfdjdedggfdb\background.html

C:\Users\Ariel\appdata\local\Google\Chrome\User Data\Default\Default\aagfggdcgedddbdfgegbdfdjdedggfdb\ContentScript.js

C:\Users\Ariel\appdata\local\Google\Chrome\User Data\Default\Default\aagfggdcgedddbdfgegbdfdjdedggfdb\manifest.json

Successfully deleted: [Folder] C:\Users\Ariel\appdata\local\Google\Chrome\User Data\Default\Default [Default Extension 1.0]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Mon 12/17/2012 at 23:10:15.66

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[Woke20]

---------------------------------------

Malwarebytes Anti-Rootkit BETA 1.01.0.1011

© Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 9.0.8112.16421

Java version: 1.6.0_20

File system is: NTFS

Disk drives: C:\ DRIVE_FIXED, Q:\ DRIVE_FIXED

CPU speed: 2.194000 GHz

Memory total: 4021182464, free: 2752098304

------------ Kernel report ------------

12/18/2012 00:14:25

------------ Loaded modules -----------

\SystemRoot\system32\ntoskrnl.exe

\SystemRoot\system32\hal.dll

\SystemRoot\system32\kdcom.dll

\SystemRoot\system32\mcupdate_AuthenticAMD.dll

\SystemRoot\system32\PSHED.dll

\SystemRoot\system32\CLFS.SYS

\SystemRoot\system32\CI.dll

\SystemRoot\system32\drivers\Wdf01000.sys

\SystemRoot\system32\drivers\WDFLDR.SYS

\SystemRoot\system32\drivers\ACPI.sys

\SystemRoot\system32\drivers\WMILIB.SYS

\SystemRoot\system32\drivers\msisadrv.sys

\SystemRoot\system32\drivers\pci.sys

\SystemRoot\system32\drivers\vdrvroot.sys

\SystemRoot\System32\drivers\partmgr.sys

\SystemRoot\system32\drivers\compbatt.sys

\SystemRoot\system32\drivers\BATTC.SYS

\SystemRoot\system32\drivers\volmgr.sys

\SystemRoot\System32\drivers\volmgrx.sys

\SystemRoot\system32\drivers\pciide.sys

\SystemRoot\system32\drivers\PCIIDEX.SYS

\SystemRoot\System32\drivers\mountmgr.sys

\SystemRoot\system32\drivers\atapi.sys

\SystemRoot\system32\drivers\ataport.SYS

\SystemRoot\system32\drivers\amd_sata.sys

\SystemRoot\system32\drivers\storport.sys

\SystemRoot\system32\drivers\amd_xata.sys

\SystemRoot\system32\drivers\amdsata.sys

\SystemRoot\system32\drivers\amdxata.sys

\SystemRoot\system32\drivers\fltmgr.sys

\SystemRoot\system32\drivers\fileinfo.sys

\SystemRoot\System32\Drivers\PxHlpa64.sys

\SystemRoot\System32\Drivers\Ntfs.sys

\SystemRoot\System32\Drivers\msrpc.sys

\SystemRoot\System32\Drivers\ksecdd.sys

\SystemRoot\System32\Drivers\cng.sys

\SystemRoot\System32\drivers\pcw.sys

\SystemRoot\System32\Drivers\Fs_Rec.sys

\SystemRoot\system32\drivers\ndis.sys

\SystemRoot\system32\drivers\NETIO.SYS

\SystemRoot\System32\Drivers\ksecpkg.sys

\SystemRoot\System32\drivers\tcpip.sys

\SystemRoot\System32\drivers\fwpkclnt.sys

\SystemRoot\system32\drivers\volsnap.sys

\SystemRoot\System32\Drivers\spldr.sys

\SystemRoot\System32\drivers\rdyboost.sys

\SystemRoot\System32\Drivers\mup.sys

\SystemRoot\System32\drivers\hwpolicy.sys

\SystemRoot\System32\DRIVERS\fvevol.sys

\SystemRoot\system32\drivers\disk.sys

\SystemRoot\system32\drivers\CLASSPNP.SYS

\SystemRoot\system32\drivers\AtiPcie.sys

\SystemRoot\system32\DRIVERS\cdrom.sys

\SystemRoot\System32\Drivers\Null.SYS

\SystemRoot\System32\Drivers\Beep.SYS

\SystemRoot\System32\drivers\vga.sys

\SystemRoot\System32\drivers\VIDEOPRT.SYS

\SystemRoot\System32\drivers\watchdog.sys

\SystemRoot\System32\DRIVERS\RDPCDD.sys

\SystemRoot\system32\drivers\rdpencdd.sys

\SystemRoot\system32\drivers\rdprefmp.sys

\SystemRoot\System32\Drivers\Msfs.SYS

\SystemRoot\System32\Drivers\Npfs.SYS

\SystemRoot\system32\DRIVERS\tdx.sys

\SystemRoot\system32\DRIVERS\TDI.SYS

\SystemRoot\System32\DRIVERS\netbt.sys

\SystemRoot\system32\drivers\afd.sys

\SystemRoot\system32\DRIVERS\wfplwf.sys

\SystemRoot\system32\DRIVERS\pacer.sys

\SystemRoot\system32\DRIVERS\vwififlt.sys

\SystemRoot\system32\DRIVERS\netbios.sys

\SystemRoot\system32\DRIVERS\wanarp.sys

\SystemRoot\system32\drivers\termdd.sys

\SystemRoot\system32\DRIVERS\rdbss.sys

\SystemRoot\system32\drivers\nsiproxy.sys

\SystemRoot\system32\drivers\mssmbios.sys

\SystemRoot\System32\drivers\discache.sys

\SystemRoot\System32\Drivers\dfsc.sys

\SystemRoot\system32\drivers\blbdrive.sys

\SystemRoot\system32\DRIVERS\tunnel.sys

\SystemRoot\system32\drivers\amdppm.sys

\SystemRoot\system32\DRIVERS\atikmpag.sys

\SystemRoot\system32\DRIVERS\atipmdag.sys

\SystemRoot\System32\drivers\dxgkrnl.sys

\SystemRoot\System32\drivers\dxgmms1.sys

\SystemRoot\system32\drivers\HDAudBus.sys

\SystemRoot\system32\DRIVERS\Rt64win7.sys

\SystemRoot\system32\DRIVERS\athrx.sys

\SystemRoot\system32\DRIVERS\vwifibus.sys

\SystemRoot\system32\DRIVERS\GEARAspiWDM.sys

\SystemRoot\system32\DRIVERS\usbohci.sys

\SystemRoot\system32\DRIVERS\USBPORT.SYS

\SystemRoot\system32\DRIVERS\usbfilter.sys

\SystemRoot\system32\DRIVERS\usbehci.sys

\SystemRoot\system32\drivers\i8042prt.sys

\SystemRoot\system32\drivers\kbdclass.sys

\SystemRoot\system32\drivers\Apfiltr.sys

\SystemRoot\system32\drivers\mouclass.sys

\SystemRoot\system32\drivers\SFEP.sys

\SystemRoot\system32\drivers\CmBatt.sys

\SystemRoot\system32\drivers\CompositeBus.sys

\SystemRoot\System32\Drivers\RootMdm.sys

\SystemRoot\system32\drivers\modem.sys

\SystemRoot\system32\DRIVERS\AgileVpn.sys

\SystemRoot\system32\DRIVERS\rasl2tp.sys

\SystemRoot\system32\DRIVERS\ndistapi.sys

\SystemRoot\system32\DRIVERS\ndiswan.sys

\SystemRoot\system32\DRIVERS\raspppoe.sys

\SystemRoot\system32\DRIVERS\raspptp.sys

\SystemRoot\system32\DRIVERS\rassstp.sys

\SystemRoot\system32\DRIVERS\RimSerial_AMD64.sys

\SystemRoot\system32\drivers\swenum.sys

\SystemRoot\system32\drivers\ks.sys

\SystemRoot\system32\drivers\umbus.sys

\SystemRoot\system32\DRIVERS\usbhub.sys

\SystemRoot\System32\Drivers\NDProxy.SYS

\SystemRoot\system32\drivers\RtHDMIVX.sys

\SystemRoot\system32\drivers\portcls.sys

\SystemRoot\system32\drivers\drmk.sys

\SystemRoot\system32\drivers\ksthunk.sys

\SystemRoot\system32\drivers\RTKVHD64.sys

\SystemRoot\system32\DRIVERS\usbccgp.sys

\SystemRoot\system32\DRIVERS\USBD.SYS

\SystemRoot\System32\Drivers\usbvideo.sys

\SystemRoot\System32\Drivers\RtsUStor.sys

\SystemRoot\System32\Drivers\crashdmp.sys

\SystemRoot\System32\Drivers\dump_diskdump.sys

\SystemRoot\System32\Drivers\dump_amd_sata.sys

\SystemRoot\System32\Drivers\dump_dumpfve.sys

\SystemRoot\System32\win32k.sys

\SystemRoot\System32\drivers\Dxapi.sys

\SystemRoot\system32\DRIVERS\monitor.sys

\SystemRoot\System32\TSDDD.dll

\SystemRoot\System32\cdd.dll

\SystemRoot\system32\drivers\luafv.sys

\SystemRoot\system32\DRIVERS\Sftvollh.sys

\SystemRoot\system32\drivers\WudfPf.sys

\SystemRoot\system32\DRIVERS\lltdio.sys

\SystemRoot\system32\DRIVERS\nwifi.sys

\SystemRoot\system32\DRIVERS\ndisuio.sys

\SystemRoot\system32\DRIVERS\rspndr.sys

\SystemRoot\system32\DRIVERS\vwifimp.sys

\SystemRoot\system32\drivers\HTTP.sys

\SystemRoot\System32\DRIVERS\srvnet.sys

\SystemRoot\system32\DRIVERS\bowser.sys

\SystemRoot\system32\DRIVERS\mrxsmb.sys

\SystemRoot\system32\DRIVERS\mrxsmb10.sys

\SystemRoot\system32\DRIVERS\mrxsmb20.sys

\SystemRoot\System32\DRIVERS\srv2.sys

\SystemRoot\System32\DRIVERS\srv.sys

\SystemRoot\system32\drivers\peauth.sys

\SystemRoot\System32\Drivers\secdrv.SYS

\SystemRoot\system32\DRIVERS\Sftfslh.sys

\SystemRoot\system32\DRIVERS\Sftplaylh.sys

\SystemRoot\System32\drivers\tcpipreg.sys

\SystemRoot\system32\DRIVERS\Sftredirlh.sys

\??\C:\Windows\system32\drivers\mbamchameleon.sys

\??\C:\Windows\system32\drivers\mbamswissarmy.sys

\Windows\System32\ntdll.dll

\Windows\System32\smss.exe

\Windows\System32\apisetschema.dll

\Windows\System32\autochk.exe

----------- End -----------

<<<1>>>

Upper Device Name: \Device\Harddisk0\DR0

Upper Device Object: 0xfffffa80042ee060

Upper Device Driver Name: \Driver\Disk\

Lower Device Name: \Device\00000059\

Lower Device Object: 0xfffffa8004261060

Lower Device Driver Name: \00000642\

Driver name found: amd_sata

DriverEntry returned 0x0

Function returned 0x0

Downloaded database version: v2012.12.18.02

Initializing...

Done!

<<<2>>>

Device number: 0, partition: 3

Physical Sector Size: 512

Drive: 0, DevicePointer: 0xfffffa80042ee060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\

--------- Disk Stack ------

DevicePointer: 0xfffffa80042eeb90, DeviceName: Unknown, DriverName: \Driver\partmgr\

DevicePointer: 0xfffffa80042ee060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\

DevicePointer: 0xfffffa8004266040, DeviceName: Unknown, DriverName: \Driver\amd_xata\

DevicePointer: 0xfffffa8004263bf0, DeviceName: Unknown, DriverName: \Driver\ACPI\

DevicePointer: 0xfffffa8004261060, DeviceName: \Device\00000059\, DriverName: \00000642\

------------ End ----------

Upper DeviceData: 0xfffff8a00b49f240, 0xfffffa80042ee060, 0xfffffa8003875090

Lower DeviceData: 0xfffff8a00ce575e0, 0xfffffa8004261060, 0xfffffa8003850e40

<<<3>>>

Volume: C:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

Scanning directory: C:\Windows\system32\drivers...

Done!

Drive 0

Scanning MBR on drive 0...

MBR buffers are not equal

MBR is forged! [4e914bd9d254ae24ccca9b120a2b5099]

Inspecting partition table:

MBR Signature: 55AA

Disk Signature: B99EB1C8

Partition information:

Partition 0 type is Other (0x27)

Partition is NOT ACTIVE.

Partition starts at LBA: 2048 Numsec = 19716096

Partition 1 type is Primary (0x7)

Partition is ACTIVE.

Partition starts at LBA: 19720192 Numsec = 204800

Partition file system is NTFS

Partition is bootable

Partition 2 type is Primary (0x7)

Partition is NOT ACTIVE.

Partition starts at LBA: 19924992 Numsec = 956846128

Partition 3 type is Empty (0x0)

Partition is NOT ACTIVE.

Partition starts at LBA: 0 Numsec = 0

Infected: MBR on Drive 0 --> [bootkit.TDL4.B.MBR]

Replacement MBR for a drive 0 found

MBR infection found on drive 0

Disk Size: 500107862016 bytes

Sector size: 512 bytes

Scanning physical sectors of unpartitioned space on drive 0 (1-2047-976753168-976773168)...

Sector 976772701 --> [Forged physical sector]

Sector 976772702 --> [Forged physical sector]

Sector 976772703 --> [Forged physical sector]

Sector 976772704 --> [Forged physical sector]

Sector 976772705 --> [Forged physical sector]

Sector 976772706 --> [Forged physical sector]

Sector 976772707 --> [Forged physical sector]

Sector 976772708 --> [Forged physical sector]

Sector 976772709 --> [Forged physical sector]

Sector 976772710 --> [Forged physical sector]

Sector 976772711 --> [Forged physical sector]

Sector 976772712 --> [Forged physical sector]

Sector 976772713 --> [Forged physical sector]

Sector 976772714 --> [Forged physical sector]

Sector 976772715 --> [Forged physical sector]

Sector 976772716 --> [Forged physical sector]

Sector 976772717 --> [Forged physical sector]

Sector 976772718 --> [Forged physical sector]

Sector 976772719 --> [Forged physical sector]

Sector 976772720 --> [Forged physical sector]

Sector 976772721 --> [Forged physical sector]

Sector 976772722 --> [Forged physical sector]

Sector 976772723 --> [Forged physical sector]

Sector 976772724 --> [Forged physical sector]

Sector 976772725 --> [Forged physical sector]

Sector 976772726 --> [Forged physical sector]

Sector 976772727 --> [Forged physical sector]

Sector 976772728 --> [Forged physical sector]

Sector 976772729 --> [Forged physical sector]

Sector 976772730 --> [Forged physical sector]

Sector 976772731 --> [Forged physical sector]

Sector 976772732 --> [Forged physical sector]

Sector 976772733 --> [Forged physical sector]

Sector 976772734 --> [Forged physical sector]

Sector 976772735 --> [Forged physical sector]

Sector 976772736 --> [Forged physical sector]

Sector 976772737 --> [Forged physical sector]

Sector 976772738 --> [Forged physical sector]

Sector 976772739 --> [Forged physical sector]

Sector 976772740 --> [Forged physical sector]

Sector 976772741 --> [Forged physical sector]

Sector 976772742 --> [Forged physical sector]

Sector 976772743 --> [Forged physical sector]

Sector 976772744 --> [Forged physical sector]

Sector 976772745 --> [Forged physical sector]

Sector 976772746 --> [Forged physical sector]

Sector 976772747 --> [Forged physical sector]

Sector 976772748 --> [Forged physical sector]

Sector 976772749 --> [Forged physical sector]

Sector 976772750 --> [Forged physical sector]

Sector 976772751 --> [Forged physical sector]

Sector 976772752 --> [Forged physical sector]

Sector 976772753 --> [Forged physical sector]

Sector 976772754 --> [Forged physical sector]

Sector 976772755 --> [Forged physical sector]

Sector 976772756 --> [Forged physical sector]

Sector 976772757 --> [Forged physical sector]

Sector 976772758 --> [Forged physical sector]

Sector 976772759 --> [Forged physical sector]

Sector 976772760 --> [Forged physical sector]

Sector 976772761 --> [Forged physical sector]

Sector 976772762 --> [Forged physical sector]

Sector 976772763 --> [Forged physical sector]

Sector 976772764 --> [Forged physical sector]

Sector 976772765 --> [Forged physical sector]

Sector 976772766 --> [Forged physical sector]

Sector 976772767 --> [Forged physical sector]

Sector 976772768 --> [Forged physical sector]

Sector 976772769 --> [Forged physical sector]

Sector 976772770 --> [Forged physical sector]

Sector 976772771 --> [Forged physical sector]

Sector 976772772 --> [Forged physical sector]

Sector 976772773 --> [Forged physical sector]

Sector 976772774 --> [Forged physical sector]

Sector 976772775 --> [Forged physical sector]

Sector 976772776 --> [Forged physical sector]

Sector 976772777 --> [Forged physical sector]

Sector 976772778 --> [Forged physical sector]

Sector 976772779 --> [Forged physical sector]

Sector 976772780 --> [Forged physical sector]

Sector 976772781 --> [Forged physical sector]

Sector 976772782 --> [Forged physical sector]

Sector 976772783 --> [Forged physical sector]

Sector 976772784 --> [Forged physical sector]

Sector 976772785 --> [Forged physical sector]

Sector 976772786 --> [Forged physical sector]

Sector 976772787 --> [Forged physical sector]

Sector 976772788 --> [Forged physical sector]

Sector 976772789 --> [Forged physical sector]

Sector 976772790 --> [Forged physical sector]

Sector 976772791 --> [Forged physical sector]

Sector 976772792 --> [Forged physical sector]

Sector 976772793 --> [Forged physical sector]

Sector 976772794 --> [Forged physical sector]

Sector 976772795 --> [Forged physical sector]

Sector 976772796 --> [Forged physical sector]

Sector 976772797 --> [Forged physical sector]

Sector 976772798 --> [Forged physical sector]

Sector 976772799 --> [Forged physical sector]

Sector 976772800 --> [Forged physical sector]

Sector 976772801 --> [Forged physical sector]

Sector 976772802 --> [Forged physical sector]

Sector 976772803 --> [Forged physical sector]

Sector 976772804 --> [Forged physical sector]

Sector 976772805 --> [Forged physical sector]

Sector 976772806 --> [Forged physical sector]

Sector 976772807 --> [Forged physical sector]

Sector 976772808 --> [Forged physical sector]

Sector 976772809 --> [Forged physical sector]

Sector 976772810 --> [Forged physical sector]

Sector 976772811 --> [Forged physical sector]

Sector 976772812 --> [Forged physical sector]

Sector 976772813 --> [Forged physical sector]

Sector 976772814 --> [Forged physical sector]

Sector 976772815 --> [Forged physical sector]

Sector 976772816 --> [Forged physical sector]

Sector 976772817 --> [Forged physical sector]

Sector 976772818 --> [Forged physical sector]

Sector 976772819 --> [Forged physical sector]

Sector 976772820 --> [Forged physical sector]

Sector 976772821 --> [Forged physical sector]

Sector 976772822 --> [Forged physical sector]

Sector 976772823 --> [Forged physical sector]

Sector 976772824 --> [Forged physical sector]

Sector 976772825 --> [Forged physical sector]

Sector 976772826 --> [Forged physical sector]

Sector 976772827 --> [Forged physical sector]

Sector 976772828 --> [Forged physical sector]

Sector 976772829 --> [Forged physical sector]

Sector 976772830 --> [Forged physical sector]

Sector 976772831 --> [Forged physical sector]

Sector 976772832 --> [Forged physical sector]

Sector 976772833 --> [Forged physical sector]

Sector 976772834 --> [Forged physical sector]

Sector 976772835 --> [Forged physical sector]

Sector 976772836 --> [Forged physical sector]

Sector 976772837 --> [Forged physical sector]

Sector 976772838 --> [Forged physical sector]

Sector 976772839 --> [Forged physical sector]

Sector 976772840 --> [Forged physical sector]

Sector 976772841 --> [Forged physical sector]

Sector 976772842 --> [Forged physical sector]

Sector 976772843 --> [Forged physical sector]

Sector 976772844 --> [Forged physical sector]

Sector 976772845 --> [Forged physical sector]

Sector 976772846 --> [Forged physical sector]

Sector 976772847 --> [Forged physical sector]

Sector 976772848 --> [Forged physical sector]

Sector 976772849 --> [Forged physical sector]

Sector 976772850 --> [Forged physical sector]

Sector 976772851 --> [Forged physical sector]

Sector 976772852 --> [Forged physical sector]

Sector 976772853 --> [Forged physical sector]

Sector 976772854 --> [Forged physical sector]

Sector 976772855 --> [Forged physical sector]

Sector 976772856 --> [Forged physical sector]

Sector 976772857 --> [Forged physical sector]

Sector 976772858 --> [Forged physical sector]

Sector 976772859 --> [Forged physical sector]

Sector 976772860 --> [Forged physical sector]

Sector 976772861 --> [Forged physical sector]

Sector 976772862 --> [Forged physical sector]

Sector 976772863 --> [Forged physical sector]

Sector 976772864 --> [Forged physical sector]

Sector 976772865 --> [Forged physical sector]

Sector 976772866 --> [Forged physical sector]

Sector 976772867 --> [Forged physical sector]

Sector 976772868 --> [Forged physical sector]

Sector 976772869 --> [Forged physical sector]

Sector 976772870 --> [Forged physical sector]

Sector 976772871 --> [Forged physical sector]

Sector 976772872 --> [Forged physical sector]

Sector 976772873 --> [Forged physical sector]

Sector 976772874 --> [Forged physical sector]

Sector 976772875 --> [Forged physical sector]

Sector 976772876 --> [Forged physical sector]

Sector 976772877 --> [Forged physical sector]

Sector 976772878 --> [Forged physical sector]

Sector 976772879 --> [Forged physical sector]

Sector 976772880 --> [Forged physical sector]

Sector 976772881 --> [Forged physical sector]

Sector 976772882 --> [Forged physical sector]

Sector 976772883 --> [Forged physical sector]

Sector 976772884 --> [Forged physical sector]

Sector 976772885 --> [Forged physical sector]

Sector 976772886 --> [Forged physical sector]

Sector 976772887 --> [Forged physical sector]

Sector 976772888 --> [Forged physical sector]

Sector 976772889 --> [Forged physical sector]

Sector 976772890 --> [Forged physical sector]

Sector 976772891 --> [Forged physical sector]

Sector 976772892 --> [Forged physical sector]

Sector 976772893 --> [Forged physical sector]

Sector 976772894 --> [Forged physical sector]

Sector 976772895 --> [Forged physical sector]

Sector 976772896 --> [Forged physical sector]

Sector 976772897 --> [Forged physical sector]

Sector 976772898 --> [Forged physical sector]

Sector 976772899 --> [Forged physical sector]

Sector 976772900 --> [Forged physical sector]

Sector 976772901 --> [Forged physical sector]

Sector 976772902 --> [Forged physical sector]

Sector 976772903 --> [Forged physical sector]

Sector 976772904 --> [Forged physical sector]

Sector 976772905 --> [Forged physical sector]

Sector 976772906 --> [Forged physical sector]

Sector 976772907 --> [Forged physical sector]

Sector 976772908 --> [Forged physical sector]

Sector 976772909 --> [Forged physical sector]

Sector 976772910 --> [Forged physical sector]

Sector 976772911 --> [Forged physical sector]

Sector 976772912 --> [Forged physical sector]

Sector 976772913 --> [Forged physical sector]

Sector 976772914 --> [Forged physical sector]

Sector 976772915 --> [Forged physical sector]

Sector 976772916 --> [Forged physical sector]

Sector 976772917 --> [Forged physical sector]

Sector 976772918 --> [Forged physical sector]

Sector 976772919 --> [Forged physical sector]

Sector 976772920 --> [Forged physical sector]

Sector 976772921 --> [Forged physical sector]

Sector 976772922 --> [Forged physical sector]

Sector 976772923 --> [Forged physical sector]

Sector 976772924 --> [Forged physical sector]

Sector 976772925 --> [Forged physical sector]

Sector 976772926 --> [Forged physical sector]

Sector 976772927 --> [Forged physical sector]

Sector 976772928 --> [Forged physical sector]

Sector 976772929 --> [Forged physical sector]

Sector 976772930 --> [Forged physical sector]

Sector 976772931 --> [Forged physical sector]

Sector 976772932 --> [Forged physical sector]

Sector 976772933 --> [Forged physical sector]

Sector 976772934 --> [Forged physical sector]

Sector 976772935 --> [Forged physical sector]

Sector 976772936 --> [Forged physical sector]

Sector 976772937 --> [Forged physical sector]

Sector 976772938 --> [Forged physical sector]

Sector 976772939 --> [Forged physical sector]

Sector 976772940 --> [Forged physical sector]

Sector 976772941 --> [Forged physical sector]

Sector 976772942 --> [Forged physical sector]

Sector 976772943 --> [Forged physical sector]

Sector 976772944 --> [Forged physical sector]

Sector 976772945 --> [Forged physical sector]

Sector 976772946 --> [Forged physical sector]

Sector 976772947 --> [Forged physical sector]

Sector 976772948 --> [Forged physical sector]

Sector 976772949 --> [Forged physical sector]

Sector 976772950 --> [Forged physical sector]

Sector 976772951 --> [Forged physical sector]

Sector 976772952 --> [Forged physical sector]

Sector 976772953 --> [Forged physical sector]

Sector 976772954 --> [Forged physical sector]

Sector 976772955 --> [Forged physical sector]

Sector 976772956 --> [Forged physical sector]

Sector 976772957 --> [Forged physical sector]

Sector 976772958 --> [Forged physical sector]

Sector 976772959 --> [Forged physical sector]

Sector 976772960 --> [Forged physical sector]

Sector 976772961 --> [Forged physical sector]

Sector 976772962 --> [Forged physical sector]

Sector 976772963 --> [Forged physical sector]

Sector 976772964 --> [Forged physical sector]

Sector 976772965 --> [Forged physical sector]

Sector 976772966 --> [Forged physical sector]

Sector 976772967 --> [Forged physical sector]

Sector 976772968 --> [Forged physical sector]

Sector 976772969 --> [Forged physical sector]

Sector 976772970 --> [Forged physical sector]

Sector 976772971 --> [Forged physical sector]

Sector 976772972 --> [Forged physical sector]

Sector 976772973 --> [Forged physical sector]

Sector 976772974 --> [Forged physical sector]

Sector 976772975 --> [Forged physical sector]

Sector 976772976 --> [Forged physical sector]

Sector 976772977 --> [Forged physical sector]

Sector 976772978 --> [Forged physical sector]

Sector 976772979 --> [Forged physical sector]

Sector 976772980 --> [Forged physical sector]

Sector 976772981 --> [Forged physical sector]

Sector 976772982 --> [Forged physical sector]

Sector 976772983 --> [Forged physical sector]

Sector 976772984 --> [Forged physical sector]

Sector 976772985 --> [Forged physical sector]

Sector 976772986 --> [Forged physical sector]

Sector 976772987 --> [Forged physical sector]

Sector 976772988 --> [Forged physical sector]

Sector 976772989 --> [Forged physical sector]

Sector 976772990 --> [Forged physical sector]

Sector 976772991 --> [Forged physical sector]

Sector 976772992 --> [Forged physical sector]

Sector 976772993 --> [Forged physical sector]

Sector 976772994 --> [Forged physical sector]

Sector 976772995 --> [Forged physical sector]

Sector 976772996 --> [Forged physical sector]

Sector 976772997 --> [Forged physical sector]

Sector 976772998 --> [Forged physical sector]

Sector 976772999 --> [Forged physical sector]

Sector 976773000 --> [Forged physical sector]

Sector 976773001 --> [Forged physical sector]

Sector 976773002 --> [Forged physical sector]

Sector 976773003 --> [Forged physical sector]

Sector 976773004 --> [Forged physical sector]

Sector 976773005 --> [Forged physical sector]

Sector 976773006 --> [Forged physical sector]

Sector 976773007 --> [Forged physical sector]

Sector 976773008 --> [Forged physical sector]

Sector 976773009 --> [Forged physical sector]

Sector 976773010 --> [Forged physical sector]

Sector 976773011 --> [Forged physical sector]

Sector 976773012 --> [Forged physical sector]

Sector 976773013 --> [Forged physical sector]

Sector 976773014 --> [Forged physical sector]

Sector 976773015 --> [Forged physical sector]

Sector 976773016 --> [Forged physical sector]

Sector 976773017 --> [Forged physical sector]

Sector 976773018 --> [Forged physical sector]

Sector 976773019 --> [Forged physical sector]

Sector 976773020 --> [Forged physical sector]

Sector 976773021 --> [Forged physical sector]

Sector 976773022 --> [Forged physical sector]

Sector 976773023 --> [Forged physical sector]

Sector 976773024 --> [Forged physical sector]

Sector 976773025 --> [Forged physical sector]

Sector 976773026 --> [Forged physical sector]

Sector 976773027 --> [Forged physical sector]

Sector 976773028 --> [Forged physical sector]

Sector 976773029 --> [Forged physical sector]

Sector 976773030 --> [Forged physical sector]

Sector 976773031 --> [Forged physical sector]

Sector 976773032 --> [Forged physical sector]

Sector 976773033 --> [Forged physical sector]

Sector 976773034 --> [Forged physical sector]

Sector 976773035 --> [Forged physical sector]

Sector 976773036 --> [Forged physical sector]

Sector 976773037 --> [Forged physical sector]

Sector 976773038 --> [Forged physical sector]

Sector 976773039 --> [Forged physical sector]

Sector 976773040 --> [Forged physical sector]

Sector 976773041 --> [Forged physical sector]

Sector 976773042 --> [Forged physical sector]

Sector 976773043 --> [Forged physical sector]

Sector 976773044 --> [Forged physical sector]

Sector 976773045 --> [Forged physical sector]

Sector 976773046 --> [Forged physical sector]

Sector 976773047 --> [Forged physical sector]

Sector 976773048 --> [Forged physical sector]

Sector 976773049 --> [Forged physical sector]

Sector 976773050 --> [Forged physical sector]

Sector 976773051 --> [Forged physical sector]

Sector 976773052 --> [Forged physical sector]

Sector 976773053 --> [Forged physical sector]

Sector 976773054 --> [Forged physical sector]

Sector 976773055 --> [Forged physical sector]

Sector 976773056 --> [Forged physical sector]

Sector 976773057 --> [Forged physical sector]

Sector 976773058 --> [Forged physical sector]

Sector 976773059 --> [Forged physical sector]

Sector 976773060 --> [Forged physical sector]

Sector 976773061 --> [Forged physical sector]

Sector 976773062 --> [Forged physical sector]

Sector 976773063 --> [Forged physical sector]

Sector 976773064 --> [Forged physical sector]

Sector 976773065 --> [Forged physical sector]

Sector 976773066 --> [Forged physical sector]

Sector 976773067 --> [Forged physical sector]

Sector 976773068 --> [Forged physical sector]

Sector 976773069 --> [Forged physical sector]

Sector 976773070 --> [Forged physical sector]

Sector 976773071 --> [Forged physical sector]

Sector 976773072 --> [Forged physical sector]

Sector 976773073 --> [Forged physical sector]

Sector 976773074 --> [Forged physical sector]

Sector 976773075 --> [Forged physical sector]

Sector 976773076 --> [Forged physical sector]

Sector 976773077 --> [Forged physical sector]

Sector 976773078 --> [Forged physical sector]

Sector 976773079 --> [Forged physical sector]

Sector 976773080 --> [Forged physical sector]

Sector 976773081 --> [Forged physical sector]

Sector 976773082 --> [Forged physical sector]

Sector 976773083 --> [Forged physical sector]

Sector 976773084 --> [Forged physical sector]

Sector 976773085 --> [Forged physical sector]

Sector 976773086 --> [Forged physical sector]

Sector 976773087 --> [Forged physical sector]

Sector 976773088 --> [Forged physical sector]

Sector 976773089 --> [Forged physical sector]

Sector 976773090 --> [Forged physical sector]

Sector 976773091 --> [Forged physical sector]

Sector 976773092 --> [Forged physical sector]

Sector 976773093 --> [Forged physical sector]

Sector 976773094 --> [Forged physical sector]

Sector 976773095 --> [Forged physical sector]

Sector 976773096 --> [Forged physical sector]

Sector 976773097 --> [Forged physical sector]

Sector 976773098 --> [Forged physical sector]

Sector 976773099 --> [Forged physical sector]

Sector 976773100 --> [Forged physical sector]

Sector 976773101 --> [Forged physical sector]

Sector 976773102 --> [Forged physical sector]

Sector 976773103 --> [Forged physical sector]

Sector 976773104 --> [Forged physical sector]

Sector 976773105 --> [Forged physical sector]

Sector 976773106 --> [Forged physical sector]

Sector 976773107 --> [Forged physical sector]

Sector 976773108 --> [Forged physical sector]

Sector 976773109 --> [Forged physical sector]

Sector 976773110 --> [Forged physical sector]

Sector 976773111 --> [Forged physical sector]

Sector 976773112 --> [Forged physical sector]

Sector 976773113 --> [Forged physical sector]

Sector 976773114 --> [Forged physical sector]

Sector 976773115 --> [Forged physical sector]

Sector 976773116 --> [Forged physical sector]

Sector 976773117 --> [Forged physical sector]

Sector 976773118 --> [Forged physical sector]

Sector 976773119 --> [Forged physical sector]

Sector 976773120 --> [Forged physical sector]

Sector 976773121 --> [Forged physical sector]

Sector 976773122 --> [Forged physical sector]

Sector 976773123 --> [Forged physical sector]

Sector 976773124 --> [Forged physical sector]

Sector 976773125 --> [Forged physical sector]

Sector 976773126 --> [Forged physical sector]

Sector 976773127 --> [Forged physical sector]

Sector 976773128 --> [Forged physical sector]

Sector 976773129 --> [Forged physical sector]

Sector 976773130 --> [Forged physical sector]

Sector 976773131 --> [Forged physical sector]

Sector 976773132 --> [Forged physical sector]

Sector 976773133 --> [Forged physical sector]

Sector 976773134 --> [Forged physical sector]

Sector 976773135 --> [Forged physical sector]

Sector 976773136 --> [Forged physical sector]

Sector 976773137 --> [Forged physical sector]

Sector 976773138 --> [Forged physical sector]

Sector 976773139 --> [Forged physical sector]

Sector 976773140 --> [Forged physical sector]

Sector 976773141 --> [Forged physical sector]

Sector 976773142 --> [Forged physical sector]

Sector 976773143 --> [Forged physical sector]

Sector 976773144 --> [Forged physical sector]

Sector 976773145 --> [Forged physical sector]

Sector 976773146 --> [Forged physical sector]

Sector 976773147 --> [Forged physical sector]

Sector 976773148 --> [Forged physical sector]

Sector 976773149 --> [Forged physical sector]

Sector 976773150 --> [Forged physical sector]

Sector 976773151 --> [Forged physical sector]

Sector 976773152 --> [Forged physical sector]

Sector 976773153 --> [Forged physical sector]

Sector 976773154 --> [Forged physical sector]

Sector 976773155 --> [Forged physical sector]

Sector 976773156 --> [Forged physical sector]

Sector 976773157 --> [Forged physical sector]

Sector 976773158 --> [Forged physical sector]

Sector 976773159 --> [Forged physical sector]

Sector 976773160 --> [Forged physical sector]

Sector 976773161 --> [Forged physical sector]

Sector 976773162 --> [Forged physical sector]

Sector 976773163 --> [Forged physical sector]

Sector 976773164 --> [Forged physical sector]

Sector 976773165 --> [Forged physical sector]

Sector 976773166 --> [Forged physical sector]

Sector 976773167 --> [Forged physical sector]

Done!

Performing system, memory and registry scan...

Infected: C:\Windows\svchost.exe --> [Trojan.Agent]

Infected: C:\Windows\svchost.exe --> [Trojan.Agent]

Done!

Scan finished

Creating System Restore point...

Scheduling clean up...

<<<2>>>

Device number: 0, partition: 3

<<<3>>>

Volume: C:

File system type: NTFS

SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes

BCD Entry for BOOTEMS is missing

Malicious Entry 26000022 for BOOTEMS present!

Removal scheduling successful. System shutdown needed.

System shutdown occurred

=======================================

---------------------------------------

Malwarebytes Anti-Rootkit BETA 1.01.0.1011

© Malwarebytes Corporation 2011-2012

OS version: 6.1.7601 Windows 7 Service Pack 1 x64

Account is Administrative

Internet Explorer version: 9.0.8112.16421

Java version: 1.6.0_20

File system is: NTFS

Disk drives: C:\ DRIVE_FIXED, Q:\ DRIVE_FIXED

CPU speed: 2.194000 GHz

Memory total: 4021182464, free: 2650730496

[Woke20]

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Home Premium

Boot Device: \Device\HarddiskVolume2

Install Date: 1/11/2011 10:52:31 PM

System Uptime: 12/18/2012 1:04:38 AM (0 hours ago)

.

Motherboard: Sony Corporation | | VAIO

Processor: AMD Athlon II P340 Dual-Core Processor | N/A | 792/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 456 GiB total, 344.284 GiB free.

E: is CDROM ()

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP255: 12/1/2012 8:02:12 PM - Windows Update

RP256: 12/1/2012 10:24:41 PM - Windows Update

RP257: 12/3/2012 7:30:53 AM - Windows Update

RP258: 12/4/2012 12:54:08 AM - Windows Update

RP259: 12/5/2012 5:33:11 PM - Windows Update

RP260: 12/6/2012 3:00:32 AM - Windows Update

RP261: 12/7/2012 1:47:45 AM - Windows Update

RP262: 12/9/2012 10:05:41 PM - Windows Update

RP263: 12/12/2012 1:16:06 AM - Windows Update

RP264: 12/12/2012 3:00:16 AM - Windows Update

RP265: 12/13/2012 3:00:26 AM - Windows Update

RP266: 12/14/2012 3:08:02 AM - Windows Update

RP267: 12/14/2012 4:28:56 AM - Windows Update

RP268: 12/15/2012 3:00:17 AM - Windows Update

RP269: 12/15/2012 3:55:06 AM - Windows Update

RP270: 12/15/2012 1:07:23 PM - Restore Operation

RP271: 12/15/2012 1:18:37 PM - Windows Update

RP272: 12/15/2012 4:41:44 PM - Windows Update

RP273: 12/17/2012 10:11:33 PM - Windows Update

RP274: 12/18/2012 1:02:16 AM - Malwarebytes Anti-Rootkit Restore Point

.

==== Installed Programs ======================

.

AccuWeather.com Cirrus

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader 9.4.4

Alps Pointing-device for VAIO

AMD USB Filter Driver

Antares Autotune VST v5.09

Apple Application Support

Apple Mobile Device Support

Apple Software Update

Application Manager for VAIO

ArcSoft WebCam Companion 3

ASIO4ALL

ATI Catalyst Install Manager

BlackBerry Device Manager 7.0

Bonjour

Catalyst Control Center - Branding

Catalyst Control Center Core Implementation

Catalyst Control Center Graphics Full Existing

Catalyst Control Center Graphics Full New

Catalyst Control Center Graphics Light

Catalyst Control Center Graphics Previews Common

Catalyst Control Center Graphics Previews Vista

Catalyst Control Center InstallProxy

Catalyst Control Center Localization All

ccc-core-static

ccc-utility64

CCC Help Chinese Standard

CCC Help Chinese Traditional

CCC Help Czech

CCC Help Danish

CCC Help Dutch

CCC Help English

CCC Help Finnish

CCC Help French

CCC Help German

CCC Help Greek

CCC Help Hungarian

CCC Help Italian

CCC Help Japanese

CCC Help Korean

CCC Help Norwegian

CCC Help Polish

CCC Help Portuguese

CCC Help Russian

CCC Help Spanish

CCC Help Swedish

CCC Help Thai

CCC Help Turkish

Click to Disc MergeModules x64

D3DX10

DivX Setup

EA SPORTS Game Face Browser Plugin 1.8.0.0

eLicenser Control

Evernote

FL Studio 9

FlipShare

Google Chrome

Google Toolbar for Internet Explorer

Google Update Helper

Hardcore

HP Deskjet 1000 J110 series Basic Device Software

HP Deskjet 1000 J110 series Help

HP Deskjet 1000 J110 series Product Improvement Study

HP Photo Creations

HP Update

IL Download Manager

iTunes

Java Auto Updater

Java 6 Update 20

Java 6 Update 20 (64-bit)

Junk Mail filter update

Media Gallery

Media Gallery MergeModules x64

Microsoft .NET Framework 4 Client Profile

Microsoft Application Error Reporting

Microsoft Office 2010

Microsoft Office Click-to-Run 2010

Microsoft Office Starter 2010 - English

Microsoft Office XP Professional with FrontPage

Microsoft Primary Interoperability Assemblies 2005

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft SQL Server Compact 3.5 SP2 ENU

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Mozilla Firefox 13.0.1 (x86 en-US)

Mozilla Maintenance Service

MSI_SPF_x64

MSVCRT

MSVCRT Redists

MSVCRT_amd64

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Oasis2Service

OOBE

PlayReady PC Runtime amd64

PMB

PMB VAIO Edition Guide

PMB VAIO Edition plug-in (Click to Disc)

PMB VAIO Edition plug-in (VAIO Image Optimizer)

PMB VAIO Edition plug-in (VAIO Movie Story)

PoiZone

QuickTime

Realtek HDMI Audio Driver for ATI

Realtek High Definition Audio Driver

Realtek USB 2.0 Card Reader

Remote Keyboard

Sawer

Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Setting Utility Series

SmartWi Connection Utility

Sony Home Network Library

Steinberg Cubase LE 5

Steinberg HALionOne

Steinberg HALionOne Essential Set

Tango

Toxic Biohazard

Unity Web Player

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

VAIO - Remote Keyboard

VAIO Care

VAIO Content Monitoring Settings

VAIO Control Center

VAIO Data Restore Tool

VAIO DVD Menu Data

VAIO Entertainment Platform

VAIO Event Service

VAIO Gate

VAIO Gate Default

VAIO Hardware Diagnostics

VAIO Help and Support

VAIO Manual

VAIO Media plus

VAIO Media plus Opening Movie

VAIO Movie Story MergeModules x64

VAIO Movie Story Template Data

VAIO Original Function Settings

VAIO Power Management

VAIO Sample Contents

VAIO Survey

VAIO Transfer Support

VAIO Update

VAIO Update Merge Module x64

VAIO Wallpaper Contents

VC80CRTRedist - 8.0.50727.4053

Vegas Pro 11.0

VLC media player 2.0.1

VMp MergeModule x64

WIDCOMM Bluetooth Software

Windows Driver Package - Broadcom Bluetooth (09/09/2009 6.2.0.9405)

Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800)

Windows Live Communications Platform

Windows Live Essentials

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Language Selector

Windows Live Mail

Windows Live Messenger

Windows Live MIME IFilter

Windows Live Movie Maker

Windows Live Photo Common

Windows Live Photo Gallery

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live Sync

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

WinRAR archiver

.

==== Event Viewer Messages From Past Week ========

.

12/18/2012 1:21:21 AM, Error: Service Control Manager [7024] - The HomeGroup Listener service terminated with service-specific error %%-2147023143.

12/18/2012 1:20:54 AM, Error: Service Control Manager [7034] - The Oasis2Service service terminated unexpectedly. It has done this 1 time(s).

12/18/2012 1:05:50 AM, Error: Service Control Manager [7034] - The McAfee Application Installer Cleanup (0254141355800424) service terminated unexpectedly. It has done this 1 time(s).

12/18/2012 1:05:37 AM, Error: Service Control Manager [7003] - The IPsec Policy Agent service depends the following service: BFE. This service might not be installed.

12/18/2012 1:05:17 AM, Error: Service Control Manager [7003] - The IKE and AuthIP IPsec Keying Modules service depends the following service: BFE. This service might not be installed.

12/18/2012 1:05:07 AM, Error: Service Control Manager [7023] - The Computer Browser service terminated with the following error: The specified service does not exist as an installed service.

.

==== End Of File ===========================

DDS (Ver_2012-11-20.01) - NTFS_AMD64

Internet Explorer: 9.0.8112.16457

Run by Ariel at 1:24:53 on 2012-12-18

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3835.2662 [GMT -5:00]

.

AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}

FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\atieclxx.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\taskhost.exe

C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe

C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler.exe

C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler64.exe

C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe

C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe

C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe

C:\Windows\SysWOW64\DllHost.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\taskeng.exe

C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe

C:\Program Files\Sony\VAIO Update Common\VUAgent.exe

C:\Program Files\Sony\VAIO Care\VCPerfService.exe

C:\Program Files\Sony\VAIO Care\listener.exe

C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService.exe

C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\system32\wuauclt.exe

C:\Program Files\Sony\VAIO Care\VCsystray.exe

C:\Program Files\Sony\VAIO Care\VCService.exe

C:\Program Files\Sony\VAIO Care\VCAgent.exe

C:\Windows\System32\vds.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.facebook.com/home.php?ref=hp

uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT

mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT

mDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=SNNT&bmod=SNNT

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

uRun: [{04469BE6-4865-472C-8631-26BC266EE322}] rundll32.exe ",DllRegisterServerW

mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe

mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

dRunOnce: [DeleteEngineAfterUpdate] reg DELETE HKCU\Software\AppDataLow\Software\ConduitEngine /f

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-Explorer: NoActiveDesktopChanges = dword:1

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~3\Office10\EXCEL.EXE/3000

IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_70C5B381380DB17F.dll/cmsidewiki.html

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

IE: {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - {BC0E0A5D-AB5A-4fa4-A5FA-280E1D58EEEE} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll

DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} - hxxp://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab

DPF: {4A85DBE0-BFB2-4119-8401-186A7C6EB653} - hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/Default/mjss/MJSS.cab109791.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

TCP: NameServer = 65.32.5.111 65.32.5.112

TCP: Interfaces\{37026458-AE80-4DB9-B16D-424E3595298C} : DHCPNameServer = 65.32.5.111 65.32.5.112

TCP: Interfaces\{37026458-AE80-4DB9-B16D-424E3595298C}\2375942554233333 : DHCPNameServer = 192.168.1.254

TCP: Interfaces\{37026458-AE80-4DB9-B16D-424E3595298C}\C696E6B6379737 : DHCPNameServer = 75.75.75.75 75.75.76.76

TCP: Interfaces\{37026458-AE80-4DB9-B16D-424E3595298C}\E4544574541425 : DHCPNameServer = 192.168.0.1

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

SSODL: WebCheck - <orphaned>

x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

x64-BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

x64-Run: [MRT] "C:\Windows\System32\MRT.exe" /R

x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

x64-DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab

x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

x64-SSODL: WebCheck - <orphaned>

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\

FF - prefs.js: browser.search.selectedEngine - Search The Web

FF - component: C:\Program Files (x86)\McAfee\SiteAdvisor\components\McFFPlg.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko10.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko19.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko5.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko6.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko7.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko8.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\components\RadioWMPCoreGecko9.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko19.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko5.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko6.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko7.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko8.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCoreGecko9.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}\components\dtTransparency.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}\components\dtTransparency3.5.dll

FF - component: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\hsp88b6q.default\extensions\{c3721e85-f0ac-4b7e-ae4c-3e738011dc9d}\components\dtTransparency3.6.dll

FF - plugin: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\McAfee\SiteAdvisor\NPMcFFPlg32.dll

FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_257.dll

.

============= SERVICES / DRIVERS ===============

.

R0 amd_sata;amd_sata;C:\Windows\System32\drivers\amd_sata.sys [2010-7-21 73856]

R0 amd_xata;amd_xata;C:\Windows\System32\drivers\amd_xata.sys [2010-7-21 28800]

R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2010-8-10 55856]

R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2010-7-7 202752]

R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2012-1-4 822624]

R2 FlipShareServer;FlipShare Server;C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe [2010-12-15 1085440]

R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2009-10-24 360224]

R2 SampleCollector;VAIO Care Performance Service;C:\Program Files\Sony\VAIO Care\VCPerfService.exe [2012-1-2 259192]

R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-1 508776]

R2 VCFw;VAIO Content Folder Watcher;C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2010-3-18 852336]

R2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2010-2-19 529776]

R2 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2010-2-19 386416]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2010-8-10 242720]

R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2010-4-7 346144]

R3 SFEP;Sony Firmware Extension Parser;C:\Windows\System32\drivers\SFEP.sys [2010-4-8 12032]

R3 Sftfs;Sftfs;C:\Windows\System32\drivers\Sftfslh.sys [2011-10-1 764264]

R3 Sftplay;Sftplay;C:\Windows\System32\drivers\Sftplaylh.sys [2011-10-1 268648]

R3 Sftredir;Sftredir;C:\Windows\System32\drivers\Sftredirlh.sys [2011-10-1 25960]

R3 Sftvol;Sftvol;C:\Windows\System32\drivers\Sftvollh.sys [2011-10-1 22376]

R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-1 219496]

R3 SpfService;VAIO Entertainment Common Service;C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService.exe [2010-2-8 302448]

R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2010-8-10 38456]

R3 VCService;VCService;C:\Program Files\Sony\VAIO Care\VCService.exe [2012-1-2 44736]

R3 VUAgent;VUAgent;C:\Program Files\Sony\VAIO Update Common\VUAgent.exe [2011-10-27 1429608]

S2 0254141355800424mcinstcleanup;McAfee Application Installer Cleanup (0254141355800424);C:\Windows\TEMP\025414~1.EXE -cleanup -nolog --> C:\Windows\TEMP\025414~1.EXE -cleanup -nolog [?]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 Oasis2Service;Oasis2Service;C:\Program Files (x86)\DDNi\Oasis2Service\Oasis2Service.exe [2012-11-13 60416]

S3 SOHCImp;VAIO Media plus Content Importer;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2010-8-10 108400]

S3 SOHDms;VAIO Media plus Digital Media Server;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2010-8-10 422768]

S3 SOHDs;VAIO Media plus Device Searcher;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2010-8-10 67952]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-7-2 59392]

S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 52736]

S3 VAIO Power Management;VAIO Power Management;C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2010-8-10 574320]

S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2010-2-19 115568]

S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-1-13 1255736]

S3 WDC_SAM;WD SCSI Pass Thru driver;C:\Windows\System32\drivers\wdcsam64.sys [2008-5-6 14464]

.

=============== Created Last 30 ================

.

2012-12-18 05:14:25 -------- d-----w- C:\ProgramData\Malwarebytes

2012-12-18 03:32:03 -------- d-----w- C:\Windows\ERUNT

2012-12-18 03:31:24 -------- d-----w- C:\JRT

2012-12-15 18:39:17 -------- d-----w- C:\Program Files\iPod

2012-12-15 18:39:16 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2012-12-15 18:39:16 -------- d-----w- C:\Program Files\iTunes

2012-12-15 18:39:16 -------- d-----w- C:\Program Files (x86)\iTunes

2012-12-13 07:42:29 2048 ----a-w- C:\Windows\SysWow64\tzres.dll

2012-12-13 07:41:40 478208 ----a-w- C:\Windows\System32\dpnet.dll

2012-12-13 07:41:40 376832 ----a-w- C:\Windows\SysWow64\dpnet.dll

2012-12-04 02:09:45 -------- d-----w- C:\Program Files (x86)\Tango

2012-12-04 02:09:34 -------- d-----w- C:\Users\Ariel\AppData\Local\tango

.

==================== Find3M ====================

.

2012-12-15 18:19:19 73656 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2012-12-15 18:19:19 697272 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

2012-11-22 03:26:40 3149824 ----a-w- C:\Windows\System32\win32k.sys

2012-11-14 06:11:44 2312704 ----a-w- C:\Windows\System32\jscript9.dll

2012-11-14 06:04:11 1392128 ----a-w- C:\Windows\System32\wininet.dll

2012-11-14 06:02:49 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl

2012-11-14 05:57:46 599040 ----a-w- C:\Windows\System32\vbscript.dll

2012-11-14 05:57:35 173056 ----a-w- C:\Windows\System32\ieUnatt.exe

2012-11-14 05:52:40 2382848 ----a-w- C:\Windows\System32\mshtml.tlb

2012-11-14 02:09:22 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll

2012-11-14 01:58:15 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl

2012-11-14 01:57:37 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll

2012-11-14 01:49:25 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe

2012-11-14 01:48:27 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll

2012-11-14 01:44:42 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb

2012-11-09 05:45:09 2048 ----a-w- C:\Windows\System32\tzres.dll

2012-11-05 21:35:16 46080 ----a-w- C:\Windows\System32\atmlib.dll

2012-11-05 20:41:32 367616 ----a-w- C:\Windows\System32\atmfd.dll

2012-11-05 20:32:16 295424 ----a-w- C:\Windows\SysWow64\atmfd.dll

2012-11-05 20:32:09 34304 ----a-w- C:\Windows\SysWow64\atmlib.dll

2012-10-25 08:12:26 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx

2012-10-25 08:12:26 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts

2012-10-16 08:38:37 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll

2012-10-16 08:38:34 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll

2012-10-16 07:39:52 561664 ----a-w- C:\Windows\apppatch\AcLayers.dll

2012-10-09 18:17:13 55296 ----a-w- C:\Windows\System32\dhcpcsvc6.dll

2012-10-09 18:17:13 226816 ----a-w- C:\Windows\System32\dhcpcore6.dll

2012-10-09 17:40:31 44032 ----a-w- C:\Windows\SysWow64\dhcpcsvc6.dll

2012-10-09 17:40:31 193536 ----a-w- C:\Windows\SysWow64\dhcpcore6.dll

2012-10-04 17:46:16 362496 ----a-w- C:\Windows\System32\wow64win.dll

2012-10-04 17:46:15 243200 ----a-w- C:\Windows\System32\wow64.dll

2012-10-04 17:46:15 13312 ----a-w- C:\Windows\System32\wow64cpu.dll

2012-10-04 17:45:55 215040 ----a-w- C:\Windows\System32\winsrv.dll

2012-10-04 17:43:28 16384 ----a-w- C:\Windows\System32\ntvdm64.dll

2012-10-04 17:41:16 424960 ----a-w- C:\Windows\System32\KernelBase.dll

2012-10-04 16:47:41 5120 ----a-w- C:\Windows\SysWow64\wow32.dll

2012-10-04 16:47:41 274944 ----a-w- C:\Windows\SysWow64\KernelBase.dll

2012-10-04 15:21:55 338432 ----a-w- C:\Windows\System32\conhost.exe

2012-10-04 14:46:46 7680 ----a-w- C:\Windows\SysWow64\instnm.exe

2012-10-04 14:46:46 25600 ----a-w- C:\Windows\SysWow64\setup16.exe

2012-10-04 14:46:44 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll

2012-10-04 14:46:43 2048 ----a-w- C:\Windows\SysWow64\user.exe

2012-10-04 14:41:50 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

2012-10-04 14:41:50 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

2012-10-04 14:41:50 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

2012-10-04 14:41:50 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

2012-10-03 17:56:54 1914248 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2012-10-03 17:44:21 70656 ----a-w- C:\Windows\System32\nlaapi.dll

2012-10-03 17:44:21 303104 ----a-w- C:\Windows\System32\nlasvc.dll

2012-10-03 17:44:17 246272 ----a-w- C:\Windows\System32\netcorehc.dll

2012-10-03 17:44:17 18944 ----a-w- C:\Windows\System32\netevent.dll

2012-10-03 17:44:16 216576 ----a-w- C:\Windows\System32\ncsi.dll

2012-10-03 17:42:16 569344 ----a-w- C:\Windows\System32\iphlpsvc.dll

2012-10-03 16:42:24 18944 ----a-w- C:\Windows\SysWow64\netevent.dll

2012-10-03 16:42:24 175104 ----a-w- C:\Windows\SysWow64\netcorehc.dll

2012-10-03 16:42:23 156672 ----a-w- C:\Windows\SysWow64\ncsi.dll

2012-10-03 16:07:26 45568 ----a-w- C:\Windows\System32\drivers\tcpipreg.sys

2012-09-25 22:47:43 78336 ----a-w- C:\Windows\SysWow64\synceng.dll

2012-09-25 22:46:17 95744 ----a-w- C:\Windows\System32\synceng.dll

.

============= FINISH: 1:25:43.37 ===============

[Woke20]

By the way when I opened AppRemover it did not give me an option that said "Clean Up a Failed Uninstall" it only said remove security apps and Avira and MB appeared so I checked them both and they were both removed. Hope I did that correctly.

[Maniac]

Are you sure that this is the only log file from Malwarebytes Anti-Rootkit?

[Woke20]

No sorry here is the other one.

Malwarebytes Anti-Rootkit 1.01.0.1011

www.malwarebytes.org

Database version: v2012.12.18.02

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

Ariel :: ARIEL-VAIO [administrator]

12/18/2012 1:00:26 AM

mbar-log-2012-12-18 (01-00-26).txt

Scan type: Quick scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P

Scan options disabled:

Objects scanned: 31656

Time elapsed: 44 minute(s), 48 second(s)

Memory Processes Detected: 1

C:\Windows\svchost.exe (Trojan.Agent) -> 3008 -> Delete on reboot.

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 3

C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\MBR_0_infected.mbam (Bootkit.TDL4.B.MBR) -> Delete on reboot.

C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Sector_0_976772701_user.mbam (Forged physical sector) -> Delete on reboot.

C:\Windows\svchost.exe (Trojan.Agent) -> Delete on reboot.

(end)

[Maniac]

Good!

Please download the latest version of TDSSKiller from here and save it to your Desktop.

• Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
  
  
• Put a checkmark beside loaded modules.
  
  
• A reboot will be needed to apply the changes. Do it.
  
• TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
  
• Then click on Change parameters in TDSSKiller.
  
• Check all boxes then click OK.
  
  
• Click the Start Scan button.
  
  
• The scan should take no longer than 2 minutes.
  
• If a suspicious object is detected, the default action will be Skip, click on Continue.
  
  
• If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
  Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
  
  Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
  
• A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
  

[Woke20]

14:40:30.0982 3624 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35

14:40:32.0339 3624 ============================================================

14:40:32.0339 3624 Current date / time: 2012/12/20 14:40:32.0339

14:40:32.0339 3624 SystemInfo:

14:40:32.0339 3624

14:40:32.0339 3624 OS Version: 6.1.7601 ServicePack: 1.0

14:40:32.0339 3624 Product type: Workstation

14:40:32.0339 3624 ComputerName: ARIEL-VAIO

14:40:32.0339 3624 UserName: Ariel

14:40:32.0339 3624 Windows directory: C:\Windows

14:40:32.0339 3624 System windows directory: C:\Windows

14:40:32.0339 3624 Running under WOW64

14:40:32.0339 3624 Processor architecture: Intel x64

14:40:32.0339 3624 Number of processors: 2

14:40:32.0339 3624 Page size: 0x1000

14:40:32.0339 3624 Boot type: Normal boot

14:40:32.0339 3624 ============================================================

14:40:36.0532 3624 BG loaded

14:40:37.0690 3624 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

14:40:37.0701 3624 ============================================================

14:40:37.0701 3624 \Device\Harddisk0\DR0:

14:40:37.0702 3624 MBR partitions:

14:40:37.0702 3624 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x12CE800, BlocksNum 0x32000

14:40:37.0702 3624 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1300800, BlocksNum 0x39085030

14:40:37.0703 3624 ============================================================

14:40:37.0737 3624 C: <-> \Device\Harddisk0\DR0\Partition2

14:40:37.0738 3624 ============================================================

14:40:37.0738 3624 Initialize success

14:40:37.0738 3624 ============================================================

14:41:06.0275 3380 ============================================================

14:41:06.0275 3380 Scan started

14:41:06.0275 3380 Mode: Manual; SigCheck; TDLFS;

14:41:06.0275 3380 ============================================================

14:41:12.0780 3380 ================ Scan system memory ========================

14:41:12.0780 3380 System memory - ok

14:41:12.0780 3380 ================ Scan services =============================

14:41:13.0654 3380 0254141355800424mcinstcleanup - ok

14:41:14.0512 3380 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys

14:41:14.0886 3380 1394ohci - ok

14:41:15.0307 3380 [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

14:41:15.0354 3380 ACDaemon - ok

14:41:15.0416 3380 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys

14:41:15.0463 3380 ACPI - ok

14:41:15.0510 3380 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys

14:41:16.0618 3380 AcpiPmi - ok

14:41:16.0711 3380 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys

14:41:16.0758 3380 adp94xx - ok

14:41:16.0820 3380 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys

14:41:16.0867 3380 adpahci - ok

14:41:16.0930 3380 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys

14:41:16.0976 3380 adpu320 - ok

14:41:17.0008 3380 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll

14:41:17.0460 3380 AeLookupSvc - ok

14:41:17.0632 3380 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys

14:41:17.0788 3380 AFD - ok

14:41:17.0850 3380 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys

14:41:17.0881 3380 agp440 - ok

14:41:17.0912 3380 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe

14:41:18.0318 3380 ALG - ok

14:41:18.0365 3380 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys

14:41:18.0396 3380 aliide - ok

14:41:18.0490 3380 [ 2AFBB7AE447A2373E20A22951EEFC92E ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

14:41:19.0098 3380 AMD External Events Utility - ok

14:41:19.0160 3380 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys

14:41:19.0176 3380 amdide - ok

14:41:19.0223 3380 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys

14:41:19.0441 3380 AmdK8 - ok

14:41:19.0956 3380 [ 7B8EE993D033EC437B2D0648E3DB034D ] amdkmdag C:\Windows\system32\DRIVERS\atipmdag.sys

14:41:20.0221 3380 amdkmdag - ok

14:41:20.0268 3380 [ F35E79CADCF770E41802910EFE70E245 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys

14:41:20.0330 3380 amdkmdap - ok

14:41:20.0377 3380 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys

14:41:20.0424 3380 AmdPPM - ok

14:41:20.0518 3380 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys

14:41:20.0549 3380 amdsata - ok

14:41:20.0580 3380 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys

14:41:20.0627 3380 amdsbs - ok

14:41:20.0674 3380 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys

14:41:20.0705 3380 amdxata - ok

14:41:20.0752 3380 [ 08E8A4172C57ABD7693A6915CF1E7A99 ] amd_sata C:\Windows\system32\drivers\amd_sata.sys

14:41:20.0783 3380 amd_sata - ok

14:41:20.0830 3380 [ 9866AF4E4AD7F16E810B6C0B8473F9CD ] amd_xata C:\Windows\system32\drivers\amd_xata.sys

14:41:20.0861 3380 amd_xata - ok

14:41:20.0908 3380 [ 2672A9DBAA6A8DEEA7EC8C7892E32A03 ] ApfiltrService C:\Windows\system32\drivers\Apfiltr.sys

14:41:20.0939 3380 ApfiltrService - ok

14:41:21.0064 3380 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys

14:41:21.0500 3380 AppID - ok

14:41:21.0547 3380 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll

14:41:21.0688 3380 AppIDSvc - ok

14:41:21.0781 3380 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll

14:41:21.0953 3380 Appinfo - ok

14:41:22.0187 3380 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

14:41:22.0218 3380 Apple Mobile Device - ok

14:41:22.0265 3380 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys

14:41:22.0296 3380 arc - ok

14:41:22.0343 3380 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys

14:41:22.0374 3380 arcsas - ok

14:41:22.0421 3380 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys

14:41:22.0514 3380 AsyncMac - ok

14:41:22.0655 3380 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys

14:41:22.0670 3380 atapi - ok

14:41:22.0780 3380 [ D6CAD7E5B05055BB8226BDCB1644DA27 ] athr C:\Windows\system32\DRIVERS\athrx.sys

14:41:22.0920 3380 athr - ok

14:41:23.0310 3380 [ 7B8EE993D033EC437B2D0648E3DB034D ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys

14:41:23.0622 3380 atikmdag - ok

14:41:23.0669 3380 [ 7C5D273E29DCC5505469B299C6F29163 ] AtiPcie C:\Windows\system32\drivers\AtiPcie.sys

14:41:23.0700 3380 AtiPcie - ok

14:41:23.0778 3380 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

14:41:23.0934 3380 AudioEndpointBuilder - ok

14:41:23.0981 3380 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll

14:41:24.0090 3380 AudioSrv - ok

14:41:24.0137 3380 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll

14:41:24.0262 3380 AxInstSV - ok

14:41:24.0386 3380 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys

14:41:24.0480 3380 b06bdrv - ok

14:41:24.0527 3380 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys

14:41:24.0574 3380 b57nd60a - ok

14:41:24.0620 3380 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll

14:41:24.0714 3380 BDESVC - ok

14:41:24.0792 3380 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys

14:41:24.0917 3380 Beep - ok

14:41:25.0135 3380 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll

14:41:25.0307 3380 BITS - ok

14:41:25.0478 3380 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys

14:41:25.0541 3380 blbdrive - ok

14:41:25.0806 3380 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

14:41:25.0853 3380 Bonjour Service - ok

14:41:25.0884 3380 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys

14:41:25.0946 3380 bowser - ok

14:41:26.0024 3380 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys

14:41:26.0180 3380 BrFiltLo - ok

14:41:26.0212 3380 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys

14:41:26.0243 3380 BrFiltUp - ok

14:41:26.0321 3380 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll

14:41:26.0414 3380 Browser - ok

14:41:26.0539 3380 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys

14:41:26.0648 3380 Brserid - ok

14:41:26.0680 3380 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys

14:41:26.0742 3380 BrSerWdm - ok

14:41:26.0804 3380 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys

14:41:26.0867 3380 BrUsbMdm - ok

14:41:26.0882 3380 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys

14:41:26.0929 3380 BrUsbSer - ok

14:41:27.0023 3380 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys

14:41:27.0132 3380 BthEnum - ok

14:41:27.0179 3380 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys

14:41:27.0241 3380 BTHMODEM - ok

14:41:27.0319 3380 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys

14:41:27.0382 3380 BthPan - ok

14:41:27.0553 3380 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys

14:41:27.0647 3380 BTHPORT - ok

14:41:27.0694 3380 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll

14:41:27.0803 3380 bthserv - ok

14:41:27.0865 3380 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys

14:41:27.0928 3380 BTHUSB - ok

14:41:27.0974 3380 [ 5C849BD7C78791C5CEE9F4651D7FE38D ] btwavdt C:\Windows\system32\drivers\btwavdt.sys

14:41:28.0006 3380 btwavdt - ok

14:41:28.0146 3380 [ 31DA517946FFE416442E864592548F8A ] btwdins C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

14:41:28.0193 3380 btwdins - ok

14:41:28.0271 3380 [ 3E1991AFA851A36DC978B0A1B0535C8B ] btwrchid C:\Windows\system32\drivers\btwrchid.sys

14:41:28.0286 3380 btwrchid - ok

14:41:28.0349 3380 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys

14:41:28.0458 3380 cdfs - ok

14:41:28.0552 3380 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys

14:41:28.0614 3380 cdrom - ok

14:41:28.0708 3380 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll

14:41:28.0832 3380 CertPropSvc - ok

14:41:28.0895 3380 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys

14:41:28.0957 3380 circlass - ok

14:41:29.0004 3380 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys

14:41:29.0035 3380 CLFS - ok

14:41:29.0144 3380 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

14:41:29.0176 3380 clr_optimization_v2.0.50727_32 - ok

14:41:29.0332 3380 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

14:41:29.0363 3380 clr_optimization_v2.0.50727_64 - ok

14:41:29.0519 3380 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

14:41:29.0644 3380 clr_optimization_v4.0.30319_32 - ok

14:41:29.0737 3380 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

14:41:29.0784 3380 clr_optimization_v4.0.30319_64 - ok

14:41:29.0831 3380 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys

14:41:29.0878 3380 CmBatt - ok

14:41:29.0909 3380 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys

14:41:29.0940 3380 cmdide - ok

14:41:30.0002 3380 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys

14:41:30.0065 3380 CNG - ok

14:41:30.0096 3380 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys

14:41:30.0127 3380 Compbatt - ok

14:41:30.0174 3380 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys

14:41:30.0221 3380 CompositeBus - ok

14:41:30.0236 3380 COMSysApp - ok

14:41:30.0283 3380 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys

14:41:30.0314 3380 crcdisk - ok

14:41:30.0361 3380 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll

14:41:30.0408 3380 CryptSvc - ok

14:41:30.0642 3380 [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

14:41:30.0704 3380 cvhsvc - ok

14:41:30.0782 3380 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll

14:41:30.0892 3380 DcomLaunch - ok

14:41:30.0970 3380 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll

14:41:31.0079 3380 defragsvc - ok

14:41:31.0126 3380 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys

14:41:31.0250 3380 DfsC - ok

14:41:31.0313 3380 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll

14:41:31.0360 3380 Dhcp - ok

14:41:31.0406 3380 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys

14:41:31.0531 3380 discache - ok

14:41:31.0625 3380 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys

14:41:31.0656 3380 Disk - ok

14:41:31.0765 3380 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll

14:41:31.0812 3380 Dnscache - ok

14:41:31.0890 3380 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll

14:41:31.0984 3380 dot3svc - ok

14:41:32.0046 3380 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll

14:41:32.0124 3380 DPS - ok

14:41:32.0186 3380 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys

14:41:32.0218 3380 drmkaud - ok

14:41:32.0280 3380 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys

14:41:32.0327 3380 DXGKrnl - ok

14:41:32.0389 3380 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll

14:41:32.0452 3380 EapHost - ok

14:41:32.0779 3380 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys

14:41:32.0998 3380 ebdrv - ok

14:41:33.0060 3380 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe

14:41:33.0138 3380 EFS - ok

14:41:33.0419 3380 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe

14:41:33.0512 3380 ehRecvr - ok

14:41:33.0559 3380 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe

14:41:33.0637 3380 ehSched - ok

14:41:33.0684 3380 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys

14:41:33.0731 3380 elxstor - ok

14:41:33.0762 3380 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys

14:41:33.0824 3380 ErrDev - ok

14:41:33.0902 3380 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll

14:41:34.0027 3380 EventSystem - ok

14:41:34.0105 3380 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys

14:41:34.0214 3380 exfat - ok

14:41:34.0292 3380 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys

14:41:34.0386 3380 fastfat - ok

14:41:34.0604 3380 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe

14:41:34.0714 3380 Fax - ok

14:41:34.0760 3380 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys

14:41:34.0807 3380 fdc - ok

14:41:34.0854 3380 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll

14:41:34.0948 3380 fdPHost - ok

14:41:34.0948 3380 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll

14:41:35.0057 3380 FDResPub - ok

14:41:35.0088 3380 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys

14:41:35.0119 3380 FileInfo - ok

14:41:35.0135 3380 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys

14:41:35.0260 3380 Filetrace - ok

14:41:35.0462 3380 [ 869BDE240B7FE9C7B25BD80DF85641C8 ] FlipShare Service C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe

14:41:35.0494 3380 FlipShare Service - ok

14:41:35.0603 3380 [ 9C330B7DDEE9492373041E75DA01F80C ] FlipShareServer C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe

14:41:35.0665 3380 FlipShareServer ( UnsignedFile.Multi.Generic ) - warning

14:41:35.0665 3380 FlipShareServer - detected UnsignedFile.Multi.Generic (1)

14:41:35.0712 3380 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys

14:41:35.0743 3380 flpydisk - ok

14:41:35.0821 3380 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys

14:41:35.0852 3380 FltMgr - ok

14:41:36.0024 3380 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll

14:41:36.0102 3380 FontCache - ok

14:41:36.0180 3380 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

14:41:36.0211 3380 FontCache3.0.0.0 - ok

14:41:36.0242 3380 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys

14:41:36.0274 3380 FsDepends - ok

14:41:36.0320 3380 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys

14:41:36.0336 3380 Fs_Rec - ok

14:41:36.0398 3380 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys

14:41:36.0445 3380 fvevol - ok

14:41:36.0476 3380 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys

14:41:36.0508 3380 gagp30kx - ok

14:41:36.0554 3380 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

14:41:36.0570 3380 GEARAspiWDM - ok

14:41:36.0742 3380 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll

14:41:36.0866 3380 gpsvc - ok

14:41:37.0007 3380 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

14:41:37.0038 3380 gupdate - ok

14:41:37.0100 3380 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

14:41:37.0116 3380 gupdatem - ok

14:41:37.0178 3380 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

14:41:37.0210 3380 gusvc - ok

14:41:37.0241 3380 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys

14:41:37.0334 3380 hcw85cir - ok

14:41:37.0412 3380 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

14:41:37.0475 3380 HdAudAddService - ok

14:41:37.0506 3380 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys

14:41:37.0568 3380 HDAudBus - ok

14:41:37.0600 3380 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys

14:41:37.0631 3380 HidBatt - ok

14:41:37.0662 3380 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys

14:41:37.0724 3380 HidBth - ok

14:41:37.0771 3380 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys

14:41:37.0818 3380 HidIr - ok

14:41:37.0865 3380 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll

14:41:37.0974 3380 hidserv - ok

14:41:38.0036 3380 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\drivers\hidusb.sys

14:41:38.0068 3380 HidUsb - ok

14:41:38.0114 3380 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll

14:41:38.0239 3380 hkmsvc - ok

14:41:38.0317 3380 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll

14:41:38.0411 3380 HomeGroupListener - ok

14:41:38.0489 3380 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

14:41:38.0551 3380 HomeGroupProvider - ok

14:41:38.0629 3380 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys

14:41:38.0660 3380 HpSAMD - ok

14:41:38.0801 3380 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys

14:41:38.0926 3380 HTTP - ok

14:41:38.0972 3380 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys

14:41:39.0004 3380 hwpolicy - ok

14:41:39.0066 3380 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys

14:41:39.0097 3380 i8042prt - ok

14:41:39.0238 3380 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys

14:41:39.0269 3380 iaStorV - ok

14:41:39.0378 3380 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

14:41:39.0456 3380 idsvc - ok

14:41:39.0596 3380 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys

14:41:39.0628 3380 iirsp - ok

14:41:39.0830 3380 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll

14:41:40.0049 3380 IKEEXT - ok

14:41:40.0220 3380 [ 490947A9AFF7CA31EF2E08F5776105EB ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys

14:41:40.0330 3380 IntcAzAudAddService - ok

14:41:40.0392 3380 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys

14:41:40.0423 3380 intelide - ok

14:41:40.0454 3380 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\drivers\intelppm.sys

14:41:40.0501 3380 intelppm - ok

14:41:40.0657 3380 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll

14:41:40.0782 3380 IPBusEnum - ok

14:41:40.0860 3380 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys

14:41:40.0954 3380 IpFilterDriver - ok

14:41:41.0063 3380 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys

14:41:41.0156 3380 IPMIDRV - ok

14:41:41.0188 3380 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys

14:41:41.0406 3380 IPNAT - ok

14:41:41.0531 3380 [ 0F261EC4F514926177C70C1832374231 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe

14:41:41.0578 3380 iPod Service - ok

14:41:41.0624 3380 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys

14:41:41.0718 3380 IRENUM - ok

14:41:41.0765 3380 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys

14:41:41.0780 3380 isapnp - ok

14:41:41.0874 3380 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys

14:41:41.0921 3380 iScsiPrt - ok

14:41:41.0952 3380 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys

14:41:41.0983 3380 kbdclass - ok

14:41:42.0014 3380 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys

14:41:42.0061 3380 kbdhid - ok

14:41:42.0092 3380 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe

14:41:42.0124 3380 KeyIso - ok

14:41:42.0202 3380 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys

14:41:42.0280 3380 KSecDD - ok

14:41:42.0358 3380 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys

14:41:42.0389 3380 KSecPkg - ok

14:41:42.0451 3380 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys

14:41:42.0560 3380 ksthunk - ok

14:41:42.0670 3380 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll

14:41:42.0794 3380 KtmRm - ok

14:41:42.0904 3380 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll

14:41:43.0013 3380 LanmanServer - ok

14:41:43.0060 3380 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

14:41:43.0200 3380 LanmanWorkstation - ok

14:41:43.0247 3380 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys

14:41:43.0403 3380 lltdio - ok

14:41:43.0465 3380 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll

14:41:43.0574 3380 lltdsvc - ok

14:41:43.0606 3380 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll

14:41:43.0684 3380 lmhosts - ok

14:41:43.0730 3380 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys

14:41:43.0762 3380 LSI_FC - ok

14:41:43.0793 3380 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys

14:41:43.0824 3380 LSI_SAS - ok

14:41:43.0855 3380 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys

14:41:43.0886 3380 LSI_SAS2 - ok

14:41:43.0933 3380 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys

14:41:43.0980 3380 LSI_SCSI - ok

14:41:44.0011 3380 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys

14:41:44.0120 3380 luafv - ok

14:41:44.0167 3380 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll

14:41:44.0214 3380 Mcx2Svc - ok

14:41:44.0230 3380 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys

14:41:44.0261 3380 megasas - ok

14:41:44.0308 3380 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys

14:41:44.0354 3380 MegaSR - ok

14:41:44.0401 3380 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll

14:41:44.0495 3380 MMCSS - ok

14:41:44.0620 3380 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys

14:41:44.0744 3380 Modem - ok

14:41:44.0776 3380 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys

14:41:44.0869 3380 monitor - ok

14:41:44.0916 3380 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\drivers\mouclass.sys

14:41:44.0948 3380 mouclass - ok

14:41:45.0089 3380 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\drivers\mouhid.sys

14:41:45.0151 3380 mouhid - ok

14:41:45.0323 3380 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys

14:41:45.0354 3380 mountmgr - ok

14:41:45.0713 3380 [ 15D5398EED42C2504BB3D4FC875C15D1 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

14:41:45.0775 3380 MozillaMaintenance - ok

14:41:45.0947 3380 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys

14:41:45.0979 3380 mpio - ok

14:41:46.0104 3380 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys

14:41:46.0197 3380 mpsdrv - ok

14:41:46.0338 3380 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys

14:41:46.0400 3380 MRxDAV - ok

14:41:46.0478 3380 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys

14:41:46.0525 3380 mrxsmb - ok

14:41:46.0618 3380 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys

14:41:46.0665 3380 mrxsmb10 - ok

14:41:46.0728 3380 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys

14:41:46.0759 3380 mrxsmb20 - ok

14:41:46.0774 3380 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys

14:41:46.0806 3380 msahci - ok

14:41:46.0852 3380 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys

14:41:46.0884 3380 msdsm - ok

14:41:46.0899 3380 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe

14:41:46.0946 3380 MSDTC - ok

14:41:46.0993 3380 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys

14:41:47.0055 3380 Msfs - ok

14:41:47.0086 3380 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys

14:41:47.0133 3380 mshidkmdf - ok

14:41:47.0180 3380 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys

14:41:47.0196 3380 msisadrv - ok

14:41:47.0242 3380 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll

14:41:47.0320 3380 MSiSCSI - ok

14:41:47.0320 3380 msiserver - ok

14:41:47.0352 3380 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys

14:41:47.0430 3380 MSKSSRV - ok

14:41:47.0430 3380 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys

14:41:47.0539 3380 MSPCLOCK - ok

14:41:47.0539 3380 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys

14:41:47.0632 3380 MSPQM - ok

14:41:47.0726 3380 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys

14:41:47.0773 3380 MsRPC - ok

14:41:47.0820 3380 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys

14:41:47.0851 3380 mssmbios - ok

14:41:47.0898 3380 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys

14:41:48.0007 3380 MSTEE - ok

14:41:48.0022 3380 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys

14:41:48.0054 3380 MTConfig - ok

14:41:48.0085 3380 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys

14:41:48.0116 3380 Mup - ok

14:41:48.0194 3380 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll

14:41:48.0334 3380 napagent - ok

14:41:48.0366 3380 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys

14:41:48.0444 3380 NativeWifiP - ok

14:41:48.0553 3380 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys

14:41:48.0646 3380 NDIS - ok

14:41:48.0693 3380 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys

14:41:48.0802 3380 NdisCap - ok

14:41:48.0834 3380 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys

14:41:48.0912 3380 NdisTapi - ok

14:41:48.0958 3380 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys

14:41:49.0052 3380 Ndisuio - ok

14:41:49.0146 3380 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys

14:41:49.0270 3380 NdisWan - ok

14:41:49.0333 3380 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys

14:41:49.0426 3380 NDProxy - ok

14:41:49.0473 3380 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys

14:41:49.0629 3380 NetBIOS - ok

14:41:49.0738 3380 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys

14:41:49.0816 3380 NetBT - ok

14:41:49.0848 3380 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe

14:41:49.0879 3380 Netlogon - ok

14:41:49.0941 3380 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll

14:41:50.0050 3380 Netman - ok

14:41:50.0097 3380 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll

14:41:50.0206 3380 netprofm - ok

14:41:50.0269 3380 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe

14:41:50.0300 3380 NetTcpPortSharing - ok

14:41:50.0331 3380 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys

14:41:50.0347 3380 nfrd960 - ok

14:41:50.0425 3380 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll

14:41:50.0503 3380 NlaSvc - ok

14:41:50.0550 3380 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys

14:41:50.0643 3380 Npfs - ok

14:41:50.0690 3380 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll

14:41:50.0784 3380 nsi - ok

14:41:50.0815 3380 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys

14:41:50.0893 3380 nsiproxy - ok

14:41:51.0080 3380 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys

14:41:51.0220 3380 Ntfs - ok

14:41:51.0267 3380 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys

14:41:51.0376 3380 Null - ok

14:41:51.0439 3380 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys

14:41:51.0486 3380 nvraid - ok

14:41:51.0501 3380 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys

14:41:51.0548 3380 nvstor - ok

14:41:51.0564 3380 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys

14:41:51.0595 3380 nv_agp - ok

14:41:51.0735 3380 [ 07D0A535A44DD048EE346853B0BB9349 ] Oasis2Service C:\Program Files (x86)\DDNi\Oasis2Service\Oasis2Service.exe

14:41:51.0766 3380 Oasis2Service ( UnsignedFile.Multi.Generic ) - warning

14:41:51.0766 3380 Oasis2Service - detected UnsignedFile.Multi.Generic (1)

14:41:51.0798 3380 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys

14:41:51.0829 3380 ohci1394 - ok

14:41:51.0876 3380 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

14:41:51.0907 3380 ose - ok

14:41:52.0406 3380 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

14:41:52.0734 3380 osppsvc - ok

14:41:52.0812 3380 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll

14:41:52.0874 3380 p2pimsvc - ok

14:41:52.0968 3380 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll

14:41:53.0014 3380 p2psvc - ok

14:41:53.0061 3380 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys

14:41:53.0092 3380 Parport - ok

14:41:53.0139 3380 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys

14:41:53.0170 3380 partmgr - ok

14:41:53.0233 3380 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll

14:41:53.0311 3380 PcaSvc - ok

14:41:53.0373 3380 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys

14:41:53.0404 3380 pci - ok

14:41:53.0451 3380 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys

14:41:53.0482 3380 pciide - ok

14:41:53.0529 3380 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys

14:41:53.0560 3380 pcmcia - ok

14:41:53.0607 3380 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys

14:41:53.0638 3380 pcw - ok

14:41:53.0670 3380 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys

14:41:53.0794 3380 PEAUTH - ok

14:41:55.0495 3380 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe

14:41:55.0542 3380 PerfHost - ok

14:41:55.0651 3380 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll

14:41:55.0807 3380 pla - ok

14:41:55.0900 3380 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll

14:41:55.0963 3380 PlugPlay - ok

14:41:56.0259 3380 [ 627FA58ADC043704F9D14CA44340956F ] PMBDeviceInfoProvider C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

14:41:56.0322 3380 PMBDeviceInfoProvider - ok

14:41:56.0368 3380 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll

14:41:56.0415 3380 PNRPAutoReg - ok

14:41:56.0478 3380 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll

14:41:56.0509 3380 PNRPsvc - ok

14:41:56.0618 3380 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll

14:41:56.0727 3380 PolicyAgent - ok

14:41:56.0790 3380 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll

14:41:56.0899 3380 Power - ok

14:41:56.0930 3380 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys

14:41:57.0039 3380 PptpMiniport - ok

14:41:57.0070 3380 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys

14:41:57.0117 3380 Processor - ok

14:41:57.0180 3380 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll

14:41:57.0226 3380 ProfSvc - ok

14:41:57.0273 3380 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe

14:41:57.0289 3380 ProtectedStorage - ok

14:41:57.0351 3380 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys

14:41:57.0460 3380 Psched - ok

14:41:57.0507 3380 [ 87B04878A6D59D6C79251DC960C674C1 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys

14:41:57.0554 3380 PxHlpa64 - ok

14:41:57.0757 3380 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys

14:41:57.0882 3380 ql2300 - ok

14:41:57.0928 3380 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys

14:41:57.0960 3380 ql40xx - ok

14:41:58.0007 3380 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll

14:41:58.0053 3380 QWAVE - ok

14:41:58.0100 3380 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys

14:41:58.0147 3380 QWAVEdrv - ok

14:41:58.0178 3380 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys

14:41:58.0287 3380 RasAcd - ok

14:41:58.0334 3380 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys

14:41:58.0428 3380 RasAgileVpn - ok

14:41:58.0475 3380 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll

14:41:58.0568 3380 RasAuto - ok

14:41:58.0631 3380 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys

14:41:58.0740 3380 Rasl2tp - ok

14:41:58.0802 3380 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll

14:41:58.0911 3380 RasMan - ok

14:41:58.0958 3380 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys

14:41:59.0067 3380 RasPppoe - ok

14:41:59.0099 3380 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys

14:41:59.0192 3380 RasSstp - ok

14:41:59.0286 3380 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys

14:41:59.0395 3380 rdbss - ok

14:41:59.0442 3380 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys

14:41:59.0489 3380 rdpbus - ok

14:41:59.0535 3380 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys

14:41:59.0660 3380 RDPCDD - ok

14:41:59.0707 3380 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys

14:41:59.0816 3380 RDPENCDD - ok

14:41:59.0847 3380 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys

14:41:59.0941 3380 RDPREFMP - ok

14:42:00.0019 3380 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys

14:42:00.0081 3380 RDPWD - ok

14:42:00.0159 3380 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys

14:42:00.0206 3380 rdyboost - ok

14:42:00.0237 3380 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll

14:42:00.0362 3380 RemoteAccess - ok

14:42:00.0409 3380 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll

14:42:00.0518 3380 RemoteRegistry - ok

14:42:00.0596 3380 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys

14:42:00.0659 3380 RFCOMM - ok

14:42:00.0737 3380 [ AD42432D22940B4215177BE113E4919C ] RimUsb C:\Windows\system32\Drivers\RimUsb_AMD64.sys

14:42:00.0815 3380 RimUsb - ok

14:42:00.0893 3380 [ 4AAFFFA67AC4DFA3D9985D78573887E2 ] RimVSerPort C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys

14:42:00.0955 3380 RimVSerPort - ok

14:42:01.0017 3380 [ 388D3DD1A6457280F3BADBA9F3ACD6B1 ] ROOTMODEM C:\Windows\system32\Drivers\RootMdm.sys

14:42:01.0111 3380 ROOTMODEM - ok

14:42:01.0158 3380 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll

14:42:01.0251 3380 RpcEptMapper - ok

14:42:01.0314 3380 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe

14:42:01.0345 3380 RpcLocator - ok

14:42:01.0423 3380 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll

14:42:01.0532 3380 RpcSs - ok

14:42:01.0579 3380 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys

14:42:01.0673 3380 rspndr - ok

14:42:01.0735 3380 [ 5AAB4808E8CCAE8C2ECDA5B791260616 ] RSUSBSTOR C:\Windows\system32\Drivers\RtsUStor.sys

14:42:01.0766 3380 RSUSBSTOR - ok

14:42:01.0829 3380 [ D6D381B76056C668679723938F06F16C ] RTHDMIAzAudService C:\Windows\system32\drivers\RtHDMIVX.sys

14:42:01.0860 3380 RTHDMIAzAudService - ok

14:42:01.0907 3380 [ 7EA8D2EB9BBFD2AB8A3117A1E96D3B3A ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys

14:42:01.0953 3380 RTL8167 - ok

14:42:02.0016 3380 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe

14:42:02.0047 3380 SamSs - ok

14:42:02.0125 3380 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys

14:42:02.0156 3380 sbp2port - ok

14:42:02.0187 3380 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll

14:42:02.0297 3380 SCardSvr - ok

14:42:02.0343 3380 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys

[Woke20]

14:42:02.0343 3380 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys

14:42:02.0453 3380 scfilter - ok

14:42:02.0593 3380 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll

14:42:02.0671 3380 Schedule - ok

14:42:02.0718 3380 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll

14:42:02.0765 3380 SCPolicySvc - ok

14:42:02.0827 3380 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll

14:42:02.0874 3380 SDRSVC - ok

14:42:02.0905 3380 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys

14:42:02.0999 3380 secdrv - ok

14:42:03.0061 3380 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll

14:42:03.0155 3380 seclogon - ok

14:42:03.0201 3380 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll

14:42:03.0311 3380 SENS - ok

14:42:03.0357 3380 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll

14:42:03.0404 3380 SensrSvc - ok

14:42:03.0435 3380 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys

14:42:03.0482 3380 Serenum - ok

14:42:03.0529 3380 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys

14:42:03.0560 3380 Serial - ok

14:42:03.0607 3380 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys

14:42:03.0638 3380 sermouse - ok

14:42:03.0732 3380 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll

14:42:03.0857 3380 SessionEnv - ok

14:42:03.0903 3380 [ 286D3889E6AB5589646FF8A63CB928AE ] SFEP C:\Windows\system32\drivers\SFEP.sys

14:42:03.0950 3380 SFEP - ok

14:42:04.0013 3380 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys

14:42:04.0075 3380 sffdisk - ok

14:42:04.0106 3380 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys

14:42:04.0153 3380 sffp_mmc - ok

14:42:04.0215 3380 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys

14:42:04.0262 3380 sffp_sd - ok

14:42:04.0325 3380 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys

14:42:04.0356 3380 sfloppy - ok

14:42:04.0449 3380 [ C6CC9297BD53E5229653303E556AA539 ] Sftfs C:\Windows\system32\DRIVERS\Sftfslh.sys

14:42:04.0496 3380 Sftfs - ok

14:42:04.0590 3380 [ 13693B6354DD6E72DC5131DA7D764B90 ] sftlist C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

14:42:04.0637 3380 sftlist - ok

14:42:04.0668 3380 [ 390AA7BC52CEE43F6790CDEA1E776703 ] Sftplay C:\Windows\system32\DRIVERS\Sftplaylh.sys

14:42:04.0715 3380 Sftplay - ok

14:42:04.0746 3380 [ 617E29A0B0A2807466560D4C4E338D3E ] Sftredir C:\Windows\system32\DRIVERS\Sftredirlh.sys

14:42:04.0761 3380 Sftredir - ok

14:42:04.0793 3380 [ 8F571F016FA1976F445147E9E6C8AE9B ] Sftvol C:\Windows\system32\DRIVERS\Sftvollh.sys

14:42:04.0824 3380 Sftvol - ok

14:42:04.0855 3380 [ C3CDDD18F43D44AB713CF8C4916F7696 ] sftvsa C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

14:42:04.0886 3380 sftvsa - ok

14:42:04.0949 3380 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll

14:42:05.0058 3380 SharedAccess - ok

14:42:05.0136 3380 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll

14:42:05.0276 3380 ShellHWDetection - ok

14:42:05.0307 3380 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys

14:42:05.0339 3380 SiSRaid2 - ok

14:42:05.0401 3380 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys

14:42:05.0432 3380 SiSRaid4 - ok

14:42:05.0479 3380 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys

14:42:05.0557 3380 Smb - ok

14:42:05.0604 3380 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe

14:42:05.0651 3380 SNMPTRAP - ok

14:42:05.0713 3380 [ C3E69DB0A4E59564230E053232F39AC7 ] SOHCImp C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe

14:42:05.0729 3380 SOHCImp - ok

14:42:05.0760 3380 [ C1CD71C672EA281A424FBCF24AC99553 ] SOHDms C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe

14:42:05.0775 3380 SOHDms - ok

14:42:05.0807 3380 [ F47D75CEE1844EEF4A9EA6EE768828FB ] SOHDs C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe

14:42:05.0807 3380 SOHDs - ok

14:42:05.0869 3380 [ E2E40C0D24456B6EB440BE01AF829829 ] SpfService C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService.exe

14:42:05.0885 3380 SpfService - ok

14:42:05.0900 3380 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys

14:42:05.0916 3380 spldr - ok

14:42:05.0978 3380 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe

14:42:06.0025 3380 Spooler - ok

14:42:06.0134 3380 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe

14:42:06.0384 3380 sppsvc - ok

14:42:06.0415 3380 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll

14:42:06.0524 3380 sppuinotify - ok

14:42:06.0602 3380 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys

14:42:06.0665 3380 srv - ok

14:42:06.0727 3380 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys

14:42:06.0774 3380 srv2 - ok

14:42:06.0805 3380 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys

14:42:06.0836 3380 srvnet - ok

14:42:06.0883 3380 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll

14:42:06.0977 3380 SSDPSRV - ok

14:42:07.0008 3380 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll

14:42:07.0101 3380 SstpSvc - ok

14:42:07.0117 3380 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys

14:42:07.0148 3380 stexstor - ok

14:42:07.0226 3380 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll

14:42:07.0289 3380 stisvc - ok

14:42:07.0335 3380 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys

14:42:07.0351 3380 swenum - ok

14:42:07.0413 3380 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll

14:42:07.0538 3380 swprv - ok

14:42:07.0663 3380 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll

14:42:07.0757 3380 SysMain - ok

14:42:07.0819 3380 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll

14:42:07.0850 3380 TabletInputService - ok

14:42:07.0897 3380 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll

14:42:08.0006 3380 TapiSrv - ok

14:42:08.0069 3380 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll

14:42:08.0147 3380 TBS - ok

14:42:08.0240 3380 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\Windows\system32\drivers\tcpip.sys

14:42:08.0381 3380 Tcpip - ok

14:42:08.0474 3380 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys

14:42:08.0521 3380 TCPIP6 - ok

14:42:08.0583 3380 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys

14:42:08.0630 3380 tcpipreg - ok

14:42:08.0677 3380 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys

14:42:08.0724 3380 TDPIPE - ok

14:42:08.0802 3380 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys

14:42:08.0849 3380 TDTCP - ok

14:42:08.0911 3380 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys

14:42:08.0989 3380 tdx - ok

14:42:09.0036 3380 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys

14:42:09.0067 3380 TermDD - ok

14:42:09.0129 3380 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll

14:42:09.0254 3380 TermService - ok

14:42:09.0301 3380 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll

14:42:09.0363 3380 Themes - ok

14:42:09.0410 3380 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll

14:42:09.0504 3380 THREADORDER - ok

14:42:09.0535 3380 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll

14:42:09.0644 3380 TrkWks - ok

14:42:09.0722 3380 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

14:42:09.0831 3380 TrustedInstaller - ok

14:42:09.0894 3380 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys

14:42:09.0987 3380 tssecsrv - ok

14:42:10.0081 3380 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys

14:42:10.0143 3380 TsUsbFlt - ok

14:42:10.0190 3380 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys

14:42:10.0299 3380 tunnel - ok

14:42:10.0346 3380 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys

14:42:10.0377 3380 uagp35 - ok

14:42:10.0440 3380 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys

14:42:10.0549 3380 udfs - ok

14:42:10.0596 3380 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe

14:42:10.0627 3380 UI0Detect - ok

14:42:10.0658 3380 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys

14:42:10.0689 3380 uliagpkx - ok

14:42:10.0736 3380 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys

14:42:10.0767 3380 umbus - ok

14:42:10.0814 3380 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys

14:42:10.0845 3380 UmPass - ok

14:42:10.0892 3380 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll

14:42:11.0017 3380 upnphost - ok

14:42:11.0064 3380 [ AF1B9474D67897D0C2CFF58E0ACEACCC ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys

14:42:11.0095 3380 USBAAPL64 ( UnsignedFile.Multi.Generic ) - warning

14:42:11.0095 3380 USBAAPL64 - detected UnsignedFile.Multi.Generic (1)

14:42:11.0126 3380 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys

14:42:11.0189 3380 usbaudio - ok

14:42:11.0220 3380 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys

14:42:11.0282 3380 usbccgp - ok

14:42:11.0329 3380 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys

14:42:11.0360 3380 usbcir - ok

14:42:11.0391 3380 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys

14:42:11.0407 3380 usbehci - ok

14:42:11.0501 3380 [ 2C780746DC44A28FE67004DC58173F05 ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys

14:42:11.0532 3380 usbfilter - ok

14:42:11.0657 3380 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys

14:42:11.0719 3380 usbhub - ok

14:42:11.0813 3380 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys

14:42:11.0875 3380 usbohci - ok

14:42:11.0937 3380 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys

14:42:12.0000 3380 usbprint - ok

14:42:12.0078 3380 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys

14:42:12.0140 3380 usbscan - ok

14:42:12.0171 3380 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS

14:42:12.0249 3380 USBSTOR - ok

14:42:12.0296 3380 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys

14:42:12.0360 3380 usbuhci - ok

14:42:12.0874 3380 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys

14:42:12.0906 3380 usbvideo - ok

14:42:13.0030 3380 [ 70D05EE263568A742D14E1876DF80532 ] usb_rndisx C:\Windows\system32\drivers\usb8023x.sys

14:42:13.0108 3380 usb_rndisx - ok

14:42:13.0171 3380 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll

14:42:13.0264 3380 UxSms - ok

14:42:13.0436 3380 [ 4E7135D6D0127067E4CFEE12259F895D ] VAIO Entertainment TV Device Arbitration Service C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe

14:42:13.0483 3380 VAIO Entertainment TV Device Arbitration Service ( UnsignedFile.Multi.Generic ) - warning

14:42:13.0483 3380 VAIO Entertainment TV Device Arbitration Service - detected UnsignedFile.Multi.Generic (1)

14:42:13.0592 3380 [ 218F78B39832A2A0761CE2422828A57C ] VAIO Event Service C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe

14:42:13.0623 3380 VAIO Event Service - ok

14:42:13.0717 3380 [ 1CF1A4DD7A58C966C9014B83C7229CF3 ] VAIO Power Management C:\Program Files\Sony\VAIO Power Management\SPMService.exe

14:42:13.0779 3380 VAIO Power Management - ok

14:42:13.0826 3380 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe

14:42:13.0842 3380 VaultSvc - ok

14:42:14.0372 3380 [ 917FB366B6CF2834CDBF9256D18A8FF0 ] VCFw C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe

14:42:14.0481 3380 VCFw - ok

14:42:14.0559 3380 [ 10E212BFB7EAB152A64C1AAEC2F7F4E0 ] VcmIAlzMgr C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe

14:42:14.0606 3380 VcmIAlzMgr - ok

14:42:14.0637 3380 [ 7A88CFD3FE99F2C9B95A6E2A08B96E14 ] VcmINSMgr C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe

14:42:14.0668 3380 VcmINSMgr - ok

14:42:14.0762 3380 [ 8EFAACCC7BFA1E9031EFDFB01A1B0D69 ] VcmXmlIfHelper C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe

14:42:14.0778 3380 VcmXmlIfHelper - ok

14:42:14.0871 3380 [ D347D3ABE070AA09C22FC37121555D52 ] VCService C:\Program Files\Sony\VAIO Care\VCService.exe

14:42:14.0902 3380 VCService - ok

14:42:14.0934 3380 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys

14:42:14.0980 3380 vdrvroot - ok

14:42:15.0152 3380 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe

14:42:15.0261 3380 vds - ok

14:42:15.0292 3380 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys

14:42:15.0339 3380 vga - ok

14:42:15.0370 3380 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys

14:42:15.0464 3380 VgaSave - ok

14:42:15.0573 3380 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys

14:42:15.0620 3380 vhdmp - ok

14:42:15.0667 3380 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys

14:42:15.0698 3380 viaide - ok

14:42:15.0729 3380 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys

14:42:15.0760 3380 volmgr - ok

14:42:15.0807 3380 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys

14:42:15.0854 3380 volmgrx - ok

14:42:15.0901 3380 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys

14:42:15.0932 3380 volsnap - ok

14:42:16.0010 3380 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys

14:42:16.0041 3380 vsmraid - ok

14:42:16.0338 3380 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe

14:42:16.0494 3380 VSS - ok

14:42:16.0696 3380 [ D62D16E057BE87F5B84A54D1B83822C4 ] VUAgent C:\Program Files\Sony\VAIO Update Common\VUAgent.exe

14:42:16.0774 3380 VUAgent - ok

14:42:16.0821 3380 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys

14:42:16.0884 3380 vwifibus - ok

14:42:16.0899 3380 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys

14:42:16.0962 3380 vwififlt - ok

14:42:16.0993 3380 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys

14:42:17.0024 3380 vwifimp - ok

14:42:17.0118 3380 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll

14:42:17.0242 3380 W32Time - ok

14:42:17.0320 3380 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys

14:42:17.0352 3380 WacomPen - ok

14:42:17.0398 3380 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys

14:42:17.0523 3380 WANARP - ok

14:42:17.0539 3380 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys

14:42:17.0632 3380 Wanarpv6 - ok

14:42:17.0726 3380 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe

14:42:17.0835 3380 WatAdminSvc - ok

14:42:18.0007 3380 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe

14:42:18.0132 3380 wbengine - ok

14:42:18.0194 3380 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll

14:42:18.0241 3380 WbioSrvc - ok

14:42:18.0350 3380 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll

14:42:18.0412 3380 wcncsvc - ok

14:42:18.0428 3380 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

14:42:18.0475 3380 WcsPlugInService - ok

14:42:18.0506 3380 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys

14:42:18.0537 3380 Wd - ok

14:42:18.0615 3380 [ A3D04EBF5227886029B4532F20D026F7 ] WDC_SAM C:\Windows\system32\DRIVERS\wdcsam64.sys

14:42:18.0693 3380 WDC_SAM - ok

14:42:18.0849 3380 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys

14:42:18.0974 3380 Wdf01000 - ok

14:42:19.0005 3380 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll

14:42:19.0458 3380 WdiServiceHost - ok

14:42:19.0520 3380 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll

14:42:19.0567 3380 WdiSystemHost - ok

14:42:19.0676 3380 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll

14:42:19.0754 3380 WebClient - ok

14:42:20.0378 3380 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll

14:42:20.0487 3380 Wecsvc - ok

14:42:20.0581 3380 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll

14:42:20.0721 3380 wercplsupport - ok

14:42:20.0830 3380 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll

14:42:20.0940 3380 WerSvc - ok

14:42:21.0033 3380 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys

14:42:21.0127 3380 WfpLwf - ok

14:42:21.0189 3380 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys

14:42:21.0220 3380 WIMMount - ok

14:42:21.0252 3380 WinHttpAutoProxySvc - ok

14:42:21.0486 3380 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll

14:42:21.0657 3380 Winmgmt - ok

14:42:23.0030 3380 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll

14:42:23.0326 3380 WinRM - ok

14:42:23.0436 3380 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys

14:42:23.0514 3380 WinUsb - ok

14:42:23.0685 3380 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll

14:42:23.0919 3380 Wlansvc - ok

14:42:24.0528 3380 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

14:42:24.0637 3380 wlidsvc - ok

14:42:24.0746 3380 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys

14:42:24.0793 3380 WmiAcpi - ok

14:42:24.0964 3380 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe

14:42:25.0027 3380 wmiApSrv - ok

14:42:25.0152 3380 WMPNetworkSvc - ok

14:42:25.0292 3380 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll

14:42:25.0479 3380 WPCSvc - ok

14:42:25.0588 3380 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll

14:42:25.0620 3380 WPDBusEnum - ok

14:42:25.0729 3380 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys

14:42:25.0822 3380 ws2ifsl - ok

14:42:25.0838 3380 WSearch - ok

14:42:26.0197 3380 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll

14:42:26.0322 3380 wuauserv - ok

14:42:26.0400 3380 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys

14:42:26.0462 3380 WudfPf - ok

14:42:26.0509 3380 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys

14:42:26.0571 3380 WUDFRd - ok

14:42:26.0618 3380 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll

14:42:26.0665 3380 wudfsvc - ok

14:42:26.0712 3380 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll

14:42:26.0805 3380 WwanSvc - ok

14:42:26.0899 3380 ================ Scan global ===============================

14:42:26.0977 3380 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll

14:42:27.0070 3380 [ 72CC564BBC70DE268784BCE91EB8A28F ] C:\Windows\system32\winsrv.dll

14:42:27.0102 3380 [ 72CC564BBC70DE268784BCE91EB8A28F ] C:\Windows\system32\winsrv.dll

14:42:27.0133 3380 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

14:42:27.0195 3380 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe

14:42:27.0195 3380 [Global] - ok

14:42:27.0195 3380 ================ Scan MBR ==================================

14:42:27.0242 3380 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

14:42:29.0379 3380 \Device\Harddisk0\DR0 - ok

14:42:29.0395 3380 ================ Scan VBR ==================================

14:42:29.0426 3380 [ C1ADE0F83D98CDC06E9E0AFF93B45316 ] \Device\Harddisk0\DR0\Partition1

14:42:29.0426 3380 \Device\Harddisk0\DR0\Partition1 - ok

14:42:29.0457 3380 [ 3B0CB009B03A1AC6813B64690B2B0323 ] \Device\Harddisk0\DR0\Partition2

14:42:29.0488 3380 \Device\Harddisk0\DR0\Partition2 - ok

14:42:29.0488 3380 ================ Scan active images ========================

14:42:29.0488 3380 [ 08E8A4172C57ABD7693A6915CF1E7A99 ] C:\Windows\System32\drivers\amd_sata.sys

14:42:29.0488 3380 C:\Windows\System32\drivers\amd_sata.sys - ok

14:42:29.0504 3380 [ 3E588B60EC061686BA05D33574A344C6 ] C:\Windows\System32\drivers\crashdmp.sys

14:42:29.0504 3380 C:\Windows\System32\drivers\crashdmp.sys - ok

14:42:29.0520 3380 [ 9BBD8B5855BC6578957F82341F9CDE5A ] C:\Windows\System32\drivers\Diskdump.sys

14:42:29.0520 3380 C:\Windows\System32\drivers\Diskdump.sys - ok

14:42:29.0535 3380 [ 814DB88F2641691575A455CF25354098 ] C:\Windows\System32\drivers\dumpfve.sys

14:42:29.0535 3380 C:\Windows\System32\drivers\dumpfve.sys - ok

14:42:29.0551 3380 [ 16A47CE2DECC9B099349A5F840654746 ] C:\Windows\System32\drivers\beep.sys

14:42:29.0551 3380 C:\Windows\System32\drivers\beep.sys - ok

14:42:29.0551 3380 [ F036CE71586E93D94DAB220D7BDF4416 ] C:\Windows\System32\drivers\cdrom.sys

14:42:29.0551 3380 C:\Windows\System32\drivers\cdrom.sys - ok

14:42:29.0566 3380 [ 9899284589F75FA8724FF3D16AED75C1 ] C:\Windows\System32\drivers\null.sys

14:42:29.0566 3380 C:\Windows\System32\drivers\null.sys - ok

14:42:29.0582 3380 [ CEA6CC257FC9B7715F1C2B4849286D24 ] C:\Windows\System32\drivers\RDPCDD.sys

14:42:29.0582 3380 C:\Windows\System32\drivers\RDPCDD.sys - ok

14:42:29.0598 3380 [ BB5971A4F00659529A5C44831AF22365 ] C:\Windows\System32\drivers\RDPENCDD.sys

14:42:29.0598 3380 C:\Windows\System32\drivers\RDPENCDD.sys - ok

14:42:29.0598 3380 [ 216F3FA57533D98E1F74DED70113177A ] C:\Windows\System32\drivers\RDPREFMP.sys

14:42:29.0598 3380 C:\Windows\System32\drivers\RDPREFMP.sys - ok

14:42:29.0613 3380 [ 53E92A310193CB3C03BEA963DE7D9CFC ] C:\Windows\System32\drivers\vga.sys

14:42:29.0613 3380 C:\Windows\System32\drivers\vga.sys - ok

14:42:29.0629 3380 [ E7353D59C9842BC7299FAEB7E7E09340 ] C:\Windows\System32\drivers\videoprt.sys

14:42:29.0629 3380 C:\Windows\System32\drivers\videoprt.sys - ok

14:42:29.0644 3380 [ FC438D1430B28618E2D0C7C332A710AD ] C:\Windows\System32\drivers\watchdog.sys

14:42:29.0644 3380 C:\Windows\System32\drivers\watchdog.sys - ok

14:42:29.0660 3380 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] C:\Windows\System32\drivers\msfs.sys

14:42:29.0660 3380 C:\Windows\System32\drivers\msfs.sys - ok

14:42:29.0676 3380 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] C:\Windows\System32\drivers\npfs.sys

14:42:29.0676 3380 C:\Windows\System32\drivers\npfs.sys - ok

14:42:29.0691 3380 [ 6F020A220388ECA0AB6062DC27BD16B6 ] C:\Windows\System32\drivers\tdi.sys

14:42:29.0691 3380 C:\Windows\System32\drivers\tdi.sys - ok

14:42:29.0707 3380 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] C:\Windows\System32\drivers\tdx.sys

14:42:29.0707 3380 C:\Windows\System32\drivers\tdx.sys - ok

14:42:29.0707 3380 [ 1C7857B62DE5994A75B054A9FD4C3825 ] C:\Windows\System32\drivers\afd.sys

14:42:29.0707 3380 C:\Windows\System32\drivers\afd.sys - ok

14:42:29.0722 3380 [ 09594D1089C523423B32A4229263F068 ] C:\Windows\System32\drivers\netbt.sys

14:42:29.0722 3380 C:\Windows\System32\drivers\netbt.sys - ok

14:42:29.0738 3380 [ 86743D9F5D2B1048062B14B1D84501C4 ] C:\Windows\System32\drivers\netbios.sys

14:42:29.0738 3380 C:\Windows\System32\drivers\netbios.sys - ok

14:42:29.0754 3380 [ 0557CF5A2556BD58E26384169D72438D ] C:\Windows\System32\drivers\pacer.sys

14:42:29.0754 3380 C:\Windows\System32\drivers\pacer.sys - ok

14:42:29.0769 3380 [ 6A3D66263414FF0D6FA754C646612F3F ] C:\Windows\System32\drivers\vwififlt.sys

14:42:29.0769 3380 C:\Windows\System32\drivers\vwififlt.sys - ok

14:42:29.0785 3380 [ 356AFD78A6ED4457169241AC3965230C ] C:\Windows\System32\drivers\wanarp.sys

14:42:29.0785 3380 C:\Windows\System32\drivers\wanarp.sys - ok

14:42:29.0800 3380 [ 611B23304BF067451A9FDEE01FBDD725 ] C:\Windows\System32\drivers\wfplwf.sys

14:42:29.0800 3380 C:\Windows\System32\drivers\wfplwf.sys - ok

14:42:29.0800 3380 [ E7F5AE18AF4168178A642A9247C63001 ] C:\Windows\System32\drivers\nsiproxy.sys

14:42:29.0800 3380 C:\Windows\System32\drivers\nsiproxy.sys - ok

14:42:29.0816 3380 [ 77F665941019A1594D887A74F301FA2F ] C:\Windows\System32\drivers\rdbss.sys

14:42:29.0816 3380 C:\Windows\System32\drivers\rdbss.sys - ok

14:42:29.0832 3380 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] C:\Windows\System32\drivers\termdd.sys

14:42:29.0832 3380 C:\Windows\System32\drivers\termdd.sys - ok

14:42:29.0847 3380 [ 61583EE3C3A17003C4ACD0475646B4D3 ] C:\Windows\System32\drivers\blbdrive.sys

14:42:29.0847 3380 C:\Windows\System32\drivers\blbdrive.sys - ok

14:42:29.0863 3380 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] C:\Windows\System32\drivers\dfsc.sys

14:42:29.0863 3380 C:\Windows\System32\drivers\dfsc.sys - ok

14:42:29.0863 3380 [ 13096B05847EC78F0977F2C0F79E9AB3 ] C:\Windows\System32\drivers\discache.sys

14:42:29.0863 3380 C:\Windows\System32\drivers\discache.sys - ok

14:42:29.0878 3380 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] C:\Windows\System32\drivers\mssmbios.sys

14:42:29.0878 3380 C:\Windows\System32\drivers\mssmbios.sys - ok

14:42:29.0894 3380 [ 3566A8DAAFA27AF944F5D705EAA64894 ] C:\Windows\System32\drivers\tunnel.sys

14:42:29.0894 3380 C:\Windows\System32\drivers\tunnel.sys - ok

14:42:29.0910 3380 [ 1E56388B3FE0D031C44144EB8C4D6217 ] C:\Windows\System32\drivers\amdppm.sys

14:42:29.0910 3380 C:\Windows\System32\drivers\amdppm.sys - ok

14:42:29.0910 3380 [ F35E79CADCF770E41802910EFE70E245 ] C:\Windows\System32\drivers\atikmpag.sys

14:42:29.0910 3380 C:\Windows\System32\drivers\atikmpag.sys - ok

14:42:29.0925 3380 [ CF95B85FF8D128385ABD411C8CA74DED ] C:\Windows\System32\ntdll.dll

14:42:29.0925 3380 C:\Windows\System32\ntdll.dll - ok

14:42:29.0941 3380 [ 1911A3356FA3F77CCC825CCBAC038C2A ] C:\Windows\System32\smss.exe

14:42:29.0941 3380 C:\Windows\System32\smss.exe - ok

14:42:29.0956 3380 [ 7B8EE993D033EC437B2D0648E3DB034D ] C:\Windows\System32\drivers\atipmdag.sys

14:42:29.0956 3380 C:\Windows\System32\drivers\atipmdag.sys - ok

14:42:29.0972 3380 [ 3B536A8BEC3B4F23FFDFD78B11A2AB93 ] C:\Windows\System32\autochk.exe

14:42:29.0972 3380 C:\Windows\System32\autochk.exe - ok

14:42:29.0988 3380 [ F5BEE30450E18E6B83A5012C100616FD ] C:\Windows\System32\drivers\dxgkrnl.sys

14:42:29.0988 3380 C:\Windows\System32\drivers\dxgkrnl.sys - ok

14:42:29.0988 3380 [ 9CD68BDDF322535C02ADC8331013D13D ] C:\Windows\System32\drivers\dxgmms1.sys

14:42:29.0988 3380 C:\Windows\System32\drivers\dxgmms1.sys - ok

14:42:30.0003 3380 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] C:\Windows\System32\drivers\hdaudbus.sys

14:42:30.0003 3380 C:\Windows\System32\drivers\hdaudbus.sys - ok

14:42:30.0019 3380 [ 7EA8D2EB9BBFD2AB8A3117A1E96D3B3A ] C:\Windows\System32\drivers\Rt64win7.sys

14:42:30.0019 3380 C:\Windows\System32\drivers\Rt64win7.sys - ok

14:42:30.0034 3380 [ D6CAD7E5B05055BB8226BDCB1644DA27 ] C:\Windows\System32\drivers\athrx.sys

14:42:30.0034 3380 C:\Windows\System32\drivers\athrx.sys - ok

14:42:30.0050 3380 [ 8E98D21EE06192492A5671A6144D092F ] C:\Windows\System32\drivers\GEARAspiWDM.sys

14:42:30.0050 3380 C:\Windows\System32\drivers\GEARAspiWDM.sys - ok

14:42:30.0066 3380 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] C:\Windows\System32\drivers\vwifibus.sys

14:42:30.0066 3380 C:\Windows\System32\drivers\vwifibus.sys - ok

14:42:30.0081 3380 [ AE259C75F9A0B057B6BF9E9695632B09 ] C:\Windows\System32\drivers\usbport.sys

14:42:30.0081 3380 C:\Windows\System32\drivers\usbport.sys - ok

14:42:30.0081 3380 [ C025055FE7B87701EB042095DF1A2D7B ] C:\Windows\System32\drivers\usbehci.sys

14:42:30.0081 3380 C:\Windows\System32\drivers\usbehci.sys - ok

14:42:30.0097 3380 [ 2C780746DC44A28FE67004DC58173F05 ] C:\Windows\System32\drivers\usbfilter.sys

14:42:30.0097 3380 C:\Windows\System32\drivers\usbfilter.sys - ok

14:42:30.0112 3380 [ 9840FC418B4CBD632D3D0A667A725C31 ] C:\Windows\System32\drivers\usbohci.sys

14:42:30.0112 3380 C:\Windows\System32\drivers\usbohci.sys - ok

14:42:30.0128 3380 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] C:\Windows\System32\drivers\i8042prt.sys

14:42:30.0128 3380 C:\Windows\System32\drivers\i8042prt.sys - ok

14:42:30.0128 3380 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] C:\Windows\System32\drivers\kbdclass.sys

14:42:30.0128 3380 C:\Windows\System32\drivers\kbdclass.sys - ok

14:42:30.0144 3380 [ 2672A9DBAA6A8DEEA7EC8C7892E32A03 ] C:\Windows\System32\drivers\Apfiltr.sys

14:42:30.0144 3380 C:\Windows\System32\drivers\Apfiltr.sys - ok

14:42:30.0159 3380 [ 7D27EA49F3C1F687D357E77A470AEA99 ] C:\Windows\System32\drivers\mouclass.sys

14:42:30.0159 3380 C:\Windows\System32\drivers\mouclass.sys - ok

14:42:30.0175 3380 [ 286D3889E6AB5589646FF8A63CB928AE ] C:\Windows\System32\drivers\SFEP.sys

14:42:30.0175 3380 C:\Windows\System32\drivers\SFEP.sys - ok

14:42:30.0190 3380 [ 0840155D0BDDF1190F84A663C284BD33 ] C:\Windows\System32\drivers\CmBatt.sys

14:42:30.0190 3380 C:\Windows\System32\drivers\CmBatt.sys - ok

14:42:30.0206 3380 [ 7ECFF9B22276B73F43A99A15A6094E90 ] C:\Windows\System32\drivers\agilevpn.sys

14:42:30.0206 3380 C:\Windows\System32\drivers\agilevpn.sys - ok

14:42:30.0222 3380 [ 03EDB043586CCEBA243D689BDDA370A8 ] C:\Windows\System32\drivers\CompositeBus.sys

14:42:30.0222 3380 C:\Windows\System32\drivers\CompositeBus.sys - ok

14:42:30.0237 3380 [ 800BA92F7010378B09F9ED9270F07137 ] C:\Windows\System32\drivers\modem.sys

14:42:30.0237 3380 C:\Windows\System32\drivers\modem.sys - ok

14:42:30.0253 3380 [ 388D3DD1A6457280F3BADBA9F3ACD6B1 ] C:\Windows\System32\drivers\rootmdm.sys

14:42:30.0253 3380 C:\Windows\System32\drivers\rootmdm.sys - ok

14:42:30.0268 3380 [ 30639C932D9FEF22B31268FE25A1B6E5 ] C:\Windows\System32\drivers\ndistapi.sys

14:42:30.0268 3380 C:\Windows\System32\drivers\ndistapi.sys - ok

14:42:30.0284 3380 [ 53F7305169863F0A2BDDC49E116C2E11 ] C:\Windows\System32\drivers\ndiswan.sys

14:42:30.0284 3380 C:\Windows\System32\drivers\ndiswan.sys - ok

14:42:30.0300 3380 [ 471815800AE33E6F1C32FB1B97C490CA ] C:\Windows\System32\drivers\rasl2tp.sys

14:42:30.0300 3380 C:\Windows\System32\drivers\rasl2tp.sys - ok

14:42:30.0315 3380 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] C:\Windows\System32\drivers\raspppoe.sys

14:42:30.0315 3380 C:\Windows\System32\drivers\raspppoe.sys - ok

14:42:30.0331 3380 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] C:\Windows\System32\drivers\raspptp.sys

14:42:30.0331 3380 C:\Windows\System32\drivers\raspptp.sys - ok

14:42:30.0346 3380 [ E8B1E447B008D07FF47D016C2B0EEECB ] C:\Windows\System32\drivers\rassstp.sys

14:42:30.0346 3380 C:\Windows\System32\drivers\rassstp.sys - ok

14:42:30.0346 3380 [ 4AAFFFA67AC4DFA3D9985D78573887E2 ] C:\Windows\System32\drivers\RimSerial_AMD64.sys

14:42:30.0346 3380 C:\Windows\System32\drivers\RimSerial_AMD64.sys - ok

14:42:30.0362 3380 [ 24FBF5CC5C04150073C315A7C83521EE ] C:\Windows\System32\drivers\ks.sys

14:42:30.0362 3380 C:\Windows\System32\drivers\ks.sys - ok

14:42:30.0378 3380 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] C:\Windows\System32\drivers\swenum.sys

14:42:30.0378 3380 C:\Windows\System32\drivers\swenum.sys - ok

14:42:30.0393 3380 [ DC54A574663A895C8763AF0FA1FF7561 ] C:\Windows\System32\drivers\umbus.sys

14:42:30.0393 3380 C:\Windows\System32\drivers\umbus.sys - ok

14:42:30.0393 3380 [ 287C6C9410B111B68B52CA298F7B8C24 ] C:\Windows\System32\drivers\usbhub.sys

14:42:30.0393 3380 C:\Windows\System32\drivers\usbhub.sys - ok

14:42:30.0409 3380 [ A0F52880DDD164F968BE903C1FECD27E ] C:\Windows\System32\iertutil.dll

14:42:30.0409 3380 C:\Windows\System32\iertutil.dll - ok

14:42:30.0409 3380 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] C:\Windows\System32\drivers\ndproxy.sys

14:42:30.0409 3380 C:\Windows\System32\drivers\ndproxy.sys - ok

14:42:30.0424 3380 [ 21D26064AEDB4988F785BB4A3A2C051E ] C:\Windows\System32\drivers\drmk.sys

14:42:30.0424 3380 C:\Windows\System32\drivers\drmk.sys - ok

14:42:30.0424 3380 [ 32E11315B5126921FFD9074840EF13D3 ] C:\Windows\System32\drivers\portcls.sys

14:42:30.0424 3380 C:\Windows\System32\drivers\portcls.sys - ok

14:42:30.0440 3380 [ D6D381B76056C668679723938F06F16C ] C:\Windows\System32\drivers\RtHDMIVX.sys

14:42:30.0440 3380 C:\Windows\System32\drivers\RtHDMIVX.sys - ok

14:42:30.0440 3380 [ 6869281E78CB31A43E969F06B57347C4 ] C:\Windows\System32\drivers\ksthunk.sys

14:42:30.0440 3380 C:\Windows\System32\drivers\ksthunk.sys - ok

14:42:30.0456 3380 [ 490947A9AFF7CA31EF2E08F5776105EB ] C:\Windows\System32\drivers\RTKVHD64.sys

14:42:30.0456 3380 C:\Windows\System32\drivers\RTKVHD64.sys - ok

14:42:30.0471 3380 [ 6F1A3157A1C89435352CEB543CDB359C ] C:\Windows\System32\drivers\usbccgp.sys

14:42:30.0471 3380 C:\Windows\System32\drivers\usbccgp.sys - ok

14:42:30.0471 3380 [ CCA2AB1752A61F29C3C941CD79D78CEA ] C:\Windows\System32\drivers\usbd.sys

14:42:30.0471 3380 C:\Windows\System32\drivers\usbd.sys - ok

14:42:30.0487 3380 [ 454800C2BC7F3927CE030141EE4F4C50 ] C:\Windows\System32\drivers\usbvideo.sys

14:42:30.0487 3380 C:\Windows\System32\drivers\usbvideo.sys - ok

14:42:30.0487 3380 [ 4BBFA57F594F7E8A8EDC8F377184C3F0 ] C:\Windows\System32\ws2_32.dll

14:42:30.0487 3380 C:\Windows\System32\ws2_32.dll - ok

14:42:30.0502 3380 [ 5AAB4808E8CCAE8C2ECDA5B791260616 ] C:\Windows\System32\drivers\RtsUStor.sys

14:42:30.0502 3380 C:\Windows\System32\drivers\RtsUStor.sys - ok

14:42:30.0502 3380 [ A1BE6A720D02E37F72E9CD89AE9CB3CF ] C:\Windows\System32\imagehlp.dll

14:42:30.0502 3380 C:\Windows\System32\imagehlp.dll - ok

14:42:30.0518 3380 [ C431EAF5CAA1C82CAC2534A2EAB348A3 ] C:\Windows\System32\msctf.dll

14:42:30.0518 3380 C:\Windows\System32\msctf.dll - ok

14:42:30.0518 3380 [ F7CE0C81C545364020ED8203CF0A633E ] C:\Windows\System32\difxapi.dll

14:42:30.0518 3380 C:\Windows\System32\difxapi.dll - ok

14:42:30.0534 3380 [ 044FE45FFD6AD40E3BBBE60B7F41BABE ] C:\Windows\System32\nsi.dll

14:42:30.0534 3380 C:\Windows\System32\nsi.dll - ok

14:42:30.0534 3380 [ 4E4FFB09D895AA000DD56D1404F69A7E ] C:\Windows\System32\Wldap32.dll

14:42:30.0534 3380 C:\Windows\System32\Wldap32.dll - ok

14:42:30.0549 3380 [ 5121DB613E10A46A3C5085B479026AA7 ] C:\Windows\System32\wininet.dll

14:42:30.0549 3380 C:\Windows\System32\wininet.dll - ok

14:42:30.0549 3380 [ 9835E63E09F824D22B689D2BB789BAB9 ] C:\Windows\System32\comdlg32.dll

14:42:30.0549 3380 C:\Windows\System32\comdlg32.dll - ok

14:42:30.0565 3380 [ 25983DE69B57142039AC8D95E71CD9C9 ] C:\Windows\System32\clbcatq.dll

14:42:30.0565 3380 C:\Windows\System32\clbcatq.dll - ok

14:42:30.0565 3380 [ 1DC3504CA4C57900F1557E9A3F01D272 ] C:\Windows\System32\kernel32.dll

14:42:30.0565 3380 C:\Windows\System32\kernel32.dll - ok

14:42:30.0580 3380 [ D87E1E59C73C1F98D5DED5B3850C40F5 ] C:\Windows\System32\psapi.dll

14:42:30.0580 3380 C:\Windows\System32\psapi.dll - ok

14:42:30.0580 3380 [ AA2C08CE85653B1A0D2E4AB407FA176C ] C:\Windows\System32\imm32.dll

14:42:30.0580 3380 C:\Windows\System32\imm32.dll - ok

14:42:30.0596 3380 [ 6DF46D2BD74E3DA1B45F08F10D172732 ] C:\Windows\System32\advapi32.dll

14:42:30.0596 3380 C:\Windows\System32\advapi32.dll - ok

14:42:30.0596 3380 [ 1084AA52CCC324EA54C7121FA24C2221 ] C:\Windows\System32\gdi32.dll

14:42:30.0596 3380 C:\Windows\System32\gdi32.dll - ok

14:42:30.0612 3380 [ 5D8E6C95156ED1F79A63D1EADE6F9ED5 ] C:\Windows\System32\setupapi.dll

14:42:30.0612 3380 C:\Windows\System32\setupapi.dll - ok

14:42:30.0612 3380 [ D202223587518B13D72D68937B7E3F70 ] C:\Windows\System32\lpk.dll

14:42:30.0612 3380 C:\Windows\System32\lpk.dll - ok

14:42:30.0627 3380 [ C391FC68282A000CDF953F8B6B55D2EF ] C:\Windows\System32\msvcrt.dll

14:42:30.0627 3380 C:\Windows\System32\msvcrt.dll - ok

14:42:30.0627 3380 [ C06B32165E23A72A898B7A89679AD754 ] C:\Windows\System32\oleaut32.dll

14:42:30.0627 3380 C:\Windows\System32\oleaut32.dll - ok

14:42:30.0643 3380 [ C6689007B3A749C49A5438DCF36E0CE4 ] C:\Windows\System32\shell32.dll

14:42:30.0643 3380 C:\Windows\System32\shell32.dll - ok

14:42:30.0643 3380 [ 0611473C1AD9E2D991CD9482068417F7 ] C:\Windows\System32\rpcrt4.dll

14:42:30.0643 3380 C:\Windows\System32\rpcrt4.dll - ok

14:42:30.0658 3380 [ 83404DCBCE4925B6A5A77C5170F46D86 ] C:\Windows\System32\sechost.dll

14:42:30.0658 3380 C:\Windows\System32\sechost.dll - ok

14:42:30.0658 3380 [ 1DBA462CF92D890D8F8E6472E7E8B4B4 ] C:\Windows\System32\urlmon.dll

14:42:30.0658 3380 C:\Windows\System32\urlmon.dll - ok

14:42:30.0658 3380 [ EAF32CB8C1F810E4715B4DFBE785C7FF ] C:\Windows\System32\shlwapi.dll

14:42:30.0674 3380 C:\Windows\System32\shlwapi.dll - ok

14:42:30.0674 3380 [ 6C60B5ACA7442EFB794082CDACFC001C ] C:\Windows\System32\ole32.dll

14:42:30.0674 3380 C:\Windows\System32\ole32.dll - ok

14:42:30.0690 3380 [ 28C0B5024F5C5A438E78B188CFC81B7F ] C:\Windows\System32\normaliz.dll

14:42:30.0690 3380 C:\Windows\System32\normaliz.dll - ok

14:42:30.0690 3380 [ FE70103391A64039A921DBFFF9C7AB1B ] C:\Windows\System32\user32.dll

14:42:30.0690 3380 C:\Windows\System32\user32.dll - ok

14:42:30.0705 3380 [ 2F8B1E3EE3545D3B5A8D56FA1AE07B65 ] C:\Windows\System32\usp10.dll

14:42:30.0705 3380 C:\Windows\System32\usp10.dll - ok

14:42:30.0705 3380 [ 2477A28081BDAEE622CF045ACF8EE124 ] C:\Windows\System32\cfgmgr32.dll

14:42:30.0705 3380 C:\Windows\System32\cfgmgr32.dll - ok

14:42:30.0721 3380 [ 06FEC9E8117103BB1141A560E98077DA ] C:\Windows\System32\devobj.dll

14:42:30.0721 3380 C:\Windows\System32\devobj.dll - ok

14:42:30.0721 3380 [ AA06902362B1422D7A7DA7061E07C624 ] C:\Windows\System32\wintrust.dll

14:42:30.0721 3380 C:\Windows\System32\wintrust.dll - ok

14:42:30.0736 3380 [ 14DFDEAF4E589ED3F1FF187A86B9408C ] C:\Windows\System32\comctl32.dll

14:42:30.0736 3380 C:\Windows\System32\comctl32.dll - ok

14:42:30.0736 3380 [ 12EE6FE9268CEE6D90FDCCBF89236C65 ] C:\Windows\System32\crypt32.dll

14:42:30.0736 3380 C:\Windows\System32\crypt32.dll - ok

14:42:30.0752 3380 [ 6F2E324703E6D22B9934C33DA48F1F01 ] C:\Windows\System32\KernelBase.dll

14:42:30.0752 3380 C:\Windows\System32\KernelBase.dll - ok

14:42:30.0752 3380 [ 884415BD4269C02EAF8E2613BF85500D ] C:\Windows\System32\msasn1.dll

14:42:30.0752 3380 C:\Windows\System32\msasn1.dll - ok

14:42:30.0768 3380 [ 9C278785347BCC991F8EA2999D90F58D ] C:\Windows\SysWOW64\normaliz.dll

14:42:30.0768 3380 C:\Windows\SysWOW64\normaliz.dll - ok

14:42:30.0768 3380 [ BF24D6F2ED97FE830BFD52B246F98E67 ] C:\Windows\System32\drivers\dxapi.sys

14:42:30.0768 3380 C:\Windows\System32\drivers\dxapi.sys - ok

14:42:30.0783 3380 [ C58923115CDE6071C3BF2FF063546E9F ] C:\Windows\System32\win32k.sys

14:42:30.0783 3380 C:\Windows\System32\win32k.sys - ok

14:42:30.0783 3380 [ 96F587CA26A6AA894BD8CACE4540CFFC ] C:\Windows\System32\csrsrv.dll

14:42:30.0783 3380 C:\Windows\System32\csrsrv.dll - ok

14:42:30.0783 3380 [ 60C2862B4BF0FD9F582EF344C2B1EC72 ] C:\Windows\System32\csrss.exe

14:42:30.0783 3380 C:\Windows\System32\csrss.exe - ok

14:42:30.0799 3380 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\System32\basesrv.dll

14:42:30.0799 3380 C:\Windows\System32\basesrv.dll - ok

14:42:30.0799 3380 [ 72CC564BBC70DE268784BCE91EB8A28F ] C:\Windows\System32\winsrv.dll

14:42:30.0799 3380 C:\Windows\System32\winsrv.dll - ok

14:42:30.0814 3380 [ B03D591DC7DA45ECE20B3B467E6AADAA ] C:\Windows\System32\drivers\monitor.sys

14:42:30.0814 3380 C:\Windows\System32\drivers\monitor.sys - ok

14:42:30.0830 3380 [ F29FE765E1448EF371CFE05BFAC74ADB ] C:\Windows\System32\tsddd.dll

14:42:30.0830 3380 C:\Windows\System32\tsddd.dll - ok

14:42:30.0830 3380 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\System32\sxssrv.dll

14:42:30.0830 3380 C:\Windows\System32\sxssrv.dll - ok

14:42:30.0846 3380 [ 94355C28C1970635A31B3FE52EB7CEBA ] C:\Windows\System32\wininit.exe

14:42:30.0846 3380 C:\Windows\System32\wininit.exe - ok

14:42:30.0846 3380 [ 05569A79BF4693670B709144382D02D4 ] C:\Windows\System32\cdd.dll

14:42:30.0846 3380 C:\Windows\System32\cdd.dll - ok

14:42:30.0861 3380 [ 2C942733A5983DD4502219FF37C7EBC7 ] C:\Windows\System32\profapi.dll

14:42:30.0861 3380 C:\Windows\System32\profapi.dll - ok

14:42:30.0861 3380 [ C2A8CB1275ECB85D246A9ECC02A728E3 ] C:\Windows\System32\RpcRtRemote.dll

14:42:30.0861 3380 C:\Windows\System32\RpcRtRemote.dll - ok

14:42:30.0877 3380 [ 78523A26F5604C0568FE9D1CE86E36F4 ] C:\Windows\System32\KBDUS.DLL

14:42:30.0877 3380 C:\Windows\System32\KBDUS.DLL - ok

14:42:30.0877 3380 [ B26B1801356760841C3BC69F9F91537F ] C:\Windows\System32\WlS0WndH.dll

14:42:30.0877 3380 C:\Windows\System32\WlS0WndH.dll - ok

14:42:30.0892 3380 [ 9CEAD32E79A62150FE9F8557E58E008B ] C:\Windows\System32\sxs.dll

14:42:30.0892 3380 C:\Windows\System32\sxs.dll - ok

14:42:30.0908 3380 [ 784FA3DF338E2E8F5F0389D6FAC428AF ] C:\Windows\System32\cryptbase.dll

14:42:30.0908 3380 C:\Windows\System32\cryptbase.dll - ok

14:42:30.0908 3380 [ 90499F3163A9F815CF196A205EA3CD5D ] C:\Windows\System32\apphelp.dll

14:42:30.0908 3380 C:\Windows\System32\apphelp.dll - ok

14:42:30.0924 3380 [ 66A6063D0BAAD3F7B2B9868859E0743B ] C:\Windows\System32\lsasrv.dll

14:42:30.0924 3380 C:\Windows\System32\lsasrv.dll - ok

14:42:30.0924 3380 [ C118A82CD78818C29AB228366EBF81C3 ] C:\Windows\System32\lsass.exe

14:42:30.0924 3380 C:\Windows\System32\lsass.exe - ok

14:42:30.0939 3380 [ 9662EE182644511439F1C53745DC1C88 ] C:\Windows\System32\lsm.exe

14:42:30.0939 3380 C:\Windows\System32\lsm.exe - ok

14:42:30.0939 3380 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\System32\services.exe

14:42:30.0939 3380 C:\Windows\System32\services.exe - ok

14:42:30.0955 3380 [ 3A0CE5FE781708CD6ABD55313607EC8B ] C:\Windows\System32\sspisrv.dll

14:42:30.0955 3380 C:\Windows\System32\sspisrv.dll - ok

14:42:30.0955 3380 [ B66BC8B20B7F33975865B1DF99783FD8 ] C:\Windows\System32\sspicli.dll

14:42:30.0955 3380 C:\Windows\System32\sspicli.dll - ok

14:42:30.0970 3380 [ 1151B1BAA6F350B1DB6598E0FEA7C457 ] C:\Windows\System32\winlogon.exe

14:42:30.0970 3380 C:\Windows\System32\winlogon.exe - ok

14:42:30.0970 3380 [ BBCDF350817BA86416C0F06B6981BE8D ] C:\Windows\System32\scesrv.dll

14:42:30.0970 3380 C:\Windows\System32\scesrv.dll - ok

14:42:30.0986 3380 [ E914A50A151DFFE63D3935226DB5E2C1 ] C:\Windows\System32\scext.dll

14:42:30.0986 3380 C:\Windows\System32\scext.dll - ok

14:42:31.0002 3380 [ 0144D8D75A0B12938AEEE859E3310A46 ] C:\Windows\System32\secur32.dll

14:42:31.0002 3380 C:\Windows\System32\secur32.dll - ok

14:42:31.0017 3380 [ 68083118797CAF30FB2EA3E71494D67E ] C:\Windows\System32\sysntfy.dll

14:42:31.0017 3380 C:\Windows\System32\sysntfy.dll - ok

14:42:31.0033 3380 [ DEE7267C5D232A3B816866872CE199E6 ] C:\Windows\System32\wmsgapi.dll

14:42:31.0033 3380 C:\Windows\System32\wmsgapi.dll - ok

14:42:31.0033 3380 [ 0D9764D58C5EFD672B7184854B152E5E ] C:\Windows\System32\winsta.dll

14:42:31.0033 3380 C:\Windows\System32\winsta.dll - ok

14:42:31.0048 3380 [ A744BA6E04C8AA4592818178DBF89521 ] C:\Windows\System32\samsrv.dll

14:42:31.0048 3380 C:\Windows\System32\samsrv.dll - ok

14:42:31.0064 3380 [ 3A9C9BAF610B0DD4967086040B3B62A9 ] C:\Windows\System32\srvcli.dll

14:42:31.0064 3380 C:\Windows\System32\srvcli.dll - ok

14:42:31.0080 3380 [ 3A061472B38233BAFF9CFEFF2E49C46B ] C:\Windows\System32\cryptdll.dll

14:42:31.0080 3380 C:\Windows\System32\cryptdll.dll - ok

14:42:31.0080 3380 [ 3C073B0C596A0AF84933E7406766B040 ] C:\Windows\System32\wevtapi.dll

14:42:31.0080 3380 C:\Windows\System32\wevtapi.dll - ok

14:42:31.0095 3380 [ 7FBEBD2229EA5FD48D41B199EC2D541C ] C:\Windows\System32\authz.dll

14:42:31.0095 3380 C:\Windows\System32\authz.dll - ok

14:42:31.0111 3380 [ 86FE1B1F8FD42CD0DB641AB1CDB13093 ] C:\Windows\System32\cngaudit.dll

14:42:31.0111 3380 C:\Windows\System32\cngaudit.dll - ok

14:42:31.0126 3380 [ 400645085A91BF3EB0271329B95AE0BE ] C:\Windows\System32\ncrypt.dll

14:42:31.0126 3380 C:\Windows\System32\ncrypt.dll - ok

14:42:31.0142 3380 [ B9A95365E52F421A20E1501935FADDA5 ] C:\Windows\System32\bcrypt.dll

14:42:31.0142 3380 C:\Windows\System32\bcrypt.dll - ok

14:42:31.0142 3380 [ 02B64609F865A39365FF88580DF11738 ] C:\Windows\System32\msprivs.dll

14:42:31.0142 3380 C:\Windows\System32\msprivs.dll - ok

14:42:31.0158 3380 [ C6505DE3561537BA1004D638C2F93F2F ] C:\Windows\System32\netjoin.dll

14:42:31.0158 3380 C:\Windows\System32\netjoin.dll - ok

14:42:31.0158 3380 [ 50532FCD7ECF02DD169CE5C485F02534 ] C:\Windows\System32\negoexts.dll

14:42:31.0158 3380 C:\Windows\System32\negoexts.dll - ok

14:42:31.0173 3380 [ 44E1A196DFCB53B01FE4B855C3B56A15 ] C:\Windows\System32\kerberos.dll

14:42:31.0173 3380 C:\Windows\System32\kerberos.dll - ok

14:42:31.0173 3380 [ D0C2FBB6D97416B0166478FC7AE2B212 ] C:\Windows\System32\cryptsp.dll

14:42:31.0173 3380 C:\Windows\System32\cryptsp.dll - ok

14:42:31.0189 3380 [ 1D5185A4C7E6695431AE4B55C3D7D333 ] C:\Windows\System32\mswsock.dll

14:42:31.0189 3380 C:\Windows\System32\mswsock.dll - ok

14:42:31.0189 3380 [ EF12B8385AA2849999008A977918F96B ] C:\Windows\System32\msv1_0.dll

14:42:31.0189 3380 C:\Windows\System32\msv1_0.dll - ok

14:42:31.0204 3380 [ EC7CBFF96B05ECF3D366355B3C64ADCF ] C:\Windows\System32\wship6.dll

14:42:31.0204 3380 C:\Windows\System32\wship6.dll - ok

14:42:31.0204 3380 [ AA339DD8BB128EF66660DFBBB59043D3 ] C:\Windows\System32\netlogon.dll

14:42:31.0204 3380 C:\Windows\System32\netlogon.dll - ok

14:42:31.0220 3380 [ 492D07D79E7024CA310867B526D9636D ] C:\Windows\System32\dnsapi.dll

14:42:31.0220 3380 C:\Windows\System32\dnsapi.dll - ok

14:42:31.0220 3380 [ 8FFE297B8449386E7B6851458B6E474E ] C:\Windows\System32\logoncli.dll

14:42:31.0220 3380 C:\Windows\System32\logoncli.dll - ok

14:42:31.0236 3380 [ 1573C45E65DE32B1BC3572634F8F1E8E ] C:\Windows\System32\schannel.dll

14:42:31.0236 3380 C:\Windows\System32\schannel.dll - ok

14:42:31.0236 3380 [ 95FB6CA4374E343DDD653FCC43F9D26B ] C:\Windows\System32\wdigest.dll

14:42:31.0236 3380 C:\Windows\System32\wdigest.dll - ok

14:42:31.0251 3380 [ 5D8874A8C11DDDDE29E12DE0E2013493 ] C:\Windows\System32\rsaenh.dll

14:42:31.0251 3380 C:\Windows\System32\rsaenh.dll - ok

14:42:31.0251 3380 [ 8A25506B6948EFBD5A7F37E53CCD36D9 ] C:\Windows\System32\TSpkg.dll

14:42:31.0251 3380 C:\Windows\System32\TSpkg.dll - ok

14:42:31.0251 3380 [ E08088A97F95345E181C3DFCE2C615EF ] C:\Windows\System32\pku2u.dll

14:42:31.0251 3380 C:\Windows\System32\pku2u.dll - ok

14:42:31.0267 3380 [ 55C892560C1B42BC57FB61AEFCED2F22 ] C:\Windows\System32\LIVESSP.DLL

14:42:31.0267 3380 C:\Windows\System32\LIVESSP.DLL - ok

14:42:31.0267 3380 [ D6C7780A364C6BBACFA796BAB9F1B374 ] C:\Windows\System32\bcryptprimitives.dll

14:42:31.0267 3380 C:\Windows\System32\bcryptprimitives.dll - ok

14:42:31.0282 3380 [ 52D3D5E3586988D4D9E34ACAAC33105C ] C:\Windows\System32\credssp.dll

14:42:31.0282 3380 C:\Windows\System32\credssp.dll - ok

14:42:31.0282 3380 [ 90BDEFC5DF334E5100EAA781D798DE1A ] C:\Windows\System32\efslsaext.dll

14:42:31.0282 3380 C:\Windows\System32\efslsaext.dll - ok

14:42:31.0298 3380 [ ED78427259134C63ED69804D2132B86C ] C:\Windows\System32\scecli.dll

14:42:31.0298 3380 C:\Windows\System32\scecli.dll - ok

14:42:31.0314 3380 [ 7CC7DF5B654DA579613F811D8C637E29 ] C:\Windows\System32\ubpm.dll

14:42:31.0314 3380 C:\Windows\System32\ubpm.dll - ok

14:42:31.0314 3380 [ C78655BC80301D76ED4FEF1C1EA40A7D ] C:\Windows\System32\svchost.exe

14:42:31.0314 3380 C:\Windows\System32\svchost.exe - ok

14:42:31.0314 3380 [ 25FBDEF06C4D92815B353F6E792C8129 ] C:\Windows\System32\umpnpmgr.dll

14:42:31.0314 3380 C:\Windows\System32\umpnpmgr.dll - ok

14:42:31.0329 3380 [ E6EB44ABAAF1F330119F854856C53EBE ] C:\Windows\System32\SPInf.dll

14:42:31.0329 3380 C:\Windows\System32\SPInf.dll - ok

14:42:31.0345 3380 [ CD1B5AD07E5F7FEF30E055DCC9E96180 ] C:\Windows\System32\devrtl.dll

14:42:31.0345 3380 C:\Windows\System32\devrtl.dll - ok

14:42:31.0345 3380 [ 7A17485DC7D8A7AC81321A42CD034519 ] C:\Windows\System32\userenv.dll

14:42:31.0345 3380 C:\Windows\System32\userenv.dll - ok

14:42:31.0345 3380 [ 9C9307C95671AC962F3D6EB3A4A89BAE ] C:\Windows\System32\gpapi.dll

14:42:31.0345 3380 C:\Windows\System32\gpapi.dll - ok

14:42:31.0360 3380 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] C:\Windows\System32\umpo.dll

14:42:31.0360 3380 C:\Windows\System32\umpo.dll - ok

14:42:31.0360 3380 [ F6C011B46FAEEF33536B2E80F48B5CBE ] C:\Windows\System32\pcwum.dll

14:42:31.0360 3380 C:\Windows\System32\pcwum.dll - ok

14:42:31.0376 3380 [ 716175021BDA290504CE434273F666BC ] C:\Windows\System32\powrprof.dll

14:42:31.0376 3380 C:\Windows\System32\powrprof.dll - ok

14:42:31.0376 3380 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] C:\Windows\System32\drivers\luafv.sys

14:42:31.0376 3380 C:\Windows\System32\drivers\luafv.sys - ok

14:42:31.0392 3380 [ 8F571F016FA1976F445147E9E6C8AE9B ] C:\Windows\System32\drivers\Sftvollh.sys

14:42:31.0392 3380 C:\Windows\System32\drivers\Sftvollh.sys - ok

14:42:31.0392 3380 [ AB886378EEB55C6C75B4F2D14B6C869F ] C:\Windows\System32\drivers\WUDFPf.sys

14:42:31.0392 3380 C:\Windows\System32\drivers\WUDFPf.sys - ok

14:42:31.0392 3380 [ 5C627D1B1138676C0A7AB2C2C190D123 ] C:\Windows\System32\rpcss.dll

14:42:31.0392 3380 C:\Windows\System32\rpcss.dll - ok

14:42:31.0407 3380 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] C:\Windows\System32\RpcEpMap.dll

14:42:31.0407 3380 C:\Windows\System32\RpcEpMap.dll - ok

14:42:31.0407 3380 [ 16E964ABF6D1E0F0CC7822FCA9BA754D ] C:\Windows\System32\wshqos.dll

14:42:31.0407 3380 C:\Windows\System32\wshqos.dll - ok

14:42:31.0423 3380 [ 31559F3244C6BC00A52030CAA83B6B91 ] C:\Windows\System32\WSHTCPIP.DLL

14:42:31.0423 3380 C:\Windows\System32\WSHTCPIP.DLL - ok

14:42:31.0438 3380 [ 2AFBB7AE447A2373E20A22951EEFC92E ] C:\Windows\System32\atiesrxx.exe

14:42:31.0438 3380 C:\Windows\System32\atiesrxx.exe - ok

14:42:31.0438 3380 [ 9AD9E06F8656F296D91FAE8EE5B95A27 ] C:\Windows\System32\FirewallAPI.dll

14:42:31.0438 3380 C:\Windows\System32\FirewallAPI.dll - ok

14:42:31.0438 3380 [ BD3674BE7FC9D8D3732C83E8499576ED ] C:\Windows\System32\wtsapi32.dll

14:42:31.0438 3380 C:\Windows\System32\wtsapi32.dll - ok

14:42:31.0454 3380 [ 715F03B4C7223349768013EA95D9E5B7 ] C:\Windows\System32\LogonUI.exe

14:42:31.0454 3380 C:\Windows\System32\LogonUI.exe - ok

14:42:31.0454 3380 [ 0BEE002C68E28CE6DA161DCF1376D7D7 ] C:\Windows\System32\authui.dll

14:42:31.0454 3380 C:\Windows\System32\authui.dll - ok

14:42:31.0470 3380 [ 94E026870A55AAEAFF7853C1754091E9 ] C:\Windows\System32\version.dll

14:42:31.0470 3380 C:\Windows\System32\version.dll - ok

14:42:31.0470 3380 [ 6011714C8C5C55CBFFAD24D61E879FBD ] C:\Windows\System32\wevtsvc.dll

14:42:31.0470 3380 C:\Windows\System32\wevtsvc.dll - ok

14:42:31.0485 3380 [ B3BFBD758506ECB50C5804AAA76318F9 ] C:\Windows\System32\cryptui.dll

14:42:31.0485 3380 C:\Windows\System32\cryptui.dll - ok

14:42:31.0485 3380 [ 7FA8FDC2C2A27817FD0F624E78D3B50C ] C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll

14:42:31.0485 3380 C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll - ok

14:42:31.0501 3380 [ F23FEF6D569FCE88671949894A8BECF1 ] C:\Windows\System32\audiosrv.dll

14:42:31.0501 3380 C:\Windows\System32\audiosrv.dll - ok

14:42:31.0501 3380 [ 2E648163254233755035B46DD7B89123 ] C:\Windows\System32\termsrv.dll

14:42:31.0501 3380 C:\Windows\System32\termsrv.dll - ok

14:42:31.0516 3380 [ 78A1E65207484B7F8D3217507745F47C ] C:\Windows\System32\avrt.dll

14:42:31.0516 3380 C:\Windows\System32\avrt.dll - ok

14:42:31.0516 3380 [ E40E80D0304A73E8D269F7141D77250B ] C:\Windows\System32\mmcss.dll

14:42:31.0516 3380 C:\Windows\System32\mmcss.dll - ok

14:42:31.0532 3380 [ 588CD0C78A7FAAE4186B5EEA0AF3ED67 ] C:\Windows\System32\adtschema.dll

14:42:31.0532 3380 C:\Windows\System32\adtschema.dll - ok

14:42:31.0532 3380 [ EDF4DEC1041EEAF78A0B1E16C1BB4CC4 ] C:\Windows\System32\fthsvc.dll

14:42:31.0532 3380 C:\Windows\System32\fthsvc.dll - ok

14:42:31.0532 3380 [ 227E2C382A1E02F8D4965E664D3BBE43 ] C:\Windows\System32\MMDevAPI.dll

14:42:31.0532 3380 C:\Windows\System32\MMDevAPI.dll - ok

14:42:31.0548 3380 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] C:\Windows\System32\wlansvc.dll

14:42:31.0548 3380 C:\Windows\System32\wlansvc.dll - ok

14:42:31.0548 3380 [ 5B3EBFC3DA142324B388DDCC4465E1FF ] C:\Windows\System32\samlib.dll

14:42:31.0548 3380 C:\Windows\System32\samlib.dll - ok

14:42:31.0563 3380 [ 4E9C2DB10F7E6AE91BF761139D4B745B ] C:\Windows\System32\shacct.dll

14:42:31.0563 3380 C:\Windows\System32\shacct.dll - ok

14:42:31.0563 3380 [ 50544D04AD845C43130B70212EC05CCD ] C:\Windows\System32\microsoft-windows-kernel-power-events.dll

14:42:31.0563 3380 C:\Windows\System32\microsoft-windows-kernel-power-events.dll - ok

14:42:31.0579 3380 [ DA6B67270FD9DB3697B20FCE94950741 ] C:\Windows\System32\drivers\fltMgr.sys

14:42:31.0579 3380 C:\Windows\System32\drivers\fltMgr.sys - ok

14:42:31.0579 3380 [ F06BB4E336EA57511FDBAFAFCC47DE62 ] C:\Windows\System32\propsys.dll

14:42:31.0579 3380 C:\Windows\System32\propsys.dll - ok

14:42:31.0594 3380 [ D29E998E8277666982B4F0303BF4E7AF ] C:\Windows\System32\uxtheme.dll

14:42:31.0594 3380 C:\Windows\System32\uxtheme.dll - ok

14:42:31.0594 3380 [ A3DB3C17EE6CAE65D53602B4E80BCCBC ] C:\Windows\System32\PSHED.DLL

14:42:31.0594 3380 C:\Windows\System32\PSHED.DLL - ok

14:42:31.0610 3380 [ 179E8401224D557ECFF3695F2016EA5B ] C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765\GdiPlus.dll

14:42:31.0610 3380 C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765\GdiPlus.dll - ok

14:42:31.0610 3380 [ B0945E538CF906BBDDC5A11C8EE868CC ] C:\Windows\System32\microsoft-windows-kernel-processor-power-events.dll

14:42:31.0610 3380 C:\Windows\System32\microsoft-windows-kernel-processor-power-events.dll - ok

14:42:31.0626 3380 [ D5CCA1453B98A5801E6D5FF0FF89DC6C ] C:\Windows\System32\audiodg.exe

14:42:31.0626 3380 C:\Windows\System32\audiodg.exe - ok

14:42:31.0626 3380 [ 3CB6A7286422C72C34DAB54A5DFF1A34 ] C:\Windows\System32\dui70.dll

14:42:31.0626 3380 C:\Windows\System32\dui70.dll - ok

14:42:31.0641 3380 [ 1F4492FE41767CDB8B89D17655847CDD ] C:\Windows\System32\ntmarta.dll

14:42:31.0641 3380 C:\Windows\System32\ntmarta.dll - ok

14:42:31.0641 3380 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] C:\Windows\System32\gpsvc.dll

14:42:31.0641 3380 C:\Windows\System32\gpsvc.dll - ok

14:42:31.0657 3380 [ 8CCDE014A4CDF84564E03ACE064CA753 ] C:\Windows\System32\duser.dll

14:42:31.0657 3380 C:\Windows\System32\duser.dll - ok

14:42:31.0657 3380 [ 46BB91A169B9B31FF44EB04C48EC1D41 ] C:\Windows\System32\nlaapi.dll

14:42:31.0657 3380 C:\Windows\System32\nlaapi.dll - ok

14:42:31.0672 3380 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] C:\Windows\System32\profsvc.dll

14:42:31.0672 3380 C:\Windows\System32\profsvc.dll - ok

14:42:31.0672 3380 [ F0344071948D1A1FA732231785A0664C ] C:\Windows\System32\themeservice.dll

14:42:31.0672 3380 C:\Windows\System32\themeservice.dll - ok

14:42:31.0688 3380 [ D7F1EF374A90709B31591823B002F918 ] C:\Windows\System32\SndVolSSO.dll

14:42:31.0688 3380 C:\Windows\System32\SndVolSSO.dll - ok

14:42:31.0688 3380 [ 58775492FFD419248B08325E583C527F ] C:\Windows\System32\atl.dll

14:42:31.0688 3380 C:\Windows\System32\atl.dll - ok

14:42:31.0704 3380 [ A77BE7CB3222B4FB0AC6C71D1C2698D4 ] C:\Windows\System32\dsrole.dll

14:42:31.0704 3380 C:\Windows\System32\dsrole.dll - ok

14:42:31.0704 3380 [ 896F15A6434D93EDB42519D5E18E6B50 ] C:\Windows\System32\hid.dll

14:42:31.0704 3380 C:\Windows\System32\hid.dll - ok

14:42:31.0719 3380 [ BE097F5BB10F9079FCEB2DC4E7E20F02 ] C:\Windows\System32\slc.dll

14:42:31.0719 3380 C:\Windows\System32\slc.dll - ok

14:42:31.0719 3380 [ EF2AE43BCD46ABB13FC3E5B2B1935C73 ] C:\Windows\System32\winmm.dll

14:42:31.0719 3380 C:\Windows\System32\winmm.dll - ok

14:42:31.0735 3380 [ 4166F82BE4D24938977DD1746BE9B8A0 ] C:\Windows\System32\es.dll

14:42:31.0735 3380 C:\Windows\System32\es.dll - ok

14:42:31.0750 3380 [ 1473768973453DE50DC738C2955FC4DD ] C:\Windows\System32\wdmaud.drv

14:42:31.0750 3380 C:\Windows\System32\wdmaud.drv - ok

14:42:31.0750 3380 [ DA1B7075260F3872585BFCDD668C648B ] C:\Windows\System32\dwmapi.dll

14:42:31.0750 3380 C:\Windows\System32\dwmapi.dll - ok

14:42:31.0766 3380 [ 8560FFFC8EB3A806DCD4F82252CFC8C6 ] C:\Windows\System32\ksuser.dll

14:42:31.0766 3380 C:\Windows\System32\ksuser.dll - ok

14:42:31.0766 3380 [ 6F8B48F3D343E4B186AB6A9E302B7E16 ] C:\Windows\System32\xmllite.dll

14:42:31.0766 3380 C:\Windows\System32\xmllite.dll - ok

14:42:31.0782 3380 [ DC220AE6F64819099F7EBD6F137E32E7 ] C:\Windows\System32\AudioSes.dll

14:42:31.0782 3380 C:\Windows\System32\AudioSes.dll - ok

14:42:31.0782 3380 [ 1A47D52E303B7543E4E6026595B95422 ] C:\Windows\System32\comres.dll

14:42:31.0782 3380 C:\Windows\System32\comres.dll - ok

14:42:31.0797 3380 [ C32AB8FA018EF34C0F113BD501436D21 ] C:\Windows\System32\Sens.dll

14:42:31.0797 3380 C:\Windows\System32\Sens.dll - ok

14:42:31.0797 3380 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] C:\Windows\System32\uxsms.dll

14:42:31.0797 3380 C:\Windows\System32\uxsms.dll - ok

14:42:31.0813 3380 [ B1DF2D87DC8BF6072699AC8301B37796 ] C:\Windows\System32\WUDFPlatform.dll

14:42:31.0813 3380 C:\Windows\System32\WUDFPlatform.dll - ok

14:42:31.0813 3380 [ B20F051B03A966392364C83F009F7D17 ] C:\Windows\System32\WUDFSvc.dll

14:42:31.0813 3380 C:\Windows\System32\WUDFSvc.dll - ok

14:42:31.0813 3380 [ 1538831CF8AD2979A04C423779465827 ] C:\Windows\System32\drivers\lltdio.sys

14:42:31.0813 3380 C:\Windows\System32\drivers\lltdio.sys - ok

14:42:31.0828 3380 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] C:\Windows\System32\drivers\nwifi.sys

14:42:31.0828 3380 C:\Windows\System32\drivers\nwifi.sys - ok

14:42:31.0828 3380 [ 26B73A85855681500BCC25C7CD9FF5B1 ] C:\Windows\System32\WindowsCodecs.dll

14:42:31.0828 3380 C:\Windows\System32\WindowsCodecs.dll - ok

14:42:31.0844 3380 [ 136185F9FB2CC61E573E676AA5402356 ] C:\Windows\System32\drivers\ndisuio.sys

[Woke20]

14:42:31.0844 3380 [ 136185F9FB2CC61E573E676AA5402356 ] C:\Windows\System32\drivers\ndisuio.sys

14:42:31.0844 3380 C:\Windows\System32\drivers\ndisuio.sys - ok

14:42:31.0844 3380 [ DDC86E4F8E7456261E637E3552E804FF ] C:\Windows\System32\drivers\rspndr.sys

14:42:31.0844 3380 C:\Windows\System32\drivers\rspndr.sys - ok

14:42:31.0860 3380 [ 2B81776DA02017A37FE26C662827470E ] C:\Windows\System32\IPHLPAPI.DLL

14:42:31.0860 3380 C:\Windows\System32\IPHLPAPI.DLL - ok

14:42:31.0860 3380 [ F993A32249B66C9D622EA5592A8B76B8 ] C:\Windows\System32\lmhsvc.dll

14:42:31.0860 3380 C:\Windows\System32\lmhsvc.dll - ok

14:42:31.0875 3380 [ D54BFDF3E0C953F823B3D0BFE4732528 ] C:\Windows\System32\nsisvc.dll

14:42:31.0875 3380 C:\Windows\System32\nsisvc.dll - ok

14:42:31.0875 3380 [ 9F2BACD5E1776A4BB7CC0EC3C3A4F96D ] C:\Windows\System32\winbrand.dll

14:42:31.0875 3380 C:\Windows\System32\winbrand.dll - ok

14:42:31.0891 3380 [ C2762A57DF0EE85E63CE4893C5215313 ] C:\Windows\System32\VaultCredProvider.dll

14:42:31.0891 3380 C:\Windows\System32\VaultCredProvider.dll - ok

14:42:31.0906 3380 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] C:\Windows\System32\dhcpcore.dll

14:42:31.0906 3380 C:\Windows\System32\dhcpcore.dll - ok

14:42:31.0906 3380 [ B73A6E4B319AFFE64582AC5C1801BB3F ] C:\Windows\System32\nrpsrv.dll

14:42:31.0906 3380 C:\Windows\System32\nrpsrv.dll - ok

14:42:31.0922 3380 [ 4C9210E8F4E052F6A4EB87716DA0C24C ] C:\Windows\System32\winnsi.dll

14:42:31.0922 3380 C:\Windows\System32\winnsi.dll - ok

14:42:31.0922 3380 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] C:\Windows\System32\dnsrslvr.dll

14:42:31.0922 3380 C:\Windows\System32\dnsrslvr.dll - ok

14:42:31.0938 3380 [ 87356377F31DA5F20A833811CD59499C ] C:\Windows\System32\eapphost.dll

14:42:31.0938 3380 C:\Windows\System32\eapphost.dll - ok

14:42:31.0938 3380 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] C:\Windows\System32\eapsvc.dll

14:42:31.0938 3380 C:\Windows\System32\eapsvc.dll - ok

14:42:31.0953 3380 [ F9EC845C5EECF20E9A67F9F805F2EF1F ] C:\Windows\System32\keyiso.dll

14:42:31.0953 3380 C:\Windows\System32\keyiso.dll - ok

14:42:31.0953 3380 [ AAA38AEADCA8D614C3B842C447366F73 ] C:\Program Files\WIDCOMM\Bluetooth Software\BtwCP.dll

14:42:31.0953 3380 C:\Program Files\WIDCOMM\Bluetooth Software\BtwCP.dll - ok

14:42:31.0969 3380 [ 0040C486584A8E582C861CFB57AB5387 ] C:\Windows\System32\FWPUCLNT.DLL

14:42:31.0969 3380 C:\Windows\System32\FWPUCLNT.DLL - ok

14:42:31.0969 3380 [ 3CC16A849E6092E43909F48EF0E60306 ] C:\Windows\System32\dhcpcore6.dll

14:42:31.0969 3380 C:\Windows\System32\dhcpcore6.dll - ok

14:42:31.0984 3380 [ F568F7C08458D69E4FCD8675BBB107E4 ] C:\Windows\System32\dhcpcsvc.dll

14:42:31.0984 3380 C:\Windows\System32\dhcpcsvc.dll - ok

14:42:31.0984 3380 [ 885D0942E0F28DB90919BE3129ECF279 ] C:\Windows\System32\dnsext.dll

14:42:31.0984 3380 C:\Windows\System32\dnsext.dll - ok

14:42:32.0000 3380 [ 0015ACFBBDD164A8A730009908868CA7 ] C:\Windows\System32\winspool.drv

14:42:32.0000 3380 C:\Windows\System32\winspool.drv - ok

14:42:32.0000 3380 [ F7A256EC899C72B4ECDD2C02CB592EFD ] C:\Windows\System32\bthprops.cpl

14:42:32.0000 3380 C:\Windows\System32\bthprops.cpl - ok

14:42:32.0016 3380 [ 3C06D5A929B798D0B13F6481242A0FD2 ] C:\Windows\System32\dhcpcsvc6.dll

14:42:32.0016 3380 C:\Windows\System32\dhcpcsvc6.dll - ok

14:42:32.0016 3380 [ 9FCA3A84338ADEF2AFF67CDA46EF8539 ] C:\Windows\System32\umb.dll

14:42:32.0016 3380 C:\Windows\System32\umb.dll - ok

14:42:32.0031 3380 [ A648C4A06DE367065B24056D067B4460 ] C:\Windows\System32\wlanmsm.dll

14:42:32.0031 3380 C:\Windows\System32\wlanmsm.dll - ok

14:42:32.0031 3380 [ CA2985996BB49924B677113DF95CFEA7 ] C:\Windows\System32\SmartcardCredentialProvider.dll

14:42:32.0031 3380 C:\Windows\System32\SmartcardCredentialProvider.dll - ok

14:42:32.0047 3380 [ 06A1386B6E3A0CBC368665C1840906F4 ] C:\Windows\System32\wlansec.dll

14:42:32.0047 3380 C:\Windows\System32\wlansec.dll - ok

14:42:32.0047 3380 [ BF352E73615F5461AA6884472435A544 ] C:\Windows\System32\BioCredProv.dll

14:42:32.0047 3380 C:\Windows\System32\BioCredProv.dll - ok

14:42:32.0047 3380 [ 73FCB7919DEE80EE556F2E498594EBAE ] C:\Windows\System32\onex.dll

14:42:32.0047 3380 C:\Windows\System32\onex.dll - ok

14:42:32.0062 3380 [ 0D753307D274F3688BD21C377B616700 ] C:\Windows\System32\eappcfg.dll

14:42:32.0062 3380 C:\Windows\System32\eappcfg.dll - ok

14:42:32.0078 3380 [ 65522E77A1360DBC8D199DA3BF5EFFE4 ] C:\Windows\System32\eappprxy.dll

14:42:32.0078 3380 C:\Windows\System32\eappprxy.dll - ok

14:42:32.0078 3380 [ CC0AB40F02D2C2A12209715A3C1B07B8 ] C:\Windows\System32\credui.dll

14:42:32.0078 3380 C:\Windows\System32\credui.dll - ok

14:42:32.0094 3380 [ 796B8123A7859AFD3A4AE10514DBAEB5 ] C:\Windows\System32\winbio.dll

14:42:32.0094 3380 C:\Windows\System32\winbio.dll - ok

14:42:32.0094 3380 [ EEEA40F0EDB0A6E5359E539E15D0BC77 ] C:\Windows\System32\netapi32.dll

14:42:32.0094 3380 C:\Windows\System32\netapi32.dll - ok

14:42:32.0109 3380 [ 44B9C66177651F3F53C87B665D58D17A ] C:\Windows\System32\vaultcli.dll

14:42:32.0109 3380 C:\Windows\System32\vaultcli.dll - ok

14:42:32.0109 3380 [ 730BF204A595D5B6D7DC57A247CC741C ] C:\Windows\System32\wlgpclnt.dll

14:42:32.0109 3380 C:\Windows\System32\wlgpclnt.dll - ok

14:42:32.0125 3380 [ 97E43F324BE1503CB2FFB058534688DA ] C:\Windows\System32\l2gpstore.dll

14:42:32.0125 3380 C:\Windows\System32\l2gpstore.dll - ok

14:42:32.0140 3380 [ 6CECA4C6A489C9B2E6073AFDAAE3F607 ] C:\Windows\System32\netutils.dll

14:42:32.0140 3380 C:\Windows\System32\netutils.dll - ok

14:42:32.0140 3380 [ 7D5645EE0EA77D539828433D9B95F5EB ] C:\Windows\System32\WinSCard.dll

14:42:32.0140 3380 C:\Windows\System32\WinSCard.dll - ok

14:42:32.0156 3380 [ 3C91392D448F6E5D525A85B7550D8BA9 ] C:\Windows\System32\wkscli.dll

14:42:32.0156 3380 C:\Windows\System32\wkscli.dll - ok

14:42:32.0156 3380 [ 7F1B4C6FF3B85F9ADF74055187B8A22C ] C:\Windows\System32\wlanutil.dll

14:42:32.0156 3380 C:\Windows\System32\wlanutil.dll - ok

14:42:32.0172 3380 [ FC51229C7D4AFA0D6F186133728B95AB ] C:\Windows\System32\samcli.dll

14:42:32.0172 3380 C:\Windows\System32\samcli.dll - ok

14:42:32.0172 3380 [ 4FFDE68C4B7C9993FA551E7E36DDB34D ] C:\Windows\System32\msxml6.dll

14:42:32.0172 3380 C:\Windows\System32\msxml6.dll - ok

14:42:32.0187 3380 [ 972C3301DB3DA91AE06A95F6B4160B1B ] C:\Windows\System32\certCredProvider.dll

14:42:32.0187 3380 C:\Windows\System32\certCredProvider.dll - ok

14:42:32.0187 3380 [ 7097425051CE67B450EBF2B1390AE492 ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL

14:42:32.0187 3380 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL - ok

14:42:32.0203 3380 [ 10AC5CE9F78DC281A1BBD9B8CC587B8A ] C:\Windows\System32\msacm32.dll

14:42:32.0203 3380 C:\Windows\System32\msacm32.dll - ok

14:42:32.0218 3380 [ 1B7C3A37362C7B2890168C5FC61C8D9B ] C:\Windows\System32\msacm32.drv

14:42:32.0218 3380 C:\Windows\System32\msacm32.drv - ok

14:42:32.0218 3380 [ 87FA0C48C3B2E9FEE518818FE26B15B5 ] C:\Windows\System32\rasplap.dll

14:42:32.0218 3380 C:\Windows\System32\rasplap.dll - ok

14:42:32.0234 3380 [ 019CD868461B646E09BDF04474C19341 ] C:\Windows\System32\rasapi32.dll

14:42:32.0234 3380 C:\Windows\System32\rasapi32.dll - ok

14:42:32.0234 3380 [ B28DEEC597C8DEB70C744C7CF9210E3E ] C:\Windows\System32\rasman.dll

14:42:32.0234 3380 C:\Windows\System32\rasman.dll - ok

14:42:32.0250 3380 [ CA2A0750ED830678997695FF61B04C30 ] C:\Windows\System32\midimap.dll

14:42:32.0250 3380 C:\Windows\System32\midimap.dll - ok

14:42:32.0250 3380 [ B53C4B69B695EDA1B7E41D35CA4244E2 ] C:\Windows\System32\rtutils.dll

14:42:32.0250 3380 C:\Windows\System32\rtutils.dll - ok

14:42:32.0250 3380 [ 5EDBB34736DD7AC1A73CF8792A835E10 ] C:\Windows\System32\AudioEng.dll

14:42:32.0250 3380 C:\Windows\System32\AudioEng.dll - ok

14:42:32.0265 3380 [ C1395286B822E306B4FE1568A8A77813 ] C:\Windows\System32\AUDIOKSE.dll

14:42:32.0265 3380 C:\Windows\System32\AUDIOKSE.dll - ok

14:42:32.0265 3380 [ AAF932B4011D14052955D4B212A4DA8D ] C:\Windows\System32\shsvcs.dll

14:42:32.0265 3380 C:\Windows\System32\shsvcs.dll - ok

14:42:32.0281 3380 [ A2420D00DCCD67AAF16E19319C674861 ] C:\Windows\System32\atieclxx.exe

14:42:32.0281 3380 C:\Windows\System32\atieclxx.exe - ok

14:42:32.0296 3380 [ 262F6592C3299C005FD6BEC90FC4463A ] C:\Windows\System32\schedsvc.dll

14:42:32.0296 3380 C:\Windows\System32\schedsvc.dll - ok

14:42:32.0296 3380 [ 9BC8610C32C96A2983A65DC21CAFA921 ] C:\Windows\System32\UXInit.dll

14:42:32.0296 3380 C:\Windows\System32\UXInit.dll - ok

14:42:32.0312 3380 [ 71C10B8D9BE36140BC0A335065BC94A9 ] C:\Windows\System32\atiadlxx.dll

14:42:32.0312 3380 C:\Windows\System32\atiadlxx.dll - ok

14:42:32.0312 3380 [ BC414631876B2F28B8DAB08E849C12C5 ] C:\Windows\System32\ktmw32.dll

14:42:32.0312 3380 C:\Windows\System32\ktmw32.dll - ok

14:42:32.0328 3380 [ D3351E01C41B64CD9DB2A93546BCD2C0 ] C:\Windows\System32\RtkAPO64.dll

14:42:32.0328 3380 C:\Windows\System32\RtkAPO64.dll - ok

14:42:32.0328 3380 [ 6DC4A7242F565C9E9C9CCC7BB0FA75C7 ] C:\Windows\System32\taskcomp.dll

14:42:32.0328 3380 C:\Windows\System32\taskcomp.dll - ok

14:42:32.0343 3380 [ 280C712609D936C772E227CFBBE7E5BD ] C:\Windows\System32\atimuixx.dll

14:42:32.0343 3380 C:\Windows\System32\atimuixx.dll - ok

14:42:32.0359 3380 [ 42187A1D9417F397F889C52F8F2AAE82 ] C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll

14:42:32.0359 3380 C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll - ok

14:42:32.0359 3380 [ 6F3C559B82F2912354BE5B098744CC8C ] C:\Windows\System32\WMALFXGFXDSP.dll

14:42:32.0359 3380 C:\Windows\System32\WMALFXGFXDSP.dll - ok

14:42:32.0374 3380 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] C:\Windows\System32\drivers\http.sys

14:42:32.0374 3380 C:\Windows\System32\drivers\http.sys - ok

14:42:32.0374 3380 [ 03706015DB44368375AEBE6339490E66 ] C:\Windows\System32\netcfgx.dll

14:42:32.0374 3380 C:\Windows\System32\netcfgx.dll - ok

14:42:32.0374 3380 [ 65EA57712340C09B1B0C427B4848AE05 ] C:\Windows\System32\taskeng.exe

14:42:32.0374 3380 C:\Windows\System32\taskeng.exe - ok

14:42:32.0390 3380 [ 945E54F23C72D37B8CD1987AF0DB63BF ] C:\Windows\System32\fveapi.dll

14:42:32.0390 3380 C:\Windows\System32\fveapi.dll - ok

14:42:32.0390 3380 [ 805A52C5AE26C28E88FDD9BCCFE6F312 ] C:\Windows\System32\TSChannel.dll

14:42:32.0390 3380 C:\Windows\System32\TSChannel.dll - ok

14:42:32.0406 3380 [ 891ECFD08E2C538B7948CBC45106D697 ] C:\Windows\System32\fvecerts.dll

14:42:32.0406 3380 C:\Windows\System32\fvecerts.dll - ok

14:42:32.0406 3380 [ 694865362F0965779F92BCFE97712323 ] C:\Windows\System32\tbs.dll

14:42:32.0406 3380 C:\Windows\System32\tbs.dll - ok

14:42:32.0421 3380 [ 6D2CBAE98E51066007D8990265C76AF6 ] C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe

14:42:32.0421 3380 C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe - ok

14:42:32.0437 3380 [ 8269210DAF3B12BC8300631B28A2A442 ] C:\Windows\System32\wiarpc.dll

14:42:32.0437 3380 C:\Windows\System32\wiarpc.dll - ok

14:42:32.0452 3380 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] C:\Windows\System32\drivers\vwifimp.sys

14:42:32.0452 3380 C:\Windows\System32\drivers\vwifimp.sys - ok

14:42:32.0468 3380 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] C:\Windows\System32\spoolsv.exe

14:42:32.0468 3380 C:\Windows\System32\spoolsv.exe - ok

14:42:32.0484 3380 [ 54B5DCD55B223BC5DF50B82E1E9E86B1 ] C:\Windows\System32\mfplat.dll

14:42:32.0484 3380 C:\Windows\System32\mfplat.dll - ok

14:42:32.0499 3380 [ 27E461F0BE5BFF5FC737328F749538C3 ] C:\Windows\System32\drivers\srvnet.sys

14:42:32.0499 3380 C:\Windows\System32\drivers\srvnet.sys - ok

14:42:32.0499 3380 [ 6C02A83164F5CC0A262F4199F0871CF5 ] C:\Windows\System32\drivers\bowser.sys

14:42:32.0499 3380 C:\Windows\System32\drivers\bowser.sys - ok

14:42:32.0515 3380 [ A5D9106A73DC88564C825D317CAC68AC ] C:\Windows\System32\drivers\mrxsmb.sys

14:42:32.0515 3380 C:\Windows\System32\drivers\mrxsmb.sys - ok

14:42:32.0530 3380 [ D711B3C1D5F42C0C2415687BE09FC163 ] C:\Windows\System32\drivers\mrxsmb10.sys

14:42:32.0530 3380 C:\Windows\System32\drivers\mrxsmb10.sys - ok

14:42:32.0546 3380 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] C:\Windows\System32\drivers\mrxsmb20.sys

14:42:32.0546 3380 C:\Windows\System32\drivers\mrxsmb20.sys - ok

14:42:32.0562 3380 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] C:\Windows\System32\drivers\srv2.sys

14:42:32.0562 3380 C:\Windows\System32\drivers\srv2.sys - ok

14:42:32.0577 3380 [ D233C7FEAE3FAA25F93A9E6B46815ADC ] C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\msvcr90.dll

14:42:32.0577 3380 C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\msvcr90.dll - ok

14:42:32.0593 3380 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] C:\Windows\System32\drivers\srv.sys

14:42:32.0593 3380 C:\Windows\System32\drivers\srv.sys - ok

14:42:32.0593 3380 [ 851A1382EED3E3A7476DB004F4EE3E1A ] C:\Windows\System32\wkssvc.dll

14:42:32.0593 3380 C:\Windows\System32\wkssvc.dll - ok

14:42:32.0608 3380 [ D9F42719019740BAA6D1C6D536CBDAA6 ] C:\Windows\System32\srvsvc.dll

14:42:32.0608 3380 C:\Windows\System32\srvsvc.dll - ok

14:42:32.0624 3380 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] C:\Windows\System32\browser.dll

14:42:32.0624 3380 C:\Windows\System32\browser.dll - ok

14:42:32.0640 3380 [ 81749E073AC5857B044A686B406E5244 ] C:\Windows\System32\clusapi.dll

14:42:32.0640 3380 C:\Windows\System32\clusapi.dll - ok

14:42:32.0655 3380 [ CFEFA40DDE34659BE5211966EAD86437 ] C:\Windows\System32\netmsg.dll

14:42:32.0655 3380 C:\Windows\System32\netmsg.dll - ok

14:42:32.0655 3380 [ FF80CAD87555E8E4D2CFD7B9058343F8 ] C:\Windows\System32\sscore.dll

14:42:32.0655 3380 C:\Windows\System32\sscore.dll - ok

14:42:32.0671 3380 [ 344FCC9850C3A8A3B4D3C65151AF8E4C ] C:\Windows\System32\resutils.dll

14:42:32.0671 3380 C:\Windows\System32\resutils.dll - ok

14:42:32.0686 3380 [ 28AD5E311996A34025CFB07E131058DD ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

14:42:32.0686 3380 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL - ok

14:42:32.0702 3380 [ F9D908DE6B166DAC9B89BF62FA291CE8 ] C:\Program Files\Bonjour\mdnsNSP.dll

14:42:32.0702 3380 C:\Program Files\Bonjour\mdnsNSP.dll - ok

14:42:32.0718 3380 [ D0FEFC9BA8844315F2ADC216FA1146BB ] C:\Windows\Temp\025414~1.EXE

14:42:32.0718 3380 C:\Windows\Temp\025414~1.EXE - ok

14:42:32.0733 3380 [ 88351B29B622B30962D2FEB6CA8D860B ] C:\Windows\System32\rasadhlp.dll

14:42:32.0733 3380 C:\Windows\System32\rasadhlp.dll - ok

14:42:32.0733 3380 [ E73B0F1819602CB6EF176FB78D76A47B ] C:\Windows\SysWOW64\ntdll.dll

14:42:32.0733 3380 C:\Windows\SysWOW64\ntdll.dll - ok

14:42:32.0749 3380 [ 15B30F15BD13640B337A0FC37BD48CDE ] C:\Windows\System32\wow64.dll

14:42:32.0749 3380 C:\Windows\System32\wow64.dll - ok

14:42:32.0764 3380 [ 2970785A72054740E1A5DCEB32485486 ] C:\Windows\System32\wow64win.dll

14:42:32.0764 3380 C:\Windows\System32\wow64win.dll - ok

14:42:32.0780 3380 [ ED041CB2FABD516153635000C3BC385E ] C:\Windows\winsxs\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_8444db7d32915e4c\mfc80.dll

14:42:32.0780 3380 C:\Windows\winsxs\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_8444db7d32915e4c\mfc80.dll - ok

14:42:32.0780 3380 [ 98168B9B0656A01A321FF1BECB2C03E1 ] C:\Windows\System32\wow64cpu.dll

14:42:32.0780 3380 C:\Windows\System32\wow64cpu.dll - ok

14:42:32.0796 3380 [ D4F3176082566CEFA633B4945802D4C4 ] C:\Windows\SysWOW64\kernel32.dll

14:42:32.0796 3380 C:\Windows\SysWOW64\kernel32.dll - ok

14:42:32.0811 3380 [ 0978C2B33BDD0A7E6C563AA337DC8BA0 ] C:\Windows\SysWOW64\KernelBase.dll

14:42:32.0811 3380 C:\Windows\SysWOW64\KernelBase.dll - ok

14:42:32.0827 3380 [ 17448AF0BBA9E7AB5EC955AF93F271BD ] C:\Windows\SysWOW64\wintrust.dll

14:42:32.0827 3380 C:\Windows\SysWOW64\wintrust.dll - ok

14:42:32.0842 3380 [ 9DC80A8AAAAAC397BDAB3C67165A824E ] C:\Windows\SysWOW64\msvcrt.dll

14:42:32.0842 3380 C:\Windows\SysWOW64\msvcrt.dll - ok

14:42:32.0842 3380 [ 06A754FE28A06F780A099703CFCAAA22 ] C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6\msvcr80.dll

14:42:32.0842 3380 C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6\msvcr80.dll - ok

14:42:32.0858 3380 [ 60D21799A4AF4EDCE65FB98830E4B0C8 ] C:\Windows\SysWOW64\crypt32.dll

14:42:32.0858 3380 C:\Windows\SysWOW64\crypt32.dll - ok

14:42:32.0874 3380 [ 0CE0B8156FB1B461408A7162913DAE15 ] C:\Windows\winsxs\amd64_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_bc1d1e5b0be08790\mfc80ENU.dll

14:42:32.0874 3380 C:\Windows\winsxs\amd64_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_bc1d1e5b0be08790\mfc80ENU.dll - ok

14:42:32.0889 3380 [ 938F39B50BAFE13D6F58C7790682C010 ] C:\Windows\SysWOW64\msasn1.dll

14:42:32.0889 3380 C:\Windows\SysWOW64\msasn1.dll - ok

14:42:32.0905 3380 [ C5AD8083CF94201F1F8084ECC696A8B7 ] C:\Windows\SysWOW64\rpcrt4.dll

14:42:32.0905 3380 C:\Windows\SysWOW64\rpcrt4.dll - ok

14:42:32.0920 3380 [ 5AA945234E9D4CCE4F715276B9AA712C ] C:\Windows\System32\imageres.dll

14:42:32.0920 3380 C:\Windows\System32\imageres.dll - ok

14:42:32.0920 3380 [ F08F6FCD09F9BE94C37ACC1B344685FF ] C:\Windows\SysWOW64\cryptbase.dll

14:42:32.0920 3380 C:\Windows\SysWOW64\cryptbase.dll - ok

14:42:32.0936 3380 [ CFC97F07904067A1E5FAE195D534DA3A ] C:\Windows\SysWOW64\sechost.dll

14:42:32.0936 3380 C:\Windows\SysWOW64\sechost.dll - ok

14:42:32.0952 3380 [ EDA7AD21DF8945528F01F0A86D69E524 ] C:\Windows\SysWOW64\sspicli.dll

14:42:32.0952 3380 C:\Windows\SysWOW64\sspicli.dll - ok

14:42:32.0967 3380 [ 5E0DB2D8B2750543CD2EBB9EA8E6CDD3 ] C:\Windows\SysWOW64\user32.dll

14:42:32.0967 3380 C:\Windows\SysWOW64\user32.dll - ok

14:42:32.0983 3380 [ 702254574E7E52052DE39408457B7149 ] C:\Windows\SysWOW64\version.dll

14:42:32.0983 3380 C:\Windows\SysWOW64\version.dll - ok

14:42:32.0983 3380 [ D6D3AD7BF1D6F6CE9547613ED5E170A2 ] C:\Windows\SysWOW64\gdi32.dll

14:42:32.0983 3380 C:\Windows\SysWOW64\gdi32.dll - ok

14:42:32.0998 3380 [ 384721EF4024890092625E20CADFAF85 ] C:\Windows\SysWOW64\lpk.dll

14:42:32.0998 3380 C:\Windows\SysWOW64\lpk.dll - ok

14:42:33.0014 3380 [ 804AAAFEBB3AD5F49334DD906BCB1DE5 ] C:\Windows\SysWOW64\usp10.dll

14:42:33.0014 3380 C:\Windows\SysWOW64\usp10.dll - ok

14:42:33.0030 3380 [ 95E2376B3323F062EB562B8586D0F14A ] C:\Windows\SysWOW64\advapi32.dll

14:42:33.0030 3380 C:\Windows\SysWOW64\advapi32.dll - ok

14:42:33.0045 3380 [ 29E9794708DF51DB5DC89FB2E903A0F6 ] C:\Windows\SysWOW64\shell32.dll

14:42:33.0045 3380 C:\Windows\SysWOW64\shell32.dll - ok

14:42:33.0045 3380 [ 8CC3C111D653E96F3EA1590891491D71 ] C:\Windows\SysWOW64\shlwapi.dll

14:42:33.0045 3380 C:\Windows\SysWOW64\shlwapi.dll - ok

14:42:33.0061 3380 [ 928CF7268086631F54C3D8E17238C6DD ] C:\Windows\SysWOW64\ole32.dll

14:42:33.0061 3380 C:\Windows\SysWOW64\ole32.dll - ok

14:42:33.0076 3380 [ 6C765E82B57F2E66CE9C54AC238471D9 ] C:\Windows\SysWOW64\oleaut32.dll

14:42:33.0076 3380 C:\Windows\SysWOW64\oleaut32.dll - ok

14:42:33.0076 3380 [ A6F09E5669D9A19035F6D942CAA15882 ] C:\Windows\SysWOW64\imm32.dll

14:42:33.0076 3380 C:\Windows\SysWOW64\imm32.dll - ok

14:42:33.0092 3380 [ C9618BC9B2B0FD7C1138D8774795A79B ] C:\Windows\SysWOW64\msctf.dll

14:42:33.0092 3380 C:\Windows\SysWOW64\msctf.dll - ok

14:42:33.0108 3380 [ A543AC1F7138376D778D630A35FCBC4C ] C:\Windows\SysWOW64\psapi.dll

14:42:33.0108 3380 C:\Windows\SysWOW64\psapi.dll - ok

14:42:33.0123 3380 [ 539C49CEBB3C50957AC8A09D95ECD880 ] C:\Windows\SysWOW64\shfolder.dll

14:42:33.0123 3380 C:\Windows\SysWOW64\shfolder.dll - ok

14:42:33.0139 3380 [ 6A6B2EE4565A178035BE2A4FF6F2C968 ] C:\Windows\SysWOW64\wtsapi32.dll

14:42:33.0139 3380 C:\Windows\SysWOW64\wtsapi32.dll - ok

14:42:33.0154 3380 [ A5299D04ED225D64CF07A568A3E1BF8C ] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

14:42:33.0154 3380 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe - ok

14:42:33.0154 3380 [ 0B3595A4FF0B36D68E5FC67FD7D70FDC ] C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll

14:42:33.0170 3380 C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll - ok

14:42:33.0170 3380 [ C9564CF4976E7E96B4052737AA2492B4 ] C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll

14:42:33.0170 3380 C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll - ok

14:42:33.0186 3380 [ 848BC9A0BB2361E549FD4C22D7548FB8 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\AppleVersions.dll

14:42:33.0186 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\AppleVersions.dll - ok

14:42:33.0201 3380 [ 64894527838C86454E2F378FF39FA336 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\YSCrashDump.dll

14:42:33.0201 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\YSCrashDump.dll - ok

14:42:33.0217 3380 [ EF8CD3C64EE9C08980D6D06CCCE46C68 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CoreFoundation.dll

14:42:33.0217 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CoreFoundation.dll - ok

14:42:33.0232 3380 [ 7FF15A4F092CD4A96055BA69F903E3E9 ] C:\Windows\SysWOW64\ws2_32.dll

14:42:33.0232 3380 C:\Windows\SysWOW64\ws2_32.dll - ok

14:42:33.0248 3380 [ 152F8772D5A5CD7883305C3B8D28470E ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll

14:42:33.0248 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll - ok

14:42:33.0264 3380 [ 6377051C63D5552A311935C67E9FDFDC ] C:\Windows\SysWOW64\nsi.dll

14:42:33.0264 3380 C:\Windows\SysWOW64\nsi.dll - ok

14:42:33.0264 3380 [ 78865ABC5F5D13190F8B35BD9044714A ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\objc.dll

14:42:33.0264 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\objc.dll - ok

14:42:33.0279 3380 [ DF13A51A5C591887D2EC6AE64CEED0FA ] C:\Windows\SysWOW64\wsock32.dll

14:42:33.0279 3380 C:\Windows\SysWOW64\wsock32.dll - ok

14:42:33.0295 3380 [ FF9831030678C7B6D70BAC00F68F8976 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libdispatch.dll

14:42:33.0295 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libdispatch.dll - ok

14:42:33.0310 3380 [ D5AEFAD57C08349A4393D987DF7C715D ] C:\Windows\SysWOW64\winmm.dll

14:42:33.0310 3380 C:\Windows\SysWOW64\winmm.dll - ok

14:42:33.0326 3380 [ 5A963C340DE1A01BA6E24945CE05D16A ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuin.dll

14:42:33.0326 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuin.dll - ok

14:42:33.0342 3380 [ F4BC62990E7E5C29799A895B80FC3177 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuuc.dll

14:42:33.0342 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuuc.dll - ok

14:42:33.0342 3380 [ 149D74E1128A86DC9CFB2851FBEA11EB ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\icudt46.dll

14:42:33.0342 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\icudt46.dll - ok

14:42:33.0357 3380 [ F6FD367C9EAAEDF90CD7A7952AE0B336 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\ASL.dll

14:42:33.0357 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\ASL.dll - ok

14:42:33.0373 3380 [ 4E4EDF9CA82E95BAB2977DD9F21B00F6 ] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService_main.dll

14:42:33.0373 3380 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService_main.dll - ok

14:42:33.0388 3380 [ C733D233B623B7FFCE5031E4B756EE26 ] C:\Windows\SysWOW64\profapi.dll

14:42:33.0388 3380 C:\Windows\SysWOW64\profapi.dll - ok

14:42:33.0404 3380 [ 10FB16B50AFFDA6D44588F3C445DC273 ] C:\Windows\SysWOW64\setupapi.dll

14:42:33.0404 3380 C:\Windows\SysWOW64\setupapi.dll - ok

14:42:33.0420 3380 [ F436E847FA799ECD75AD8C313673F450 ] C:\Windows\SysWOW64\cfgmgr32.dll

14:42:33.0420 3380 C:\Windows\SysWOW64\cfgmgr32.dll - ok

14:42:33.0420 3380 [ 2EEFF4502F5E13B1BED4A04CCAD64C08 ] C:\Windows\SysWOW64\devobj.dll

14:42:33.0420 3380 C:\Windows\SysWOW64\devobj.dll - ok

14:42:33.0435 3380 [ D15618A0FF8DBC2C5BF3726BACC75A0B ] C:\Windows\SysWOW64\userenv.dll

14:42:33.0435 3380 C:\Windows\SysWOW64\userenv.dll - ok

14:42:33.0451 3380 [ 062373995EAE5F0EAC9EAA9192136BFB ] C:\Windows\SysWOW64\dnssd.dll

14:42:33.0451 3380 C:\Windows\SysWOW64\dnssd.dll - ok

14:42:33.0466 3380 [ 3FD15B4611D9BDA3F8013548C0ECAECA ] C:\Windows\SysWOW64\ntmarta.dll

14:42:33.0466 3380 C:\Windows\SysWOW64\ntmarta.dll - ok

14:42:33.0482 3380 [ A8BB45F9ECAD993461E0FEF8E2A99152 ] C:\Windows\SysWOW64\Wldap32.dll

14:42:33.0482 3380 C:\Windows\SysWOW64\Wldap32.dll - ok

14:42:33.0482 3380 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] C:\Program Files\Bonjour\mDNSResponder.exe

14:42:33.0482 3380 C:\Program Files\Bonjour\mDNSResponder.exe - ok

14:42:33.0498 3380 [ 8999B8631C7FD9F7F9EC3CAFD953BA24 ] C:\Windows\SysWOW64\mswsock.dll

14:42:33.0498 3380 C:\Windows\SysWOW64\mswsock.dll - ok

14:42:33.0513 3380 [ 0E1B02C9CC352A1F61703B7D1A8A2C45 ] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\MobileDevice.dll

14:42:33.0513 3380 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\MobileDevice.dll - ok

14:42:33.0529 3380 [ 31DA517946FFE416442E864592548F8A ] C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

14:42:33.0529 3380 C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe - ok

14:42:33.0544 3380 [ EE5C8E27C37B79CB54A2FCEEED2DC262 ] C:\Windows\SysWOW64\WSHTCPIP.DLL

14:42:33.0544 3380 C:\Windows\SysWOW64\WSHTCPIP.DLL - ok

14:42:33.0560 3380 [ 7FA3A810F383588D46220967DE8B64FF ] C:\Windows\SysWOW64\wininet.dll

14:42:33.0560 3380 C:\Windows\SysWOW64\wininet.dll - ok

14:42:33.0576 3380 [ 5ABCE0ECAEFAAEE30CA678B489DC0EFE ] C:\Program Files\WIDCOMM\Bluetooth Software\btins.dll

14:42:33.0576 3380 C:\Program Files\WIDCOMM\Bluetooth Software\btins.dll - ok

14:42:33.0591 3380 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] C:\Windows\System32\cryptsvc.dll

14:42:33.0591 3380 C:\Windows\System32\cryptsvc.dll - ok

14:42:33.0607 3380 [ 869BDE240B7FE9C7B25BD80DF85641C8 ] C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe

14:42:33.0607 3380 C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe - ok

14:42:33.0607 3380 [ 8792BAB371B4B1589E015B6FD1ED3B15 ] C:\Windows\System32\cryptnet.dll

14:42:33.0607 3380 C:\Windows\System32\cryptnet.dll - ok

14:42:33.0622 3380 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] C:\Windows\System32\dps.dll

14:42:33.0622 3380 C:\Windows\System32\dps.dll - ok

14:42:33.0638 3380 [ 0E2F58F6E698EDCB9E58FAD0CBCD0567 ] C:\Windows\System32\vssapi.dll

14:42:33.0638 3380 C:\Windows\System32\vssapi.dll - ok

14:42:33.0654 3380 [ 780E80E5502015EDAEC91DC0A0C96A79 ] C:\Windows\SysWOW64\iertutil.dll

14:42:33.0654 3380 C:\Windows\SysWOW64\iertutil.dll - ok

14:42:33.0669 3380 [ BAAFAF9CEAEC0B73C2A3550A01F6CECB ] C:\Windows\System32\taskschd.dll

14:42:33.0669 3380 C:\Windows\System32\taskschd.dll - ok

14:42:33.0669 3380 [ 5EB6E9C8BE1ACC5830780E0F9A846255 ] C:\Windows\System32\msi.dll

14:42:33.0669 3380 C:\Windows\System32\msi.dll - ok

14:42:33.0685 3380 [ 287923557447D7E4BDD7E65B1F0F5428 ] C:\Windows\System32\vsstrace.dll

14:42:33.0685 3380 C:\Windows\System32\vsstrace.dll - ok

14:42:33.0700 3380 [ A6C29DB53ECA94FA8591C5388D604B82 ] C:\Windows\SysWOW64\msi.dll

14:42:33.0700 3380 C:\Windows\SysWOW64\msi.dll - ok

14:42:33.0716 3380 [ 5727B42618EF84E63C9E59006507DA8A ] C:\Program Files (x86)\Flip Video\FlipShare\QtCore4.dll

14:42:33.0716 3380 C:\Program Files (x86)\Flip Video\FlipShare\QtCore4.dll - ok

14:42:33.0716 3380 [ FAFAE01E889DC9C05A6CA2138CFC220B ] C:\Windows\System32\tapi32.dll

14:42:33.0716 3380 C:\Windows\System32\tapi32.dll - ok

14:42:33.0732 3380 [ 25073E4054E18470C9684CBCFAFF56FE ] C:\Program Files\WIDCOMM\Bluetooth Software\btwprofpack.dll

14:42:33.0732 3380 C:\Program Files\WIDCOMM\Bluetooth Software\btwprofpack.dll - ok

14:42:33.0747 3380 [ E487A891C206699F2CF9F88F95C0FE77 ] C:\Program Files (x86)\Flip Video\FlipShare\Core.dll

14:42:33.0747 3380 C:\Program Files (x86)\Flip Video\FlipShare\Core.dll - ok

14:42:33.0763 3380 [ 4266A3230981DD4434C55957F6DD497D ] C:\Windows\SysWOW64\urlmon.dll

14:42:33.0763 3380 C:\Windows\SysWOW64\urlmon.dll - ok

14:42:33.0778 3380 [ 5CEDF3FEB843F84D5F09A3D76AB47E28 ] C:\Program Files (x86)\Flip Video\FlipShare\qca2.dll

14:42:33.0778 3380 C:\Program Files (x86)\Flip Video\FlipShare\qca2.dll - ok

14:42:33.0794 3380 [ 6BFD564681280DE6EFDC66110D62D84C ] C:\Program Files (x86)\Flip Video\FlipShare\QtGui4.dll

14:42:33.0794 3380 C:\Program Files (x86)\Flip Video\FlipShare\QtGui4.dll - ok

14:42:33.0794 3380 [ D1DE1EAFDE97BE41CF6585027FF3E732 ] C:\Windows\SysWOW64\comdlg32.dll

14:42:33.0794 3380 C:\Windows\SysWOW64\comdlg32.dll - ok

14:42:33.0810 3380 [ BDAC1AA64495D0F7E1FF810EBBF1F018 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll

14:42:33.0810 3380 C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll - ok

14:42:33.0825 3380 [ 9E4B0E7472B4CEBA9E17F440B8CB0AB8 ] C:\Windows\SysWOW64\winspool.drv

14:42:33.0825 3380 C:\Windows\SysWOW64\winspool.drv - ok

14:42:33.0841 3380 [ 31FF0A3F8BF90AE7AEA72C720ECA9205 ] C:\Program Files (x86)\Flip Video\FlipShare\QtNetwork4.dll

14:42:33.0841 3380 C:\Program Files (x86)\Flip Video\FlipShare\QtNetwork4.dll - ok

14:42:33.0856 3380 [ 58D6DF3942F920F96D5214D2D5F16F24 ] C:\Program Files (x86)\Flip Video\FlipShare\QtSql4.dll

14:42:33.0856 3380 C:\Program Files (x86)\Flip Video\FlipShare\QtSql4.dll - ok

14:42:33.0856 3380 [ 62A2376EDA0DC4D9C7E9BF4DFDE0FA65 ] C:\Program Files (x86)\Flip Video\FlipShare\QtXml4.dll

14:42:33.0856 3380 C:\Program Files (x86)\Flip Video\FlipShare\QtXml4.dll - ok

14:42:33.0872 3380 [ 01A6D8690142C444C090EA38BD5510C7 ] C:\Program Files (x86)\Flip Video\FlipShare\QtWebKit4.dll

14:42:33.0872 3380 C:\Program Files (x86)\Flip Video\FlipShare\QtWebKit4.dll - ok

14:42:33.0888 3380 [ AD83675CC287442875091CA3B14F1F98 ] C:\Program Files (x86)\Flip Video\FlipShare\phonon4.dll

14:42:33.0888 3380 C:\Program Files (x86)\Flip Video\FlipShare\phonon4.dll - ok

14:42:33.0903 3380 [ A8EDB86FC2A4D6D1285E4C70384AC35A ] C:\Windows\System32\dllhost.exe

14:42:33.0903 3380 C:\Windows\System32\dllhost.exe - ok

14:42:33.0919 3380 [ 14DFDEAF4E589ED3F1FF187A86B9408C ] C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll

14:42:33.0919 3380 C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll - ok

14:42:33.0934 3380 [ A0A2C1D812C231C9BFE119FDC68E341B ] C:\Windows\System32\IDStore.dll

14:42:33.0934 3380 C:\Windows\System32\IDStore.dll - ok

14:42:33.0934 3380 [ 517110BD83835338C037269E603DB55D ] C:\Windows\System32\taskhost.exe

14:42:33.0934 3380 C:\Windows\System32\taskhost.exe - ok

14:42:33.0950 3380 [ 23566F9723771108D2E6CD768AC27407 ] C:\Windows\System32\AtBroker.exe

14:42:33.0950 3380 C:\Windows\System32\AtBroker.exe - ok

14:42:33.0966 3380 [ 6CEF7856A3EFAC59470F6208F0F585CE ] C:\Windows\System32\mpr.dll

14:42:33.0966 3380 C:\Windows\System32\mpr.dll - ok

14:42:33.0981 3380 [ 45CFBFA8EDC3DF4E2B7FB0D0260FE051 ] C:\Windows\System32\localspl.dll

14:42:33.0981 3380 C:\Windows\System32\localspl.dll - ok

14:42:33.0997 3380 [ 3285481F5C12305CA104A6C493CA5A0B ] C:\Windows\System32\spoolss.dll

14:42:33.0997 3380 C:\Windows\System32\spoolss.dll - ok

14:42:33.0997 3380 [ 94EEAC26F57811BD1AEFC164412F7FCE ] C:\Windows\System32\PlaySndSrv.dll

14:42:33.0997 3380 C:\Windows\System32\PlaySndSrv.dll - ok

14:42:34.0012 3380 [ 1F1CA9E99DD5BF918BE0BF30B5A42FDA ] C:\Windows\System32\MsCtfMonitor.dll

14:42:34.0012 3380 C:\Windows\System32\MsCtfMonitor.dll - ok

14:42:34.0028 3380 [ C5AC93CF3BA30D367FB49148A2B673B9 ] C:\Windows\System32\PrintIsolationProxy.dll

14:42:34.0028 3380 C:\Windows\System32\PrintIsolationProxy.dll - ok

14:42:34.0044 3380 [ 2E14406E05789F91C9282AE7CFCA3A07 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

14:42:34.0044 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll - ok

14:42:34.0059 3380 [ AF54247F97CCF3539DE7505C09972FF9 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CFNetwork.dll

14:42:34.0059 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CFNetwork.dll - ok

14:42:34.0075 3380 [ 8BA9851E671E8B5E49E303748FFD530C ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\SQLite3.dll

14:42:34.0075 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\SQLite3.dll - ok

14:42:34.0090 3380 [ A90DC9ABD65DB1A8902F361103029952 ] C:\Windows\SysWOW64\IPHLPAPI.DLL

14:42:34.0090 3380 C:\Windows\SysWOW64\IPHLPAPI.DLL - ok

14:42:34.0090 3380 [ CFF35B879D1618D42C86644C717BA947 ] C:\Windows\SysWOW64\winnsi.dll

14:42:34.0090 3380 C:\Windows\SysWOW64\winnsi.dll - ok

14:42:34.0106 3380 [ 73862FF693168369A90F046E7F227B83 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

14:42:34.0106 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll - ok

14:42:34.0122 3380 [ BAFE84E637BF7388C96EF48D4D3FDD53 ] C:\Windows\System32\userinit.exe

14:42:34.0122 3380 C:\Windows\System32\userinit.exe - ok

14:42:34.0137 3380 [ F162D5F5E845B9DC352DD1BAD8CEF1BC ] C:\Windows\System32\dwm.exe

14:42:34.0137 3380 C:\Windows\System32\dwm.exe - ok

14:42:34.0137 3380 [ FCFCD1101C5DA23B4B95F93D02B2C169 ] C:\Windows\System32\dwmredir.dll

14:42:34.0137 3380 C:\Windows\System32\dwmredir.dll - ok

14:42:34.0153 3380 [ 4BA77A5EF71C14C764B0ED4701683E3E ] C:\Windows\System32\dwmcore.dll

14:42:34.0153 3380 C:\Windows\System32\dwmcore.dll - ok

14:42:34.0168 3380 [ C9F732332FA5C3C1B3247A87612BE386 ] C:\Program Files (x86)\Flip Video\FlipShare\boost_serialization-vc80-mt-1_43.dll

14:42:34.0168 3380 C:\Program Files (x86)\Flip Video\FlipShare\boost_serialization-vc80-mt-1_43.dll - ok

14:42:34.0184 3380 [ C7ED2A32491B71C555AEDDEACAE6EFBD ] C:\Program Files (x86)\Flip Video\FlipShare\PocoFoundation.dll

14:42:34.0184 3380 C:\Program Files (x86)\Flip Video\FlipShare\PocoFoundation.dll - ok

14:42:34.0200 3380 [ 675591787690F8B5D68C070D3A66EA6F ] C:\Program Files (x86)\Flip Video\FlipShare\PocoNet.dll

14:42:34.0200 3380 C:\Program Files (x86)\Flip Video\FlipShare\PocoNet.dll - ok

14:42:34.0215 3380 [ 9FBBE53928DD2925269089DE999891A8 ] C:\Program Files (x86)\Flip Video\FlipShare\PocoXML.dll

14:42:34.0215 3380 C:\Program Files (x86)\Flip Video\FlipShare\PocoXML.dll - ok

14:42:34.0231 3380 [ 9C330B7DDEE9492373041E75DA01F80C ] C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe

14:42:34.0231 3380 C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe - ok

14:42:34.0231 3380 [ E1374D37477322D4956604711008C69D ] C:\Windows\System32\d3d10_1.dll

14:42:34.0231 3380 C:\Windows\System32\d3d10_1.dll - ok

14:42:34.0246 3380 [ FF5688D309347F2720911D8796912834 ] C:\Windows\SysWOW64\clbcatq.dll

14:42:34.0246 3380 C:\Windows\SysWOW64\clbcatq.dll - ok

14:42:34.0262 3380 [ 704314FD398C81D5F342CAA5DF7B7F21 ] C:\Windows\SysWOW64\wbemcomn.dll

14:42:34.0262 3380 C:\Windows\SysWOW64\wbemcomn.dll - ok

14:42:34.0278 3380 [ C5B0324DB461559ADD070E632A6919FA ] C:\Windows\SysWOW64\wbem\wbemprox.dll

14:42:34.0278 3380 C:\Windows\SysWOW64\wbem\wbemprox.dll - ok

14:42:34.0293 3380 [ 7321F18D1F820612ED0E9F2D4B578A7E ] C:\Windows\SysWOW64\cryptsp.dll

14:42:34.0293 3380 C:\Windows\SysWOW64\cryptsp.dll - ok

14:42:34.0309 3380 [ ED8EC63F7522DF4852147C84EC62C36A ] C:\Windows\SysWOW64\rsaenh.dll

14:42:34.0309 3380 C:\Windows\SysWOW64\rsaenh.dll - ok

14:42:34.0309 3380 [ 5997D769CDB108390DCFAEBF442BF816 ] C:\Windows\SysWOW64\RpcRtRemote.dll

14:42:34.0309 3380 C:\Windows\SysWOW64\RpcRtRemote.dll - ok

14:42:34.0324 3380 [ 5727B42618EF84E63C9E59006507DA8A ] C:\Program Files (x86)\Flip Video\FlipShareServer\QtCore4.dll

14:42:34.0324 3380 C:\Program Files (x86)\Flip Video\FlipShareServer\QtCore4.dll - ok

14:42:34.0340 3380 [ 31FF0A3F8BF90AE7AEA72C720ECA9205 ] C:\Program Files (x86)\Flip Video\FlipShareServer\QtNetwork4.dll

14:42:34.0340 3380 C:\Program Files (x86)\Flip Video\FlipShareServer\QtNetwork4.dll - ok

14:42:34.0356 3380 [ 58D6DF3942F920F96D5214D2D5F16F24 ] C:\Program Files (x86)\Flip Video\FlipShareServer\QtSql4.dll

14:42:34.0356 3380 C:\Program Files (x86)\Flip Video\FlipShareServer\QtSql4.dll - ok

14:42:34.0371 3380 [ C9F732332FA5C3C1B3247A87612BE386 ] C:\Program Files (x86)\Flip Video\FlipShareServer\boost_serialization-vc80-mt-1_43.dll

14:42:34.0371 3380 C:\Program Files (x86)\Flip Video\FlipShareServer\boost_serialization-vc80-mt-1_43.dll - ok

14:42:34.0387 3380 [ C7ED2A32491B71C555AEDDEACAE6EFBD ] C:\Program Files (x86)\Flip Video\FlipShareServer\PocoFoundation.dll

14:42:34.0387 3380 C:\Program Files (x86)\Flip Video\FlipShareServer\PocoFoundation.dll - ok

14:42:34.0402 3380 [ 675591787690F8B5D68C070D3A66EA6F ] C:\Program Files (x86)\Flip Video\FlipShareServer\PocoNet.dll

14:42:34.0402 3380 C:\Program Files (x86)\Flip Video\FlipShareServer\PocoNet.dll - ok

14:42:34.0418 3380 [ EEE3601FF7667E2E1B1CCDCB7BE67229 ] C:\Program Files (x86)\Flip Video\FlipShareServer\PocoNetSSL.dll

14:42:34.0418 3380 C:\Program Files (x86)\Flip Video\FlipShareServer\PocoNetSSL.dll - ok

14:42:34.0434 3380 [ 0040EFBDE7CCE2A2CB4B88992A72F5B4 ] C:\Program Files (x86)\Flip Video\FlipShareServer\PocoUtil.dll

14:42:34.0434 3380 C:\Program Files (x86)\Flip Video\FlipShareServer\PocoUtil.dll - ok

14:42:34.0449 3380 [ DA9CECFC2EA1EBDD8B6A8CC56A5E9605 ] C:\Program Files (x86)\Flip Video\FlipShareServer\libeay32.dll

14:42:34.0449 3380 C:\Program Files (x86)\Flip Video\FlipShareServer\libeay32.dll - ok

14:42:34.0449 3380 [ 9FBBE53928DD2925269089DE999891A8 ] C:\Program Files (x86)\Flip Video\FlipShareServer\PocoXML.dll

14:42:34.0449 3380 C:\Program Files (x86)\Flip Video\FlipShareServer\PocoXML.dll - ok

14:42:34.0480 3380 [ 07911E4A7E4F1F4FC17A99D2D9334278 ] C:\Program Files (x86)\Flip Video\FlipShareServer\ssleay32.dll

14:42:34.0480 3380 C:\Program Files (x86)\Flip Video\FlipShareServer\ssleay32.dll - ok

14:42:34.0480 3380 [ B431F0395DC358234E95C3050E32DEFA ] C:\Program Files (x86)\Flip Video\FlipShareServer\PocoCrypto.dll

14:42:34.0480 3380 C:\Program Files (x86)\Flip Video\FlipShareServer\PocoCrypto.dll - ok

14:42:34.0496 3380 [ 07D0A535A44DD048EE346853B0BB9349 ] C:\Program Files (x86)\DDNi\Oasis2Service\Oasis2Service.exe

14:42:34.0496 3380 C:\Program Files (x86)\DDNi\Oasis2Service\Oasis2Service.exe - ok

14:42:34.0512 3380 [ 8AD77806D336673F270DB31645267293 ] C:\Windows\System32\nlasvc.dll

14:42:34.0512 3380 C:\Windows\System32\nlasvc.dll - ok

14:42:34.0527 3380 [ D4FAC263861BAE06971C7F7D0A8EBF15 ] C:\Windows\System32\ncsi.dll

14:42:34.0527 3380 C:\Windows\System32\ncsi.dll - ok

14:42:34.0543 3380 [ D83947A58613E9091B4C9CC0F1546A8D ] C:\Windows\SysWOW64\mscoree.dll

14:42:34.0543 3380 C:\Windows\SysWOW64\mscoree.dll - ok

14:42:34.0543 3380 [ 58F4493BF748A3A89689997B7BD00E95 ] C:\Windows\System32\winhttp.dll

14:42:34.0543 3380 C:\Windows\System32\winhttp.dll - ok

14:42:34.0558 3380 [ F5DF6846F30E9F54EA60CCAEB3FB2055 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll

14:42:34.0558 3380 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll - ok

14:42:34.0574 3380 [ 603EBD34E216C5654A2D774EAC98D278 ] C:\Windows\System32\webio.dll

14:42:34.0574 3380 C:\Windows\System32\webio.dll - ok

14:42:34.0590 3380 [ 8B92BED5B8D4A8480E7AA631F35A6F35 ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

14:42:34.0590 3380 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll - ok

14:42:34.0605 3380 [ 2BBF3FDB70B8965DFA0258CBAB41ECCE ] C:\Windows\System32\ssdpapi.dll

14:42:34.0605 3380 C:\Windows\System32\ssdpapi.dll - ok

14:42:34.0621 3380 [ 31D59387099070963EAD4CE14C5B5F04 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\187d7c66735c533de851c76384f86912\mscorlib.ni.dll

14:42:34.0621 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\187d7c66735c533de851c76384f86912\mscorlib.ni.dll - ok

14:42:34.0636 3380 [ F2ECF5EDE603902244BA5808F0861E69 ] C:\Windows\System32\hpinksts8811LM.dll

14:42:34.0636 3380 C:\Windows\System32\hpinksts8811LM.dll - ok

14:42:34.0652 3380 [ 332FEAB1435662FC6C672E25BEB37BE3 ] C:\Windows\explorer.exe

14:42:34.0652 3380 C:\Windows\explorer.exe - ok

14:42:34.0652 3380 [ 19E41CCCEE697CC9465396B370929792 ] C:\Windows\System32\FXSMON.dll

14:42:34.0652 3380 C:\Windows\System32\FXSMON.dll - ok

14:42:34.0668 3380 [ 32A3C8600AF124CBAAD845F13CFAE3CB ] C:\Windows\System32\tcpmon.dll

14:42:34.0668 3380 C:\Windows\System32\tcpmon.dll - ok

14:42:34.0683 3380 [ 93518C6EDE0B61BCBD02BDB02BD05FEE ] C:\Windows\System32\snmpapi.dll

14:42:34.0683 3380 C:\Windows\System32\snmpapi.dll - ok

14:42:34.0699 3380 [ 426BA4E737A7988FD1202AF2F2B2F4A6 ] C:\Windows\System32\d3d10_1core.dll

14:42:34.0699 3380 C:\Windows\System32\d3d10_1core.dll - ok

14:42:34.0714 3380 [ F404E59DB6A0F122AB26BF4F3E2FD0FA ] C:\Windows\System32\dxgi.dll

14:42:34.0714 3380 C:\Windows\System32\dxgi.dll - ok

14:42:34.0730 3380 [ F09A9A1AD21FE618C4C8B0A0D830C886 ] C:\Windows\System32\msutb.dll

14:42:34.0730 3380 C:\Windows\System32\msutb.dll - ok

14:42:34.0746 3380 [ FFF9D00CF16397C64317F213484F94BD ] C:\Windows\System32\wsnmp32.dll

14:42:34.0746 3380 C:\Windows\System32\wsnmp32.dll - ok

14:42:34.0746 3380 [ EED05D42D91835064703E2318552ED25 ] C:\Windows\System32\ExplorerFrame.dll

14:42:34.0746 3380 C:\Windows\System32\ExplorerFrame.dll - ok

14:42:34.0761 3380 [ DF72A9936D0C3F517083119648814B09 ] C:\Windows\System32\usbmon.dll

14:42:34.0761 3380 C:\Windows\System32\usbmon.dll - ok

14:42:34.0777 3380 [ A1D7E3ADCDB07DDB6F423862DCB1A52B ] C:\Windows\System32\WSDMon.dll

14:42:34.0777 3380 C:\Windows\System32\WSDMon.dll - ok

14:42:34.0792 3380 [ 024352FEEC9042260BB4CFB4D79A206B ] C:\Windows\System32\EhStorShell.dll

14:42:34.0792 3380 C:\Windows\System32\EhStorShell.dll - ok

14:42:34.0808 3380 [ 037A719DAD50603202C978CD802623E4 ] C:\Windows\System32\ntshrui.dll

14:42:34.0808 3380 C:\Windows\System32\ntshrui.dll - ok

14:42:34.0824 3380 [ 1BF0CB861A48FEB1638228760750F3CB ] C:\Windows\System32\cscapi.dll

14:42:34.0824 3380 C:\Windows\System32\cscapi.dll - ok

14:42:34.0824 3380 [ 75BCC4043512E41D83C8F224B168039C ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

14:42:34.0824 3380 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll - ok

14:42:34.0839 3380 [ 6D6596E046CA6A61DE250AD3A281A1AF ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9dd758ac0bf7358ac6e4720610fcc63c\System.ni.dll

14:42:34.0839 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9dd758ac0bf7358ac6e4720610fcc63c\System.ni.dll - ok

14:42:34.0855 3380 [ F1B205F932F62F94506A5F332C895DAF ] C:\Windows\System32\WSDApi.dll

14:42:34.0855 3380 C:\Windows\System32\WSDApi.dll - ok

14:42:34.0870 3380 [ C55516D98DD5D8F0153C2A9B4227DA86 ] C:\Windows\System32\webservices.dll

14:42:34.0870 3380 C:\Windows\System32\webservices.dll - ok

14:42:34.0886 3380 [ B5055B51BAA0FD0A736A88653DA3C1C0 ] C:\Windows\System32\fundisc.dll

14:42:34.0886 3380 C:\Windows\System32\fundisc.dll - ok

14:42:34.0886 3380 [ 496DF1FCA47222C5E363A0E30B5CD5A9 ] C:\Windows\System32\aticfx64.dll

14:42:34.0886 3380 C:\Windows\System32\aticfx64.dll - ok

14:42:34.0902 3380 [ 4581716B4BF76ACFD8E167EB0B26D82A ] C:\Windows\System32\fdPnp.dll

14:42:34.0902 3380 C:\Windows\System32\fdPnp.dll - ok

14:42:34.0917 3380 [ 1D626FE2E13C1CE49CA0136CFF214E93 ] C:\Windows\System32\spool\prtprocs\x64\winprint.dll

14:42:34.0917 3380 C:\Windows\System32\spool\prtprocs\x64\winprint.dll - ok

14:42:34.0933 3380 [ 548CB980D7876E207CC9F8B60C1587A3 ] C:\Windows\System32\win32spl.dll

14:42:34.0933 3380 C:\Windows\System32\win32spl.dll - ok

14:42:34.0933 3380 [ 507D5567A0A4EE86C4B0CE2CE1777025 ] C:\Windows\System32\inetpp.dll

14:42:34.0933 3380 C:\Windows\System32\inetpp.dll - ok

14:42:34.0948 3380 [ B6B265D1AAC5EB9C68BF5F8A447DE9C6 ] C:\Windows\System32\atiuxp64.dll

14:42:34.0948 3380 C:\Windows\System32\atiuxp64.dll - ok

14:42:34.0964 3380 [ 1D63F4366288B8A7595397E27010FD44 ] C:\Windows\System32\IconCodecService.dll

14:42:34.0964 3380 C:\Windows\System32\IconCodecService.dll - ok

14:42:34.0980 3380 [ 9BB99503D6A4DD62569EDE9E5E2672A5 ] C:\Windows\System32\HotStartUserAgent.dll

14:42:34.0980 3380 C:\Windows\System32\HotStartUserAgent.dll - ok

14:42:34.0995 3380 [ 4B78AB594CD35D5C3F9947C0F33B7F77 ] C:\Windows\System32\atidxx64.dll

14:42:34.0995 3380 C:\Windows\System32\atidxx64.dll - ok

14:42:35.0011 3380 [ F02A533F517EB38333CB12A9E8963773 ] C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

14:42:35.0011 3380 C:\Program Files (x86)\Google\Update\GoogleUpdate.exe - ok

14:42:35.0011 3380 [ 9FF47CD8A3787C8FD3CDFE40441C722E ] C:\Program Files (x86)\Google\Update\1.3.21.123\goopdate.dll

14:42:35.0011 3380 C:\Program Files (x86)\Google\Update\1.3.21.123\goopdate.dll - ok

14:42:35.0026 3380 [ 2FCA0D2C59A855C54BAFA22AA329DF0F ] C:\Windows\SysWOW64\netapi32.dll

14:42:35.0026 3380 C:\Windows\SysWOW64\netapi32.dll - ok

14:42:35.0042 3380 [ 20B3934DB73EABA2B49B7177873CB81F ] C:\Windows\SysWOW64\netutils.dll

14:42:35.0042 3380 C:\Windows\SysWOW64\netutils.dll - ok

14:42:35.0058 3380 [ 5CCDCD40E732D54E0F7451AC66AC1C87 ] C:\Windows\SysWOW64\srvcli.dll

14:42:35.0058 3380 C:\Windows\SysWOW64\srvcli.dll - ok

14:42:35.0073 3380 [ 49E5753D923F1AC63B22D3DCB0B47E00 ] C:\Windows\System32\uDWM.dll

14:42:35.0073 3380 C:\Windows\System32\uDWM.dll - ok

14:42:35.0073 3380 [ E5A4A1326A02F8E7B59E6C3270CE7202 ] C:\Windows\SysWOW64\wkscli.dll

14:42:35.0073 3380 C:\Windows\SysWOW64\wkscli.dll - ok

14:42:35.0089 3380 [ 352B3DC62A0D259A82A052238425C872 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll

14:42:35.0089 3380 C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll - ok

14:42:35.0104 3380 [ B2DB6ABA2E292235749B80A9C3DFA867 ] C:\Windows\SysWOW64\imagehlp.dll

14:42:35.0104 3380 C:\Windows\SysWOW64\imagehlp.dll - ok

14:42:35.0120 3380 [ 465BEA35F7ED4A4A57686DEA7EA10F47 ] C:\Windows\SysWOW64\cscapi.dll

14:42:35.0120 3380 C:\Windows\SysWOW64\cscapi.dll - ok

14:42:35.0136 3380 [ 53223B673A3FA2F9A4D1C31C8D3F6CD8 ] C:\Windows\SysWOW64\dbghelp.dll

14:42:35.0136 3380 C:\Windows\SysWOW64\dbghelp.dll - ok

14:42:35.0151 3380 [ 30B94A855F4C86212F98BB184A30CA96 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\17796f2951c17ebf92dd4b7c9b3ce556\System.ServiceProcess.ni.dll

14:42:35.0151 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\17796f2951c17ebf92dd4b7c9b3ce556\System.ServiceProcess.ni.dll - ok

14:42:35.0151 3380 [ 1C411BCB2C95350FE8DE12F5798C8EEF ] C:\Program Files (x86)\DDNi\Oasis2Service\AspX2.dll

14:42:35.0151 3380 C:\Program Files (x86)\DDNi\Oasis2Service\AspX2.dll - ok

14:42:35.0167 3380 [ 0EE88C0E26E97425D4738732388F0EEB ] C:\Program Files (x86)\DDNi\Oasis2Service\DdniCore.dll

14:42:35.0167 3380 C:\Program Files (x86)\DDNi\Oasis2Service\DdniCore.dll - ok

14:42:35.0182 3380 [ 2A72853494912BB034AF7AC1C86EC04E ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\4e80768a2d88c7a333e43cbb7a6c0705\System.Drawing.ni.dll

14:42:35.0182 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\4e80768a2d88c7a333e43cbb7a6c0705\System.Drawing.ni.dll - ok

14:42:35.0198 3380 [ 68769C3356B3BE5D1C732C97B9A80D6E ] C:\Windows\System32\drivers\PEAuth.sys

14:42:35.0198 3380 C:\Windows\System32\drivers\PEAuth.sys - ok

14:42:35.0214 3380 [ 3AEAA8B561E63452C655DC0584922257 ] C:\Windows\System32\pcasvc.dll

14:42:35.0214 3380 C:\Windows\System32\pcasvc.dll - ok

14:42:35.0214 3380 [ 1727B2A2F379A32B864C096FA794AADC ] C:\Windows\System32\aepic.dll

14:42:35.0214 3380 C:\Windows\System32\aepic.dll - ok

14:42:35.0229 3380 [ 627FA58ADC043704F9D14CA44340956F ] C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

14:42:35.0229 3380 C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe - ok

14:42:35.0245 3380 [ C6DCD1D11ED6827F05C00773C3E7053C ] C:\Windows\System32\sfc.dll

14:42:35.0245 3380 C:\Windows\System32\sfc.dll - ok

14:42:35.0260 3380 [ 895C9AB0A855547445C4181195230757 ] C:\Windows\System32\sfc_os.dll

14:42:35.0260 3380 C:\Windows\System32\sfc_os.dll - ok

14:42:35.0276 3380 [ 58A14C45A5CD2528F10A889E7B0C3FC2 ] C:\Windows\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b\ATL90.dll

14:42:35.0276 3380 C:\Windows\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b\ATL90.dll - ok

14:42:35.0292 3380 [ 4C39358EBDD2FFCD9132A30E1EC31E16 ] C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcp90.dll

14:42:35.0292 3380 C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcp90.dll - ok

14:42:35.0307 3380 [ CDBE9690CF2B8409FACAD94FAC9479C9 ] C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll

14:42:35.0307 3380 C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll - ok

14:42:35.0307 3380 [ 210FCACAF902B2CD47CF9FD17D846146 ] C:\Windows\System32\aeevts.dll

14:42:35.0307 3380 C:\Windows\System32\aeevts.dll - ok

14:42:35.0323 3380 [ 3EA8A16169C26AFBEB544E0E48421186 ] C:\Windows\System32\drivers\secdrv.sys

14:42:35.0323 3380 C:\Windows\System32\drivers\secdrv.sys - ok

14:42:35.0338 3380 [ AC6A3801F3CDE7EB41B3F52E9B0A1C2B ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d040079bc7148afeca03c5abb6fc3c61\System.Windows.Forms.ni.dll

14:42:35.0338 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d040079bc7148afeca03c5abb6fc3c61\System.Windows.Forms.ni.dll - ok

14:42:35.0354 3380 [ E82E0ED8208A357F7D1115D09AFBC0A0 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\239d84cfdb9de9730c1efb43840ef2eb\System.Core.ni.dll

14:42:35.0354 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\239d84cfdb9de9730c1efb43840ef2eb\System.Core.ni.dll - ok

14:42:35.0370 3380 [ 40B28FBD1E4DEF0910E2AC3EAE4D43CF ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\66694f9192bd0dddc2eaf90fbcbcd555\System.Management.ni.dll

14:42:35.0370 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\66694f9192bd0dddc2eaf90fbcbcd555\System.Management.ni.dll - ok

14:42:35.0385 3380 [ 933EE4BE879279DE72EBDED662F03C68 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\d8e39b3f96f52e48499e35d9977e62dc\System.Data.Linq.ni.dll

14:42:35.0385 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\d8e39b3f96f52e48499e35d9977e62dc\System.Data.Linq.ni.dll - ok

14:42:35.0401 3380 [ 7717F84F483002815490033BF069DABD ] C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\GdiPlus.dll

14:42:35.0401 3380 C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\GdiPlus.dll - ok

14:42:35.0416 3380 [ 6805C8E7D610E6CE5BEBB269A8668463 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\294fc5b3a3eb726bcb35558fd1c21aad\System.DirectoryServices.AccountManagement.ni.dll

14:42:35.0416 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\294fc5b3a3eb726bcb35558fd1c21aad\System.DirectoryServices.AccountManagement.ni.dll - ok

14:42:35.0432 3380 [ 43104328E99680FCF282E71CC45CB5D2 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\25e672ea505e50ab058258ac72a54f02\System.Xml.ni.dll

14:42:35.0432 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\25e672ea505e50ab058258ac72a54f02\System.Xml.ni.dll - ok

14:42:35.0432 3380 [ A63445AE437CDFE13570B8AEAE3514C3 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\3d4e9d4f6c945d6d3b7d423fdb6bd274\System.Data.ni.dll

14:42:35.0432 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\3d4e9d4f6c945d6d3b7d423fdb6bd274\System.Data.ni.dll - ok

14:42:35.0463 3380 [ 35CAB7CF3754C41AEB69DCE1D5ACA5A4 ] C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll

14:42:35.0463 3380 C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll - ok

14:42:35.0479 3380 [ 7221E380FB8BFCF0160B9D4E704E7E77 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c64ca3678261c8ffcd9e7efd1af6ed54\System.Configuration.ni.dll

14:42:35.0479 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c64ca3678261c8ffcd9e7efd1af6ed54\System.Configuration.ni.dll - ok

14:42:35.0479 3380 [ 85816EAB04B6AE8EB154C962E32D5AC8 ] C:\Windows\assembly\GAC_MSIL\System.Data.SqlServerCe\3.5.1.0__89845dcd8080cc91\System.Data.SqlServerCe.dll

14:42:35.0479 3380 C:\Windows\assembly\GAC_MSIL\System.Data.SqlServerCe\3.5.1.0__89845dcd8080cc91\System.Data.SqlServerCe.dll - ok

14:42:35.0494 3380 [ 6E9E439517D89EDC9A6CB1E94489620A ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll

14:42:35.0494 3380 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll - ok

14:42:35.0510 3380 [ 102CF6879887BBE846A00C459E6D4ABC ] C:\Windows\SysWOW64\riched20.dll

14:42:35.0510 3380 C:\Windows\SysWOW64\riched20.dll - ok

14:42:35.0526 3380 [ 591FE0A6CEB19BF886CEB1331F591940 ] C:\Windows\SysWOW64\ncrypt.dll

14:42:35.0526 3380 C:\Windows\SysWOW64\ncrypt.dll - ok

14:42:35.0541 3380 [ CE71B9119A258EDD0A05B37D7B0F92E3 ] C:\Windows\SysWOW64\bcrypt.dll

14:42:35.0541 3380 C:\Windows\SysWOW64\bcrypt.dll - ok

14:42:35.0557 3380 [ E8449FE262D7406BCB2AC2A45C53EC5F ] C:\Windows\SysWOW64\bcryptprimitives.dll

14:42:35.0557 3380 C:\Windows\SysWOW64\bcryptprimitives.dll - ok

14:42:35.0557 3380 [ 1097F3035BAF46CED8B332B3564C5108 ] C:\Windows\SysWOW64\gpapi.dll

14:42:35.0557 3380 C:\Windows\SysWOW64\gpapi.dll - ok

14:42:35.0572 3380 [ CA79539D3D4C0BA66F0F051A5EE5E923 ] C:\Windows\SysWOW64\cryptnet.dll

14:42:35.0572 3380 C:\Windows\SysWOW64\cryptnet.dll - ok

14:42:35.0588 3380 [ AE5A69F44C1F97EDC83237FC0B29B6FB ] C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler.exe

14:42:35.0588 3380 C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler.exe - ok

14:42:35.0604 3380 [ 863F793D15B4026B1A5FDECA873D4D84 ] C:\Windows\SysWOW64\apphelp.dll

14:42:35.0604 3380 C:\Windows\SysWOW64\apphelp.dll - ok

14:42:35.0619 3380 [ 41938F2C1642459CBBA691B5DBD6395A ] C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler64.exe

14:42:35.0619 3380 C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler64.exe - ok

14:42:35.0635 3380 [ C5A99A4C0DC9F0F5A95BA0C83D30A549 ] C:\Windows\SysWOW64\mstask.dll

14:42:35.0635 3380 C:\Windows\SysWOW64\mstask.dll - ok

14:42:35.0635 3380 [ A7A8CA53D9C9FD90C07AB0EB38E5316B ] C:\Windows\System32\dbghelp.dll

14:42:35.0635 3380 C:\Windows\System32\dbghelp.dll - ok

14:42:35.0650 3380 [ C6CC9297BD53E5229653303E556AA539 ] C:\Windows\System32\drivers\Sftfslh.sys

14:42:35.0650 3380 C:\Windows\System32\drivers\Sftfslh.sys - ok

14:42:35.0666 3380 [ C3CDDD18F43D44AB713CF8C4916F7696 ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

14:42:35.0666 3380 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe - ok

14:42:35.0682 3380 [ 390AA7BC52CEE43F6790CDEA1E776703 ] C:\Windows\System32\drivers\Sftplaylh.sys

14:42:35.0682 3380 C:\Windows\System32\drivers\Sftplaylh.sys - ok

14:42:35.0697 3380 [ F93674263F6B07C77956E966953242D9 ] C:\Windows\SysWOW64\secur32.dll

14:42:35.0697 3380 C:\Windows\SysWOW64\secur32.dll - ok

14:42:35.0713 3380 [ 6F8E3B7B70E1BBA871212940C1FBDF60 ] C:\Windows\SysWOW64\SensApi.dll

14:42:35.0713 3380 C:\Windows\SysWOW64\SensApi.dll - ok

14:42:35.0728 3380 [ 4B0E67DA04B775457BCF7947622AFFB4 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\4d7a457d9f9adcce4d201119b5179c29\System.Transactions.ni.dll

14:42:35.0728 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\4d7a457d9f9adcce4d201119b5179c29\System.Transactions.ni.dll - ok

14:42:35.0744 3380 [ 4E5FE39C1076D115EC8BFCFE14D75B80 ] C:\Windows\SysWOW64\credssp.dll

14:42:35.0744 3380 C:\Windows\SysWOW64\credssp.dll - ok

14:42:35.0744 3380 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] C:\Windows\System32\sysmain.dll

14:42:35.0744 3380 C:\Windows\System32\sysmain.dll - ok

14:42:35.0760 3380 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] C:\Windows\System32\wiaservc.dll

14:42:35.0760 3380 C:\Windows\System32\wiaservc.dll - ok

14:42:35.0775 3380 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] C:\Windows\System32\drivers\tcpipreg.sys

14:42:35.0775 3380 C:\Windows\System32\drivers\tcpipreg.sys - ok

14:42:35.0791 3380 [ 0364256B4A2A93A8C8CDA6B3B5A0EFF5 ] C:\Windows\System32\wiatrace.dll

14:42:35.0791 3380 C:\Windows\System32\wiatrace.dll - ok

14:42:35.0806 3380 [ 5FEAB868CAEDBBD1B7A145CA8261E4AA ] C:\Windows\SysWOW64\WerFault.exe

14:42:35.0806 3380 C:\Windows\SysWOW64\WerFault.exe - ok

14:42:35.0822 3380 [ 590D5C506044FE02FF7643E32FF9BDAC ] C:\Windows\SysWOW64\wer.dll

14:42:35.0822 3380 C:\Windows\SysWOW64\wer.dll - ok

14:42:35.0822 3380 [ 1E8D06AAE74FED674C1156B3FEA911C2 ] C:\Windows\SysWOW64\Faultrep.dll

14:42:35.0822 3380 C:\Windows\SysWOW64\Faultrep.dll - ok

14:42:35.0838 3380 [ 218F78B39832A2A0761CE2422828A57C ] C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe

14:42:35.0838 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe - ok

14:42:35.0853 3380 [ 7E7AFD841694F6AC397E99D75CEAD49D ] C:\Windows\System32\trkwks.dll

14:42:35.0853 3380 C:\Windows\System32\trkwks.dll - ok

14:42:35.0869 3380 [ B98E7280C33E29788879C6E0E563CE88 ] C:\Program Files (x86)\Common Files\Sony Shared\Sony Utilities\SnyUtils.dll

14:42:35.0869 3380 C:\Program Files (x86)\Common Files\Sony Shared\Sony Utilities\SnyUtils.dll - ok

14:42:35.0884 3380 [ D9A9702E43A5859896F34898D5FD3FEC ] C:\Windows\SysWOW64\msxml6.dll

14:42:35.0884 3380 C:\Windows\SysWOW64\msxml6.dll - ok

14:42:35.0900 3380 [ 10E212BFB7EAB152A64C1AAEC2F7F4E0 ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe

14:42:35.0900 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe - ok

14:42:35.0916 3380 [ 487F44B08EFEAF5AD087878357B9403D ] C:\Windows\SysWOW64\pdh.dll

14:42:35.0916 3380 C:\Windows\SysWOW64\pdh.dll - ok

14:42:35.0916 3380 [ D5E459BED3DB9CF7FC6CC1455F177D2D ] C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.dll

14:42:35.0916 3380 C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d1cb102c435421de\ATL80.dll - ok

14:42:35.0931 3380 [ 08DFDBD2FD4EA951DC46B1C7661ED35A ] C:\Windows\SysWOW64\powrprof.dll

14:42:35.0931 3380 C:\Windows\SysWOW64\powrprof.dll - ok

14:42:35.0947 3380 [ CA9F7888B524D8100B977C81F44C3234 ] C:\Windows\SysWOW64\winhttp.dll

14:42:35.0947 3380 C:\Windows\SysWOW64\winhttp.dll - ok

14:42:35.0962 3380 [ FB19FC5951A88F3C523E35C2C98D23C0 ] C:\Windows\SysWOW64\webio.dll

14:42:35.0962 3380 C:\Windows\SysWOW64\webio.dll - ok

14:42:35.0978 3380 [ F1278B3514EA6FA9BC39B20D26139AAC ] C:\Windows\SysWOW64\msiltcfg.dll

14:42:35.0978 3380 C:\Windows\SysWOW64\msiltcfg.dll - ok

14:42:35.0978 3380 [ 7A88CFD3FE99F2C9B95A6E2A08B96E14 ] C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe

14:42:35.0978 3380 C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe - ok

14:42:35.0994 3380 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

14:42:35.0994 3380 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE - ok

14:42:36.0009 3380 [ 19B07E7E8915D701225DA41CB3877306 ] C:\Windows\System32\wbem\WMIsvc.dll

14:42:36.0009 3380 C:\Windows\System32\wbem\WMIsvc.dll - ok

14:42:36.0025 3380 [ 919001D2BB17DF06CA3F8AC16AD039F6 ] C:\Windows\SysWOW64\sxs.dll

14:42:36.0025 3380 C:\Windows\SysWOW64\sxs.dll - ok

14:42:36.0040 3380 [ 7D85B3B4212D0CCF4169F0EC9B0FF8F8 ] C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll

14:42:36.0040 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll - ok

14:42:36.0056 3380 [ FE560A13612E8AFBF1C5655161035D16 ] C:\Program Files (x86)\Sony\VAIO Event Service\VESStorageProtect.dll

14:42:36.0056 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESStorageProtect.dll - ok

14:42:36.0056 3380 [ A9FDCDC18B3002CDD7CEBD8E6CDCE14E ] C:\Program Files (x86)\Sony\VAIO Event Service\VESSuEvent.dll

14:42:36.0056 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESSuEvent.dll - ok

14:42:36.0072 3380 [ 7DB5AA22A8A8E5C2D335F44853C1F6DE ] C:\Windows\System32\wbemcomn.dll

14:42:36.0072 3380 C:\Windows\System32\wbemcomn.dll - ok

14:42:36.0087 3380 [ 32E26AACB3F286CE91B7DC3CCBB11A9B ] C:\Program Files (x86)\Sony\VAIO Event Service\VESUSBKeyboard.dll

14:42:36.0087 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESUSBKeyboard.dll - ok

14:42:36.0103 3380 [ 0C52762C606BCF6A377D5E4688191A6B ] C:\Windows\System32\wbem\WmiDcPrv.dll

14:42:36.0103 3380 C:\Windows\System32\wbem\WmiDcPrv.dll - ok

14:42:36.0118 3380 [ 63DF770DF74ACB370EF5A16727069AAF ] C:\Windows\SysWOW64\hid.dll

14:42:36.0118 3380 C:\Windows\SysWOW64\hid.dll - ok

14:42:36.0134 3380 [ CF0A0D826216E369A99ED6AB605F0905 ] C:\Program Files (x86)\Sony\VAIO Event Service\VESWndMsg.dll

14:42:36.0134 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESWndMsg.dll - ok

14:42:36.0134 3380 [ C0218A2DFD858FBFE192AAF8F96ED201 ] C:\Program Files (x86)\Common Files\Sony Shared\Sony Utilities\SonyInfo.dll

14:42:36.0134 3380 C:\Program Files (x86)\Common Files\Sony Shared\Sony Utilities\SonyInfo.dll - ok

14:42:36.0150 3380 [ A90CEB8B7C5221085F3527BB679D2958 ] C:\Program Files (x86)\Sony\VAIO Event Service\VESTransform.dll

14:42:36.0150 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESTransform.dll - ok

14:42:36.0165 3380 [ 5EB55F661DEBF156E126160BCD4D89F8 ] C:\Windows\System32\wbem\wbemcore.dll

14:42:36.0165 3380 C:\Windows\System32\wbem\wbemcore.dll - ok

[Woke20]

14:42:36.0181 3380 [ 8E8C92DD50F6B34907813AFDC0C8F7DD ] C:\Windows\SysWOW64\dbgeng.dll

14:42:36.0181 3380 C:\Windows\SysWOW64\dbgeng.dll - ok

14:42:36.0196 3380 [ 5F3F1BF5F5B43293953FC915845910C4 ] C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll

14:42:36.0196 3380 C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll - ok

14:42:36.0212 3380 [ 0255C22D99602534F15CBB8D9B6F152F ] C:\Windows\System32\wbem\WinMgmtR.dll

14:42:36.0212 3380 C:\Windows\System32\wbem\WinMgmtR.dll - ok

14:42:36.0228 3380 [ 93812FDC01AA864195816CD814445F95 ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\SQMAPI.DLL

14:42:36.0228 3380 C:\Program Files\Common Files\Microsoft Shared\Windows Live\SQMAPI.DLL - ok

14:42:36.0243 3380 [ B837D1528CE2E3CB79F09496BC08DDC6 ] C:\Windows\System32\SensApi.dll

14:42:36.0243 3380 C:\Windows\System32\SensApi.dll - ok

14:42:36.0243 3380 [ 9689A9C7F7C2A1A423CDA2C3B43FFF65 ] C:\Windows\System32\wer.dll

14:42:36.0243 3380 C:\Windows\System32\wer.dll - ok

14:42:36.0259 3380 [ 13693B6354DD6E72DC5131DA7D764B90 ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

14:42:36.0259 3380 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe - ok

14:42:36.0274 3380 [ 63DCDFFCBB7E41540F4D64CCED66536B ] C:\ProgramData\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

14:42:36.0274 3380 C:\ProgramData\Microsoft\IdentityCRL\production\ppcrlconfig600.dll - ok

14:42:36.0290 3380 [ 6177E1A8F215576A56D437B48A00848B ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftsync.dll

14:42:36.0290 3380 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftsync.dll - ok

14:42:36.0306 3380 [ 8784236EED5079493DA9FC95B28B89F8 ] C:\Windows\System32\WerFault.exe

14:42:36.0306 3380 C:\Windows\System32\WerFault.exe - ok

14:42:36.0321 3380 [ 1CA85AF7046127CAC598070553388F88 ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzQueueContents.dll

14:42:36.0321 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzQueueContents.dll - ok

14:42:36.0321 3380 [ 6B2D2CB15FFEA44A6BDDDFCA8F6DBFD7 ] C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSQueueCommunication.dll

14:42:36.0321 3380 C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSQueueCommunication.dll - ok

14:42:36.0337 3380 [ 0EBBA18B5870B957318458172502ED47 ] C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSEngineMMD.dll

14:42:36.0337 3380 C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSEngineMMD.dll - ok

14:42:36.0352 3380 [ F4898E97A52BD3DE4CDE8FF13A5BA7BA ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineThumbnail.dll

14:42:36.0352 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineThumbnail.dll - ok

14:42:36.0368 3380 [ CABA64E4FCECAC3D023F19840244B61B ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineAVMarker.dll

14:42:36.0368 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineAVMarker.dll - ok

14:42:36.0384 3380 [ 7C9B8932B9902C6FCE8E7333E7F9B01F ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\MpegSysDec.dll

14:42:36.0384 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\MpegSysDec.dll - ok

14:42:36.0399 3380 [ 07161AA10B8F247E08CA7C5810F789A6 ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\sonymad2.dll

14:42:36.0399 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\sonymad2.dll - ok

14:42:36.0415 3380 [ E427A71955C02BF4E5D162C3A948309A ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineIrfTopic.dll

14:42:36.0415 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineIrfTopic.dll - ok

14:42:36.0430 3380 [ C4E3CFE572B0CD7D51852FDC25B2A223 ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\IrfLib.dll

14:42:36.0430 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\IrfLib.dll - ok

14:42:36.0446 3380 [ 9ECD9C809C5C7F1F428DD755EEF9BBE8 ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\smvd2.dll

14:42:36.0446 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\smvd2.dll - ok

14:42:36.0462 3380 [ 86F1895AE8C5E8B17D99ECE768A70732 ] C:\Windows\SysWOW64\msvcr71.dll

14:42:36.0462 3380 C:\Windows\SysWOW64\msvcr71.dll - ok

14:42:36.0477 3380 [ 7EBAC958C570174CE4E23860B77BF66D ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineMMLib.dll

14:42:36.0477 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineMMLib.dll - ok

14:42:36.0477 3380 [ C4CE3410C807C16F8B14081B9F00045D ] C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe

14:42:36.0477 3380 C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe - ok

14:42:36.0493 3380 [ A3F5E8EC1316C3E2562B82694A251C9E ] C:\Windows\System32\wbem\fastprox.dll

14:42:36.0493 3380 C:\Windows\System32\wbem\fastprox.dll - ok

14:42:36.0508 3380 [ EE26D130808D16C0E417BBBED0451B34 ] C:\Windows\System32\ntdsapi.dll

14:42:36.0508 3380 C:\Windows\System32\ntdsapi.dll - ok

14:42:36.0508 3380 [ 666A60F6F5E719856FF6254E0966EFF7 ] C:\Windows\System32\wbem\wbemprox.dll

14:42:36.0524 3380 C:\Windows\System32\wbem\wbemprox.dll - ok

14:42:36.0524 3380 [ A63DC5C2EA944E6657203E0C8EDEAF61 ] C:\Windows\SysWOW64\dllhost.exe

14:42:36.0524 3380 C:\Windows\SysWOW64\dllhost.exe - ok

14:42:36.0540 3380 [ E9ED8C16F6944E7EA80E5479B4E0277E ] C:\Program Files (x86)\Sony\VAIO Control Center\CommonSetting.dll

14:42:36.0540 3380 C:\Program Files (x86)\Sony\VAIO Control Center\CommonSetting.dll - ok

14:42:36.0555 3380 [ A79C7D92EBE49FD126DC90293C519EB8 ] C:\Program Files (x86)\Sony\VAIO Event Service\VESPerform.dll

14:42:36.0555 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESPerform.dll - ok

14:42:36.0571 3380 [ 6D719711C0CB0A41B965523A0C8E74B3 ] C:\Program Files (x86)\Sony\VAIO Event Service\VESAppMon.dll

14:42:36.0571 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESAppMon.dll - ok

14:42:36.0586 3380 [ ECBBDE246A61E84FB82751015666BA76 ] C:\Program Files (x86)\Sony\VAIO Event Service\VESCommonUI.dll

14:42:36.0586 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESCommonUI.dll - ok

14:42:36.0602 3380 [ A4DC3A29A7902DFCCADFBDE23F4F764C ] C:\Program Files (x86)\Sony\VAIO Event Service\VESRemoteKey.dll

14:42:36.0602 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESRemoteKey.dll - ok

14:42:36.0618 3380 [ 418E881201583A3039D81F43E39E6C78 ] C:\Windows\SysWOW64\winsta.dll

14:42:36.0618 3380 C:\Windows\SysWOW64\winsta.dll - ok

14:42:36.0618 3380 [ 0949E8607FEFA7739715810170025083 ] C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

14:42:36.0618 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe - ok

14:42:36.0633 3380 [ DA41DB7F5D2CD91A1E5CE55298376C00 ] C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll

14:42:36.0633 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll - ok

14:42:36.0649 3380 [ 3708EA11823C987726BD9D5750AED265 ] C:\Program Files (x86)\Sony\VAIO Event Service\VESWndMsgHook.dll

14:42:36.0649 3380 C:\Program Files (x86)\Sony\VAIO Event Service\VESWndMsgHook.dll - ok

14:42:36.0664 3380 [ 0F416E23DD2EB4DEBE70608020CFD283 ] C:\Windows\SysWOW64\WMVCORE.DLL

14:42:36.0664 3380 C:\Windows\SysWOW64\WMVCORE.DLL - ok

14:42:36.0680 3380 [ A7DD56261518373F70F23079EB3CD0A2 ] C:\Windows\SysWOW64\WMASF.DLL

14:42:36.0680 3380 C:\Windows\SysWOW64\WMASF.DLL - ok

14:42:36.0696 3380 [ 1CC1609F08A1CFF51259CDFFF961ABC1 ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEnginePhotoAlt.dll

14:42:36.0696 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEnginePhotoAlt.dll - ok

14:42:36.0711 3380 [ F3C8D3F21A12CD9D6943095E18C1AEC5 ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineSFace.dll

14:42:36.0711 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineSFace.dll - ok

14:42:36.0711 3380 [ 087D8668C71634A3A3761135ABF16EEE ] C:\Windows\System32\wbem\esscli.dll

14:42:36.0711 3380 C:\Windows\System32\wbem\esscli.dll - ok

14:42:36.0727 3380 [ E51C32F04DAE2B623C0740D6CBE45E0F ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEnginePMD.dll

14:42:36.0727 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEnginePMD.dll - ok

14:42:36.0742 3380 [ 718B6F51AB7F6FE2988A36868F9AD3AB ] C:\Windows\System32\wbem\wbemsvc.dll

14:42:36.0742 3380 C:\Windows\System32\wbem\wbemsvc.dll - ok

14:42:36.0758 3380 [ 0143DB80DACFB7C2B5B7009ED9063353 ] C:\Windows\System32\wbem\wmiutils.dll

14:42:36.0758 3380 C:\Windows\System32\wbem\wmiutils.dll - ok

14:42:36.0774 3380 [ 776AE0564F8B1C282E331FD95A1BDC5F ] C:\Windows\SysWOW64\wbem\wbemsvc.dll

14:42:36.0774 3380 C:\Windows\SysWOW64\wbem\wbemsvc.dll - ok

14:42:36.0774 3380 [ 0AB34456654C283DAA13B8D2BA21439B ] C:\Windows\System32\wbem\repdrvfs.dll

14:42:36.0774 3380 C:\Windows\System32\wbem\repdrvfs.dll - ok

14:42:36.0789 3380 [ 49601173F0F4AF5DE34B677118C87825 ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineVideoProp.dll

14:42:36.0789 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineVideoProp.dll - ok

14:42:36.0805 3380 [ E3E811471DE781900FF21C1FD84E941E ] C:\Windows\SysWOW64\ntdsapi.dll

14:42:36.0805 3380 C:\Windows\SysWOW64\ntdsapi.dll - ok

14:42:36.0820 3380 [ CFC7D8289D2B5F3CF8D16E2DB7F93D4A ] C:\Windows\SysWOW64\wbem\fastprox.dll

14:42:36.0820 3380 C:\Windows\SysWOW64\wbem\fastprox.dll - ok

14:42:36.0836 3380 [ 492015AE9756E6EFFE2AB3A16157CBEF ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineMMD.dll

14:42:36.0836 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineMMD.dll - ok

14:42:36.0852 3380 [ 411CFB2A801E036C0B1C0FB4FC744941 ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineVMLib2.dll

14:42:36.0852 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineVMLib2.dll - ok

14:42:36.0867 3380 [ 92C6011B78C6CF58C769DFB57AB9DC0E ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineGPS.dll

14:42:36.0867 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineGPS.dll - ok

14:42:36.0883 3380 [ A36DC6CD7179E93C35F61BC3DFC59E9B ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineEpg.dll

14:42:36.0883 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineEpg.dll - ok

14:42:36.0898 3380 [ 8C4621B2AEFDBFD91C163D356BA60746 ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineCM.dll

14:42:36.0898 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineCM.dll - ok

14:42:36.0898 3380 [ 14C4DD92CAD39AF83A934CEF710B8A9B ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineHarp.dll

14:42:36.0898 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzEngineHarp.dll - ok

14:42:36.0914 3380 [ 9997F0746F2DD3C4E04E84F3F14B1F01 ] C:\Program Files\Sony\VCM Intelligent Analyzing Manager\harp.dll

14:42:36.0914 3380 C:\Program Files\Sony\VCM Intelligent Analyzing Manager\harp.dll - ok

14:42:36.0930 3380 [ 0B2D65FDDE31069299AA6330F359FF9C ] C:\Windows\System32\msxml3.dll

14:42:36.0930 3380 C:\Windows\System32\msxml3.dll - ok

14:42:36.0945 3380 [ 1AC99F626C7B67616123887EABA4780C ] C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceme35.dll

14:42:36.0945 3380 C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceme35.dll - ok

14:42:36.0961 3380 [ 88E69D845B1513634AF2FD0E725F9A29 ] C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceer35EN.dll

14:42:36.0961 3380 C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceer35EN.dll - ok

14:42:36.0976 3380 [ 70A176BF2ED362862944C371838262F8 ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

14:42:36.0976 3380 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE - ok

14:42:36.0992 3380 [ 295E1F2BC1AFDAFD98FF426BCE524BA9 ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftuser.dll

14:42:36.0992 3380 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftuser.dll - ok

14:42:37.0008 3380 [ B9A8CBCFCD3EC9D2EA4740AF347BF108 ] C:\Windows\SysWOW64\mpr.dll

14:42:37.0008 3380 C:\Windows\SysWOW64\mpr.dll - ok

14:42:37.0008 3380 [ CFC594A66C3151F9963D59A24CC5EC54 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\fecb0ca59057e9d190318551d40feb22\System.Runtime.Serialization.ni.dll

14:42:37.0008 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\fecb0ca59057e9d190318551d40feb22\System.Runtime.Serialization.ni.dll - ok

14:42:37.0023 3380 [ ACA895515E918C677DB96176B1A2B5BD ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\526e535175775d4c3880f59d6a1463b7\System.Xml.Linq.ni.dll

14:42:37.0023 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\526e535175775d4c3880f59d6a1463b7\System.Xml.Linq.ni.dll - ok

14:42:37.0039 3380 [ 1F04E809409A9B5FFD510B5FD89A1155 ] C:\Windows\System32\d2d1.dll

14:42:37.0039 3380 C:\Windows\System32\d2d1.dll - ok

14:42:37.0054 3380 [ 7426279D625196393EABBEFE1C60A0C2 ] C:\Windows\System32\DWrite.dll

14:42:37.0054 3380 C:\Windows\System32\DWrite.dll - ok

14:42:37.0070 3380 [ 035959D3C1605D6DB6042D4B0190B766 ] C:\Program Files\Sony\VAIO Gate\NotificationWrapper.dll

14:42:37.0070 3380 C:\Program Files\Sony\VAIO Gate\NotificationWrapper.dll - ok

14:42:37.0070 3380 [ 241AF87821FDA0F5792037B779F49BE0 ] C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\msvcp90.dll

14:42:37.0070 3380 C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\msvcp90.dll - ok

14:42:37.0086 3380 [ E424B3EF666B184CEE0B6871AAA8C9F6 ] C:\Windows\System32\msimg32.dll

14:42:37.0086 3380 C:\Windows\System32\msimg32.dll - ok

14:42:37.0101 3380 [ 263E9A047D17CD50BAA9D3C02910D18D ] C:\Windows\System32\oledlg.dll

14:42:37.0101 3380 C:\Windows\System32\oledlg.dll - ok

14:42:37.0117 3380 [ 1DDA48E17B6CDB717F0D783D5B755141 ] C:\Program Files\Sony\VAIO Gate\MouseHook.dll

14:42:37.0117 3380 C:\Program Files\Sony\VAIO Gate\MouseHook.dll - ok

14:42:37.0132 3380 [ DB16A7C0A453F7E220A5F29E42572FD8 ] C:\Windows\AppPatch\AppPatch64\AcGenral.dll

14:42:37.0132 3380 C:\Windows\AppPatch\AppPatch64\AcGenral.dll - ok

14:42:37.0148 3380 [ 197215658B8015182192E1EBCA3BBCC3 ] C:\Windows\Temp\AskSLib.dll

14:42:37.0148 3380 C:\Windows\Temp\AskSLib.dll - ok

14:42:37.0148 3380 [ F11A57E91FDAECFB41A5CB21EB1EBC8E ] C:\Windows\System32\dssenh.dll

14:42:37.0148 3380 C:\Windows\System32\dssenh.dll - ok

14:42:37.0164 3380 [ 50BB557F6B2E73676A9C1571E9D24041 ] C:\Windows\Temp\17e9bab6-4c86-4aac-8c8e-cb7745b5b910\Update.exe

14:42:37.0164 3380 C:\Windows\Temp\17e9bab6-4c86-4aac-8c8e-cb7745b5b910\Update.exe - ok

14:42:37.0179 3380 [ 43964FA89CCF97BA6BE34D69455AC65F ] C:\Windows\SysWOW64\uxtheme.dll

14:42:37.0179 3380 C:\Windows\SysWOW64\uxtheme.dll - ok

14:42:37.0195 3380 [ 31F2ED5CEC87BAC4D3B30DAEA1AA7637 ] C:\Windows\Temp\17e9bab6-4c86-4aac-8c8e-cb7745b5b910\VAIO Messenger Setup 2.0.348.0.exe

14:42:37.0195 3380 C:\Windows\Temp\17e9bab6-4c86-4aac-8c8e-cb7745b5b910\VAIO Messenger Setup 2.0.348.0.exe - ok

14:42:37.0210 3380 [ 958582542E5827C3B1B191F1C6C123F4 ] C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlcese35.dll

14:42:37.0210 3380 C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlcese35.dll - ok

14:42:37.0226 3380 [ DDD0357A92FA843EFF8915ED17253D6C ] C:\Windows\System32\wbem\WmiPrvSD.dll

14:42:37.0226 3380 C:\Windows\System32\wbem\WmiPrvSD.dll - ok

14:42:37.0242 3380 [ 7BE06E20C8740D6D56B20ED14C2C8A7C ] C:\Windows\Temp\1c796ec8-c105-49ad-ac11-62444a8bf438\update.exe

14:42:37.0242 3380 C:\Windows\Temp\1c796ec8-c105-49ad-ac11-62444a8bf438\update.exe - ok

14:42:37.0242 3380 [ A733CC986EB51F8FBF598B981DC19FBA ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftcore.dll

14:42:37.0242 3380 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftcore.dll - ok

14:42:37.0257 3380 [ D41FEBD098234F02485A4EA98D4730A4 ] C:\Windows\System32\ncobjapi.dll

14:42:37.0257 3380 C:\Windows\System32\ncobjapi.dll - ok

14:42:37.0273 3380 [ 6F40D6FB05E0C1E5402812B426971AF0 ] C:\Windows\System32\wbem\wbemess.dll

14:42:37.0273 3380 C:\Windows\System32\wbem\wbemess.dll - ok

14:42:37.0288 3380 [ 4CA271FECC6BD90D85655218B6322B63 ] C:\Windows\Temp\a0f751fb-10c2-4b87-8594-7d77422ec057\Update.exe

14:42:37.0288 3380 C:\Windows\Temp\a0f751fb-10c2-4b87-8594-7d77422ec057\Update.exe - ok

14:42:37.0304 3380 [ 2B624A2487A75095314936C57E0B94C3 ] C:\Windows\Temp\a0f751fb-10c2-4b87-8594-7d77422ec057\VAIO Messenger Setup 2.0.493.0.exe

14:42:37.0304 3380 C:\Windows\Temp\a0f751fb-10c2-4b87-8594-7d77422ec057\VAIO Messenger Setup 2.0.493.0.exe - ok

14:42:37.0320 3380 [ 7BE06E20C8740D6D56B20ED14C2C8A7C ] C:\Windows\Temp\b3ee3caf-0236-4de3-9d87-1b5b4e7db976\update.exe

14:42:37.0320 3380 C:\Windows\Temp\b3ee3caf-0236-4de3-9d87-1b5b4e7db976\update.exe - ok

14:42:37.0320 3380 [ 9F20691FB865F06A8FC50BA052B3BFD9 ] C:\Windows\Temp\b3ee3caf-0236-4de3-9d87-1b5b4e7db976\VAIO Messenger Setup 2.0.291.0.exe

14:42:37.0320 3380 C:\Windows\Temp\b3ee3caf-0236-4de3-9d87-1b5b4e7db976\VAIO Messenger Setup 2.0.291.0.exe - ok

14:42:37.0335 3380 [ 50BB557F6B2E73676A9C1571E9D24041 ] C:\Windows\Temp\e51761b5-d0d5-48fa-9e4d-835e4fa86dcb\Update.exe

14:42:37.0335 3380 C:\Windows\Temp\e51761b5-d0d5-48fa-9e4d-835e4fa86dcb\Update.exe - ok

14:42:37.0351 3380 [ 4B333EB90CCF7695BBE0AA9FCF0B1248 ] C:\Windows\Temp\e51761b5-d0d5-48fa-9e4d-835e4fa86dcb\VAIO Messenger Setup 2.0.424.0.exe

14:42:37.0351 3380 C:\Windows\Temp\e51761b5-d0d5-48fa-9e4d-835e4fa86dcb\VAIO Messenger Setup 2.0.424.0.exe - ok

14:42:37.0366 3380 [ 521202AA6F2B74FCCC6BC7E162109D71 ] C:\Windows\System32\wbem\unsecapp.exe

14:42:37.0366 3380 C:\Windows\System32\wbem\unsecapp.exe - ok

14:42:37.0382 3380 [ 36CCD0CFE3FC326260BAA7425BDE5C9A ] C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceqp35.dll

14:42:37.0382 3380 C:\Program Files (x86)\Microsoft SQL Server Compact Edition\v3.5\sqlceqp35.dll - ok

14:42:37.0398 3380 [ 619A67C9F617B7E69315BB28ECD5E1DF ] C:\Windows\System32\wbem\WmiPrvSE.exe

14:42:37.0398 3380 C:\Windows\System32\wbem\WmiPrvSE.exe - ok

14:42:37.0413 3380 [ 220159496484D34009DE71CA1A68E0D4 ] C:\Windows\System32\wbem\NCProv.dll

14:42:37.0413 3380 C:\Windows\System32\wbem\NCProv.dll - ok

14:42:37.0413 3380 [ 6607C2182C6A53ED983813AFE2F85768 ] C:\Windows\System32\wbem\cimwin32.dll

14:42:37.0413 3380 C:\Windows\System32\wbem\cimwin32.dll - ok

14:42:37.0429 3380 [ 1484B9EBF567346582DE571B0E164AE0 ] C:\Windows\System32\framedynos.dll

14:42:37.0429 3380 C:\Windows\System32\framedynos.dll - ok

14:42:37.0444 3380 [ 32BFCF1CA719F2A3A31C721BD5F90303 ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftpsr.dll

14:42:37.0444 3380 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftpsr.dll - ok

14:42:37.0460 3380 [ 40EE4E67311F4019CCA2120D88C60576 ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftfsi_wow64.dll

14:42:37.0460 3380 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftfsi_wow64.dll - ok

14:42:37.0476 3380 [ 09AB81CEE443569D9A3CC151DDF70444 ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftcomp.dll

14:42:37.0476 3380 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftcomp.dll - ok

14:42:37.0491 3380 [ 8EA53101FF2B15BDFF934B62A8FB326D ] C:\Windows\SysWOW64\logoncli.dll

14:42:37.0491 3380 C:\Windows\SysWOW64\logoncli.dll - ok

14:42:37.0507 3380 [ 1EBE9524683C7C4EED8B8BC93FB6FBCC ] C:\Windows\SysWOW64\fltLib.dll

14:42:37.0507 3380 C:\Windows\SysWOW64\fltLib.dll - ok

14:42:37.0507 3380 [ 617E29A0B0A2807466560D4C4E338D3E ] C:\Windows\System32\drivers\Sftredirlh.sys

14:42:37.0522 3380 C:\Windows\System32\drivers\Sftredirlh.sys - ok

14:42:37.0522 3380 [ 622003018EE60AA8A1C662CEBD653624 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\a30d7e65103254213dc62f238be50f97\System.EnterpriseServices.ni.dll

14:42:37.0522 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\a30d7e65103254213dc62f238be50f97\System.EnterpriseServices.ni.dll - ok

14:42:37.0538 3380 [ C00DB14550E4BD49737F311C644E45FF ] C:\Windows\System32\wmi.dll

14:42:37.0538 3380 C:\Windows\System32\wmi.dll - ok

14:42:37.0554 3380 [ 3D3CBD1847F980FB03343A63671E7886 ] C:\Windows\SysWOW64\schannel.dll

14:42:37.0554 3380 C:\Windows\SysWOW64\schannel.dll - ok

14:42:37.0569 3380 [ 93A7333704A86C0A761751FD477952A3 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\861f9a52eb8a04cf23742abe07b37c26\System.DirectoryServices.ni.dll

14:42:37.0569 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\861f9a52eb8a04cf23742abe07b37c26\System.DirectoryServices.ni.dll - ok

14:42:37.0569 3380 [ 521B748A7F9923302CA18B7E6AA2EEAE ] C:\Windows\SysWOW64\activeds.dll

14:42:37.0569 3380 C:\Windows\SysWOW64\activeds.dll - ok

14:42:37.0585 3380 [ 51F5CC1E7DA3D9C664C2D0D61F315E06 ] C:\Windows\SysWOW64\adsldpc.dll

14:42:37.0585 3380 C:\Windows\SysWOW64\adsldpc.dll - ok

14:42:37.0600 3380 [ F10E5311E5093FA3C00FF88C54C32FCA ] C:\Windows\SysWOW64\atl.dll

14:42:37.0600 3380 C:\Windows\SysWOW64\atl.dll - ok

14:42:37.0616 3380 [ B7D2873EC0487646CCDF740AF748852C ] C:\Windows\SysWOW64\adsnt.dll

14:42:37.0616 3380 C:\Windows\SysWOW64\adsnt.dll - ok

14:42:37.0632 3380 [ 72910F1DEB838E6E08A9017BFB7D4F0B ] C:\Windows\SysWOW64\browcli.dll

14:42:37.0632 3380 C:\Windows\SysWOW64\browcli.dll - ok

14:42:37.0647 3380 [ 2F040CF0613A6D64DCBBA9EE81F5A5AE ] C:\Windows\SysWOW64\dsrole.dll

14:42:37.0647 3380 C:\Windows\SysWOW64\dsrole.dll - ok

14:42:37.0647 3380 [ 68ECCA523ED760AAFC03C5D587569859 ] C:\Windows\SysWOW64\samcli.dll

14:42:37.0647 3380 C:\Windows\SysWOW64\samcli.dll - ok

14:42:37.0663 3380 [ A0617B5753E31126AD29C03154F4F329 ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll

14:42:37.0663 3380 C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll - ok

14:42:37.0678 3380 [ 97B8B25C535DE88740443D5E4BF0B409 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\3079aabe5fd4f325656d52b94b19ae2e\System.Security.ni.dll

14:42:37.0678 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\3079aabe5fd4f325656d52b94b19ae2e\System.Security.ni.dll - ok

14:42:37.0694 3380 [ 78B476DB024D3245E1E159E50DBB305F ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\413288993ff690e8251d2dbe32bee01f\System.Runtime.Remoting.ni.dll

14:42:37.0694 3380 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\413288993ff690e8251d2dbe32bee01f\System.Runtime.Remoting.ni.dll - ok

14:42:37.0710 3380 [ 12C45E3CB6D65F73209549E2D02ECA7A ] C:\Windows\SysWOW64\propsys.dll

14:42:37.0710 3380 C:\Windows\SysWOW64\propsys.dll - ok

14:42:37.0725 3380 [ 012787CEB35505EB78DF82E0A0072888 ] C:\Windows\System32\browcli.dll

14:42:37.0725 3380 C:\Windows\System32\browcli.dll - ok

14:42:37.0725 3380 [ C4BFE4B61086416B0529212F92BCE081 ] C:\Windows\System32\schedcli.dll

14:42:37.0725 3380 C:\Windows\System32\schedcli.dll - ok

14:42:37.0741 3380 [ 5D0F76BFA9E902E7E98BD71052C3D27C ] C:\Windows\SysWOW64\atipdlxx.dll

14:42:37.0741 3380 C:\Windows\SysWOW64\atipdlxx.dll - ok

14:42:37.0756 3380 [ 72794D112CBAFF3BC0C29BF7350D4741 ] C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

14:42:37.0756 3380 C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE - ok

14:42:37.0772 3380 [ C797D1677BA81306AFBB9FA8A9A8F483 ] C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSHARED.DLL

14:42:37.0772 3380 C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSHARED.DLL - ok

14:42:37.0788 3380 [ 108C2CFA5527458C096A699929ECBD80 ] C:\Windows\SysWOW64\credui.dll

14:42:37.0788 3380 C:\Windows\SysWOW64\credui.dll - ok

14:42:37.0803 3380 [ 8E01332CC4B68BC6B5B7EFFE374442AA ] C:\Windows\SysWOW64\oleacc.dll

14:42:37.0803 3380 C:\Windows\SysWOW64\oleacc.dll - ok

14:42:37.0819 3380 [ 565A30B70BE8A9B171839003F2D69683 ] C:\Windows\SysWOW64\hlink.dll

14:42:37.0819 3380 C:\Windows\SysWOW64\hlink.dll - ok

14:42:37.0834 3380 [ 74AF1FFCAFD60DA88A386AE161F56438 ] C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\en-us\CVHIntl.dll

14:42:37.0834 3380 C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\en-us\CVHIntl.dll - ok

14:42:37.0834 3380 [ B08E3476F0874DBAD672D0AC4FB2580B ] C:\Program Files (x86)\Microsoft Application Virtualization Client\sftintf.dll

14:42:37.0834 3380 C:\Program Files (x86)\Microsoft Application Virtualization Client\sftintf.dll - ok

14:42:37.0850 3380 [ 1128637CAD49A8E3C8B5FA5D0A061525 ] C:\Windows\SysWOW64\cryptdll.dll

14:42:37.0850 3380 C:\Windows\SysWOW64\cryptdll.dll - ok

14:42:37.0866 3380 [ 4C1E16B9A53102C8D6FBA587CBCB95DE ] C:\Windows\SysWOW64\msv1_0.dll

14:42:37.0866 3380 C:\Windows\SysWOW64\msv1_0.dll - ok

14:42:37.0881 3380 [ 1CDEA9188899E76D4FFD54C9D512CCDB ] C:\Windows\SysWOW64\msxml3.dll

14:42:37.0881 3380 C:\Windows\SysWOW64\msxml3.dll - ok

14:42:37.0881 3380 [ BF1FC3F79B863C914687A737C2F3D681 ] C:\Windows\System32\wdi.dll

14:42:37.0881 3380 C:\Windows\System32\wdi.dll - ok

14:42:37.0897 3380 [ E0B340996A41C9A75DFA3B99BBA9C500 ] C:\Windows\System32\SearchIndexer.exe

14:42:37.0897 3380 C:\Windows\System32\SearchIndexer.exe - ok

14:42:37.0912 3380 [ 589DF683A6C81424A6CECE52ABF98A50 ] C:\Windows\System32\tquery.dll

14:42:37.0912 3380 C:\Windows\System32\tquery.dll - ok

14:42:37.0928 3380 [ 7568CC720ACE4D03B84AF97817E745EF ] C:\Windows\System32\mssrch.dll

14:42:37.0928 3380 C:\Windows\System32\mssrch.dll - ok

14:42:37.0944 3380 [ 522B0466ED967A0762E9AF5B37D8F40A ] C:\Windows\System32\esent.dll

14:42:37.0944 3380 C:\Windows\System32\esent.dll - ok

14:42:37.0959 3380 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] C:\Windows\System32\appinfo.dll

14:42:37.0959 3380 C:\Windows\System32\appinfo.dll - ok

14:42:37.0959 3380 [ 3121A79D13A61562BE9CC902CD46B542 ] C:\Windows\System32\msidle.dll

14:42:37.0959 3380 C:\Windows\System32\msidle.dll - ok

14:42:37.0975 3380 [ 93221146D4EBBF314C29B23CD6CC391D ] C:\Windows\System32\wpdbusenum.dll

14:42:37.0975 3380 C:\Windows\System32\wpdbusenum.dll - ok

14:42:37.0990 3380 [ ACE1BB07E0377E37A2C514CD2EC119B1 ] C:\Windows\System32\mssprxy.dll

14:42:37.0990 3380 C:\Windows\System32\mssprxy.dll - ok

14:42:38.0006 3380 [ 1CBF15FDB0310345A68972EB5C5B948F ] C:\Windows\SysWOW64\mssprxy.dll

14:42:38.0006 3380 C:\Windows\SysWOW64\mssprxy.dll - ok

14:42:38.0022 3380 [ 4449D23E8F197862F1B16F1E6C89C36C ] C:\Windows\System32\diagperf.dll

14:42:38.0022 3380 C:\Windows\System32\diagperf.dll - ok

14:42:38.0037 3380 [ BF4AC709BE5BF64F331F5D67773A0C82 ] C:\Windows\System32\perftrack.dll

14:42:38.0037 3380 C:\Windows\System32\perftrack.dll - ok

14:42:38.0037 3380 [ E64D9EC8018C55873B40FDEE9DBEF5B3 ] C:\Windows\System32\PortableDeviceApi.dll

14:42:38.0037 3380 C:\Windows\System32\PortableDeviceApi.dll - ok

14:42:38.0053 3380 [ C9FB9038B15036CA28CF0B4BE2BED9BD ] C:\Windows\System32\en-US\tquery.dll.mui

14:42:38.0053 3380 C:\Windows\System32\en-US\tquery.dll.mui - ok

14:42:38.0068 3380 [ AFA79C343F9D1555F7E5D5FA70BB2A14 ] C:\Windows\System32\PortableDeviceConnectApi.dll

14:42:38.0068 3380 C:\Windows\System32\PortableDeviceConnectApi.dll - ok

14:42:38.0084 3380 [ 4B78B431F225FD8624C5655CB1DE7B61 ] C:\Windows\System32\aelupsvc.dll

14:42:38.0084 3380 C:\Windows\System32\aelupsvc.dll - ok

14:42:38.0100 3380 [ 6D137963730144698CBD10F202E9F251 ] C:\Windows\System32\wersvc.dll

14:42:38.0100 3380 C:\Windows\System32\wersvc.dll - ok

14:42:38.0100 3380 [ 025E7DBDB98866ED3CB2D4DDA70B364D ] C:\Windows\System32\runonce.exe

14:42:38.0100 3380 C:\Windows\System32\runonce.exe - ok

14:42:38.0115 3380 [ 41DF7355A5A907E2C1D7804EC028965D ] C:\Windows\System32\wermgr.exe

14:42:38.0115 3380 C:\Windows\System32\wermgr.exe - ok

14:42:38.0131 3380 [ D44741F65A1D71F65814A12CF6E2400A ] C:\Windows\SysWOW64\runonce.exe

14:42:38.0131 3380 C:\Windows\SysWOW64\runonce.exe - ok

14:42:38.0146 3380 [ E1B22739C933BE33F53DB58C5393ADD3 ] C:\Windows\System32\Apphlpdm.dll

14:42:38.0146 3380 C:\Windows\System32\Apphlpdm.dll - ok

14:42:38.0146 3380 [ 9719E3D834F5C8C43F56A93DFA497023 ] C:\Windows\System32\pnpts.dll

14:42:38.0146 3380 C:\Windows\System32\pnpts.dll - ok

14:42:38.0162 3380 [ 46863C4CC5B68EB09EA2D5EEF0F1193A ] C:\Windows\System32\radardt.dll

14:42:38.0162 3380 C:\Windows\System32\radardt.dll - ok

14:42:38.0178 3380 [ E811F8510B133E70CF6E509FB809824F ] C:\Windows\System32\wdiasqmmodule.dll

14:42:38.0178 3380 C:\Windows\System32\wdiasqmmodule.dll - ok

14:42:38.0193 3380 [ 0819EF7DB96DAB8AC3DACE567ED1B99E ] C:\Windows\System32\werui.dll

14:42:38.0193 3380 C:\Windows\System32\werui.dll - ok

14:42:38.0209 3380 [ AD7B9C14083B52BC532FBA5948342B98 ] C:\Windows\SysWOW64\cmd.exe

14:42:38.0209 3380 C:\Windows\SysWOW64\cmd.exe - ok

14:42:38.0224 3380 [ 3326166011C9BC13D6A8EFD856E9921C ] C:\Windows\System32\conhost.exe

14:42:38.0224 3380 C:\Windows\System32\conhost.exe - ok

14:42:38.0224 3380 [ 58A0CDABEA255616827B1C22C9994466 ] C:\Windows\System32\NapiNSP.dll

14:42:38.0224 3380 C:\Windows\System32\NapiNSP.dll - ok

14:42:38.0240 3380 [ 613C8CE10A5FDE582BA5FA64C4D56AAA ] C:\Windows\System32\pnrpnsp.dll

14:42:38.0240 3380 C:\Windows\System32\pnrpnsp.dll - ok

14:42:38.0256 3380 [ 748849C42DEA24C723048E24BCA1BD55 ] C:\Windows\System32\wshbth.dll

14:42:38.0256 3380 C:\Windows\System32\wshbth.dll - ok

14:42:38.0271 3380 [ 2E2072EB48238FCA8FBB7A9F5FABAC45 ] C:\Windows\System32\winrnr.dll

14:42:38.0271 3380 C:\Windows\System32\winrnr.dll - ok

14:42:38.0287 3380 [ 326C7F76A29897A892AA7726E91C1C67 ] C:\Windows\SysWOW64\winbrand.dll

14:42:38.0287 3380 C:\Windows\SysWOW64\winbrand.dll - ok

14:42:38.0287 3380 [ 5466DCAEF5A648E04D1B6580F2C901B5 ] C:\Windows\SysWOW64\ieframe.dll

14:42:38.0287 3380 C:\Windows\SysWOW64\ieframe.dll - ok

14:42:38.0302 3380 [ BE247AE996A9FDE007A27B51413A6C79 ] C:\Windows\SysWOW64\shdocvw.dll

14:42:38.0302 3380 C:\Windows\SysWOW64\shdocvw.dll - ok

14:42:38.0318 3380 [ EBC984F0CE40E0DAF0454D806EC2A7EC ] C:\Users\Ariel\AppData\Local\Temp\E2FF4A8C-175E-43E9-B275-CAE228DB5C1B.exe

14:42:38.0318 3380 C:\Users\Ariel\AppData\Local\Temp\E2FF4A8C-175E-43E9-B275-CAE228DB5C1B.exe - ok

14:42:38.0334 3380 [ 39C5F32747B3414D1BB216FDB1DEFC58 ] C:\Windows\SysWOW64\dwmapi.dll

14:42:38.0334 3380 C:\Windows\SysWOW64\dwmapi.dll - ok

14:42:38.0349 3380 [ 1DB71A41DAEE6B3F8CD0DDA8209FA2D5 ] C:\Windows\SysWOW64\WindowsCodecs.dll

14:42:38.0349 3380 C:\Windows\SysWOW64\WindowsCodecs.dll - ok

14:42:38.0365 3380 [ 846D0E4DB261CFAF363902E41498E961 ] C:\Windows\SysWOW64\EhStorShell.dll

14:42:38.0365 3380 C:\Windows\SysWOW64\EhStorShell.dll - ok

14:42:38.0365 3380 [ 03F3B770DFBED6131653CEDA8CA780F0 ] C:\Windows\SysWOW64\ntshrui.dll

14:42:38.0365 3380 C:\Windows\SysWOW64\ntshrui.dll - ok

14:42:38.0380 3380 [ 8B74CEC6980D4816B0037AE9A27E538F ] C:\Windows\SysWOW64\slc.dll

14:42:38.0380 3380 C:\Windows\SysWOW64\slc.dll - ok

14:42:38.0396 3380 [ 827CB0D6C3F8057EA037FF271F8E9795 ] C:\Windows\SysWOW64\imageres.dll

14:42:38.0396 3380 C:\Windows\SysWOW64\imageres.dll - ok

14:42:38.0396 3380 [ 40CAEEE0EAF1B8569F7C8DF6420F2CB9 ] C:\Windows\SysWOW64\sfc.dll

14:42:38.0396 3380 C:\Windows\SysWOW64\sfc.dll - ok

14:42:38.0412 3380 [ 84799328D87B3091A3BDD251E1AD31F9 ] C:\Windows\SysWOW64\sfc_os.dll

14:42:38.0412 3380 C:\Windows\SysWOW64\sfc_os.dll - ok

14:42:38.0427 3380 [ 162D247E995EAEBF3EF4289069E1111C ] C:\Windows\SysWOW64\devrtl.dll

14:42:38.0427 3380 C:\Windows\SysWOW64\devrtl.dll - ok

14:42:38.0443 3380 [ B519848DFA30AE2B306576B51321D102 ] C:\Windows\System32\ie4uinit.exe

14:42:38.0443 3380 C:\Windows\System32\ie4uinit.exe - ok

14:42:38.0458 3380 [ C3E98C42EDF7EF237A4BAB91FEAC7426 ] C:\Windows\System32\iedkcs32.dll

14:42:38.0458 3380 C:\Windows\System32\iedkcs32.dll - ok

14:42:38.0458 3380 [ FB10715E4099AF9FA389C71873245226 ] C:\Windows\System32\timedate.cpl

14:42:38.0458 3380 C:\Windows\System32\timedate.cpl - ok

14:42:38.0474 3380 [ 64ABE1250EC1A1CFD1442E7C8800216E ] C:\Windows\System32\d3d10warp.dll

14:42:38.0474 3380 C:\Windows\System32\d3d10warp.dll - ok

14:42:38.0490 3380 [ E6F0F82788E8BD0F7A616350EFA0761C ] C:\Windows\System32\actxprxy.dll

14:42:38.0490 3380 C:\Windows\System32\actxprxy.dll - ok

14:42:38.0505 3380 [ C4F40F6CACD796A8E16671D0E9A2F319 ] C:\Windows\System32\shdocvw.dll

14:42:38.0505 3380 C:\Windows\System32\shdocvw.dll - ok

14:42:38.0521 3380 [ A0A65D306A5490D2EB8E7DE66898ECFD ] C:\Windows\System32\linkinfo.dll

14:42:38.0521 3380 C:\Windows\System32\linkinfo.dll - ok

14:42:38.0536 3380 [ FA752544EE1EE59E8AD938CBB43CAC93 ] C:\PROGRA~2\WIC4A1~1\MESSEN~1\msgslang.dll

14:42:38.0536 3380 C:\PROGRA~2\WIC4A1~1\MESSEN~1\msgslang.dll - ok

14:42:38.0536 3380 [ 73E8667A19FEEDD856DF2695E9E511D4 ] C:\Windows\SysWOW64\wship6.dll

14:42:38.0536 3380 C:\Windows\SysWOW64\wship6.dll - ok

14:42:38.0552 3380 [ B40420876B9288E0A1C8CCA8A84E5DC9 ] C:\Windows\SysWOW64\dnsapi.dll

14:42:38.0552 3380 C:\Windows\SysWOW64\dnsapi.dll - ok

14:42:38.0568 3380 [ 3504B34CD2DE00BA3CC1A195F1B739BD ] C:\Windows\System32\gameux.dll

14:42:38.0568 3380 C:\Windows\System32\gameux.dll - ok

14:42:38.0583 3380 [ 9D4A1690AF93F233E15380398BEC7431 ] C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL

14:42:38.0583 3380 C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL - ok

14:42:38.0599 3380 [ 40947436A70E0034E41123DF5A0A7702 ] C:\Program Files (x86)\Bonjour\mdnsNSP.dll

14:42:38.0599 3380 C:\Program Files (x86)\Bonjour\mdnsNSP.dll - ok

14:42:38.0599 3380 [ ED6EE83D61EBC683C2CD8E899EA6FEBE ] C:\Windows\SysWOW64\rasadhlp.dll

14:42:38.0599 3380 C:\Windows\SysWOW64\rasadhlp.dll - ok

14:42:38.0614 3380 [ 1EAC1A8CA6874BF5B15E2EFB9A9A7B86 ] C:\Windows\System32\msftedit.dll

14:42:38.0614 3380 C:\Windows\System32\msftedit.dll - ok

14:42:38.0630 3380 [ 7FCAB194F01E3403C300EB034E480B36 ] C:\Windows\System32\msls31.dll

14:42:38.0630 3380 C:\Windows\System32\msls31.dll - ok

14:42:38.0646 3380 [ 7DBA84667DC18877AEF693E3543DFAD7 ] C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll

14:42:38.0646 3380 C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll - ok

14:42:38.0646 3380 [ 69754747274B76E7FAF287239333D7E6 ] C:\Windows\System32\msiltcfg.dll

14:42:38.0646 3380 C:\Windows\System32\msiltcfg.dll - ok

14:42:38.0661 3380 [ 24F4B480F335A6C724AF352253C5D98B ] C:\Windows\System32\thumbcache.dll

14:42:38.0661 3380 C:\Windows\System32\thumbcache.dll - ok

14:42:38.0677 3380 [ 405F4D32D2185F1F1BD753D8EEAFFB3A ] C:\Windows\System32\networkexplorer.dll

14:42:38.0677 3380 C:\Windows\System32\networkexplorer.dll - ok

14:42:38.0692 3380 [ 15C648298154EC4457BB72FE4C9661C4 ] C:\Program Files\Sony\VAIO Gate\TapTrigger.dll

14:42:38.0692 3380 C:\Program Files\Sony\VAIO Gate\TapTrigger.dll - ok

14:42:38.0708 3380 [ 00000000000000000000000000000000 ] C:\Windows\System32\MRT.exe

14:42:38.0708 3380 C:\Windows\System32\MRT.exe - ok

14:42:38.0724 3380 [ DD81D91FF3B0763C392422865C9AC12E ] C:\Windows\System32\rundll32.exe

14:42:38.0724 3380 C:\Windows\System32\rundll32.exe - ok

14:42:38.0724 3380 [ 4C2C4640BF23AAFCF90519E0F34436CE ] C:\Windows\System32\DeviceCenter.dll

14:42:38.0724 3380 C:\Windows\System32\DeviceCenter.dll - ok

14:42:38.0739 3380 [ 0B5511674394666E9D221F8681B2C2E6 ] C:\Windows\System32\consent.exe

14:42:38.0739 3380 C:\Windows\System32\consent.exe - ok

14:42:38.0755 3380 [ C26B09276755E0698B31CF0BAE0BF182 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

14:42:38.0755 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe - ok

14:42:38.0770 3380 [ CDB517386A26AE420CB24BDB3CD88779 ] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe

14:42:38.0770 3380 C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe - ok

14:42:38.0786 3380 [ 8DDA2B606279753601F9415DA503CA63 ] C:\Program Files (x86)\QuickTime\QTTask.exe

14:42:38.0786 3380 C:\Program Files (x86)\QuickTime\QTTask.exe - ok

14:42:38.0802 3380 [ 96C70BD48D49B87475F4572DEDC62EB9 ] C:\Windows\AppPatch\AcLayers.dll

14:42:38.0802 3380 C:\Windows\AppPatch\AcLayers.dll - ok

14:42:38.0817 3380 [ 5112FBD9885D79A9FC73BDE9B1EF9334 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon_main.dll

14:42:38.0817 3380 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon_main.dll - ok

14:42:38.0817 3380 [ E4401CF27225C1D6E664E86195978562 ] C:\Program Files (x86)\iTunes\iTunesHelper.exe

14:42:38.0817 3380 C:\Program Files (x86)\iTunes\iTunesHelper.exe - ok

14:42:38.0833 3380 [ 5046E55184021406C27E8D48A1B2C9D2 ] C:\Windows\System32\l3codeca.acm

14:42:38.0833 3380 C:\Windows\System32\l3codeca.acm - ok

14:42:38.0848 3380 [ 5C4CB4086FB83115B153E47ADD961A0C ] C:\Windows\System32\FntCache.dll

14:42:38.0848 3380 C:\Windows\System32\FntCache.dll - ok

14:42:38.0864 3380 [ F146E2BA475893DD77B2370DC1211FC6 ] C:\Windows\System32\drivers\56657018.sys

14:42:38.0864 3380 C:\Windows\System32\drivers\56657018.sys - ok

14:42:38.0880 3380 [ C85ECCBAA179719E658FFDBF99221E1E ] C:\Program Files (x86)\iTunes\iTunesHelper.dll

14:42:38.0880 3380 C:\Program Files (x86)\iTunes\iTunesHelper.dll - ok

14:42:38.0895 3380 [ 814A169C40B55178BD8E1F79D1ADA649 ] C:\Program Files (x86)\iTunes\iTunesHelper.Resources\iTunesHelper.dll

14:42:38.0895 3380 C:\Program Files (x86)\iTunes\iTunesHelper.Resources\iTunesHelper.dll - ok

14:42:38.0895 3380 [ 9DF319F1C2D4B80D8CE8214EA4899ADF ] C:\Program Files (x86)\iTunes\iTunesHelper.Resources\en.lproj\iTunesHelperLocalized.dll

14:42:38.0895 3380 C:\Program Files (x86)\iTunes\iTunesHelper.Resources\en.lproj\iTunesHelperLocalized.dll - ok

14:42:38.0911 3380 [ 56336BB69172A2CEE15B2491DB4C70C1 ] C:\Windows\System32\msfeeds.dll

14:42:38.0911 3380 C:\Windows\System32\msfeeds.dll - ok

14:42:38.0926 3380 [ 6588E68D4870219EDF169F4FCF7D004F ] C:\Program Files\Sony\VAIO Gate\VGDam.dll

14:42:38.0926 3380 C:\Program Files\Sony\VAIO Gate\VGDam.dll - ok

14:42:38.0942 3380 [ C4AF8FF242602D9B88686387A6DAED96 ] C:\Program Files (x86)\Sony\VAIO Survey\VAIO Sat Survey.exe

14:42:38.0942 3380 C:\Program Files (x86)\Sony\VAIO Survey\VAIO Sat Survey.exe - ok

14:42:38.0958 3380 [ A08C010D859F8EB42BDD7E1D55B8CA27 ] C:\Windows\System32\mscoree.dll

14:42:38.0958 3380 C:\Windows\System32\mscoree.dll - ok

14:42:38.0973 3380 [ E2A17BCC08D92F42E08AF6BA2F93ABA7 ] C:\Windows\SysWOW64\ExplorerFrame.dll

14:42:38.0973 3380 C:\Windows\SysWOW64\ExplorerFrame.dll - ok

14:42:38.0973 3380 [ C3761661C17C2248A9379A8FB89E3DE1 ] C:\Windows\System32\stobject.dll

14:42:38.0973 3380 C:\Windows\System32\stobject.dll - ok

14:42:38.0989 3380 [ F832EEEA97CDDA1AF577E721F652A0D1 ] C:\Windows\System32\batmeter.dll

14:42:38.0989 3380 C:\Windows\System32\batmeter.dll - ok

14:42:39.0004 3380 [ AA794B099F776B37ACCDEAD00E0FBFC9 ] C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll

14:42:39.0004 3380 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - ok

14:42:39.0020 3380 [ 02CD5B2C3B017122CAC00BDB520CD7AC ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll

14:42:39.0020 3380 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll - ok

14:42:39.0036 3380 [ 6E1F8165C365D35C8E3C045AF0CDD481 ] C:\Windows\SysWOW64\duser.dll

14:42:39.0036 3380 C:\Windows\SysWOW64\duser.dll - ok

14:42:39.0051 3380 [ EE06B85BC69F18826302348A2AD089E0 ] C:\Windows\SysWOW64\dui70.dll

14:42:39.0051 3380 C:\Windows\SysWOW64\dui70.dll - ok

14:42:39.0067 3380 [ AB781C0E4C09E08F464081D17C0F6184 ] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\iTunesMobileDevice.dll

14:42:39.0067 3380 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\iTunesMobileDevice.dll - ok

14:42:39.0082 3380 [ 3819AD4329303EAC88480CA16A650735 ] C:\Windows\System32\UIAnimation.dll

14:42:39.0082 3380 C:\Windows\System32\UIAnimation.dll - ok

14:42:39.0098 3380 [ 2D2A6EC8EAD30EC3ACE2FD6FB1B3E122 ] C:\Windows\System32\prnfldr.dll

14:42:39.0098 3380 C:\Windows\System32\prnfldr.dll - ok

14:42:39.0098 3380 [ 42A9CB6906D9A8BEDC83B57163E62924 ] C:\Windows\System32\DXP.dll

14:42:39.0098 3380 C:\Windows\System32\DXP.dll - ok

14:42:39.0114 3380 [ 2BC7C9FD0A9F2C9AFC373F3AD1EE3891 ] C:\Windows\System32\Syncreg.dll

14:42:39.0114 3380 C:\Windows\System32\Syncreg.dll - ok

14:42:39.0129 3380 [ 0F261EC4F514926177C70C1832374231 ] C:\Program Files\iPod\bin\iPodService.exe

14:42:39.0129 3380 C:\Program Files\iPod\bin\iPodService.exe - ok

14:42:39.0145 3380 [ C836175870E00ACC546066632E15BD10 ] C:\Windows\ehome\ehSSO.dll

14:42:39.0145 3380 C:\Windows\ehome\ehSSO.dll - ok

14:42:39.0160 3380 [ A42F2C1EB3B66C54FB3C7B79D30C1A6D ] C:\Windows\System32\netshell.dll

14:42:39.0160 3380 C:\Windows\System32\netshell.dll - ok

14:42:39.0160 3380 [ 5EF8A000C7927E87332D8CB6B7970067 ] C:\Program Files\iPod\bin\iPodService.Resources\iPodService.dll

14:42:39.0160 3380 C:\Program Files\iPod\bin\iPodService.Resources\iPodService.dll - ok

14:42:39.0176 3380 [ 763E2BBEFCD523AB3B7163A5671BF5EF ] C:\Program Files\iPod\bin\iPodService.Resources\en.lproj\iPodServiceLocalized.dll

14:42:39.0176 3380 C:\Program Files\iPod\bin\iPodService.Resources\en.lproj\iPodServiceLocalized.dll - ok

14:42:39.0192 3380 [ E7368F0A8D19445EAF5C5D0DBB8B8DAB ] C:\Windows\System32\AltTab.dll

14:42:39.0192 3380 C:\Windows\System32\AltTab.dll - ok

14:42:39.0207 3380 [ C8FDF0FA9E97E2FAAF3F814716AAA881 ] C:\Windows\System32\WPDShServiceObj.dll

14:42:39.0207 3380 C:\Windows\System32\WPDShServiceObj.dll - ok

14:42:39.0223 3380 [ 10F815BE90A66AAFC6C713D1BD626064 ] C:\Windows\System32\pnidui.dll

14:42:39.0223 3380 C:\Windows\System32\pnidui.dll - ok

14:42:39.0223 3380 [ B9F0A4020AA98B7A20287BF7FE99A1FD ] C:\Windows\System32\QUTIL.DLL

14:42:39.0223 3380 C:\Windows\System32\QUTIL.DLL - ok

14:42:39.0238 3380 [ 4F3CD1C59EA71401E155C432BCECE180 ] C:\Windows\System32\PortableDeviceTypes.dll

14:42:39.0238 3380 C:\Windows\System32\PortableDeviceTypes.dll - ok

14:42:39.0254 3380 [ 8569E35D00F45972E506502EEE622BA4 ] C:\Windows\System32\srchadmin.dll

14:42:39.0254 3380 C:\Windows\System32\srchadmin.dll - ok

14:42:39.0270 3380 [ 667300FB6B357B357A4B3ACF3DC9E439 ] C:\Program Files\WIDCOMM\Bluetooth Software\BTNCopy.dll

14:42:39.0270 3380 C:\Program Files\WIDCOMM\Bluetooth Software\BTNCopy.dll - ok

14:42:39.0285 3380 [ D7CEAEDD5F75D2C8A2E80887D7C114CE ] C:\Windows\System32\webcheck.dll

14:42:39.0285 3380 C:\Windows\System32\webcheck.dll - ok

14:42:39.0285 3380 [ C71E7ABB1A34E56CE73AE117C8DD566F ] C:\Windows\System32\ieframe.dll

14:42:39.0285 3380 C:\Windows\System32\ieframe.dll - ok

14:42:39.0301 3380 [ CF636C92B762B26F0B39B38E92380A09 ] C:\Windows\System32\oleacc.dll

14:42:39.0301 3380 C:\Windows\System32\oleacc.dll - ok

14:42:39.0316 3380 [ 8494E126F0B10180F3293AF861CE1F7A ] C:\Windows\System32\mlang.dll

14:42:39.0316 3380 C:\Windows\System32\mlang.dll - ok

14:42:39.0332 3380 [ 101797BA603D227946B4B5109867EB19 ] C:\Windows\System32\SyncCenter.dll

14:42:39.0332 3380 C:\Windows\System32\SyncCenter.dll - ok

14:42:39.0348 3380 [ 847D3AE376C0817161A14A82C8922A9E ] C:\Windows\System32\netman.dll

14:42:39.0348 3380 C:\Windows\System32\netman.dll - ok

14:42:39.0348 3380 [ 8130391F82D52D36C0441F714136957F ] C:\Windows\System32\imapi2.dll

14:42:39.0348 3380 C:\Windows\System32\imapi2.dll - ok

14:42:39.0363 3380 [ C746F3BF98E92FB137B5BD2B8B5925BD ] C:\Windows\System32\FXSST.dll

14:42:39.0363 3380 C:\Windows\System32\FXSST.dll - ok

14:42:39.0379 3380 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] C:\Windows\System32\netprofm.dll

14:42:39.0379 3380 C:\Windows\System32\netprofm.dll - ok

14:42:39.0394 3380 [ 650CAEA856943E29F25A25D31E004B18 ] C:\Windows\System32\FXSAPI.dll

14:42:39.0394 3380 C:\Windows\System32\FXSAPI.dll - ok

14:42:39.0410 3380 [ F7073C962C4FB7C415565DDE109DE49F ] C:\Windows\System32\npmproxy.dll

14:42:39.0410 3380 C:\Windows\System32\npmproxy.dll - ok

14:42:39.0426 3380 [ C8E8B8239FCF17BEA10E751BE5854631 ] C:\Windows\System32\FXSRESM.dll

14:42:39.0426 3380 C:\Windows\System32\FXSRESM.dll - ok

14:42:39.0426 3380 [ D2155709E336C3BC15729EB87FEC6064 ] C:\Windows\System32\rasdlg.dll

14:42:39.0426 3380 C:\Windows\System32\rasdlg.dll - ok

14:42:39.0441 3380 [ 2DF29664ED261F0FC448E58F338F0671 ] C:\Windows\System32\mprapi.dll

14:42:39.0441 3380 C:\Windows\System32\mprapi.dll - ok

14:42:39.0457 3380 [ 6A5C1A8AC0B572679361026D0E900420 ] C:\Windows\System32\hgcpl.dll

14:42:39.0457 3380 C:\Windows\System32\hgcpl.dll - ok

14:42:39.0457 3380 [ 908ACB1F594274965A53926B10C81E89 ] C:\Windows\System32\provsvc.dll

14:42:39.0457 3380 C:\Windows\System32\provsvc.dll - ok

14:42:39.0472 3380 [ F9AFD12BB4B1CFA5FCC0A5B37C604FD2 ] C:\Windows\System32\dot3api.dll

14:42:39.0472 3380 C:\Windows\System32\dot3api.dll - ok

14:42:39.0488 3380 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] C:\Windows\System32\FXSSVC.exe

14:42:39.0488 3380 C:\Windows\System32\FXSSVC.exe - ok

14:42:39.0504 3380 [ E4FCA0F99A41E460C84016DEFD31E6EF ] C:\Windows\System32\wlanhlp.dll

14:42:39.0504 3380 C:\Windows\System32\wlanhlp.dll - ok

14:42:39.0519 3380 [ 357BE883C5236BFC7341CB9E82308908 ] C:\Windows\System32\wlanapi.dll

14:42:39.0519 3380 C:\Windows\System32\wlanapi.dll - ok

14:42:39.0535 3380 [ 3B367397320C26DBA890B260F80D1B1B ] C:\Windows\System32\hnetcfg.dll

14:42:39.0535 3380 C:\Windows\System32\hnetcfg.dll - ok

14:42:39.0535 3380 [ 5DA219F57A9076FB6FBD3C9C3713A672 ] C:\Windows\System32\WWanAPI.dll

14:42:39.0535 3380 C:\Windows\System32\WWanAPI.dll - ok

14:42:39.0550 3380 [ 62C7AACC746C9723468A8F2169ED3E85 ] C:\Windows\System32\wwapi.dll

14:42:39.0550 3380 C:\Windows\System32\wwapi.dll - ok

14:42:39.0566 3380 [ 6B851E682A36453E1B1EE297FFB6E2AB ] C:\Windows\System32\QAGENT.DLL

14:42:39.0566 3380 C:\Windows\System32\QAGENT.DLL - ok

14:42:39.0582 3380 [ 01AEA2F16FE0C522DDFD7FAFFC959C6A ] C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\74a5f0c2bc0d0e6e3c4ec4886b9be891\mscorlib.ni.dll

14:42:39.0582 3380 C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\74a5f0c2bc0d0e6e3c4ec4886b9be891\mscorlib.ni.dll - ok

14:42:39.0597 3380 [ 0A94DE4AA9864D312E60D747FD249ABE ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsec.dll

14:42:39.0597 3380 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsec.dll - ok

14:42:39.0613 3380 [ 850BD2D2D9CB5894935C3B6333CAD6FD ] C:\Windows\System32\riched20.dll

14:42:39.0613 3380 C:\Windows\System32\riched20.dll - ok

14:42:39.0613 3380 ============================================================

14:42:39.0613 3380 Scan finished

14:42:39.0613 3380 ============================================================

14:42:39.0644 3388 Detected object count: 4

14:42:39.0644 3388 Actual detected object count: 4

14:42:55.0899 3388 FlipShareServer ( UnsignedFile.Multi.Generic ) - skipped by user

14:42:55.0899 3388 FlipShareServer ( UnsignedFile.Multi.Generic ) - User select action: Skip

14:42:55.0899 3388 Oasis2Service ( UnsignedFile.Multi.Generic ) - skipped by user

14:42:55.0899 3388 Oasis2Service ( UnsignedFile.Multi.Generic ) - User select action: Skip

14:42:55.0899 3388 USBAAPL64 ( UnsignedFile.Multi.Generic ) - skipped by user

14:42:55.0899 3388 USBAAPL64 ( UnsignedFile.Multi.Generic ) - User select action: Skip

14:42:55.0899 3388 VAIO Entertainment TV Device Arbitration Service ( UnsignedFile.Multi.Generic ) - skipped by user

14:42:55.0899 3388 VAIO Entertainment TV Device Arbitration Service ( UnsignedFile.Multi.Generic ) - User select action: Skip

14:43:44.0665 0900 ============================================================

14:43:44.0665 0900 Scan started

14:43:44.0665 0900 Mode: Manual; SigCheck; TDLFS;

14:43:44.0665 0900 ============================================================

14:43:45.0710 0900 ================ Scan system memory ========================

14:43:45.0710 0900 System memory - ok

14:43:45.0726 0900 ================ Scan services =============================

14:43:45.0975 0900 0254141355800424mcinstcleanup - ok

14:43:46.0240 0900 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys

14:43:46.0287 0900 1394ohci - ok

14:43:46.0428 0900 [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

14:43:46.0459 0900 ACDaemon - ok

14:43:46.0521 0900 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys

14:43:46.0552 0900 ACPI - ok

14:43:46.0599 0900 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys

14:43:46.0630 0900 AcpiPmi - ok

14:43:46.0677 0900 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys

14:43:46.0724 0900 adp94xx - ok

14:43:46.0771 0900 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys

14:43:46.0818 0900 adpahci - ok

14:43:46.0833 0900 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys

14:43:46.0880 0900 adpu320 - ok

14:43:46.0911 0900 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll

14:43:47.0005 0900 AeLookupSvc - ok

14:43:47.0052 0900 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys

14:43:47.0098 0900 AFD - ok

14:43:47.0145 0900 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys

14:43:47.0161 0900 agp440 - ok

14:43:47.0192 0900 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe

14:43:47.0223 0900 ALG - ok

14:43:47.0254 0900 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys

14:43:47.0286 0900 aliide - ok

14:43:47.0332 0900 [ 2AFBB7AE447A2373E20A22951EEFC92E ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

14:43:47.0364 0900 AMD External Events Utility - ok

14:43:47.0410 0900 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys

14:43:47.0442 0900 amdide - ok

14:43:47.0473 0900 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys

14:43:47.0504 0900 AmdK8 - ok

14:43:47.0691 0900 [ 7B8EE993D033EC437B2D0648E3DB034D ] amdkmdag C:\Windows\system32\DRIVERS\atipmdag.sys

14:43:47.0894 0900 amdkmdag - ok

14:43:47.0941 0900 [ F35E79CADCF770E41802910EFE70E245 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys

14:43:47.0972 0900 amdkmdap - ok

14:43:47.0988 0900 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys

14:43:48.0019 0900 AmdPPM - ok

14:43:48.0066 0900 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys

14:43:48.0097 0900 amdsata - ok

14:43:48.0128 0900 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys

14:43:48.0159 0900 amdsbs - ok

14:43:48.0206 0900 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys

14:43:48.0222 0900 amdxata - ok

14:43:48.0268 0900 [ 08E8A4172C57ABD7693A6915CF1E7A99 ] amd_sata C:\Windows\system32\drivers\amd_sata.sys

14:43:48.0300 0900 amd_sata - ok

14:43:48.0315 0900 [ 9866AF4E4AD7F16E810B6C0B8473F9CD ] amd_xata C:\Windows\system32\drivers\amd_xata.sys

14:43:48.0346 0900 amd_xata - ok

14:43:48.0393 0900 [ 2672A9DBAA6A8DEEA7EC8C7892E32A03 ] ApfiltrService C:\Windows\system32\drivers\Apfiltr.sys

14:43:48.0424 0900 ApfiltrService - ok

14:43:48.0487 0900 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys

14:43:48.0565 0900 AppID - ok

14:43:48.0596 0900 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll

14:43:48.0690 0900 AppIDSvc - ok

14:43:48.0752 0900 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll

14:43:48.0830 0900 Appinfo - ok

14:43:48.0924 0900 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

14:43:48.0939 0900 Apple Mobile Device - ok

14:43:48.0986 0900 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys

14:43:49.0002 0900 arc - ok

14:43:49.0033 0900 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys

14:43:49.0064 0900 arcsas - ok

14:43:49.0095 0900 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys

14:43:49.0173 0900 AsyncMac - ok

14:43:49.0220 0900 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys

14:43:49.0251 0900 atapi - ok

14:43:49.0345 0900 [ D6CAD7E5B05055BB8226BDCB1644DA27 ] athr C:\Windows\system32\DRIVERS\athrx.sys

14:43:49.0407 0900 athr - ok

14:43:49.0610 0900 [ 7B8EE993D033EC437B2D0648E3DB034D ] atikmdag C:\Windows\system32\DRIVERS\atikmdag.sys

14:43:49.0813 0900 atikmdag - ok

14:43:49.0844 0900 [ 7C5D273E29DCC5505469B299C6F29163 ] AtiPcie C:\Windows\system32\drivers\AtiPcie.sys

14:43:49.0860 0900 AtiPcie - ok

14:43:49.0938 0900 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

14:43:50.0000 0900 AudioEndpointBuilder - ok

14:43:50.0047 0900 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll

14:43:50.0140 0900 AudioSrv - ok

14:43:50.0203 0900 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll

14:43:50.0250 0900 AxInstSV - ok

14:43:50.0281 0900 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys

14:43:50.0312 0900 b06bdrv - ok

14:43:50.0359 0900 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys

14:43:50.0390 0900 b57nd60a - ok

14:43:50.0421 0900 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll

14:43:50.0452 0900 BDESVC - ok

14:43:50.0468 0900 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys

14:43:50.0562 0900 Beep - ok

14:43:50.0608 0900 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll

14:43:50.0718 0900 BITS - ok

14:43:50.0749 0900 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys

14:43:50.0780 0900 blbdrive - ok

14:43:50.0858 0900 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

14:43:50.0889 0900 Bonjour Service - ok

14:43:50.0936 0900 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys

14:43:50.0967 0900 bowser - ok

14:43:50.0998 0900 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys

14:43:51.0030 0900 BrFiltLo - ok

14:43:51.0061 0900 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys

14:43:51.0092 0900 BrFiltUp - ok

14:43:51.0139 0900 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll

14:43:51.0170 0900 Browser - ok

14:43:51.0217 0900 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys

14:43:51.0248 0900 Brserid - ok

14:43:51.0264 0900 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys

14:43:51.0310 0900 BrSerWdm - ok

14:43:51.0326 0900 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys

14:43:51.0357 0900 BrUsbMdm - ok

14:43:51.0373 0900 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys

14:43:51.0404 0900 BrUsbSer - ok

14:43:51.0451 0900 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys

14:43:51.0482 0900 BthEnum - ok

14:43:51.0529 0900 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys

14:43:51.0560 0900 BTHMODEM - ok

14:43:51.0591 0900 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys

14:43:51.0622 0900 BthPan - ok

14:43:51.0685 0900 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys

14:43:51.0732 0900 BTHPORT - ok

14:43:51.0763 0900 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll

14:43:51.0856 0900 bthserv - ok

14:43:51.0903 0900 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys

14:43:51.0934 0900 BTHUSB - ok

14:43:51.0966 0900 [ 5C849BD7C78791C5CEE9F4651D7FE38D ] btwavdt C:\Windows\system32\drivers\btwavdt.sys

14:43:51.0997 0900 btwavdt - ok

14:43:52.0059 0900 [ 31DA517946FFE416442E864592548F8A ] btwdins C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

14:43:52.0122 0900 btwdins - ok

14:43:52.0137 0900 [ 3E1991AFA851A36DC978B0A1B0535C8B ] btwrchid C:\Windows\system32\drivers\btwrchid.sys

14:43:52.0168 0900 btwrchid - ok

14:43:52.0200 0900 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys

14:43:52.0293 0900 cdfs - ok

14:43:52.0356 0900 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys

14:43:52.0387 0900 cdrom - ok

14:43:52.0418 0900 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll

14:43:52.0512 0900 CertPropSvc - ok

14:43:52.0543 0900 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys

14:43:52.0574 0900 circlass - ok

14:43:52.0621 0900 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys

14:43:52.0652 0900 CLFS - ok

14:43:52.0761 0900 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

14:43:52.0777 0900 clr_optimization_v2.0.50727_32 - ok

14:43:52.0839 0900 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

14:43:52.0855 0900 clr_optimization_v2.0.50727_64 - ok

14:43:52.0980 0900 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

14:43:52.0995 0900 clr_optimization_v4.0.30319_32 - ok

14:43:53.0120 0900 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

14:43:53.0136 0900 clr_optimization_v4.0.30319_64 - ok

14:43:53.0167 0900 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys

14:43:53.0198 0900 CmBatt - ok

14:43:53.0229 0900 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys

14:43:53.0245 0900 cmdide - ok

14:43:53.0307 0900 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys

14:43:53.0370 0900 CNG - ok

14:43:53.0401 0900 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys

14:43:53.0432 0900 Compbatt - ok

14:43:53.0479 0900 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys

14:43:53.0510 0900 CompositeBus - ok

14:43:53.0526 0900 COMSysApp - ok

14:43:53.0557 0900 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys

14:43:53.0588 0900 crcdisk - ok

14:43:53.0635 0900 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll

14:43:53.0666 0900 CryptSvc - ok

14:43:53.0900 0900 [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

14:43:53.0947 0900 cvhsvc - ok

14:43:54.0025 0900 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll

14:43:54.0119 0900 DcomLaunch - ok

14:43:54.0165 0900 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll

14:43:54.0275 0900 defragsvc - ok

14:43:54.0337 0900 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys

14:43:54.0415 0900 DfsC - ok

14:43:54.0477 0900 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll

14:43:54.0509 0900 Dhcp - ok

14:43:54.0555 0900 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys

14:43:54.0649 0900 discache - ok

14:43:54.0680 0900 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys

14:43:54.0711 0900 Disk - ok

14:43:54.0774 0900 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll

14:43:54.0805 0900 Dnscache - ok

14:43:54.0867 0900 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll

14:43:54.0961 0900 dot3svc - ok

14:43:55.0008 0900 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll

14:43:55.0101 0900 DPS - ok

14:43:55.0148 0900 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys

14:43:55.0179 0900 drmkaud - ok

14:43:55.0242 0900 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys

14:43:55.0304 0900 DXGKrnl - ok

14:43:55.0335 0900 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll

14:43:55.0429 0900 EapHost - ok

14:43:55.0554 0900 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys

14:43:55.0679 0900 ebdrv - ok

14:43:55.0725 0900 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe

14:43:55.0741 0900 EFS - ok

14:43:55.0866 0900 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe

14:43:55.0897 0900 ehRecvr - ok

14:43:55.0944 0900 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe

14:43:55.0975 0900 ehSched - ok

14:43:56.0022 0900 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys

14:43:56.0069 0900 elxstor - ok

14:43:56.0115 0900 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys

14:43:56.0131 0900 ErrDev - ok

14:43:56.0193 0900 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll

14:43:56.0303 0900 EventSystem - ok

14:43:56.0318 0900 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys

14:43:56.0412 0900 exfat - ok

14:43:56.0427 0900 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys

14:43:56.0490 0900 fastfat - ok

14:43:56.0552 0900 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe

14:43:56.0568 0900 Fax - ok

14:43:56.0599 0900 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys

14:43:56.0630 0900 fdc - ok

14:43:56.0661 0900 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll

14:43:56.0755 0900 fdPHost - ok

14:43:56.0771 0900 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll

14:43:56.0864 0900 FDResPub - ok

14:43:56.0880 0900 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys

14:43:56.0911 0900 FileInfo - ok

14:43:56.0942 0900 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys

14:43:57.0020 0900 Filetrace - ok

14:43:57.0145 0900 [ 869BDE240B7FE9C7B25BD80DF85641C8 ] FlipShare Service C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe

14:43:57.0176 0900 FlipShare Service - ok

14:43:57.0270 0900 [ 9C330B7DDEE9492373041E75DA01F80C ] FlipShareServer C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe

14:43:57.0301 0900 FlipShareServer ( UnsignedFile.Multi.Generic ) - warning

14:43:57.0301 0900 FlipShareServer - detected UnsignedFile.Multi.Generic (1)

14:43:57.0348 0900 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys

14:43:57.0379 0900 flpydisk - ok

14:43:57.0441 0900 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys

14:43:57.0473 0900 FltMgr - ok

14:43:57.0535 0900 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll

14:43:57.0597 0900 FontCache - ok

14:43:57.0660 0900 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

14:43:57.0691 0900 FontCache3.0.0.0 - ok

14:43:57.0722 0900 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys

14:43:57.0753 0900 FsDepends - ok

14:43:57.0800 0900 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys

14:43:57.0831 0900 Fs_Rec - ok

14:43:57.0878 0900 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys

14:43:57.0909 0900 fvevol - ok

14:43:57.0941 0900 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys

14:43:57.0972 0900 gagp30kx - ok

14:43:58.0019 0900 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

14:43:58.0050 0900 GEARAspiWDM - ok

14:43:58.0097 0900 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll

14:43:58.0206 0900 gpsvc - ok

14:43:58.0299 0900 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

14:43:58.0315 0900 gupdate - ok

14:43:58.0331 0900 Scan interrupted by user!

14:43:58.0331 0900 ================ Scan global ===============================

14:43:58.0331 0900 Scan interrupted by user!

14:43:58.0331 0900 ================ Scan MBR ==================================

14:43:58.0331 0900 Scan interrupted by user!

14:43:58.0331 0900 ================ Scan VBR ==================================

14:43:58.0331 0900 Scan interrupted by user!

14:43:58.0331 0900 ================ Scan active images ========================

14:43:58.0331 0900 Scan interrupted by user!

14:43:58.0331 0900 ============================================================

14:43:58.0331 0900 Scan finished

14:43:58.0331 0900 ============================================================

14:43:58.0346 0196 Detected object count: 1

14:43:58.0346 0196 Actual detected object count: 1

14:44:16.0286 0196 FlipShareServer ( UnsignedFile.Multi.Generic ) - skipped by user

14:44:16.0286 0196 FlipShareServer ( UnsignedFile.Multi.Generic ) - User select action: Skip

14:45:06.0986 3576 Deinitialize success

[Maniac]

Looks good.

Please run a free online scan with the ESET Online Scanner

Note: You will need to use Internet Explorer for this scan

• Tick the box next to YES, I accept the Terms of Use
  
• Click Start
  
• When asked, allow the ActiveX control to install
  
• Click Start
  
• Make sure that the options Remove found threats and the option Scan unwanted applications is checked
  
• Click Scan (This scan can take several hours, so please be patient)
  
• Once the scan is completed, you may close the window
  
• Use Notepad to open the logfile located at C:\Program Files\ESET\Eset Online Scanner\log.txt
  
• Copy and paste that log as a reply to this topic
  

[Woke20]

Hey I scanned the PC with ESET the first time my computer fell asleep so I had to restart the scan, after a few hours it finally finished and said it found 3 threats 2 of them being "TrojanDownloader.Tracur.F Trojan". Now I don't know if this is correct but I followed your instructions to get to the log and this was all that was on it. This does not look correct.

ESETSmartInstaller@High as CAB hook log:

OnlineScanner64.ocx - registred OK

OnlineScanner.ocx - registred OK

esets_scanner_update returned -1 esets_gle=53251

[Maniac]

Download AVPTool from Here to your desktop

Run the programme you have just downloaded to your desktop (it will be randomly named)

Click the cog in the upper right

Select down to and including your main drive, once done select the Automatic scan tab and press Start Scan

Allow AVP to delete all infections found

Once it has finished select report tab (last tab)

Select Detected threads report from the left and press Save button

Save it to your desktop and post it in your next reply.