Outgoing Malicious IP Blocks. Suspect Infection

MicQsenoch · January 1, 2013

I just went through a recent Ransomware attack. The only thing i really do on this computer is play games and sruf the web, so i decided to reformat. Upon reinstalling the basics and Malwarebytes, I started recieving frequent outgoing Malicous IP blocks.

Help Appreciated

MicQsenoch · January 1, 2013

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows XP Home Edition

Boot Device: \Device\HarddiskVolume1

Install Date: 12/29/2012 12:40:25 PM

System Uptime: 1/1/2013 9:47:04 AM (1 hours ago)

.

Motherboard: Gigabyte Tecohnology Co., Ltd. | | H61MA-D3V

Processor: Intel Pentium III Xeon processor | Intel® Core i3-2100 CPU @ 3.10GHz | 3092/100mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 69 GiB total, 48.584 GiB free.

D: is CDROM (CDFS)

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP1: 12/29/2012 12:42:01 PM - System Checkpoint

RP2: 12/30/2012 9:36:18 AM - Installed Windows Installer KB893803v2.

RP3: 12/30/2012 9:37:21 AM - Installed Windows XP WIC.

RP4: 12/30/2012 9:38:02 AM - Installed Windows KB954550-v5.

RP5: 12/30/2012 9:38:05 AM - Printer Driver Microsoft XPS Document Writer Installed

RP6: 12/30/2012 9:38:09 AM - Printer Driver Microsoft XPS Document Writer Installed

RP7: 12/30/2012 9:39:44 AM - Installed Realtek High Definition Audio Driver

RP8: 12/30/2012 9:40:16 AM - Installed REALTEK GbE & FE Ethernet PCI-E NIC Driver

RP9: 12/30/2012 11:02:58 AM - Installed Microsoft Download Manager

RP10: 12/30/2012 11:03:20 AM - Installed Windows XP KB932823-v3.

RP11: 12/30/2012 11:33:44 AM - Installed Windows Internet Explorer 8.

RP12: 12/30/2012 11:48:08 AM - Installed Microsoft Fix it 50597

RP13: 12/30/2012 11:48:40 AM - Installed Microsoft Fix it 50597

RP14: 12/30/2012 11:50:44 AM - Software Distribution Service 3.0

RP15: 12/30/2012 11:54:31 AM - Installed Windows XP KB914882.

RP16: 12/30/2012 12:04:14 PM - Software Distribution Service 3.0

RP17: 12/30/2012 12:17:02 PM - Software Distribution Service 3.0

RP18: 12/30/2012 12:33:28 PM - Software Distribution Service 3.0

RP19: 12/30/2012 12:49:47 PM - Installed %1 %2.

RP20: 12/30/2012 1:33:50 PM - Malwarebytes Anti-Rootkit Restore Point

RP21: 12/30/2012 2:15:08 PM - Update to an unsigned driver

RP22: 12/30/2012 3:13:04 PM - Installed League of Legends

RP23: 12/30/2012 3:48:58 PM - Software Distribution Service 3.0

RP24: 12/31/2012 6:14:41 PM - Software Distribution Service 3.0

.

==== Installed Programs ======================

.

@BIOS

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

AVG Security Toolbar

Easy Tune 6 B11.1206.1

Enable S3 for USB Device

Etron USB3.0 Host Controller

Google Chrome

Google Update Helper

High Definition Audio Driver Package - KB888111

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Hotfix for Windows XP (KB2779562)

Hotfix for Windows XP (KB952287)

Hotfix for Windows XP (KB954550-v5)

Hotfix for Windows XP (KB961118)

Hotfix for Windows XP (KB981793)

Intel® Management Engine Components

Internet Explorer (Enable DEP)

League of Legends

Malwarebytes Anti-Malware version 1.70.0.1100

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft Application Error Reporting

Microsoft Download Manager

Microsoft Security Client

Microsoft Security Essentials

Microsoft Security Essentials Packages

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Mozilla Firefox 17.0.1 (x86 en-US)

Mozilla Maintenance Service

MSXML 6 Service Pack 2 (KB973686)

NVIDIA Control Panel 310.70

NVIDIA Graphics Driver 310.70

NVIDIA HD Audio Driver 1.3.18.0

NVIDIA Install Application

NVIDIA nView 136.53

NVIDIA nView Desktop Manager

NVIDIA PhysX

NVIDIA PhysX System Software 9.12.1031

NVIDIA Update 1.11.3

NVIDIA Update Components

ON_OFF Charge B11.1102.1

Pando Media Booster

REALTEK GbE & FE Ethernet PCI-E NIC Driver

Realtek High Definition Audio Driver

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)

Security Update for Microsoft Windows (KB2564958)

Security Update for Windows Internet Explorer 8 (KB2510531)

Security Update for Windows Internet Explorer 8 (KB2544521)

Security Update for Windows Internet Explorer 8 (KB2761465)

Security Update for Windows Internet Explorer 8 (KB971961)

Security Update for Windows Internet Explorer 8 (KB981332)

Security Update for Windows Internet Explorer 8 (KB982381)

Security Update for Windows Media Player (KB2378111)

Security Update for Windows Media Player (KB952069)

Security Update for Windows Media Player (KB954155)

Security Update for Windows Media Player (KB973540)

Security Update for Windows Media Player (KB975558)

Security Update for Windows Media Player (KB978695)

Security Update for Windows Media Player (KB979402)

Security Update for Windows XP (KB2115168)

Security Update for Windows XP (KB2229593)

Security Update for Windows XP (KB2296011)

Security Update for Windows XP (KB2347290)

Security Update for Windows XP (KB2360937)

Security Update for Windows XP (KB2387149)

Security Update for Windows XP (KB2393802)

Security Update for Windows XP (KB2419632)

Security Update for Windows XP (KB2423089)

Security Update for Windows XP (KB2440591)

Security Update for Windows XP (KB2443105)

Security Update for Windows XP (KB2476490)

Security Update for Windows XP (KB2478960)

Security Update for Windows XP (KB2478971)

Security Update for Windows XP (KB2479943)

Security Update for Windows XP (KB2481109)

Security Update for Windows XP (KB2483185)

Security Update for Windows XP (KB2485663)

Security Update for Windows XP (KB2506212)

Security Update for Windows XP (KB2507938)

Security Update for Windows XP (KB2508429)

Security Update for Windows XP (KB2509553)

Security Update for Windows XP (KB2535512)

Security Update for Windows XP (KB2536276-v2)

Security Update for Windows XP (KB2544893-v2)

Security Update for Windows XP (KB2566454)

Security Update for Windows XP (KB2570947)

Security Update for Windows XP (KB2584146)

Security Update for Windows XP (KB2585542)

Security Update for Windows XP (KB2592799)

Security Update for Windows XP (KB2598479)

Security Update for Windows XP (KB2603381)

Security Update for Windows XP (KB2618451)

Security Update for Windows XP (KB2619339)

Security Update for Windows XP (KB2620712)

Security Update for Windows XP (KB2624667)

Security Update for Windows XP (KB2631813)

Security Update for Windows XP (KB2646524)

Security Update for Windows XP (KB2653956)

Security Update for Windows XP (KB2655992)

Security Update for Windows XP (KB2659262)

Security Update for Windows XP (KB2661637)

Security Update for Windows XP (KB2676562)

Security Update for Windows XP (KB2686509)

Security Update for Windows XP (KB2691442)

Security Update for Windows XP (KB2698365)

Security Update for Windows XP (KB2705219-v2)

Security Update for Windows XP (KB2712808)

Security Update for Windows XP (KB2719985)

Security Update for Windows XP (KB2723135-v2)

Security Update for Windows XP (KB2724197)

Security Update for Windows XP (KB2727528)

Security Update for Windows XP (KB2753842-v2)

Security Update for Windows XP (KB2758857)

Security Update for Windows XP (KB2770660)

Security Update for Windows XP (KB2779030)

Security Update for Windows XP (KB923561)

Security Update for Windows XP (KB923789)

Security Update for Windows XP (KB946648)

Security Update for Windows XP (KB950762)

Security Update for Windows XP (KB950974)

Security Update for Windows XP (KB951376-v2)

Security Update for Windows XP (KB951748)

Security Update for Windows XP (KB952004)

Security Update for Windows XP (KB952954)

Security Update for Windows XP (KB955069)

Security Update for Windows XP (KB956572)

Security Update for Windows XP (KB956744)

Security Update for Windows XP (KB956802)

Security Update for Windows XP (KB956803)

Security Update for Windows XP (KB956844)

Security Update for Windows XP (KB958644)

Security Update for Windows XP (KB958869)

Security Update for Windows XP (KB959426)

Security Update for Windows XP (KB960225)

Security Update for Windows XP (KB960803)

Security Update for Windows XP (KB960859)

Security Update for Windows XP (KB961501)

Security Update for Windows XP (KB969059)

Security Update for Windows XP (KB970238)

Security Update for Windows XP (KB970430)

Security Update for Windows XP (KB971468)

Security Update for Windows XP (KB971657)

Security Update for Windows XP (KB972270)

Security Update for Windows XP (KB973507)

Security Update for Windows XP (KB973869)

Security Update for Windows XP (KB973904)

Security Update for Windows XP (KB974112)

Security Update for Windows XP (KB974318)

Security Update for Windows XP (KB974392)

Security Update for Windows XP (KB974571)

Security Update for Windows XP (KB975025)

Security Update for Windows XP (KB975467)

Security Update for Windows XP (KB975560)

Security Update for Windows XP (KB975561)

Security Update for Windows XP (KB975562)

Security Update for Windows XP (KB975713)

Security Update for Windows XP (KB977816)

Security Update for Windows XP (KB977914)

Security Update for Windows XP (KB978037)

Security Update for Windows XP (KB978338)

Security Update for Windows XP (KB978542)

Security Update for Windows XP (KB978601)

Security Update for Windows XP (KB978706)

Security Update for Windows XP (KB979309)

Security Update for Windows XP (KB979482)

Security Update for Windows XP (KB979559)

Security Update for Windows XP (KB979683)

Security Update for Windows XP (KB979687)

Security Update for Windows XP (KB980195)

Security Update for Windows XP (KB980218)

Security Update for Windows XP (KB980232)

Security Update for Windows XP (KB981322)

Security Update for Windows XP (KB981997)

Security Update for Windows XP (KB982132)

Security Update for Windows XP (KB982665)

SUPERAntiSpyware

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Windows Internet Explorer 8 (KB976662)

Update for Windows XP (KB2345886)

Update for Windows XP (KB2661254-v2)

Update for Windows XP (KB2736233)

Update for Windows XP (KB2749655)

Update for Windows XP (KB951978)

Update for Windows XP (KB955759)

Update for Windows XP (KB967715)

Update for Windows XP (KB968389)

Update for Windows XP (KB971029)

Update for Windows XP (KB973687)

Update for Windows XP (KB973815)

WebFldrs XP

Windows Genuine Advantage Validation Tool (KB892130)

Windows Imaging Component

Windows Internet Explorer 8

Windows PowerShell 1.0

Windows XP Service Pack 3

.

==== Event Viewer Messages From Past Week ========

.

12/30/2012 2:24:20 PM, error: Service Control Manager [7023] - The Application Management service terminated with the following error: The specified module could not be found.

1/1/2013 9:46:43 AM, error: Service Control Manager [7006] - The ScRegSetValueExW call failed for Start with the following error: Access is denied.

.

==== End Of File ===========================

DDS (Ver_2012-11-20.01) - NTFS_x86

Internet Explorer: 8.0.6001.18702

Run by Michael Senff at 10:20:39 on 2013-01-01

Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3564.2796 [GMT -6:00]

.

AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

.

============== Running Processes ================

.

c:\Program Files\Microsoft Security Client\MsMpEng.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe

C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files\AVG Secure Search\vprot.exe

C:\WINDOWS\system32\RunDLL32.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Pando Networks\Media Booster\PMB.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k NetworkService

C:\WINDOWS\system32\svchost.exe -k LocalService

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxps://isearch.avg.com/?cid={E63FE547-FCA7-4CEE-A237-B076D05B947B}&mid=〈=&ds=&pr=&d=&v=&sap=hp

BHO: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - c:\program files\avg secure search\13.2.0.5\AVG Secure Search_toolbar.dll

TB: <No Name>: {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - LocalServer32 - <no file>

TB: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} - c:\program files\avg secure search\13.2.0.5\AVG Secure Search_toolbar.dll

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [sUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe

uRun: [Pando Media Booster] c:\program files\pando networks\media booster\PMB.exe

mRun: [RTHDCPL] RTHDCPL.EXE

mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey

mRun: [vProt] "c:\program files\avg secure search\vprot.exe"

mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup

mRun: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login

mRun: [nwiz] c:\program files\nvidia corporation\nview\nwiz.exe /installquiet

mRunOnce: [Z1] c:\documents and settings\michael senff\desktop\mbar\mbar.exe /cleanup /s

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1

mPolicies-Explorer: NoDriveTypeAutoRun = dword:145

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab

DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1356889151328

DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1356889323531

DPF: {B479199A-1242-4E3C-AD81-7F0DF801B4AE} - hxxp://download.microsoft.com/download/C/9/C/C9C3D86D-84AC-4AF0-8584-842756A66467/MicrosoftDownloadManager.cab

Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\13.2.0\ViProtocol.dll

SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - c:\program files\superantispyware\SASSEH.DLL

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\documents and settings\michael senff\application data\mozilla\firefox\profiles\8v50ytho.default\

FF - plugin: c:\program files\common files\avg secure search\sitesafetyinstaller\13.2.0\npsitesafety.dll

FF - plugin: c:\program files\google\update\1.3.21.123\npGoogleUpdate3.dll

FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll

FF - plugin: c:\windows\npMSDM.dll

FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_5_502_135.dll

FF - ExtSQL: 2012-12-30 12:22; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension

FF - ExtSQL: 2012-12-31 18:03; avg@toolbar; c:\documents and settings\all users\application data\avg secure search\firefoxext\13.2.0.5

.

============= SERVICES / DRIVERS ===============

.

R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2012-8-30 193552]

R1 AppleCharger;AppleCharger;c:\windows\system32\drivers\AppleCharger.sys [2012-12-30 19056]

R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [2012-12-31 26984]

R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]

R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]

R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2012-7-11 116608]

R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2012-12-30 398184]

R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-12-30 682344]

R2 UNS;Intel® Management and Security Application User Notification Service;c:\program files\intel\intel® management engine components\uns\UNS.exe [2012-12-30 2655768]

R2 vToolbarUpdater13.2.0;vToolbarUpdater13.2.0;c:\program files\common files\avg secure search\vtoolbarupdater\13.2.0\ToolbarUpdater.exe [2012-12-31 711112]

R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\drivers\EtronHub3.sys [2011-8-17 45056]

R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\drivers\EtronXHCI.sys [2011-8-17 64896]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-30 21104]

R3 MEI;Intel® Management Engine Interface;c:\windows\system32\drivers\HECI.sys [2012-12-30 41088]

S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2012-12-30 1691480]

S3 AppleChargerSrv;AppleChargerSrv;system32\AppleChargerSrv.exe --> system32\AppleChargerSrv.exe [?]

S3 GVTDrv;GVTDrv;c:\windows\system32\drivers\GVTDrv.sys [2012-12-30 24944]

S3 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys [2013-1-1 35144]

.

=============== Created Last 30 ================

.

2013-01-01 15:43:27 35144 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys

2013-01-01 00:14:44 6812136 ----a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{03167648-fd3c-4edc-a195-a457655f447e}\mpengine.dll

2013-01-01 00:12:22 -------- d-----w- c:\documents and settings\michael senff\application data\AVG Secure Search

2013-01-01 00:11:27 884072 ----a-w- c:\windows\system32\nvhdagenco3220103.dll

2013-01-01 00:11:25 889192 ----a-w- c:\windows\system32\nvdispgenco32.dll

2013-01-01 00:11:25 5955584 ----a-w- c:\windows\system32\nvopencl.dll

2013-01-01 00:11:25 1011048 ----a-w- c:\windows\system32\nvdispco32.dll

2013-01-01 00:03:54 -------- d-----w- c:\documents and settings\michael senff\local settings\application data\AVG Secure Search

2013-01-01 00:03:49 -------- d-----w- c:\documents and settings\all users\application data\AVG Secure Search

2013-01-01 00:03:47 -------- d-----w- c:\windows\system32\cache

2013-01-01 00:03:45 26984 ----a-w- c:\windows\system32\drivers\avgtpx86.sys

2012-12-30 22:21:30 -------- d-----w- c:\documents and settings\michael senff\application data\LolClient

2012-12-30 21:19:57 68616 ----a-w- c:\windows\system32\XAPOFX1_1.dll

2012-12-30 21:19:57 509448 ----a-w- c:\windows\system32\XAudio2_2.dll

2012-12-30 21:19:57 467984 ----a-w- c:\windows\system32\d3dx10_39.dll

2012-12-30 21:19:57 1493528 ----a-w- c:\windows\system32\D3DCompiler_39.dll

2012-12-30 21:19:56 3851784 ----a-w- c:\windows\system32\D3DX9_39.dll

2012-12-30 21:19:53 -------- d-----w- c:\windows\Logs

2012-12-30 21:14:59 521728 -c----w- c:\windows\system32\dllcache\jsdbgui.dll

2012-12-30 21:13:05 -------- d-----w- C:\Riot Games

2012-12-30 20:35:56 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll

2012-12-30 20:35:56 3072 ------w- c:\windows\system32\iacenc.dll

2012-12-30 20:30:28 -------- d-----w- c:\documents and settings\michael senff\local settings\application data\PMB Files

2012-12-30 20:30:26 -------- d-----w- c:\documents and settings\all users\application data\PMB Files

2012-12-30 20:30:18 -------- d-----w- c:\program files\Pando Networks

2012-12-30 20:30:15 275696 ----a-w- c:\windows\system32\mucltui.dll

2012-12-30 20:30:15 17136 ----a-w- c:\windows\system32\mucltui.dll.mui

2012-12-30 20:30:13 -------- d-----w- c:\documents and settings\michael senff\.swt

2012-12-30 20:27:23 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-12-30 20:27:23 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-12-30 20:25:39 -------- d-----w- c:\documents and settings\michael senff\application data\MSNInstaller

2012-12-30 20:16:47 -------- d-----w- c:\documents and settings\all users\application data\NVIDIA Corporation

2012-12-30 20:15:13 1070792 ----a-w- c:\windows\system32\nvdrsdb1.bin

2012-12-30 20:15:13 1070792 ----a-w- c:\windows\system32\nvdrsdb0.bin

2012-12-30 20:15:13 1 ----a-w- c:\windows\system32\nvdrssel.bin

2012-12-30 20:13:51 -------- d-----w- C:\NVIDIA

2012-12-30 20:12:27 116224 -c--a-w- c:\windows\system32\dllcache\xrxwiadr.dll

2012-12-30 20:12:25 23040 -c--a-w- c:\windows\system32\dllcache\xrxwbtmp.dll

2012-12-30 20:12:24 18944 -c--a-w- c:\windows\system32\dllcache\xrxscnui.dll

2012-12-30 20:12:22 27648 -c--a-w- c:\windows\system32\dllcache\xrxftplt.exe

2012-12-30 20:12:19 4608 -c--a-w- c:\windows\system32\dllcache\xrxflnch.exe

2012-12-30 20:12:15 99865 -c--a-w- c:\windows\system32\dllcache\xlog.exe

2012-12-30 20:12:11 16970 -c--a-w- c:\windows\system32\dllcache\xem336n5.sys

2012-12-30 20:12:10 19455 -c--a-w- c:\windows\system32\dllcache\wvchntxx.sys

2012-12-30 20:12:06 19200 -c--a-w- c:\windows\system32\dllcache\wstcodec.sys

2012-12-30 20:12:05 12063 -c--a-w- c:\windows\system32\dllcache\wsiintxx.sys

2012-12-30 20:12:04 8192 -c--a-w- c:\windows\system32\dllcache\wshirda.dll

2012-12-30 20:11:43 8832 -c--a-w- c:\windows\system32\dllcache\wmiacpi.sys

2012-12-30 20:11:39 154624 -c--a-w- c:\windows\system32\dllcache\wlluc48.sys

2012-12-30 20:11:36 34890 -c--a-w- c:\windows\system32\dllcache\wlandrv2.sys

2012-12-30 20:11:19 771581 -c--a-w- c:\windows\system32\dllcache\winacisa.sys

2012-12-30 20:11:14 53760 -c--a-w- c:\windows\system32\dllcache\wiamsmud.dll

2012-12-30 20:11:12 87040 -c--a-w- c:\windows\system32\dllcache\wiafbdrv.dll

2012-12-30 20:11:07 701386 -c--a-w- c:\windows\system32\dllcache\wdhaalba.sys

2012-12-30 20:11:06 23615 -c--a-w- c:\windows\system32\dllcache\wch7xxnt.sys

2012-12-30 20:11:05 31744 -c--a-w- c:\windows\system32\dllcache\wceusbsh.sys

2012-12-30 20:11:03 35871 -c--a-w- c:\windows\system32\dllcache\wbfirdma.sys

2012-12-30 20:11:00 33599 -c--a-w- c:\windows\system32\dllcache\watv04nt.sys

2012-12-30 20:09:59 94720 -c--a-w- c:\windows\system32\dllcache\umaxud32.dll

2012-12-30 20:08:58 123995 -c--a-w- c:\windows\system32\dllcache\tjisdn.sys

2012-12-30 20:07:59 285760 -c--a-w- c:\windows\system32\dllcache\stlnata.sys

2012-12-30 20:06:58 45568 -c--a-w- c:\windows\system32\dllcache\smb3w.dll

2012-12-30 20:05:59 386560 -c--a-w- c:\windows\system32\dllcache\sgiul50.dll

2012-12-30 20:04:59 79872 -c--a-w- c:\windows\system32\dllcache\rwia430.dll

2012-12-30 20:03:59 112574 -c--a-w- c:\windows\system32\dllcache\ptserlp.sys

2012-12-30 20:02:55 41984 -c--a-w- c:\windows\system32\dllcache\ovui2rc.dll

2012-12-30 20:01:59 198144 -c--a-w- c:\windows\system32\dllcache\nv3.sys

2012-12-30 20:00:59 33088 -c--a-w- c:\windows\system32\dllcache\n9i128v2.sys

2012-12-30 19:59:58 35200 -c--a-w- c:\windows\system32\dllcache\msgame.sys

2012-12-30 19:58:57 70730 -c--a-w- c:\windows\system32\dllcache\lne100tx.sys

2012-12-30 19:57:58 45632 -c--a-w- c:\windows\system32\dllcache\ip5515.sys

2012-12-30 19:56:58 58592 -c--a-w- c:\windows\system32\dllcache\i740nt5.sys

2012-12-30 19:55:59 119296 -c--a-w- c:\windows\system32\dllcache\hpdigwia.dll

2012-12-30 19:54:58 347550 -c--a-w- c:\windows\system32\dllcache\es56tpi.sys

2012-12-30 19:53:59 21606 -c--a-w- c:\windows\system32\dllcache\digiisdn.sys

2012-12-30 19:52:57 248064 -c--a-w- c:\windows\system32\dllcache\cl546xm.sys

2012-12-30 19:51:57 9472 -c--a-w- c:\windows\system32\dllcache\ativmdcd.sys

2012-12-30 19:50:59 747392 -c--a-w- c:\windows\system32\dllcache\adm8830.sys

2012-12-30 19:01:49 -------- d-----w- c:\documents and settings\michael senff\local settings\application data\Google

2012-12-30 19:01:47 -------- d-----w- c:\documents and settings\michael senff\application data\SUPERAntiSpyware.com

2012-12-30 19:01:40 -------- d-----w- c:\program files\SUPERAntiSpyware

2012-12-30 19:01:40 -------- d-----w- c:\documents and settings\all users\application data\SUPERAntiSpyware.com

2012-12-30 18:58:35 -------- d-----w- c:\documents and settings\michael senff\application data\Malwarebytes

2012-12-30 18:58:24 -------- d-----w- c:\documents and settings\all users\application data\Malwarebytes

2012-12-30 18:58:23 21104 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-12-30 18:58:23 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2012-12-30 18:50:41 -------- d-----w- c:\documents and settings\michael senff\application data\ElevatedDiagnostics

2012-12-30 18:40:53 -------- d-----w- c:\windows\system32\scripting

2012-12-30 18:40:53 -------- d-----w- c:\windows\system32\en

2012-12-30 18:40:53 -------- d-----w- c:\windows\system32\bits

2012-12-30 18:40:53 -------- d-----w- c:\windows\l2schemas

2012-12-30 18:38:40 -------- d-----w- c:\windows\network diagnostic

2012-12-30 18:36:49 -------- d-----w- c:\windows\EHome

2012-12-30 18:20:40 -------- d-----w- c:\windows\ServicePackFiles

2012-12-30 18:19:05 -------- d-----w- c:\windows\ie8updates

2012-12-30 18:14:25 73216 -c--a-w- c:\windows\system32\dllcache\atintuxx.sys

2012-12-30 18:07:36 272128 -c--a-w- c:\windows\system32\dllcache\bthport.sys

2012-12-30 18:07:36 272128 ------w- c:\windows\system32\drivers\bthport.sys

2012-12-30 18:06:34 630272 -c----w- c:\windows\system32\dllcache\msfeeds.dll

2012-12-30 18:06:34 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll

2012-12-30 18:06:34 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll

2012-12-30 18:06:33 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll

2012-12-30 18:06:33 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll

2012-12-30 18:06:32 2000384 -c----w- c:\windows\system32\dllcache\iertutil.dll

2012-12-30 18:06:31 11111424 -c----w- c:\windows\system32\dllcache\ieframe.dll

2012-12-30 18:06:25 2192896 -c--a-w- c:\windows\system32\dllcache\ntoskrnl.exe

2012-12-30 18:04:22 6812136 ------w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll

2012-12-30 18:04:14 237072 ------w- c:\windows\system32\MpSigStub.exe

2012-12-30 18:03:25 689152 -c--a-w- c:\windows\system32\dllcache\xpsp3res.dll

2012-12-30 18:03:25 5120 ----a-w- c:\windows\system32\xpsp4res.dll

2012-12-30 18:02:08 -------- d-----w- c:\program files\Microsoft Security Client

2012-12-30 17:56:32 -------- d-----w- c:\documents and settings\michael senff\application data\MicrosoftSecurityEssentialsPackages

2012-12-30 17:50:51 -------- d-----w- c:\windows\system32\PreInstall

2012-12-30 17:43:58 22040 ----a-w- c:\windows\system32\wucltui.dll.mui

2012-12-30 17:43:57 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui

2012-12-30 17:43:57 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui

2012-12-30 17:43:57 15384 ----a-w- c:\windows\system32\wuapi.dll.mui

2012-12-30 17:43:57 -------- d-----w- c:\windows\system32\SoftwareDistribution

2012-12-30 17:35:44 -------- d-sh--w- c:\documents and settings\michael senff\PrivacIE

2012-12-30 17:34:49 -------- d-sh--w- c:\documents and settings\michael senff\IETldCache

2012-12-30 17:33:18 -------- dc-h--w- c:\windows\ie8

2012-12-30 17:29:24 -------- d-sh--w- c:\documents and settings\michael senff\UserData

2012-12-30 17:28:10 17488 ----a-w- c:\windows\gdrv.sys

2012-12-30 17:27:40 -------- d-----w- c:\program files\common files\AVG Secure Search

2012-12-30 17:27:39 -------- d-----w- c:\program files\AVG Secure Search

2012-12-30 17:03:14 -------- d--h--w- c:\windows\$hf_mig$

2012-12-30 17:02:59 -------- d-----w- c:\program files\Microsoft Download Manager

2012-12-30 15:45:24 -------- d-----w- c:\windows\system32\Lang

2012-12-30 15:43:59 60800 -c--a-w- c:\windows\system32\dllcache\sysaudio.sys

2012-12-30 15:43:59 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys

2012-12-30 15:43:59 2944 -c--a-w- c:\windows\system32\dllcache\drmkaud.sys

2012-12-30 15:43:59 2944 ----a-w- c:\windows\system32\drivers\drmkaud.sys

2012-12-30 15:43:58 7552 -c--a-w- c:\windows\system32\dllcache\mskssrv.sys

2012-12-30 15:43:58 7552 ----a-w- c:\windows\system32\drivers\mskssrv.sys

2012-12-30 15:43:57 4992 -c--a-w- c:\windows\system32\dllcache\mspqm.sys

2012-12-30 15:43:57 4992 ----a-w- c:\windows\system32\drivers\mspqm.sys

2012-12-30 15:43:56 5376 -c--a-w- c:\windows\system32\dllcache\mspclock.sys

2012-12-30 15:43:56 5376 ----a-w- c:\windows\system32\drivers\mspclock.sys

2012-12-30 15:39:59 21468 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT

2012-12-30 15:38:58 53248 ----a-r- c:\windows\system32\CSVer.dll

2012-12-30 15:37:19 26144 ----a-w- c:\windows\system32\spupdsvc.exe

2012-12-30 15:37:16 -------- d-----w- c:\program files\MSXML 6.0

2012-12-30 15:35:44 207400 ----a-r- c:\windows\GSetup.exe

.

==================== Find3M ====================

.

2012-12-30 22:17:18 24944 ----a-w- c:\windows\system32\drivers\GVTDrv.sys

2012-12-16 12:23:59 290560 ----a-w- c:\windows\system32\atmfd.dll

2012-12-03 15:40:50 7606272 ----a-w- c:\windows\system32\nvcuda.dll

2012-12-03 15:40:50 4153600 ----a-w- c:\windows\system32\nv4_disp.dll

2012-12-03 15:40:50 2611560 ----a-w- c:\windows\system32\nvcuvid.dll

2012-12-03 15:40:50 2441728 ----a-w- c:\windows\system32\nvapi.dll

2012-12-03 15:40:50 19460096 ----a-w- c:\windows\system32\nvoglnt.dll

2012-12-03 15:40:50 1874280 ----a-w- c:\windows\system32\nvcuvenc.dll

2012-12-03 15:40:50 17551360 ----a-w- c:\windows\system32\nvcompiler.dll

2012-12-03 15:40:50 11053992 ----a-w- c:\windows\system32\drivers\nv4_mini.sys

2012-12-01 04:53:45 15524712 ----a-w- c:\windows\system32\nvcpl.dll

2012-12-01 04:53:44 164712 ----a-w- c:\windows\system32\nvsvc32.exe

2012-12-01 04:53:43 143720 ----a-w- c:\windows\system32\nvcolor.exe

2012-12-01 04:53:43 108392 ----a-w- c:\windows\system32\nvmctray.dll

2012-12-01 04:52:17 54272 ----a-w- c:\windows\system32\nvwddi.dll

2012-11-13 01:25:12 1866368 ----a-w- c:\windows\system32\win32k.sys

2012-11-02 02:02:42 375296 ----a-w- c:\windows\system32\dpnet.dll

2012-11-01 12:17:54 916992 ----a-w- c:\windows\system32\wininet.dll

2012-11-01 12:17:54 43520 ----a-w- c:\windows\system32\licmgr10.dll

2012-11-01 12:17:54 1469440 ----a-w- c:\windows\system32\inetcpl.cpl

2012-11-01 00:35:34 385024 ----a-w- c:\windows\system32\html.iec

.

============= FINISH: 10:21:37.90 ===============

Maurice Naggar · January 1, 2013

Hello MicQ,

If this system's Windows is by an OEM (manufacturer) did you remove the included 3rd-party antivirus program (if any) {such as Norton or McAfee) after you re-installed Windows?

Step 1

1. Go >> Here << and download ERUNT

(ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)

2. Install ERUNT by following the prompts

(use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)

3. Start ERUNT

(either by double clicking on the desktop icon or choosing to start the program at the end of the setup)

4. Choose a location for the backup

(the default location is C:\WINDOWS\ERDNT which is acceptable).

5. Make sure that at least the first two check boxes are ticked

6. Press OK

7. Press YES to create the folder.

Step 2

Set Windows to show all files and all folders.

On your Desktop, double click My Computer, from the menu options, select tools, then Folder Options, and then select VIEW Tab and look at all of settings listed.

"CHECK" (turn on) Display the contents of system folders.

Under column, Hidden files and folders----choose ( *select* ) Show hidden files and folders.

Next, un-check Hide extensions for known file types.

Next un-check Hide protected operating system files.

Step 3

Download Random's System Information Tool (RSIT) by random/random from here and save it to your desktop.

Double click on RSIT.exe to run RSIT.
Click Continue at the disclaimer screen.
Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

Step 4

Download Security Check by screen317 and save it to your Desktop: here or here

Run Security Check
Follow the onscreen instructions inside of the command window.
A Notepad document should open automatically called checkup.txt; close Notepad. We will need this log, too, so remember where you've saved it!

Step 5
Close all open browsers at this point.
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
For directions on how, see How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs
Do NOT turn off the firewall
Start Internet Explorer
Using Internet Explorer browser only, go to BitDefender Quickscan website:
http://quickscan.bitdefender.com
and click "Start Scan".
Observe your browser in case it shows a notice/message bar to allow download and installation of a tool.
Allow the download and install of qsax.cab from BitDefender. Right-click the IE info bar and select Install to install the BitDefender quick scan module.
If prompted, reply yes to allow it to run.
Press the Allow button and follow prompts.
Press the "Start Scan" once more.
You'll see the EULA in a pop-up window. Click the I accept & then the OK button
Note: The FAQ is here --> http://quickscan.bitdefender.com/faq/
and that QuickScan has no removal capability.
The site boasts a 60-second scan. Do have patience as it likely will take longer.
It may seem to stall at moments, but have patience; it will move on.
You'll see a progress bar at top right of window.
Hopefully you will see a No infections found in the bar-winddow. Press the View Log button.
The log report will show in your text editor. Save the log.
Do a Select ALL, Copy. Then paste contents into your next reply.
Step 6

Download & SAVE to your Desktop >> Tigzy's RogueKillerfrom here << or
>> from here <<
Quit all programs that you may have started.
Please disconnect any USB or external drives from the computer before you run this scan!
For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.
For Windows XP, double-click to start.
Wait until Prescan has finished ...
Click on Scan.
Click on Report and copy/paste the content of the notepad into your next reply.

Step 7

RE-Enable your antivirus program.

Copy & Paste contents of Log.txt & Info.txt & Checkup.txt & log from Bitdefender & RogueKiller log.

Use separate replies as needed if logs do not fit into one reply box.

MicQsenoch · January 1, 2013

If this system's Windows is by an OEM (manufacturer) did you remove the included 3rd-party antivirus program (if any) {such as Norton or McAfee) after you re-installed Windows?

Not to my knowledge. I dont remember doing that at the very least.

Step 3 logs

info.txt logfile of random's system information tool 1.09 2013-01-01 11:57:11

======Uninstall list======

@BIOS-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}\Setup.exe" -l0x9 -removeonly

-->MsiExec /X{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

Adobe Flash Player 11 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_5_502_135_ActiveX.exe -maintain activex

Adobe Flash Player 11 Plugin-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_11_5_502_135_Plugin.exe -maintain plugin

AVG Security Toolbar-->C:\Program Files\AVG Secure Search\UNINSTALL.exe /PROMPT /UNINSTALL

Easy Tune 6 B11.1206.1-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{457D7505-D665-4F95-91C3-ECB8C56E9ACA}

Enable S3 for USB Device-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Gigabyte\Enable S3 for USB Device\Uninst.isu"

ERUNT 1.1j-->"C:\Program Files\ERUNT\unins000.exe"

Etron USB3.0 Host Controller-->MsiExec.exe /I{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}

Google Chrome-->"C:\Program Files\Google\Chrome\Application\23.0.1271.97\Installer\setup.exe" --uninstall --multi-install --chrome --system-level

Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""

Hotfix for Windows XP (KB2779562)-->"C:\WINDOWS\$NtUninstallKB2779562$\spuninst\spuninst.exe"

Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"

Hotfix for Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"

Hotfix for Windows XP (KB981793)-->"C:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe"

Intel® Management Engine Components-->C:\Program Files\Intel\Intel® Management Engine Components\Uninstall\setup.exe -uninstall

Internet Explorer (Enable DEP)-->C:\WINDOWS\system32\sdbinst.exe -u "C:\WINDOWS\AppPatch\Custom\{a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb"

League of Legends-->"C:\Program Files\InstallShield Installation Information\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\setup.exe" -runfromtemp -l0x0409 -removeonly

Malwarebytes Anti-Malware version 1.70.0.1100-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"

Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

Microsoft Download Manager-->MsiExec.exe /X{654977DB-0001-0002-0001-EABD228DDE8B}

Microsoft Security Client-->MsiExec.exe /X{98EABC7F-B1A1-43A5-B505-5B4EC3908DCD}

Microsoft Security Essentials-->C:\Program Files\Microsoft Security Client\Setup.exe /x

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}

Mozilla Firefox 17.0.1 (x86 en-US)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe

Mozilla Maintenance Service-->"C:\Program Files\Mozilla Maintenance Service\uninstall.exe"

MSXML 6 Service Pack 2 (KB973686)-->MsiExec.exe /I{56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}

NVIDIA Graphics Driver 310.70-->"C:\WINDOWS\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{6BFD699C-9A30-40A2-A148-4DCA696871B1}\NVI2.DLL",UninstallPackage Display.Driver

NVIDIA HD Audio Driver 1.3.18.0-->"C:\WINDOWS\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{6BFD699C-9A30-40A2-A148-4DCA696871B1}\NVI2.DLL",UninstallPackage HDAudio.Driver

NVIDIA nView 136.53-->"C:\WINDOWS\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{6BFD699C-9A30-40A2-A148-4DCA696871B1}\NVI2.DLL",UninstallPackage Display.NView

NVIDIA nView Desktop Manager-->C:\Program Files\NVIDIA Corporation\nView\nViewSetup.exe -uninstall

NVIDIA PhysX System Software 9.12.1031-->"C:\WINDOWS\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{6BFD699C-9A30-40A2-A148-4DCA696871B1}\NVI2.DLL",UninstallPackage Display.PhysX

NVIDIA PhysX-->MsiExec.exe /I{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}

NVIDIA Update 1.11.3-->"C:\WINDOWS\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.{6BFD699C-9A30-40A2-A148-4DCA696871B1}\NVI2.DLL",UninstallPackage Display.Update

ON_OFF Charge B11.1102.1-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DECD372-76A1-4483-BF10-B547790A3261}\setup.exe" -l0x9 -removeonly

Pando Media Booster-->C:\Program Files\Pando Networks\Media Booster\uninst.exe

REALTEK GbE & FE Ethernet PCI-E NIC Driver-->C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\Setup.Exe -runfromtemp -removeonly

Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\SETUP.EXE" -l0x9 -removeonly

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {94EFE014-E577-310B-B2D5-6973A21D8A90} /qb+ REBOOTPROMPT=""

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {F6F5AC31-9833-3E77-AC8E-8E910CAB39AE} /qb+ REBOOTPROMPT=""

Security Update for Microsoft Windows (KB2564958)-->"C:\WINDOWS\$NtUninstallKB2564958$\spuninst\spuninst.exe"

Security Update for Windows Internet Explorer 8 (KB2510531)-->"C:\WINDOWS\ie8updates\KB2510531-IE8\spuninst\spuninst.exe"

Security Update for Windows Internet Explorer 8 (KB2544521)-->"C:\WINDOWS\ie8updates\KB2544521-IE8\spuninst\spuninst.exe"

Security Update for Windows Internet Explorer 8 (KB2761465)-->"C:\WINDOWS\ie8updates\KB2761465-IE8\spuninst\spuninst.exe"

Security Update for Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"

Security Update for Windows Internet Explorer 8 (KB981332)-->"C:\WINDOWS\ie8updates\KB981332-IE8\spuninst\spuninst.exe"

Security Update for Windows Internet Explorer 8 (KB982381)-->"C:\WINDOWS\ie8updates\KB982381-IE8\spuninst\spuninst.exe"

Security Update for Windows Media Player (KB2378111)-->"C:\WINDOWS\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe"

Security Update for Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"

Security Update for Windows Media Player (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"

Security Update for Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"

Security Update for Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9L$\spuninst\spuninst.exe"

Security Update for Windows Media Player (KB975558)-->"C:\WINDOWS\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe"

Security Update for Windows Media Player (KB978695)-->"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe"

Security Update for Windows Media Player (KB979402)-->"C:\WINDOWS\$NtUninstallKB979402_WM9L$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2115168)-->"C:\WINDOWS\$NtUninstallKB2115168$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2229593)-->"C:\WINDOWS\$NtUninstallKB2229593$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2296011)-->"C:\WINDOWS\$NtUninstallKB2296011$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2347290)-->"C:\WINDOWS\$NtUninstallKB2347290$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2360937)-->"C:\WINDOWS\$NtUninstallKB2360937$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2387149)-->"C:\WINDOWS\$NtUninstallKB2387149$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2393802)-->"C:\WINDOWS\$NtUninstallKB2393802$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2419632)-->"C:\WINDOWS\$NtUninstallKB2419632$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2423089)-->"C:\WINDOWS\$NtUninstallKB2423089$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2440591)-->"C:\WINDOWS\$NtUninstallKB2440591$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2443105)-->"C:\WINDOWS\$NtUninstallKB2443105$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2476490)-->"C:\WINDOWS\$NtUninstallKB2476490$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2478960)-->"C:\WINDOWS\$NtUninstallKB2478960$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2478971)-->"C:\WINDOWS\$NtUninstallKB2478971$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2479943)-->"C:\WINDOWS\$NtUninstallKB2479943$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2481109)-->"C:\WINDOWS\$NtUninstallKB2481109$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2483185)-->"C:\WINDOWS\$NtUninstallKB2483185$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2485663)-->"C:\WINDOWS\$NtUninstallKB2485663$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2506212)-->"C:\WINDOWS\$NtUninstallKB2506212$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2507938)-->"C:\WINDOWS\$NtUninstallKB2507938$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2508429)-->"C:\WINDOWS\$NtUninstallKB2508429$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2509553)-->"C:\WINDOWS\$NtUninstallKB2509553$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2535512)-->"C:\WINDOWS\$NtUninstallKB2535512$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2536276-v2)-->"C:\WINDOWS\$NtUninstallKB2536276-v2$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2544893-v2)-->"C:\WINDOWS\$NtUninstallKB2544893-v2$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2566454)-->"C:\WINDOWS\$NtUninstallKB2566454$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2570947)-->"C:\WINDOWS\$NtUninstallKB2570947$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2584146)-->"C:\WINDOWS\$NtUninstallKB2584146$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2585542)-->"C:\WINDOWS\$NtUninstallKB2585542$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2592799)-->"C:\WINDOWS\$NtUninstallKB2592799$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2598479)-->"C:\WINDOWS\$NtUninstallKB2598479$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2603381)-->"C:\WINDOWS\$NtUninstallKB2603381$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2618451)-->"C:\WINDOWS\$NtUninstallKB2618451$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2619339)-->"C:\WINDOWS\$NtUninstallKB2619339$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2620712)-->"C:\WINDOWS\$NtUninstallKB2620712$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2624667)-->"C:\WINDOWS\$NtUninstallKB2624667$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2631813)-->"C:\WINDOWS\$NtUninstallKB2631813$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2646524)-->"C:\WINDOWS\$NtUninstallKB2646524$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2653956)-->"C:\WINDOWS\$NtUninstallKB2653956$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2655992)-->"C:\WINDOWS\$NtUninstallKB2655992$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2659262)-->"C:\WINDOWS\$NtUninstallKB2659262$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2661637)-->"C:\WINDOWS\$NtUninstallKB2661637$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2676562)-->"C:\WINDOWS\$NtUninstallKB2676562$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2686509)-->"C:\WINDOWS\$NtUninstallKB2686509$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2691442)-->"C:\WINDOWS\$NtUninstallKB2691442$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2698365)-->"C:\WINDOWS\$NtUninstallKB2698365$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2705219-v2)-->"C:\WINDOWS\$NtUninstallKB2705219-v2$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2712808)-->"C:\WINDOWS\$NtUninstallKB2712808$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2719985)-->"C:\WINDOWS\$NtUninstallKB2719985$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2723135-v2)-->"C:\WINDOWS\$NtUninstallKB2723135-v2$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2724197)-->"C:\WINDOWS\$NtUninstallKB2724197$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2727528)-->"C:\WINDOWS\$NtUninstallKB2727528$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2753842-v2)-->"C:\WINDOWS\$NtUninstallKB2753842-v2$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2758857)-->"C:\WINDOWS\$NtUninstallKB2758857$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2770660)-->"C:\WINDOWS\$NtUninstallKB2770660$\spuninst\spuninst.exe"

Security Update for Windows XP (KB2779030)-->"C:\WINDOWS\$NtUninstallKB2779030$\spuninst\spuninst.exe"

Security Update for Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"

Security Update for Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf

Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"

Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"

Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"

Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"

Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"

Security Update for Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"

Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"

Security Update for Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"

Security Update for Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"

Security Update for Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"

Security Update for Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"

Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"

Security Update for Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"

Security Update for Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"

Security Update for Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"

Security Update for Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"

Security Update for Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"

Security Update for Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"

Security Update for Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"

Security Update for Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"

Security Update for Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"

Security Update for Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"

Security Update for Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"

Security Update for Windows XP (KB971468)-->"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"

Security Update for Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"

Security Update for Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"

Security Update for Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"

Security Update for Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"

Security Update for Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"

Security Update for Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"

Security Update for Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"

Security Update for Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"

Security Update for Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"

Security Update for Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"

Security Update for Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"

Security Update for Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"

Security Update for Windows XP (KB975561)-->"C:\WINDOWS\$NtUninstallKB975561$\spuninst\spuninst.exe"

Security Update for Windows XP (KB975562)-->"C:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe"

Security Update for Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"

Security Update for Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"

Security Update for Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"

Security Update for Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"

Security Update for Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"

Security Update for Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"

Security Update for Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"

Security Update for Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"

Security Update for Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"

Security Update for Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"

Security Update for Windows XP (KB979559)-->"C:\WINDOWS\$NtUninstallKB979559$\spuninst\spuninst.exe"

Security Update for Windows XP (KB979683)-->"C:\WINDOWS\$NtUninstallKB979683$\spuninst\spuninst.exe"

Security Update for Windows XP (KB979687)-->"C:\WINDOWS\$NtUninstallKB979687$\spuninst\spuninst.exe"

Security Update for Windows XP (KB980195)-->"C:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe"

Security Update for Windows XP (KB980218)-->"C:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe"

Security Update for Windows XP (KB980232)-->"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe"

Security Update for Windows XP (KB981322)-->"C:\WINDOWS\$NtUninstallKB981322$\spuninst\spuninst.exe"

Security Update for Windows XP (KB981997)-->"C:\WINDOWS\$NtUninstallKB981997$\spuninst\spuninst.exe"

Security Update for Windows XP (KB982132)-->"C:\WINDOWS\$NtUninstallKB982132$\spuninst\spuninst.exe"

Security Update for Windows XP (KB982665)-->"C:\WINDOWS\$NtUninstallKB982665$\spuninst\spuninst.exe"

SUPERAntiSpyware-->"C:\Program Files\SUPERAntiSpyware\Uninstall.exe"

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""

Update for Windows Internet Explorer 8 (KB976662)-->"C:\WINDOWS\ie8updates\KB976662-IE8\spuninst\spuninst.exe"

Update for Windows XP (KB2345886)-->"C:\WINDOWS\$NtUninstallKB2345886$\spuninst\spuninst.exe"

Update for Windows XP (KB2661254-v2)-->"C:\WINDOWS\$NtUninstallKB2661254-v2$\spuninst\spuninst.exe"

Update for Windows XP (KB2736233)-->"C:\WINDOWS\$NtUninstallKB2736233$\spuninst\spuninst.exe"

Update for Windows XP (KB2749655)-->"C:\WINDOWS\$NtUninstallKB2749655$\spuninst\spuninst.exe"

Update for Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"

Update for Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"

Update for Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"

Update for Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"

Update for Windows XP (KB971029)-->"C:\WINDOWS\$NtUninstallKB971029$\spuninst\spuninst.exe"

Update for Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"

Update for Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"

Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"

Windows PowerShell 1.0-->"C:\WINDOWS\$NtUninstallKB926139-v2$\spuninst\spuninst.exe"

Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"

======Security center information======

AV: Microsoft Security Essentials

======System event log======

Computer Name: DEEZGOOD-D8793A

Event Code: 7023

Message: The Application Management service terminated with the following error:

The specified module could not be found.

Record Number: 877

Source Name: Service Control Manager

Time Written: 20121230142407.000000-360

Event Type: error

User:

Computer Name: DEEZGOOD-D8793A

Event Code: 7023

Message: The Application Management service terminated with the following error:

The specified module could not be found.

Record Number: 874

Source Name: Service Control Manager

Time Written: 20121230142407.000000-360

Event Type: error

User:

Computer Name: DEEZGOOD-D8793A

Event Code: 7023

Message: The Application Management service terminated with the following error:

The specified module could not be found.

Record Number: 871

Source Name: Service Control Manager

Time Written: 20121230142407.000000-360

Event Type: error

User:

Computer Name: DEEZGOOD-D8793A

Event Code: 4226

Message: TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

Record Number: 827

Source Name: Tcpip

Time Written: 20121230141129.000000-360

Event Type: warning

User:

Computer Name: DEEZGOOD-D8793A

Event Code: 20

Message: Printer Driver Microsoft XPS Document Writer for Windows NT x86 Version-3 was added or updated. Files:- (null).

Record Number: 753

Source Name: Print

Time Written: 20121230124707.000000-360

Event Type: warning

User: NT AUTHORITY\SYSTEM

=====Application event log=====

Computer Name: DEEZGOOD-D8793A

Event Code: 5000

Message:

Record Number: 193

Source Name: Microsoft Security Client

Time Written: 20121230120438.000000-360

Event Type: error

User:

Computer Name: DEEZGOOD-D8793A

Event Code: 5000

Message: EventType mptelemetry, P1 0x80070003, P2 moac, P3 cachereset, P4 4.1.522.0, P5 unspecified, P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10 NIL.

Record Number: 190

Source Name: MPSampleSubmission

Time Written: 20121230120236.000000-360

Event Type: error

User:

Computer Name: DEEZGOOD-D8793A

Event Code: 1000

Message: Faulting application iexplore.exe, version 8.0.6001.18702, faulting module kernel32.dll, version 5.1.2600.2180, fault address 0x0000a2c8.

Record Number: 183

Source Name: Application Error

Time Written: 20121230120127.000000-360

Event Type: error

User:

Computer Name: DEEZGOOD-D8793A

Event Code: 1000

Message: Faulting application iexplore.exe, version 8.0.6001.18702, faulting module kernel32.dll, version 5.1.2600.2180, fault address 0x0000a2c8.

Record Number: 178

Source Name: Application Error

Time Written: 20121230120000.000000-360

Event Type: error

User:

Computer Name: DEEZGOOD-D8793A

Event Code: 1000

Message: Faulting application iexplore.exe, version 8.0.6001.18702, faulting module kernel32.dll, version 5.1.2600.2180, fault address 0x0000a2c8.

Record Number: 176

Source Name: Application Error

Time Written: 20121230115930.000000-360

Event Type: error

User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe

"Path"=C:\Program Files\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\WINDOWS\system32\WindowsPowerShell\v1.0

"windir"=%SystemRoot%

"FP_NO_HOST_CHECK"=NO

"OS"=Windows_NT

"PROCESSOR_ARCHITECTURE"=x86

"PROCESSOR_LEVEL"=6

"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 42 Stepping 7, GenuineIntel

"PROCESSOR_REVISION"=2a07

"NUMBER_OF_PROCESSORS"=4

"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.PSC1

"TEMP"=%SystemRoot%\TEMP

"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------

MicQsenoch · January 1, 2013

Logfile of random's system information tool 1.09 (written by random/random)

Run by Michael Senff at 2013-01-01 11:57:05

Microsoft Windows XP Home Edition Service Pack 3

System drive C: has 50 GB (70%) free of 71 GB

Total RAM: 3564 MB (75% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 11:57:10 AM, on 1/1/2013

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

c:\Program Files\Microsoft Security Client\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe

C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files\AVG Secure Search\vprot.exe

C:\WINDOWS\system32\RunDLL32.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Pando Networks\Media Booster\PMB.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Program Files\ERUNT\ERUNT.EXE

C:\Documents and Settings\Michael Senff\My Documents\Downloads\RSIT.exe

C:\Program Files\trend micro\Michael Senff.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://isearch.avg.com/?cid={E63FE547-FCA7-4CEE-A237-B076D05B947B}&mid=〈=&ds=&pr=&d=&v=&sap=hp

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll

O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login

O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet

O4 - HKLM\..\RunOnce: [Z1] C:\Documents and Settings\Michael Senff\Desktop\mbar\mbar.exe /cleanup /s

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1356889323531

O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\13.2.0\ViProtocol.dll

O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: AppleChargerSrv - Unknown owner - C:\WINDOWS\system32\AppleChargerSrv.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe

O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe

O23 - Service: vToolbarUpdater13.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe

--

End of file - 6300 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job

C:\WINDOWS\tasks\MpIdleTask.job

C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task 8fdb9f41-1323-4f9b-89f5-9acb22c206d6.job

C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task f741a3d6-a2d2-44a2-a58b-53aee11d3046.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Michael Senff\Application Data\Mozilla\Firefox\Profiles\8v50ytho.default

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

"avg@toolbar"=C:\Documents and Settings\All Users\Application Data\AVG Secure Search\FireFoxExt\13.2.0.5

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]

"Description"=Adobe® Flash® Player 11.5.502.135 Plugin

"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin]

"Description"=

"Path"=C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\13.2.0\\npsitesafety.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/DownloadManager,version=1.1]

"Description"=Microsoft Download Manager

"Path"=C:\WINDOWS\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]

"Description"=Windows Presentation Foundation plug-in for Mozilla browsers

"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]

"Description"=This plugin detects and launches Pando Media Booster

"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]

"Description"=Google Update

"Path"=C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]

"Description"=Google Update

"Path"=C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll

C:\Program Files\Mozilla Firefox\extensions\

{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\

binary.manifest

browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\

amazondotcom.xml

avg-secure-search.xml

bing.xml

eBay.xml

google.xml

twitter.xml

wikipedia.xml

yahoo.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

AVG Security Toolbar - C:\Program Files\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll [2012-12-31 1796552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - C:\Program Files\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll [2012-12-31 1796552]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2011-10-14 20064872]

"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 947176]

"vProt"=C:\Program Files\AVG Secure Search\vprot.exe [2012-12-31 997320]

"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2012-11-30 15524712]

"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit -login []

"nwiz"=C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2012-12-03 1982312]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"Z1"=C:\Documents and Settings\Michael Senff\Desktop\mbar\mbar.exe [2013-01-01 1342312]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]

"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2012-11-01 4763008]

"Pando Media Booster"=C:\Program Files\Pando Networks\Media Booster\PMB.exe [2012-12-30 3093624]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2011-07-18 113024]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"

"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

"C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe:*:Enabled:Daemonu.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"midimapper"=midimap.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msadpcm"=msadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.trspch"=tssoft32.acm

"vidc.cvid"=iccvid.dll

"vidc.I420"=msh263.drv

"vidc.iv31"=ir32_32.dll

"vidc.iv32"=ir32_32.dll

"vidc.iv41"=ir41_32.ax

"vidc.iyuv"=iyuv_32.dll

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"vidc.uyvy"=msyuv.dll

"vidc.yuy2"=msyuv.dll

"vidc.yvu9"=tsbyuv.dll

"vidc.yvyu"=msyuv.dll

"wavemapper"=msacm32.drv

"msacm.msg723"=msg723.acm

"vidc.M263"=msh263.drv

"vidc.M261"=msh261.drv

"msacm.msaudio1"=msaud32.acm

"msacm.sl_anet"=sl_anet.acm

"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax

"vidc.iv50"=ir50_32.dll

"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"wave2"=wdmaud.drv

"midi2"=wdmaud.drv

"mixer2"=wdmaud.drv

"wave3"=wdmaud.drv

"midi3"=wdmaud.drv

"mixer3"=wdmaud.drv

"wave4"=wdmaud.drv

"midi4"=wdmaud.drv

"mixer4"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-01-01 11:57:05 ----D---- C:\rsit

2013-01-01 11:57:05 ----D---- C:\Program Files\trend micro

2013-01-01 11:51:48 ----D---- C:\Program Files\ERUNT

2013-01-01 09:43:27 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys

2012-12-31 18:12:57 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe

2012-12-31 18:12:55 ----D---- C:\Program Files\AGEIA Technologies

2012-12-31 18:12:22 ----D---- C:\Documents and Settings\Michael Senff\Application Data\AVG Secure Search

2012-12-31 18:11:27 ----A---- C:\WINDOWS\system32\nvhdagenco3220103.dll

2012-12-31 18:11:25 ----A---- C:\WINDOWS\system32\nvopencl.dll

2012-12-31 18:11:25 ----A---- C:\WINDOWS\system32\nvdispgenco32.dll

2012-12-31 18:11:25 ----A---- C:\WINDOWS\system32\nvdispco32.dll

2012-12-31 18:03:49 ----D---- C:\Documents and Settings\All Users\Application Data\AVG Secure Search

2012-12-31 18:03:47 ----D---- C:\WINDOWS\system32\cache

2012-12-31 18:03:45 ----A---- C:\WINDOWS\system32\drivers\avgtpx86.sys

2012-12-30 16:21:30 ----D---- C:\Documents and Settings\Michael Senff\Application Data\LolClient

2012-12-30 16:05:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$

2012-12-30 16:05:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$

2012-12-30 16:04:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$

2012-12-30 16:04:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$

2012-12-30 16:04:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$

2012-12-30 16:04:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$

2012-12-30 16:04:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2758857$

2012-12-30 16:04:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$

2012-12-30 16:04:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$

2012-12-30 16:04:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$

2012-12-30 16:04:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$

2012-12-30 16:04:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2779030$

2012-12-30 16:03:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$

2012-12-30 16:03:54 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$

2012-12-30 16:03:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$

2012-12-30 16:03:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$

2012-12-30 16:03:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$

2012-12-30 16:02:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$

2012-12-30 16:02:04 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$

2012-12-30 16:02:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2779562$

2012-12-30 16:01:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$

2012-12-30 16:01:51 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$

2012-12-30 16:01:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$

2012-12-30 16:01:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$

2012-12-30 16:00:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2724197$

2012-12-30 16:00:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$

2012-12-30 16:00:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$

2012-12-30 16:00:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$

2012-12-30 16:00:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$

2012-12-30 16:00:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2736233$

2012-12-30 15:59:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$

2012-12-30 15:59:53 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$

2012-12-30 15:59:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$

2012-12-30 15:59:42 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$

2012-12-30 15:59:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$

2012-12-30 15:59:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$

2012-12-30 15:59:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$

2012-12-30 15:59:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$

2012-12-30 15:58:57 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$

2012-12-30 15:57:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$

2012-12-30 15:57:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$

2012-12-30 15:57:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2753842-v2$

2012-12-30 15:57:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$

2012-12-30 15:57:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$

2012-12-30 15:56:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$

2012-12-30 15:56:25 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$

2012-12-30 15:56:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$

2012-12-30 15:56:13 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$

2012-12-30 15:56:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$

2012-12-30 15:56:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$

2012-12-30 15:55:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$

2012-12-30 15:55:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$

2012-12-30 15:55:42 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$

2012-12-30 15:55:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$

2012-12-30 15:55:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$

2012-12-30 15:55:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$

2012-12-30 15:55:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$

2012-12-30 15:55:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$

2012-12-30 15:55:11 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$

2012-12-30 15:55:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2723135-v2$

2012-12-30 15:55:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$

2012-12-30 15:54:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2661254-v2$

2012-12-30 15:54:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$

2012-12-30 15:54:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$

2012-12-30 15:52:19 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$

2012-12-30 15:49:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$

2012-12-30 15:49:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$

2012-12-30 15:49:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$

2012-12-30 15:49:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$

2012-12-30 15:49:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2661637$

2012-12-30 15:49:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$

2012-12-30 15:49:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$

2012-12-30 15:49:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$

2012-12-30 15:19:57 ----A---- C:\WINDOWS\system32\XAudio2_2.dll

2012-12-30 15:19:57 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll

2012-12-30 15:19:57 ----A---- C:\WINDOWS\system32\d3dx10_39.dll

2012-12-30 15:19:57 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll

2012-12-30 15:19:56 ----A---- C:\WINDOWS\system32\D3DX9_39.dll

2012-12-30 15:19:53 ----D---- C:\WINDOWS\Logs

2012-12-30 15:13:05 ----D---- C:\Riot Games

2012-12-30 14:35:56 ----N---- C:\WINDOWS\system32\iacenc.dll

2012-12-30 14:30:26 ----D---- C:\Documents and Settings\All Users\Application Data\PMB Files

2012-12-30 14:30:18 ----D---- C:\Program Files\Pando Networks

2012-12-30 14:30:15 ----A---- C:\WINDOWS\system32\mucltui.dll

2012-12-30 14:28:23 ----D---- C:\Documents and Settings\Michael Senff\Application Data\Adobe

2012-12-30 14:27:23 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe

2012-12-30 14:25:39 ----D---- C:\Documents and Settings\Michael Senff\Application Data\MSNInstaller

2012-12-30 14:23:53 ----D---- C:\Documents and Settings\Michael Senff\Application Data\Mozilla

2012-12-30 14:23:44 ----D---- C:\Program Files\Mozilla Maintenance Service

2012-12-30 14:23:44 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla

2012-12-30 14:23:31 ----D---- C:\Program Files\Mozilla Firefox

2012-12-30 14:17:08 ----D---- C:\Documents and Settings\All Users\Application Data\NVIDIA

2012-12-30 14:16:47 ----D---- C:\Documents and Settings\All Users\Application Data\NVIDIA Corporation

2012-12-30 14:14:54 ----A---- C:\WINDOWS\system32\OpenCL.dll

2012-12-30 14:14:54 ----A---- C:\WINDOWS\system32\nvoglnt.dll

2012-12-30 14:14:54 ----A---- C:\WINDOWS\system32\nvhdap32.dll

2012-12-30 14:14:54 ----A---- C:\WINDOWS\system32\nvhdagenco322040.dll

2012-12-30 14:14:54 ----A---- C:\WINDOWS\system32\nvgenco322060.dll

2012-12-30 14:14:54 ----A---- C:\WINDOWS\system32\nvdispco3220140.dll

2012-12-30 14:14:54 ----A---- C:\WINDOWS\system32\nvcuvid.dll

2012-12-30 14:14:54 ----A---- C:\WINDOWS\system32\nvcuvenc.dll

2012-12-30 14:14:54 ----A---- C:\WINDOWS\system32\nvcuda.dll

2012-12-30 14:14:54 ----A---- C:\WINDOWS\system32\drivers\nvhda32.sys

2012-12-30 14:14:52 ----A---- C:\WINDOWS\system32\nvcompiler.dll

2012-12-30 14:14:52 ----A---- C:\WINDOWS\system32\nvapi.dll

2012-12-30 14:14:42 ----D---- C:\Program Files\NVIDIA Corporation

2012-12-30 14:13:51 ----D---- C:\NVIDIA

2012-12-30 13:03:45 ----A---- C:\WINDOWS\system32\d3d9caps.dat

2012-12-30 13:01:47 ----D---- C:\Program Files\Google

2012-12-30 13:01:47 ----D---- C:\Documents and Settings\Michael Senff\Application Data\SUPERAntiSpyware.com

2012-12-30 13:01:40 ----D---- C:\Program Files\SUPERAntiSpyware

2012-12-30 13:01:40 ----D---- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com

2012-12-30 12:58:35 ----D---- C:\Documents and Settings\Michael Senff\Application Data\Malwarebytes

2012-12-30 12:58:24 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes

2012-12-30 12:58:23 ----D---- C:\Program Files\Malwarebytes' Anti-Malware

2012-12-30 12:58:23 ----A---- C:\WINDOWS\system32\drivers\mbam.sys

2012-12-30 12:50:41 ----D---- C:\Documents and Settings\Michael Senff\Application Data\ElevatedDiagnostics

2012-12-30 12:49:48 ----D---- C:\WINDOWS\system32\windowspowershell

2012-12-30 12:49:44 ----HDC---- C:\WINDOWS\$NtUninstallKB926139-v2$

2012-12-30 12:46:34 ----D---- C:\WINDOWS\Prefetch

2012-12-30 12:45:33 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$

2012-12-30 12:45:29 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$

2012-12-30 12:45:24 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$

2012-12-30 12:45:20 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$

2012-12-30 12:45:17 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$

2012-12-30 12:45:14 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$

2012-12-30 12:45:10 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$

2012-12-30 12:45:07 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$

2012-12-30 12:45:04 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$

2012-12-30 12:45:00 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$

2012-12-30 12:44:57 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$

2012-12-30 12:44:53 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$

2012-12-30 12:44:49 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$

2012-12-30 12:44:45 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$

2012-12-30 12:44:42 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$

2012-12-30 12:44:38 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$

2012-12-30 12:44:34 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$

2012-12-30 12:44:31 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$

2012-12-30 12:44:28 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$

2012-12-30 12:44:24 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$

2012-12-30 12:44:21 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$

2012-12-30 12:44:18 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$

2012-12-30 12:44:14 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$

2012-12-30 12:44:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$

2012-12-30 12:44:07 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$

2012-12-30 12:44:04 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$

2012-12-30 12:44:00 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$

2012-12-30 12:43:57 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$

2012-12-30 12:43:53 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$

2012-12-30 12:43:50 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$

2012-12-30 12:43:47 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$

2012-12-30 12:43:42 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$

2012-12-30 12:43:38 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$

2012-12-30 12:43:35 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$

2012-12-30 12:43:29 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$

2012-12-30 12:43:25 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$

2012-12-30 12:43:22 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$

2012-12-30 12:43:19 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$

2012-12-30 12:43:15 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$

2012-12-30 12:43:12 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$

2012-12-30 12:43:09 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$

2012-12-30 12:43:05 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$

2012-12-30 12:43:02 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$

2012-12-30 12:42:56 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$

2012-12-30 12:42:51 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$

2012-12-30 12:42:47 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$

2012-12-30 12:42:44 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$

2012-12-30 12:42:41 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$

2012-12-30 12:42:37 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$

2012-12-30 12:42:33 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$

2012-12-30 12:42:29 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$

2012-12-30 12:42:25 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$

2012-12-30 12:42:22 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$

2012-12-30 12:42:19 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$

2012-12-30 12:42:16 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$

2012-12-30 12:42:12 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$

2012-12-30 12:42:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$

2012-12-30 12:40:53 ----D---- C:\WINDOWS\system32\scripting

2012-12-30 12:40:53 ----D---- C:\WINDOWS\system32\en

2012-12-30 12:40:53 ----D---- C:\WINDOWS\system32\bits

2012-12-30 12:40:53 ----D---- C:\WINDOWS\l2schemas

2012-12-30 12:38:40 ----D---- C:\WINDOWS\network diagnostic

2012-12-30 12:36:50 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$

2012-12-30 12:36:49 ----D---- C:\WINDOWS\EHome

2012-12-30 12:28:45 ----HDC---- C:\WINDOWS\$NtUninstallKB980218_0$

2012-12-30 12:28:42 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$

2012-12-30 12:28:38 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$

2012-12-30 12:28:34 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$

2012-12-30 12:28:29 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$

2012-12-30 12:28:26 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$

2012-12-30 12:28:22 ----HDC---- C:\WINDOWS\$NtUninstallKB960859_0$

2012-12-30 12:27:21 ----HDC---- C:\WINDOWS\$NtUninstallKB971468_0$

2012-12-30 12:27:15 ----HDC---- C:\WINDOWS\$NtUninstallKB979683_0$

2012-12-30 12:27:06 ----HDC---- C:\WINDOWS\$NtUninstallKB935448$

2012-12-30 12:27:03 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$

2012-12-30 12:27:00 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$

2012-12-30 12:26:57 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$

2012-12-30 12:26:49 ----HDC---- C:\WINDOWS\$NtUninstallKB980232_0$

2012-12-30 12:26:44 ----HDC---- C:\WINDOWS\$NtUninstallKB955759_0$

2012-12-30 12:26:40 ----HDC---- C:\WINDOWS\$NtUninstallKB974318_0$

2012-12-30 12:26:36 ----HDC---- C:\WINDOWS\$NtUninstallKB969059_0$

2012-12-30 12:26:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593_0$

2012-12-30 12:26:27 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$

2012-12-30 12:26:23 ----HDC---- C:\WINDOWS\$NtUninstallKB978037_0$

2012-12-30 12:26:19 ----HDC---- C:\WINDOWS\$NtUninstallKB975713_0$

2012-12-30 12:26:14 ----HDC---- C:\WINDOWS\$NtUninstallKB971657_0$

2012-12-30 12:26:10 ----HDC---- C:\WINDOWS\$NtUninstallKB978338_0$

2012-12-30 12:26:01 ----HDC---- C:\WINDOWS\$NtUninstallKB961118_0$

2012-12-30 12:25:58 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$

2012-12-30 12:25:54 ----HDC---- C:\WINDOWS\$NtUninstallKB972270_0$

2012-12-30 12:24:31 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_0$

2012-12-30 12:24:19 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$

2012-12-30 12:24:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956844_0$

2012-12-30 12:24:09 ----HDC---- C:\WINDOWS\$NtUninstallKB961501_0$

2012-12-30 12:22:51 ----HDC---- C:\WINDOWS\$NtUninstallKB975561_0$

2012-12-30 12:22:41 ----HDC---- C:\WINDOWS\$NtUninstallKB925720$

2012-12-30 12:22:38 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$

2012-12-30 12:22:35 ----HDC---- C:\WINDOWS\$NtUninstallKB973869_0$

2012-12-30 12:22:32 ----HDC---- C:\WINDOWS\$NtUninstallKB975025_0$

2012-12-30 12:22:29 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$

2012-12-30 12:22:24 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$

2012-12-30 12:22:21 ----HDC---- C:\WINDOWS\$NtUninstallKB974571_0$

2012-12-30 12:22:17 ----HDC---- C:\WINDOWS\$NtUninstallKB975560_0$

2012-12-30 12:22:13 ----HDC---- C:\WINDOWS\$NtUninstallKB973507_0$

2012-12-30 12:22:10 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$

2012-12-30 12:22:06 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_0$

2012-12-30 12:22:02 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$

2012-12-30 12:21:59 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$

2012-12-30 12:21:56 ----HDC---- C:\WINDOWS\$NtUninstallKB978601_0$

2012-12-30 12:21:52 ----HDC---- C:\WINDOWS\$NtUninstallKB979559_0$

2012-12-30 12:21:36 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$

2012-12-30 12:21:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$

2012-12-30 12:21:26 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$

2012-12-30 12:21:23 ----HDC---- C:\WINDOWS\$NtUninstallKB974392_0$

2012-12-30 12:21:15 ----HDC---- C:\WINDOWS\$NtUninstallKB977914_0$

2012-12-30 12:21:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_0$

2012-12-30 12:21:03 ----HDC---- C:\WINDOWS\$NtUninstallKB978542_0$

2012-12-30 12:20:58 ----HDC---- C:\WINDOWS\$NtUninstallKB970238_0$

2012-12-30 12:20:55 ----HDC---- C:\WINDOWS\$NtUninstallKB979309_0$

2012-12-30 12:20:51 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$

2012-12-30 12:20:48 ----HDC---- C:\WINDOWS\$NtUninstallKB979482_0$

2012-12-30 12:20:45 ----HDC---- C:\WINDOWS\$NtUninstallKB978706_0$

2012-12-30 12:20:40 ----D---- C:\WINDOWS\ServicePackFiles

2012-12-30 12:20:38 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$

2012-12-30 12:20:32 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$

2012-12-30 12:20:29 ----HDC---- C:\WINDOWS\$NtUninstallKB973815_0$

2012-12-30 12:20:25 ----HDC---- C:\WINDOWS\$NtUninstallKB975562_0$

2012-12-30 12:19:05 ----D---- C:\WINDOWS\ie8updates

2012-12-30 12:19:01 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$

2012-12-30 12:18:55 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$

2012-12-30 12:18:51 ----HDC---- C:\WINDOWS\$NtUninstallKB979402_WM9L$

2012-12-30 12:17:47 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_0$

2012-12-30 12:17:34 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$

2012-12-30 12:17:14 ----A---- C:\WINDOWS\system32\MRT.exe

2012-12-30 12:17:08 ----HDC---- C:\WINDOWS\$NtUninstallKB975467_0$

2012-12-30 12:17:03 ----HDC---- C:\WINDOWS\$NtUninstallKB968389_0$

2012-12-30 12:15:17 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys

2012-12-30 12:15:17 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys

2012-12-30 12:15:16 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys

2012-12-30 12:15:16 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys

2012-12-30 12:15:16 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys

2012-12-30 12:15:16 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys

2012-12-30 12:15:16 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys

2012-12-30 12:15:16 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys

2012-12-30 12:15:16 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys

2012-12-30 12:15:16 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys

2012-12-30 12:15:16 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys

2012-12-30 12:15:15 ----N---- C:\WINDOWS\system32\drivers\recagent.sys

2012-12-30 12:15:15 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys

2012-12-30 12:15:15 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys

2012-12-30 12:15:15 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys

2012-12-30 12:15:15 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys

2012-12-30 12:15:15 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys

2012-12-30 12:15:12 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys

2012-12-30 12:15:12 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys

2012-12-30 12:15:11 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys

2012-12-30 12:15:11 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys

2012-12-30 12:14:25 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys

2012-12-30 12:07:36 ----N---- C:\WINDOWS\system32\drivers\bthport.sys

2012-12-30 12:05:04 ----N---- C:\WINDOWS\system32\tzchange.exe

2012-12-30 12:04:14 ----N---- C:\WINDOWS\system32\MpSigStub.exe

2012-12-30 12:03:25 ----A---- C:\WINDOWS\system32\xpsp4res.dll

2012-12-30 12:03:25 ----A---- C:\WINDOWS\system32\xpsp3res.dll

2012-12-30 12:02:08 ----D---- C:\Program Files\Microsoft Security Client

2012-12-30 11:58:37 ----D---- C:\Documents and Settings\Michael Senff\Application Data\Macromedia

2012-12-30 11:58:34 ----A---- C:\WINDOWS\system32\wpa.bak

2012-12-30 11:56:32 ----D---- C:\Documents and Settings\Michael Senff\Application Data\MicrosoftSecurityEssentialsPackages

2012-12-30 11:54:29 ----HDC---- C:\WINDOWS\$NtUninstallKB914882$

2012-12-30 11:51:16 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage

2012-12-30 11:50:51 ----D---- C:\WINDOWS\system32\PreInstall

2012-12-30 11:50:50 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$

2012-12-30 11:43:58 ----A---- C:\WINDOWS\system32\wups2.dll

2012-12-30 11:43:57 ----D---- C:\WINDOWS\system32\SoftwareDistribution

2012-12-30 11:33:53 ----D---- C:\WINDOWS\WBEM

2012-12-30 11:33:18 ----HDC---- C:\WINDOWS\ie8

2012-12-30 11:28:10 ----A---- C:\WINDOWS\gdrv.sys

2012-12-30 11:28:08 ----D---- C:\WINDOWS\Minidump

2012-12-30 11:27:40 ----D---- C:\Program Files\Common Files\AVG Secure Search

2012-12-30 11:27:39 ----D---- C:\Program Files\AVG Secure Search

2012-12-30 11:03:20 ----N---- C:\WINDOWS\system32\spmsg.dll

2012-12-30 11:03:18 ----HDC---- C:\WINDOWS\$NtUninstallKB932823-v3$

2012-12-30 11:03:14 ----HD---- C:\WINDOWS\$hf_mig$

2012-12-30 11:02:59 ----D---- C:\Program Files\Microsoft Download Manager

2012-12-30 09:45:24 ----D---- C:\WINDOWS\system32\Lang

2012-12-30 09:44:07 ----A---- C:\WINDOWS\system32\drivers\splitter.sys

2012-12-30 09:44:06 ----A---- C:\WINDOWS\system32\drivers\GVTDrv.sys

2012-12-30 09:44:05 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys

2012-12-30 09:44:04 ----A---- C:\WINDOWS\system32\drivers\dmusic.sys

2012-12-30 09:44:02 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys

2012-12-30 09:44:01 ----A---- C:\WINDOWS\system32\drivers\aec.sys

2012-12-30 09:44:00 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys

2012-12-30 09:43:59 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys

2012-12-30 09:43:59 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys

2012-12-30 09:43:58 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys

2012-12-30 09:43:57 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys

2012-12-30 09:43:56 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys

2012-12-30 09:41:59 ----D---- C:\Program Files\AMD

2012-12-30 09:41:28 ----A---- C:\WINDOWS\system32\drivers\AppleCharger.sys

2012-12-30 09:41:28 ----A---- C:\WINDOWS\system32\AppleChargerSrv.exe

2012-12-30 09:41:23 ----D---- C:\Program Files\Gigabyte

2012-12-30 09:41:17 ----A---- C:\WINDOWS\system32\drivers\IntelMEFWVer.dll

2012-12-30 09:41:16 ----A---- C:\WINDOWS\system32\log.txt

2012-12-30 09:41:16 ----A---- C:\WINDOWS\IsUninst.exe

2012-12-30 09:41:14 ----D---- C:\Program Files\Common Files\postureAgent

2012-12-30 09:41:11 ----A---- C:\WINDOWS\system32\drivers\HECI.sys

2012-12-30 09:41:11 ----A---- C:\WINDOWS\system32\difxapi.dll

2012-12-30 09:40:58 ----D---- C:\Documents and Settings\Michael Senff\Application Data\InstallShield

2012-12-30 09:40:39 ----D---- C:\WINDOWS\system32\RTCOM

2012-12-30 09:40:36 ----A---- C:\WINDOWS\system32\ksuser.dll

2012-12-30 09:40:36 ----A---- C:\WINDOWS\system32\drivers\drmk.sys

2012-12-30 09:40:26 ----D---- C:\Program Files\Etron Technology

2012-12-30 09:40:24 ----A---- C:\WINDOWS\system32\RTNUninst32.dll

2012-12-30 09:40:24 ----A---- C:\WINDOWS\system32\RtNicProp32.dll

2012-12-30 09:40:24 ----A---- C:\WINDOWS\system32\drivers\Rtenicxp.sys

2012-12-30 09:40:14 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$

2012-12-30 09:40:11 ----A---- C:\WINDOWS\vncutil.exe

2012-12-30 09:40:10 ----A---- C:\WINDOWS\SOUNDMAN.EXE

2012-12-30 09:40:10 ----A---- C:\WINDOWS\SkyTel.exe

2012-12-30 09:40:09 ----A---- C:\WINDOWS\RtlUpd.exe

2012-12-30 09:40:07 ----A---- C:\WINDOWS\system32\RtkCoLDRXP.dll

2012-12-30 09:40:07 ----A---- C:\WINDOWS\system32\RtkCoInstIIXP.dll

2012-12-30 09:40:07 ----A---- C:\WINDOWS\system32\drivers\RtkHDAud.sys

2012-12-30 09:40:07 ----A---- C:\WINDOWS\RtkAudioService.exe

2012-12-30 09:40:05 ----A---- C:\WINDOWS\RTLCPL.EXE

2012-12-30 09:39:59 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT

2012-12-30 09:39:59 ----A---- C:\WINDOWS\RTHDCPL.EXE

2012-12-30 09:39:58 ----A---- C:\WINDOWS\system32\drivers\Monfilt.sys

2012-12-30 09:39:57 ----A---- C:\WINDOWS\MicCal.exe

2012-12-30 09:39:47 ----A---- C:\WINDOWS\ALCMTR.EXE

2012-12-30 09:39:46 ----A---- C:\WINDOWS\ALCWZRD.EXE

2012-12-30 09:39:45 ----D---- C:\Program Files\Realtek

2012-12-30 09:39:45 ----A---- C:\WINDOWS\system32\drivers\Ambfilt.sys

2012-12-30 09:39:44 ----HD---- C:\Program Files\InstallShield Installation Information

2012-12-30 09:39:40 ----R---- C:\WINDOWS\RtlExUpd.dll

2012-12-30 09:39:35 ----D---- C:\Program Files\Common Files\InstallShield

2012-12-30 09:39:00 ----D---- C:\WINDOWS\system32\ReinstallBackups

2012-12-30 09:38:58 ----RA---- C:\WINDOWS\system32\CSVer.dll

2012-12-30 09:38:58 ----DC---- C:\WINDOWS\system32\DRVSTORE

2012-12-30 09:38:58 ----D---- C:\Program Files\Intel

2012-12-30 09:38:53 ----D---- C:\Intel

2012-12-30 09:38:19 ----D---- C:\WINDOWS\system32\XPSViewer

2012-12-30 09:38:17 ----D---- C:\WINDOWS\system32\en-US

2012-12-30 09:38:17 ----D---- C:\Program Files\MSBuild

2012-12-30 09:38:14 ----D---- C:\Program Files\Reference Assemblies

2012-12-30 09:38:00 ----N---- C:\WINDOWS\system32\xpssvcs.dll

2012-12-30 09:38:00 ----N---- C:\WINDOWS\system32\xpsshhdr.dll

2012-12-30 09:38:00 ----N---- C:\WINDOWS\system32\prntvpt.dll

2012-12-30 09:38:00 ----D---- C:\931dd4e9d3fec63017e138d3

2012-12-30 09:37:43 ----RSD---- C:\WINDOWS\assembly

2012-12-30 09:37:34 ----D---- C:\WINDOWS\Microsoft.NET

2012-12-30 09:37:19 ----A---- C:\WINDOWS\system32\spupdsvc.exe

2012-12-30 09:37:18 ----HDC---- C:\WINDOWS\$NtUninstallWIC$

2012-12-30 09:37:16 ----D---- C:\Program Files\MSXML 6.0

2012-12-30 09:36:12 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$

2012-12-30 09:35:44 ----RA---- C:\WINDOWS\GSetup.exe

2012-12-30 09:35:44 ----A---- C:\WINDOWS\GSetup.ini

2012-12-29 13:34:51 ----A---- C:\WINDOWS\system32\h323log.txt

2012-12-29 13:29:24 ----A---- C:\WINDOWS\system32\drivers\audstub.sys

2012-12-29 13:29:01 ----A---- C:\WINDOWS\system32\drivers\redbook.sys

2012-12-29 13:28:28 ----A---- C:\WINDOWS\system32\usbui.dll

2012-12-29 13:27:47 ----A---- C:\WINDOWS\imsins.BAK

2012-12-29 13:27:45 ----SHD---- C:\WINDOWS\Installer

2012-12-29 13:27:45 ----D---- C:\Program Files\Common Files\ODBC

2012-12-29 13:27:45 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

2012-12-29 13:27:45 ----A---- C:\WINDOWS\ODBCINST.INI

2012-12-29 13:27:42 ----D---- C:\Program Files\Common Files\SpeechEngines

2012-12-29 13:27:41 ----RD---- C:\Program Files

2012-12-29 13:27:41 ----D---- C:\Program Files\Common Files\Microsoft Shared

2012-12-29 13:27:41 ----D---- C:\Program Files\Common Files

2012-12-29 13:27:39 ----RA---- C:\WINDOWS\system32\kbdtuq.dll

2012-12-29 13:27:39 ----RA---- C:\WINDOWS\system32\kbdtuf.dll

2012-12-29 13:27:39 ----RA---- C:\WINDOWS\system32\kbdazel.dll

2012-12-29 13:27:37 ----RA---- C:\WINDOWS\system32\kbdycc.dll

2012-12-29 13:27:37 ----RA---- C:\WINDOWS\system32\kbduzb.dll

2012-12-29 13:27:37 ----RA---- C:\WINDOWS\system32\kbdur.dll

2012-12-29 13:27:37 ----RA---- C:\WINDOWS\system32\kbdtat.dll

2012-12-29 13:27:37 ----RA---- C:\WINDOWS\system32\kbdru1.dll

2012-12-29 13:27:37 ----RA---- C:\WINDOWS\system32\kbdru.dll

2012-12-29 13:27:37 ----RA---- C:\WINDOWS\system32\kbdmon.dll

2012-12-29 13:27:37 ----RA---- C:\WINDOWS\system32\kbdkyr.dll

2012-12-29 13:27:37 ----RA---- C:\WINDOWS\system32\kbdkaz.dll

2012-12-29 13:27:37 ----RA---- C:\WINDOWS\system32\kbdaze.dll

2012-12-29 13:27:36 ----RA---- C:\WINDOWS\system32\kbdbu.dll

2012-12-29 13:27:36 ----RA---- C:\WINDOWS\system32\kbdblr.dll

2012-12-29 13:27:35 ----RA---- C:\WINDOWS\system32\kbdhept.dll

2012-12-29 13:27:35 ----RA---- C:\WINDOWS\system32\kbdhela3.dll

2012-12-29 13:27:35 ----RA---- C:\WINDOWS\system32\kbdhela2.dll

2012-12-29 13:27:35 ----RA---- C:\WINDOWS\system32\kbdhe319.dll

2012-12-29 13:27:34 ----RA---- C:\WINDOWS\system32\kbdhe220.dll

2012-12-29 13:27:34 ----RA---- C:\WINDOWS\system32\kbdhe.dll

2012-12-29 13:27:34 ----RA---- C:\WINDOWS\system32\kbdgkl.dll

2012-12-29 13:27:33 ----RA---- C:\WINDOWS\system32\kbdlv1.dll

2012-12-29 13:27:33 ----RA---- C:\WINDOWS\system32\kbdlv.dll

2012-12-29 13:27:33 ----RA---- C:\WINDOWS\system32\kbdlt1.dll

2012-12-29 13:27:33 ----RA---- C:\WINDOWS\system32\kbdlt.dll

2012-12-29 13:27:33 ----RA---- C:\WINDOWS\system32\kbdest.dll

2012-12-29 13:27:31 ----RA---- C:\WINDOWS\system32\kbdsl1.dll

2012-12-29 13:27:31 ----RA---- C:\WINDOWS\system32\kbdsl.dll

2012-12-29 13:27:31 ----RA---- C:\WINDOWS\system32\kbdro.dll

2012-12-29 13:27:31 ----RA---- C:\WINDOWS\system32\kbdpl1.dll

2012-12-29 13:27:31 ----RA---- C:\WINDOWS\system32\kbdpl.dll

2012-12-29 13:27:30 ----RA---- C:\WINDOWS\system32\kbdycl.dll

2012-12-29 13:27:30 ----RA---- C:\WINDOWS\system32\kbdhu1.dll

2012-12-29 13:27:30 ----RA---- C:\WINDOWS\system32\kbdhu.dll

2012-12-29 13:27:30 ----RA---- C:\WINDOWS\system32\kbdcz2.dll

2012-12-29 13:27:30 ----RA---- C:\WINDOWS\system32\kbdcz1.dll

2012-12-29 13:27:30 ----RA---- C:\WINDOWS\system32\kbdcz.dll

2012-12-29 13:27:30 ----RA---- C:\WINDOWS\system32\kbdcr.dll

2012-12-29 13:27:30 ----RA---- C:\WINDOWS\system32\KBDAL.DLL

2012-12-29 13:27:29 ----A---- C:\WINDOWS\system32\irclass.dll

2012-12-29 13:27:29 ----A---- C:\WINDOWS\system32\dgrpsetu.dll

2012-12-29 13:27:28 ----A---- C:\WINDOWS\system32\spxcoins.dll

2012-12-29 13:27:28 ----A---- C:\WINDOWS\system32\EqnClass.Dll

2012-12-29 13:27:28 ----A---- C:\WINDOWS\system32\dgsetup.dll

2012-12-29 13:27:26 ----N---- C:\WINDOWS\system32\CONFIG.TMP

2012-12-29 13:27:26 ----A---- C:\WINDOWS\TASKMAN.EXE

2012-12-29 13:27:26 ----A---- C:\WINDOWS\system32\drivers\irenum.sys

2012-12-29 13:27:26 ----A---- C:\WINDOWS\system32\batt.dll

2012-12-29 13:27:25 ----A---- C:\WINDOWS\system32\storprop.dll

2012-12-29 13:27:25 ----A---- C:\WINDOWS\notepad.exe

2012-12-29 13:27:20 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini

2012-12-29 13:27:18 ----RA---- C:\WINDOWS\SET8.tmp

2012-12-29 13:27:15 ----RA---- C:\WINDOWS\SET4.tmp

2012-12-29 13:27:14 ----RA---- C:\WINDOWS\SET3.tmp

2012-12-29 13:27:10 ----D---- C:\WINDOWS\system32\CatRoot2

2012-12-29 13:27:10 ----D---- C:\WINDOWS\system32\CatRoot

2012-12-29 13:27:04 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft

2012-12-29 13:26:46 ----A---- C:\WINDOWS\setuplog.txt

2012-12-29 13:26:45 ----D---- C:\Documents and Settings

2012-12-29 13:26:44 ----SHD---- C:\System Volume Information

2012-12-29 13:26:44 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT

2012-12-29 13:26:07 ----SH---- C:\boot.ini

2012-12-29 13:20:21 ----RSHDC---- C:\WINDOWS\system32\dllcache

2012-12-29 13:20:21 ----RSD---- C:\WINDOWS\Fonts

2012-12-29 13:20:21 ----RD---- C:\WINDOWS\Web

2012-12-29 13:20:21 ----HD---- C:\WINDOWS\inf

2012-12-29 13:20:21 ----D---- C:\WINDOWS\WinSxS

2012-12-29 13:20:21 ----D---- C:\WINDOWS\twain_32

2012-12-29 13:20:21 ----D---- C:\WINDOWS\Temp

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\wins

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\wbem

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\usmt

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\spool

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\ShellExt

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\Setup

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\ras

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\oobe

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\npp

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\mui

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\inetsrv

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\IME

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\icsxml

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\ias

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\export

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\drivers\etc

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\drivers\disdn

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\drivers

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\dhcp

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\config

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\3com_dmi

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\3076

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\2052

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\1054

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\1042

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\1041

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\1037

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\1033

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\1031

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\1028

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32\1025

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system32

2012-12-29 13:20:21 ----D---- C:\WINDOWS\system

2012-12-29 13:20:21 ----D---- C:\WINDOWS\security

2012-12-29 13:20:21 ----D---- C:\WINDOWS\Resources

2012-12-29 13:20:21 ----D---- C:\WINDOWS\repair

2012-12-29 13:20:21 ----D---- C:\WINDOWS\Provisioning

2012-12-29 13:20:21 ----D---- C:\WINDOWS\PeerNet

2012-12-29 13:20:21 ----D---- C:\WINDOWS\pchealth

2012-12-29 13:20:21 ----D---- C:\WINDOWS\mui

2012-12-29 13:20:21 ----D---- C:\WINDOWS\msapps

2012-12-29 13:20:21 ----D---- C:\WINDOWS\msagent

2012-12-29 13:20:21 ----D---- C:\WINDOWS\Media

2012-12-29 13:20:21 ----D---- C:\WINDOWS\java

2012-12-29 13:20:21 ----D---- C:\WINDOWS\ime

2012-12-29 13:20:21 ----D---- C:\WINDOWS\Help

2012-12-29 13:20:21 ----D---- C:\WINDOWS\Driver Cache

2012-12-29 13:20:21 ----D---- C:\WINDOWS\Debug

2012-12-29 13:20:21 ----D---- C:\WINDOWS\Cursors

2012-12-29 13:20:21 ----D---- C:\WINDOWS\Connection Wizard

2012-12-29 13:20:21 ----D---- C:\WINDOWS\Config

2012-12-29 13:20:21 ----D---- C:\WINDOWS\AppPatch

2012-12-29 13:20:21 ----D---- C:\WINDOWS\addins

2012-12-29 13:20:21 ----D---- C:\WINDOWS

2012-12-29 13:20:21 ----ASH---- C:\pagefile.sys

2012-12-29 12:56:36 ----D---- C:\Program Files\Common Files\Adobe

2012-12-29 12:53:14 ----SHD---- C:\RECYCLER

2012-12-29 12:41:55 ----D---- C:\Documents and Settings\Michael Senff\Application Data\Identities

2012-12-29 12:41:54 ----HD---- C:\Program Files\Uninstall Information

2012-12-29 12:41:52 ----ASH---- C:\Documents and Settings\Michael Senff\Application Data\desktop.ini

2012-12-29 12:41:51 ----SD---- C:\Documents and Settings\Michael Senff\Application Data\Microsoft

2012-12-29 12:41:19 ----D---- C:\WINDOWS\SoftwareDistribution

2012-12-29 12:41:18 ----SD---- C:\WINDOWS\system32\Microsoft

2012-12-29 12:41:18 ----A---- C:\WINDOWS\SchedLgU.Txt

2012-12-29 12:40:27 ----AS---- C:\WINDOWS\bootstat.dat

2012-12-29 12:39:26 ----D---- C:\WINDOWS\system32\xircom

2012-12-29 12:39:26 ----D---- C:\Program Files\xerox

2012-12-29 12:39:26 ----D---- C:\Program Files\microsoft frontpage

2012-12-29 12:39:20 ----RASH---- C:\MSDOS.SYS

2012-12-29 12:39:20 ----RASH---- C:\IO.SYS

2012-12-29 12:39:20 ----A---- C:\WINDOWS\control.ini

2012-12-29 12:39:20 ----A---- C:\CONFIG.SYS

2012-12-29 12:39:20 ----A---- C:\AUTOEXEC.BAT

2012-12-29 12:39:15 ----A---- C:\WINDOWS\OEWABLog.txt

2012-12-29 12:39:13 ----A---- C:\WINDOWS\system32\mapi32.dll

2012-12-29 12:38:49 ----SD---- C:\WINDOWS\Downloaded Program Files

2012-12-29 12:38:49 ----RD---- C:\WINDOWS\Offline Web Pages

2012-12-29 12:38:44 ----HD---- C:\Program Files\WindowsUpdate

2012-12-29 12:38:29 ----D---- C:\WINDOWS\system32\DirectX

2012-12-29 12:38:10 ----A---- C:\WINDOWS\system32\atrace.dll

2012-12-29 12:38:07 ----A---- C:\WINDOWS\system32\desktop.ini

2012-12-29 12:38:07 ----A---- C:\WINDOWS\desktop.ini

2012-12-29 12:38:01 ----A---- C:\WINDOWS\system32\nmevtmsg.dll

2012-12-29 12:38:00 ----A---- C:\WINDOWS\system32\acctres.dll

2012-12-29 12:37:59 ----D---- C:\Program Files\Common Files\Services

2012-12-29 12:37:57 ----SD---- C:\WINDOWS\Tasks

2012-12-29 12:37:57 ----A---- C:\WINDOWS\system32\icfgnt5.dll

2012-12-29 12:37:56 ----D---- C:\Program Files\Common Files\MSSoap

2012-12-29 12:37:52 ----D---- C:\WINDOWS\srchasst

2012-12-29 12:37:51 ----D---- C:\WINDOWS\system32\Macromed

2012-12-29 12:37:48 ----A---- C:\WINDOWS\system32\wuweb.dll

2012-12-29 12:37:48 ----A---- C:\WINDOWS\system32\wucltui.dll

2012-12-29 12:37:48 ----A---- C:\WINDOWS\system32\wuauserv.dll

2012-12-29 12:37:48 ----A---- C:\WINDOWS\system32\wuaueng1.dll

2012-12-29 12:37:47 ----A---- C:\WINDOWS\system32\wups.dll

2012-12-29 12:37:47 ----A---- C:\WINDOWS\system32\wuaueng.dll

2012-12-29 12:37:47 ----A---- C:\WINDOWS\system32\wuauclt1.exe

2012-12-29 12:37:47 ----A---- C:\WINDOWS\system32\wuauclt.exe

2012-12-29 12:37:47 ----A---- C:\WINDOWS\system32\wuapi.dll

2012-12-29 12:37:47 ----A---- C:\WINDOWS\system32\bitsprx3.dll

2012-12-29 12:37:47 ----A---- C:\WINDOWS\system32\bitsprx2.dll

2012-12-29 12:37:46 ----A---- C:\WINDOWS\system32\qmgrprxy.dll

2012-12-29 12:37:46 ----A---- C:\WINDOWS\system32\qmgr.dll

2012-12-29 12:37:42 ----D---- C:\Program Files\Movie Maker

2012-12-29 12:37:39 ----A---- C:\WINDOWS\system32\safrslv.dll

2012-12-29 12:37:39 ----A---- C:\WINDOWS\system32\safrdm.dll

2012-12-29 12:37:39 ----A---- C:\WINDOWS\system32\safrcdlg.dll

2012-12-29 12:37:38 ----A---- C:\WINDOWS\system32\racpldlg.dll

2012-12-29 12:37:35 ----A---- C:\WINDOWS\system32\fltmc.exe

2012-12-29 12:37:35 ----A---- C:\WINDOWS\system32\fltlib.dll

2012-12-29 12:37:35 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys

2012-12-29 12:37:34 ----D---- C:\WINDOWS\system32\Restore

2012-12-29 12:37:34 ----A---- C:\WINDOWS\system32\srsvc.dll

2012-12-29 12:37:34 ----A---- C:\WINDOWS\system32\srrstr.dll

2012-12-29 12:37:34 ----A---- C:\WINDOWS\system32\srclient.dll

2012-12-29 12:37:34 ----A---- C:\WINDOWS\system32\drivers\sr.sys

2012-12-29 12:37:33 ----A---- C:\WINDOWS\system32\nmmkcert.dll

2012-12-29 12:37:33 ----A---- C:\WINDOWS\system32\msconf.dll

2012-12-29 12:37:33 ----A---- C:\WINDOWS\system32\mnmsrvc.exe

2012-12-29 12:37:33 ----A---- C:\WINDOWS\system32\mnmdd.dll

2012-12-29 12:37:33 ----A---- C:\WINDOWS\system32\isrdbg32.dll

2012-12-29 12:37:33 ----A---- C:\WINDOWS\system32\ils.dll

2012-12-29 12:37:30 ----D---- C:\Program Files\NetMeeting

2012-12-29 12:37:30 ----A---- C:\WINDOWS\system32\msoert2.dll

2012-12-29 12:37:30 ----A---- C:\WINDOWS\system32\msoeacct.dll

2012-12-29 12:37:29 ----A---- C:\WINDOWS\system32\inetres.dll

2012-12-29 12:37:28 ----A---- C:\WINDOWS\system32\inetcomm.dll

2012-12-29 12:37:26 ----D---- C:\Program Files\Outlook Express

2012-12-29 12:37:26 ----A---- C:\WINDOWS\system32\schedsvc.dll

2012-12-29 12:37:26 ----A---- C:\WINDOWS\system32\mstinit.exe

2012-12-29 12:37:26 ----A---- C:\WINDOWS\system32\mstask.dll

2012-12-29 12:37:25 ----A---- C:\WINDOWS\system32\isign32.dll

2012-12-29 12:37:25 ----A---- C:\WINDOWS\system32\inetcfg.dll

2012-12-29 12:37:25 ----A---- C:\WINDOWS\system32\icwphbk.dll

2012-12-29 12:37:25 ----A---- C:\WINDOWS\system32\icwdial.dll

2012-12-29 12:37:20 ----D---- C:\Program Files\Common Files\System

2012-12-29 12:37:19 ----D---- C:\Program Files\Internet Explorer

2012-12-29 12:37:17 ----A---- C:\WINDOWS\system32\emptyregdb.dat

2012-12-29 12:37:11 ----D---- C:\Program Files\ComPlus Applications

2012-12-29 12:37:10 ----A---- C:\WINDOWS\vbaddin.ini

2012-12-29 12:37:10 ----A---- C:\WINDOWS\vb.ini

2012-12-29 12:37:07 ----D---- C:\WINDOWS\Registration

2012-12-29 12:36:53 ----D---- C:\Program Files\Windows Media Player

2012-12-29 12:36:53 ----D---- C:\Program Files\Online Services

2012-12-29 12:36:50 ----D---- C:\Program Files\Messenger

2012-12-29 12:36:46 ----D---- C:\Program Files\MSN Gaming Zone

2012-12-29 12:36:46 ----A---- C:\WINDOWS\system32\write.exe

2012-12-29 12:36:39 ----A---- C:\WINDOWS\system32\sndvol32.exe

2012-12-29 12:36:39 ----A---- C:\WINDOWS\system32\hticons.dll

2012-12-29 12:36:38 ----A---- C:\WINDOWS\system32\winchat.exe

2012-12-29 12:36:38 ----A---- C:\WINDOWS\system32\avwav.dll

2012-12-29 12:36:38 ----A---- C:\WINDOWS\system32\avtapi.dll

2012-12-29 12:36:38 ----A---- C:\WINDOWS\system32\avmeter.dll

2012-12-29 12:36:32 ----A---- C:\WINDOWS\system32\getuname.dll

2012-12-29 12:36:32 ----A---- C:\WINDOWS\system32\charmap.exe

2012-12-29 12:36:31 ----A---- C:\WINDOWS\system32\winmine.exe

2012-12-29 12:36:31 ----A---- C:\WINDOWS\system32\sol.exe

2012-12-29 12:36:31 ----A---- C:\WINDOWS\system32\mshearts.exe

2012-12-29 12:36:31 ----A---- C:\WINDOWS\system32\calc.exe

2012-12-29 12:36:30 ----A---- C:\WINDOWS\system32\usrlogon.cmd

2012-12-29 12:36:30 ----A---- C:\WINDOWS\system32\tsshutdn.exe

2012-12-29 12:36:30 ----A---- C:\WINDOWS\system32\tslabels.ini

2012-12-29 12:36:30 ----A---- C:\WINDOWS\system32\tskill.exe

2012-12-29 12:36:30 ----A---- C:\WINDOWS\system32\tsdiscon.exe

2012-12-29 12:36:30 ----A---- C:\WINDOWS\system32\tscon.exe

2012-12-29 12:36:30 ----A---- C:\WINDOWS\system32\shadow.exe

2012-12-29 12:36:30 ----A---- C:\WINDOWS\system32\rwinsta.exe

2012-12-29 12:36:30 ----A---- C:\WINDOWS\system32\reset.exe

2012-12-29 12:36:30 ----A---- C:\WINDOWS\system32\regini.exe

2012-12-29 12:36:30 ----A---- C:\WINDOWS\system32\rdpcfgex.dll

2012-12-29 12:36:30 ----A---- C:\WINDOWS\system32\qwinsta.exe

2012-12-29 12:36:30 ----A---- C:\WINDOWS\system32\freecell.exe

2012-12-29 12:36:29 ----A---- C:\WINDOWS\system32\qappsrv.exe

2012-12-29 12:36:29 ----A---- C:\WINDOWS\system32\msg.exe

2012-12-29 12:36:29 ----A---- C:\WINDOWS\system32\msdtcprf.ini

2012-12-29 12:36:29 ----A---- C:\WINDOWS\system32\logoff.exe

2012-12-29 12:36:29 ----A---- C:\WINDOWS\system32\cdmodem.dll

2012-12-29 12:36:28 ----A---- C:\WINDOWS\system32\stclient.dll

2012-12-29 12:36:28 ----A---- C:\WINDOWS\system32\mtxlegih.dll

2012-12-29 12:36:28 ----A---- C:\WINDOWS\system32\mtxex.dll

2012-12-29 12:36:28 ----A---- C:\WINDOWS\system32\mtxdm.dll

2012-12-29 12:36:28 ----A---- C:\WINDOWS\system32\dcomcnfg.exe

2012-12-29 12:36:28 ----A---- C:\WINDOWS\system32\comsnap.dll

2012-12-29 12:36:28 ----A---- C:\WINDOWS\system32\comrepl.dll

2012-12-29 12:36:28 ----A---- C:\WINDOWS\system32\comaddin.dll

2012-12-29 12:36:24 ----A---- C:\WINDOWS\system32\wmimgmt.msc

2012-12-29 12:36:09 ----D---- C:\Program Files\MSN

2012-12-29 12:36:08 ----A---- C:\WINDOWS\system32\sndrec32.exe

2012-12-29 12:36:08 ----A---- C:\WINDOWS\system32\accwiz.exe

2012-12-29 12:36:07 ----D---- C:\Program Files\Windows NT

2012-12-29 12:36:07 ----A---- C:\WINDOWS\system32\mspaint.exe

2012-12-29 12:36:07 ----A---- C:\WINDOWS\system32\mplay32.exe

2012-12-29 12:36:07 ----A---- C:\WINDOWS\system32\hypertrm.dll

2012-12-29 12:36:06 ----A---- C:\WINDOWS\system32\tscfgwmi.dll

2012-12-29 12:36:06 ----A---- C:\WINDOWS\system32\spider.exe

2012-12-29 12:36:06 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys

2012-12-29 12:36:06 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys

2012-12-29 12:36:06 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys

2012-12-29 12:36:06 ----A---- C:\WINDOWS\system32\clipbrd.exe

2012-12-29 12:36:05 ----A---- C:\WINDOWS\system32\sessmgr.exe

2012-12-29 12:36:05 ----A---- C:\WINDOWS\system32\remotepg.dll

2012-12-29 12:36:05 ----A---- C:\WINDOWS\system32\rdshost.exe

2012-12-29 12:36:05 ----A---- C:\WINDOWS\system32\rdsaddin.exe

2012-12-29 12:36:05 ----A---- C:\WINDOWS\system32\mstscax.dll

2012-12-29 12:36:05 ----A---- C:\WINDOWS\system32\mstsc.exe

2012-12-29 12:36:04 ----A---- C:\WINDOWS\system32\tscupgrd.exe

2012-12-29 12:36:04 ----A---- C:\WINDOWS\system32\termsrv.dll

2012-12-29 12:36:04 ----A---- C:\WINDOWS\system32\rdpwsx.dll

2012-12-29 12:36:04 ----A---- C:\WINDOWS\system32\rdpsnd.dll

2012-12-29 12:36:04 ----A---- C:\WINDOWS\system32\rdpclip.exe

2012-12-29 12:36:04 ----A---- C:\WINDOWS\system32\rdchost.dll

2012-12-29 12:36:04 ----A---- C:\WINDOWS\system32\qprocess.exe

2012-12-29 12:36:04 ----A---- C:\WINDOWS\system32\icaapi.dll

2012-12-29 12:36:04 ----A---- C:\WINDOWS\system32\cfgbkend.dll

2012-12-29 12:36:03 ----D---- C:\WINDOWS\system32\MsDtc

2012-12-29 12:36:03 ----A---- C:\WINDOWS\system32\mtxoci.dll

2012-12-29 12:36:03 ----A---- C:\WINDOWS\system32\msdtcuiu.dll

2012-12-29 12:36:03 ----A---- C:\WINDOWS\system32\msdtctm.dll

2012-12-29 12:36:03 ----A---- C:\WINDOWS\system32\msdtcprx.dll

2012-12-29 12:36:02 ----A---- C:\WINDOWS\system32\xolehlp.dll

2012-12-29 12:36:02 ----A---- C:\WINDOWS\system32\msdtclog.dll

2012-12-29 12:36:02 ----A---- C:\WINDOWS\system32\msdtc.exe

2012-12-29 12:36:01 ----D---- C:\WINDOWS\system32\Com

2012-12-29 12:36:01 ----A---- C:\WINDOWS\system32\colbact.dll

2012-12-29 12:36:01 ----A---- C:\WINDOWS\system32\clbcatex.dll

2012-12-29 12:36:01 ----A---- C:\WINDOWS\system32\catsrvut.dll

2012-12-29 12:36:01 ----A---- C:\WINDOWS\system32\catsrvps.dll

2012-12-29 12:36:01 ----A---- C:\WINDOWS\system32\catsrv.dll

2012-12-29 12:36:00 ----A---- C:\WINDOWS\system32\comuid.dll

2012-12-29 12:36:00 ----A---- C:\WINDOWS\system32\comsvcs.dll

2012-12-29 12:35:59 ----A---- C:\WINDOWS\system32\clbcatq.dll

2012-12-29 12:35:55 ----A---- C:\WINDOWS\system32\servdeps.dll

2012-12-29 12:35:54 ----A---- C:\WINDOWS\system32\mmfutil.dll

2012-12-29 12:35:54 ----A---- C:\WINDOWS\system32\licwmi.dll

2012-12-29 12:35:54 ----A---- C:\WINDOWS\system32\cmprops.dll

2012-12-29 12:35:51 ----A---- C:\WINDOWS\system32\drivers\termdd.sys

2012-12-29 12:35:51 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys

======List of files/folders modified in the last 1 month======

2012-12-29 13:27:41 ----A---- C:\WINDOWS\system.ini

2012-12-29 12:39:20 ----A---- C:\WINDOWS\win.ini

2012-12-29 12:39:07 ----ASH---- C:\WINDOWS\fonts\desktop.ini

2012-12-16 06:23:59 ----A---- C:\WINDOWS\system32\atmfd.dll

2012-12-03 09:40:50 ----A---- C:\WINDOWS\system32\nv4_disp.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\WINDOWS\system32\DRIVERS\MpFilter.sys [2012-08-30 193552]

R1 AppleCharger;AppleCharger; C:\WINDOWS\system32\DRIVERS\AppleCharger.sys [2011-11-02 19056]

R1 avgtp;avgtp; \??\C:\WINDOWS\system32\drivers\avgtpx86.sys []

R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]

R1 MpKslbb24b5ac;MpKslbb24b5ac; \??\c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{03167648-FD3C-4EDC-A195-A457655F447E}\MpKslbb24b5ac.sys []

R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []

R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []

R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\WINDOWS\System32\Drivers\EtronHub3.sys [2011-08-17 45056]

R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\WINDOWS\System32\Drivers\EtronXHCI.sys [2011-08-17 64896]

R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]

R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2011-11-22 6452328]

R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []

R3 MEI;Intel® Management Engine Interface; C:\WINDOWS\system32\DRIVERS\HECI.sys [2010-09-21 41088]

R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-04 12160]

R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2012-12-03 11053992]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2012-07-03 124264]

R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2011-08-24 323816]

S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-17 1691480]

S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []

S3 GENERICDRV;GENERICDRV; \??\C:\Program Files\GIGABYTE\ET6\amifldrv32.sys []

S3 GVTDrv;GVTDrv; \??\C:\WINDOWS\system32\Drivers\GVTDrv.sys []

S3 mbamchameleon;mbamchameleon; \??\C:\WINDOWS\system32\drivers\mbamchameleon.sys []

S3 mbr;mbr; \??\C:\DOCUME~1\MICHAE~1\LOCALS~1\Temp\mbr.sys []

S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-17 1395800]

S3 ndiscm;Motorola SURFboard USB Cable Modem Windows Driver; C:\WINDOWS\system32\DRIVERS\NetMotCM.sys []

S3 usbstor;usbstor; C:\WINDOWS\system32\drivers\usbstor.sys [2008-04-13 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [2012-07-11 116608]

R2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe [2010-10-05 325656]

R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344]

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 20472]

R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2012-11-30 164712]

R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-03 1259880]

R2 UNS;Intel® Management and Security Application User Notification Service; C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]

R2 vToolbarUpdater13.2.0;vToolbarUpdater13.2.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe [2012-12-31 711112]

S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-12-31 116648]

S2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-12-14 398184]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-31 250808]

S3 AppleChargerSrv;AppleChargerSrv; C:\WINDOWS\system32\AppleChargerSrv.exe [2010-04-06 31272]

S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]

S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]

S3 gupdatem;Google Update Service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-12-31 116648]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]

S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]

S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-11-29 115168]

S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

MicQsenoch · January 1, 2013

Step 4 log

Results of screen317's Security Check version 0.99.56

Windows XP Service Pack 3 x86

Internet Explorer 8

``````````````Antivirus/Firewall Check:``````````````

Windows Firewall Enabled!

AVG Security Toolbar

Microsoft Security Essentials

`````````Anti-malware/Other Utilities Check:`````````

SUPERAntiSpyware

Malwarebytes Anti-Malware version 1.70.0.1100

Adobe Flash Player 11.5.502.135

Mozilla Firefox (17.0.1)

Google Chrome 22.0.1229.95

Google Chrome 23.0.1271.97

````````Process Check: objlist.exe by Laurent````````

Microsoft Security Essentials MSMpEng.exe

Microsoft Security Essentials msseces.exe

Malwarebytes Anti-Malware mbamservice.exe

Malwarebytes Anti-Malware mbamgui.exe

`````````````````System Health check`````````````````

Total Fragmentation on Drive C:: 26% Defragment your hard drive soon! (Do NOT defrag if SSD!)

````````````````````End of Log``````````````````````

MicQsenoch · January 1, 2013

Step 5

Ran bit deffender and it did not find anything, however i did not see a button that would give me any log.

Step 6 Report

RogueKiller V8.4.2 [Dec 31 2012] by Tigzy

mail : tigzyRK<at>gmail<dot>com

Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/

Website : http://tigzy.geekstogo.com/roguekiller.php

Blog : http://tigzyrk.blogspot.com/

Operating System : Windows XP (5.1.2600 Service Pack 3) 32 bits version

Started in : Normal mode

User : Michael Senff [Admin rights]

Mode : Scan -- Date : 01/01/2013 12:22:22

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 2 ¤¤¤

[RUN][sUSP PATH] HKLM\[...]\RunOnce : Z1 (C:\Documents and Settings\Michael Senff\Desktop\mbar\mbar.exe /cleanup /s) -> FOUND

[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤

SSDT[257] : NtTerminateProcess @ 0x805D22D8 -> HOOKED (\??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS @ 0xB4528640)

¤¤¤ HOSTS File: ¤¤¤

--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: WDC WD740GD-00FLC0 +++++

--- User ---

[MBR] 7a1a556ce49d71bcb5d738cd79245330

[bSP] 10c4b9629b14d9b3e29e74b07b251d9d : Windows XP MBR Code

Partition table:

0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 70896 Mo

User = LL1 ... OK!

User = LL2 ... OK!

Finished : << RKreport[1]_S_01012013_02d1222.txt >>

RKreport[1]_S_01012013_02d1222.txt

MicQsenoch · January 1, 2013

FYI, will be heading to a new years party. Will be back later this afternoon.

Maurice Naggar · January 1, 2013

Did you get and run Malwarebytes Anti-rootkit on your own? Please delete MBAR.exe on your desktop.

And if you did not buy S*perantispyware, kindly remove it from auto-starting with Windows.

While I am helping you, for the duration & until I give the all clear, do NOT get or run any tools or fixes, nor make changes without first checking with me.

Just please follow my guidance.

Disable your anti-virus program, How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs
Please disconnect any USB or external drives from the computer before you run this scan!
Right-Click RogueKiller and select Run as Administrator.
Wait until Prescan finishes.
On the RogueKiller console, click the Registry tab.
Put a check next to all of these and uncheck the rest: (if found)
[RUN][sUSP PATH] HKLM\[...]\RunOnce : Z1 (C:\Documents and Settings\Michael Senff\Desktop\mbar\mbar.exe /cleanup /s) -> FOUND
Then click on Delete on the right hand column under Options.
When done, logoff & Restart the system.
The log will be found as RKreport
Copy & Paste the contents into next reply.

Step 2

Please read carefully and follow these steps.

Download TDSSKiller and save it to your Desktop.
Double-Click on TDSSKiller.exe to run the application, then on Start Scan.
If running Vista or Windows 7, do a RIGHT-Click and select Run as Administrator to start TDSSKILLER.exe.
If an infected file is detected, the default action will be Cure, click on Continue.
If a suspicious file is detected, the default action will be Skip, click on Continue.
If you get the warning about a file UnsignedFile.Multi.Generic or LockedFile.Multi.Generic please choose
Skip and click on Continue
It may ask you to reboot the computer to complete the process. Click on Reboot Now.
If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Step 3

Download and Save McAfee Stinger to your Desktop

http://www.mcafee.com/us/downloads/free-tools/stinger.aspx

Close all browsers before starting. Disable your antivirus program and anti-malware,if any.

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

On Windows 7 & Vista systems, Right Click and select Run as Administrator.

On XP, double-click to start it.

The GUI interface will look like this

The C drive is the default for scanning.

Press the Preferences button. In the top right-block "On virus detection", click Rename

In the bottom block "Heuristic network check for suspicious files" select High

Click the Scan Now button.

When done, use the File menu and select Save report to file

Stinger.txt is the log report and will be saved to your Desktop. I will need a copy of that log.

Stinger is a standalone utility used to detect and remove specific malware. It is not a full scan for all types of malware or viruses.

It is not intended as virus protection.

Step 4

Download Dr.Web CureIt to the desktop.

Turn OFF your antivirus program.
How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs
Doubleclick the drweb-cureit.exe file, then on Start and allow to run the express scan
This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it. This is only a short scan.
Once the short scan has finished, chose the Complete Scan.
Select all drives. A red dot shows which drives have been chosen.
Click the green arrow at the right, and the scan will start.
Click 'Yes to all' if it asks if you want to cure/move the file.
When the scan has finished, look and see if you can click the following icon next to the files found:
If so, click it and then click the next icon right below and select Move incurable as you'll see in next image:
This will move it to the %userprofile%\DoctorWeb\quarantaine-folder if it can't be cured. (this in case if we need samples)
After selecting, in the Dr.Web CureIt menu on top, click file and choose save report list
Save the report to your desktop. The report will be called DrWeb.csv
Close Dr.Web Cureit.
Reboot your computer to allow files that were in use to be moved/deleted during reboot.
After reboot, post the contents of the log from Dr.Web you saved previously in your next reply.

NOTE: During the scan, a pop-up window will open asking for full version purchase. Simply close the window by clicking on X in upper right corner.

Re-Enable your antivirus program when all done.

MicQsenoch · January 2, 2013

I ran those programs before I found this website and realized I may have a larger problem on my hands.

Rouge Killer log 2

RogueKiller V8.4.2 [Dec 31 2012] by Tigzy

mail : tigzyRK<at>gmail<dot>com

Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/

Website : http://tigzy.geekstogo.com/roguekiller.php

Blog : http://tigzyrk.blogspot.com/

Operating System : Windows XP (5.1.2600 Service Pack 3) 32 bits version

Started in : Normal mode

User : Michael Senff [Admin rights]

Mode : Remove -- Date : 01/01/2013 19:31:56

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 2 ¤¤¤

[RUN][sUSP PATH] HKLM\[...]\RunOnce : Z1 (C:\Documents and Settings\Michael Senff\Desktop\mbar\mbar.exe /cleanup /s) -> DELETED

[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NOT SELECTED

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [LOADED] ¤¤¤

SSDT[257] : NtTerminateProcess @ 0x805D22D8 -> HOOKED (\??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS @ 0xB4528640)

¤¤¤ HOSTS File: ¤¤¤

--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: WDC WD740GD-00FLC0 +++++

--- User ---

[MBR] 7a1a556ce49d71bcb5d738cd79245330

[bSP] 10c4b9629b14d9b3e29e74b07b251d9d : Windows XP MBR Code

Partition table:

0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 70896 Mo

User = LL1 ... OK!

User = LL2 ... OK!

Finished : << RKreport[2]_D_01012013_02d1931.txt >>

RKreport[1]_S_01012013_02d1222.txt ; RKreport[2]_D_01012013_02d1931.txt

MicQsenoch · January 2, 2013

Step 2 log

19:39:23.0015 2628 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35

19:39:23.0546 2628 ============================================================

19:39:23.0546 2628 Current date / time: 2013/01/01 19:39:23.0546

19:39:23.0546 2628 SystemInfo:

19:39:23.0546 2628

19:39:23.0546 2628 OS Version: 5.1.2600 ServicePack: 3.0

19:39:23.0546 2628 Product type: Workstation

19:39:23.0546 2628 ComputerName: DEEZGOOD-D8793A

19:39:23.0546 2628 UserName: Michael Senff

19:39:23.0546 2628 Windows directory: C:\WINDOWS

19:39:23.0546 2628 System windows directory: C:\WINDOWS

19:39:23.0546 2628 Processor architecture: Intel x86

19:39:23.0546 2628 Number of processors: 4

19:39:23.0546 2628 Page size: 0x1000

19:39:23.0546 2628 Boot type: Normal boot

19:39:23.0546 2628 ============================================================

19:39:24.0296 2628 Drive \Device\Harddisk0\DR0 - Size: 0x114FE27E00 (69.25 Gb), SectorSize: 0x200, Cylinders: 0x234F, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054

19:39:24.0296 2628 ============================================================

19:39:24.0296 2628 \Device\Harddisk0\DR0:

19:39:24.0296 2628 MBR partitions:

19:39:24.0296 2628 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x8A7818F

19:39:24.0296 2628 ============================================================

19:39:24.0328 2628 C: <-> \Device\Harddisk0\DR0\Partition1

19:39:24.0328 2628 ============================================================

19:39:24.0328 2628 Initialize success

19:39:24.0328 2628 ============================================================

19:39:33.0656 3288 ============================================================

19:39:33.0656 3288 Scan started

19:39:33.0656 3288 Mode: Manual;

19:39:33.0656 3288 ============================================================

19:39:33.0890 3288 ================ Scan system memory ========================

19:39:33.0890 3288 System memory - ok

19:39:33.0890 3288 ================ Scan services =============================

19:39:33.0937 3288 Abiosdsk - ok

19:39:33.0937 3288 abp480n5 - ok

19:39:33.0968 3288 [ 8FD99680A539792A30E97944FDAECF17 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys

19:39:33.0968 3288 ACPI - ok

19:39:33.0984 3288 [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys

19:39:33.0984 3288 ACPIEC - ok

19:39:34.0015 3288 [ 95CE557D16A75606CCC2D7F3B0B0BCCB ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

19:39:34.0015 3288 AdobeFlashPlayerUpdateSvc - ok

19:39:34.0015 3288 adpu160m - ok

19:39:34.0031 3288 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys

19:39:34.0031 3288 aec - ok

19:39:34.0062 3288 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys

19:39:34.0062 3288 AFD - ok

19:39:34.0062 3288 Aha154x - ok

19:39:34.0062 3288 aic78u2 - ok

19:39:34.0062 3288 aic78xx - ok

19:39:34.0078 3288 [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter C:\WINDOWS\system32\alrsvc.dll

19:39:34.0078 3288 Alerter - ok

19:39:34.0093 3288 [ 8C515081584A38AA007909CD02020B3D ] ALG C:\WINDOWS\System32\alg.exe

19:39:34.0093 3288 ALG - ok

19:39:34.0093 3288 AliIde - ok

19:39:34.0140 3288 [ 267FC636801EDC5AB28E14036349E3BE ] Ambfilt C:\WINDOWS\system32\drivers\Ambfilt.sys

19:39:34.0187 3288 Ambfilt - ok

19:39:34.0187 3288 amsint - ok

19:39:34.0203 3288 [ F5F0F78286A849BC0E45E0E99065B04F ] AppleCharger C:\WINDOWS\system32\DRIVERS\AppleCharger.sys

19:39:34.0203 3288 AppleCharger - ok

19:39:34.0203 3288 [ 95EF7247C50C7241FDAE39A9B3AFF4AE ] AppleChargerSrv C:\WINDOWS\system32\AppleChargerSrv.exe

19:39:34.0203 3288 AppleChargerSrv - ok

19:39:34.0203 3288 AppMgmt - ok

19:39:34.0203 3288 asc - ok

19:39:34.0203 3288 asc3350p - ok

19:39:34.0203 3288 asc3550 - ok

19:39:34.0250 3288 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe

19:39:34.0250 3288 aspnet_state - ok

19:39:34.0265 3288 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys

19:39:34.0265 3288 AsyncMac - ok

19:39:34.0265 3288 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys

19:39:34.0265 3288 atapi - ok

19:39:34.0265 3288 Atdisk - ok

19:39:34.0281 3288 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys

19:39:34.0281 3288 Atmarpc - ok

19:39:34.0296 3288 [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv C:\WINDOWS\System32\audiosrv.dll

19:39:34.0296 3288 AudioSrv - ok

19:39:34.0312 3288 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys

19:39:34.0312 3288 audstub - ok

19:39:34.0328 3288 [ 57D83B82117C2DDB9D7E9AEA691CEDFC ] avgtp C:\WINDOWS\system32\drivers\avgtpx86.sys

19:39:34.0343 3288 avgtp - ok

19:39:34.0359 3288 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys

19:39:34.0359 3288 Beep - ok

19:39:34.0375 3288 [ 574738F61FCA2935F5265DC4E5691314 ] BITS C:\WINDOWS\system32\qmgr.dll

19:39:34.0390 3288 BITS - ok

19:39:34.0406 3288 [ CFD4E51402DA9838B5A04AE680AF54A0 ] Browser C:\WINDOWS\System32\browser.dll

19:39:34.0406 3288 Browser - ok

19:39:34.0421 3288 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys

19:39:34.0421 3288 cbidf2k - ok

19:39:34.0421 3288 cd20xrnt - ok

19:39:34.0437 3288 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys

19:39:34.0437 3288 Cdaudio - ok

19:39:34.0453 3288 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys

19:39:34.0453 3288 Cdfs - ok

19:39:34.0453 3288 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys

19:39:34.0453 3288 Cdrom - ok

19:39:34.0453 3288 Changer - ok

19:39:34.0468 3288 [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc C:\WINDOWS\system32\cisvc.exe

19:39:34.0468 3288 CiSvc - ok

19:39:34.0484 3288 [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe

19:39:34.0484 3288 ClipSrv - ok

19:39:34.0484 3288 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

19:39:34.0484 3288 clr_optimization_v2.0.50727_32 - ok

19:39:34.0484 3288 CmdIde - ok

19:39:34.0484 3288 COMSysApp - ok

19:39:34.0500 3288 Cpqarray - ok

19:39:34.0500 3288 [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll

19:39:34.0500 3288 CryptSvc - ok

19:39:34.0500 3288 dac2w2k - ok

19:39:34.0500 3288 dac960nt - ok

19:39:34.0531 3288 [ 6B27A5C03DFB94B4245739065431322C ] DcomLaunch C:\WINDOWS\system32\rpcss.dll

19:39:34.0531 3288 DcomLaunch - ok

19:39:34.0546 3288 [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll

19:39:34.0546 3288 Dhcp - ok

19:39:34.0546 3288 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys

19:39:34.0546 3288 Disk - ok

19:39:34.0546 3288 dmadmin - ok

19:39:34.0578 3288 [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys

19:39:34.0609 3288 dmboot - ok

19:39:34.0609 3288 [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio C:\WINDOWS\system32\drivers\dmio.sys

19:39:34.0609 3288 dmio - ok

19:39:34.0625 3288 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys

19:39:34.0625 3288 dmload - ok

19:39:34.0640 3288 [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver C:\WINDOWS\System32\dmserver.dll

19:39:34.0640 3288 dmserver - ok

19:39:34.0640 3288 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys

19:39:34.0640 3288 DMusic - ok

19:39:34.0671 3288 [ 5F7E24FA9EAB896051FFB87F840730D2 ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll

19:39:34.0671 3288 Dnscache - ok

19:39:34.0687 3288 [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll

19:39:34.0687 3288 Dot3svc - ok

19:39:34.0687 3288 dpti2o - ok

19:39:34.0703 3288 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys

19:39:34.0703 3288 drmkaud - ok

19:39:34.0718 3288 [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost C:\WINDOWS\System32\eapsvc.dll

19:39:34.0718 3288 EapHost - ok

19:39:34.0734 3288 [ BC93B4A066477954555966D77FEC9ECB ] ERSvc C:\WINDOWS\System32\ersvc.dll

19:39:34.0734 3288 ERSvc - ok

19:39:34.0750 3288 [ 0A780BCC1ACA1DF2BBDECE33E981D4F8 ] EtronHub3 C:\WINDOWS\system32\Drivers\EtronHub3.sys

19:39:34.0750 3288 EtronHub3 - ok

19:39:34.0765 3288 [ 5D8923FA7470B3FDD06D0E57D1242343 ] EtronXHCI C:\WINDOWS\system32\Drivers\EtronXHCI.sys

19:39:34.0765 3288 EtronXHCI - ok

19:39:34.0781 3288 [ 65DF52F5B8B6E9BBD183505225C37315 ] Eventlog C:\WINDOWS\system32\services.exe

19:39:34.0781 3288 Eventlog - ok

19:39:34.0796 3288 [ D4991D98F2DB73C60D042F1AEF79EFAE ] EventSystem C:\WINDOWS\system32\es.dll

19:39:34.0796 3288 EventSystem - ok

19:39:34.0812 3288 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys

19:39:34.0812 3288 Fastfat - ok

19:39:34.0843 3288 [ 99BC0B50F511924348BE19C7C7313BBF ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll

19:39:34.0843 3288 FastUserSwitchingCompatibility - ok

19:39:34.0843 3288 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys

19:39:34.0843 3288 Fdc - ok

19:39:34.0843 3288 [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips C:\WINDOWS\system32\drivers\Fips.sys

19:39:34.0843 3288 Fips - ok

19:39:34.0859 3288 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys

19:39:34.0859 3288 Flpydisk - ok

19:39:34.0875 3288 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys

19:39:34.0875 3288 FltMgr - ok

19:39:34.0906 3288 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

19:39:34.0906 3288 FontCache3.0.0.0 - ok

19:39:34.0906 3288 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys

19:39:34.0906 3288 Fs_Rec - ok

19:39:34.0906 3288 [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys

19:39:34.0906 3288 Ftdisk - ok

19:39:34.0937 3288 [ D556CB79967E92B5CC69686D16C1D846 ] gdrv C:\WINDOWS\gdrv.sys

19:39:34.0937 3288 gdrv - ok

19:39:34.0984 3288 [ 51876DECB54BBF027EF052229CE43339 ] GENERICDRV C:\Program Files\GIGABYTE\ET6\amifldrv32.sys

19:39:34.0984 3288 GENERICDRV - ok

19:39:35.0000 3288 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys

19:39:35.0000 3288 Gpc - ok

19:39:35.0031 3288 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe

19:39:35.0031 3288 gupdate - ok

19:39:35.0031 3288 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe

19:39:35.0031 3288 gupdatem - ok

19:39:35.0046 3288 [ 689A8EEF2A2D62B28A0A578A6196531C ] GVTDrv C:\WINDOWS\system32\Drivers\GVTDrv.sys

19:39:35.0046 3288 GVTDrv - ok

19:39:35.0062 3288 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys

19:39:35.0062 3288 HDAudBus - ok

19:39:35.0093 3288 [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll

19:39:35.0093 3288 helpsvc - ok

19:39:35.0093 3288 HidServ - ok

19:39:35.0109 3288 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys

19:39:35.0109 3288 hidusb - ok

19:39:35.0125 3288 [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll

19:39:35.0125 3288 hkmsvc - ok

19:39:35.0125 3288 hpn - ok

19:39:35.0156 3288 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys

19:39:35.0156 3288 HTTP - ok

19:39:35.0171 3288 [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll

19:39:35.0171 3288 HTTPFilter - ok

19:39:35.0171 3288 i2omgmt - ok

19:39:35.0171 3288 i2omp - ok

19:39:35.0187 3288 [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys

19:39:35.0187 3288 i8042prt - ok

19:39:35.0218 3288 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

19:39:35.0218 3288 IDriverT - ok

19:39:35.0265 3288 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

19:39:35.0296 3288 idsvc - ok

19:39:35.0312 3288 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys

19:39:35.0312 3288 Imapi - ok

19:39:35.0312 3288 [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService C:\WINDOWS\system32\imapi.exe

19:39:35.0312 3288 ImapiService - ok

19:39:35.0312 3288 ini910u - ok

19:39:35.0453 3288 [ 5A4308F76EAE30A7C3337B7B9E9B63E9 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys

19:39:35.0468 3288 IntcAzAudAddService - ok

19:39:35.0484 3288 IntelIde - ok

19:39:35.0484 3288 [ 8C953733D8F36EB2133F5BB58808B66B ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys

19:39:35.0484 3288 intelppm - ok

19:39:35.0500 3288 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys

19:39:35.0500 3288 Ip6Fw - ok

19:39:35.0515 3288 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

19:39:35.0515 3288 IpFilterDriver - ok

19:39:35.0531 3288 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys

19:39:35.0531 3288 IpInIp - ok

19:39:35.0531 3288 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys

19:39:35.0531 3288 IpNat - ok

19:39:35.0546 3288 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys

19:39:35.0546 3288 IPSec - ok

19:39:35.0546 3288 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys

19:39:35.0546 3288 IRENUM - ok

19:39:35.0562 3288 [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys

19:39:35.0562 3288 isapnp - ok

19:39:35.0562 3288 [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys

19:39:35.0562 3288 Kbdclass - ok

19:39:35.0578 3288 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys

19:39:35.0578 3288 kmixer - ok

19:39:35.0593 3288 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys

19:39:35.0593 3288 KSecDD - ok

19:39:35.0609 3288 [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] lanmanserver C:\WINDOWS\System32\srvsvc.dll

19:39:35.0609 3288 lanmanserver - ok

19:39:35.0609 3288 [ A8888A5327621856C0CEC4E385F69309 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll

19:39:35.0625 3288 lanmanworkstation - ok

19:39:35.0625 3288 lbrtfdc - ok

19:39:35.0625 3288 [ A7DB739AE99A796D91580147E919CC59 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll

19:39:35.0625 3288 LmHosts - ok

19:39:35.0656 3288 [ 0803906D607A9B83184447B75B60ECC2 ] LMS C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe

19:39:35.0656 3288 LMS - ok

19:39:35.0671 3288 [ 4A5FFDF0FE830C448830BD4B02B02B4B ] mbamchameleon C:\WINDOWS\system32\drivers\mbamchameleon.sys

19:39:35.0671 3288 mbamchameleon - ok

19:39:35.0687 3288 [ 629CABB0421668C9D3D402A3C3D77E14 ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys

19:39:35.0687 3288 MBAMProtector - ok

19:39:35.0703 3288 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

19:39:35.0703 3288 MBAMScheduler - ok

19:39:35.0734 3288 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

19:39:35.0734 3288 MBAMService - ok

19:39:35.0750 3288 [ CFCB18986426A2D8E66F1992636221D0 ] MEI C:\WINDOWS\system32\DRIVERS\HECI.sys

19:39:35.0750 3288 MEI - ok

19:39:35.0765 3288 [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger C:\WINDOWS\System32\msgsvc.dll

19:39:35.0765 3288 Messenger - ok

19:39:35.0781 3288 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys

19:39:35.0781 3288 mnmdd - ok

19:39:35.0796 3288 [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe

19:39:35.0796 3288 mnmsrvc - ok

19:39:35.0812 3288 [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem C:\WINDOWS\system32\drivers\Modem.sys

19:39:35.0812 3288 Modem - ok

19:39:35.0843 3288 [ C7D9F9717916B34C1B00DD4834AF485C ] Monfilt C:\WINDOWS\system32\drivers\Monfilt.sys

19:39:35.0875 3288 Monfilt - ok

19:39:35.0890 3288 [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys

19:39:35.0890 3288 Mouclass - ok

19:39:35.0906 3288 [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys

19:39:35.0906 3288 mouhid - ok

19:39:35.0921 3288 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys

19:39:35.0921 3288 MountMgr - ok

19:39:35.0953 3288 [ 8C7336950F1E69CDFD811CBBD9CF00A2 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

19:39:35.0953 3288 MozillaMaintenance - ok

19:39:35.0968 3288 [ EE728AF83850DDAD9A3FCAC0AAB3AD97 ] MpFilter C:\WINDOWS\system32\DRIVERS\MpFilter.sys

19:39:35.0968 3288 MpFilter - ok

19:39:35.0968 3288 mraid35x - ok

19:39:35.0984 3288 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys

19:39:35.0984 3288 MRxDAV - ok

19:39:36.0015 3288 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

19:39:36.0015 3288 MRxSmb - ok

19:39:36.0031 3288 [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC C:\WINDOWS\system32\msdtc.exe

19:39:36.0031 3288 MSDTC - ok

19:39:36.0031 3288 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys

19:39:36.0031 3288 Msfs - ok

19:39:36.0031 3288 MSIServer - ok

19:39:36.0046 3288 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys

19:39:36.0046 3288 MSKSSRV - ok

19:39:36.0078 3288 [ E077FCA2A7E79FB9BF67D3E30B5CE593 ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe

19:39:36.0078 3288 MsMpSvc - ok

19:39:36.0078 3288 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys

19:39:36.0078 3288 MSPCLOCK - ok

19:39:36.0093 3288 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys

19:39:36.0093 3288 MSPQM - ok

19:39:36.0093 3288 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys

19:39:36.0093 3288 mssmbios - ok

19:39:36.0109 3288 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys

19:39:36.0109 3288 Mup - ok

19:39:36.0140 3288 [ 0102140028FAD045756796E1C685D695 ] napagent C:\WINDOWS\System32\qagentrt.dll

19:39:36.0140 3288 napagent - ok

19:39:36.0156 3288 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys

19:39:36.0156 3288 NDIS - ok

19:39:36.0156 3288 ndiscm - ok

19:39:36.0187 3288 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys

19:39:36.0187 3288 NdisTapi - ok

19:39:36.0187 3288 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys

19:39:36.0187 3288 Ndisuio - ok

19:39:36.0203 3288 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys

19:39:36.0203 3288 NdisWan - ok

19:39:36.0203 3288 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys

19:39:36.0203 3288 NDProxy - ok

19:39:36.0203 3288 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys

19:39:36.0203 3288 NetBIOS - ok

19:39:36.0218 3288 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys

19:39:36.0234 3288 NetBT - ok

19:39:36.0250 3288 [ B857BA82860D7FF85AE29B095645563B ] NetDDE C:\WINDOWS\system32\netdde.exe

19:39:36.0250 3288 NetDDE - ok

19:39:36.0250 3288 [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe

19:39:36.0250 3288 NetDDEdsdm - ok

19:39:36.0265 3288 [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon C:\WINDOWS\system32\lsass.exe

19:39:36.0265 3288 Netlogon - ok

19:39:36.0281 3288 [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman C:\WINDOWS\System32\netman.dll

19:39:36.0281 3288 Netman - ok

19:39:36.0312 3288 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

19:39:36.0312 3288 NetTcpPortSharing - ok

19:39:36.0328 3288 [ 943337D786A56729263071623BBB9DE5 ] Nla C:\WINDOWS\System32\mswsock.dll

19:39:36.0328 3288 Nla - ok

19:39:36.0328 3288 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys

19:39:36.0343 3288 Npfs - ok

19:39:36.0359 3288 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys

19:39:36.0359 3288 Ntfs - ok

19:39:36.0359 3288 [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp C:\WINDOWS\system32\lsass.exe

19:39:36.0359 3288 NtLmSsp - ok

19:39:36.0390 3288 [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll

19:39:36.0390 3288 NtmsSvc - ok

19:39:36.0406 3288 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys

19:39:36.0406 3288 Null - ok

19:39:36.0890 3288 [ A0A12B3824889E07CB5D19C30F058E68 ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys

19:39:36.0937 3288 nv - ok

19:39:36.0953 3288 [ A211AB524324E84C2C805B52DFCDD544 ] NVHDA C:\WINDOWS\system32\drivers\nvhda32.sys

19:39:36.0953 3288 NVHDA - ok

19:39:36.0968 3288 [ 36E24031C29E6BB6F905CCB41FC987C0 ] NVSvc C:\WINDOWS\system32\nvsvc32.exe

19:39:36.0968 3288 NVSvc - ok

19:39:37.0031 3288 [ EF14502139880F7C3DDCF0D7CA12F370 ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

19:39:37.0062 3288 nvUpdatusService - ok

19:39:37.0078 3288 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

19:39:37.0078 3288 NwlnkFlt - ok

19:39:37.0078 3288 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

19:39:37.0078 3288 NwlnkFwd - ok

19:39:37.0093 3288 [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport C:\WINDOWS\system32\drivers\Parport.sys

19:39:37.0093 3288 Parport - ok

19:39:37.0093 3288 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys

19:39:37.0093 3288 PartMgr - ok

19:39:37.0125 3288 [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys

19:39:37.0125 3288 ParVdm - ok

19:39:37.0125 3288 [ A219903CCF74233761D92BEF471A07B1 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys

19:39:37.0125 3288 PCI - ok

19:39:37.0125 3288 PCIDump - ok

19:39:37.0125 3288 [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys

19:39:37.0125 3288 PCIIde - ok

19:39:37.0140 3288 [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys

19:39:37.0140 3288 Pcmcia - ok

19:39:37.0140 3288 PDCOMP - ok

19:39:37.0140 3288 PDFRAME - ok

19:39:37.0156 3288 PDRELI - ok

19:39:37.0156 3288 PDRFRAME - ok

19:39:37.0156 3288 perc2 - ok

19:39:37.0156 3288 perc2hib - ok

19:39:37.0171 3288 [ 65DF52F5B8B6E9BBD183505225C37315 ] PlugPlay C:\WINDOWS\system32\services.exe

19:39:37.0171 3288 PlugPlay - ok

19:39:37.0171 3288 [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent C:\WINDOWS\system32\lsass.exe

19:39:37.0171 3288 PolicyAgent - ok

19:39:37.0187 3288 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys

19:39:37.0187 3288 PptpMiniport - ok

19:39:37.0187 3288 [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe

19:39:37.0187 3288 ProtectedStorage - ok

19:39:37.0187 3288 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys

19:39:37.0187 3288 PSched - ok

19:39:37.0203 3288 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys

19:39:37.0203 3288 Ptilink - ok

19:39:37.0203 3288 ql1080 - ok

19:39:37.0203 3288 Ql10wnt - ok

19:39:37.0203 3288 ql12160 - ok

19:39:37.0203 3288 ql1240 - ok

19:39:37.0203 3288 ql1280 - ok

19:39:37.0218 3288 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys

19:39:37.0218 3288 RasAcd - ok

19:39:37.0234 3288 [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto C:\WINDOWS\System32\rasauto.dll

19:39:37.0234 3288 RasAuto - ok

19:39:37.0250 3288 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

19:39:37.0250 3288 Rasl2tp - ok

19:39:37.0265 3288 [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan C:\WINDOWS\System32\rasmans.dll

19:39:37.0265 3288 RasMan - ok

19:39:37.0265 3288 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys

19:39:37.0265 3288 RasPppoe - ok

19:39:37.0265 3288 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys

19:39:37.0265 3288 Raspti - ok

19:39:37.0281 3288 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys

19:39:37.0281 3288 Rdbss - ok

19:39:37.0296 3288 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

19:39:37.0296 3288 RDPCDD - ok

19:39:37.0312 3288 [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys

19:39:37.0312 3288 RDPWD - ok

19:39:37.0328 3288 [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe

19:39:37.0343 3288 RDSessMgr - ok

19:39:37.0343 3288 [ F828DD7E1419B6653894A8F97A0094C5 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys

19:39:37.0343 3288 redbook - ok

19:39:37.0359 3288 [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll

19:39:37.0359 3288 RemoteAccess - ok

19:39:37.0359 3288 [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator C:\WINDOWS\system32\locator.exe

19:39:37.0359 3288 RpcLocator - ok

19:39:37.0390 3288 [ 6B27A5C03DFB94B4245739065431322C ] RpcSs C:\WINDOWS\system32\rpcss.dll

19:39:37.0390 3288 RpcSs - ok

19:39:37.0406 3288 [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP C:\WINDOWS\system32\rsvp.exe

19:39:37.0406 3288 RSVP - ok

19:39:37.0421 3288 [ D3578C3806ED545E5C36B2A20F5C0B5A ] RTLE8023xp C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys

19:39:37.0421 3288 RTLE8023xp - ok

19:39:37.0421 3288 [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs C:\WINDOWS\system32\lsass.exe

19:39:37.0421 3288 SamSs - ok

19:39:37.0421 3288 [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe

19:39:37.0421 3288 SCardSvr - ok

19:39:37.0453 3288 [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule C:\WINDOWS\system32\schedsvc.dll

19:39:37.0453 3288 Schedule - ok

19:39:37.0468 3288 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys

19:39:37.0468 3288 Secdrv - ok

19:39:37.0468 3288 [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon C:\WINDOWS\System32\seclogon.dll

19:39:37.0484 3288 seclogon - ok

19:39:37.0484 3288 [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS C:\WINDOWS\system32\sens.dll

19:39:37.0484 3288 SENS - ok

19:39:37.0484 3288 [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial C:\WINDOWS\system32\drivers\Serial.sys

19:39:37.0484 3288 Serial - ok

19:39:37.0515 3288 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys

19:39:37.0515 3288 Sfloppy - ok

19:39:37.0531 3288 [ 83F41D0D89645D7235C051AB1D9523AC ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll

19:39:37.0531 3288 SharedAccess - ok

19:39:37.0546 3288 [ 99BC0B50F511924348BE19C7C7313BBF ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll

19:39:37.0546 3288 ShellHWDetection - ok

19:39:37.0546 3288 Simbad - ok

19:39:37.0546 3288 Sparrow - ok

19:39:37.0562 3288 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys

19:39:37.0562 3288 splitter - ok

19:39:37.0578 3288 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe

19:39:37.0578 3288 Spooler - ok

19:39:37.0593 3288 [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr C:\WINDOWS\system32\DRIVERS\sr.sys

19:39:37.0593 3288 sr - ok

19:39:37.0609 3288 [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice C:\WINDOWS\system32\srsvc.dll

19:39:37.0609 3288 srservice - ok

19:39:37.0640 3288 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys

19:39:37.0640 3288 Srv - ok

19:39:37.0656 3288 [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll

19:39:37.0656 3288 SSDPSRV - ok

19:39:37.0671 3288 [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc C:\WINDOWS\system32\wiaservc.dll

19:39:37.0687 3288 stisvc - ok

19:39:37.0703 3288 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys

19:39:37.0703 3288 swenum - ok

19:39:37.0703 3288 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys

19:39:37.0703 3288 swmidi - ok

19:39:37.0703 3288 SwPrv - ok

19:39:37.0703 3288 symc810 - ok

19:39:37.0718 3288 symc8xx - ok

19:39:37.0718 3288 sym_hi - ok

19:39:37.0718 3288 sym_u3 - ok

19:39:37.0718 3288 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys

19:39:37.0718 3288 sysaudio - ok

19:39:37.0734 3288 [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe

19:39:37.0750 3288 SysmonLog - ok

19:39:37.0750 3288 [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll

19:39:37.0750 3288 TapiSrv - ok

19:39:37.0781 3288 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys

19:39:37.0781 3288 Tcpip - ok

19:39:37.0796 3288 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys

19:39:37.0796 3288 TDPIPE - ok

19:39:37.0796 3288 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys

19:39:37.0796 3288 TDTCP - ok

19:39:37.0812 3288 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys

19:39:37.0812 3288 TermDD - ok

19:39:37.0828 3288 [ FF3477C03BE7201C294C35F684B3479F ] TermService C:\WINDOWS\System32\termsrv.dll

19:39:37.0828 3288 TermService - ok

19:39:37.0828 3288 [ 99BC0B50F511924348BE19C7C7313BBF ] Themes C:\WINDOWS\System32\shsvcs.dll

19:39:37.0828 3288 Themes - ok

19:39:37.0828 3288 TosIde - ok

19:39:37.0843 3288 [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks C:\WINDOWS\system32\trkwks.dll

19:39:37.0843 3288 TrkWks - ok

19:39:37.0843 3288 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys

19:39:37.0859 3288 Udfs - ok

19:39:37.0859 3288 ultra - ok

19:39:37.0937 3288 [ EB79C6C91A99930015EF29AE7FA802D1 ] UNS C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe

19:39:38.0000 3288 UNS - ok

19:39:38.0015 3288 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys

19:39:38.0031 3288 Update - ok

19:39:38.0046 3288 [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost C:\WINDOWS\System32\upnphost.dll

19:39:38.0046 3288 upnphost - ok

19:39:38.0062 3288 [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS C:\WINDOWS\System32\ups.exe

19:39:38.0062 3288 UPS - ok

19:39:38.0078 3288 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys

19:39:38.0078 3288 usbehci - ok

19:39:38.0078 3288 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys

19:39:38.0078 3288 usbhub - ok

19:39:38.0078 3288 [ A32426D9B14A089EAA1D922E0C5801A9 ] usbstor C:\WINDOWS\system32\drivers\usbstor.sys

19:39:38.0078 3288 usbstor - ok

19:39:38.0093 3288 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys

19:39:38.0093 3288 VgaSave - ok

19:39:38.0093 3288 ViaIde - ok

19:39:38.0093 3288 [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys

19:39:38.0093 3288 VolSnap - ok

19:39:38.0109 3288 [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS C:\WINDOWS\System32\vssvc.exe

19:39:38.0125 3288 VSS - ok

19:39:38.0156 3288 [ 7D110D645030C05A06C3CD08D1E47D0A ] vToolbarUpdater13.2.0 C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe

19:39:38.0171 3288 vToolbarUpdater13.2.0 - ok

19:39:38.0187 3288 [ 54AF4B1D5459500EF0937F6D33B1914F ] W32Time C:\WINDOWS\system32\w32time.dll

19:39:38.0187 3288 W32Time - ok

19:39:38.0203 3288 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys

19:39:38.0203 3288 Wanarp - ok

19:39:38.0203 3288 WDICA - ok

19:39:38.0203 3288 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys

19:39:38.0203 3288 wdmaud - ok

19:39:38.0218 3288 [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient C:\WINDOWS\System32\webclnt.dll

19:39:38.0218 3288 WebClient - ok

19:39:38.0250 3288 [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll

19:39:38.0265 3288 winmgmt - ok

19:39:38.0281 3288 [ C7E39EA41233E9F5B86C8DA3A9F1E4A8 ] WmdmPmSN C:\WINDOWS\system32\mspmsnsv.dll

19:39:38.0281 3288 WmdmPmSN - ok

19:39:38.0296 3288 [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe

19:39:38.0296 3288 WmiApSrv - ok

19:39:38.0312 3288 [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc C:\WINDOWS\system32\wscsvc.dll

19:39:38.0312 3288 wscsvc - ok

19:39:38.0328 3288 [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv C:\WINDOWS\system32\wuauserv.dll

19:39:38.0328 3288 wuauserv - ok

19:39:38.0343 3288 [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll

19:39:38.0359 3288 WZCSVC - ok

19:39:38.0359 3288 [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov C:\WINDOWS\System32\xmlprov.dll

19:39:38.0375 3288 xmlprov - ok

19:39:38.0375 3288 ================ Scan global ===============================

19:39:38.0390 3288 [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll

19:39:38.0421 3288 [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll

19:39:38.0437 3288 [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe

19:39:38.0437 3288 [Global] - ok

19:39:38.0437 3288 ================ Scan MBR ==================================

19:39:38.0437 3288 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0

19:39:38.0546 3288 \Device\Harddisk0\DR0 - ok

19:39:38.0546 3288 ================ Scan VBR ==================================

19:39:38.0546 3288 [ 696F7D88C63A76A446D140FEC7690767 ] \Device\Harddisk0\DR0\Partition1

19:39:38.0562 3288 \Device\Harddisk0\DR0\Partition1 - ok

19:39:38.0562 3288 ============================================================

19:39:38.0562 3288 Scan finished

19:39:38.0562 3288 ============================================================

19:39:38.0562 3268 Detected object count: 0

19:39:38.0562 3268 Actual detected object count: 0

MicQsenoch · January 2, 2013

Step 3 log

McAfee® Labs Stinger Version 10.2.0.936 built on Jan 1 2013

Virus data file v1000.0000 created on Jan 1 2013.

Ready to scan for 6091 viruses, trojans and variants.

Scan initiated on Tue Jan 01 19:44:59 2013

Rootkit scan result : Clean

Master Boot Record(s):....1

Possibly Infected:.............0

Boot Sector(s):.................1

Possibly Infected: ............0

Number of clean files: 8520

Scan initiated on Tue Jan 01 19:51:29 2013

Rootkit scan result : Clean

Master Boot Record(s):....1

Possibly Infected:.............0

Boot Sector(s):.................1

Possibly Infected: ............0

Number of clean files: 8586

MicQsenoch · January 2, 2013

=============================================================================

Dr.Web Scanner SE for Windows v7.0.100.12030

Scan session started 2013/01/01 20:07:43

Module location : c:\documents and settings\michael senff\local settings\temp\8CD95628-6839BAB8-8251CD28-34F710F0\

=============================================================================

OPTION [Automatic Apply Actions] NO

OPTION [Turn Off Computer After Scan] NO

OPTION [use Sound Alerts] NO

OPTION [block Network] NO

OPTION [Protect Process] NO

OPTION [Protect Raw Disk] NO

Using language: "English"

Available instances: 6

Instances used: 6

Platform: Windows XP Home x86 (Build 2600), Service Pack 3

API Version: 2.2

Scanning Engine version: 8.0.1.11280

Virus Finding Engine version: 7.0.4.9250

Total 89 virus bases are loaded from c:\documents and settings\michael senff\local settings\temp\8CD95628-6839BAB8-8251CD28-34F710F0

vd2yjdma 7.0 9015eded52680399ec1df18349ecbcd74f613b02 2013/01/01 18:10:28 908 records - OK

neisoa6b 7.0 f5d1425097a34628f8d752212dabf9732d209c98 2011/07/25 09:20:03 1 record - OK

pnsktmnf 7.0 4c38b4db39d5be63a02c898d2438b6c04405a48f 2013/01/01 13:02:18 3916 records - OK

t7pfoqgj 7.0 805b6089c867549c75f843eac96b759c3f8d101f 2012/12/30 21:05:41 18184 records - OK

ysjt6e70 7.0 c12a817c1f95bb9fd8238ef0d5f68868a8d95686 2012/12/23 21:05:33 30183 records - OK

dcjtn7qk 7.0 33def496782eb5b7b1cc93fdb036a1b62fa6a2fd 2012/12/16 21:06:21 25519 records - OK

nts2jtjx 7.0 422abae03c588822f412aa9aae50578a1d61737e 2012/12/09 21:05:04 20358 records - OK

n6nzvpdy 7.0 a4f0d0ecad4fb6e0afdb1925f4e0b7863b9d03fa 2012/12/02 21:06:19 20133 records - OK

rciabzrq 7.0 86daa918ee3de1e4c1e5dea6f9b5f63544cf8814 2012/11/25 21:05:22 27311 records - OK

kxx242nk 7.0 6556881c748e1f894eb9c7943ebae67017e1aec2 2012/11/18 21:06:09 29434 records - OK

0tc4jzi6 7.0 559141ef34f9e6226bb58560e9b52e4cc5165150 2012/11/11 21:06:22 26900 records - OK

cur0kazg 7.0 cc55013e63ff89319ec772e34d77056c7108cd3b 2012/11/04 21:05:22 25164 records - OK

05oqcdxs 7.0 f477dc247d9b562bb64fd4f46a7dcbdf7124eb60 2012/10/28 22:06:37 30226 records - OK

ndrb99tv 7.0 abaf5f7fda7308fcf7573b193bbf2116723e9802 2012/10/21 22:04:37 16441 records - OK

jet4em2a 7.0 5adc85528fb49e201d4bc61eca580d6839cc4a4c 2012/10/14 22:05:04 26289 records - OK

g022mtpl 7.0 da8cf3fbd81206bb3d8103347a439f920a74bbe2 2012/10/07 22:05:51 27278 records - OK

dedkzu0s 7.0 5988744d3cb357f1a013427d466e2d79ab5f8907 2012/09/30 22:05:11 17444 records - OK

n18t5qzi 7.0 d4a0dabf4a4df0f79805c6ccdc025f796765e786 2012/09/23 22:06:30 21205 records - OK

5i4lciua 7.0 82ed005784d9e258213070a0cd8bfceff345018d 2012/09/16 22:05:43 11686 records - OK

ba0jf7bz 7.0 a95ae63004b8d857c2db055f4e47c15bfc97f626 2012/09/09 22:04:34 12677 records - OK

7knz0vya 7.0 c39bf233d25242ae9ed8cf204b9b788c8f45ab79 2012/09/02 22:05:28 10118 records - OK

2c3cc7bp 7.0 d37b5484b009947b7cdd3837dafe8148615401c2 2012/08/26 22:05:26 12602 records - OK

laz4svn3 7.0 41bf1347794ab7060dec7aaecc1d1d95cf6fecb5 2012/08/19 22:04:05 18298 records - OK

00zstied 7.0 1a997511e5892aaeb69b3db70e06676af36382e3 2012/08/12 22:05:19 17126 records - OK

z7inloz3 7.0 f7226c59914e3683e538e668c3b664af3232654d 2012/08/05 22:03:53 20539 records - OK

13cbkgyc 7.0 4035c8d3b617bf935a317a8c57efaa8e835a61f4 2012/07/29 22:05:26 19330 records - OK

4blf9nhz 7.0 09b55bc000f184ed426f1d8b9665669346fe5e71 2012/07/22 22:05:34 19692 records - OK

gz065ne2 7.0 f746c097f298e94faa9db94e6f64ef9fd4a7b010 2012/07/15 22:05:43 14727 records - OK

ng6y0ln0 7.0 792a6a25a17e764390440cd4c2c6ca5a97ab162f 2012/07/08 22:04:33 19485 records - OK

jae4x1dz 7.0 ca9905c39e3d93428a4db65a192debe9fbd7acf7 2012/07/01 22:04:55 22898 records - OK

on8w4e4q 7.0 dc29c610b866c66ba5327e7830452b2460149a35 2012/06/24 22:05:17 20551 records - OK

m1cnqcni 7.0 c28739bea153508d12942ac9a61abd475d0a0404 2012/06/17 22:03:35 9661 records - OK

bsxqi1u9 7.0 e5b5835a7c512120c5348e31483a4caa2a845d28 2012/06/10 22:04:32 23632 records - OK

sg7ay0yu 7.0 61853ce89026ef0ebbd80174f1b7dd5d25bbc63a 2012/06/03 22:04:41 12423 records - OK

szyb64sl 7.0 4e6c9897e153b47ca97b7da48ceed23e555a7761 2012/05/27 22:04:26 15493 records - OK

a3of1pu2 7.0 35f4c105cecd8ec1fd01714abebf30f8f3efb96e 2012/05/20 22:03:29 13065 records - OK

i99csduf 7.0 3522aa84677411aa7d67796bb05ea3ab62f02a71 2012/05/13 22:04:24 16238 records - OK

r2u0dpqq 7.0 7597333540eda537bd42c0a17d4a6526ad247a2e 2012/05/06 22:04:33 11570 records - OK

dwwlku9v 7.0 867814380363bc6ad605acf4b96e02c54dbd60f7 2012/04/29 22:03:28 15478 records - OK

zn7nidtp 7.0 3c04f402d91a19039cb9c223c435dc4ea1bb3da4 2012/04/22 22:05:05 11881 records - OK

3f5cdptq 7.0 8d0220a2a50b367e61a51d3b29c2659cde41bb7f 2012/04/15 22:03:29 13578 records - OK

60uskbwf 7.0 b79dc6f5832ad390108d1880694ec538e8b34bb0 2012/04/08 22:05:02 14292 records - OK

2hrx1bk1 7.0 8ff7cc095c43c2154275b7a54a89bf365e8daf4a 2012/04/01 22:03:24 14084 records - OK

wusvly0y 7.0 9502a428b32be4ad08556134e271c9ba03195398 2012/03/25 22:04:43 19126 records - OK

uj5y1cme 7.0 28c2fabbc645aff41baac12b911a8499ea163536 2012/03/18 22:03:23 14920 records - OK

kbuk6hfc 7.0 86de597ff06e58206f94263f2eef33cb41b2530c 2012/03/11 22:03:25 19017 records - OK

zmpd1ovn 7.0 5bd1d666e7c9ca70c34e591dc6c55314ce4b11af 2012/03/04 21:04:32 19691 records - OK

c5pou474 7.0 15a9d10c451d2fcf124700f29f557d9bf338e671 2012/02/26 21:03:21 23605 records - OK

uxgg0rpp 7.0 5647d941e5358105ca6558dce78873f06c48d5dc 2012/02/19 21:03:45 19067 records - OK

4idkbdzp 7.0 c9b2600cb665ce34e0ccd0f19e0a88cd44437f51 2012/02/12 21:04:49 19019 records - OK

senpbwkw 7.0 9df2e129e78a9d9ab491186da1329c1dd1190e17 2012/02/05 21:05:25 28028 records - OK

5dge7qmy 7.0 b69b9504a51b8777b8e95a4680dc8ac1d8d8c25d 2012/01/29 21:08:41 29444 records - OK

gq8olt25 7.0 3d7431bdee1a22d6329e017f348db7760f2645ac 2012/01/23 02:22:13 19353 records - OK

ts4vjrbl 7.0 e04570f78fb00d758abdf77c534a460980e102c0 2012/01/15 21:12:31 20747 records - OK

md0w92v1 7.0 2de2479b112c4416e2375343f57ca789b042aecc 2012/01/08 21:04:30 28052 records - OK

3jdosabx 7.0 c4bd9612ff1f71d8bd23b4f1bc114eed1ae2ee6b 2012/01/01 21:04:40 12183 records - OK

pqrn25km 7.0 28b1d218ade8f05fdc8550c7456ac3b74f705208 2011/12/25 21:03:33 19984 records - OK

q66r8rp5 7.0 539e41e8f3d97a6f347600c7cef903d9f34e0518 2011/12/18 21:08:45 22627 records - OK

tg6afcyk 7.0 f8e81968965f555bce0d02fc9933fee840b97aaf 2011/12/12 14:20:22 49580 records - OK

nhz50bw5 7.0 14751e0f442bba3efc08ee12d82a2815c61cfeb6 2011/12/04 02:00:00 45195 records - OK

0oao9ybr 7.0 5bc1f5e30792d018658f2dcdb35fc0bcbdcf4e1e 2011/12/04 01:00:00 171075 records - OK

72bqybon 7.0 0f948a7d416c556bfc8a8be2c2c39f998fee6d9e 2011/12/04 00:00:00 170820 records - OK

vz1bijda 7.0 9357c3cc73a4a374346a678f197daa22496c7ae5 2011/12/03 23:00:00 171279 records - OK

9ky53qsk 7.0 ae56b06b3d6f1e13c5f10cce4ed68f2cccbf3298 2011/12/03 22:00:00 170253 records - OK

evutvfnk 7.0 fdaab5c1079d02c94f20d07c39d638cad79d8771 2011/12/03 21:00:00 170291 records - OK

9wgs10jp 7.0 b59d8841e65d7670b2aae7f2b65734269f6c4fe3 2011/12/03 20:00:00 170501 records - OK

hw0bbm8g 7.0 3946b1d195434cf7a70d144da71c87559475c58f 2011/12/03 19:00:00 353582 records - OK

erhrr0a1 7.0 8df4695f74ea5949551df6044720694e204b13d7 2011/12/03 18:00:00 852776 records - OK

sni6aqxc 7.0 26ec3c7918125b3887aece02a889e2a605a427b3 2013/01/01 18:10:57 785 records - OK

i0seglip 7.0 cfbe9cf43615f7856e4c35f0fc02e2baf12e39e7 2012/12/16 21:14:14 1725 records - OK

il9gczgy 7.0 047694e79b1a8d295f27ea9c6565062404f84a57 2012/11/11 21:12:52 2050 records - OK

jcjydt6v 7.0 f3413603f4ee1c88018a78c1f6faf2abeb8fa8c1 2012/09/23 22:13:14 1456 records - OK

i16libsy 7.0 8871f579eeb7e5e7b70c6dd898afd27391d7daf4 2012/06/24 22:12:36 1421 records - OK

fmygzlo9 7.0 3ee43130fe7fec4b367a791892a444d0a791b29b 2012/03/25 22:12:30 1385 records - OK

x0x8egvs 7.0 fddc5d687537580c7166dbf117d591593bc62261 2012/01/22 22:56:09 1653 records - OK

r3utp6kk 7.0 63f8e4864730a8014f1ac0fe810745fa7e0fb4d8 2013/01/01 18:10:45 1215 records - OK

lghp8ppe 7.0 cdf3a9d2dcab57f90c378d9eefacbfd358a42699 2012/12/09 21:23:23 1620 records - OK

ec23fubw 7.0 c0726ba000e840272f0810b89051e6daa8799084 2012/11/04 21:23:16 1658 records - OK

9fnm37mb 7.0 216611859de0125bf130d6324d43c9115cb05def 2012/10/07 22:23:20 1465 records - OK

ppz31w63 7.0 264c14ad60c4423ec292f5f8b182e4448504dfa9 2012/09/09 22:23:14 1588 records - OK

a2v624wd 7.0 33197bfe9efefa9db33725d240757103c625b601 2012/07/22 22:22:36 1702 records - OK

1s48t9jt 7.0 74d8e114edb84b95bc09d5a2a36191d15a61e2cb 2012/06/10 22:22:36 1659 records - OK

g6iy9kbo 7.0 79ca8239f310688d2b9c314fa3d738a34985cce3 2012/04/29 22:22:34 1670 records - OK

rmt0aykz 7.0 aac27e986e3731e5260cb76f5b14558e36660dec 2012/03/11 22:22:28 1729 records - OK

e5pmvbxw 7.0 fa5c96b8be693a20c2a295e3545419e6f117fdc4 2012/01/29 21:23:00 1523 records - OK

3s02dm22 7.0 e9b21e0a3578ef2e2067f4876309671ddc78f65f 2011/12/18 21:22:29 1805 records - OK

0i9s83yd 7.0 8f7a8f6f55130f6becc5331ab38dc2108746b8aa 2011/12/03 17:00:00 26456 records - OK

zufndlbt 7.0 e6d52b11d2f7d405ccd31347da3b6fde69825168 2011/12/03 16:00:00 74279 records - OK

1j9lq59x 7.0 e20ffde4bbc58e0585b0b3b2f324bc91272c2360 2011/12/03 15:00:00 1 record - OK

Total records count: 3527078

Anti-rootkit module version (API 5.00 / 5.00)

Using c:\documents and settings\michael senff\local settings\temp\8CD95628-6839BAB8-8251CD28-34F710F0\bgbjacyk.key as Dr.Web ® Key file

This Dr.Web ® Key is for 1 computer (A User)

=============================================================================

Dr.Web Scanner SE for Windows v7.0.100.12030

Scan session started 2013/01/01 20:09:02

Module location : c:\documents and settings\michael senff\local settings\temp\9F31666D-D4A2DF9D-836AF6A9-BE2689FB\

=============================================================================

OPTION [Automatic Apply Actions] NO

OPTION [Turn Off Computer After Scan] NO

OPTION [use Sound Alerts] NO

OPTION [block Network] NO

OPTION [Protect Process] NO

OPTION [Protect Raw Disk] NO

Using language: "English"

=============================================================================

Dr.Web Scanner SE for Windows v7.0.100.12030

Scan session started 2013/01/01 20:09:32

Module location : c:\documents and settings\michael senff\local settings\temp\D6FE5BC9-1415B5A2-6B4D7F65-CE33891B\

=============================================================================

OPTION [Automatic Apply Actions] NO

OPTION [Turn Off Computer After Scan] NO

OPTION [use Sound Alerts] NO

OPTION [block Network] NO

OPTION [Protect Process] NO

OPTION [Protect Raw Disk] NO

Using language: "English"

Available instances: 6

Instances used: 6

Platform: Windows XP Home x86 (Build 2600), Service Pack 3

API Version: 2.2

Scanning Engine version: 8.0.1.11280

Virus Finding Engine version: 7.0.4.9250

Total 89 virus bases are loaded from c:\documents and settings\michael senff\local settings\temp\D6FE5BC9-1415B5A2-6B4D7F65-CE33891B