Help Please!

galen222 · July 4, 2013

I have recently noticed an increase in the number of running processes (norm was 50-70, now 90-100), huge amounts of CPU usage percentages spiking in the low to middle 90's, along with a noticeable increase in boot/start up time.

I have run both Malwarebytes Anti-Malware & DDS and have included the logs below. No malicious item were detected during the Malwarebytes scan.

I don't know if my system is bogged down for some reason or if its infected but also running Norton Security Suite with no viruses found.

Malwarebytes Anti-Malware (Trial) 1.75.0.1300

www.malwarebytes.org

Database version: v2013.07.04.08

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 10.0.9200.16618

Galen :: GALEN-HP [administrator]

Protection: Enabled

7/4/2013 2:53:27 PM

mbam-log-2013-07-04 (14-53-27).txt

Scan type: Quick scan

Scan options enabled: Memory | Startup | Registry | File System |

Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 212640

Time elapsed: 5 minute(s), 11 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 0

(No malicious items detected)

(end)

DDS Log

DDS (Ver_2012-11-20.01) - NTFS_AMD64

Internet Explorer: 10.0.9200.16611 BrowserJavaVersion: 10.25.2

Run by Galen at 16:15:40 on 2013-07-04

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.7650.4328 [GMT -4:00]

.

AV: Norton Security Suite *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Norton Security Suite *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}

FW: Norton Security Suite *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Program Files\IDT\WDM\STacSV64.exe

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\Hpservice.exe

C:\Windows\system32\atieclxx.exe

C:\Windows\System32\WUDFHost.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k WbioSvcGroup

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccSvcHst.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\system32\valWBFPolicyService.exe

C:\Windows\SysWOW64\vmnat.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe

C:\Windows\SysWOW64\vmnetdhcp.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccSvcHst.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\IDT\WDM\sttray64.exe

C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe

C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe

C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe

C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Windows\system32\taskeng.exe

C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe

C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

C:\Program Files (x86)\Internet Explorer\IELowutil.exe

C:\Program Files (x86)\HP SimplePass\TouchControl.exe

C:\Program Files (x86)\Google\Update\1.3.21.149\GoogleCrashHandler.exe

C:\Program Files (x86)\Google\Update\1.3.21.149\GoogleCrashHandler64.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

C:\Windows\notepad.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

mWinlogon: Userinit = userinit.exe

BHO: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\coieplg.dll

BHO: SteadyVideoBHO Class: {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\AMD\SteadyVideo\SteadyVideo.dll

BHO: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ips\ipsbho.dll

BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Adobe Acrobat Create PDF Toolbar Helper: {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll

BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

BHO: HP Network Check Helper: {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll

BHO: Adobe Acrobat Create PDF from Selection: {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll

TB: Adobe Acrobat Create PDF Toolbar: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll

TB: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\coieplg.dll

TB: Adobe Acrobat Create PDF Toolbar: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll

uRun: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

mRun: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

mRun: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe

mRun: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey

mRun: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices

mRun: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"

mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-Explorer: NoActiveDesktopChanges = dword:1

mPolicies-Explorer: NoDriveTypeAutoRun = dword:255

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

IE: Add to Evernote 4.0 - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204

IE: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

IE: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECapture.html

IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000

IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

IE: {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204

LSP: C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll

TCP: Interfaces\{E36B19DE-9B3C-4893-A5D7-5C1CBD902095} : NameServer = 75.75.75.75,75.75.76.76

TCP: Interfaces\{E36B19DE-9B3C-4893-A5D7-5C1CBD902095}\13637474A4740373 : DHCPNameServer = 75.75.75.75 75.75.76.76

Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll

Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

SSODL: WebCheck - <orphaned>

SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --

multi-install --chrome

mASetup: {F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} - msiexec /fu {F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} /qn

x64-BHO: SteadyVideoBHO Class: {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll

x64-BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL

x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

x64-Run: [synTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe

x64-Run: [setDefault] C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe

x64-Run: [sysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe

x64-Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

x64-Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll

x64-Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll

x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>

x64-SSODL: WebCheck - <orphaned>

x64-SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL

x64-mASetup: {0CE7EBAF-157D-4111-9146-057CB2A4023E} - msiexec /fu {0CE7EBAF-157D-4111-9146-057CB2A4023E} /qn

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\Galen\AppData\Roaming\Mozilla\Firefox\Profiles\0xswhxh4.default\

FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

FF - plugin: C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll

FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll

FF - plugin: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll

FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

FF - plugin: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll

FF - ExtSQL: 2013-05-13 17:46; web2pdfextension@web2pdf.adobedotcom; C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn

FF - ExtSQL: 2013-06-06 07:27; {BBDA0591-3099-440a-AA10-41764D9DB4DB}; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn

FF - ExtSQL: 2013-06-09 09:55; {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn

.

============= SERVICES / DRIVERS ===============

.

R0 amd_sata;amd_sata;C:\Windows\System32\drivers\amd_sata.sys [2011-12-13 82048]

R0 amd_xata;amd_xata;C:\Windows\System32\drivers\amd_xata.sys [2011-12-13 42624]

R0 amdkmpfd;AMD PCI Root Bus Lower Filter;C:\Windows\System32\drivers\amdkmpfd.sys [2012-1-18 31360]

R0 SymDS;Symantec Data Store;C:\Windows\System32\drivers\N360x64\1403010.016\symds64.sys [2013-5-18 493656]

R0 SymEFA;Symantec Extended File Attributes;C:\Windows\System32\drivers\N360x64\1403010.016\symefa64.sys [2013-5-18 1139800]

R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\BHDrvx64.sys [2013-7-2 1393240]

R1 ccSet_N360;Norton Security Suite Settings Manager;C:\Windows\System32\drivers\N360x64\1403010.016\ccsetx64.sys [2013-5-18 168096]

R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130703.001\IDSviA64.sys [2013-7-4 513184]

R1 SymIRON;Symantec Iron Driver;C:\Windows\System32\drivers\N360x64\1403010.016\ironx64.sys [2013-5-18 224416]

R1 SymNetS;Symantec Network Security WFP Driver;C:\Windows\System32\drivers\N360x64\1403010.016\symnets.sys [2013-5-18 432800]

R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2012-1-27 235520]

R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-1-26 361984]

R2 AODDriver4.1;AODDriver4.1;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys [2011-11-13 55936]

R2 APXACC;AppEx Networks Accelerator LWF;C:\Windows\System32\drivers\appexDrv.sys [2012-8-29 189760]

R2 FPLService;TrueSuiteService;C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe [2013-2-7 1641768]

R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2012-9-27 86528]

R2 HPClientSvc;HP Client Services;C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168]

R2 hpsrv;HP Service;C:\Windows\System32\hpservice.exe [2012-9-24 31040]

R2 HPWMISVC;HPWMISVC;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2012-3-5 35200]

R2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-7-4 418376]

R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-7-4 701512]

R2 N360;Norton Security Suite;C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccsvchst.exe [2013-5-18 144520]

R2 valWBFPolicyService;Validity WBF Policy Service;C:\Windows\System32\valWBFPolicyService.exe [2012-9-6 28160]

R3 amdhub30;AMD USB 3.0 Hub Driver;C:\Windows\System32\drivers\amdhub30.sys [2011-10-26 102528]

R3 amdiox64;AMD IO Driver;C:\Windows\System32\drivers\amdiox64.sys [2012-8-29 46136]

R3 amdxhc;AMD USB 3.0 Host Controller Driver;C:\Windows\System32\drivers\amdxhc.sys [2011-10-26 219776]

R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2011-12-6 95248]

R3 clwvd;CyberLink WebCam Virtual Driver;C:\Windows\System32\drivers\clwvd.sys [2010-7-28 31088]

R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-3-9 138912]

R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-7-4 25928]

R3 RSP2STOR;Realtek PCIE CardReader Driver - P2;C:\Windows\System32\drivers\RtsP2Stor.sys [2012-10-30 266896]

R3 usbfilter;AMD USB Filter Driver;C:\Windows\System32\drivers\usbfilter.sys [2012-8-29 56448]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-11-9 160944]

S2 VMUSBArbService;VMware USB Arbitration Service;C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [2010-1-22 563760]

S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2013-3-22 19456]

S3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-8-29 646248]

S3 SmbDrv;SmbDrv;C:\Windows\System32\drivers\Smb_driver.sys [2011-10-14 20016]

S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864]

S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312]

S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864]

S3 TrueService;TrueAPI Service component;C:\Program Files\Common Files\AuthenTec\TrueService.exe [2013-1-7 401856]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2013-3-22 57856]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2013-3-22 30208]

S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-9-28 53760]

S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-9-4 1255736]

S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]

.

=============== Created Last 30 ================

.

2013-07-04 18:51:25 -------- d-----w- C:\Users\Galen\AppData\Roaming\Malwarebytes

2013-07-04 18:50:48 -------- d-----w- C:\ProgramData\Malwarebytes

2013-07-04 18:50:47 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys

2013-07-04 18:50:47 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-07-04 18:49:16 -------- d-----w- C:\Users\Galen\AppData\Local\Programs

2013-06-24 11:04:55 96168 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

2013-06-14 22:43:56 701952 ----a-w- C:\Program Files\Internet Explorer\ieproxy.dll

2013-06-13 23:29:45 1910632 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2013-06-11 13:06:53 99840 ----a-w- C:\Windows\System32\Spool\prtprocs\x64\HPZPPLHN.DLL

.

==================== Find3M ====================

.

2013-06-24 11:04:34 867240 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll

2013-06-24 11:04:34 789416 ----a-w- C:\Windows\SysWow64\deployJava1.dll

2013-06-14 01:12:20 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2013-06-14 01:12:20 692104 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

2013-06-08 12:28:46 2706432 ----a-w- C:\Windows\System32\mshtml.tlb

2013-06-08 11:13:19 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb

2013-05-17 01:25:57 1767936 ----a-w- C:\Windows\SysWow64\wininet.dll

2013-05-17 01:25:27 2877440 ----a-w- C:\Windows\SysWow64\jscript9.dll

2013-05-17 01:25:26 61440 ----a-w- C:\Windows\SysWow64\iesetup.dll

2013-05-17 01:25:26 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll

2013-05-17 00:59:03 2241024 ----a-w- C:\Windows\System32\wininet.dll

2013-05-17 00:58:10 3958784 ----a-w- C:\Windows\System32\jscript9.dll

2013-05-17 00:58:08 67072 ----a-w- C:\Windows\System32\iesetup.dll

2013-05-17 00:58:08 136704 ----a-w- C:\Windows\System32\iesysprep.dll

2013-05-14 12:23:25 89600 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe

2013-05-14 08:40:13 71680 ----a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe

2013-05-13 05:51:01 184320 ----a-w- C:\Windows\System32\cryptsvc.dll

2013-05-13 05:51:00 1464320 ----a-w- C:\Windows\System32\crypt32.dll

2013-05-13 05:51:00 139776 ----a-w- C:\Windows\System32\cryptnet.dll

2013-05-13 05:50:40 52224 ----a-w- C:\Windows\System32\certenc.dll

2013-05-13 04:45:55 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll

2013-05-13 04:45:55 1160192 ----a-w- C:\Windows\SysWow64\crypt32.dll

2013-05-13 04:45:55 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll

2013-05-13 03:43:55 1192448 ----a-w- C:\Windows\System32\certutil.exe

2013-05-13 03:08:10 903168 ----a-w- C:\Windows\SysWow64\certutil.exe

2013-05-13 03:08:06 43008 ----a-w- C:\Windows\SysWow64\certenc.dll

2013-05-10 05:49:27 30720 ----a-w- C:\Windows\System32\cryptdlg.dll

2013-05-10 03:20:54 24576 ----a-w- C:\Windows\SysWow64\cryptdlg.dll

2013-05-01 07:59:12 94208 ----a-w- C:\Windows\SysWow64\QuickTimeVR.qtx

2013-05-01 07:59:12 69632 ----a-w- C:\Windows\SysWow64\QuickTime.qts

2013-04-26 05:51:36 751104 ----a-w- C:\Windows\System32\win32spl.dll

2013-04-26 04:55:21 492544 ----a-w- C:\Windows\SysWow64\win32spl.dll

2013-04-25 23:30:32 1505280 ----a-w- C:\Windows\SysWow64\d3d11.dll

2013-04-17 07:02:06 1230336 ----a-w- C:\Windows\SysWow64\WindowsCodecs.dll

2013-04-17 06:24:46 1424384 ----a-w- C:\Windows\System32\WindowsCodecs.dll

2013-04-13 05:49:23 135168 ----a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll

2013-04-13 05:49:19 350208 ----a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll

2013-04-13 05:49:19 308736 ----a-w- C:\Windows\apppatch\AppPatch64\AcGenral.dll

2013-04-13 05:49:19 111104 ----a-w- C:\Windows\apppatch\AppPatch64\acspecfc.dll

2013-04-13 04:45:16 474624 ----a-w- C:\Windows\apppatch\AcSpecfc.dll

2013-04-13 04:45:15 2176512 ----a-w- C:\Windows\apppatch\AcGenral.dll

2013-04-12 14:45:08 1656680 ----a-w- C:\Windows\System32\drivers\ntfs.sys

2013-04-10 05:24:10 983912 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys

2013-04-10 05:24:10 265064 ----a-w- C:\Windows\System32\drivers\dxgmms1.sys

2013-04-10 03:30:50 3153920 ----a-w- C:\Windows\System32\win32k.sys

.

============= FINISH: 16:16:35.27 ===============

Attach Log

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Home Premium

Boot Device: \Device\HarddiskVolume1

Install Date: 9/4/2012 7:24:10 PM

System Uptime: 7/3/2013 6:52:09 PM (22 hours ago)

.

Motherboard: Hewlett-Packard | | 182F

Processor: AMD A8-4500M APU with Radeon HD Graphics | Socket FT1 | 1691/100mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 679 GiB total, 590.498 GiB free.

D: is FIXED (NTFS) - 19 GiB total, 2.095 GiB free.

E: is CDROM ()

.

==== Disabled Device Manager Items =============

.

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}

Description: Realtek PCIe GBE Family Controller

Device ID: PCI\VEN_10EC&DEV_8168&SUBSYS_182D103C&REV_07\4&20C67C64&0&00A8

Manufacturer: Realtek

Name: Realtek PCIe GBE Family Controller

PNP Device ID: PCI\VEN_10EC&DEV_8168&SUBSYS_182D103C&REV_07\4&20C67C64&0&00A8

Service: RTL8167

.

==== System Restore Points ===================

.

RP89: 5/31/2013 2:25:06 PM - Scheduled Checkpoint

RP90: 6/10/2013 5:42:59 PM - Scheduled Checkpoint

RP91: 6/14/2013 6:42:37 PM - Windows Update

RP92: 6/16/2013 3:00:18 AM - Windows Update

RP93: 6/20/2013 7:43:18 AM - Windows Update

RP94: 6/24/2013 7:03:41 AM - Installed Java 7 Update 25

RP95: 7/2/2013 8:09:35 PM - Scheduled Checkpoint

.

==== Installed Programs ======================

.

Overlook Fing

Adobe Acrobat XI Pro

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Photoshop Lightroom 4.4 64-bit

Adobe Reader XI (11.0.03)

Adobe Shockwave Player 12.0

AMD Accelerated Video Transcoding

AMD APP SDK Runtime

AMD Catalyst Install Manager

AMD Fuel

AMD Quick Stream

AMD Steady Video Plug-In

AMD VISION Engine Control Center

Apple Application Support

Apple Mobile Device Support

Apple Software Update

Atheros Driver Installation Program

AuthenTec TrueAPI 64-bit

AXIS Media Control Embedded

AXIS Media Control Embedded Installer

Bejeweled 3

Blackhawk Striker 2

Blio

Bonjour

Catalyst Control Center - Branding

Catalyst Control Center Graphics Previews Common

Catalyst Control Center InstallProxy

Catalyst Control Center Localization All

ccc-utility64

CCC Help Chinese Standard

CCC Help Chinese Traditional

CCC Help Czech

CCC Help Danish

CCC Help Dutch

CCC Help English

CCC Help Finnish

CCC Help French

CCC Help German

CCC Help Greek

CCC Help Hungarian

CCC Help Italian

CCC Help Japanese

CCC Help Korean

CCC Help Norwegian

CCC Help Polish

CCC Help Portuguese

CCC Help Russian

CCC Help Spanish

CCC Help Swedish

CCC Help Thai

CCC Help Turkish

Chuzzle Deluxe

Cisco EAP-FAST Module

Cisco LEAP Module

Cisco PEAP Module

Cradle of Rome 2

CyberLink YouCam

D3DX10

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition

Dora's World Adventure

ESU for Microsoft Windows 7 SP1

Evernote v. 4.5.8

Farm Frenzy

Farmscapes

FATE

Final Drive Fury

Google Chrome

Google Update Helper

Hewlett-Packard ACLM.NET v1.2.1.1

Hoyle Card Games

HP 3D DriveGuard

HP Application Assistant

HP Auto

HP Client Services

HP CoolSense

HP Customer Experience Enhancements

HP Deskjet 1000 J110 series Basic Device Software

HP Documentation

HP Games

HP Launch Box

HP MovieStore

HP On Screen Display

HP Power Manager

HP Quick Launch

HP Recovery Manager

HP Security Assistant

HP Setup

HP Setup Manager

HP SimplePass

HP Software Framework

HP Support Assistant

iCloud

IDT Audio

iTunes

Java 7 Update 25

Java 7 Update 9 (64-bit)

Java Auto Updater

Jewel Match 3

Jewel Quest Mysteries: The Seventh Gate Collector's Edition

John Deere Drive Green

Junk Mail filter update

Letters from Nowhere 2

Lightroom 4.4

Luxor HD

Mah Jong Medley

Malwarebytes Anti-Malware version 1.75.0.1300

Mesh Runtime

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft Application Error Reporting

Microsoft Office 2010 Service Pack 1 (SP1)

Microsoft Office Access MUI (English) 2010

Microsoft Office Access Setup Metadata MUI (English) 2010

Microsoft Office Excel MUI (English) 2010

Microsoft Office Groove MUI (English) 2010

Microsoft Office InfoPath MUI (English) 2010

Microsoft Office Office 64-bit Components 2010

Microsoft Office OneNote MUI (English) 2010

Microsoft Office Outlook Connector

Microsoft Office Outlook MUI (English) 2010

Microsoft Office PowerPoint MUI (English) 2010

Microsoft Office Professional Plus 2010

Microsoft Office Proof (English) 2010

Microsoft Office Proof (French) 2010

Microsoft Office Proof (Spanish) 2010

Microsoft Office Proofing (English) 2010

Microsoft Office Publisher MUI (English) 2010

Microsoft Office Shared 64-bit MUI (English) 2010

Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010

Microsoft Office Shared MUI (English) 2010

Microsoft Office Shared Setup Metadata MUI (English) 2010

Microsoft Office Word MUI (English) 2010

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2005 Redistributable (x64)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Microsoft WSE 3.0 Runtime

Mozilla Firefox 16.0.2 (x86 en-US)

Mozilla Firefox 21.0 (x86 en-US)

Mozilla Maintenance Service

MSVCRT

MSVCRT_amd64

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Norton Security Suite

opensource

Penguins!

Plants vs. Zombies - Game of the Year

PlayReady PC Runtime amd64

PlayReady PC Runtime x86

Poker Superstars III

Polar Bowler

Polar Golfer

QuickTime

Realtek Ethernet Controller Driver

Realtek PCIE Card Reader

RollerCoaster Tycoon 3: Platinum

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Microsoft .NET Framework 4 Extended (KB2736428)

Security Update for Microsoft .NET Framework 4 Extended (KB2742595)

Security Update for Microsoft Excel 2010 (KB2597126) 32-Bit Edition

Security Update for Microsoft Filter Pack 2.0 (KB2553501) 32-Bit Edition

Security Update for Microsoft InfoPath 2010 (KB2687422) 32-Bit Edition

Security Update for Microsoft InfoPath 2010 (KB2760406) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553091)

Security Update for Microsoft Office 2010 (KB2553096)

Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2687501) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2687510) 32-Bit Edition

Security Update for Microsoft OneNote 2010 (KB2760600) 32-Bit Edition

Security Update for Microsoft Publisher 2010 (KB2553147) 32-Bit Edition

Security Update for Microsoft Visio 2010 (KB2810068) 32-Bit Edition

Security Update for Microsoft Visio Viewer 2010 (KB2687505) 32-Bit Edition

Security Update for Microsoft Word 2010 (KB2760410) 32-Bit Edition

Skype™ 6.0

swMSM

Synaptics Pointing Device Driver

The Treasures of Mystery Island: The Ghost Ship

tools-windows

Torchlight

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2600217)

Update for Microsoft .NET Framework 4 Extended (KB2836939)

Update for Microsoft Office 2010 (KB2553065)

Update for Microsoft Office 2010 (KB2553092)

Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition

Update for Microsoft Office 2010 (KB2566458)

Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition

Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition

Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition

Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition

Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition

Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition

Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition

Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition

Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition

Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition

Update Installer for WildTangent Games App

Validity WBF DDK

Virtual Villagers 4 - The Tree of Life

VMware Player

WildTangent Games App (HP Games)

Windows Live Communications Platform

Windows Live Essentials

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Language Selector

Windows Live Mail

Windows Live Mesh

Windows Live Mesh ActiveX Control for Remote Connections

Windows Live Messenger

Windows Live MIME IFilter

Windows Live Movie Maker

Windows Live Photo Common

Windows Live Photo Gallery

Windows Live PIMT Platform

Windows Live Remote Client

Windows Live Remote Client Resources

Windows Live Remote Service

Windows Live Remote Service Resources

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

winpcap-overlook 4.02

Zuma's Revenge

.

==== Event Viewer Messages From Past Week ========

.

7/3/2013 6:55:22 AM, Error: Tcpip [4199] - The system detected an address conflict for IP address 10.1.10.231 with the system having network hardware address 00-1B-A9-A6-9F-24. Network operations on this

system may be disrupted as a result.

7/3/2013 6:46:59 AM, Error: Service Control Manager [7023] - The VMware USB Arbitration Service service terminated with the following error: A device attached to the system is not functioning.

6/29/2013 8:12:35 AM, Error: BROWSER [8019] - The browser was unable to promote itself to master browser. The browser will continue to attempt to promote itself to the master browser, but will no longer log any

events in the event log in Event Viewer.

6/29/2013 6:50:42 AM, Error: BROWSER [8020] - The browser was unable to promote itself to master browser. The computer that currently believes it is the master browser is unknown.

6/29/2013 6:31:17 AM, Error: NetBT [4321] - The name "WORKGROUP :1d" could not be registered on the interface with IP address 10.1.10.222. The computer with the IP address 10.1.10.189 did not allow the

name to be claimed by this computer.

.

==== End Of File ===========================

Thanks for any help!

gringo_pr · July 5, 2013

Hello galen222

I would like to welcome you to the Malware Removal section of the forum.

Around here they call me Gringo and I will be glad to help you with your malware problems.

Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!

Please do not run any tools unless instructed to do so.
- We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
Please do not attach logs or use code boxes, just copy and paste the text.
- Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
Please read every post completely before doing anything.
- Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
Please provide feedback about your experience as we go.
- A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.

NOTE: At the top of your post, click on the "Follow This Topic" Button, make sure that the "Receive notification" box is checked and that it is set to "Instantly" - This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.

These are the programs I would like you to run next, if you have any problems with one of these just skip it and move on to the next one.

-AdwCleaner-

Please download AdwCleaner by Xplode onto your desktop.

Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Delete.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the content of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[s1].txt as well.

-Junkware-Removal-Tool-

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

When they are complete let me have the two reports and let me know how things are running.

Gringo

galen222 · July 5, 2013

Gringo, hope you're having a good 4th of July, thanks for the help, notifications are now set to instant!

# AdwCleaner v2.304 - Logfile created 07/04/2013 at 21:39:27

# Updated 03/07/2013 by Xplode

# Operating system : Windows 7 Home Premium Service Pack 1 (64

bits)

# User : Galen - GALEN-HP

# Boot Mode : Normal

# Running from : C:\Users\Galen\Downloads\adwcleaner.exe

# Option [Delete]

***** [services] *****

***** [Files / Folders] *****

***** [Registry] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer

\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer

\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer

\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}

Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface

\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet

Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-

B231E3B8F827}

Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet

Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-

255E89CF9671}

Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet

Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-

1E77B5924DC3}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer

\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer

\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer

\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}

***** [internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16611

[OK] Registry is clean.

-\\ Mozilla Firefox v16.0.2 (en-US)

File : C:\Users\Galen\AppData\Roaming\Mozilla\Firefox\Profiles

\0xswhxh4.default\prefs.js

[OK] File is clean.

-\\ Google Chrome v27.0.1453.116

File : C:\Users\Galen\AppData\Local\Google\Chrome\User Data\Default

\Preferences

[OK] File is clean.

*************************

AdwCleaner[s1].txt - [1941 octets] - [04/07/2013 21:39:27]

########## EOF - C:\AdwCleaner[s1].txt - [2001 octets]

##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 4.9.4 (05.06.2013:1)

OS: Windows 7 Home Premium x64

Ran by Galen on Thu 07/04/2013 at 21:54:25.47

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{DEEDCCED-8C4A-4D14-BF75-B30F21474688}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{DEEDCCED-8C4A-4D14-BF75-B30F21474688}

~~~ Files

~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Galen\appdata\local\{0E793457-9CB7-451C-AF71-5CF184B6151E}

Successfully deleted: [Empty Folder] C:\Users\Galen\appdata\local\{1B34E8B8-27C2-45E9-A39A-284723F20F8C}

Successfully deleted: [Empty Folder] C:\Users\Galen\appdata\local\{291D0C66-F12D-41DA-91AB-A25BCC1A12FB}

Successfully deleted: [Empty Folder] C:\Users\Galen\appdata\local\{2F7175D3-FFBF-4B61-8ABD-D883D306F7CE}

Successfully deleted: [Empty Folder] C:\Users\Galen\appdata\local\{825E4D24-333C-4825-8949-4545A7B52B67}

Successfully deleted: [Empty Folder] C:\Users\Galen\appdata\local\{91F10A0D-76DE-48FD-AB6B-DC67F70D4B19}

Successfully deleted: [Empty Folder] C:\Users\Galen\appdata\local\{A913C34F-FBC5-4852-9615-30BA778042B5}

Successfully deleted: [Empty Folder] C:\Users\Galen\appdata\local\{BF62E9DC-3A0B-4BD7-BB28-F4D2401B75FE}

Successfully deleted: [Empty Folder] C:\Users\Galen\appdata\local\{E4F278A8-ED73-41F4-B23C-65391B1D4E49}

~~~ FireFox

Emptied folder: C:\Users\Galen\AppData\Roaming\mozilla\firefox\profiles\0xswhxh4.default\minidumps [27 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Thu 07/04/2013 at 22:04:15.87

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Things are pretty much running the same, cpu usage fluctuating between 5-10%, 30-40% and 80-mid 90%. Processes have come down by 1 to 89, was running in the 90's.

Galen

galen222 · July 5, 2013

length of Boot/start up time unchanged

gringo_pr · July 5, 2013

Hello galen222

I Would like you to do the following.

Please print out or make a copy in notepad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.

Run Combofix:

You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)

Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<

Combofix may need to reboot your computer more than once to do its job this is normal.

You can download Combofix from one of these links. I want you to save it to the desktop and run it from there.

Link 1
Link 2
Link 3

1. Close any open browsers or any other programs that are open.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.

When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." Please restart the computer

"information and logs"

In your next post I need the following
Log from Combofix
let me know of any problems you may have had
How is the computer doing now?

Gringo

galen222 · July 5, 2013

Gringo,

I downloaded and ran ComboFix exactly as instructed. I am running Norton Security Suite and temporarily disabled the antivirus, firewall & antispam, however when running ComboFix it alerted me that Norton antispam was still running. I checked norton and it showed all three disabled, so I continued and ran ComboFix anyway.

ComboFix 13-07-04.01 - Galen 07/05/2013 8:47.1.4 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.7650.5867 [GMT -4:00]

Running from: c:\users\Galen\Desktop\ComboFix.exe

AV: Norton Security Suite *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}

FW: Norton Security Suite *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

SP: Norton Security Suite *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

* Created a new restore point

.

((((((((((((((((((((((((( Files Created from 2013-06-05 to 2013-07-05 )))))))))))))))))))))))))))))))

.

2013-07-05 12:59 . 2013-07-05 12:59 -------- d-----w- c:\users\Default\AppData\Local\temp

2013-07-05 01:54 . 2013-07-05 01:54 -------- d-----w- c:\windows\ERUNT

2013-07-05 01:46 . 2013-07-05 01:46 -------- d-----w- C:\JRT

2013-07-04 18:51 . 2013-07-04 18:51 -------- d-----w- c:\users\Galen\AppData\Roaming\Malwarebytes

2013-07-04 18:50 . 2013-07-04 18:50 -------- d-----w- c:\programdata\Malwarebytes

2013-07-04 18:50 . 2013-07-04 18:50 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

2013-07-04 18:50 . 2013-04-04 18:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys

2013-07-04 18:49 . 2013-07-04 18:49 -------- d-----w- c:\users\Galen\AppData\Local\Programs

2013-06-24 11:04 . 2013-06-24 11:04 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll

2013-06-14 22:43 . 2013-05-17 01:25 257536 ----a-w- c:\program files (x86)\Internet Explorer\ieproxy.dll

2013-06-13 23:29 . 2013-05-08 06:39 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys

2013-06-11 13:06 . 2008-05-07 23:59 99840 ----a-w- c:\windows\system32\Spool\prtprocs\x64\HPZPPLHN.DLL

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-06-24 11:04 . 2012-10-30 14:18 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll

2013-06-24 11:04 . 2012-10-30 14:18 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll

2013-06-14 22:44 . 2012-09-04 23:42 75825640 ----a-w- c:\windows\system32\MRT.exe

2013-06-14 01:12 . 2012-03-10 02:08 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-06-14 01:12 . 2012-03-10 02:08 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2013-05-22 11:34 . 2011-03-29 02:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2013-05-01 07:59 . 2013-05-01 07:59 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx

2013-05-01 07:59 . 2013-05-01 07:59 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts

2013-04-13 05:49 . 2013-05-19 00:38 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll

2013-04-13 05:49 . 2013-05-19 00:38 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll

2013-04-13 05:49 . 2013-05-19 00:38 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll

2013-04-13 05:49 . 2013-05-19 00:38 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll

2013-04-13 04:45 . 2013-05-19 00:38 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll

2013-04-13 04:45 . 2013-05-19 00:38 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll

2013-04-12 14:45 . 2013-04-24 11:06 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys

2013-04-10 05:24 . 2013-05-19 00:38 983912 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys

2013-04-10 05:24 . 2013-05-19 00:38 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys

2013-04-10 03:30 . 2013-05-19 00:38 3153920 ----a-w- c:\windows\system32\win32k.sys

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-04-05 59720]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-01-27 630912]

"HPOSD"="c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" [2011-08-19 379960]

"HP CoolSense"="c:\program files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe" [2012-11-05 1343904]

"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]

"HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2012-03-05 578944]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]

"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" [2013-05-11 3478600]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"mixer1"=wdmaud.drv

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [x]

R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]

R3 getbus;getbus;c:\users\Galen\AppData\Local\Temp\getbus.sys;c:\users\Galen\AppData\Local\Temp\getbus.sys [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]

R3 SmbDrv;SmbDrv;c:\windows\system32\drivers\Smb_driver.sys;c:\windows\SYSNATIVE\drivers\Smb_driver.sys [x]

R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x]

R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]

R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNXT6.SYS [x]

R3 TrueService;TrueAPI Service component;c:\program files\Common Files\AuthenTec\TrueService.exe;c:\program files\Common Files\AuthenTec\TrueService.exe [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]

R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]

S0 amd_sata;amd_sata;c:\windows\system32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys [x]

S0 amd_xata;amd_xata;c:\windows\system32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys [x]

S0 amdkmpfd;AMD PCI Root Bus Lower Filter;c:\windows\system32\drivers\amdkmpfd.sys;c:\windows\SYSNATIVE\drivers\amdkmpfd.sys [x]

S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\1403010.016\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\SYMDS64.SYS [x]

S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\1403010.016\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\SYMEFA64.SYS [x]

S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\BHDrvx64.sys [x]

S1 ccSet_N360;Norton Security Suite Settings Manager;c:\windows\system32\drivers\N360x64\1403010.016\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\ccSetx64.sys [x]

S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130704.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130704.001\IDSvia64.sys [x]

S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\1403010.016\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\N360x64\1403010.016\Ironx64.SYS [x]

S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\N360x64\1403010.016\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\N360x64\1403010.016\SYMNETS.SYS [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]

S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]

S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]

S2 APXACC;AppEx Networks Accelerator LWF;c:\windows\system32\DRIVERS\appexDrv.sys;c:\windows\SYSNATIVE\DRIVERS\appexDrv.sys [x]

S2 FPLService;TrueSuiteService;c:\program files (x86)\HP SimplePass\TrueSuiteService.exe;c:\program files (x86)\HP SimplePass\TrueSuiteService.exe [x]

S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]

S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [x]

S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]

S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [x]

S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]

S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]

S2 N360;Norton Security Suite;c:\program files (x86)\Norton Security Suite\Engine\20.3.1.22\ccSvcHst.exe;c:\program files (x86)\Norton Security Suite\Engine\20.3.1.22\ccSvcHst.exe [x]

S2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys;c:\windows\SYSNATIVE\drivers\npf.sys [x]

S2 valWBFPolicyService;Validity WBF Policy Service;c:\windows\system32\valWBFPolicyService.exe;c:\windows\SYSNATIVE\valWBFPolicyService.exe [x]

S2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys;c:\windows\SYSNATIVE\drivers\vmci.sys [x]

S3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\drivers\amdhub30.sys;c:\windows\SYSNATIVE\drivers\amdhub30.sys [x]

S3 amdiox64;AMD IO Driver;c:\windows\system32\drivers\amdiox64.sys;c:\windows\SYSNATIVE\drivers\amdiox64.sys [x]

S3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\drivers\amdxhc.sys;c:\windows\SYSNATIVE\drivers\amdxhc.sys [x]

S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]

S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]

S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]

S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x]

S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2013-06-20 21:39 1165776 ----a-w- c:\program files (x86)\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe

.

Contents of the 'Scheduled Tasks' folder

.

2013-07-05 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-10 01:12]

.

2013-07-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-03-02 22:29]

.

2013-07-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-03-02 22:29]

.

2013-06-24 c:\windows\Tasks\HPCeeScheduleForGalen.job

- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15 12:43]

.

--------- X64 Entries -----------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SetDefault"="c:\program files\Hewlett-Packard\HP LaunchBox\SetDefault.exe" [2011-12-20 44880]

"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2012-10-03 1425408]

"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2013-03-21 472992]

.

------- Supplementary Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

IE: Add to Evernote 4.0 - c:\program files (x86)\Evernote\Evernote\EvernoteIE.dll/204

IE: Append Link Target to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Append to Existing PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert Link Target to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

IE: Convert to Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECapture.html

IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000

IE: Se&nd to OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105

LSP: c:\program files (x86)\VMware\VMware Player\vsocklib.dll

TCP: DhcpNameServer = 75.75.75.75 75.75.76.76

FF - ProfilePath - c:\users\Galen\AppData\Roaming\Mozilla\Firefox\Profiles\0xswhxh4.default\

FF - ExtSQL: 2013-05-13 17:46; web2pdfextension@web2pdf.adobedotcom; c:\program files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn

FF - ExtSQL: 2013-06-06 07:27; {BBDA0591-3099-440a-AA10-41764D9DB4DB}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn

FF - ExtSQL: 2013-06-09 09:55; {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn

.

- - - - ORPHANS REMOVED - - - -

.

Wow6432Node-HKLM-Run-<NO NAME> - (no file)

HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start

HKLM_Wow6432Node-ActiveSetup-{F5E7D9AF-60F6-4A30-87E3-4EA94D322CE1} - msiexec

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

AddRemove-{EE202411-2C26-49E8-9784-1BC1DBF7DE96} - c:\program files (x86)\InstallShield Installation Information\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\setup.exe

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360]

"ImagePath"="\"c:\program files (x86)\Norton Security Suite\Engine\20.3.1.22\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton Security Suite\Engine\20.3.1.22\diMaster.dll\" /prefetch:1"

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Completion time: 2013-07-05 09:03:56

ComboFix-quarantined-files.txt 2013-07-05 13:03

.

Pre-Run: 634,605,707,264 bytes free

Post-Run: 636,717,137,920 bytes free

.

- - End Of File - - CE983BABF554EC2372E9E0567FB01EC8

A36C5E4F47E84449FF07ED3517B43A31

gringo_pr · July 5, 2013

Hello galen222

I would like you to try and run these next.

TDSSKiller

Please download the latest version of TDSSKiller from here and save it to your Desktop.

Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.
Put a checkmark beside loaded modules.
A reboot will be needed to apply the changes. Do it.
TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
Then click on Change parameters in TDSSKiller.
Check all boxes then click OK.
Click the Start Scan button.
The scan should take no longer than 2 minutes.
If a suspicious object is detected, the default action will be Skip, click on Continue.
If malicious objects are found, they will show in the Scan results
Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
more than one report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". The one that I need is the larger one. Please copy and paste the contents of that file here.
Note** this report can be very long - so if the website gives you an error saying it is to long you may attache it
If the forum still complains about it being to long send me everything that is at the end of the report after where it says
==================
Scan finished
==================

and I will see if I want to see the whole report

--RogueKiller--

Download & SAVE to your Desktop RogueKiller for 32bit or Roguekiller for 64bit

Quit all programs that you may have started.
Please disconnect any external drives from the computer before you run this scan!
For Vista or Windows 7, right-click and select "Run as Administrator to start"
For Windows XP, double-click to start.
Wait until Prescan has finished ...
Then Click on "Scan" button
Wait until the Status box shows "Scan Finished"
click on "delete"
Wait until the Status box shows "Deleting Finished"
Click on "Report" and copy/paste the content of the Notepad into your next reply.
the scan will make two reports the one I would like to see is called RKreport[2].txt on your Desktop
Exit/Close RogueKiller+

send me the reports made from TDSSKiller and Roguekiller and also let me know how the computer is doing at this time.

Gringo

galen222 · July 6, 2013

******* I attempted to post this reply multiple times as a single reply, but my chrome browser kept freezing up. So I split it into multiple posts. ********

Gringo,

My laptop is now running slightly faster booting up... went from average of 2-3mins to just about 2mins. I included the report log, however why I attempted to find a saved txt report but couldn't find one so I opened the report itself, copied, pasted into an blank notepad and then saved as txt to my desktop.

My running processes are down also to 85. Upon opening my chrome browser, it did not open maximum window size, it opened smaller on my screen. Using the small chrome window, I surfed to this page to enter a reply, before typing I maximized the screen and it got stuck showing mirror toolbars of the bookmarks bar. The system monitor showed a constant CPU usage fluctuating between 28-32%. I closed chrome with the red "x" button in the top right corner and it closed easily.

I restarted chrome, came up small again so I maximized it with no issues and surfed back to this reply. My CPU usage is constant, fluctuating between 4-8% at this time. Unfortunately due to time constraints, I had to hibernate my computer in the middle of writing this email yesterday and was not able to unhibernate and complete it until this morning. Also I was unable to run RogueKillerX64 until this morning also.

I "selected all" in this reply to topic and pasted it into a blank notepad and saved it as a txt file to my desktop. I then closed chrome, and made sure all my open programs were closed before proceeding to run RogueKillerX64.

I ran RK64 and it found 4 registry entries issues, after deleting, I found 3 new files/folders on my desktop. 2 txt files and a folder called "RK_Quarantine". Neither of the two files were named RKreport[2].txt, they were both RKreport[0]-followed by a string of numbers.txt.

I opened both reports side by side and the only difference between the two was under the "Registry Entries" section, the first showed only "FOUND", next to each found registry. The second showed the fix results - 1 "Deleted", 1 "could not be found" and 2 "Replaced", so I figured you wanted to see that one and have included that below.

Additionally, after running RK64, I opened my saved txt file for this reply and added the RK64 report to it, selected all, copied and pasted this entire reply here. When pasting it here, it took approximately 2-21/2 minutes to actually show up in here after executing the "paste" command. While waiting for it to show, I hit ctrl-alt-delete and brought up my Windows Task Manager. My running processes were still at 85, but my CPU usage ran constantly fluctuating between 28-31% and my physical memory usage went from 2.09GB to 1.3GB.

After finally pasting into this reply box, the memory went back to 2.09GB and the CPU% decreased and fluctuated between 5-8%.

Reports to follow...

galen222 · July 6, 2013

Part 1 TDSSKiller Report

17:24:18.0517 5172 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42

17:24:19.0143 5172 ============================================================

17:24:19.0143 5172 Current date / time: 2013/07/05 17:24:19.0143

17:24:19.0143 5172 SystemInfo:

17:24:19.0144 5172

17:24:19.0144 5172 OS Version: 6.1.7601 ServicePack: 1.0

17:24:19.0144 5172 Product type: Workstation

17:24:19.0144 5172 ComputerName: GALEN-HP

17:24:19.0144 5172 UserName: Galen

17:24:19.0144 5172 Windows directory: C:\Windows

17:24:19.0144 5172 System windows directory: C:\Windows

17:24:19.0144 5172 Running under WOW64

17:24:19.0144 5172 Processor architecture: Intel x64

17:24:19.0144 5172 Number of processors: 4

17:24:19.0144 5172 Page size: 0x1000

17:24:19.0144 5172 Boot type: Normal boot

17:24:19.0144 5172 ============================================================

17:24:19.0807 5172 BG loaded

17:24:20.0238 5172 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

17:24:20.0254 5172 ============================================================

17:24:20.0254 5172 \Device\Harddisk0\DR0:

17:24:20.0254 5172 MBR partitions:

17:24:20.0254 5172 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800

17:24:20.0254 5172 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x54E1A800

17:24:20.0254 5172 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x54E7E800, BlocksNum 0x2694000

17:24:20.0254 5172 \Device\Harddisk0\DR0\Partition4: MBR, Type 0xC, StartLBA 0x57512800, BlocksNum 0x33000

17:24:20.0254 5172 ============================================================

17:24:20.0285 5172 C: <-> \Device\Harddisk0\DR0\Partition2

17:24:20.0347 5172 D: <-> \Device\Harddisk0\DR0\Partition3

17:24:20.0347 5172 ============================================================

17:24:20.0347 5172 Initialize success

17:24:20.0347 5172 ============================================================

17:24:54.0808 6056 ============================================================

17:24:54.0808 6056 Scan started

17:24:54.0808 6056 Mode: Manual;

17:24:54.0808 6056 ============================================================

17:24:55.0229 6056 ================ Scan system memory ========================

17:24:55.0229 6056 System memory - ok

17:24:55.0229 6056 ================ Scan services =============================

17:24:55.0525 6056 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys

17:24:55.0541 6056 1394ohci - ok

17:24:55.0588 6056 [ 899B7E724BF19F17978B6A37B864A277 ] Accelerometer C:\Windows\system32\DRIVERS\Accelerometer.sys

17:24:55.0603 6056 Accelerometer - ok

17:24:55.0650 6056 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys

17:24:55.0666 6056 ACPI - ok

17:24:55.0697 6056 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys

17:24:55.0712 6056 AcpiPmi - ok

17:24:55.0868 6056 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

17:24:55.0868 6056 AdobeARMservice - ok

17:24:56.0087 6056 [ 9915504F602D277EE47FD843A677FD15 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

17:24:56.0087 6056 AdobeFlashPlayerUpdateSvc - ok

17:24:56.0149 6056 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys

17:24:56.0149 6056 adp94xx - ok

17:24:56.0212 6056 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys

17:24:56.0227 6056 adpahci - ok

17:24:56.0274 6056 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys

17:24:56.0290 6056 adpu320 - ok

17:24:56.0336 6056 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll

17:24:56.0336 6056 AeLookupSvc - ok

17:24:56.0414 6056 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys

17:24:56.0414 6056 AFD - ok

17:24:56.0461 6056 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys

17:24:56.0477 6056 agp440 - ok

17:24:56.0508 6056 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe

17:24:56.0508 6056 ALG - ok

17:24:56.0570 6056 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys

17:24:56.0570 6056 aliide - ok

17:24:56.0633 6056 [ 9CF3CAA5E3803F12C41EF37219494300 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe

17:24:56.0633 6056 AMD External Events Utility - ok

17:24:56.0726 6056 AMD FUEL Service - ok

17:24:56.0773 6056 [ 2EF1BA6D5DC79FCE5E9216C8C2D3F193 ] amdhub30 C:\Windows\system32\drivers\amdhub30.sys

17:24:56.0773 6056 amdhub30 - ok

17:24:56.0820 6056 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys

17:24:56.0820 6056 amdide - ok

17:24:56.0867 6056 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64 C:\Windows\system32\drivers\amdiox64.sys

17:24:56.0867 6056 amdiox64 - ok

17:24:56.0945 6056 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys

17:24:56.0945 6056 AmdK8 - ok

17:24:57.0304 6056 [ F46EB9066C311EA44DBD29BBB7B710E2 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys

17:24:57.0413 6056 amdkmdag - ok

17:24:57.0460 6056 [ 6CED03A1A176526B15F2256B6C1E72BA ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys

17:24:57.0460 6056 amdkmdap - ok

17:24:57.0506 6056 [ 19D7EED3928930BAFC541F1758AA6AA1 ] amdkmpfd C:\Windows\system32\drivers\amdkmpfd.sys

17:24:57.0506 6056 amdkmpfd - ok

17:24:57.0569 6056 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys

17:24:57.0569 6056 AmdPPM - ok

17:24:57.0616 6056 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys

17:24:57.0631 6056 amdsata - ok

17:24:57.0662 6056 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys

17:24:57.0662 6056 amdsbs - ok

17:24:57.0694 6056 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys

17:24:57.0709 6056 amdxata - ok

17:24:57.0818 6056 [ 541A6C49C792ED71FB3EFF8C815CFE60 ] amdxhc C:\Windows\system32\drivers\amdxhc.sys

17:24:57.0818 6056 amdxhc - ok

17:24:57.0865 6056 [ A1434F35B7B171CB697D74D33F7D029F ] amd_sata C:\Windows\system32\drivers\amd_sata.sys

17:24:57.0865 6056 amd_sata - ok

17:24:57.0881 6056 [ E9B5A82FA268BB2D1B012030D5F4E096 ] amd_xata C:\Windows\system32\drivers\amd_xata.sys

17:24:57.0881 6056 amd_xata - ok

17:24:57.0943 6056 [ D7253A1A7A49FA40EF0BA1955AAFB346 ] AODDriver4.1 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys

17:24:57.0943 6056 AODDriver4.1 - ok

17:24:58.0037 6056 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys

17:24:58.0052 6056 AppID - ok

17:24:58.0084 6056 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll

17:24:58.0099 6056 AppIDSvc - ok

17:24:58.0162 6056 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll

17:24:58.0162 6056 Appinfo - ok

17:24:58.0271 6056 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

17:24:58.0271 6056 Apple Mobile Device - ok

17:24:58.0442 6056 [ BC6526297C2E1377949F79A3AC622BAD ] APXACC C:\Windows\system32\DRIVERS\appexDrv.sys

17:24:58.0442 6056 APXACC - ok

17:24:58.0520 6056 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys

17:24:58.0536 6056 arc - ok

17:24:58.0583 6056 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys

17:24:58.0583 6056 arcsas - ok

17:24:58.0723 6056 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

17:24:58.0754 6056 aspnet_state - ok

17:24:58.0770 6056 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys

17:24:58.0770 6056 AsyncMac - ok

17:24:58.0786 6056 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys

17:24:58.0786 6056 atapi - ok

17:24:58.0910 6056 [ B4421D8CDADC441F76BA39532A3E3414 ] athr C:\Windows\system32\DRIVERS\athrx.sys

17:24:58.0942 6056 athr - ok

17:24:59.0020 6056 [ 2B3B05C0A7768BF033217EB8F33F9C35 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys

17:24:59.0020 6056 AtiHDAudioService - ok

17:24:59.0066 6056 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

17:24:59.0066 6056 AudioEndpointBuilder - ok

17:24:59.0082 6056 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll

17:24:59.0098 6056 AudioSrv - ok

17:24:59.0144 6056 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll

17:24:59.0144 6056 AxInstSV - ok

17:24:59.0207 6056 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys

17:24:59.0207 6056 b06bdrv - ok

17:24:59.0254 6056 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys

17:24:59.0254 6056 b57nd60a - ok

17:24:59.0332 6056 [ 9E84A931DBEE0292E38ED672F6293A99 ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys

17:24:59.0363 6056 BCM43XX - ok

17:24:59.0394 6056 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll

17:24:59.0410 6056 BDESVC - ok

17:24:59.0441 6056 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys

17:24:59.0441 6056 Beep - ok

17:24:59.0488 6056 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll

17:24:59.0488 6056 BFE - ok

17:24:59.0815 6056 [ 6E10DB69DB1AA96207F4B14B18FF12F8 ] BHDrvx64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\BHDrvx64.sys

17:24:59.0815 6056 BHDrvx64 - ok

17:24:59.0878 6056 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\system32\qmgr.dll

17:24:59.0893 6056 BITS - ok

17:24:59.0956 6056 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys

17:24:59.0956 6056 blbdrive - ok

17:25:00.0002 6056 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe

17:25:00.0002 6056 Bonjour Service - ok

17:25:00.0049 6056 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys

17:25:00.0049 6056 bowser - ok

17:25:00.0096 6056 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys

17:25:00.0096 6056 BrFiltLo - ok

17:25:00.0112 6056 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys

17:25:00.0112 6056 BrFiltUp - ok

17:25:00.0174 6056 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys

17:25:00.0190 6056 BridgeMP - ok

17:25:00.0221 6056 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll

17:25:00.0221 6056 Browser - ok

17:25:00.0236 6056 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys

17:25:00.0252 6056 Brserid - ok

17:25:00.0268 6056 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys

17:25:00.0283 6056 BrSerWdm - ok

17:25:00.0330 6056 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys

17:25:00.0330 6056 BrUsbMdm - ok

17:25:00.0346 6056 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys

17:25:00.0346 6056 BrUsbSer - ok

17:25:00.0361 6056 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys

17:25:00.0377 6056 BTHMODEM - ok

17:25:00.0424 6056 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll

17:25:00.0439 6056 bthserv - ok

17:25:00.0595 6056 [ 248C952C82DF1E23775432774CBB20F1 ] ccSet_N360 C:\Windows\system32\drivers\N360x64\1403010.016\ccSetx64.sys

17:25:00.0595 6056 ccSet_N360 - ok

17:25:00.0658 6056 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys

17:25:00.0673 6056 cdfs - ok

17:25:00.0751 6056 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\drivers\cdrom.sys

17:25:00.0751 6056 cdrom - ok

17:25:00.0814 6056 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll

17:25:00.0814 6056 CertPropSvc - ok

17:25:00.0845 6056 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys

17:25:00.0845 6056 circlass - ok

17:25:00.0876 6056 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys

17:25:00.0876 6056 CLFS - ok

17:25:00.0954 6056 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

17:25:01.0016 6056 clr_optimization_v2.0.50727_32 - ok

17:25:01.0048 6056 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

17:25:01.0079 6056 clr_optimization_v2.0.50727_64 - ok

17:25:01.0141 6056 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

17:25:01.0297 6056 clr_optimization_v4.0.30319_32 - ok

17:25:01.0328 6056 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

17:25:01.0360 6056 clr_optimization_v4.0.30319_64 - ok

17:25:01.0406 6056 [ 50F92C943F18B070F166D019DFAB3D9A ] clwvd C:\Windows\system32\DRIVERS\clwvd.sys

17:25:01.0406 6056 clwvd - ok

17:25:01.0422 6056 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys

17:25:01.0422 6056 CmBatt - ok

17:25:01.0453 6056 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys

17:25:01.0453 6056 cmdide - ok

17:25:01.0484 6056 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys

17:25:01.0500 6056 CNG - ok

17:25:01.0531 6056 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys

17:25:01.0531 6056 Compbatt - ok

17:25:01.0562 6056 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys

17:25:01.0562 6056 CompositeBus - ok

17:25:01.0578 6056 COMSysApp - ok

17:25:01.0594 6056 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys

17:25:01.0594 6056 crcdisk - ok

17:25:01.0656 6056 [ D8129C49798CBBFB2E4351D4B7B8EF9C ] CryptSvc C:\Windows\system32\cryptsvc.dll

17:25:01.0656 6056 CryptSvc - ok

17:25:01.0703 6056 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll

17:25:01.0703 6056 DcomLaunch - ok

17:25:01.0734 6056 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll

17:25:01.0734 6056 defragsvc - ok

17:25:01.0781 6056 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys

17:25:01.0781 6056 DfsC - ok

17:25:01.0812 6056 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll

17:25:01.0812 6056 Dhcp - ok

17:25:01.0828 6056 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys

17:25:01.0828 6056 discache - ok

17:25:01.0859 6056 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys

17:25:01.0859 6056 Disk - ok

17:25:01.0874 6056 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll

17:25:01.0874 6056 Dnscache - ok

17:25:01.0906 6056 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll

17:25:01.0906 6056 dot3svc - ok

17:25:01.0968 6056 [ B42ED0320C6E41102FDE0005154849BB ] dot4 C:\Windows\system32\DRIVERS\Dot4.sys

17:25:01.0968 6056 dot4 - ok

17:25:01.0984 6056 [ E9F5969233C5D89F3C35E3A66A52A361 ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys

17:25:01.0984 6056 Dot4Print - ok

17:25:02.0030 6056 [ FD05A02B0370BC3000F402E543CA5814 ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys

17:25:02.0030 6056 dot4usb - ok

17:25:02.0046 6056 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll

17:25:02.0062 6056 DPS - ok

17:25:02.0077 6056 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys

17:25:02.0093 6056 drmkaud - ok

17:25:02.0124 6056 [ 1A986E433B8EB2375F55961D993746B3 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys

17:25:02.0140 6056 DXGKrnl - ok

17:25:02.0171 6056 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll

17:25:02.0171 6056 EapHost - ok

17:25:02.0264 6056 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys

17:25:02.0327 6056 ebdrv - ok

17:25:02.0389 6056 [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys

17:25:02.0389 6056 eeCtrl - ok

17:25:02.0420 6056 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe

17:25:02.0420 6056 EFS - ok

17:25:02.0483 6056 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe

17:25:02.0498 6056 ehRecvr - ok

17:25:02.0514 6056 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe

17:25:02.0530 6056 ehSched - ok

17:25:02.0561 6056 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys

17:25:02.0576 6056 elxstor - ok

17:25:02.0623 6056 [ C5BCCB378D0A896304A3E71BE7215983 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

17:25:02.0623 6056 EraserUtilRebootDrv - ok

17:25:02.0654 6056 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys

17:25:02.0654 6056 ErrDev - ok

17:25:02.0717 6056 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll

17:25:02.0717 6056 EventSystem - ok

17:25:02.0748 6056 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys

17:25:02.0748 6056 exfat - ok

17:25:02.0764 6056 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys

17:25:02.0764 6056 fastfat - ok

17:25:02.0795 6056 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe

17:25:02.0810 6056 Fax - ok

17:25:02.0857 6056 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys

17:25:02.0857 6056 fdc - ok

17:25:02.0888 6056 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll

17:25:02.0888 6056 fdPHost - ok

17:25:02.0920 6056 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll

17:25:02.0920 6056 FDResPub - ok

17:25:02.0951 6056 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys

17:25:02.0951 6056 FileInfo - ok

17:25:02.0970 6056 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys

17:25:02.0972 6056 Filetrace - ok

17:25:02.0999 6056 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys

17:25:03.0001 6056 flpydisk - ok

17:25:03.0023 6056 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys

17:25:03.0027 6056 FltMgr - ok

17:25:03.0092 6056 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll

17:25:03.0109 6056 FontCache - ok

17:25:03.0144 6056 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

17:25:03.0147 6056 FontCache3.0.0.0 - ok

17:25:03.0251 6056 [ 3A5C8F2F3500833F614BB509A1270971 ] FPLService C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe

17:25:03.0267 6056 FPLService - ok

17:25:03.0298 6056 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys

17:25:03.0298 6056 FsDepends - ok

17:25:03.0329 6056 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys

17:25:03.0329 6056 Fs_Rec - ok

17:25:03.0376 6056 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys

17:25:03.0376 6056 fvevol - ok

17:25:03.0423 6056 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys

17:25:03.0423 6056 gagp30kx - ok

17:25:03.0485 6056 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe

17:25:03.0485 6056 GamesAppService - ok

17:25:03.0563 6056 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

17:25:03.0563 6056 GEARAspiWDM - ok

17:25:03.0797 6056 getbus - ok

17:25:03.0844 6056 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll

17:25:03.0844 6056 gpsvc - ok

17:25:03.0953 6056 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

17:25:03.0969 6056 gupdate - ok

17:25:03.0969 6056 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

17:25:03.0969 6056 gupdatem - ok

17:25:04.0016 6056 [ B93B24F258441820E575C7983BA47313 ] hcmon C:\Windows\system32\drivers\hcmon.sys

17:25:04.0016 6056 hcmon - ok

17:25:04.0063 6056 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys

17:25:04.0063 6056 hcw85cir - ok

17:25:04.0125 6056 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys

17:25:04.0141 6056 HdAudAddService - ok

17:25:04.0187 6056 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys

17:25:04.0187 6056 HDAudBus - ok

17:25:04.0219 6056 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys

17:25:04.0234 6056 HidBatt - ok

17:25:04.0281 6056 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys

17:25:04.0281 6056 HidBth - ok

17:25:04.0297 6056 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys

17:25:04.0312 6056 HidIr - ok

17:25:04.0328 6056 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll

17:25:04.0343 6056 hidserv - ok

17:25:04.0375 6056 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys

17:25:04.0390 6056 HidUsb - ok

17:25:04.0421 6056 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll

17:25:04.0421 6056 hkmsvc - ok

17:25:04.0437 6056 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll

17:25:04.0453 6056 HomeGroupListener - ok

17:25:04.0484 6056 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll

17:25:04.0484 6056 HomeGroupProvider - ok

17:25:04.0562 6056 [ BB1FC298BE53AAB1E110F6E786BD8AC5 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe

17:25:04.0562 6056 HP Support Assistant Service - ok

17:25:04.0593 6056 [ 6A181452D4E240B8ECC7614B9A19BDE9 ] HPClientSvc C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

17:25:04.0609 6056 HPClientSvc - ok

17:25:04.0640 6056 [ D104FF402FC3DDB686E6DEF00334DB26 ] hpdskflt C:\Windows\system32\drivers\hpdskflt.sys

17:25:04.0655 6056 hpdskflt - ok

17:25:04.0780 6056 [ 514455F6586473791C5C6B25BA4E1BAB ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

17:25:04.0796 6056 hpqwmiex - ok

17:25:04.0858 6056 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys

17:25:04.0874 6056 HpSAMD - ok

17:25:04.0921 6056 [ 55FFCBB036D7BE4BCA6FA1421203A27F ] hpsrv C:\Windows\system32\Hpservice.exe

17:25:04.0936 6056 hpsrv - ok

17:25:04.0999 6056 [ 2BEC76BDCD1BC080210325E7B5094834 ] HPWMISVC C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

17:25:04.0999 6056 HPWMISVC - ok

17:25:05.0061 6056 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys

17:25:05.0077 6056 HTTP - ok

17:25:05.0092 6056 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys

17:25:05.0092 6056 hwpolicy - ok

17:25:05.0139 6056 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys

17:25:05.0155 6056 i8042prt - ok

17:25:05.0170 6056 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys

17:25:05.0186 6056 iaStorV - ok

17:25:05.0248 6056 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

17:25:05.0248 6056 idsvc - ok

17:25:05.0576 6056 [ A48928D4CCA6F8B731989DB08CF2C0AB ] IDSVia64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130704.001\IDSvia64.sys

17:25:05.0591 6056 IDSVia64 - ok

17:25:05.0638 6056 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys

17:25:05.0638 6056 iirsp - ok

17:25:05.0701 6056 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll

17:25:05.0701 6056 IKEEXT - ok

17:25:05.0747 6056 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys

17:25:05.0747 6056 intelide - ok

17:25:05.0779 6056 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\drivers\intelppm.sys

17:25:05.0779 6056 intelppm - ok

17:25:05.0794 6056 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll

17:25:05.0794 6056 IPBusEnum - ok

17:25:05.0825 6056 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys

17:25:05.0825 6056 IpFilterDriver - ok

17:25:05.0857 6056 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll

17:25:05.0872 6056 iphlpsvc - ok

17:25:05.0903 6056 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys

17:25:05.0903 6056 IPMIDRV - ok

17:25:05.0919 6056 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys

17:25:05.0919 6056 IPNAT - ok

17:25:05.0981 6056 [ 2872B90D57C8310194A78A9787406467 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe

17:25:05.0997 6056 iPod Service - ok

17:25:06.0028 6056 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys

17:25:06.0044 6056 IRENUM - ok

17:25:06.0044 6056 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys

17:25:06.0059 6056 isapnp - ok

17:25:06.0091 6056 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys

17:25:06.0091 6056 iScsiPrt - ok

17:25:06.0137 6056 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys

17:25:06.0137 6056 kbdclass - ok

17:25:06.0169 6056 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys

17:25:06.0169 6056 kbdhid - ok

17:25:06.0184 6056 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe

17:25:06.0200 6056 KeyIso - ok

17:25:06.0231 6056 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys

17:25:06.0231 6056 KSecDD - ok

17:25:06.0262 6056 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys

17:25:06.0262 6056 KSecPkg - ok

17:25:06.0309 6056 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys

17:25:06.0309 6056 ksthunk - ok

17:25:06.0356 6056 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll

17:25:06.0356 6056 KtmRm - ok

17:25:06.0403 6056 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll

17:25:06.0403 6056 LanmanServer - ok

17:25:06.0434 6056 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

17:25:06.0449 6056 LanmanWorkstation - ok

17:25:06.0481 6056 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys

17:25:06.0481 6056 lltdio - ok

17:25:06.0512 6056 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll

17:25:06.0527 6056 lltdsvc - ok

17:25:06.0543 6056 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll

17:25:06.0543 6056 lmhosts - ok

17:25:06.0574 6056 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys

17:25:06.0590 6056 LSI_FC - ok

17:25:06.0605 6056 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys

17:25:06.0605 6056 LSI_SAS - ok

17:25:06.0637 6056 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys

17:25:06.0637 6056 LSI_SAS2 - ok

17:25:06.0668 6056 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys

17:25:06.0668 6056 LSI_SCSI - ok

17:25:06.0699 6056 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys

17:25:06.0699 6056 luafv - ok

17:25:06.0746 6056 [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys

17:25:06.0746 6056 MBAMProtector - ok

17:25:06.0824 6056 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

17:25:06.0824 6056 MBAMScheduler - ok

17:25:06.0855 6056 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

17:25:06.0855 6056 MBAMService - ok

17:25:06.0886 6056 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll

17:25:06.0902 6056 Mcx2Svc - ok

17:25:06.0933 6056 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys

17:25:06.0933 6056 megasas - ok

17:25:06.0980 6056 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys

17:25:06.0995 6056 MegaSR - ok

17:25:07.0058 6056 Microsoft SharePoint Workspace Audit Service - ok

17:25:07.0073 6056 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll

17:25:07.0089 6056 MMCSS - ok

17:25:07.0105 6056 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys

17:25:07.0105 6056 Modem - ok

17:25:07.0136 6056 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys

17:25:07.0136 6056 monitor - ok

17:25:07.0183 6056 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys

17:25:07.0183 6056 mouclass - ok

17:25:07.0214 6056 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys

17:25:07.0214 6056 mouhid - ok

17:25:07.0245 6056 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys

17:25:07.0245 6056 mountmgr - ok

17:25:07.0323 6056 [ 8BE15F71DE6FF33FC56DCDE7B2B9EFE8 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

17:25:07.0323 6056 MozillaMaintenance - ok

17:25:07.0354 6056 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys

17:25:07.0354 6056 mpio - ok

17:25:07.0385 6056 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys

17:25:07.0385 6056 mpsdrv - ok

17:25:07.0417 6056 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll

17:25:07.0432 6056 MpsSvc - ok

17:25:07.0463 6056 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys

17:25:07.0463 6056 MRxDAV - ok

17:25:07.0479 6056 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys

17:25:07.0495 6056 mrxsmb - ok

17:25:07.0526 6056 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys

17:25:07.0526 6056 mrxsmb10 - ok

17:25:07.0541 6056 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys

17:25:07.0541 6056 mrxsmb20 - ok

17:25:07.0573 6056 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys

17:25:07.0573 6056 msahci - ok

17:25:07.0604 6056 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys

17:25:07.0619 6056 msdsm - ok

17:25:07.0635 6056 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe

17:25:07.0635 6056 MSDTC - ok

17:25:07.0666 6056 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys

17:25:07.0666 6056 Msfs - ok

17:25:07.0682 6056 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys

17:25:07.0682 6056 mshidkmdf - ok

17:25:07.0713 6056 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys

17:25:07.0713 6056 msisadrv - ok

17:25:07.0744 6056 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll

17:25:07.0760 6056 MSiSCSI - ok

17:25:07.0760 6056 msiserver - ok

17:25:07.0791 6056 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys

17:25:07.0791 6056 MSKSSRV - ok

17:25:07.0807 6056 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys

17:25:07.0807 6056 MSPCLOCK - ok

17:25:07.0838 6056 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys

17:25:07.0838 6056 MSPQM - ok

17:25:07.0869 6056 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys

17:25:07.0869 6056 MsRPC - ok

17:25:07.0900 6056 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys

17:25:07.0900 6056 mssmbios - ok

17:25:07.0931 6056 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys

17:25:07.0931 6056 MSTEE - ok

17:25:07.0963 6056 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys

17:25:07.0963 6056 MTConfig - ok

17:25:07.0994 6056 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys

17:25:07.0994 6056 Mup - ok

17:25:08.0087 6056 [ 241BD3019FB31E812A51B31B06906335 ] N360 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccSvcHst.exe

17:25:08.0087 6056 N360 - ok

17:25:08.0134 6056 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll

17:25:08.0150 6056 napagent - ok

17:25:08.0197 6056 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys

17:25:08.0197 6056 NativeWifiP - ok

17:25:08.0290 6056 [ 56540E526B46E379A476FB5BC381B290 ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130704.021\ENG64.SYS

17:25:08.0290 6056 NAVENG - ok

17:25:08.0353 6056 [ 8A19D3991F9F14B885CDE8BC640F6B68 ] NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130704.021\EX64.SYS

17:25:08.0368 6056 NAVEX15 - ok

17:25:08.0431 6056 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys

17:25:08.0446 6056 NDIS - ok

17:25:08.0509 6056 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys

17:25:08.0509 6056 NdisCap - ok

17:25:08.0540 6056 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys

17:25:08.0540 6056 NdisTapi - ok

17:25:08.0555 6056 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys

17:25:08.0571 6056 Ndisuio - ok

17:25:08.0587 6056 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys

17:25:08.0587 6056 NdisWan - ok

17:25:08.0602 6056 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys

17:25:08.0602 6056 NDProxy - ok

17:25:08.0618 6056 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys

17:25:08.0618 6056 NetBIOS - ok

17:25:08.0633 6056 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys

17:25:08.0633 6056 NetBT - ok

17:25:08.0649 6056 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe

17:25:08.0649 6056 Netlogon - ok

17:25:08.0711 6056 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll

17:25:08.0711 6056 Netman - ok

17:25:08.0774 6056 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

17:25:08.0805 6056 NetMsmqActivator - ok

17:25:08.0836 6056 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

17:25:08.0836 6056 NetPipeActivator - ok

17:25:08.0867 6056 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll

17:25:08.0867 6056 netprofm - ok

17:25:08.0883 6056 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

17:25:08.0883 6056 NetTcpActivator - ok

17:25:08.0883 6056 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

17:25:08.0883 6056 NetTcpPortSharing - ok

17:25:08.0930 6056 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys

17:25:08.0930 6056 nfrd960 - ok

17:25:08.0961 6056 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll

17:25:08.0977 6056 NlaSvc - ok

17:25:09.0023 6056 [ 3CEEE0BE85D24D911B9C02714817774C ] npf C:\Windows\system32\drivers\npf.sys

17:25:09.0023 6056 npf - ok

17:25:09.0055 6056 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys

17:25:09.0055 6056 Npfs - ok

17:25:09.0086 6056 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll

17:25:09.0086 6056 nsi - ok

17:25:09.0117 6056 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys

17:25:09.0117 6056 nsiproxy - ok

17:25:09.0179 6056 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys

17:25:09.0211 6056 Ntfs - ok

17:25:09.0226 6056 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys

17:25:09.0226 6056 Null - ok

17:25:09.0257 6056 [ A85B4F2EF3A7304A5399EF0526423040 ] NVENETFD C:\Windows\system32\DRIVERS\nvm62x64.sys

17:25:09.0273 6056 NVENETFD - ok

17:25:09.0320 6056 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys

17:25:09.0320 6056 nvraid - ok

17:25:09.0367 6056 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys

17:25:09.0367 6056 nvstor - ok

17:25:09.0398 6056 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys

17:25:09.0413 6056 nv_agp - ok

17:25:09.0429 6056 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys

17:25:09.0429 6056 ohci1394 - ok

17:25:09.0507 6056 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

17:25:09.0507 6056 ose - ok

17:25:09.0679 6056 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

17:25:09.0741 6056 osppsvc - ok

17:25:09.0772 6056 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll

17:25:09.0788 6056 p2pimsvc - ok

17:25:09.0819 6056 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll

17:25:09.0819 6056 p2psvc - ok

17:25:09.0866 6056 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys

17:25:09.0866 6056 Parport - ok

17:25:09.0897 6056 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys

17:25:09.0897 6056 partmgr - ok

17:25:09.0928 6056 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll

17:25:09.0928 6056 PcaSvc - ok

17:25:09.0959 6056 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys

17:25:09.0975 6056 pci - ok

17:25:09.0991 6056 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys

17:25:09.0991 6056 pciide - ok

17:25:10.0022 6056 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys

17:25:10.0037 6056 pcmcia - ok

17:25:10.0069 6056 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys

17:25:10.0069 6056 pcw - ok

17:25:10.0100 6056 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys

17:25:10.0100 6056 PEAUTH - ok

17:25:10.0178 6056 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe

17:25:10.0178 6056 PerfHost - ok

17:25:10.0256 6056 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll

17:25:10.0271 6056 pla - ok

17:25:10.0318 6056 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll

17:25:10.0334 6056 PlugPlay - ok

17:25:10.0349 6056 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll

17:25:10.0349 6056 PNRPAutoReg - ok

17:25:10.0381 6056 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll

17:25:10.0381 6056 PNRPsvc - ok

17:25:10.0427 6056 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll

17:25:10.0443 6056 PolicyAgent - ok

17:25:10.0459 6056 [ A2CCA4FB273E6050F17A0A416CFF2FCD ] Power C:\Windows\system32\umpo.dll

17:25:10.0459 6056 Power - ok

17:25:10.0505 6056 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys

17:25:10.0505 6056 PptpMiniport - ok

17:25:10.0537 6056 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys

17:25:10.0537 6056 Processor - ok

17:25:10.0568 6056 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll

17:25:10.0583 6056 ProfSvc - ok

17:25:10.0599 6056 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe

17:25:10.0599 6056 ProtectedStorage - ok

17:25:10.0630 6056 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys

17:25:10.0630 6056 Psched - ok

17:25:10.0693 6056 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys

17:25:10.0724 6056 ql2300 - ok

17:25:10.0755 6056 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys

17:25:10.0755 6056 ql40xx - ok

17:25:10.0802 6056 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll

17:25:10.0817 6056 QWAVE - ok

17:25:10.0849 6056 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys

17:25:10.0849 6056 QWAVEdrv - ok

17:25:10.0864 6056 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys

17:25:10.0880 6056 RasAcd - ok

17:25:10.0927 6056 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys

17:25:10.0927 6056 RasAgileVpn - ok

17:25:10.0942 6056 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll

17:25:10.0942 6056 RasAuto - ok

17:25:10.0973 6056 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys

17:25:10.0973 6056 Rasl2tp - ok

17:25:10.0989 6056 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll

17:25:11.0005 6056 RasMan - ok

17:25:11.0020 6056 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys

17:25:11.0020 6056 RasPppoe - ok

17:25:11.0051 6056 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys

17:25:11.0051 6056 RasSstp - ok

17:25:11.0067 6056 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys

17:25:11.0067 6056 rdbss - ok

17:25:11.0098 6056 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys

17:25:11.0098 6056 rdpbus - ok

17:25:11.0114 6056 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys

17:25:11.0114 6056 RDPCDD - ok

17:25:11.0145 6056 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys

17:25:11.0145 6056 RDPENCDD - ok

17:25:11.0161 6056 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys

17:25:11.0176 6056 RDPREFMP - ok

17:25:11.0207 6056 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys

17:25:11.0207 6056 RdpVideoMiniport - ok

17:25:11.0254 6056 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys

17:25:11.0254 6056 RDPWD - ok

17:25:11.0285 6056 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys

17:25:11.0301 6056 rdyboost - ok

17:25:11.0348 6056 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll

17:25:11.0348 6056 RemoteAccess - ok

17:25:11.0379 6056 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll

17:25:11.0395 6056 RemoteRegistry - ok

17:25:11.0395 6056 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll

17:25:11.0395 6056 RpcEptMapper - ok

17:25:11.0426 6056 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe

17:25:11.0426 6056 RpcLocator - ok

17:25:11.0441 6056 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll

17:25:11.0457 6056 RpcSs - ok

17:25:11.0504 6056 [ A1D5FFEFDBEB3881EC3D74CC7136847F ] RSP2STOR C:\Windows\system32\DRIVERS\RtsP2Stor.sys

17:25:11.0504 6056 RSP2STOR - ok

17:25:11.0551 6056 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys

17:25:11.0551 6056 rspndr - ok

17:25:11.0566 6056 [ 7F4F11527AF5A7E4526CB6A146B3E40C ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys

17:25:11.0582 6056 RTL8167 - ok

17:25:11.0597 6056 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe

17:25:11.0613 6056 SamSs - ok

17:25:11.0644 6056 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys

17:25:11.0644 6056 sbp2port - ok

17:25:11.0675 6056 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll

17:25:11.0675 6056 SCardSvr - ok

17:25:11.0691 6056 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys

17:25:11.0691 6056 scfilter - ok

17:25:11.0722 6056 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll

17:25:11.0738 6056 Schedule - ok

17:25:11.0769 6056 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll

17:25:11.0769 6056 SCPolicySvc - ok

17:25:11.0816 6056 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys

17:25:11.0816 6056 sdbus - ok

17:25:11.0847 6056 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll

17:25:11.0847 6056 SDRSVC - ok

17:25:11.0878 6056 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys

17:25:11.0878 6056 secdrv - ok

17:25:11.0894 6056 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll

17:25:11.0894 6056 seclogon - ok

17:25:11.0909 6056 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll

17:25:11.0925 6056 SENS - ok

17:25:11.0941 6056 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll

17:25:11.0941 6056 SensrSvc - ok

17:25:11.0987 6056 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys

17:25:11.0987 6056 Serenum - ok

17:25:12.0019 6056 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys

17:25:12.0019 6056 Serial - ok

17:25:12.0065 6056 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys

17:25:12.0065 6056 sermouse - ok

17:25:12.0112 6056 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll

17:25:12.0112 6056 SessionEnv - ok

17:25:12.0159 6056 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys

17:25:12.0159 6056 sffdisk - ok

17:25:12.0175 6056 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys

17:25:12.0190 6056 sffp_mmc - ok

17:25:12.0206 6056 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys

17:25:12.0206 6056 sffp_sd - ok

17:25:12.0221 6056 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys

17:25:12.0221 6056 sfloppy - ok

17:25:12.0253 6056 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll

17:25:12.0253 6056 SharedAccess - ok

17:25:12.0268 6056 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll

17:25:12.0284 6056 ShellHWDetection - ok

17:25:12.0315 6056 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys

17:25:12.0315 6056 SiSRaid2 - ok

17:25:12.0362 6056 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys

17:25:12.0362 6056 SiSRaid4 - ok

17:25:12.0409 6056 [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe

17:25:12.0409 6056 SkypeUpdate - ok

17:25:12.0455 6056 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys

17:25:12.0455 6056 Smb - ok

17:25:12.0487 6056 [ 8AF2546861B179E2517EB02748B4FAB7 ] SmbDrv C:\Windows\system32\drivers\Smb_driver.sys

17:25:12.0487 6056 SmbDrv - ok

17:25:12.0549 6056 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe

17:25:12.0549 6056 SNMPTRAP - ok

17:25:12.0565 6056 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys

17:25:12.0565 6056 spldr - ok

17:25:12.0596 6056 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe

17:25:12.0611 6056 Spooler - ok

17:25:12.0721 6056 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe

17:25:12.0752 6056 sppsvc - ok

17:25:12.0783 6056 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll

17:25:12.0783 6056 sppuinotify - ok

17:25:12.0892 6056 [ 378A0748DE5ADF90BF9DB897DA8564E6 ] SRTSP C:\Windows\System32\Drivers\N360x64\1403010.016\SRTSP64.SYS

17:25:12.0908 6056 SRTSP - ok

17:25:12.0923 6056 [ 0E76CEF892C45734F7AED09FDDF35D4D ] SRTSPX C:\Windows\system32\drivers\N360x64\1403010.016\SRTSPX64.SYS

17:25:12.0923 6056 SRTSPX - ok

17:25:12.0970 6056 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys

17:25:12.0970 6056 srv - ok

17:25:13.0017 6056 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys

17:25:13.0017 6056 srv2 - ok

17:25:13.0064 6056 [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL6.SYS

17:25:13.0064 6056 SrvHsfHDA - ok

17:25:13.0111 6056 [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV6.SYS

17:25:13.0142 6056 SrvHsfV92 - ok

17:25:13.0173 6056 [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT6.SYS

17:25:13.0189 6056 SrvHsfWinac - ok

17:25:13.0204 6056 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys

17:25:13.0204 6056 srvnet - ok

17:25:13.0251 6056 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll

17:25:13.0267 6056 SSDPSRV - ok

17:25:13.0282 6056 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll

17:25:13.0282 6056 SstpSvc - ok

17:25:13.0376 6056 [ 97F839E8AEC48EE271509BF4BC764C24 ] STacSV C:\Program Files\IDT\WDM\STacSV64.exe

17:25:13.0391 6056 STacSV - ok

17:25:13.0391 6056 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys

17:25:13.0391 6056 stexstor - ok

17:25:13.0438 6056 [ 7E89F65EB250463EE8665CFE19566FC3 ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys

17:25:13.0454 6056 STHDA - ok

17:25:13.0501 6056 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll

17:25:13.0501 6056 stisvc - ok

17:25:13.0516 6056 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys

17:25:13.0516 6056 swenum - ok

17:25:13.0547 6056 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll

17:25:13.0563 6056 swprv - ok

17:25:13.0594 6056 [ E174C8BC572E93AEEE1036DEDAC5F225 ] SymDS C:\Windows\system32\drivers\N360x64\1403010.016\SYMDS64.SYS

17:25:13.0610 6056 SymDS - ok

17:25:13.0657 6056 [ 599872BAD7CFB45C7CE47CDED4B726D8 ] SymEFA C:\Windows\system32\drivers\N360x64\1403010.016\SYMEFA64.SYS

17:25:13.0672 6056 SymEFA - ok

17:25:13.0719 6056 [ F5D6D3B7468C46EA2DDC1D19D2A6DA0F ] SymEvent C:\Windows\system32\Drivers\SYMEVENT64x86.SYS

17:25:13.0719 6056 SymEvent - ok

17:25:13.0750 6056 [ ADF37F1A715D6C56C8E065FD8569A9A4 ] SymIRON C:\Windows\system32\drivers\N360x64\1403010.016\Ironx64.SYS

17:25:13.0750 6056 SymIRON - ok

17:25:13.0797 6056 [ 1605EBD8CB86AFC4430116065995279A ] SymNetS C:\Windows\System32\Drivers\N360x64\1403010.016\SYMNETS.SYS

17:25:13.0813 6056 SymNetS - ok

17:25:13.0859 6056 [ AC3CC98B1BDB6540021D3FFB105AC2B9 ] SynTP C:\Windows\system32\drivers\SynTP.sys

17:25:13.0875 6056 SynTP - ok

17:25:13.0937 6056 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll

17:25:13.0953 6056 SysMain - ok

17:25:13.0969 6056 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll

17:25:13.0984 6056 TabletInputService - ok

17:25:14.0000 6056 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll

17:25:14.0000 6056 TapiSrv - ok

17:25:14.0015 6056 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll

17:25:14.0015 6056 TBS - ok

17:25:14.0093 6056 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] Tcpip C:\Windows\system32\drivers\tcpip.sys

17:25:14.0109 6056 Tcpip - ok

17:25:14.0156 6056 [ 9849EA3843A2ADBDD1497E97A85D8CAE ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys

17:25:14.0171 6056 TCPIP6 - ok

17:25:14.0203 6056 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys

17:25:14.0203 6056 tcpipreg - ok

17:25:14.0234 6056 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys

17:25:14.0234 6056 TDPIPE - ok

17:25:14.0249 6056 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys

17:25:14.0265 6056 TDTCP - ok

17:25:14.0281 6056 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys

17:25:14.0281 6056 tdx - ok

17:25:14.0296 6056 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys

17:25:14.0312 6056 TermDD - ok

17:25:14.0359 6056 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll

17:25:14.0374 6056 TermService - ok

17:25:14.0390 6056 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll

17:25:14.0405 6056 Themes - ok

17:25:14.0437 6056 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll

17:25:14.0437 6056 THREADORDER - ok

17:25:14.0452 6056 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll

17:25:14.0452 6056 TrkWks - ok

17:25:14.0561 6056 [ 6BFB75B76411CC57A72FCC1D0201E166 ] TrueService C:\Program Files\Common Files\AuthenTec\TrueService.exe

17:25:14.0561 6056 TrueService - ok

17:25:14.0624 6056 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

17:25:14.0624 6056 TrustedInstaller - ok

17:25:14.0639 6056 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys

17:25:14.0639 6056 tssecsrv - ok

17:25:14.0686 6056 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys

17:25:14.0686 6056 TsUsbFlt - ok

17:25:14.0717 6056 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys

17:25:14.0717 6056 TsUsbGD - ok

17:25:14.0764 6056 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys

17:25:14.0764 6056 tunnel - ok

17:25:14.0795 6056 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys

17:25:14.0795 6056 uagp35 - ok

17:25:14.0827 6056 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys

17:25:14.0827 6056 udfs - ok

17:25:14.0920 6056 [ 3F2D08B07CF67CB37E669A93E59A508C ] ufad-ws60 C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe

17:25:14.0920 6056 ufad-ws60 - ok

17:25:14.0951 6056 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe

17:25:14.0967 6056 UI0Detect - ok

17:25:14.0998 6056 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys

17:25:15.0014 6056 uliagpkx - ok

17:25:15.0029 6056 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys

17:25:15.0045 6056 umbus - ok

17:25:15.0061 6056 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys

17:25:15.0061 6056 UmPass - ok

17:25:15.0076 6056 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll

17:25:15.0092 6056 upnphost - ok

17:25:15.0123 6056 [ 43228F8EDD1B0BCDD3145AD246E63D39 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys

17:25:15.0139 6056 USBAAPL64 - ok

17:25:15.0154 6056 [ 2B26FCB7C634C49313FD72120FB9946E ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys

17:25:15.0154 6056 usbccgp - ok

17:25:15.0201 6056 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys

17:25:15.0201 6056 usbcir - ok

17:25:15.0232 6056 [ AA68C758B3F225618A5FD1ED40C383C4 ] usbehci C:\Windows\system32\drivers\usbehci.sys

17:25:15.0232 6056 usbehci - ok

17:25:15.0263 6056 [ 33A58C5630200E17B51C8D73DD64181B ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys

17:25:15.0279 6056 usbfilter - ok

17:25:15.0326 6056 [ 66E1EF753543785D7E2C44719B2C5DAD ] usbhub C:\Windows\system32\drivers\usbhub.sys

17:25:15.0326 6056 usbhub - ok

17:25:15.0357 6056 [ B26ACA4784AD1295C25A7501FD4AB79E ] usbohci C:\Windows\system32\drivers\usbohci.sys

17:25:15.0357 6056 usbohci - ok

17:25:15.0404 6056 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys

17:25:15.0404 6056 usbprint - ok

17:25:15.0451 6056 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys

17:25:15.0451 6056 usbscan - ok

17:25:15.0482 6056 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS

17:25:15.0482 6056 USBSTOR - ok

17:25:15.0513 6056 [ 35944CFF264134FFD2E7EED0F8B81A56 ] usbuhci C:\Windows\system32\drivers\usbuhci.sys

17:25:15.0513 6056 usbuhci - ok

17:25:15.0544 6056 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys

17:25:15.0544 6056 usbvideo - ok

17:25:15.0575 6056 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll

17:25:15.0591 6056 UxSms - ok

17:25:15.0622 6056 [ 49F2693BC3D821FA13AD6E7D5C5FEAFF ] valWBFPolicyService C:\Windows\system32\valWBFPolicyService.exe

17:25:15.0622 6056 valWBFPolicyService - ok

17:25:15.0638 6056 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe

17:25:15.0638 6056 VaultSvc - ok

17:25:15.0653 6056 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys

17:25:15.0653 6056 vdrvroot - ok

17:25:15.0685 6056 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe

17:25:15.0700 6056 vds - ok

17:25:15.0731 6056 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys

17:25:15.0731 6056 vga - ok

17:25:15.0747 6056 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys

17:25:15.0747 6056 VgaSave - ok

17:25:15.0778 6056 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys

17:25:15.0794 6056 vhdmp - ok

17:25:15.0825 6056 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys

17:25:15.0825 6056 viaide - ok

17:25:15.0856 6056 [ 9AF896B739E3F34B9CD56EAFA84ABE60 ] VMAuthdService C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe

17:25:15.0872 6056 VMAuthdService - ok

17:25:15.0887 6056 [ CC711ED4F3D1987E84745237358FF87C ] vmci C:\Windows\system32\drivers\vmci.sys

17:25:15.0887 6056 vmci - ok

17:25:15.0919 6056 [ 98E05BA0C49AA98AA0FD998EBC33D763 ] vmkbd C:\Windows\system32\drivers\VMkbd.sys

17:25:15.0919 6056 vmkbd - ok

17:25:15.0934 6056 [ 9D54F1339E78C95BF3D9939EBCB66378 ] VMnetAdapter C:\Windows\system32\DRIVERS\vmnetadapter.sys

17:25:15.0934 6056 VMnetAdapter - ok

17:25:15.0965 6056 [ FB54EF3AA613D2832FD3812E7CB2FC75 ] VMnetBridge C:\Windows\system32\DRIVERS\vmnetbridge.sys

17:25:15.0965 6056 VMnetBridge - ok

17:25:15.0965 6056 VMnetDHCP - ok

17:25:15.0997 6056 [ 3A9AD1D1FCF673B1B7F27140E45AEFFD ] VMnetuserif C:\Windows\system32\drivers\vmnetuserif.sys

17:25:15.0997 6056 VMnetuserif - ok

17:25:16.0059 6056 [ F38F5E1D9DEC6CD1955A91AB141A88FB ] VMUSBArbService C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe

17:25:16.0075 6056 VMUSBArbService - ok

17:25:16.0090 6056 VMware NAT Service - ok

17:25:16.0137 6056 [ 884737C95B3E1281525D7BC6E9E9D11F ] vmx86 C:\Windows\system32\drivers\vmx86.sys

17:25:16.0137 6056 vmx86 - ok

17:25:16.0153 6056 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys

17:25:16.0168 6056 volmgr - ok

17:25:16.0184 6056 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys

17:25:16.0199 6056 volmgrx - ok

17:25:16.0231 6056 [ DF8126BD41180351A093A3AD2FC8903B ] volsnap C:\Windows\system32\drivers\volsnap.sys

17:25:16.0231 6056 volsnap - ok

17:25:16.0293 6056 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys

17:25:16.0293 6056 vsmraid - ok

17:25:16.0355 6056 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe

17:25:16.0387 6056 VSS - ok

17:25:16.0433 6056 [ 69F57E89E6EBC5012D210527AF005A70 ] vstor2-ws60 C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys

17:25:16.0449 6056 vstor2-ws60 - ok

17:25:16.0449 6056 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys

17:25:16.0465 6056 vwifibus - ok

17:25:16.0480 6056 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys

17:25:16.0480 6056 vwififlt - ok

17:25:16.0527 6056 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll

17:25:16.0527 6056 W32Time - ok

17:25:16.0558 6056 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys

17:25:16.0558 6056 WacomPen - ok

17:25:16.0605 6056 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys

17:25:16.0605 6056 WANARP - ok

17:25:16.0621 6056 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys

17:25:16.0621 6056 Wanarpv6 - ok

17:25:16.0699 6056 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe

17:25:16.0714 6056 WatAdminSvc - ok

17:25:16.0777 6056 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe

17:25:16.0808 6056 wbengine - ok

17:25:16.0823 6056 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll

17:25:16.0839 6056 WbioSrvc - ok

17:25:16.0855 6056 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll

17:25:16.0870 6056 wcncsvc - ok

17:25:16.0886 6056 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

17:25:16.0901 6056 WcsPlugInService - ok

17:25:16.0933 6056 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys

17:25:16.0933 6056 Wd - ok

17:25:16.0964 6056 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys

17:25:16.0979 6056 Wdf01000 - ok

17:25:17.0011 6056 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll

17:25:17.0026 6056 WdiServiceHost - ok

17:25:17.0026 6056 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll

17:25:17.0042 6056 WdiSystemHost - ok

17:25:17.0057 6056 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll

17:25:17.0073 6056 WebClient - ok

17:25:17.0089 6056 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll

17:25:17.0089 6056 Wecsvc - ok

17:25:17.0104 6056 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll

17:25:17.0120 6056 wercplsupport - ok

17:25:17.0151 6056 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll

17:25:17.0151 6056 WerSvc - ok

17:25:17.0182 6056 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys

17:25:17.0198 6056 WfpLwf - ok

17:25:17.0213 6056 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys

17:25:17.0213 6056 WIMMount - ok

17:25:17.0229 6056 WinDefend - ok

17:25:17.0245 6056 WinHttpAutoProxySvc - ok

17:25:17.0307 6056 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll

17:25:17.0323 6056 Winmgmt - ok

17:25:17.0432 6056 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll

17:25:17.0463 6056 WinRM - ok

17:25:17.0525 6056 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUSB.sys

17:25:17.0525 6056 WinUsb - ok

17:25:17.0557 6056 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll

17:25:17.0572 6056 Wlansvc - ok

17:25:17.0619 6056 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe

17:25:17.0619 6056 wlcrasvc - ok

17:25:17.0728 6056 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

17:25:17.0759 6056 wlidsvc - ok

17:25:17.0806 6056 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys

17:25:17.0806 6056 WmiAcpi - ok

17:25:17.0837 6056 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe

17:25:17.0837 6056 wmiApSrv - ok

17:25:17.0884 6056 WMPNetworkSvc - ok

17:25:17.0915 6056 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll

17:25:17.0915 6056 WPCSvc - ok

17:25:17.0931 6056 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll

17:25:17.0947 6056 WPDBusEnum - ok

17:25:17.0962 6056 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys

17:25:17.0962 6056 ws2ifsl - ok

17:25:17.0978 6056 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll

17:25:17.0993 6056 wscsvc - ok

17:25:17.0993 6056 WSearch - ok

17:25:18.0071 6056 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll

17:25:18.0118 6056 wuauserv - ok

17:25:18.0134 6056 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys

17:25:18.0134 6056 WudfPf - ok

17:25:18.0149 6056 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys

galen222 · July 6, 2013

Part 2 TDSSKiller Report

17:25:18.0149 6056 WUDFRd - ok

17:25:18.0181 6056 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll

17:25:18.0181 6056 wudfsvc - ok

17:25:18.0212 6056 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll

17:25:18.0212 6056 WwanSvc - ok

17:25:18.0259 6056 ================ Scan global ===============================

17:25:18.0274 6056 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll

17:25:18.0305 6056 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll

17:25:18.0337 6056 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll

17:25:18.0368 6056 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe

17:25:18.0368 6056 [Global] - ok

17:25:18.0368 6056 ================ Scan MBR ==================================

17:25:18.0383 6056 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0

17:25:18.0524 6056 \Device\Harddisk0\DR0 - ok

17:25:18.0524 6056 ================ Scan VBR ==================================

17:25:18.0539 6056 [ 998D265B6B183C365CCAD3807FE2AEDE ] \Device\Harddisk0\DR0\Partition1

17:25:18.0539 6056 \Device\Harddisk0\DR0\Partition1 - ok

17:25:18.0539 6056 [ C91A25FB4D43331E686E3E91F547AB56 ] \Device\Harddisk0\DR0\Partition2

17:25:18.0555 6056 \Device\Harddisk0\DR0\Partition2 - ok

17:25:18.0586 6056 [ CAB29A1768C56E24A85CE894C30718E1 ] \Device\Harddisk0\DR0\Partition3

17:25:18.0586 6056 \Device\Harddisk0\DR0\Partition3 - ok

17:25:18.0602 6056 [ 0FA179A98AF728BBCA6E041DB9A36D4C ] \Device\Harddisk0\DR0\Partition4

17:25:18.0602 6056 \Device\Harddisk0\DR0\Partition4 - ok

17:25:18.0602 6056 ================ Scan active images ========================

17:25:18.0602 6056 [ 3E588B60EC061686BA05D33574A344C6 ] C:\Windows\System32\drivers\crashdmp.sys

17:25:18.0602 6056 C:\Windows\System32\drivers\crashdmp.sys - ok

17:25:18.0617 6056 [ 9BBD8B5855BC6578957F82341F9CDE5A ] C:\Windows\System32\drivers\Diskdump.sys

17:25:18.0617 6056 C:\Windows\System32\drivers\Diskdump.sys - ok

17:25:18.0617 6056 [ A1434F35B7B171CB697D74D33F7D029F ] C:\Windows\System32\drivers\amd_sata.sys

17:25:18.0617 6056 C:\Windows\System32\drivers\amd_sata.sys - ok

17:25:18.0633 6056 [ 814DB88F2641691575A455CF25354098 ] C:\Windows\System32\drivers\dumpfve.sys

17:25:18.0633 6056 C:\Windows\System32\drivers\dumpfve.sys - ok

17:25:18.0633 6056 [ F036CE71586E93D94DAB220D7BDF4416 ] C:\Windows\System32\drivers\cdrom.sys

17:25:18.0633 6056 C:\Windows\System32\drivers\cdrom.sys - ok

17:25:18.0649 6056 [ 248C952C82DF1E23775432774CBB20F1 ] C:\Windows\System32\drivers\N360x64\1403010.016\ccsetx64.sys

17:25:18.0649 6056 C:\Windows\System32\drivers\N360x64\1403010.016\ccsetx64.sys - ok

17:25:18.0649 6056 [ ADF37F1A715D6C56C8E065FD8569A9A4 ] C:\Windows\System32\drivers\N360x64\1403010.016\ironx64.sys

17:25:18.0649 6056 C:\Windows\System32\drivers\N360x64\1403010.016\ironx64.sys - ok

17:25:18.0664 6056 [ 9899284589F75FA8724FF3D16AED75C1 ] C:\Windows\System32\drivers\null.sys

17:25:18.0664 6056 C:\Windows\System32\drivers\null.sys - ok

17:25:18.0664 6056 [ 16A47CE2DECC9B099349A5F840654746 ] C:\Windows\System32\drivers\beep.sys

17:25:18.0664 6056 C:\Windows\System32\drivers\beep.sys - ok

17:25:18.0680 6056 [ 53E92A310193CB3C03BEA963DE7D9CFC ] C:\Windows\System32\drivers\vga.sys

17:25:18.0680 6056 C:\Windows\System32\drivers\vga.sys - ok

17:25:18.0680 6056 [ E7353D59C9842BC7299FAEB7E7E09340 ] C:\Windows\System32\drivers\videoprt.sys

17:25:18.0680 6056 C:\Windows\System32\drivers\videoprt.sys - ok

17:25:18.0695 6056 [ FC438D1430B28618E2D0C7C332A710AD ] C:\Windows\System32\drivers\watchdog.sys

17:25:18.0695 6056 C:\Windows\System32\drivers\watchdog.sys - ok

17:25:18.0695 6056 [ CEA6CC257FC9B7715F1C2B4849286D24 ] C:\Windows\System32\drivers\RDPCDD.sys

17:25:18.0695 6056 C:\Windows\System32\drivers\RDPCDD.sys - ok

17:25:18.0711 6056 [ BB5971A4F00659529A5C44831AF22365 ] C:\Windows\System32\drivers\RDPENCDD.sys

17:25:18.0711 6056 C:\Windows\System32\drivers\RDPENCDD.sys - ok

17:25:18.0711 6056 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] C:\Windows\System32\drivers\msfs.sys

17:25:18.0711 6056 C:\Windows\System32\drivers\msfs.sys - ok

17:25:18.0727 6056 [ 216F3FA57533D98E1F74DED70113177A ] C:\Windows\System32\drivers\RDPREFMP.sys

17:25:18.0727 6056 C:\Windows\System32\drivers\RDPREFMP.sys - ok

17:25:18.0727 6056 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] C:\Windows\System32\drivers\npfs.sys

17:25:18.0727 6056 C:\Windows\System32\drivers\npfs.sys - ok

17:25:18.0742 6056 [ 6F020A220388ECA0AB6062DC27BD16B6 ] C:\Windows\System32\drivers\tdi.sys

17:25:18.0742 6056 C:\Windows\System32\drivers\tdi.sys - ok

17:25:18.0742 6056 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] C:\Windows\System32\drivers\tdx.sys

17:25:18.0742 6056 C:\Windows\System32\drivers\tdx.sys - ok

17:25:18.0742 6056 [ 1C7857B62DE5994A75B054A9FD4C3825 ] C:\Windows\System32\drivers\afd.sys

17:25:18.0742 6056 C:\Windows\System32\drivers\afd.sys - ok

17:25:18.0758 6056 [ 09594D1089C523423B32A4229263F068 ] C:\Windows\System32\drivers\netbt.sys

17:25:18.0758 6056 C:\Windows\System32\drivers\netbt.sys - ok

17:25:18.0758 6056 [ 611B23304BF067451A9FDEE01FBDD725 ] C:\Windows\System32\drivers\wfplwf.sys

17:25:18.0758 6056 C:\Windows\System32\drivers\wfplwf.sys - ok

17:25:18.0758 6056 [ 6BCC1D7D2FD2453957C5479A32364E52 ] C:\Windows\System32\drivers\ws2ifsl.sys

17:25:18.0758 6056 C:\Windows\System32\drivers\ws2ifsl.sys - ok

17:25:18.0773 6056 [ 0557CF5A2556BD58E26384169D72438D ] C:\Windows\System32\drivers\pacer.sys

17:25:18.0773 6056 C:\Windows\System32\drivers\pacer.sys - ok

17:25:18.0773 6056 [ 6A3D66263414FF0D6FA754C646612F3F ] C:\Windows\System32\drivers\vwififlt.sys

17:25:18.0773 6056 C:\Windows\System32\drivers\vwififlt.sys - ok

17:25:18.0789 6056 [ 86743D9F5D2B1048062B14B1D84501C4 ] C:\Windows\System32\drivers\netbios.sys

17:25:18.0789 6056 C:\Windows\System32\drivers\netbios.sys - ok

17:25:18.0789 6056 [ 356AFD78A6ED4457169241AC3965230C ] C:\Windows\System32\drivers\wanarp.sys

17:25:18.0789 6056 C:\Windows\System32\drivers\wanarp.sys - ok

17:25:18.0789 6056 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] C:\Windows\System32\drivers\termdd.sys

17:25:18.0789 6056 C:\Windows\System32\drivers\termdd.sys - ok

17:25:18.0805 6056 [ 1605EBD8CB86AFC4430116065995279A ] C:\Windows\System32\drivers\N360x64\1403010.016\symnets.sys

17:25:18.0805 6056 C:\Windows\System32\drivers\N360x64\1403010.016\symnets.sys - ok

17:25:18.0805 6056 [ F5D6D3B7468C46EA2DDC1D19D2A6DA0F ] C:\Windows\System32\drivers\SYMEVENT64x86.SYS

17:25:18.0805 6056 C:\Windows\System32\drivers\SYMEVENT64x86.SYS - ok

17:25:18.0820 6056 [ 0E76CEF892C45734F7AED09FDDF35D4D ] C:\Windows\System32\drivers\N360x64\1403010.016\srtspx64.sys

17:25:18.0820 6056 C:\Windows\System32\drivers\N360x64\1403010.016\srtspx64.sys - ok

17:25:18.0820 6056 [ 77F665941019A1594D887A74F301FA2F ] C:\Windows\System32\drivers\rdbss.sys

17:25:18.0820 6056 C:\Windows\System32\drivers\rdbss.sys - ok

17:25:18.0820 6056 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] C:\Windows\System32\drivers\mssmbios.sys

17:25:18.0820 6056 C:\Windows\System32\drivers\mssmbios.sys - ok

17:25:18.0836 6056 [ E7F5AE18AF4168178A642A9247C63001 ] C:\Windows\System32\drivers\nsiproxy.sys

17:25:18.0836 6056 C:\Windows\System32\drivers\nsiproxy.sys - ok

17:25:18.0836 6056 [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys

17:25:18.0836 6056 C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys - ok

17:25:18.0851 6056 [ A48928D4CCA6F8B731989DB08CF2C0AB ] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130704.001\IDSviA64.sys

17:25:18.0851 6056 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130704.001\IDSviA64.sys - ok

17:25:18.0851 6056 [ C5BCCB378D0A896304A3E71BE7215983 ] C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

17:25:18.0851 6056 C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys - ok

17:25:18.0851 6056 [ 61583EE3C3A17003C4ACD0475646B4D3 ] C:\Windows\System32\drivers\blbdrive.sys

17:25:18.0851 6056 C:\Windows\System32\drivers\blbdrive.sys - ok

17:25:18.0867 6056 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] C:\Windows\System32\drivers\dfsc.sys

17:25:18.0867 6056 C:\Windows\System32\drivers\dfsc.sys - ok

17:25:18.0867 6056 [ 13096B05847EC78F0977F2C0F79E9AB3 ] C:\Windows\System32\drivers\discache.sys

17:25:18.0867 6056 C:\Windows\System32\drivers\discache.sys - ok

17:25:18.0883 6056 [ 6E10DB69DB1AA96207F4B14B18FF12F8 ] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\BHDrvx64.sys

17:25:18.0883 6056 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\BHDrvx64.sys - ok

17:25:18.0883 6056 [ 3566A8DAAFA27AF944F5D705EAA64894 ] C:\Windows\System32\drivers\tunnel.sys

17:25:18.0883 6056 C:\Windows\System32\drivers\tunnel.sys - ok

17:25:18.0883 6056 [ 1E56388B3FE0D031C44144EB8C4D6217 ] C:\Windows\System32\drivers\amdppm.sys

17:25:18.0883 6056 C:\Windows\System32\drivers\amdppm.sys - ok

17:25:18.0898 6056 [ F0371DE302FFFF8F086661611BE60848 ] C:\Windows\System32\smss.exe

17:25:18.0898 6056 C:\Windows\System32\smss.exe - ok

17:25:18.0898 6056 [ CF95B85FF8D128385ABD411C8CA74DED ] C:\Windows\System32\ntdll.dll

17:25:18.0898 6056 C:\Windows\System32\ntdll.dll - ok

17:25:18.0898 6056 [ 3B536A8BEC3B4F23FFDFD78B11A2AB93 ] C:\Windows\System32\autochk.exe

17:25:18.0898 6056 C:\Windows\System32\autochk.exe - ok

17:25:18.0914 6056 [ 6CED03A1A176526B15F2256B6C1E72BA ] C:\Windows\System32\drivers\atikmpag.sys

17:25:18.0914 6056 C:\Windows\System32\drivers\atikmpag.sys - ok

17:25:18.0914 6056 [ F46EB9066C311EA44DBD29BBB7B710E2 ] C:\Windows\System32\drivers\atikmdag.sys

17:25:18.0914 6056 C:\Windows\System32\drivers\atikmdag.sys - ok

17:25:18.0929 6056 [ 0ADC83218B66A6DB380C330836F3E36D ] C:\Windows\System32\drivers\fastfat.sys

17:25:18.0929 6056 C:\Windows\System32\drivers\fastfat.sys - ok

17:25:18.0929 6056 [ 1A986E433B8EB2375F55961D993746B3 ] C:\Windows\System32\drivers\dxgkrnl.sys

17:25:18.0929 6056 C:\Windows\System32\drivers\dxgkrnl.sys - ok

17:25:18.0929 6056 [ 786F0F4C3C50D1FA714094415F2C521F ] C:\Windows\System32\drivers\dxgmms1.sys

17:25:18.0929 6056 C:\Windows\System32\drivers\dxgmms1.sys - ok

17:25:18.0945 6056 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] C:\Windows\System32\drivers\hdaudbus.sys

17:25:18.0945 6056 C:\Windows\System32\drivers\hdaudbus.sys - ok

17:25:18.0945 6056 [ B4421D8CDADC441F76BA39532A3E3414 ] C:\Windows\System32\drivers\athrx.sys

17:25:18.0945 6056 C:\Windows\System32\drivers\athrx.sys - ok

17:25:18.0945 6056 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] C:\Windows\System32\drivers\vwifibus.sys

17:25:18.0945 6056 C:\Windows\System32\drivers\vwifibus.sys - ok

17:25:18.0961 6056 [ 6ED68229BCE9B35AD334E5482C44B143 ] C:\Windows\System32\drivers\usbd.sys

17:25:18.0961 6056 C:\Windows\System32\drivers\usbd.sys - ok

17:25:18.0961 6056 [ 541A6C49C792ED71FB3EFF8C815CFE60 ] C:\Windows\System32\drivers\amdxhc.sys

17:25:18.0961 6056 C:\Windows\System32\drivers\amdxhc.sys - ok

17:25:18.0976 6056 [ 8E98D21EE06192492A5671A6144D092F ] C:\Windows\System32\drivers\GEARAspiWDM.sys

17:25:18.0976 6056 C:\Windows\System32\drivers\GEARAspiWDM.sys - ok

17:25:18.0976 6056 [ 33A58C5630200E17B51C8D73DD64181B ] C:\Windows\System32\drivers\usbfilter.sys

17:25:18.0976 6056 C:\Windows\System32\drivers\usbfilter.sys - ok

17:25:18.0992 6056 [ B082BB62FEC68D8DEFF349C445969047 ] C:\Windows\System32\drivers\usbport.sys

17:25:18.0992 6056 C:\Windows\System32\drivers\usbport.sys - ok

17:25:18.0992 6056 [ B26ACA4784AD1295C25A7501FD4AB79E ] C:\Windows\System32\drivers\usbohci.sys

17:25:18.0992 6056 C:\Windows\System32\drivers\usbohci.sys - ok

17:25:19.0007 6056 [ 0840155D0BDDF1190F84A663C284BD33 ] C:\Windows\System32\drivers\CmBatt.sys

17:25:19.0007 6056 C:\Windows\System32\drivers\CmBatt.sys - ok

17:25:19.0007 6056 [ AA68C758B3F225618A5FD1ED40C383C4 ] C:\Windows\System32\drivers\usbehci.sys

17:25:19.0007 6056 C:\Windows\System32\drivers\usbehci.sys - ok

17:25:19.0007 6056 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] C:\Windows\System32\drivers\i8042prt.sys

17:25:19.0007 6056 C:\Windows\System32\drivers\i8042prt.sys - ok

17:25:19.0023 6056 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] C:\Windows\System32\drivers\kbdclass.sys

17:25:19.0023 6056 C:\Windows\System32\drivers\kbdclass.sys - ok

17:25:19.0023 6056 [ 98E05BA0C49AA98AA0FD998EBC33D763 ] C:\Windows\System32\drivers\VMkbd.sys

17:25:19.0023 6056 C:\Windows\System32\drivers\VMkbd.sys - ok

17:25:19.0039 6056 [ 12716D987D475B051F35895659159705 ] C:\Windows\System32\wininet.dll

17:25:19.0039 6056 C:\Windows\System32\wininet.dll - ok

17:25:19.0039 6056 [ AC3CC98B1BDB6540021D3FFB105AC2B9 ] C:\Windows\System32\drivers\SynTP.sys

17:25:19.0039 6056 C:\Windows\System32\drivers\SynTP.sys - ok

17:25:19.0054 6056 [ 9835E63E09F824D22B689D2BB789BAB9 ] C:\Windows\System32\comdlg32.dll

17:25:19.0054 6056 C:\Windows\System32\comdlg32.dll - ok

17:25:19.0054 6056 [ 25983DE69B57142039AC8D95E71CD9C9 ] C:\Windows\System32\clbcatq.dll

17:25:19.0054 6056 C:\Windows\System32\clbcatq.dll - ok

17:25:19.0070 6056 [ 6DF46D2BD74E3DA1B45F08F10D172732 ] C:\Windows\System32\advapi32.dll

17:25:19.0070 6056 C:\Windows\System32\advapi32.dll - ok

17:25:19.0070 6056 [ AA2C08CE85653B1A0D2E4AB407FA176C ] C:\Windows\System32\imm32.dll

17:25:19.0070 6056 C:\Windows\System32\imm32.dll - ok

17:25:19.0070 6056 [ F7CE0C81C545364020ED8203CF0A633E ] C:\Windows\System32\difxapi.dll

17:25:19.0070 6056 C:\Windows\System32\difxapi.dll - ok

17:25:19.0085 6056 [ A1BE6A720D02E37F72E9CD89AE9CB3CF ] C:\Windows\System32\imagehlp.dll

17:25:19.0085 6056 C:\Windows\System32\imagehlp.dll - ok

17:25:19.0085 6056 [ D202223587518B13D72D68937B7E3F70 ] C:\Windows\System32\lpk.dll

17:25:19.0085 6056 C:\Windows\System32\lpk.dll - ok

17:25:19.0085 6056 [ 5D8E6C95156ED1F79A63D1EADE6F9ED5 ] C:\Windows\System32\setupapi.dll

17:25:19.0085 6056 C:\Windows\System32\setupapi.dll - ok

17:25:19.0101 6056 [ 83404DCBCE4925B6A5A77C5170F46D86 ] C:\Windows\System32\sechost.dll

17:25:19.0101 6056 C:\Windows\System32\sechost.dll - ok

17:25:19.0101 6056 [ 4E4FFB09D895AA000DD56D1404F69A7E ] C:\Windows\System32\Wldap32.dll

17:25:19.0101 6056 C:\Windows\System32\Wldap32.dll - ok

17:25:19.0117 6056 [ 1BFC94665BCA35F9001ADC7BFB167C63 ] C:\Windows\System32\shell32.dll

17:25:19.0117 6056 C:\Windows\System32\shell32.dll - ok

17:25:19.0117 6056 [ 0611473C1AD9E2D991CD9482068417F7 ] C:\Windows\System32\rpcrt4.dll

17:25:19.0117 6056 C:\Windows\System32\rpcrt4.dll - ok

17:25:19.0117 6056 [ 7D27EA49F3C1F687D357E77A470AEA99 ] C:\Windows\System32\drivers\mouclass.sys

17:25:19.0117 6056 C:\Windows\System32\drivers\mouclass.sys - ok

17:25:19.0132 6056 [ A1D5FFEFDBEB3881EC3D74CC7136847F ] C:\Windows\System32\drivers\RtsP2Stor.sys

17:25:19.0132 6056 C:\Windows\System32\drivers\RtsP2Stor.sys - ok

17:25:19.0132 6056 [ F6FF8944478594D0E414D3F048F0D778 ] C:\Windows\System32\drivers\wmiacpi.sys

17:25:19.0132 6056 C:\Windows\System32\drivers\wmiacpi.sys - ok

17:25:19.0148 6056 [ 899B7E724BF19F17978B6A37B864A277 ] C:\Windows\System32\drivers\Accelerometer.sys

17:25:19.0148 6056 C:\Windows\System32\drivers\Accelerometer.sys - ok

17:25:19.0148 6056 [ 03EDB043586CCEBA243D689BDDA370A8 ] C:\Windows\System32\drivers\CompositeBus.sys

17:25:19.0148 6056 C:\Windows\System32\drivers\CompositeBus.sys - ok

17:25:19.0148 6056 [ 24FBF5CC5C04150073C315A7C83521EE ] C:\Windows\System32\drivers\ks.sys

17:25:19.0148 6056 C:\Windows\System32\drivers\ks.sys - ok

17:25:19.0163 6056 [ 50F92C943F18B070F166D019DFAB3D9A ] C:\Windows\System32\drivers\clwvd.sys

17:25:19.0163 6056 C:\Windows\System32\drivers\clwvd.sys - ok

17:25:19.0163 6056 [ 6869281E78CB31A43E969F06B57347C4 ] C:\Windows\System32\drivers\ksthunk.sys

17:25:19.0163 6056 C:\Windows\System32\drivers\ksthunk.sys - ok

17:25:19.0163 6056 [ 7ECFF9B22276B73F43A99A15A6094E90 ] C:\Windows\System32\drivers\agilevpn.sys

17:25:19.0163 6056 C:\Windows\System32\drivers\agilevpn.sys - ok

17:25:19.0179 6056 [ 30639C932D9FEF22B31268FE25A1B6E5 ] C:\Windows\System32\drivers\ndistapi.sys

17:25:19.0179 6056 C:\Windows\System32\drivers\ndistapi.sys - ok

17:25:19.0179 6056 [ 471815800AE33E6F1C32FB1B97C490CA ] C:\Windows\System32\drivers\rasl2tp.sys

17:25:19.0179 6056 C:\Windows\System32\drivers\rasl2tp.sys - ok

17:25:19.0179 6056 [ 53F7305169863F0A2BDDC49E116C2E11 ] C:\Windows\System32\drivers\ndiswan.sys

17:25:19.0179 6056 C:\Windows\System32\drivers\ndiswan.sys - ok

17:25:19.0195 6056 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] C:\Windows\System32\drivers\raspppoe.sys

17:25:19.0195 6056 C:\Windows\System32\drivers\raspppoe.sys - ok

17:25:19.0195 6056 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] C:\Windows\System32\drivers\raspptp.sys

17:25:19.0195 6056 C:\Windows\System32\drivers\raspptp.sys - ok

17:25:19.0210 6056 [ E8B1E447B008D07FF47D016C2B0EEECB ] C:\Windows\System32\drivers\rassstp.sys

17:25:19.0210 6056 C:\Windows\System32\drivers\rassstp.sys - ok

17:25:19.0210 6056 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] C:\Windows\System32\drivers\swenum.sys

17:25:19.0210 6056 C:\Windows\System32\drivers\swenum.sys - ok

17:25:19.0210 6056 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] C:\Windows\System32\drivers\amdiox64.sys

17:25:19.0210 6056 C:\Windows\System32\drivers\amdiox64.sys - ok

17:25:19.0226 6056 [ DC54A574663A895C8763AF0FA1FF7561 ] C:\Windows\System32\drivers\umbus.sys

17:25:19.0226 6056 C:\Windows\System32\drivers\umbus.sys - ok

17:25:19.0226 6056 [ 8AB4374464C6548FA30E498811D2B324 ] C:\Windows\System32\drivers\vmnet.sys

17:25:19.0226 6056 C:\Windows\System32\drivers\vmnet.sys - ok

17:25:19.0241 6056 [ 9D54F1339E78C95BF3D9939EBCB66378 ] C:\Windows\System32\drivers\vmnetadapter.sys

17:25:19.0241 6056 C:\Windows\System32\drivers\vmnetadapter.sys - ok

17:25:19.0241 6056 [ 2EF1BA6D5DC79FCE5E9216C8C2D3F193 ] C:\Windows\System32\drivers\amdhub30.sys

17:25:19.0241 6056 C:\Windows\System32\drivers\amdhub30.sys - ok

17:25:19.0241 6056 [ 66E1EF753543785D7E2C44719B2C5DAD ] C:\Windows\System32\drivers\usbhub.sys

17:25:19.0241 6056 C:\Windows\System32\drivers\usbhub.sys - ok

17:25:19.0257 6056 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] C:\Windows\System32\drivers\ndproxy.sys

17:25:19.0257 6056 C:\Windows\System32\drivers\ndproxy.sys - ok

17:25:19.0257 6056 [ 21D26064AEDB4988F785BB4A3A2C051E ] C:\Windows\System32\drivers\drmk.sys

17:25:19.0257 6056 C:\Windows\System32\drivers\drmk.sys - ok

17:25:19.0273 6056 [ 2B3B05C0A7768BF033217EB8F33F9C35 ] C:\Windows\System32\drivers\AtihdW76.sys

17:25:19.0273 6056 C:\Windows\System32\drivers\AtihdW76.sys - ok

17:25:19.0273 6056 [ 32E11315B5126921FFD9074840EF13D3 ] C:\Windows\System32\drivers\portcls.sys

17:25:19.0273 6056 C:\Windows\System32\drivers\portcls.sys - ok

17:25:19.0273 6056 [ 7E89F65EB250463EE8665CFE19566FC3 ] C:\Windows\System32\drivers\stwrt64.sys

17:25:19.0273 6056 C:\Windows\System32\drivers\stwrt64.sys - ok

17:25:19.0288 6056 [ C9152A497D0CA33CE9D729F1179DDB01 ] C:\Windows\System32\urlmon.dll

17:25:19.0288 6056 C:\Windows\System32\urlmon.dll - ok

17:25:19.0288 6056 [ 1084AA52CCC324EA54C7121FA24C2221 ] C:\Windows\System32\gdi32.dll

17:25:19.0288 6056 C:\Windows\System32\gdi32.dll - ok

17:25:19.0304 6056 [ 65C113214F7B05820F6D8A65B1485196 ] C:\Windows\System32\kernel32.dll

17:25:19.0304 6056 C:\Windows\System32\kernel32.dll - ok

17:25:19.0304 6056 [ 044FE45FFD6AD40E3BBBE60B7F41BABE ] C:\Windows\System32\nsi.dll

17:25:19.0304 6056 C:\Windows\System32\nsi.dll - ok

17:25:19.0304 6056 [ 1BDF694C5BA91A1576DA907DA3077EF8 ] C:\Windows\System32\iertutil.dll

17:25:19.0304 6056 C:\Windows\System32\iertutil.dll - ok

17:25:19.0319 6056 [ 6C60B5ACA7442EFB794082CDACFC001C ] C:\Windows\System32\ole32.dll

17:25:19.0319 6056 C:\Windows\System32\ole32.dll - ok

17:25:19.0319 6056 [ FE88B288356E7B47B74B13372ADD906D ] C:\Windows\System32\drivers\winusb.sys

17:25:19.0319 6056 C:\Windows\System32\drivers\winusb.sys - ok

17:25:19.0319 6056 [ DDA4CAF29D8C0A297F886BFE561E6659 ] C:\Windows\System32\drivers\WUDFRd.sys

17:25:19.0319 6056 C:\Windows\System32\drivers\WUDFRd.sys - ok

17:25:19.0335 6056 [ 2B26FCB7C634C49313FD72120FB9946E ] C:\Windows\System32\drivers\usbccgp.sys

17:25:19.0335 6056 C:\Windows\System32\drivers\usbccgp.sys - ok

17:25:19.0335 6056 [ 454800C2BC7F3927CE030141EE4F4C50 ] C:\Windows\System32\drivers\usbvideo.sys

17:25:19.0335 6056 C:\Windows\System32\drivers\usbvideo.sys - ok

17:25:19.0335 6056 [ C06B32165E23A72A898B7A89679AD754 ] C:\Windows\System32\oleaut32.dll

17:25:19.0335 6056 C:\Windows\System32\oleaut32.dll - ok

17:25:19.0351 6056 [ DBF99FD9CAF75CA66D042BD8D050FF71 ] C:\Windows\System32\usp10.dll

17:25:19.0351 6056 C:\Windows\System32\usp10.dll - ok

17:25:19.0351 6056 [ C431EAF5CAA1C82CAC2534A2EAB348A3 ] C:\Windows\System32\msctf.dll

17:25:19.0351 6056 C:\Windows\System32\msctf.dll - ok

17:25:19.0366 6056 [ 28C0B5024F5C5A438E78B188CFC81B7F ] C:\Windows\System32\normaliz.dll

17:25:19.0366 6056 C:\Windows\System32\normaliz.dll - ok

17:25:19.0366 6056 [ D87E1E59C73C1F98D5DED5B3850C40F5 ] C:\Windows\System32\psapi.dll

17:25:19.0366 6056 C:\Windows\System32\psapi.dll - ok

17:25:19.0366 6056 [ C391FC68282A000CDF953F8B6B55D2EF ] C:\Windows\System32\msvcrt.dll

17:25:19.0366 6056 C:\Windows\System32\msvcrt.dll - ok

17:25:19.0382 6056 [ FE70103391A64039A921DBFFF9C7AB1B ] C:\Windows\System32\user32.dll

17:25:19.0382 6056 C:\Windows\System32\user32.dll - ok

17:25:19.0382 6056 [ 4BBFA57F594F7E8A8EDC8F377184C3F0 ] C:\Windows\System32\ws2_32.dll

17:25:19.0382 6056 C:\Windows\System32\ws2_32.dll - ok

17:25:19.0397 6056 [ EAF32CB8C1F810E4715B4DFBE785C7FF ] C:\Windows\System32\shlwapi.dll

17:25:19.0397 6056 C:\Windows\System32\shlwapi.dll - ok

17:25:19.0397 6056 [ F49E92B50CED5C9F1725D3C0329FD933 ] C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll

17:25:19.0397 6056 C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll - ok

17:25:19.0397 6056 [ 64A4AB126E24FD3F58EBE64852773DB5 ] C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll

17:25:19.0397 6056 C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll - ok

17:25:19.0413 6056 [ 06FEC9E8117103BB1141A560E98077DA ] C:\Windows\System32\devobj.dll

17:25:19.0413 6056 C:\Windows\System32\devobj.dll - ok

17:25:19.0413 6056 [ AA06902362B1422D7A7DA7061E07C624 ] C:\Windows\System32\wintrust.dll

17:25:19.0413 6056 C:\Windows\System32\wintrust.dll - ok

17:25:19.0429 6056 [ 9094039A00485F71C4DE64BF51F64C46 ] C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll

17:25:19.0429 6056 C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll - ok

17:25:19.0429 6056 [ 2477A28081BDAEE622CF045ACF8EE124 ] C:\Windows\System32\cfgmgr32.dll

17:25:19.0429 6056 C:\Windows\System32\cfgmgr32.dll - ok

17:25:19.0429 6056 [ 14DFDEAF4E589ED3F1FF187A86B9408C ] C:\Windows\System32\comctl32.dll

17:25:19.0429 6056 C:\Windows\System32\comctl32.dll - ok

17:25:19.0429 6056 [ 0E6FBF19D9DFBB77316C23DF91F8A101 ] C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll

17:25:19.0429 6056 C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll - ok

17:25:19.0444 6056 [ AFC3DB5C6EB8CA8017DDB81D6C0AD02A ] C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

17:25:19.0444 6056 C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll - ok

17:25:19.0444 6056 [ A96D5ECA5742603E0E345C4F6B801F5E ] C:\Windows\System32\crypt32.dll

17:25:19.0444 6056 C:\Windows\System32\crypt32.dll - ok

17:25:19.0460 6056 [ 72723D3E4781BADC62C3180C137E7B23 ] C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll

17:25:19.0460 6056 C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll - ok

17:25:19.0460 6056 [ 1F56F209585F350A5666E3CC7931FD67 ] C:\Windows\System32\KernelBase.dll

17:25:19.0460 6056 C:\Windows\System32\KernelBase.dll - ok

17:25:19.0460 6056 [ 884415BD4269C02EAF8E2613BF85500D ] C:\Windows\System32\msasn1.dll

17:25:19.0460 6056 C:\Windows\System32\msasn1.dll - ok

17:25:19.0475 6056 [ 9C278785347BCC991F8EA2999D90F58D ] C:\Windows\SysWOW64\normaliz.dll

17:25:19.0475 6056 C:\Windows\SysWOW64\normaliz.dll - ok

17:25:19.0475 6056 [ BF24D6F2ED97FE830BFD52B246F98E67 ] C:\Windows\System32\drivers\dxapi.sys

17:25:19.0475 6056 C:\Windows\System32\drivers\dxapi.sys - ok

17:25:19.0475 6056 [ A11523523B31086DD760C0189C763359 ] C:\Windows\System32\win32k.sys

17:25:19.0491 6056 C:\Windows\System32\win32k.sys - ok

17:25:19.0491 6056 [ 60C2862B4BF0FD9F582EF344C2B1EC72 ] C:\Windows\System32\csrss.exe

17:25:19.0491 6056 C:\Windows\System32\csrss.exe - ok

17:25:19.0491 6056 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\System32\basesrv.dll

17:25:19.0491 6056 C:\Windows\System32\basesrv.dll - ok

17:25:19.0507 6056 [ CEC1EDF4022DC4DCA40384DCEC672B0E ] C:\Windows\System32\csrsrv.dll

17:25:19.0507 6056 C:\Windows\System32\csrsrv.dll - ok

17:25:19.0507 6056 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\System32\winsrv.dll

17:25:19.0507 6056 C:\Windows\System32\winsrv.dll - ok

17:25:19.0507 6056 [ B03D591DC7DA45ECE20B3B467E6AADAA ] C:\Windows\System32\drivers\monitor.sys

17:25:19.0507 6056 C:\Windows\System32\drivers\monitor.sys - ok

17:25:19.0522 6056 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\System32\sxssrv.dll

17:25:19.0522 6056 C:\Windows\System32\sxssrv.dll - ok

17:25:19.0522 6056 [ F29FE765E1448EF371CFE05BFAC74ADB ] C:\Windows\System32\tsddd.dll

17:25:19.0522 6056 C:\Windows\System32\tsddd.dll - ok

17:25:19.0538 6056 [ 94355C28C1970635A31B3FE52EB7CEBA ] C:\Windows\System32\wininit.exe

17:25:19.0538 6056 C:\Windows\System32\wininit.exe - ok

17:25:19.0538 6056 [ 2C942733A5983DD4502219FF37C7EBC7 ] C:\Windows\System32\profapi.dll

17:25:19.0538 6056 C:\Windows\System32\profapi.dll - ok

17:25:19.0538 6056 [ 05569A79BF4693670B709144382D02D4 ] C:\Windows\System32\cdd.dll

17:25:19.0538 6056 C:\Windows\System32\cdd.dll - ok

17:25:19.0553 6056 [ 78523A26F5604C0568FE9D1CE86E36F4 ] C:\Windows\System32\KBDUS.DLL

17:25:19.0553 6056 C:\Windows\System32\KBDUS.DLL - ok

17:25:19.0553 6056 [ C2A8CB1275ECB85D246A9ECC02A728E3 ] C:\Windows\System32\RpcRtRemote.dll

17:25:19.0553 6056 C:\Windows\System32\RpcRtRemote.dll - ok

17:25:19.0553 6056 [ B26B1801356760841C3BC69F9F91537F ] C:\Windows\System32\WlS0WndH.dll

17:25:19.0553 6056 C:\Windows\System32\WlS0WndH.dll - ok

17:25:19.0569 6056 [ 9CEAD32E79A62150FE9F8557E58E008B ] C:\Windows\System32\sxs.dll

17:25:19.0569 6056 C:\Windows\System32\sxs.dll - ok

17:25:19.0569 6056 [ 784FA3DF338E2E8F5F0389D6FAC428AF ] C:\Windows\System32\cryptbase.dll

17:25:19.0569 6056 C:\Windows\System32\cryptbase.dll - ok

17:25:19.0569 6056 [ 90499F3163A9F815CF196A205EA3CD5D ] C:\Windows\System32\apphelp.dll

17:25:19.0569 6056 C:\Windows\System32\apphelp.dll - ok

17:25:19.0585 6056 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\System32\services.exe

17:25:19.0585 6056 C:\Windows\System32\services.exe - ok

17:25:19.0585 6056 [ 685527DA09EBFB681E98C515978BDEE2 ] C:\Windows\System32\lsasrv.dll

17:25:19.0585 6056 C:\Windows\System32\lsasrv.dll - ok

17:25:19.0600 6056 [ C118A82CD78818C29AB228366EBF81C3 ] C:\Windows\System32\lsass.exe

17:25:19.0600 6056 C:\Windows\System32\lsass.exe - ok

17:25:19.0600 6056 [ 9662EE182644511439F1C53745DC1C88 ] C:\Windows\System32\lsm.exe

17:25:19.0600 6056 C:\Windows\System32\lsm.exe - ok

17:25:19.0600 6056 [ B66BC8B20B7F33975865B1DF99783FD8 ] C:\Windows\System32\sspicli.dll

17:25:19.0600 6056 C:\Windows\System32\sspicli.dll - ok

17:25:19.0616 6056 [ 3A0CE5FE781708CD6ABD55313607EC8B ] C:\Windows\System32\sspisrv.dll

17:25:19.0616 6056 C:\Windows\System32\sspisrv.dll - ok

17:25:19.0616 6056 [ BBCDF350817BA86416C0F06B6981BE8D ] C:\Windows\System32\scesrv.dll

17:25:19.0616 6056 C:\Windows\System32\scesrv.dll - ok

17:25:19.0616 6056 [ E914A50A151DFFE63D3935226DB5E2C1 ] C:\Windows\System32\scext.dll

17:25:19.0616 6056 C:\Windows\System32\scext.dll - ok

17:25:19.0631 6056 [ 0144D8D75A0B12938AEEE859E3310A46 ] C:\Windows\System32\secur32.dll

17:25:19.0631 6056 C:\Windows\System32\secur32.dll - ok

17:25:19.0631 6056 [ 68083118797CAF30FB2EA3E71494D67E ] C:\Windows\System32\sysntfy.dll

17:25:19.0631 6056 C:\Windows\System32\sysntfy.dll - ok

17:25:19.0631 6056 [ DEE7267C5D232A3B816866872CE199E6 ] C:\Windows\System32\wmsgapi.dll

17:25:19.0631 6056 C:\Windows\System32\wmsgapi.dll - ok

17:25:19.0647 6056 [ A744BA6E04C8AA4592818178DBF89521 ] C:\Windows\System32\samsrv.dll

17:25:19.0647 6056 C:\Windows\System32\samsrv.dll - ok

17:25:19.0647 6056 [ 3A9C9BAF610B0DD4967086040B3B62A9 ] C:\Windows\System32\srvcli.dll

17:25:19.0647 6056 C:\Windows\System32\srvcli.dll - ok

17:25:19.0663 6056 [ 3A061472B38233BAFF9CFEFF2E49C46B ] C:\Windows\System32\cryptdll.dll

17:25:19.0663 6056 C:\Windows\System32\cryptdll.dll - ok

17:25:19.0663 6056 [ 3C073B0C596A0AF84933E7406766B040 ] C:\Windows\System32\wevtapi.dll

17:25:19.0663 6056 C:\Windows\System32\wevtapi.dll - ok

17:25:19.0663 6056 [ 7FBEBD2229EA5FD48D41B199EC2D541C ] C:\Windows\System32\authz.dll

17:25:19.0663 6056 C:\Windows\System32\authz.dll - ok

17:25:19.0678 6056 [ 86FE1B1F8FD42CD0DB641AB1CDB13093 ] C:\Windows\System32\cngaudit.dll

17:25:19.0678 6056 C:\Windows\System32\cngaudit.dll - ok

17:25:19.0678 6056 [ 5F3307352216618221A17CFEF273EEE2 ] C:\Windows\System32\ncrypt.dll

17:25:19.0678 6056 C:\Windows\System32\ncrypt.dll - ok

17:25:19.0678 6056 [ B9A95365E52F421A20E1501935FADDA5 ] C:\Windows\System32\bcrypt.dll

17:25:19.0678 6056 C:\Windows\System32\bcrypt.dll - ok

17:25:19.0694 6056 [ 02B64609F865A39365FF88580DF11738 ] C:\Windows\System32\msprivs.dll

17:25:19.0694 6056 C:\Windows\System32\msprivs.dll - ok

17:25:19.0694 6056 [ C6505DE3561537BA1004D638C2F93F2F ] C:\Windows\System32\netjoin.dll

17:25:19.0694 6056 C:\Windows\System32\netjoin.dll - ok

17:25:19.0694 6056 [ 50532FCD7ECF02DD169CE5C485F02534 ] C:\Windows\System32\negoexts.dll

17:25:19.0694 6056 C:\Windows\System32\negoexts.dll - ok

17:25:19.0709 6056 [ 44E1A196DFCB53B01FE4B855C3B56A15 ] C:\Windows\System32\kerberos.dll

17:25:19.0709 6056 C:\Windows\System32\kerberos.dll - ok

17:25:19.0709 6056 [ D0C2FBB6D97416B0166478FC7AE2B212 ] C:\Windows\System32\cryptsp.dll

17:25:19.0709 6056 C:\Windows\System32\cryptsp.dll - ok

17:25:19.0725 6056 [ 1D5185A4C7E6695431AE4B55C3D7D333 ] C:\Windows\System32\mswsock.dll

17:25:19.0725 6056 C:\Windows\System32\mswsock.dll - ok

17:25:19.0725 6056 [ EF12B8385AA2849999008A977918F96B ] C:\Windows\System32\msv1_0.dll

17:25:19.0725 6056 C:\Windows\System32\msv1_0.dll - ok

17:25:19.0725 6056 [ EC7CBFF96B05ECF3D366355B3C64ADCF ] C:\Windows\System32\wship6.dll

17:25:19.0725 6056 C:\Windows\System32\wship6.dll - ok

17:25:19.0741 6056 [ AA339DD8BB128EF66660DFBBB59043D3 ] C:\Windows\System32\netlogon.dll

17:25:19.0741 6056 C:\Windows\System32\netlogon.dll - ok

17:25:19.0741 6056 [ 492D07D79E7024CA310867B526D9636D ] C:\Windows\System32\dnsapi.dll

17:25:19.0741 6056 C:\Windows\System32\dnsapi.dll - ok

17:25:19.0741 6056 [ 8FFE297B8449386E7B6851458B6E474E ] C:\Windows\System32\logoncli.dll

17:25:19.0741 6056 C:\Windows\System32\logoncli.dll - ok

17:25:19.0756 6056 [ B7D42CB36C08FA017E73FF2433CD7287 ] C:\Windows\System32\schannel.dll

17:25:19.0756 6056 C:\Windows\System32\schannel.dll - ok

17:25:19.0756 6056 [ 95FB6CA4374E343DDD653FCC43F9D26B ] C:\Windows\System32\wdigest.dll

17:25:19.0756 6056 C:\Windows\System32\wdigest.dll - ok

17:25:19.0772 6056 [ 5D8874A8C11DDDDE29E12DE0E2013493 ] C:\Windows\System32\rsaenh.dll

17:25:19.0772 6056 C:\Windows\System32\rsaenh.dll - ok

17:25:19.0772 6056 [ 8A25506B6948EFBD5A7F37E53CCD36D9 ] C:\Windows\System32\TSpkg.dll

17:25:19.0772 6056 C:\Windows\System32\TSpkg.dll - ok

17:25:19.0772 6056 [ E08088A97F95345E181C3DFCE2C615EF ] C:\Windows\System32\pku2u.dll

17:25:19.0772 6056 C:\Windows\System32\pku2u.dll - ok

17:25:19.0787 6056 [ 7DBA64AD70C2E2481C68D9E0F7CD7840 ] C:\Windows\System32\LIVESSP.DLL

17:25:19.0787 6056 C:\Windows\System32\LIVESSP.DLL - ok

17:25:19.0787 6056 [ D6C7780A364C6BBACFA796BAB9F1B374 ] C:\Windows\System32\bcryptprimitives.dll

17:25:19.0787 6056 C:\Windows\System32\bcryptprimitives.dll - ok

17:25:19.0787 6056 [ 52D3D5E3586988D4D9E34ACAAC33105C ] C:\Windows\System32\credssp.dll

17:25:19.0787 6056 C:\Windows\System32\credssp.dll - ok

17:25:19.0803 6056 [ 90BDEFC5DF334E5100EAA781D798DE1A ] C:\Windows\System32\efslsaext.dll

17:25:19.0803 6056 C:\Windows\System32\efslsaext.dll - ok

17:25:19.0803 6056 [ ED78427259134C63ED69804D2132B86C ] C:\Windows\System32\scecli.dll

17:25:19.0803 6056 C:\Windows\System32\scecli.dll - ok

17:25:19.0803 6056 [ 7CC7DF5B654DA579613F811D8C637E29 ] C:\Windows\System32\ubpm.dll

17:25:19.0803 6056 C:\Windows\System32\ubpm.dll - ok

17:25:19.0819 6056 [ 0D9764D58C5EFD672B7184854B152E5E ] C:\Windows\System32\winsta.dll

17:25:19.0819 6056 C:\Windows\System32\winsta.dll - ok

17:25:19.0819 6056 [ C78655BC80301D76ED4FEF1C1EA40A7D ] C:\Windows\System32\svchost.exe

17:25:19.0819 6056 C:\Windows\System32\svchost.exe - ok

17:25:19.0834 6056 [ 25FBDEF06C4D92815B353F6E792C8129 ] C:\Windows\System32\umpnpmgr.dll

17:25:19.0834 6056 C:\Windows\System32\umpnpmgr.dll - ok

17:25:19.0834 6056 [ E6EB44ABAAF1F330119F854856C53EBE ] C:\Windows\System32\SPInf.dll

17:25:19.0834 6056 C:\Windows\System32\SPInf.dll - ok

17:25:19.0834 6056 [ CD1B5AD07E5F7FEF30E055DCC9E96180 ] C:\Windows\System32\devrtl.dll

17:25:19.0834 6056 C:\Windows\System32\devrtl.dll - ok

17:25:19.0850 6056 [ 9C9307C95671AC962F3D6EB3A4A89BAE ] C:\Windows\System32\gpapi.dll

17:25:19.0850 6056 C:\Windows\System32\gpapi.dll - ok

17:25:19.0850 6056 [ A2CCA4FB273E6050F17A0A416CFF2FCD ] C:\Windows\System32\umpo.dll

17:25:19.0850 6056 C:\Windows\System32\umpo.dll - ok

17:25:19.0850 6056 [ 7A17485DC7D8A7AC81321A42CD034519 ] C:\Windows\System32\userenv.dll

17:25:19.0850 6056 C:\Windows\System32\userenv.dll - ok

17:25:19.0865 6056 [ F6C011B46FAEEF33536B2E80F48B5CBE ] C:\Windows\System32\pcwum.dll

17:25:19.0865 6056 C:\Windows\System32\pcwum.dll - ok

17:25:19.0865 6056 [ 1151B1BAA6F350B1DB6598E0FEA7C457 ] C:\Windows\System32\winlogon.exe

17:25:19.0865 6056 C:\Windows\System32\winlogon.exe - ok

17:25:19.0865 6056 [ 716175021BDA290504CE434273F666BC ] C:\Windows\System32\powrprof.dll

17:25:19.0865 6056 C:\Windows\System32\powrprof.dll - ok

17:25:19.0881 6056 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] C:\Windows\System32\drivers\luafv.sys

17:25:19.0881 6056 C:\Windows\System32\drivers\luafv.sys - ok

17:25:19.0881 6056 [ 0BB97D43299910CBFBA59C461B99B910 ] C:\Windows\System32\drivers\mbam.sys

17:25:19.0881 6056 C:\Windows\System32\drivers\mbam.sys - ok

17:25:19.0897 6056 [ 3A5C8F2F3500833F614BB509A1270971 ] C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe

17:25:19.0897 6056 C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe - ok

17:25:19.0897 6056 [ E73B0F1819602CB6EF176FB78D76A47B ] C:\Windows\SysWOW64\ntdll.dll

17:25:19.0897 6056 C:\Windows\SysWOW64\ntdll.dll - ok

17:25:19.0897 6056 [ 259EB5F7D95A29842B476C5B3EB6E186 ] C:\Windows\System32\wow64.dll

17:25:19.0897 6056 C:\Windows\System32\wow64.dll - ok

17:25:19.0912 6056 [ 3EE3AA76D8AB6D5644C4C8F34471CEB3 ] C:\Windows\System32\wow64cpu.dll

17:25:19.0912 6056 C:\Windows\System32\wow64cpu.dll - ok

17:25:19.0912 6056 [ 5674E21E82CFBEA36DDAD5DB285D6DBC ] C:\Windows\System32\wow64win.dll

17:25:19.0912 6056 C:\Windows\System32\wow64win.dll - ok

17:25:19.0928 6056 [ AC0B6F41882FC6ED186962D770EBF1D2 ] C:\Windows\SysWOW64\kernel32.dll

17:25:19.0928 6056 C:\Windows\SysWOW64\kernel32.dll - ok

17:25:19.0928 6056 [ E954A79D6A754A5475582CACED1565E6 ] C:\Windows\SysWOW64\KernelBase.dll

17:25:19.0928 6056 C:\Windows\SysWOW64\KernelBase.dll - ok

17:25:19.0928 6056 [ 86746345DF43C7C79107D740D8698351 ] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\UMEngx86.dll

17:25:19.0928 6056 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\UMEngx86.dll - ok

17:25:19.0943 6056 [ 9DC80A8AAAAAC397BDAB3C67165A824E ] C:\Windows\SysWOW64\msvcrt.dll

17:25:19.0943 6056 C:\Windows\SysWOW64\msvcrt.dll - ok

17:25:19.0943 6056 [ 6A6B2EE4565A178035BE2A4FF6F2C968 ] C:\Windows\SysWOW64\wtsapi32.dll

17:25:19.0943 6056 C:\Windows\SysWOW64\wtsapi32.dll - ok

17:25:19.0943 6056 [ C5AD8083CF94201F1F8084ECC696A8B7 ] C:\Windows\SysWOW64\rpcrt4.dll

17:25:19.0943 6056 C:\Windows\SysWOW64\rpcrt4.dll - ok

17:25:19.0959 6056 [ D15618A0FF8DBC2C5BF3726BACC75A0B ] C:\Windows\SysWOW64\userenv.dll

17:25:19.0959 6056 C:\Windows\SysWOW64\userenv.dll - ok

17:25:19.0959 6056 [ 0EC20BC8D8CDD1FC355DC17AD76C2091 ] C:\Program Files (x86)\HP SimplePass\TSLog.dll

17:25:19.0959 6056 C:\Program Files (x86)\HP SimplePass\TSLog.dll - ok

17:25:19.0959 6056 [ F08F6FCD09F9BE94C37ACC1B344685FF ] C:\Windows\SysWOW64\cryptbase.dll

17:25:19.0959 6056 C:\Windows\SysWOW64\cryptbase.dll - ok

17:25:19.0975 6056 [ C733D233B623B7FFCE5031E4B756EE26 ] C:\Windows\SysWOW64\profapi.dll

17:25:19.0975 6056 C:\Windows\SysWOW64\profapi.dll - ok

17:25:19.0975 6056 [ CFC97F07904067A1E5FAE195D534DA3A ] C:\Windows\SysWOW64\sechost.dll

17:25:19.0975 6056 C:\Windows\SysWOW64\sechost.dll - ok

17:25:19.0975 6056 [ BFB26890612FB8AE8B0463EBEBE84B7E ] C:\Windows\SysWOW64\sspicli.dll

17:25:19.0975 6056 C:\Windows\SysWOW64\sspicli.dll - ok

17:25:19.0990 6056 [ 5E0DB2D8B2750543CD2EBB9EA8E6CDD3 ] C:\Windows\SysWOW64\user32.dll

17:25:19.0990 6056 C:\Windows\SysWOW64\user32.dll - ok

17:25:19.0990 6056 [ 95E2376B3323F062EB562B8586D0F14A ] C:\Windows\SysWOW64\advapi32.dll

17:25:19.0990 6056 C:\Windows\SysWOW64\advapi32.dll - ok

17:25:20.0006 6056 [ D6D3AD7BF1D6F6CE9547613ED5E170A2 ] C:\Windows\SysWOW64\gdi32.dll

17:25:20.0006 6056 C:\Windows\SysWOW64\gdi32.dll - ok

17:25:20.0006 6056 [ 384721EF4024890092625E20CADFAF85 ] C:\Windows\SysWOW64\lpk.dll

17:25:20.0006 6056 C:\Windows\SysWOW64\lpk.dll - ok

17:25:20.0006 6056 [ B7230010D97787AF3D25E4C82F2B06B9 ] C:\Windows\SysWOW64\usp10.dll

17:25:20.0006 6056 C:\Windows\SysWOW64\usp10.dll - ok

17:25:20.0021 6056 [ 565D78187494FB5F08B5A52DEB2AEA7A ] C:\Windows\SysWOW64\shell32.dll

17:25:20.0021 6056 C:\Windows\SysWOW64\shell32.dll - ok

17:25:20.0021 6056 [ D1DE1EAFDE97BE41CF6585027FF3E732 ] C:\Windows\SysWOW64\comdlg32.dll

17:25:20.0021 6056 C:\Windows\SysWOW64\comdlg32.dll - ok

17:25:20.0021 6056 [ 8CC3C111D653E96F3EA1590891491D71 ] C:\Windows\SysWOW64\shlwapi.dll

17:25:20.0021 6056 C:\Windows\SysWOW64\shlwapi.dll - ok

17:25:20.0037 6056 [ 9E4B0E7472B4CEBA9E17F440B8CB0AB8 ] C:\Windows\SysWOW64\winspool.drv

17:25:20.0037 6056 C:\Windows\SysWOW64\winspool.drv - ok

17:25:20.0037 6056 [ BDAC1AA64495D0F7E1FF810EBBF1F018 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll

17:25:20.0037 6056 C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll - ok

17:25:20.0053 6056 [ 928CF7268086631F54C3D8E17238C6DD ] C:\Windows\SysWOW64\ole32.dll

17:25:20.0053 6056 C:\Windows\SysWOW64\ole32.dll - ok

17:25:20.0053 6056 [ 6C765E82B57F2E66CE9C54AC238471D9 ] C:\Windows\SysWOW64\oleaut32.dll

17:25:20.0053 6056 C:\Windows\SysWOW64\oleaut32.dll - ok

17:25:20.0053 6056 [ 18AB2E5A40064ED5F7791AC5946A90F3 ] C:\Windows\SysWOW64\msimg32.dll

17:25:20.0053 6056 C:\Windows\SysWOW64\msimg32.dll - ok

17:25:20.0068 6056 [ 8E01332CC4B68BC6B5B7EFFE374442AA ] C:\Windows\SysWOW64\oleacc.dll

17:25:20.0068 6056 C:\Windows\SysWOW64\oleacc.dll - ok

17:25:20.0068 6056 [ 7717F84F483002815490033BF069DABD ] C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\GdiPlus.dll

17:25:20.0068 6056 C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\GdiPlus.dll - ok

17:25:20.0068 6056 [ A6F09E5669D9A19035F6D942CAA15882 ] C:\Windows\SysWOW64\imm32.dll

17:25:20.0068 6056 C:\Windows\SysWOW64\imm32.dll - ok

17:25:20.0084 6056 [ C9618BC9B2B0FD7C1138D8774795A79B ] C:\Windows\SysWOW64\msctf.dll

17:25:20.0084 6056 C:\Windows\SysWOW64\msctf.dll - ok

17:25:20.0084 6056 [ D5AEFAD57C08349A4393D987DF7C715D ] C:\Windows\SysWOW64\winmm.dll

17:25:20.0084 6056 C:\Windows\SysWOW64\winmm.dll - ok

17:25:20.0099 6056 [ 3FD15B4611D9BDA3F8013548C0ECAECA ] C:\Windows\SysWOW64\ntmarta.dll

17:25:20.0099 6056 C:\Windows\SysWOW64\ntmarta.dll - ok

17:25:20.0099 6056 [ A8BB45F9ECAD993461E0FEF8E2A99152 ] C:\Windows\SysWOW64\Wldap32.dll

17:25:20.0099 6056 C:\Windows\SysWOW64\Wldap32.dll - ok

17:25:20.0099 6056 [ 39C5F32747B3414D1BB216FDB1DEFC58 ] C:\Windows\SysWOW64\dwmapi.dll

17:25:20.0099 6056 C:\Windows\SysWOW64\dwmapi.dll - ok

17:25:20.0115 6056 [ 43964FA89CCF97BA6BE34D69455AC65F ] C:\Windows\SysWOW64\uxtheme.dll

17:25:20.0115 6056 C:\Windows\SysWOW64\uxtheme.dll - ok

17:25:20.0115 6056 [ AB886378EEB55C6C75B4F2D14B6C869F ] C:\Windows\System32\drivers\WUDFPf.sys

17:25:20.0115 6056 C:\Windows\System32\drivers\WUDFPf.sys - ok

17:25:20.0115 6056 [ 418E881201583A3039D81F43E39E6C78 ] C:\Windows\SysWOW64\winsta.dll

17:25:20.0115 6056 C:\Windows\SysWOW64\winsta.dll - ok

17:25:20.0131 6056 [ 5C627D1B1138676C0A7AB2C2C190D123 ] C:\Windows\System32\rpcss.dll

17:25:20.0131 6056 C:\Windows\System32\rpcss.dll - ok

17:25:20.0131 6056 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] C:\Windows\System32\RpcEpMap.dll

17:25:20.0131 6056 C:\Windows\System32\RpcEpMap.dll - ok

17:25:20.0146 6056 [ 16E964ABF6D1E0F0CC7822FCA9BA754D ] C:\Windows\System32\wshqos.dll

17:25:20.0146 6056 C:\Windows\System32\wshqos.dll - ok

17:25:20.0146 6056 [ 31559F3244C6BC00A52030CAA83B6B91 ] C:\Windows\System32\WSHTCPIP.DLL

17:25:20.0146 6056 C:\Windows\System32\WSHTCPIP.DLL - ok

17:25:20.0146 6056 [ 9CF3CAA5E3803F12C41EF37219494300 ] C:\Windows\System32\atiesrxx.exe

17:25:20.0146 6056 C:\Windows\System32\atiesrxx.exe - ok

17:25:20.0162 6056 [ 9AD9E06F8656F296D91FAE8EE5B95A27 ] C:\Windows\System32\FirewallAPI.dll

17:25:20.0162 6056 C:\Windows\System32\FirewallAPI.dll - ok

17:25:20.0162 6056 [ 715F03B4C7223349768013EA95D9E5B7 ] C:\Windows\System32\LogonUI.exe

17:25:20.0162 6056 C:\Windows\System32\LogonUI.exe - ok

17:25:20.0162 6056 [ BD3674BE7FC9D8D3732C83E8499576ED ] C:\Windows\System32\wtsapi32.dll

17:25:20.0162 6056 C:\Windows\System32\wtsapi32.dll - ok

17:25:20.0177 6056 [ 94E026870A55AAEAFF7853C1754091E9 ] C:\Windows\System32\version.dll

17:25:20.0177 6056 C:\Windows\System32\version.dll - ok

17:25:20.0177 6056 [ 3EF480BFED1B5947A32585E30A58D4ED ] C:\Windows\System32\authui.dll

17:25:20.0177 6056 C:\Windows\System32\authui.dll - ok

17:25:20.0193 6056 [ B3BFBD758506ECB50C5804AAA76318F9 ] C:\Windows\System32\cryptui.dll

17:25:20.0193 6056 C:\Windows\System32\cryptui.dll - ok

17:25:20.0193 6056 [ 7FA8FDC2C2A27817FD0F624E78D3B50C ] C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll

17:25:20.0193 6056 C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll - ok

17:25:20.0193 6056 [ 6011714C8C5C55CBFFAD24D61E879FBD ] C:\Windows\System32\wevtsvc.dll

17:25:20.0193 6056 C:\Windows\System32\wevtsvc.dll - ok

17:25:20.0209 6056 [ 4E9C2DB10F7E6AE91BF761139D4B745B ] C:\Windows\System32\shacct.dll

17:25:20.0209 6056 C:\Windows\System32\shacct.dll - ok

17:25:20.0209 6056 [ F06BB4E336EA57511FDBAFAFCC47DE62 ] C:\Windows\System32\propsys.dll

17:25:20.0209 6056 C:\Windows\System32\propsys.dll - ok

17:25:20.0209 6056 [ 5B3EBFC3DA142324B388DDCC4465E1FF ] C:\Windows\System32\samlib.dll

17:25:20.0209 6056 C:\Windows\System32\samlib.dll - ok

17:25:20.0224 6056 [ 1F4492FE41767CDB8B89D17655847CDD ] C:\Windows\System32\ntmarta.dll

17:25:20.0224 6056 C:\Windows\System32\ntmarta.dll - ok

17:25:20.0224 6056 [ F23FEF6D569FCE88671949894A8BECF1 ] C:\Windows\System32\audiosrv.dll

17:25:20.0224 6056 C:\Windows\System32\audiosrv.dll - ok

17:25:20.0224 6056 [ D29E998E8277666982B4F0303BF4E7AF ] C:\Windows\System32\uxtheme.dll

17:25:20.0224 6056 C:\Windows\System32\uxtheme.dll - ok

17:25:20.0240 6056 [ C4C183E6551084039EC862DA1C945E3D ] C:\Windows\System32\FntCache.dll

17:25:20.0240 6056 C:\Windows\System32\FntCache.dll - ok

17:25:20.0240 6056 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] C:\Windows\System32\netprofm.dll

17:25:20.0240 6056 C:\Windows\System32\netprofm.dll - ok

17:25:20.0255 6056 [ 97F839E8AEC48EE271509BF4BC764C24 ] C:\Program Files\IDT\WDM\stacsv64.exe

17:25:20.0255 6056 C:\Program Files\IDT\WDM\stacsv64.exe - ok

17:25:20.0255 6056 [ 78A1E65207484B7F8D3217507745F47C ] C:\Windows\System32\avrt.dll

17:25:20.0255 6056 C:\Windows\System32\avrt.dll - ok

17:25:20.0255 6056 [ E40E80D0304A73E8D269F7141D77250B ] C:\Windows\System32\mmcss.dll

17:25:20.0255 6056 C:\Windows\System32\mmcss.dll - ok

17:25:20.0271 6056 [ 179E8401224D557ECFF3695F2016EA5B ] C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765\GdiPlus.dll

17:25:20.0271 6056 C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765\GdiPlus.dll - ok

17:25:20.0271 6056 [ 588CD0C78A7FAAE4186B5EEA0AF3ED67 ] C:\Windows\System32\adtschema.dll

17:25:20.0271 6056 C:\Windows\System32\adtschema.dll - ok

17:25:20.0271 6056 [ 58775492FFD419248B08325E583C527F ] C:\Windows\System32\atl.dll

17:25:20.0271 6056 C:\Windows\System32\atl.dll - ok

17:25:20.0287 6056 [ 9110FFAD124283F37D38771BB60556AF ] C:\Windows\System32\dsound.dll

17:25:20.0287 6056 C:\Windows\System32\dsound.dll - ok

17:25:20.0287 6056 [ 227E2C382A1E02F8D4965E664D3BBE43 ] C:\Windows\System32\MMDevAPI.dll

17:25:20.0287 6056 C:\Windows\System32\MMDevAPI.dll - ok

17:25:20.0302 6056 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] C:\Windows\System32\wlansvc.dll

17:25:20.0302 6056 C:\Windows\System32\wlansvc.dll - ok

17:25:20.0302 6056 [ 50544D04AD845C43130B70212EC05CCD ] C:\Windows\System32\microsoft-windows-kernel-power-events.dll

17:25:20.0302 6056 C:\Windows\System32\microsoft-windows-kernel-power-events.dll - ok

17:25:20.0302 6056 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] C:\Windows\System32\profsvc.dll

17:25:20.0302 6056 C:\Windows\System32\profsvc.dll - ok

17:25:20.0318 6056 [ B1DF2D87DC8BF6072699AC8301B37796 ] C:\Windows\System32\WUDFPlatform.dll

17:25:20.0318 6056 C:\Windows\System32\WUDFPlatform.dll - ok

17:25:20.0318 6056 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] C:\Windows\System32\MPSSVC.dll

17:25:20.0318 6056 C:\Windows\System32\MPSSVC.dll - ok

17:25:20.0333 6056 [ DA6B67270FD9DB3697B20FCE94950741 ] C:\Windows\System32\drivers\fltMgr.sys

17:25:20.0333 6056 C:\Windows\System32\drivers\fltMgr.sys - ok

17:25:20.0333 6056 [ EF2AE43BCD46ABB13FC3E5B2B1935C73 ] C:\Windows\System32\winmm.dll

17:25:20.0333 6056 C:\Windows\System32\winmm.dll - ok

17:25:20.0333 6056 [ D1A4C41AC2E15B2BC54AE3A120FB9C4C ] C:\Windows\System32\stapi64.dll

17:25:20.0333 6056 C:\Windows\System32\stapi64.dll - ok

17:25:20.0349 6056 [ 3CB6A7286422C72C34DAB54A5DFF1A34 ] C:\Windows\System32\dui70.dll

17:25:20.0349 6056 C:\Windows\System32\dui70.dll - ok

17:25:20.0349 6056 [ A3DB3C17EE6CAE65D53602B4E80BCCBC ] C:\Windows\System32\PSHED.DLL

17:25:20.0349 6056 C:\Windows\System32\PSHED.DLL - ok

17:25:20.0349 6056 [ D5CCA1453B98A5801E6D5FF0FF89DC6C ] C:\Windows\System32\audiodg.exe

17:25:20.0349 6056 C:\Windows\System32\audiodg.exe - ok

17:25:20.0365 6056 [ B0945E538CF906BBDDC5A11C8EE868CC ] C:\Windows\System32\microsoft-windows-kernel-processor-power-events.dll

17:25:20.0365 6056 C:\Windows\System32\microsoft-windows-kernel-processor-power-events.dll - ok

17:25:20.0365 6056 [ 8CCDE014A4CDF84564E03ACE064CA753 ] C:\Windows\System32\duser.dll

17:25:20.0365 6056 C:\Windows\System32\duser.dll - ok

17:25:20.0365 6056 [ D7F1EF374A90709B31591823B002F918 ] C:\Windows\System32\SndVolSSO.dll

17:25:20.0365 6056 C:\Windows\System32\SndVolSSO.dll - ok

17:25:20.0380 6056 [ 896F15A6434D93EDB42519D5E18E6B50 ] C:\Windows\System32\hid.dll

17:25:20.0380 6056 C:\Windows\System32\hid.dll - ok

17:25:20.0380 6056 [ DA1B7075260F3872585BFCDD668C648B ] C:\Windows\System32\dwmapi.dll

17:25:20.0380 6056 C:\Windows\System32\dwmapi.dll - ok

17:25:20.0396 6056 [ 6F8B48F3D343E4B186AB6A9E302B7E16 ] C:\Windows\System32\xmllite.dll

17:25:20.0396 6056 C:\Windows\System32\xmllite.dll - ok

17:25:20.0396 6056 [ 1473768973453DE50DC738C2955FC4DD ] C:\Windows\System32\wdmaud.drv

17:25:20.0396 6056 C:\Windows\System32\wdmaud.drv - ok

17:25:20.0396 6056 [ DC220AE6F64819099F7EBD6F137E32E7 ] C:\Windows\System32\AudioSes.dll

17:25:20.0396 6056 C:\Windows\System32\AudioSes.dll - ok

17:25:20.0411 6056 [ 8560FFFC8EB3A806DCD4F82252CFC8C6 ] C:\Windows\System32\ksuser.dll

17:25:20.0411 6056 C:\Windows\System32\ksuser.dll - ok

17:25:20.0411 6056 [ AF4A205229B7755088B5038F6A6BAAC8 ] C:\Windows\System32\stapo64.dll

17:25:20.0411 6056 C:\Windows\System32\stapo64.dll - ok

17:25:20.0411 6056 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] C:\Windows\System32\gpsvc.dll

17:25:20.0411 6056 C:\Windows\System32\gpsvc.dll - ok

17:25:20.0427 6056 [ F0344071948D1A1FA732231785A0664C ] C:\Windows\System32\themeservice.dll

17:25:20.0427 6056 C:\Windows\System32\themeservice.dll - ok

17:25:20.0427 6056 [ 4166F82BE4D24938977DD1746BE9B8A0 ] C:\Windows\System32\es.dll

17:25:20.0427 6056 C:\Windows\System32\es.dll - ok

17:25:20.0427 6056 [ CA2A0750ED830678997695FF61B04C30 ] C:\Windows\System32\midimap.dll

17:25:20.0427 6056 C:\Windows\System32\midimap.dll - ok

17:25:20.0443 6056 [ 10AC5CE9F78DC281A1BBD9B8CC587B8A ] C:\Windows\System32\msacm32.dll

17:25:20.0443 6056 C:\Windows\System32\msacm32.dll - ok

17:25:20.0443 6056 [ 1B7C3A37362C7B2890168C5FC61C8D9B ] C:\Windows\System32\msacm32.drv

17:25:20.0443 6056 C:\Windows\System32\msacm32.drv - ok

17:25:20.0458 6056 [ 5EDBB34736DD7AC1A73CF8792A835E10 ] C:\Windows\System32\AudioEng.dll

17:25:20.0458 6056 C:\Windows\System32\AudioEng.dll - ok

17:25:20.0458 6056 [ 3D7BB6DD7A87B3E36E44CA94444247A8 ] C:\Windows\System32\WindowsCodecs.dll

17:25:20.0458 6056 C:\Windows\System32\WindowsCodecs.dll - ok

17:25:20.0458 6056 [ 1A47D52E303B7543E4E6026595B95422 ] C:\Windows\System32\comres.dll

17:25:20.0458 6056 C:\Windows\System32\comres.dll - ok

17:25:20.0474 6056 [ C32AB8FA018EF34C0F113BD501436D21 ] C:\Windows\System32\Sens.dll

17:25:20.0474 6056 C:\Windows\System32\Sens.dll - ok

17:25:20.0474 6056 [ A77BE7CB3222B4FB0AC6C71D1C2698D4 ] C:\Windows\System32\dsrole.dll

17:25:20.0474 6056 C:\Windows\System32\dsrole.dll - ok

17:25:20.0474 6056 [ 46BB91A169B9B31FF44EB04C48EC1D41 ] C:\Windows\System32\nlaapi.dll

17:25:20.0474 6056 C:\Windows\System32\nlaapi.dll - ok

17:25:20.0489 6056 [ BE097F5BB10F9079FCEB2DC4E7E20F02 ] C:\Windows\System32\slc.dll

17:25:20.0489 6056 C:\Windows\System32\slc.dll - ok

17:25:20.0489 6056 [ 55FFCBB036D7BE4BCA6FA1421203A27F ] C:\Windows\System32\hpservice.exe

17:25:20.0489 6056 C:\Windows\System32\hpservice.exe - ok

17:25:20.0489 6056 [ 19F9B524A525D202194247E96656CB88 ] C:\Windows\System32\mfc42u.dll

17:25:20.0489 6056 C:\Windows\System32\mfc42u.dll - ok

17:25:20.0505 6056 [ C1395286B822E306B4FE1568A8A77813 ] C:\Windows\System32\AUDIOKSE.dll

17:25:20.0505 6056 C:\Windows\System32\AUDIOKSE.dll - ok

17:25:20.0505 6056 [ 9F2BACD5E1776A4BB7CC0EC3C3A4F96D ] C:\Windows\System32\winbrand.dll

17:25:20.0505 6056 C:\Windows\System32\winbrand.dll - ok

17:25:20.0521 6056 [ C2762A57DF0EE85E63CE4893C5215313 ] C:\Windows\System32\VaultCredProvider.dll

17:25:20.0521 6056 C:\Windows\System32\VaultCredProvider.dll - ok

17:25:20.0521 6056 [ CA2985996BB49924B677113DF95CFEA7 ] C:\Windows\System32\SmartcardCredentialProvider.dll

17:25:20.0521 6056 C:\Windows\System32\SmartcardCredentialProvider.dll - ok

17:25:20.0521 6056 [ 5C69600A340125A83051334B23CF187B ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\sluapo64.dll

17:25:20.0521 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\sluapo64.dll - ok

17:25:20.0536 6056 [ BF352E73615F5461AA6884472435A544 ] C:\Windows\System32\BioCredProv.dll

17:25:20.0536 6056 C:\Windows\System32\BioCredProv.dll - ok

17:25:20.0536 6056 [ 558C42D165DB5799B4072DC0A9C27C0B ] C:\Windows\System32\msdmo.dll

17:25:20.0536 6056 C:\Windows\System32\msdmo.dll - ok

17:25:20.0552 6056 [ 612C713CF5E2224213BD03FF9D7B3545 ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slapoi64.dll

17:25:20.0552 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slapoi64.dll - ok

17:25:20.0552 6056 [ CC0AB40F02D2C2A12209715A3C1B07B8 ] C:\Windows\System32\credui.dll

17:25:20.0552 6056 C:\Windows\System32\credui.dll - ok

17:25:20.0552 6056 [ 796B8123A7859AFD3A4AE10514DBAEB5 ] C:\Windows\System32\winbio.dll

17:25:20.0552 6056 C:\Windows\System32\winbio.dll - ok

17:25:20.0567 6056 [ EEEA40F0EDB0A6E5359E539E15D0BC77 ] C:\Windows\System32\netapi32.dll

17:25:20.0567 6056 C:\Windows\System32\netapi32.dll - ok

17:25:20.0567 6056 [ 6CECA4C6A489C9B2E6073AFDAAE3F607 ] C:\Windows\System32\netutils.dll

17:25:20.0567 6056 C:\Windows\System32\netutils.dll - ok

17:25:20.0567 6056 [ 44B9C66177651F3F53C87B665D58D17A ] C:\Windows\System32\vaultcli.dll

17:25:20.0567 6056 C:\Windows\System32\vaultcli.dll - ok

17:25:20.0583 6056 [ 3C91392D448F6E5D525A85B7550D8BA9 ] C:\Windows\System32\wkscli.dll

17:25:20.0583 6056 C:\Windows\System32\wkscli.dll - ok

17:25:20.0583 6056 [ 972C3301DB3DA91AE06A95F6B4160B1B ] C:\Windows\System32\certCredProvider.dll

17:25:20.0583 6056 C:\Windows\System32\certCredProvider.dll - ok

17:25:20.0599 6056 [ FC51229C7D4AFA0D6F186133728B95AB ] C:\Windows\System32\samcli.dll

17:25:20.0599 6056 C:\Windows\System32\samcli.dll - ok

17:25:20.0599 6056 [ 7FF8E121AFA05BDAB23B9FEDCDAB7A33 ] C:\Windows\System32\odbc32.dll

17:25:20.0599 6056 C:\Windows\System32\odbc32.dll - ok

17:25:20.0599 6056 [ 032229246107C5C7211E6D1498B52D3D ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL

17:25:20.0599 6056 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL - ok

17:25:20.0614 6056 [ 87FA0C48C3B2E9FEE518818FE26B15B5 ] C:\Windows\System32\rasplap.dll

17:25:20.0614 6056 C:\Windows\System32\rasplap.dll - ok

17:25:20.0614 6056 [ 998BC4E7EBEF6E32D96CE0CB824B8CDB ] C:\Windows\System32\accelerometerdll.DLL

17:25:20.0614 6056 C:\Windows\System32\accelerometerdll.DLL - ok

17:25:20.0630 6056 [ 019CD868461B646E09BDF04474C19341 ] C:\Windows\System32\rasapi32.dll

17:25:20.0630 6056 C:\Windows\System32\rasapi32.dll - ok

17:25:20.0630 6056 [ 3E466073C3B1033FF92ADE9031E3D4A2 ] C:\Windows\System32\odbcint.dll

17:25:20.0630 6056 C:\Windows\System32\odbcint.dll - ok

17:25:20.0630 6056 [ 3CE92053AD1000B95E7BE1E93CDA9AE3 ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slcc3d64.dll

17:25:20.0630 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slcc3d64.dll - ok

17:25:20.0645 6056 [ B28DEEC597C8DEB70C744C7CF9210E3E ] C:\Windows\System32\rasman.dll

17:25:20.0645 6056 C:\Windows\System32\rasman.dll - ok

17:25:20.0645 6056 [ B53C4B69B695EDA1B7E41D35CA4244E2 ] C:\Windows\System32\rtutils.dll

17:25:20.0645 6056 C:\Windows\System32\rtutils.dll - ok

17:25:20.0645 6056 [ EF3D4E21691E5E51057ECA0A29DB743B ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slcshp64.dll

17:25:20.0645 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slcshp64.dll - ok

17:25:20.0661 6056 [ BAAB0A603C510D6202C47F992EB396FC ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slcsii64.dll

17:25:20.0661 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slcsii64.dll - ok

17:25:20.0661 6056 [ E8FCDAC15AB6B25611B4CA18FF9C72DF ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slgeq64.dll

17:25:20.0661 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slgeq64.dll - ok

17:25:20.0677 6056 [ 9BC8610C32C96A2983A65DC21CAFA921 ] C:\Windows\System32\UXInit.dll

17:25:20.0677 6056 C:\Windows\System32\UXInit.dll - ok

17:25:20.0677 6056 [ C7737E29FB2E8171E3F7D0A9CBCD0311 ] C:\Windows\System32\atieclxx.exe

17:25:20.0677 6056 C:\Windows\System32\atieclxx.exe - ok

17:25:20.0677 6056 [ 8CEF53DF5240A13B194D38A48ED58124 ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slh36064.dll

17:25:20.0677 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slh36064.dll - ok

17:25:20.0692 6056 [ 96F9B56907FC386120CC1A9AB45DB6D0 ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slhlim64.dll

17:25:20.0692 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slhlim64.dll - ok

17:25:20.0692 6056 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] C:\Windows\System32\uxsms.dll

17:25:20.0692 6056 C:\Windows\System32\uxsms.dll - ok

17:25:20.0708 6056 [ CF636C92B762B26F0B39B38E92380A09 ] C:\Windows\System32\oleacc.dll

17:25:20.0708 6056 C:\Windows\System32\oleacc.dll - ok

17:25:20.0708 6056 [ D099BD4ED0A1AABE8663E7E0B33C0BEF ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slinit64.dll

17:25:20.0708 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slinit64.dll - ok

17:25:20.0708 6056 [ B20F051B03A966392364C83F009F7D17 ] C:\Windows\System32\WUDFSvc.dll

17:25:20.0708 6056 C:\Windows\System32\WUDFSvc.dll - ok

17:25:20.0723 6056 [ 6E7A87F50B09A8EAD2D8AF22D14F04D5 ] C:\Windows\System32\atiadlxx.dll

17:25:20.0723 6056 C:\Windows\System32\atiadlxx.dll - ok

17:25:20.0723 6056 [ 8ABFE00F213F2571498F1B8FD7939A98 ] C:\Windows\System32\WUDFHost.exe

17:25:20.0723 6056 C:\Windows\System32\WUDFHost.exe - ok

17:25:20.0739 6056 [ 5C96498E1BF3F1FCC8A209046FF98B6F ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slmaxv64.dll

17:25:20.0739 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slmaxv64.dll - ok

17:25:20.0739 6056 [ 019BDD35DE269CB98B22DE8923C2AA3B ] C:\Windows\System32\UIAutomationCore.dll

17:25:20.0739 6056 C:\Windows\System32\UIAutomationCore.dll - ok

17:25:20.0739 6056 [ 5D0F03EEF3205F66ECFBE72A7CBBAD1F ] C:\Windows\System32\winusb.dll

17:25:20.0739 6056 C:\Windows\System32\winusb.dll - ok

17:25:20.0755 6056 [ 25AE683DCB4AE7E6F1B193A0CB9DB35F ] C:\Windows\System32\WUDFx.dll

17:25:20.0755 6056 C:\Windows\System32\WUDFx.dll - ok

17:25:20.0755 6056 [ CDF00E68ED34B38C056BBD96856C5230 ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slprop64.dll

17:25:20.0755 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slprop64.dll - ok

17:25:20.0755 6056 [ A0724D93077EA2F8C52F12B07BA8E994 ] C:\Windows\System32\drivers\UMDF\wbf_vfs_0018.dll

17:25:20.0755 6056 C:\Windows\System32\drivers\UMDF\wbf_vfs_0018.dll - ok

17:25:20.0770 6056 [ 01540A07F27A4AFB6ADA81A0755E200D ] C:\Windows\System32\vcsAPIFORWBF.dll

17:25:20.0770 6056 C:\Windows\System32\vcsAPIFORWBF.dll - ok

17:25:20.0770 6056 [ 8F70355F1E98FF7406A8069589DDD60F ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\sltshd64.dll

17:25:20.0770 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\sltshd64.dll - ok

17:25:20.0786 6056 [ 89597F4EF5F63DD13D74C0EEFFC03FCF ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slvipp64.dll

17:25:20.0786 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slvipp64.dll - ok

17:25:20.0786 6056 [ 233131BA24FB2FE8E7EB8A638F23FF39 ] C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slviq64.dll

17:25:20.0786 6056 C:\Windows\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slviq64.dll - ok

17:25:20.0786 6056 [ EC6BA7C92FA5B2AA4AFDF4DF22AEDAB7 ] C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\msvcr80.dll

17:25:20.0786 6056 C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\msvcr80.dll - ok

17:25:20.0801 6056 [ 5AA945234E9D4CCE4F715276B9AA712C ] C:\Windows\System32\imageres.dll

17:25:20.0801 6056 C:\Windows\System32\imageres.dll - ok

17:25:20.0801 6056 [ 3DE2EF66A1E6889D4784AC2AAE21A740 ] C:\Windows\System32\atimuixx.dll

17:25:20.0801 6056 C:\Windows\System32\atimuixx.dll - ok

17:25:20.0817 6056 [ FB54EF3AA613D2832FD3812E7CB2FC75 ] C:\Windows\System32\drivers\vmnetbridge.sys

17:25:20.0817 6056 C:\Windows\System32\drivers\vmnetbridge.sys - ok

17:25:20.0817 6056 [ BC6526297C2E1377949F79A3AC622BAD ] C:\Windows\System32\drivers\appexDrv.sys

17:25:20.0817 6056 C:\Windows\System32\drivers\appexDrv.sys - ok

17:25:20.0817 6056 [ 1538831CF8AD2979A04C423779465827 ] C:\Windows\System32\drivers\lltdio.sys

17:25:20.0817 6056 C:\Windows\System32\drivers\lltdio.sys - ok

17:25:20.0833 6056 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] C:\Windows\System32\drivers\nwifi.sys

17:25:20.0833 6056 C:\Windows\System32\drivers\nwifi.sys - ok

17:25:20.0833 6056 [ 136185F9FB2CC61E573E676AA5402356 ] C:\Windows\System32\drivers\ndisuio.sys

17:25:20.0833 6056 C:\Windows\System32\drivers\ndisuio.sys - ok

17:25:20.0833 6056 [ DDC86E4F8E7456261E637E3552E804FF ] C:\Windows\System32\drivers\rspndr.sys

17:25:20.0833 6056 C:\Windows\System32\drivers\rspndr.sys - ok

17:25:20.0848 6056 [ 2B81776DA02017A37FE26C662827470E ] C:\Windows\System32\IPHLPAPI.DLL

17:25:20.0848 6056 C:\Windows\System32\IPHLPAPI.DLL - ok

17:25:20.0848 6056 [ F993A32249B66C9D622EA5592A8B76B8 ] C:\Windows\System32\lmhsvc.dll

17:25:20.0848 6056 C:\Windows\System32\lmhsvc.dll - ok

17:25:20.0864 6056 [ D54BFDF3E0C953F823B3D0BFE4732528 ] C:\Windows\System32\nsisvc.dll

17:25:20.0864 6056 C:\Windows\System32\nsisvc.dll - ok

17:25:20.0864 6056 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] C:\Windows\System32\dhcpcore.dll

17:25:20.0864 6056 C:\Windows\System32\dhcpcore.dll - ok

17:25:20.0864 6056 [ B73A6E4B319AFFE64582AC5C1801BB3F ] C:\Windows\System32\nrpsrv.dll

17:25:20.0864 6056 C:\Windows\System32\nrpsrv.dll - ok

17:25:20.0879 6056 [ 4C9210E8F4E052F6A4EB87716DA0C24C ] C:\Windows\System32\winnsi.dll

17:25:20.0879 6056 C:\Windows\System32\winnsi.dll - ok

17:25:20.0879 6056 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] C:\Windows\System32\dnsrslvr.dll

17:25:20.0879 6056 C:\Windows\System32\dnsrslvr.dll - ok

galen222 · July 6, 2013

Part 3 TDSSKiller Report

17:25:20.0879 6056 [ F9EC845C5EECF20E9A67F9F805F2EF1F ] C:\Windows\System32\keyiso.dll

17:25:20.0879 6056 C:\Windows\System32\keyiso.dll - ok

17:25:20.0895 6056 [ 87356377F31DA5F20A833811CD59499C ] C:\Windows\System32\eapphost.dll

17:25:20.0895 6056 C:\Windows\System32\eapphost.dll - ok

17:25:20.0895 6056 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] C:\Windows\System32\eapsvc.dll

17:25:20.0895 6056 C:\Windows\System32\eapsvc.dll - ok

17:25:20.0911 6056 [ 3CC16A849E6092E43909F48EF0E60306 ] C:\Windows\System32\dhcpcore6.dll

17:25:20.0911 6056 C:\Windows\System32\dhcpcore6.dll - ok

17:25:20.0911 6056 [ 0040C486584A8E582C861CFB57AB5387 ] C:\Windows\System32\FWPUCLNT.DLL

17:25:20.0911 6056 C:\Windows\System32\FWPUCLNT.DLL - ok

17:25:20.0911 6056 [ F568F7C08458D69E4FCD8675BBB107E4 ] C:\Windows\System32\dhcpcsvc.dll

17:25:20.0911 6056 C:\Windows\System32\dhcpcsvc.dll - ok

17:25:20.0926 6056 [ 3C06D5A929B798D0B13F6481242A0FD2 ] C:\Windows\System32\dhcpcsvc6.dll

17:25:20.0926 6056 C:\Windows\System32\dhcpcsvc6.dll - ok

17:25:20.0926 6056 [ 885D0942E0F28DB90919BE3129ECF279 ] C:\Windows\System32\dnsext.dll

17:25:20.0926 6056 C:\Windows\System32\dnsext.dll - ok

17:25:20.0926 6056 [ 9FCA3A84338ADEF2AFF67CDA46EF8539 ] C:\Windows\System32\umb.dll

17:25:20.0926 6056 C:\Windows\System32\umb.dll - ok

17:25:20.0942 6056 [ A648C4A06DE367065B24056D067B4460 ] C:\Windows\System32\wlanmsm.dll

17:25:20.0942 6056 C:\Windows\System32\wlanmsm.dll - ok

17:25:20.0942 6056 [ 06A1386B6E3A0CBC368665C1840906F4 ] C:\Windows\System32\wlansec.dll

17:25:20.0942 6056 C:\Windows\System32\wlansec.dll - ok

17:25:20.0942 6056 [ 73FCB7919DEE80EE556F2E498594EBAE ] C:\Windows\System32\onex.dll

17:25:20.0942 6056 C:\Windows\System32\onex.dll - ok

17:25:20.0957 6056 [ 65522E77A1360DBC8D199DA3BF5EFFE4 ] C:\Windows\System32\eappprxy.dll

17:25:20.0957 6056 C:\Windows\System32\eappprxy.dll - ok

17:25:20.0957 6056 [ 0D753307D274F3688BD21C377B616700 ] C:\Windows\System32\eappcfg.dll

17:25:20.0957 6056 C:\Windows\System32\eappcfg.dll - ok

17:25:20.0973 6056 [ 97E43F324BE1503CB2FFB058534688DA ] C:\Windows\System32\l2gpstore.dll

17:25:20.0973 6056 C:\Windows\System32\l2gpstore.dll - ok

17:25:20.0973 6056 [ 730BF204A595D5B6D7DC57A247CC741C ] C:\Windows\System32\wlgpclnt.dll

17:25:20.0973 6056 C:\Windows\System32\wlgpclnt.dll - ok

17:25:20.0973 6056 [ 7D5645EE0EA77D539828433D9B95F5EB ] C:\Windows\System32\WinSCard.dll

17:25:20.0973 6056 C:\Windows\System32\WinSCard.dll - ok

17:25:20.0989 6056 [ 7F1B4C6FF3B85F9ADF74055187B8A22C ] C:\Windows\System32\wlanutil.dll

17:25:20.0989 6056 C:\Windows\System32\wlanutil.dll - ok

17:25:20.0989 6056 [ 99B91C5D2FCEF218CAD3600ECB62A799 ] C:\Windows\System32\msxml6.dll

17:25:20.0989 6056 C:\Windows\System32\msxml6.dll - ok

17:25:20.0989 6056 [ AAF932B4011D14052955D4B212A4DA8D ] C:\Windows\System32\shsvcs.dll

17:25:20.0989 6056 C:\Windows\System32\shsvcs.dll - ok

17:25:21.0004 6056 [ 262F6592C3299C005FD6BEC90FC4463A ] C:\Windows\System32\schedsvc.dll

17:25:21.0004 6056 C:\Windows\System32\schedsvc.dll - ok

17:25:21.0004 6056 [ BC414631876B2F28B8DAB08E849C12C5 ] C:\Windows\System32\ktmw32.dll

17:25:21.0004 6056 C:\Windows\System32\ktmw32.dll - ok

17:25:21.0004 6056 [ 03706015DB44368375AEBE6339490E66 ] C:\Windows\System32\netcfgx.dll

17:25:21.0004 6056 C:\Windows\System32\netcfgx.dll - ok

17:25:21.0020 6056 [ 945E54F23C72D37B8CD1987AF0DB63BF ] C:\Windows\System32\fveapi.dll

17:25:21.0020 6056 C:\Windows\System32\fveapi.dll - ok

17:25:21.0020 6056 [ 694865362F0965779F92BCFE97712323 ] C:\Windows\System32\tbs.dll

17:25:21.0020 6056 C:\Windows\System32\tbs.dll - ok

17:25:21.0020 6056 [ 891ECFD08E2C538B7948CBC45106D697 ] C:\Windows\System32\fvecerts.dll

17:25:21.0020 6056 C:\Windows\System32\fvecerts.dll - ok

17:25:21.0035 6056 [ 6DC4A7242F565C9E9C9CCC7BB0FA75C7 ] C:\Windows\System32\taskcomp.dll

17:25:21.0035 6056 C:\Windows\System32\taskcomp.dll - ok

17:25:21.0035 6056 [ 8269210DAF3B12BC8300631B28A2A442 ] C:\Windows\System32\wiarpc.dll

17:25:21.0035 6056 C:\Windows\System32\wiarpc.dll - ok

17:25:21.0051 6056 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] C:\Windows\System32\drivers\http.sys

17:25:21.0051 6056 C:\Windows\System32\drivers\http.sys - ok

17:25:21.0051 6056 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] C:\Windows\System32\spoolsv.exe

17:25:21.0051 6056 C:\Windows\System32\spoolsv.exe - ok

17:25:21.0051 6056 [ 567BC1309E05FCFA680ADB6E02260736 ] C:\Windows\System32\vaultsvc.dll

17:25:21.0051 6056 C:\Windows\System32\vaultsvc.dll - ok

17:25:21.0067 6056 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] C:\Windows\System32\wbiosrvc.dll

17:25:21.0067 6056 C:\Windows\System32\wbiosrvc.dll - ok

17:25:21.0067 6056 [ 3353D3FC4C2A402F10B3DFBBE5BA1A88 ] C:\Windows\System32\WinBioPlugIns\vcsWBFEngineAdapter.dll

17:25:21.0067 6056 C:\Windows\System32\WinBioPlugIns\vcsWBFEngineAdapter.dll - ok

17:25:21.0082 6056 [ 056D5D304B880AD099DA6D0E7A0C138D ] C:\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll

17:25:21.0082 6056 C:\Windows\System32\WinBioPlugIns\winbiosensoradapter.dll - ok

17:25:21.0082 6056 [ 82974D6A2FD19445CC5171FC378668A4 ] C:\Windows\System32\BFE.DLL

17:25:21.0082 6056 C:\Windows\System32\BFE.DLL - ok

17:25:21.0082 6056 [ B1FDCFFF7609E121C10751A669AB1611 ] C:\Windows\winsxs\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_8448b2bd328df189\mfc80u.dll

17:25:21.0082 6056 C:\Windows\winsxs\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_8448b2bd328df189\mfc80u.dll - ok

17:25:21.0098 6056 [ D41526C0E9214BD8AB239B2C02541B18 ] C:\Windows\System32\WinBioPlugIns\winbiostorageadapter.dll

17:25:21.0098 6056 C:\Windows\System32\WinBioPlugIns\winbiostorageadapter.dll - ok

17:25:21.0098 6056 [ 442235AC4F20B195F932990CAE47408E ] C:\Windows\winsxs\amd64_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_bc20f59b0bdd1acd\mfc80ENU.dll

17:25:21.0098 6056 C:\Windows\winsxs\amd64_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_bc20f59b0bdd1acd\mfc80ENU.dll - ok

17:25:21.0113 6056 [ E6F0F82788E8BD0F7A616350EFA0761C ] C:\Windows\System32\actxprxy.dll

17:25:21.0113 6056 C:\Windows\System32\actxprxy.dll - ok

17:25:21.0113 6056 [ 6C02A83164F5CC0A262F4199F0871CF5 ] C:\Windows\System32\drivers\bowser.sys

17:25:21.0113 6056 C:\Windows\System32\drivers\bowser.sys - ok

17:25:21.0113 6056 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] C:\Windows\System32\drivers\mpsdrv.sys

17:25:21.0113 6056 C:\Windows\System32\drivers\mpsdrv.sys - ok

17:25:21.0129 6056 [ A5D9106A73DC88564C825D317CAC68AC ] C:\Windows\System32\drivers\mrxsmb.sys

17:25:21.0129 6056 C:\Windows\System32\drivers\mrxsmb.sys - ok

17:25:21.0129 6056 [ D711B3C1D5F42C0C2415687BE09FC163 ] C:\Windows\System32\drivers\mrxsmb10.sys

17:25:21.0129 6056 C:\Windows\System32\drivers\mrxsmb10.sys - ok

17:25:21.0129 6056 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] C:\Windows\System32\drivers\mrxsmb20.sys

17:25:21.0129 6056 C:\Windows\System32\drivers\mrxsmb20.sys - ok

17:25:21.0145 6056 [ 851A1382EED3E3A7476DB004F4EE3E1A ] C:\Windows\System32\wkssvc.dll

17:25:21.0145 6056 C:\Windows\System32\wkssvc.dll - ok

17:25:21.0145 6056 [ B93B24F258441820E575C7983BA47313 ] C:\Windows\System32\drivers\hcmon.sys

17:25:21.0145 6056 C:\Windows\System32\drivers\hcmon.sys - ok

17:25:21.0160 6056 [ C67F8A962B2534224D5908D16D2AD3CE ] C:\Windows\System32\wfapigp.dll

17:25:21.0160 6056 C:\Windows\System32\wfapigp.dll - ok

17:25:21.0160 6056 [ 1834B31C749B86DAC233BBBA1C03BC48 ] C:\Windows\System32\mscms.dll

17:25:21.0160 6056 C:\Windows\System32\mscms.dll - ok

17:25:21.0160 6056 [ 3AEAA8B561E63452C655DC0584922257 ] C:\Windows\System32\pcasvc.dll

17:25:21.0160 6056 C:\Windows\System32\pcasvc.dll - ok

17:25:21.0176 6056 [ 6313F223E817CC09AA41811DAA7F541D ] C:\Windows\System32\snmptrap.exe

17:25:21.0176 6056 C:\Windows\System32\snmptrap.exe - ok

17:25:21.0176 6056 [ CC711ED4F3D1987E84745237358FF87C ] C:\Windows\System32\drivers\vmci.sys

17:25:21.0176 6056 C:\Windows\System32\drivers\vmci.sys - ok

17:25:21.0176 6056 [ 10EAB90C1AE8271B5FE5A8930987EE5C ] C:\Program Files\Windows Live\Mesh\WLRemoteServiceResource.dll

17:25:21.0176 6056 C:\Program Files\Windows Live\Mesh\WLRemoteServiceResource.dll - ok

17:25:21.0191 6056 [ 884737C95B3E1281525D7BC6E9E9D11F ] C:\Windows\System32\drivers\vmx86.sys

17:25:21.0191 6056 C:\Windows\System32\drivers\vmx86.sys - ok

17:25:21.0191 6056 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

17:25:21.0191 6056 C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe - ok

17:25:21.0207 6056 [ E9A0777DCA9148157E0EF9B71D7DE353 ] C:\Windows\System32\RdpGroupPolicyExtension.dll

17:25:21.0207 6056 C:\Windows\System32\RdpGroupPolicyExtension.dll - ok

17:25:21.0207 6056 [ 7C00C608FE4C8EDE9E30940837B9AC8B ] C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll

17:25:21.0207 6056 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelEvents.dll - ok

17:25:21.0207 6056 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] C:\Windows\System32\sstpsvc.dll

17:25:21.0207 6056 C:\Windows\System32\sstpsvc.dll - ok

17:25:21.0223 6056 [ 92245C959E5BC378809D2CC5E9F6E9C7 ] C:\Windows\SysWOW64\crypt32.dll

17:25:21.0223 6056 C:\Windows\SysWOW64\crypt32.dll - ok

17:25:21.0223 6056 [ 908ACB1F594274965A53926B10C81E89 ] C:\Windows\System32\provsvc.dll

17:25:21.0223 6056 C:\Windows\System32\provsvc.dll - ok

17:25:21.0238 6056 [ 938F39B50BAFE13D6F58C7790682C010 ] C:\Windows\SysWOW64\msasn1.dll

17:25:21.0238 6056 C:\Windows\SysWOW64\msasn1.dll - ok

17:25:21.0238 6056 [ 17448AF0BBA9E7AB5EC955AF93F271BD ] C:\Windows\SysWOW64\wintrust.dll

17:25:21.0238 6056 C:\Windows\SysWOW64\wintrust.dll - ok

17:25:21.0238 6056 [ CDBE9690CF2B8409FACAD94FAC9479C9 ] C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll

17:25:21.0238 6056 C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll - ok

17:25:21.0254 6056 [ 61DC8E86F85C72A0F4D6D44AAB7C9CCD ] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

17:25:21.0254 6056 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe - ok

17:25:21.0254 6056 [ D029339C0F59CF662094EDDF8C42B2B5 ] C:\Windows\System32\msvcp100.dll

17:25:21.0254 6056 C:\Windows\System32\msvcp100.dll - ok

17:25:21.0269 6056 [ 366FD6F3A451351B5DF2D7C4ECF4C73A ] C:\Windows\System32\msvcr100.dll

17:25:21.0269 6056 C:\Windows\System32\msvcr100.dll - ok

17:25:21.0269 6056 [ 965CCAD1CF17DBD1819DBBFDB0F4BC93 ] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll

17:25:21.0269 6056 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll - ok

17:25:21.0269 6056 [ D7253A1A7A49FA40EF0BA1955AAFB346 ] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys

17:25:21.0269 6056 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys - ok

17:25:21.0285 6056 [ 59BEC755D1E806924A65DE87CE3E1DEE ] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\device.dll

17:25:21.0285 6056 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\device.dll - ok

17:25:21.0285 6056 [ A8704A10FFDE468F4AB18EBF82A9A86F ] C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\msvcp80.dll

17:25:21.0285 6056 C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_88e41e092fab0294\msvcp80.dll - ok

17:25:21.0285 6056 [ E3F8BC3376D152FC5E3A4327FE384CCB ] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\platform.dll

17:25:21.0285 6056 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\platform.dll - ok

17:25:21.0301 6056 [ 4FE5C6D40664AE07BE5105874357D2ED ] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

17:25:21.0301 6056 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe - ok

17:25:21.0301 6056 [ 0B3595A4FF0B36D68E5FC67FD7D70FDC ] C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll

17:25:21.0301 6056 C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll - ok

17:25:21.0316 6056 [ C9564CF4976E7E96B4052737AA2492B4 ] C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll

17:25:21.0316 6056 C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll - ok

17:25:21.0316 6056 [ 5937E46ECDCD514C7A74D64E4EF5E21D ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\AppleVersions.dll

17:25:21.0316 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\AppleVersions.dll - ok

17:25:21.0332 6056 [ 6D41F6AA35220E7A54543075B27E8F83 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\YSCrashDump.dll

17:25:21.0332 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\YSCrashDump.dll - ok

17:25:21.0332 6056 [ 702254574E7E52052DE39408457B7149 ] C:\Windows\SysWOW64\version.dll

17:25:21.0332 6056 C:\Windows\SysWOW64\version.dll - ok

17:25:21.0332 6056 [ EF8CD3C64EE9C08980D6D06CCCE46C68 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CoreFoundation.dll

17:25:21.0332 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CoreFoundation.dll - ok

17:25:21.0347 6056 [ DE42397D00B22F15589ADFD090120131 ] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll

17:25:21.0347 6056 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll - ok

17:25:21.0347 6056 [ 357BE883C5236BFC7341CB9E82308908 ] C:\Windows\System32\wlanapi.dll

17:25:21.0347 6056 C:\Windows\System32\wlanapi.dll - ok

17:25:21.0363 6056 [ 6377051C63D5552A311935C67E9FDFDC ] C:\Windows\SysWOW64\nsi.dll

17:25:21.0363 6056 C:\Windows\SysWOW64\nsi.dll - ok

17:25:21.0363 6056 [ 7FF15A4F092CD4A96055BA69F903E3E9 ] C:\Windows\SysWOW64\ws2_32.dll

17:25:21.0363 6056 C:\Windows\SysWOW64\ws2_32.dll - ok

17:25:21.0363 6056 [ 1F942930893ED98204AE67260E03EE26 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll

17:25:21.0363 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll - ok

17:25:21.0379 6056 [ 78865ABC5F5D13190F8B35BD9044714A ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\objc.dll

17:25:21.0379 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\objc.dll - ok

17:25:21.0379 6056 [ DF13A51A5C591887D2EC6AE64CEED0FA ] C:\Windows\SysWOW64\wsock32.dll

17:25:21.0379 6056 C:\Windows\SysWOW64\wsock32.dll - ok

17:25:21.0394 6056 [ FF9831030678C7B6D70BAC00F68F8976 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libdispatch.dll

17:25:21.0394 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libdispatch.dll - ok

17:25:21.0394 6056 [ E5B6D88B36BDDAD5039764FBF80284DD ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuin.dll

17:25:21.0394 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuin.dll - ok

17:25:21.0394 6056 [ 1D75BC73585969F41BA7EF0C882DFF2B ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuuc.dll

17:25:21.0394 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libicuuc.dll - ok

17:25:21.0410 6056 [ FC7A868DECC3AB027F29178EC8A7F252 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\icudt46.dll

17:25:21.0410 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\icudt46.dll - ok

17:25:21.0410 6056 [ F6FD367C9EAAEDF90CD7A7952AE0B336 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\ASL.dll

17:25:21.0410 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\ASL.dll - ok

17:25:21.0425 6056 [ 4327CF9A9D0864CA0FFC97FCDA97315A ] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService_main.dll

17:25:21.0425 6056 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService_main.dll - ok

17:25:21.0425 6056 [ 10FB16B50AFFDA6D44588F3C445DC273 ] C:\Windows\SysWOW64\setupapi.dll

17:25:21.0425 6056 C:\Windows\SysWOW64\setupapi.dll - ok

17:25:21.0425 6056 [ F436E847FA799ECD75AD8C313673F450 ] C:\Windows\SysWOW64\cfgmgr32.dll

17:25:21.0425 6056 C:\Windows\SysWOW64\cfgmgr32.dll - ok

17:25:21.0441 6056 [ 2EEFF4502F5E13B1BED4A04CCAD64C08 ] C:\Windows\SysWOW64\devobj.dll

17:25:21.0441 6056 C:\Windows\SysWOW64\devobj.dll - ok

17:25:21.0441 6056 [ 062373995EAE5F0EAC9EAA9192136BFB ] C:\Windows\SysWOW64\dnssd.dll

17:25:21.0441 6056 C:\Windows\SysWOW64\dnssd.dll - ok

17:25:21.0441 6056 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] C:\Program Files\Bonjour\mDNSResponder.exe

17:25:21.0441 6056 C:\Program Files\Bonjour\mDNSResponder.exe - ok

17:25:21.0457 6056 [ 8999B8631C7FD9F7F9EC3CAFD953BA24 ] C:\Windows\SysWOW64\mswsock.dll

17:25:21.0457 6056 C:\Windows\SysWOW64\mswsock.dll - ok

17:25:21.0457 6056 [ 24665B221424FFD7B71F0D2C398F2F4F ] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\MobileDevice.dll

17:25:21.0457 6056 C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\MobileDevice.dll - ok

17:25:21.0472 6056 [ EE5C8E27C37B79CB54A2FCEEED2DC262 ] C:\Windows\SysWOW64\WSHTCPIP.DLL

17:25:21.0472 6056 C:\Windows\SysWOW64\WSHTCPIP.DLL - ok

17:25:21.0472 6056 [ 2473CA6595A2659D7039A4A89FECA269 ] C:\Windows\SysWOW64\wininet.dll

17:25:21.0472 6056 C:\Windows\SysWOW64\wininet.dll - ok

17:25:21.0472 6056 [ D8129C49798CBBFB2E4351D4B7B8EF9C ] C:\Windows\System32\cryptsvc.dll

17:25:21.0472 6056 C:\Windows\System32\cryptsvc.dll - ok

17:25:21.0488 6056 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] C:\Windows\System32\dps.dll

17:25:21.0488 6056 C:\Windows\System32\dps.dll - ok

17:25:21.0488 6056 [ 2C4C22EA1735F21F355EB1A39832F7DF ] C:\Windows\System32\cryptnet.dll

17:25:21.0488 6056 C:\Windows\System32\cryptnet.dll - ok

17:25:21.0488 6056 [ 802496CB59A30349F9A6DD22D6947644 ] C:\Windows\System32\FDResPub.dll

17:25:21.0503 6056 C:\Windows\System32\FDResPub.dll - ok

17:25:21.0503 6056 [ BAAFAF9CEAEC0B73C2A3550A01F6CECB ] C:\Windows\System32\taskschd.dll

17:25:21.0503 6056 C:\Windows\System32\taskschd.dll - ok

17:25:21.0503 6056 [ F1B205F932F62F94506A5F332C895DAF ] C:\Windows\System32\WSDApi.dll

17:25:21.0503 6056 C:\Windows\System32\WSDApi.dll - ok

17:25:21.0519 6056 [ 6A181452D4E240B8ECC7614B9A19BDE9 ] C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

17:25:21.0519 6056 C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe - ok

17:25:21.0519 6056 [ 0E2F58F6E698EDCB9E58FAD0CBCD0567 ] C:\Windows\System32\vssapi.dll

17:25:21.0519 6056 C:\Windows\System32\vssapi.dll - ok

17:25:21.0519 6056 [ C55516D98DD5D8F0153C2A9B4227DA86 ] C:\Windows\System32\webservices.dll

17:25:21.0519 6056 C:\Windows\System32\webservices.dll - ok

17:25:21.0535 6056 [ 58F4493BF748A3A89689997B7BD00E95 ] C:\Windows\System32\winhttp.dll

17:25:21.0535 6056 C:\Windows\System32\winhttp.dll - ok

17:25:21.0535 6056 [ 603EBD34E216C5654A2D774EAC98D278 ] C:\Windows\System32\webio.dll

17:25:21.0535 6056 C:\Windows\System32\webio.dll - ok

17:25:21.0550 6056 [ 4BD79D03984226DB22D19BBE79369E0E ] C:\Windows\winsxs\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_044aad0bab1eb146\mfc90u.dll

17:25:21.0550 6056 C:\Windows\winsxs\amd64_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_044aad0bab1eb146\mfc90u.dll - ok

17:25:21.0550 6056 [ B5055B51BAA0FD0A736A88653DA3C1C0 ] C:\Windows\System32\fundisc.dll

17:25:21.0550 6056 C:\Windows\System32\fundisc.dll - ok

17:25:21.0550 6056 [ 6A13B4F3B3F575F1E24B877B9359AABA ] C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll

17:25:21.0550 6056 C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll - ok

17:25:21.0566 6056 [ 2E33DFD10F28F86C3FC40EE123CC3904 ] C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll

17:25:21.0566 6056 C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll - ok

17:25:21.0566 6056 [ 6951562DC4625EEFC6EACD52AD165866 ] C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

17:25:21.0566 6056 C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll - ok

17:25:21.0566 6056 [ 589CBC4989F750E1DA35625AB481CF43 ] C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll

17:25:21.0566 6056 C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll - ok

17:25:21.0581 6056 [ 3BE0D923AA45A4DBE091C2D84F0B4FE7 ] C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll

17:25:21.0581 6056 C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll - ok

17:25:21.0581 6056 [ F383B1AD5D7FDC1ACB0D900B50572F8D ] C:\Windows\SysWOW64\iertutil.dll

17:25:21.0581 6056 C:\Windows\SysWOW64\iertutil.dll - ok

17:25:21.0597 6056 [ BCEA9AB347E53BC03B2E36BE0B8BA0EF ] C:\Windows\System32\httpapi.dll

17:25:21.0597 6056 C:\Windows\System32\httpapi.dll - ok

17:25:21.0597 6056 [ 287923557447D7E4BDD7E65B1F0F5428 ] C:\Windows\System32\vsstrace.dll

17:25:21.0597 6056 C:\Windows\System32\vsstrace.dll - ok

17:25:21.0597 6056 [ 8195B745A9C3235E4715F0A1B59206CF ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

17:25:21.0597 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll - ok

17:25:21.0613 6056 [ A7DDDDE163F16AB49DF3DE9EEC715495 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CFNetwork.dll

17:25:21.0613 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CFNetwork.dll - ok

17:25:21.0613 6056 [ D233C7FEAE3FAA25F93A9E6B46815ADC ] C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\msvcr90.dll

17:25:21.0613 6056 C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\msvcr90.dll - ok

17:25:21.0628 6056 [ 240D42CBD1691C6B7D54AF4E3365BAAC ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\SQLite3.dll

17:25:21.0628 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\SQLite3.dll - ok

17:25:21.0628 6056 [ A90DC9ABD65DB1A8902F361103029952 ] C:\Windows\SysWOW64\IPHLPAPI.DLL

17:25:21.0628 6056 C:\Windows\SysWOW64\IPHLPAPI.DLL - ok

17:25:21.0628 6056 [ CFF35B879D1618D42C86644C717BA947 ] C:\Windows\SysWOW64\winnsi.dll

17:25:21.0628 6056 C:\Windows\SysWOW64\winnsi.dll - ok

17:25:21.0644 6056 [ 14DFDEAF4E589ED3F1FF187A86B9408C ] C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll

17:25:21.0644 6056 C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll - ok

17:25:21.0644 6056 [ 282F84E0096499C42102D7234A4D14EF ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

17:25:21.0644 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll - ok

17:25:21.0659 6056 [ E424B3EF666B184CEE0B6871AAA8C9F6 ] C:\Windows\System32\msimg32.dll

17:25:21.0659 6056 C:\Windows\System32\msimg32.dll - ok

17:25:21.0659 6056 [ 241AF87821FDA0F5792037B779F49BE0 ] C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\msvcp90.dll

17:25:21.0659 6056 C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\msvcp90.dll - ok

17:25:21.0659 6056 [ D918AF3EA07D248F911F7C6B801AA1E3 ] C:\Windows\winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_01c9581e60cbee58\MFC90ENU.DLL

17:25:21.0659 6056 C:\Windows\winsxs\amd64_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_01c9581e60cbee58\MFC90ENU.DLL - ok

17:25:21.0675 6056 [ 2BEC76BDCD1BC080210325E7B5094834 ] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

17:25:21.0675 6056 C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe - ok

17:25:21.0675 6056 [ 67EC459E42D3081DD8FD34356F7CAFC1 ] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\msvcr100.dll

17:25:21.0675 6056 C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\msvcr100.dll - ok

17:25:21.0691 6056 [ FCD84C381E0140AF901E58D48882D26B ] C:\Windows\System32\IKEEXT.DLL

17:25:21.0691 6056 C:\Windows\System32\IKEEXT.DLL - ok

17:25:21.0691 6056 [ 77B5035BC6EDF4D1B6265391AECEE4C0 ] C:\Windows\System32\vpnikeapi.dll

17:25:21.0691 6056 C:\Windows\System32\vpnikeapi.dll - ok

17:25:21.0691 6056 [ 65085456FD9A74D7F1A999520C299ECB ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

17:25:21.0691 6056 C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe - ok

17:25:21.0706 6056 [ EF39CCCC9AD927A25334AE0B41A8A343 ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll

17:25:21.0706 6056 C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll - ok

17:25:21.0706 6056 [ 9275F02BEA644F43A459E316A932658F ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamnet.dll

17:25:21.0706 6056 C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamnet.dll - ok

17:25:21.0722 6056 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

17:25:21.0722 6056 C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe - ok

17:25:21.0722 6056 [ 7321F18D1F820612ED0E9F2D4B578A7E ] C:\Windows\SysWOW64\cryptsp.dll

17:25:21.0722 6056 C:\Windows\SysWOW64\cryptsp.dll - ok

17:25:21.0737 6056 [ 80D8679BF84A9383BFF33E07D5D9FC35 ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamcore.dll

17:25:21.0737 6056 C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamcore.dll - ok

17:25:21.0737 6056 [ ED8EC63F7522DF4852147C84EC62C36A ] C:\Windows\SysWOW64\rsaenh.dll

17:25:21.0737 6056 C:\Windows\SysWOW64\rsaenh.dll - ok

17:25:21.0737 6056 [ B9A8CBCFCD3EC9D2EA4740AF347BF108 ] C:\Windows\SysWOW64\mpr.dll

17:25:21.0737 6056 C:\Windows\SysWOW64\mpr.dll - ok

17:25:21.0753 6056 [ A543AC1F7138376D778D630A35FCBC4C ] C:\Windows\SysWOW64\psapi.dll

17:25:21.0753 6056 C:\Windows\SysWOW64\psapi.dll - ok

17:25:21.0753 6056 [ 241BD3019FB31E812A51B31B06906335 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccsvchst.exe

17:25:21.0753 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccsvchst.exe - ok

17:25:21.0753 6056 [ E3C817F7FE44CC870ECDBCBC3EA36132 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\msvcp100.dll

17:25:21.0753 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\msvcp100.dll - ok

17:25:21.0769 6056 [ BF38660A9125935658CFA3E53FDC7D65 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\msvcr100.dll

17:25:21.0769 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\msvcr100.dll - ok

17:25:21.0769 6056 [ 0739819B2653DBD8D71EC5784BE6D9FC ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccl120u.dll

17:25:21.0769 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccl120u.dll - ok

17:25:21.0784 6056 [ 53223B673A3FA2F9A4D1C31C8D3F6CD8 ] C:\Windows\SysWOW64\dbghelp.dll

17:25:21.0784 6056 C:\Windows\SysWOW64\dbghelp.dll - ok

17:25:21.0784 6056 [ 35AC6003760ED3C65942F6D89C28CFA7 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccvrtrst.dll

17:25:21.0784 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccvrtrst.dll - ok

17:25:21.0800 6056 [ 3CEEE0BE85D24D911B9C02714817774C ] C:\Windows\System32\drivers\npf.sys

17:25:21.0800 6056 C:\Windows\System32\drivers\npf.sys - ok

17:25:21.0800 6056 [ 847D3AE376C0817161A14A82C8922A9E ] C:\Windows\System32\netman.dll

17:25:21.0800 6056 C:\Windows\System32\netman.dll - ok

17:25:21.0800 6056 [ 8AD77806D336673F270DB31645267293 ] C:\Windows\System32\nlasvc.dll

17:25:21.0800 6056 C:\Windows\System32\nlasvc.dll - ok

17:25:21.0815 6056 [ 3ECC194DFEA426A3F3B4ECFDB8454F14 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\efacli.dll

17:25:21.0815 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\efacli.dll - ok

17:25:21.0815 6056 [ D4FAC263861BAE06971C7F7D0A8EBF15 ] C:\Windows\System32\ncsi.dll

17:25:21.0815 6056 C:\Windows\System32\ncsi.dll - ok

17:25:21.0815 6056 [ B9CF40ABF316A863DB9760727D882C6A ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccsvc.dll

17:25:21.0815 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccsvc.dll - ok

17:25:21.0831 6056 [ BDBC187D16A423F5E10CEA4F85E335FB ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\srtsp32.dll

17:25:21.0831 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\srtsp32.dll - ok

17:25:21.0831 6056 [ 2BBF3FDB70B8965DFA0258CBAB41ECCE ] C:\Windows\System32\ssdpapi.dll

17:25:21.0831 6056 C:\Windows\System32\ssdpapi.dll - ok

17:25:21.0847 6056 [ 1727B2A2F379A32B864C096FA794AADC ] C:\Windows\System32\aepic.dll

17:25:21.0847 6056 C:\Windows\System32\aepic.dll - ok

17:25:21.0847 6056 [ 68769C3356B3BE5D1C732C97B9A80D6E ] C:\Windows\System32\drivers\PEAuth.sys

17:25:21.0847 6056 C:\Windows\System32\drivers\PEAuth.sys - ok

17:25:21.0847 6056 [ C6DCD1D11ED6827F05C00773C3E7053C ] C:\Windows\System32\sfc.dll

17:25:21.0847 6056 C:\Windows\System32\sfc.dll - ok

17:25:21.0862 6056 [ 895C9AB0A855547445C4181195230757 ] C:\Windows\System32\sfc_os.dll

17:25:21.0862 6056 C:\Windows\System32\sfc_os.dll - ok

17:25:21.0862 6056 [ 57D1527A7EB0D6F6BBA04796AA4839EE ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccipc.dll

17:25:21.0862 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccipc.dll - ok

17:25:21.0878 6056 [ 53E1D3752A82C0256E58B53140AC1F58 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\dimaster.dll

17:25:21.0878 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\dimaster.dll - ok

17:25:21.0878 6056 [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] C:\Program Files (x86)\Skype\Updater\Updater.exe

17:25:21.0878 6056 C:\Program Files (x86)\Skype\Updater\Updater.exe - ok

17:25:21.0878 6056 [ 3EA8A16169C26AFBEB544E0E48421186 ] C:\Windows\System32\drivers\secdrv.sys

17:25:21.0878 6056 C:\Windows\System32\drivers\secdrv.sys - ok

17:25:21.0893 6056 [ 5997D769CDB108390DCFAEBF442BF816 ] C:\Windows\SysWOW64\RpcRtRemote.dll

17:25:21.0893 6056 C:\Windows\SysWOW64\RpcRtRemote.dll - ok

17:25:21.0893 6056 [ BC617A4E1B4FA8DF523A061739A0BD87 ] C:\Windows\System32\seclogon.dll

17:25:21.0893 6056 C:\Windows\System32\seclogon.dll - ok

17:25:21.0909 6056 [ FB19FC5951A88F3C523E35C2C98D23C0 ] C:\Windows\SysWOW64\webio.dll

17:25:21.0909 6056 C:\Windows\SysWOW64\webio.dll - ok

17:25:21.0909 6056 [ CA9F7888B524D8100B977C81F44C3234 ] C:\Windows\SysWOW64\winhttp.dll

17:25:21.0909 6056 C:\Windows\SysWOW64\winhttp.dll - ok

17:25:21.0909 6056 [ A113AFEED3159A1ED52D78CB0226006D ] C:\Windows\SysWOW64\secur32.dll

17:25:21.0909 6056 C:\Windows\SysWOW64\secur32.dll - ok

17:25:21.0925 6056 [ 3B2DF621CADA482C06AF0006EC18BF2E ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccset.dll

17:25:21.0925 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccset.dll - ok

17:25:21.0925 6056 [ 27E461F0BE5BFF5FC737328F749538C3 ] C:\Windows\System32\drivers\srvnet.sys

17:25:21.0925 6056 C:\Windows\System32\drivers\srvnet.sys - ok

17:25:21.0925 6056 [ FF5688D309347F2720911D8796912834 ] C:\Windows\SysWOW64\clbcatq.dll

17:25:21.0925 6056 C:\Windows\SysWOW64\clbcatq.dll - ok

17:25:21.0940 6056 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] C:\Windows\System32\drivers\tcpipreg.sys

17:25:21.0940 6056 C:\Windows\System32\drivers\tcpipreg.sys - ok

17:25:21.0940 6056 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] C:\Windows\System32\sysmain.dll

17:25:21.0940 6056 C:\Windows\System32\sysmain.dll - ok

17:25:21.0956 6056 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] C:\Windows\System32\wiaservc.dll

17:25:21.0956 6056 C:\Windows\System32\wiaservc.dll - ok

17:25:21.0956 6056 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] C:\Windows\System32\tapisrv.dll

17:25:21.0956 6056 C:\Windows\System32\tapisrv.dll - ok

17:25:21.0956 6056 [ 0364256B4A2A93A8C8CDA6B3B5A0EFF5 ] C:\Windows\System32\wiatrace.dll

17:25:21.0956 6056 C:\Windows\System32\wiatrace.dll - ok

17:25:21.0971 6056 [ 704314FD398C81D5F342CAA5DF7B7F21 ] C:\Windows\SysWOW64\wbemcomn.dll

17:25:21.0971 6056 C:\Windows\SysWOW64\wbemcomn.dll - ok

17:25:21.0971 6056 [ C5B0324DB461559ADD070E632A6919FA ] C:\Windows\SysWOW64\wbem\wbemprox.dll

17:25:21.0971 6056 C:\Windows\SysWOW64\wbem\wbemprox.dll - ok

17:25:21.0987 6056 [ DB120EB91429B4056344B35C434CBE41 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\fwsetup.dll

17:25:21.0987 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\fwsetup.dll - ok

17:25:21.0987 6056 [ 539C49CEBB3C50957AC8A09D95ECD880 ] C:\Windows\SysWOW64\shfolder.dll

17:25:21.0987 6056 C:\Windows\SysWOW64\shfolder.dll - ok

17:25:21.0987 6056 [ 7E7AFD841694F6AC397E99D75CEAD49D ] C:\Windows\System32\trkwks.dll

17:25:21.0987 6056 C:\Windows\System32\trkwks.dll - ok

17:25:22.0003 6056 [ 49F2693BC3D821FA13AD6E7D5C5FEAFF ] C:\Windows\System32\valWBFPolicyService.exe

17:25:22.0003 6056 C:\Windows\System32\valWBFPolicyService.exe - ok

17:25:22.0003 6056 [ A2A729F6925252E3DB9ADF3E4FA39A48 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\symneti.dll

17:25:22.0003 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\symneti.dll - ok

17:25:22.0003 6056 [ 3A9AD1D1FCF673B1B7F27140E45AEFFD ] C:\Windows\System32\drivers\vmnetuserif.sys

17:25:22.0003 6056 C:\Windows\System32\drivers\vmnetuserif.sys - ok

17:25:22.0018 6056 [ 3F50200237961034FACE602373838980 ] C:\Windows\SysWOW64\FirewallAPI.dll

17:25:22.0018 6056 C:\Windows\SysWOW64\FirewallAPI.dll - ok

17:25:22.0018 6056 [ F38F5E1D9DEC6CD1955A91AB141A88FB ] C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe

17:25:22.0018 6056 C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe - ok

17:25:22.0034 6056 [ 210FCACAF902B2CD47CF9FD17D846146 ] C:\Windows\System32\aeevts.dll

17:25:22.0034 6056 C:\Windows\System32\aeevts.dll - ok

17:25:22.0034 6056 [ 3FE2942910EACDC7271E40C8C037D63F ] C:\Windows\SysWOW64\vmnat.exe

17:25:22.0034 6056 C:\Windows\SysWOW64\vmnat.exe - ok

17:25:22.0034 6056 [ B40420876B9288E0A1C8CCA8A84E5DC9 ] C:\Windows\SysWOW64\dnsapi.dll

17:25:22.0034 6056 C:\Windows\SysWOW64\dnsapi.dll - ok

17:25:22.0049 6056 [ 69F57E89E6EBC5012D210527AF005A70 ] C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys

17:25:22.0049 6056 C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys - ok

17:25:22.0049 6056 [ 1C9D80CC3849B3788048078C26486E1A ] C:\Windows\System32\w32time.dll

17:25:22.0049 6056 C:\Windows\System32\w32time.dll - ok

17:25:22.0065 6056 [ 19B07E7E8915D701225DA41CB3877306 ] C:\Windows\System32\wbem\WMIsvc.dll

17:25:22.0065 6056 C:\Windows\System32\wbem\WMIsvc.dll - ok

17:25:22.0065 6056 [ 2BACD71123F42CEA603F4E205E1AE337 ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

17:25:22.0065 6056 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE - ok

17:25:22.0065 6056 [ 9A85ABCE0FDD1AF8E79E731EB0B679F3 ] C:\Windows\SysWOW64\dhcpcsvc.dll

17:25:22.0065 6056 C:\Windows\SysWOW64\dhcpcsvc.dll - ok

17:25:22.0081 6056 [ 81F6C1AE23B1C493D9E996C3103915D7 ] C:\Windows\SysWOW64\dhcpcsvc6.dll

17:25:22.0081 6056 C:\Windows\SysWOW64\dhcpcsvc6.dll - ok

17:25:22.0081 6056 [ 7DB5AA22A8A8E5C2D335F44853C1F6DE ] C:\Windows\System32\wbemcomn.dll

17:25:22.0081 6056 C:\Windows\System32\wbemcomn.dll - ok

17:25:22.0081 6056 [ 0255C22D99602534F15CBB8D9B6F152F ] C:\Windows\System32\wbem\WinMgmtR.dll

17:25:22.0081 6056 C:\Windows\System32\wbem\WinMgmtR.dll - ok

17:25:22.0096 6056 [ 0C52762C606BCF6A377D5E4688191A6B ] C:\Windows\System32\wbem\WmiDcPrv.dll

17:25:22.0096 6056 C:\Windows\System32\wbem\WmiDcPrv.dll - ok

17:25:22.0096 6056 [ A3F5E8EC1316C3E2562B82694A251C9E ] C:\Windows\System32\wbem\fastprox.dll

17:25:22.0096 6056 C:\Windows\System32\wbem\fastprox.dll - ok

17:25:22.0112 6056 [ 5EB55F661DEBF156E126160BCD4D89F8 ] C:\Windows\System32\wbem\wbemcore.dll

17:25:22.0112 6056 C:\Windows\System32\wbem\wbemcore.dll - ok

17:25:22.0112 6056 [ 93812FDC01AA864195816CD814445F95 ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\SQMAPI.DLL

17:25:22.0112 6056 C:\Program Files\Common Files\Microsoft Shared\Windows Live\SQMAPI.DLL - ok

17:25:22.0112 6056 [ B837D1528CE2E3CB79F09496BC08DDC6 ] C:\Windows\System32\SensApi.dll

17:25:22.0112 6056 C:\Windows\System32\SensApi.dll - ok

17:25:22.0127 6056 [ 9689A9C7F7C2A1A423CDA2C3B43FFF65 ] C:\Windows\System32\wer.dll

17:25:22.0127 6056 C:\Windows\System32\wer.dll - ok

17:25:22.0127 6056 [ EE26D130808D16C0E417BBBED0451B34 ] C:\Windows\System32\ntdsapi.dll

17:25:22.0127 6056 C:\Windows\System32\ntdsapi.dll - ok

17:25:22.0143 6056 [ 666A60F6F5E719856FF6254E0966EFF7 ] C:\Windows\System32\wbem\wbemprox.dll

17:25:22.0143 6056 C:\Windows\System32\wbem\wbemprox.dll - ok

17:25:22.0143 6056 [ 087D8668C71634A3A3761135ABF16EEE ] C:\Windows\System32\wbem\esscli.dll

17:25:22.0143 6056 C:\Windows\System32\wbem\esscli.dll - ok

17:25:22.0143 6056 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] C:\Windows\System32\drivers\srv2.sys

17:25:22.0143 6056 C:\Windows\System32\drivers\srv2.sys - ok

17:25:22.0159 6056 [ 08C2957BB30058E663720C5606885653 ] C:\Windows\System32\iphlpsvc.dll

17:25:22.0159 6056 C:\Windows\System32\iphlpsvc.dll - ok

17:25:22.0159 6056 [ DC1BBA01FFB5745B8862931E7DE7304A ] C:\ProgramData\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

17:25:22.0159 6056 C:\ProgramData\Microsoft\IdentityCRL\production\ppcrlconfig600.dll - ok

17:25:22.0159 6056 [ 371948BC5911ABA06168FAC91ED25F06 ] C:\Windows\System32\msxml3.dll

17:25:22.0159 6056 C:\Windows\System32\msxml3.dll - ok

17:25:22.0174 6056 [ 9AF896B739E3F34B9CD56EAFA84ABE60 ] C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe

17:25:22.0174 6056 C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe - ok

17:25:22.0174 6056 [ 27B9E163740A226B65E4B9E186117911 ] C:\Windows\System32\sqmapi.dll

17:25:22.0174 6056 C:\Windows\System32\sqmapi.dll - ok

17:25:22.0190 6056 [ 2FCA0D2C59A855C54BAFA22AA329DF0F ] C:\Windows\SysWOW64\netapi32.dll

17:25:22.0190 6056 C:\Windows\SysWOW64\netapi32.dll - ok

17:25:22.0190 6056 [ 20B3934DB73EABA2B49B7177873CB81F ] C:\Windows\SysWOW64\netutils.dll

17:25:22.0190 6056 C:\Windows\SysWOW64\netutils.dll - ok

17:25:22.0190 6056 [ 5CCDCD40E732D54E0F7451AC66AC1C87 ] C:\Windows\SysWOW64\srvcli.dll

17:25:22.0190 6056 C:\Windows\SysWOW64\srvcli.dll - ok

17:25:22.0205 6056 [ E5A4A1326A02F8E7B59E6C3270CE7202 ] C:\Windows\SysWOW64\wkscli.dll

17:25:22.0205 6056 C:\Windows\SysWOW64\wkscli.dll - ok

17:25:22.0205 6056 [ 2D5E0F541A6B6C6AF08EB3375317144D ] C:\Program Files (x86)\VMware\VMware Player\vmwarebase.dll

17:25:22.0205 6056 C:\Program Files (x86)\VMware\VMware Player\vmwarebase.dll - ok

17:25:22.0221 6056 [ 7B38D7916A7CD058C16A0A6CA5077901 ] C:\Windows\System32\wdscore.dll

17:25:22.0221 6056 C:\Windows\System32\wdscore.dll - ok

17:25:22.0221 6056 [ 68ECCA523ED760AAFC03C5D587569859 ] C:\Windows\SysWOW64\samcli.dll

17:25:22.0221 6056 C:\Windows\SysWOW64\samcli.dll - ok

17:25:22.0221 6056 [ EE867A0870FC9E4972BA9EAAD35651E2 ] C:\Windows\System32\rasmans.dll

17:25:22.0221 6056 C:\Windows\System32\rasmans.dll - ok

17:25:22.0237 6056 [ 718B6F51AB7F6FE2988A36868F9AD3AB ] C:\Windows\System32\wbem\wbemsvc.dll

17:25:22.0237 6056 C:\Windows\System32\wbem\wbemsvc.dll - ok

17:25:22.0237 6056 [ 776AE0564F8B1C282E331FD95A1BDC5F ] C:\Windows\SysWOW64\wbem\wbemsvc.dll

17:25:22.0237 6056 C:\Windows\SysWOW64\wbem\wbemsvc.dll - ok

17:25:22.0237 6056 [ 2A46FFE841EC43001D5A293A54DB34DE ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

17:25:22.0252 6056 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE - ok

17:25:22.0252 6056 [ E3E811471DE781900FF21C1FD84E941E ] C:\Windows\SysWOW64\ntdsapi.dll

17:25:22.0252 6056 C:\Windows\SysWOW64\ntdsapi.dll - ok

17:25:22.0252 6056 [ CFC7D8289D2B5F3CF8D16E2DB7F93D4A ] C:\Windows\SysWOW64\wbem\fastprox.dll

17:25:22.0252 6056 C:\Windows\SysWOW64\wbem\fastprox.dll - ok

17:25:22.0268 6056 [ 44C96B48112EB24AE7764EBF1C527000 ] C:\Windows\System32\rastapi.dll

17:25:22.0268 6056 C:\Windows\System32\rastapi.dll - ok

17:25:22.0268 6056 [ FAFAE01E889DC9C05A6CA2138CFC220B ] C:\Windows\System32\tapi32.dll

17:25:22.0268 6056 C:\Windows\System32\tapi32.dll - ok

17:25:22.0268 6056 [ CC19133AB94723A75727D632C24D1B13 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccgevt.dll

17:25:22.0268 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccgevt.dll - ok

17:25:22.0283 6056 [ 0143DB80DACFB7C2B5B7009ED9063353 ] C:\Windows\System32\wbem\wmiutils.dll

17:25:22.0283 6056 C:\Windows\System32\wbem\wmiutils.dll - ok

17:25:22.0283 6056 [ 3B367397320C26DBA890B260F80D1B1B ] C:\Windows\System32\hnetcfg.dll

17:25:22.0283 6056 C:\Windows\System32\hnetcfg.dll - ok

17:25:22.0283 6056 [ D2A0FFA75AB181B19B5EB93BB29C7686 ] C:\Windows\System32\unimdm.tsp

17:25:22.0283 6056 C:\Windows\System32\unimdm.tsp - ok

17:25:22.0299 6056 [ 0AB34456654C283DAA13B8D2BA21439B ] C:\Windows\System32\wbem\repdrvfs.dll

17:25:22.0299 6056 C:\Windows\System32\wbem\repdrvfs.dll - ok

17:25:22.0299 6056 [ 94B7DF336815B47236724019FAB24B7C ] C:\Windows\System32\uniplat.dll

17:25:22.0299 6056 C:\Windows\System32\uniplat.dll - ok

17:25:22.0315 6056 [ 41326DD08ACC0CDC5F8177AF96C066E8 ] C:\Windows\System32\kmddsp.tsp

17:25:22.0315 6056 C:\Windows\System32\kmddsp.tsp - ok

17:25:22.0315 6056 [ DDD0357A92FA843EFF8915ED17253D6C ] C:\Windows\System32\wbem\WmiPrvSD.dll

17:25:22.0315 6056 C:\Windows\System32\wbem\WmiPrvSD.dll - ok

17:25:22.0315 6056 [ 1D6BC2769DA66C1145F4DA5A65F52E61 ] C:\Windows\System32\ndptsp.tsp

17:25:22.0315 6056 C:\Windows\System32\ndptsp.tsp - ok

17:25:22.0330 6056 [ 7C1BAE7D23D4874FEE256A2B9C00E019 ] C:\Windows\System32\hidphone.tsp

17:25:22.0330 6056 C:\Windows\System32\hidphone.tsp - ok

17:25:22.0330 6056 [ D41FEBD098234F02485A4EA98D4730A4 ] C:\Windows\System32\ncobjapi.dll

17:25:22.0330 6056 C:\Windows\System32\ncobjapi.dll - ok

17:25:22.0330 6056 [ 6F40D6FB05E0C1E5402812B426971AF0 ] C:\Windows\System32\wbem\wbemess.dll

17:25:22.0330 6056 C:\Windows\System32\wbem\wbemess.dll - ok

17:25:22.0346 6056 [ A717A35120DBAB5AB707AB40662AF9DD ] C:\Windows\System32\rasppp.dll

17:25:22.0346 6056 C:\Windows\System32\rasppp.dll - ok

17:25:22.0346 6056 [ 28CA821606669BB9215CE010767720FA ] C:\Windows\SysWOW64\cryptui.dll

17:25:22.0346 6056 C:\Windows\SysWOW64\cryptui.dll - ok

17:25:22.0346 6056 [ 0FE5CD5F9C9248F42D1EF56E495B182E ] C:\Windows\System32\vpnike.dll

17:25:22.0346 6056 C:\Windows\System32\vpnike.dll - ok

17:25:22.0361 6056 [ 849D90A4889A7FAD6351C01D1EE13214 ] C:\Program Files (x86)\VMware\VMware Player\libxml2.dll

17:25:22.0361 6056 C:\Program Files (x86)\VMware\VMware Player\libxml2.dll - ok

17:25:22.0361 6056 [ 6A84E68B538B8B04608BF2F0D426CE6F ] C:\Windows\System32\raschap.dll

17:25:22.0361 6056 C:\Windows\System32\raschap.dll - ok

17:25:22.0377 6056 [ 619A67C9F617B7E69315BB28ECD5E1DF ] C:\Windows\System32\wbem\WmiPrvSE.exe

17:25:22.0377 6056 C:\Windows\System32\wbem\WmiPrvSE.exe - ok

17:25:22.0377 6056 [ 3F11B4B7A8CBAA1C518E336696C01D7A ] C:\Program Files (x86)\VMware\VMware Player\iconv.dll

17:25:22.0377 6056 C:\Program Files (x86)\VMware\VMware Player\iconv.dll - ok

17:25:22.0377 6056 [ 6607C2182C6A53ED983813AFE2F85768 ] C:\Windows\System32\wbem\cimwin32.dll

17:25:22.0377 6056 C:\Windows\System32\wbem\cimwin32.dll - ok

17:25:22.0393 6056 [ EECFC25E87F016966A17588762B2BA7F ] C:\Program Files (x86)\VMware\VMware Player\zlib1.dll

17:25:22.0393 6056 C:\Program Files (x86)\VMware\VMware Player\zlib1.dll - ok

17:25:22.0393 6056 [ 1484B9EBF567346582DE571B0E164AE0 ] C:\Windows\System32\framedynos.dll

17:25:22.0393 6056 C:\Windows\System32\framedynos.dll - ok

17:25:22.0393 6056 [ C30A3E5DEEEBA22E782AC54C5AF5F352 ] C:\Windows\SysWOW64\samlib.dll

17:25:22.0393 6056 C:\Windows\SysWOW64\samlib.dll - ok

17:25:22.0408 6056 [ 1E9F6817BDD878E4C4E701C64F6352E7 ] C:\Windows\SysWOW64\vmnetdhcp.exe

17:25:22.0408 6056 C:\Windows\SysWOW64\vmnetdhcp.exe - ok

17:25:22.0408 6056 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] C:\Windows\System32\drivers\srv.sys

17:25:22.0408 6056 C:\Windows\System32\drivers\srv.sys - ok

17:25:22.0424 6056 [ B95F6501A2F8B2E78C697FEC401970CE ] C:\Windows\System32\ipnathlp.dll

17:25:22.0424 6056 C:\Windows\System32\ipnathlp.dll - ok

17:25:22.0424 6056 [ 2DF29664ED261F0FC448E58F338F0671 ] C:\Windows\System32\mprapi.dll

17:25:22.0424 6056 C:\Windows\System32\mprapi.dll - ok

17:25:22.0424 6056 [ A42F2C1EB3B66C54FB3C7B79D30C1A6D ] C:\Windows\System32\netshell.dll

17:25:22.0424 6056 C:\Windows\System32\netshell.dll - ok

17:25:22.0439 6056 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] C:\Windows\System32\browser.dll

17:25:22.0439 6056 C:\Windows\System32\browser.dll - ok

17:25:22.0439 6056 [ CFEFA40DDE34659BE5211966EAD86437 ] C:\Windows\System32\netmsg.dll

17:25:22.0439 6056 C:\Windows\System32\netmsg.dll - ok

17:25:22.0439 6056 [ D9F42719019740BAA6D1C6D536CBDAA6 ] C:\Windows\System32\srvsvc.dll

17:25:22.0439 6056 C:\Windows\System32\srvsvc.dll - ok

17:25:22.0455 6056 [ 81749E073AC5857B044A686B406E5244 ] C:\Windows\System32\clusapi.dll

17:25:22.0455 6056 C:\Windows\System32\clusapi.dll - ok

17:25:22.0455 6056 [ FF80CAD87555E8E4D2CFD7B9058343F8 ] C:\Windows\System32\sscore.dll

17:25:22.0455 6056 C:\Windows\System32\sscore.dll - ok

17:25:22.0455 6056 [ 344FCC9850C3A8A3B4D3C65151AF8E4C ] C:\Windows\System32\resutils.dll

17:25:22.0455 6056 C:\Windows\System32\resutils.dll - ok

17:25:22.0471 6056 [ 0015ACFBBDD164A8A730009908868CA7 ] C:\Windows\System32\winspool.drv

17:25:22.0471 6056 C:\Windows\System32\winspool.drv - ok

17:25:22.0471 6056 [ F9D908DE6B166DAC9B89BF62FA291CE8 ] C:\Program Files\Bonjour\mdnsNSP.dll

17:25:22.0471 6056 C:\Program Files\Bonjour\mdnsNSP.dll - ok

17:25:22.0486 6056 [ AFB5B500AD69E24ED1BC15D1161641EF ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL

17:25:22.0486 6056 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL - ok

17:25:22.0486 6056 [ 88351B29B622B30962D2FEB6CA8D860B ] C:\Windows\System32\rasadhlp.dll

17:25:22.0486 6056 C:\Windows\System32\rasadhlp.dll - ok

17:25:22.0486 6056 [ 45CFBFA8EDC3DF4E2B7FB0D0260FE051 ] C:\Windows\System32\localspl.dll

17:25:22.0486 6056 C:\Windows\System32\localspl.dll - ok

17:25:22.0502 6056 [ 3285481F5C12305CA104A6C493CA5A0B ] C:\Windows\System32\spoolss.dll

17:25:22.0502 6056 C:\Windows\System32\spoolss.dll - ok

17:25:22.0502 6056 [ C5AC93CF3BA30D367FB49148A2B673B9 ] C:\Windows\System32\PrintIsolationProxy.dll

17:25:22.0502 6056 C:\Windows\System32\PrintIsolationProxy.dll - ok

17:25:22.0517 6056 [ ED730D791CB026146F9FB8EFB15201B7 ] C:\Windows\System32\AdobePDF.dll

17:25:22.0517 6056 C:\Windows\System32\AdobePDF.dll - ok

17:25:22.0517 6056 [ 3F0F46AB1F7654430786A8907BC5E8AF ] C:\Windows\System32\hpinksts8811LM.dll

17:25:22.0517 6056 C:\Windows\System32\hpinksts8811LM.dll - ok

17:25:22.0517 6056 [ 19E41CCCEE697CC9465396B370929792 ] C:\Windows\System32\FXSMON.dll

17:25:22.0517 6056 C:\Windows\System32\FXSMON.dll - ok

17:25:22.0533 6056 [ 93518C6EDE0B61BCBD02BDB02BD05FEE ] C:\Windows\System32\snmpapi.dll

17:25:22.0533 6056 C:\Windows\System32\snmpapi.dll - ok

17:25:22.0533 6056 [ 32A3C8600AF124CBAAD845F13CFAE3CB ] C:\Windows\System32\tcpmon.dll

17:25:22.0533 6056 C:\Windows\System32\tcpmon.dll - ok

17:25:22.0533 6056 [ FFF9D00CF16397C64317F213484F94BD ] C:\Windows\System32\wsnmp32.dll

17:25:22.0533 6056 C:\Windows\System32\wsnmp32.dll - ok

17:25:22.0549 6056 [ DF72A9936D0C3F517083119648814B09 ] C:\Windows\System32\usbmon.dll

17:25:22.0549 6056 C:\Windows\System32\usbmon.dll - ok

17:25:22.0549 6056 [ A1D7E3ADCDB07DDB6F423862DCB1A52B ] C:\Windows\System32\WSDMon.dll

17:25:22.0549 6056 C:\Windows\System32\WSDMon.dll - ok

17:25:22.0564 6056 [ 4581716B4BF76ACFD8E167EB0B26D82A ] C:\Windows\System32\fdPnp.dll

17:25:22.0564 6056 C:\Windows\System32\fdPnp.dll - ok

17:25:22.0564 6056 [ 1D626FE2E13C1CE49CA0136CFF214E93 ] C:\Windows\System32\spool\prtprocs\x64\winprint.dll

17:25:22.0564 6056 C:\Windows\System32\spool\prtprocs\x64\winprint.dll - ok

17:25:22.0564 6056 [ C30A50449EA4B611484A5F1F1F016774 ] C:\Windows\System32\spool\prtprocs\x64\HPZPPLHN.DLL

17:25:22.0564 6056 C:\Windows\System32\spool\prtprocs\x64\HPZPPLHN.DLL - ok

17:25:22.0580 6056 [ 67CF11E00D026A5C0C88EA5F84D501E5 ] C:\Windows\System32\win32spl.dll

17:25:22.0580 6056 C:\Windows\System32\win32spl.dll - ok

17:25:22.0580 6056 [ 507D5567A0A4EE86C4B0CE2CE1777025 ] C:\Windows\System32\inetpp.dll

17:25:22.0580 6056 C:\Windows\System32\inetpp.dll - ok

17:25:22.0580 6056 [ 1BF0CB861A48FEB1638228760750F3CB ] C:\Windows\System32\cscapi.dll

17:25:22.0580 6056 C:\Windows\System32\cscapi.dll - ok

17:25:22.0595 6056 [ BF1FC3F79B863C914687A737C2F3D681 ] C:\Windows\System32\wdi.dll

17:25:22.0595 6056 C:\Windows\System32\wdi.dll - ok

17:25:22.0595 6056 [ 93221146D4EBBF314C29B23CD6CC391D ] C:\Windows\System32\wpdbusenum.dll

17:25:22.0595 6056 C:\Windows\System32\wpdbusenum.dll - ok

17:25:22.0611 6056 [ E1B22739C933BE33F53DB58C5393ADD3 ] C:\Windows\System32\Apphlpdm.dll

17:25:22.0611 6056 C:\Windows\System32\Apphlpdm.dll - ok

17:25:22.0611 6056 [ 4449D23E8F197862F1B16F1E6C89C36C ] C:\Windows\System32\diagperf.dll

17:25:22.0611 6056 C:\Windows\System32\diagperf.dll - ok

17:25:22.0611 6056 [ BF4AC709BE5BF64F331F5D67773A0C82 ] C:\Windows\System32\perftrack.dll

17:25:22.0611 6056 C:\Windows\System32\perftrack.dll - ok

17:25:22.0627 6056 [ E64D9EC8018C55873B40FDEE9DBEF5B3 ] C:\Windows\System32\PortableDeviceApi.dll

17:25:22.0627 6056 C:\Windows\System32\PortableDeviceApi.dll - ok

17:25:22.0627 6056 [ 88D9ED9DFFF408EDADF6178E7D9C7E1C ] C:\Program Files (x86)\VMware\VMware Player\vmnetBridge.dll

17:25:22.0627 6056 C:\Program Files (x86)\VMware\VMware Player\vmnetBridge.dll - ok

17:25:22.0627 6056 [ 1CF21800E337F4039AAD4C94B4280EE4 ] C:\Windows\System32\mprmsg.dll

17:25:22.0627 6056 C:\Windows\System32\mprmsg.dll - ok

17:25:22.0642 6056 [ 79AFFC7FEEA9CD2FEFEA5EF3B631A02C ] C:\Windows\System32\ndiscapCfg.dll

17:25:22.0642 6056 C:\Windows\System32\ndiscapCfg.dll - ok

17:25:22.0642 6056 [ 3D6AF45673C4B31CDECD7F80AF09D443 ] C:\Windows\System32\rascfg.dll

17:25:22.0642 6056 C:\Windows\System32\rascfg.dll - ok

17:25:22.0642 6056 [ 55DE45B116711881C852D2841E4C84DD ] C:\Windows\System32\tcpipcfg.dll

17:25:22.0642 6056 C:\Windows\System32\tcpipcfg.dll - ok

17:25:22.0658 6056 [ AFA79C343F9D1555F7E5D5FA70BB2A14 ] C:\Windows\System32\PortableDeviceConnectApi.dll

17:25:22.0658 6056 C:\Windows\System32\PortableDeviceConnectApi.dll - ok

17:25:22.0658 6056 [ F7073C962C4FB7C415565DDE109DE49F ] C:\Windows\System32\npmproxy.dll

17:25:22.0658 6056 C:\Windows\System32\npmproxy.dll - ok

17:25:22.0673 6056 [ 9719E3D834F5C8C43F56A93DFA497023 ] C:\Windows\System32\pnpts.dll

17:25:22.0673 6056 C:\Windows\System32\pnpts.dll - ok

17:25:22.0673 6056 [ E811F8510B133E70CF6E509FB809824F ] C:\Windows\System32\wdiasqmmodule.dll

17:25:22.0673 6056 C:\Windows\System32\wdiasqmmodule.dll - ok

17:25:22.0673 6056 [ 639774C9ACD063F028F6084ABF5593AD ] C:\Windows\System32\taskhost.exe

17:25:22.0673 6056 C:\Windows\System32\taskhost.exe - ok

17:25:22.0689 6056 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] C:\Windows\System32\IPSECSVC.DLL

17:25:22.0689 6056 C:\Windows\System32\IPSECSVC.DLL - ok

17:25:22.0689 6056 [ 9BC93C9ACFA34DB5A41B89357B31E4ED ] C:\Windows\System32\FwRemoteSvr.dll

17:25:22.0689 6056 C:\Windows\System32\FwRemoteSvr.dll - ok

17:25:22.0705 6056 [ 58A0CDABEA255616827B1C22C9994466 ] C:\Windows\System32\NapiNSP.dll

17:25:22.0705 6056 C:\Windows\System32\NapiNSP.dll - ok

17:25:22.0705 6056 [ 613C8CE10A5FDE582BA5FA64C4D56AAA ] C:\Windows\System32\pnrpnsp.dll

17:25:22.0705 6056 C:\Windows\System32\pnrpnsp.dll - ok

17:25:22.0705 6056 [ E629F1A051C82795DDFFD3E8D4855811 ] C:\Windows\System32\dimsjob.dll

17:25:22.0705 6056 C:\Windows\System32\dimsjob.dll - ok

17:25:22.0720 6056 [ 2E2072EB48238FCA8FBB7A9F5FABAC45 ] C:\Windows\System32\winrnr.dll

17:25:22.0720 6056 C:\Windows\System32\winrnr.dll - ok

17:25:22.0720 6056 [ 35CB97CBC3EDC463418ED4997AAB29B6 ] C:\Windows\System32\pautoenr.dll

17:25:22.0720 6056 C:\Windows\System32\pautoenr.dll - ok

17:25:22.0720 6056 [ 94DFBB481BF51158B216E23C5C1C9D6E ] C:\Windows\System32\certcli.dll

17:25:22.0720 6056 C:\Windows\System32\certcli.dll - ok

17:25:22.0736 6056 [ 263B26106606A010CF877472B535E4BB ] C:\Windows\System32\CertEnroll.dll

17:25:22.0736 6056 C:\Windows\System32\CertEnroll.dll - ok

17:25:22.0736 6056 [ 03A03A453F1AAAE0C73AAAF895321C7A ] C:\Windows\SysWOW64\FWPUCLNT.DLL

17:25:22.0736 6056 C:\Windows\SysWOW64\FWPUCLNT.DLL - ok

17:25:22.0751 6056 [ 08DFDBD2FD4EA951DC46B1C7661ED35A ] C:\Windows\SysWOW64\powrprof.dll

17:25:22.0751 6056 C:\Windows\SysWOW64\powrprof.dll - ok

17:25:22.0751 6056 [ 7FFD52D73352806969D424EF327D10A7 ] C:\Windows\SysWOW64\radardt.dll

17:25:22.0751 6056 C:\Windows\SysWOW64\radardt.dll - ok

17:25:22.0751 6056 [ 46863C4CC5B68EB09EA2D5EEF0F1193A ] C:\Windows\System32\radardt.dll

17:25:22.0751 6056 C:\Windows\System32\radardt.dll - ok

17:25:22.0767 6056 [ A63DC5C2EA944E6657203E0C8EDEAF61 ] C:\Windows\SysWOW64\dllhost.exe

17:25:22.0767 6056 C:\Windows\SysWOW64\dllhost.exe - ok

17:25:22.0767 6056 [ A8EDB86FC2A4D6D1285E4C70384AC35A ] C:\Windows\System32\dllhost.exe

17:25:22.0767 6056 C:\Windows\System32\dllhost.exe - ok

17:25:22.0767 6056 [ 6FA41E0C86EF049A12C05CA4BBA8F9AF ] C:\Windows\SysWOW64\perfos.dll

17:25:22.0767 6056 C:\Windows\SysWOW64\perfos.dll - ok

17:25:22.0783 6056 [ F14A9B1778376D0B1788E402AC1F831A ] C:\Windows\SysWOW64\shacct.dll

17:25:22.0783 6056 C:\Windows\SysWOW64\shacct.dll - ok

17:25:22.0783 6056 [ 752F8E96BAB993517838315508FB82CB ] C:\Windows\SysWOW64\perfproc.dll

17:25:22.0783 6056 C:\Windows\SysWOW64\perfproc.dll - ok

17:25:22.0783 6056 [ ED6EE83D61EBC683C2CD8E899EA6FEBE ] C:\Windows\SysWOW64\rasadhlp.dll

17:25:22.0783 6056 C:\Windows\SysWOW64\rasadhlp.dll - ok

17:25:22.0798 6056 [ 0B31464B7B2D616BD5F7036673588EC1 ] C:\Windows\SysWOW64\IDStore.dll

17:25:22.0798 6056 C:\Windows\SysWOW64\IDStore.dll - ok

17:25:22.0798 6056 [ A0A2C1D812C231C9BFE119FDC68E341B ] C:\Windows\System32\IDStore.dll

17:25:22.0798 6056 C:\Windows\System32\IDStore.dll - ok

17:25:22.0814 6056 [ 71C4F42DC8DB668E826DA79462EA741E ] C:\Windows\SysWOW64\KBDUS.DLL

17:25:22.0814 6056 C:\Windows\SysWOW64\KBDUS.DLL - ok

17:25:22.0814 6056 [ 3CA2BB895E204478C7A4C9BAF70970CE ] C:\Windows\SysWOW64\AtBroker.exe

17:25:22.0814 6056 C:\Windows\SysWOW64\AtBroker.exe - ok

17:25:22.0814 6056 [ 23566F9723771108D2E6CD768AC27407 ] C:\Windows\System32\AtBroker.exe

17:25:22.0814 6056 C:\Windows\System32\AtBroker.exe - ok

17:25:22.0829 6056 [ EFC5D323E170D859F26E4666C885484E ] C:\Program Files (x86)\HP SimplePass\TouchControl.exe

17:25:22.0829 6056 C:\Program Files (x86)\HP SimplePass\TouchControl.exe - ok

17:25:22.0829 6056 [ 8B74CEC6980D4816B0037AE9A27E538F ] C:\Windows\SysWOW64\slc.dll

17:25:22.0829 6056 C:\Windows\SysWOW64\slc.dll - ok

17:25:22.0845 6056 [ 863F793D15B4026B1A5FDECA873D4D84 ] C:\Windows\SysWOW64\apphelp.dll

17:25:22.0845 6056 C:\Windows\SysWOW64\apphelp.dll - ok

17:25:22.0845 6056 [ D1D5DAB39DCB4BE0359943738D87409B ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

17:25:22.0845 6056 C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe - ok

17:25:22.0845 6056 [ 6CEF7856A3EFAC59470F6208F0F585CE ] C:\Windows\System32\mpr.dll

17:25:22.0845 6056 C:\Windows\System32\mpr.dll - ok

17:25:22.0861 6056 [ 61AC3EFDFACFDD3F0F11DD4FD4044223 ] C:\Windows\SysWOW64\userinit.exe

17:25:22.0861 6056 C:\Windows\SysWOW64\userinit.exe - ok

17:25:22.0861 6056 [ BAFE84E637BF7388C96EF48D4D3FDD53 ] C:\Windows\System32\userinit.exe

17:25:22.0861 6056 C:\Windows\System32\userinit.exe - ok

17:25:22.0861 6056 [ 352B3DC62A0D259A82A052238425C872 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll

17:25:22.0861 6056 C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll - ok

17:25:22.0876 6056 [ 49ACA548B2423F1C67898E6AC719A9A6 ] C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll

17:25:22.0876 6056 C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll - ok

17:25:22.0876 6056 [ F5CEF064C7E6D95DA86B9D064A56A969 ] C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll

17:25:22.0876 6056 C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll - ok

17:25:22.0876 6056 [ F58516E2DC0D963EF70D6BFC21FD82C4 ] C:\Windows\SysWOW64\PlaySndSrv.dll

17:25:22.0876 6056 C:\Windows\SysWOW64\PlaySndSrv.dll - ok

17:25:22.0892 6056 [ F162D5F5E845B9DC352DD1BAD8CEF1BC ] C:\Windows\System32\dwm.exe

17:25:22.0892 6056 C:\Windows\System32\dwm.exe - ok

17:25:22.0892 6056 [ 94EEAC26F57811BD1AEFC164412F7FCE ] C:\Windows\System32\PlaySndSrv.dll

17:25:22.0892 6056 C:\Windows\System32\PlaySndSrv.dll - ok

17:25:22.0907 6056 [ FCFCD1101C5DA23B4B95F93D02B2C169 ] C:\Windows\System32\dwmredir.dll

17:25:22.0907 6056 C:\Windows\System32\dwmredir.dll - ok

17:25:22.0907 6056 [ 9BB99503D6A4DD62569EDE9E5E2672A5 ] C:\Windows\System32\HotStartUserAgent.dll

17:25:22.0907 6056 C:\Windows\System32\HotStartUserAgent.dll - ok

17:25:22.0907 6056 [ 497E59D9F01C6F247E72222A61835119 ] C:\Windows\SysWOW64\dwmcore.dll

17:25:22.0907 6056 C:\Windows\SysWOW64\dwmcore.dll - ok

17:25:22.0923 6056 [ C5C867CD7EFAC60D5021223E374DEEC5 ] C:\Windows\SysWOW64\dimsjob.dll

17:25:22.0923 6056 C:\Windows\SysWOW64\dimsjob.dll - ok

17:25:22.0923 6056 [ 936F728E04ACCF3F38801CFFCF1E3F40 ] C:\Windows\SysWOW64\oledlg.dll

17:25:22.0923 6056 C:\Windows\SysWOW64\oledlg.dll - ok

17:25:22.0923 6056 [ 4BA77A5EF71C14C764B0ED4701683E3E ] C:\Windows\System32\dwmcore.dll

17:25:22.0923 6056 C:\Windows\System32\dwmcore.dll - ok

17:25:22.0939 6056 [ B3DC4D1658093C1E486CA9F22180BECF ] C:\Windows\SysWOW64\urlmon.dll

17:25:22.0939 6056 C:\Windows\SysWOW64\urlmon.dll - ok

17:25:22.0939 6056 [ 332FEAB1435662FC6C672E25BEB37BE3 ] C:\Windows\explorer.exe

17:25:22.0939 6056 C:\Windows\explorer.exe - ok

17:25:22.0954 6056 [ B43687C534A49700BF4B3C9898763752 ] C:\Windows\SysWOW64\MsCtfMonitor.dll

17:25:22.0954 6056 C:\Windows\SysWOW64\MsCtfMonitor.dll - ok

17:25:22.0954 6056 [ 1F1CA9E99DD5BF918BE0BF30B5A42FDA ] C:\Windows\System32\MsCtfMonitor.dll

17:25:22.0954 6056 C:\Windows\System32\MsCtfMonitor.dll - ok

17:25:22.0954 6056 [ 56CEED370508F69A1BA04939BD1BADDA ] C:\Windows\SysWOW64\msutb.dll

17:25:22.0954 6056 C:\Windows\SysWOW64\msutb.dll - ok

17:25:22.0970 6056 [ F09A9A1AD21FE618C4C8B0A0D830C886 ] C:\Windows\System32\msutb.dll

17:25:22.0970 6056 C:\Windows\System32\msutb.dll - ok

17:25:22.0970 6056 [ 544EFF88AC6C85DF5A4D6F18DFE08CFC ] C:\Windows\SysWOW64\taskschd.dll

17:25:22.0970 6056 C:\Windows\SysWOW64\taskschd.dll - ok

17:25:22.0970 6056 [ E2A17BCC08D92F42E08AF6BA2F93ABA7 ] C:\Windows\SysWOW64\ExplorerFrame.dll

17:25:22.0970 6056 C:\Windows\SysWOW64\ExplorerFrame.dll - ok

17:25:22.0985 6056 [ EED05D42D91835064703E2318552ED25 ] C:\Windows\System32\ExplorerFrame.dll

17:25:22.0985 6056 C:\Windows\System32\ExplorerFrame.dll - ok

17:25:22.0985 6056 [ 1C60E09CA1C3A045BC4D367F67C915B7 ] C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll

17:25:22.0985 6056 C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll - ok

17:25:23.0001 6056 [ 5C3F9DBA818CD93379D1A0F215270374 ] C:\Windows\SysWOW64\esent.dll

17:25:23.0001 6056 C:\Windows\SysWOW64\esent.dll - ok

17:25:23.0001 6056 [ 522B0466ED967A0762E9AF5B37D8F40A ] C:\Windows\System32\esent.dll

17:25:23.0001 6056 C:\Windows\System32\esent.dll - ok

17:25:23.0001 6056 [ 5B2E4E90C04FB9AE9F2C5E99FF59B283 ] C:\Windows\SysWOW64\WindowsCodecs.dll

17:25:23.0001 6056 C:\Windows\SysWOW64\WindowsCodecs.dll - ok

17:25:23.0017 6056 [ 3C1936A12C62254F914A01BBC6A8DC69 ] C:\Windows\SysWOW64\d3d10_1.dll

17:25:23.0017 6056 C:\Windows\SysWOW64\d3d10_1.dll - ok

17:25:23.0017 6056 [ 9AE80F6A66B30E3ED8CDF858CF28B11B ] C:\Windows\System32\d3d10_1.dll

17:25:23.0017 6056 C:\Windows\System32\d3d10_1.dll - ok

17:25:23.0017 6056 [ 33EFA5B649CFC2438FD70ED1E4096D0E ] C:\Program Files (x86)\HP SimplePass\BioLayer.dll

17:25:23.0017 6056 C:\Program Files (x86)\HP SimplePass\BioLayer.dll - ok

17:25:23.0032 6056 [ D4212AB475A3B25EC4DF574536C3EDC5 ] C:\Windows\SysWOW64\d3d10_1core.dll

17:25:23.0032 6056 C:\Windows\SysWOW64\d3d10_1core.dll - ok

17:25:23.0032 6056 [ 63F72417CA38D8FC8F53709649B589E3 ] C:\Windows\System32\d3d10_1core.dll

17:25:23.0032 6056 C:\Windows\System32\d3d10_1core.dll - ok

17:25:23.0048 6056 [ 3CF38AACF2D2661282EE08FB04AABB9C ] C:\Program Files (x86)\HP SimplePass\TrueSuiteDlg.dll

17:25:23.0048 6056 C:\Program Files (x86)\HP SimplePass\TrueSuiteDlg.dll - ok

17:25:23.0048 6056 [ 6E1F8165C365D35C8E3C045AF0CDD481 ] C:\Windows\SysWOW64\duser.dll

17:25:23.0048 6056 C:\Windows\SysWOW64\duser.dll - ok

17:25:23.0048 6056 [ EE06B85BC69F18826302348A2AD089E0 ] C:\Windows\SysWOW64\dui70.dll

17:25:23.0048 6056 C:\Windows\SysWOW64\dui70.dll - ok

17:25:23.0063 6056 [ CCCF95A5F9F18555C9820C713758C38F ] C:\Program Files (x86)\HP SimplePass\EnumWindowsUsers.dll

17:25:23.0063 6056 C:\Program Files (x86)\HP SimplePass\EnumWindowsUsers.dll - ok

17:25:23.0063 6056 [ D4F264FE23F8953D840904418220C15E ] C:\Windows\SysWOW64\dxgi.dll

17:25:23.0063 6056 C:\Windows\SysWOW64\dxgi.dll - ok

17:25:23.0063 6056 [ 8DFB5752FCE145A6B295093C0A8BE131 ] C:\Windows\System32\dxgi.dll

17:25:23.0063 6056 C:\Windows\System32\dxgi.dll - ok

17:25:23.0079 6056 [ 8C338238C16777A802D6A9211EB2BA50 ] C:\Windows\SysWOW64\netprofm.dll

17:25:23.0079 6056 C:\Windows\SysWOW64\netprofm.dll - ok

17:25:23.0079 6056 [ 6DE66FE7C526637E74CD066461C7C871 ] C:\Windows\SysWOW64\d3d11.dll

17:25:23.0079 6056 C:\Windows\SysWOW64\d3d11.dll - ok

17:25:23.0095 6056 [ 8EA53101FF2B15BDFF934B62A8FB326D ] C:\Windows\SysWOW64\logoncli.dll

17:25:23.0095 6056 C:\Windows\SysWOW64\logoncli.dll - ok

17:25:23.0095 6056 [ 0BA65122FFA7E37564EE86422DBF7AE8 ] C:\Windows\SysWOW64\nlaapi.dll

17:25:23.0095 6056 C:\Windows\SysWOW64\nlaapi.dll - ok

17:25:23.0095 6056 [ 4C92EB7535CAA1681A77D928FBF9771F ] C:\Windows\System32\d3d11.dll

17:25:23.0095 6056 C:\Windows\System32\d3d11.dll - ok

17:25:23.0110 6056 [ 15E298B5EC5B89C5994A59863969D9FF ] C:\Windows\SysWOW64\npmproxy.dll

17:25:23.0110 6056 C:\Windows\SysWOW64\npmproxy.dll - ok

17:25:23.0110 6056 [ 12C45E3CB6D65F73209549E2D02ECA7A ] C:\Windows\SysWOW64\propsys.dll

17:25:23.0110 6056 C:\Windows\SysWOW64\propsys.dll - ok

17:25:23.0110 6056 [ 60C59599FA82EC2A4354BD29FF28DFB0 ] C:\Windows\System32\aticfx64.dll

17:25:23.0110 6056 C:\Windows\System32\aticfx64.dll - ok

17:25:23.0126 6056 [ F4F6E0386E4C258F9D5FE767F967D115 ] C:\Program Files (x86)\HP SimplePass\AutoSoftwareUpdate.dll

17:25:23.0126 6056 C:\Program Files (x86)\HP SimplePass\AutoSoftwareUpdate.dll - ok

17:25:23.0126 6056 [ A2C08C2FFDDFB4422057CE34D171AAB5 ] C:\Windows\System32\atidxx64.dll

17:25:23.0126 6056 C:\Windows\System32\atidxx64.dll - ok

17:25:23.0126 6056 [ 187A0D131F761B14923BADE40A3B749F ] C:\Windows\System32\atiuxp64.dll

17:25:23.0126 6056 C:\Windows\System32\atiuxp64.dll - ok

17:25:23.0141 6056 [ 14486EB6AF542F2BD3239F7FC3E713F7 ] C:\Windows\SysWOW64\pautoenr.dll

17:25:23.0141 6056 C:\Windows\SysWOW64\pautoenr.dll - ok

17:25:23.0141 6056 [ 61B1ED5F429EFAC7E2036769870AB93E ] C:\Windows\SysWOW64\certcli.dll

17:25:23.0141 6056 C:\Windows\SysWOW64\certcli.dll - ok

17:25:23.0157 6056 [ 27DD92668CFEAA3FBE7C489EF79525D5 ] C:\Program Files (x86)\HP SimplePass\DataManager.dll

17:25:23.0157 6056 C:\Program Files (x86)\HP SimplePass\DataManager.dll - ok

17:25:23.0157 6056 [ B82901492F3C78C772142FAED248F094 ] C:\Program Files (x86)\Common Files\AuthenTec\TrueAPI.dll

17:25:23.0157 6056 C:\Program Files (x86)\Common Files\AuthenTec\TrueAPI.dll - ok

17:25:23.0157 6056 [ F10E5311E5093FA3C00FF88C54C32FCA ] C:\Windows\SysWOW64\atl.dll

17:25:23.0157 6056 C:\Windows\SysWOW64\atl.dll - ok

17:25:23.0173 6056 [ 49E5753D923F1AC63B22D3DCB0B47E00 ] C:\Windows\System32\uDWM.dll

17:25:23.0173 6056 C:\Windows\System32\uDWM.dll - ok

17:25:23.0173 6056 [ 846D0E4DB261CFAF363902E41498E961 ] C:\Windows\SysWOW64\EhStorShell.dll

17:25:23.0173 6056 C:\Windows\SysWOW64\EhStorShell.dll - ok

17:25:23.0173 6056 [ 29BC473072568C072EC8B176498DE996 ] C:\Windows\SysWOW64\CertEnroll.dll

17:25:23.0173 6056 C:\Windows\SysWOW64\CertEnroll.dll - ok

17:25:23.0188 6056 [ 2F040CF0613A6D64DCBBA9EE81F5A5AE ] C:\Windows\SysWOW64\dsrole.dll

17:25:23.0188 6056 C:\Windows\SysWOW64\dsrole.dll - ok

17:25:23.0188 6056 [ 024352FEEC9042260BB4CFB4D79A206B ] C:\Windows\System32\EhStorShell.dll

17:25:23.0188 6056 C:\Windows\System32\EhStorShell.dll - ok

17:25:23.0204 6056 [ F1D2ABA7038E01F7465E36F2057E7C13 ] C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL

17:25:23.0204 6056 C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL - ok

17:25:23.0204 6056 [ 4B78B431F225FD8624C5655CB1DE7B61 ] C:\Windows\System32\aelupsvc.dll

17:25:23.0204 6056 C:\Windows\System32\aelupsvc.dll - ok

17:25:23.0204 6056 [ 4C39358EBDD2FFCD9132A30E1EC31E16 ] C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcp90.dll

17:25:23.0204 6056 C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcp90.dll - ok

17:25:23.0219 6056 [ 57AC86AC664CC774C861DAB2B1D1E978 ] C:\Windows\winsxs\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_0a1fd3a3a768b895\ATL90.dll

17:25:23.0219 6056 C:\Windows\winsxs\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_0a1fd3a3a768b895\ATL90.dll - ok

17:25:23.0219 6056 [ B2DB6ABA2E292235749B80A9C3DFA867 ] C:\Windows\SysWOW64\imagehlp.dll

17:25:23.0219 6056 C:\Windows\SysWOW64\imagehlp.dll - ok

17:25:23.0235 6056 [ 5ABAEB53E6ECF7878A5C4C4ABED92050 ] C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF

17:25:23.0235 6056 C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF - ok

17:25:23.0235 6056 [ BF6D6ED5FADCEEE885BD0144ECF1BA27 ] C:\Windows\SysWOW64\ncrypt.dll

17:25:23.0235 6056 C:\Windows\SysWOW64\ncrypt.dll - ok

17:25:23.0235 6056 [ CE71B9119A258EDD0A05B37D7B0F92E3 ] C:\Windows\SysWOW64\bcrypt.dll

17:25:23.0235 6056 C:\Windows\SysWOW64\bcrypt.dll - ok

17:25:23.0251 6056 [ 66E3C667D853DF349E310568F60B9B6A ] C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll

17:25:23.0251 6056 C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll - ok

17:25:23.0251 6056 [ E8449FE262D7406BCB2AC2A45C53EC5F ] C:\Windows\SysWOW64\bcryptprimitives.dll

17:25:23.0251 6056 C:\Windows\SysWOW64\bcryptprimitives.dll - ok

17:25:23.0266 6056 [ 1097F3035BAF46CED8B332B3564C5108 ] C:\Windows\SysWOW64\gpapi.dll

17:25:23.0266 6056 C:\Windows\SysWOW64\gpapi.dll - ok

17:25:23.0266 6056 [ D526B6964EB436530F14982B86151F17 ] C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\bushell.dll

17:25:23.0266 6056 C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\bushell.dll - ok

17:25:23.0266 6056 [ 4F096D96285E06CD51AEF7D2D3DE04DA ] C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\msvcp100.dll

17:25:23.0266 6056 C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\msvcp100.dll - ok

17:25:23.0282 6056 [ 38C2B55847C55485C92F0881D95A4545 ] C:\Program Files (x86)\HP SimplePass\BioMonitor.exe

17:25:23.0282 6056 C:\Program Files (x86)\HP SimplePass\BioMonitor.exe - ok

17:25:23.0282 6056 [ DF3CA8D16BDED6A54977B30E66864D33 ] C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\msvcr100.dll

17:25:23.0282 6056 C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\msvcr100.dll - ok

17:25:23.0297 6056 [ 8888EB78B322F6FE1F2623485CAD43FF ] C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\ccl120u.dll

17:25:23.0297 6056 C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\ccl120u.dll - ok

17:25:23.0297 6056 [ A64FD422D01E71057B65B448C835D4E7 ] C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\efacli64.dll

17:25:23.0297 6056 C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\efacli64.dll - ok

17:25:23.0297 6056 [ 7F21DA4760CE9B4B1B12CBC58C2A642A ] C:\Windows\SysWOW64\apisetschema.dll

17:25:23.0297 6056 C:\Windows\SysWOW64\apisetschema.dll - ok

17:25:23.0313 6056 [ 03F3B770DFBED6131653CEDA8CA780F0 ] C:\Windows\SysWOW64\ntshrui.dll

17:25:23.0313 6056 C:\Windows\SysWOW64\ntshrui.dll - ok

galen222 · July 6, 2013

Part 4 TDSSKiller Report

17:25:23.0313 6056 [ 037A719DAD50603202C978CD802623E4 ] C:\Windows\System32\ntshrui.dll

17:25:23.0313 6056 C:\Windows\System32\ntshrui.dll - ok

17:25:23.0329 6056 [ 97DFB94E4246BBE7A82E66B3A11ED570 ] C:\Windows\System32\vnetlib64.dll

17:25:23.0329 6056 C:\Windows\System32\vnetlib64.dll - ok

17:25:23.0329 6056 [ 465BEA35F7ED4A4A57686DEA7EA10F47 ] C:\Windows\SysWOW64\cscapi.dll

17:25:23.0329 6056 C:\Windows\SysWOW64\cscapi.dll - ok

17:25:23.0329 6056 [ 523CF74A52C9A1762DA8B83AEE734498 ] C:\Windows\SysWOW64\IconCodecService.dll

17:25:23.0329 6056 C:\Windows\SysWOW64\IconCodecService.dll - ok

17:25:23.0344 6056 [ 1D63F4366288B8A7595397E27010FD44 ] C:\Windows\System32\IconCodecService.dll

17:25:23.0344 6056 C:\Windows\System32\IconCodecService.dll - ok

17:25:23.0344 6056 [ A6154A954F08E99D27CEA4D3B9563172 ] C:\Windows\SysWOW64\newdev.dll

17:25:23.0344 6056 C:\Windows\SysWOW64\newdev.dll - ok

17:25:23.0344 6056 [ BB7E865599FA258C70DF8B1F70109F6F ] C:\Windows\System32\newdev.dll

17:25:23.0344 6056 C:\Windows\System32\newdev.dll - ok

17:25:23.0360 6056 [ 9D2A2369AB4B08A4905FE72DB104498F ] C:\Windows\System32\appinfo.dll

17:25:23.0360 6056 C:\Windows\System32\appinfo.dll - ok

17:25:23.0360 6056 [ 4FB491AC8D46AAF22BA8BC5C73DABEF7 ] C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

17:25:23.0360 6056 C:\Windows\SysWOW64\wbem\WmiPrvSE.exe - ok

17:25:23.0375 6056 [ A4CC7227A452C4909F9499D91B184364 ] C:\Windows\SysWOW64\ncobjapi.dll

17:25:23.0375 6056 C:\Windows\SysWOW64\ncobjapi.dll - ok

17:25:23.0375 6056 [ 919001D2BB17DF06CA3F8AC16AD039F6 ] C:\Windows\SysWOW64\sxs.dll

17:25:23.0375 6056 C:\Windows\SysWOW64\sxs.dll - ok

17:25:23.0375 6056 [ 89F4D0DD6606A2FE15931E6888DBBC8D ] C:\Windows\SysWOW64\stdole2.tlb

17:25:23.0375 6056 C:\Windows\SysWOW64\stdole2.tlb - ok

17:25:23.0391 6056 [ 5610B0425518D185331CB8E968D060E6 ] C:\Windows\SysWOW64\wbem\wmiutils.dll

17:25:23.0391 6056 C:\Windows\SysWOW64\wbem\wmiutils.dll - ok

17:25:23.0391 6056 [ D0481FB85BEEDD30A0884BE327880F80 ] C:\Windows\SysWOW64\framedynos.dll

17:25:23.0391 6056 C:\Windows\SysWOW64\framedynos.dll - ok

17:25:23.0391 6056 [ D44741F65A1D71F65814A12CF6E2400A ] C:\Windows\SysWOW64\runonce.exe

17:25:23.0391 6056 C:\Windows\SysWOW64\runonce.exe - ok

17:25:23.0407 6056 [ 326C7F76A29897A892AA7726E91C1C67 ] C:\Windows\SysWOW64\winbrand.dll

17:25:23.0407 6056 C:\Windows\SysWOW64\winbrand.dll - ok

17:25:23.0407 6056 [ E6E271C5BCEADA7DE47B83B08B765A17 ] C:\Windows\Branding\Basebrd\basebrd.dll

17:25:23.0407 6056 C:\Windows\Branding\Basebrd\basebrd.dll - ok

17:25:23.0407 6056 [ 025E7DBDB98866ED3CB2D4DDA70B364D ] C:\Windows\System32\runonce.exe

17:25:23.0407 6056 C:\Windows\System32\runonce.exe - ok

17:25:23.0422 6056 [ B39B8CC163C41B12FE83E777199F3378 ] C:\Windows\SysWOW64\tzres.dll

17:25:23.0422 6056 C:\Windows\SysWOW64\tzres.dll - ok

17:25:23.0422 6056 [ FCA0837B2739C044EEC00AF0DDD73FFC ] C:\Windows\SysWOW64\ieframe.dll

17:25:23.0422 6056 C:\Windows\SysWOW64\ieframe.dll - ok

17:25:23.0422 6056 [ E6410546E86DC2C8068DCA88065BD7AB ] C:\Windows\SysWOW64\wbem\WmiPerfClass.dll

17:25:23.0422 6056 C:\Windows\SysWOW64\wbem\WmiPerfClass.dll - ok

17:25:23.0438 6056 [ 0464F693C59CC02CF261DE7E4D33E5B7 ] C:\Windows\System32\wbem\WmiPerfClass.dll

17:25:23.0438 6056 C:\Windows\System32\wbem\WmiPerfClass.dll - ok

17:25:23.0438 6056 [ 487F44B08EFEAF5AD087878357B9403D ] C:\Windows\SysWOW64\pdh.dll

17:25:23.0438 6056 C:\Windows\SysWOW64\pdh.dll - ok

17:25:23.0453 6056 [ CF6850A72BEB4845A3BFFB3F5E8014B2 ] C:\Windows\System32\pdh.dll

17:25:23.0453 6056 C:\Windows\System32\pdh.dll - ok

17:25:23.0453 6056 [ 007863E45F25AA47A4C30D0930BBFD85 ] C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

17:25:23.0453 6056 C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll - ok

17:25:23.0453 6056 [ 60F4AEFA103D421EA4A40E31409B4756 ] C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll

17:25:23.0453 6056 C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll - ok

17:25:23.0469 6056 [ BCEED81AE30C3419DD62909E2090060B ] C:\Program Files (x86)\HP SimplePass\TokenMachine.dll

17:25:23.0469 6056 C:\Program Files (x86)\HP SimplePass\TokenMachine.dll - ok

17:25:23.0469 6056 [ 660C8E78B94F483E44B0243A774A4746 ] C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL

17:25:23.0469 6056 C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL - ok

17:25:23.0485 6056 [ 3FAD263CE1E2A6FFF40D00043B2275E3 ] C:\Windows\SysWOW64\winbio.dll

17:25:23.0485 6056 C:\Windows\SysWOW64\winbio.dll - ok

17:25:23.0485 6056 [ 82C089EA2A3EEFADF3588EA71E8BDADA ] C:\Windows\SysWOW64\wevtapi.dll

17:25:23.0485 6056 C:\Windows\SysWOW64\wevtapi.dll - ok

17:25:23.0485 6056 [ 108C2CFA5527458C096A699929ECBD80 ] C:\Windows\SysWOW64\credui.dll

17:25:23.0485 6056 C:\Windows\SysWOW64\credui.dll - ok

17:25:23.0500 6056 [ 4F2659160AFCCA990305816946F69407 ] C:\Windows\SysWOW64\taskeng.exe

17:25:23.0500 6056 C:\Windows\SysWOW64\taskeng.exe - ok

17:25:23.0500 6056 [ 65EA57712340C09B1B0C427B4848AE05 ] C:\Windows\System32\taskeng.exe

17:25:23.0500 6056 C:\Windows\System32\taskeng.exe - ok

17:25:23.0500 6056 [ FEB91B4DA0D540865260A33838654FA3 ] C:\Windows\System32\nci.dll

17:25:23.0500 6056 C:\Windows\System32\nci.dll - ok

17:25:23.0516 6056 [ 45D9F6CD2469CDB6A640DD4BD2B01471 ] C:\Windows\SysWOW64\nci.dll

17:25:23.0516 6056 C:\Windows\SysWOW64\nci.dll - ok

17:25:23.0516 6056 [ D54FE0387CB469B43CDCDFAA03AE5A55 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\npctray.dll

17:25:23.0516 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\npctray.dll - ok

17:25:23.0531 6056 [ AC0C9CEA1218DAB1994AF8B28E680BD9 ] C:\Windows\System32\wlaninst.dll

17:25:23.0531 6056 C:\Windows\System32\wlaninst.dll - ok

17:25:23.0531 6056 [ 9E6AF823733C70E207D9FB6731A63B3D ] C:\Windows\SysWOW64\wlaninst.dll

17:25:23.0531 6056 C:\Windows\SysWOW64\wlaninst.dll - ok

17:25:23.0531 6056 [ 5A406C9C8E0880D3EABADC5DFD1ACDAE ] C:\Windows\System32\wwaninst.dll

17:25:23.0531 6056 C:\Windows\System32\wwaninst.dll - ok

17:25:23.0547 6056 [ 51138BEEA3E2C21EC44D0932C71762A8 ] C:\Windows\SysWOW64\rundll32.exe

17:25:23.0547 6056 C:\Windows\SysWOW64\rundll32.exe - ok

17:25:23.0547 6056 [ C15B26CEE45AD230A083F59A60794CDA ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\uimain.dll

17:25:23.0547 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\uimain.dll - ok

17:25:23.0563 6056 [ 38B13C0DF479DBA23ECFA815159BA86E ] C:\Windows\SysWOW64\ktmw32.dll

17:25:23.0563 6056 C:\Windows\SysWOW64\ktmw32.dll - ok

17:25:23.0563 6056 [ DD81D91FF3B0763C392422865C9AC12E ] C:\Windows\System32\rundll32.exe

17:25:23.0563 6056 C:\Windows\System32\rundll32.exe - ok

17:25:23.0563 6056 [ 6EF5F3F18413C367195F06E503AB86A6 ] C:\Windows\SysWOW64\d3d9.dll

17:25:23.0563 6056 C:\Windows\SysWOW64\d3d9.dll - ok

17:25:23.0578 6056 [ 77B1471A490B53B24EFE136F09F76550 ] C:\Windows\SysWOW64\d3d8thk.dll

17:25:23.0578 6056 C:\Windows\SysWOW64\d3d8thk.dll - ok

17:25:23.0578 6056 [ 659E04E74135927CA6D7BC5E75C84417 ] C:\Windows\SysWOW64\TSChannel.dll

17:25:23.0578 6056 C:\Windows\SysWOW64\TSChannel.dll - ok

17:25:23.0578 6056 [ EDF2A5E96BEC469DA3F64E9BDD386111 ] C:\Windows\SysWOW64\xmllite.dll

17:25:23.0578 6056 C:\Windows\SysWOW64\xmllite.dll - ok

17:25:23.0594 6056 [ 7BAD1E584DBE290C06B8AE0FABF7BEDE ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\symhtmdx.dll

17:25:23.0594 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\symhtmdx.dll - ok

17:25:23.0594 6056 [ 9915504F602D277EE47FD843A677FD15 ] C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

17:25:23.0594 6056 C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe - ok

17:25:23.0609 6056 [ 58A14C45A5CD2528F10A889E7B0C3FC2 ] C:\Windows\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b\ATL90.dll

17:25:23.0609 6056 C:\Windows\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_51cd0a7abbe4e19b\ATL90.dll - ok

17:25:23.0609 6056 [ 4277F5164DE9B7C665BB928B9145BEE0 ] C:\Windows\SysWOW64\DWrite.dll

17:25:23.0609 6056 C:\Windows\SysWOW64\DWrite.dll - ok

17:25:23.0609 6056 [ 7A7ECA157A0747637512E8C02B8350EA ] C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE

17:25:23.0609 6056 C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE - ok

17:25:23.0625 6056 [ EAB975DB4C2805927FE5BD047D05C9AA ] C:\Windows\SysWOW64\netshell.dll

17:25:23.0625 6056 C:\Windows\SysWOW64\netshell.dll - ok

17:25:23.0625 6056 [ E9901A7E569C4156FDA69F5C9356B8ED ] C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

17:25:23.0625 6056 C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF - ok

17:25:23.0641 6056 [ BF164444875AF45D34936684DF87CF40 ] C:\Windows\SysWOW64\en-US\rundll32.exe.mui

17:25:23.0641 6056 C:\Windows\SysWOW64\en-US\rundll32.exe.mui - ok

17:25:23.0641 6056 [ 07AD88DF9EF73215458867EFC1BFFE9E ] C:\Windows\System32\wbem\wmiprov.dll

17:25:23.0641 6056 C:\Windows\System32\wbem\wmiprov.dll - ok

17:25:23.0656 6056 [ 6854FB9454029CF7CC4EEA1835AFFE34 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\distrptr.dll

17:25:23.0656 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\distrptr.dll - ok

17:25:23.0656 6056 [ 805A52C5AE26C28E88FDD9BCCFE6F312 ] C:\Windows\System32\TSChannel.dll

17:25:23.0656 6056 C:\Windows\System32\TSChannel.dll - ok

17:25:23.0656 6056 [ 9A7B54D57594233EEB17892BAD309970 ] C:\Windows\SysWOW64\mprmsg.dll

17:25:23.0656 6056 C:\Windows\SysWOW64\mprmsg.dll - ok

17:25:23.0672 6056 [ 506708142BC63DABA64F2D3AD1DCD5BF ] C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

17:25:23.0672 6056 C:\Program Files (x86)\Google\Update\GoogleUpdate.exe - ok

17:25:23.0672 6056 [ B31F1C113241EAE5F5840240259583D1 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\mclntask.dll

17:25:23.0672 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\mclntask.dll - ok

17:25:23.0672 6056 [ 521202AA6F2B74FCCC6BC7E162109D71 ] C:\Windows\System32\wbem\unsecapp.exe

17:25:23.0672 6056 C:\Windows\System32\wbem\unsecapp.exe - ok

17:25:23.0687 6056 [ 2F0E7344F65852B0085593A4B7B135CB ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\isdatapr.dll

17:25:23.0687 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\isdatapr.dll - ok

17:25:23.0687 6056 [ D2958325C1AE1AE37A83334C6229E3BC ] C:\Windows\SysWOW64\actxprxy.dll

17:25:23.0687 6056 C:\Windows\SysWOW64\actxprxy.dll - ok

17:25:23.0703 6056 [ C6B6CD85841FC4958DDAD76B270D05BF ] C:\Program Files (x86)\Google\Update\1.3.21.149\goopdate.dll

17:25:23.0703 6056 C:\Program Files (x86)\Google\Update\1.3.21.149\goopdate.dll - ok

17:25:23.0703 6056 [ 99B9343280AF6A4C0F27CF2E28E94BBF ] C:\Windows\SysWOW64\dssenh.dll

17:25:23.0703 6056 C:\Windows\SysWOW64\dssenh.dll - ok

17:25:23.0703 6056 [ F11A57E91FDAECFB41A5CB21EB1EBC8E ] C:\Windows\System32\dssenh.dll

17:25:23.0703 6056 C:\Windows\System32\dssenh.dll - ok

17:25:23.0719 6056 [ 220159496484D34009DE71CA1A68E0D4 ] C:\Windows\System32\wbem\NCProv.dll

17:25:23.0719 6056 C:\Windows\System32\wbem\NCProv.dll - ok

17:25:23.0719 6056 [ 4E5FE39C1076D115EC8BFCFE14D75B80 ] C:\Windows\SysWOW64\credssp.dll

17:25:23.0719 6056 C:\Windows\SysWOW64\credssp.dll - ok

17:25:23.0719 6056 [ 73E8667A19FEEDD856DF2695E9E511D4 ] C:\Windows\SysWOW64\wship6.dll

17:25:23.0719 6056 C:\Windows\SysWOW64\wship6.dll - ok

17:25:23.0734 6056 [ A6C29DB53ECA94FA8591C5388D604B82 ] C:\Windows\SysWOW64\msi.dll

17:25:23.0734 6056 C:\Windows\SysWOW64\msi.dll - ok

17:25:23.0734 6056 [ FC9095973170EB63BAB2A8554E5D25A5 ] C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe

17:25:23.0734 6056 C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe - ok

17:25:23.0750 6056 [ AA36AB1DD3B1002B6DCAEB3E50275833 ] C:\Program Files (x86)\Google\Update\1.3.21.149\goopdateres_en.dll

17:25:23.0750 6056 C:\Program Files (x86)\Google\Update\1.3.21.149\goopdateres_en.dll - ok

17:25:23.0750 6056 [ D83947A58613E9091B4C9CC0F1546A8D ] C:\Windows\SysWOW64\mscoree.dll

17:25:23.0750 6056 C:\Windows\SysWOW64\mscoree.dll - ok

17:25:23.0750 6056 [ F5DF6846F30E9F54EA60CCAEB3FB2055 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll

17:25:23.0750 6056 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll - ok

17:25:23.0765 6056 [ 8B92BED5B8D4A8480E7AA631F35A6F35 ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll

17:25:23.0765 6056 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll - ok

17:25:23.0765 6056 [ 09C87F376507122A5FE1CBE06E015512 ] C:\Program Files (x86)\Google\Update\1.3.21.149\GoogleCrashHandler.exe

17:25:23.0765 6056 C:\Program Files (x86)\Google\Update\1.3.21.149\GoogleCrashHandler.exe - ok

17:25:23.0781 6056 [ C3E39FB1398EEE8E612C2FE53A9192EF ] C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll

17:25:23.0781 6056 C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll - ok

17:25:23.0781 6056 [ CA35155F6B4C4DB2513AAAA868BAFF47 ] C:\Program Files (x86)\Google\Update\1.3.21.149\GoogleCrashHandler64.exe

17:25:23.0781 6056 C:\Program Files (x86)\Google\Update\1.3.21.149\GoogleCrashHandler64.exe - ok

17:25:23.0781 6056 [ 6E9E439517D89EDC9A6CB1E94489620A ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll

17:25:23.0797 6056 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll - ok

17:25:23.0797 6056 [ 102CF6879887BBE846A00C459E6D4ABC ] C:\Windows\SysWOW64\riched20.dll

17:25:23.0797 6056 C:\Windows\SysWOW64\riched20.dll - ok

17:25:23.0797 6056 [ 5A8D771D47C92CFEC4E1656E4FAC2D94 ] C:\Windows\SysWOW64\en-US\crypt32.dll.mui

17:25:23.0797 6056 C:\Windows\SysWOW64\en-US\crypt32.dll.mui - ok

17:25:23.0812 6056 [ 8A8B277067C22F4BF6AA9A31692FC4D3 ] C:\Windows\SysWOW64\cryptnet.dll

17:25:23.0812 6056 C:\Windows\SysWOW64\cryptnet.dll - ok

17:25:23.0812 6056 [ C5A99A4C0DC9F0F5A95BA0C83D30A549 ] C:\Windows\SysWOW64\mstask.dll

17:25:23.0812 6056 C:\Windows\SysWOW64\mstask.dll - ok

17:25:23.0812 6056 [ 6F8E3B7B70E1BBA871212940C1FBDF60 ] C:\Windows\SysWOW64\SensApi.dll

17:25:23.0812 6056 C:\Windows\SysWOW64\SensApi.dll - ok

17:25:23.0828 6056 [ 09A116FB06C5E362EF8938D29CDAB27B ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll

17:25:23.0828 6056 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll - ok

17:25:23.0828 6056 [ AD7B9C14083B52BC532FBA5948342B98 ] C:\Windows\SysWOW64\cmd.exe

17:25:23.0828 6056 C:\Windows\SysWOW64\cmd.exe - ok

17:25:23.0843 6056 [ A7A8CA53D9C9FD90C07AB0EB38E5316B ] C:\Windows\System32\dbghelp.dll

17:25:23.0843 6056 C:\Windows\System32\dbghelp.dll - ok

17:25:23.0843 6056 [ 3518CB4E2D896CAB53D5386F15AC0566 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll

17:25:23.0843 6056 C:\Windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll - ok

17:25:23.0843 6056 [ 1BCDB508143B517F21BBDAC10F5777BF ] C:\Windows\System32\conhost.exe

17:25:23.0843 6056 C:\Windows\System32\conhost.exe - ok

17:25:23.0859 6056 [ 4B9E4CE667DF26ADA061AA81E9AA841D ] C:\Windows\SysWOW64\spfileq.dll

17:25:23.0859 6056 C:\Windows\SysWOW64\spfileq.dll - ok

17:25:23.0859 6056 [ 198803E5E93E29967DFB0BCFD0186151 ] C:\Windows\System32\spfileq.dll

17:25:23.0859 6056 C:\Windows\System32\spfileq.dll - ok

17:25:23.0875 6056 [ AF78F66116814FDD6677CEBD73035CDD ] C:\Windows\SysWOW64\schannel.dll

17:25:23.0875 6056 C:\Windows\SysWOW64\schannel.dll - ok

17:25:23.0875 6056 [ 27E79A455EF80647F4F57FA3C2B09C94 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll

17:25:23.0875 6056 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll - ok

17:25:23.0875 6056 [ 8D17F8532958E0AC4A32B0E7E3C94EF2 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\30e3a21202000677d0a9270572251477\System.Windows.Forms.ni.dll

17:25:23.0875 6056 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\30e3a21202000677d0a9270572251477\System.Windows.Forms.ni.dll - ok

17:25:23.0890 6056 [ 1F05F5A16881CD928C82D53CEFCF4477 ] C:\Windows\SysWOW64\shdocvw.dll

17:25:23.0890 6056 C:\Windows\SysWOW64\shdocvw.dll - ok

17:25:23.0890 6056 [ 811CF8920B409089D4B8C8A01378835C ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\520a80ddcdd1084993516f4d42a73e05\System.Xml.ni.dll

17:25:23.0890 6056 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\520a80ddcdd1084993516f4d42a73e05\System.Xml.ni.dll - ok

17:25:23.0906 6056 [ 178A34E5554DCE485E1262DDF027960C ] C:\Users\Galen\AppData\Local\Temp\075793FC-8B01-4E95-B4B9-FE0775D0E071.exe

17:25:23.0906 6056 C:\Users\Galen\AppData\Local\Temp\075793FC-8B01-4E95-B4B9-FE0775D0E071.exe - ok

17:25:23.0906 6056 [ D66E000EF14A2F45EC7F350A21994A12 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\3c2ed368e1f3889997dfb42a5ca77284\System.Core.ni.dll

17:25:23.0906 6056 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\3c2ed368e1f3889997dfb42a5ca77284\System.Core.ni.dll - ok

17:25:23.0921 6056 [ BE210318FA6DA2A862BD41EA87E8CBE6 ] C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll

17:25:23.0921 6056 C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll - ok

17:25:23.0921 6056 [ 57D7B7CB3618634ABB1645DBCB20D8CA ] C:\Program Files (x86)\HP SimplePass\Interop.SHDocVw.dll

17:25:23.0921 6056 C:\Program Files (x86)\HP SimplePass\Interop.SHDocVw.dll - ok

17:25:23.0921 6056 [ CAF429532A8987F2B6796090A0369335 ] C:\Program Files (x86)\HP SimplePass\BioLayerAdapter.dll

17:25:23.0921 6056 C:\Program Files (x86)\HP SimplePass\BioLayerAdapter.dll - ok

17:25:23.0937 6056 [ D34A527493F39AF4491B3E909DC697CA ] C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcm90.dll

17:25:23.0937 6056 C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcm90.dll - ok

17:25:23.0937 6056 [ A0617B5753E31126AD29C03154F4F329 ] C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll

17:25:23.0937 6056 C:\Windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll - ok

17:25:23.0937 6056 [ 12B79422A23814429CDA9E734C58F78F ] C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL

17:25:23.0937 6056 C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL - ok

17:25:23.0953 6056 [ 40947436A70E0034E41123DF5A0A7702 ] C:\Program Files (x86)\Bonjour\mdnsNSP.dll

17:25:23.0953 6056 C:\Program Files (x86)\Bonjour\mdnsNSP.dll - ok

17:25:23.0953 6056 [ 676CCC08D9E9A3F4CA39CB04E97048DF ] C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll

17:25:23.0953 6056 C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll - ok

17:25:23.0968 6056 [ 827CB0D6C3F8057EA037FF271F8E9795 ] C:\Windows\SysWOW64\imageres.dll

17:25:23.0968 6056 C:\Windows\SysWOW64\imageres.dll - ok

17:25:23.0968 6056 [ B7F55E2AE978D3D34F7876EE5D689AAE ] C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe

17:25:23.0968 6056 C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe - ok

17:25:23.0968 6056 [ 5BB8C06EB5EA4BA22EE8A678F2D79B25 ] C:\Windows\SysWOW64\devenum.dll

17:25:23.0968 6056 C:\Windows\SysWOW64\devenum.dll - ok

17:25:23.0984 6056 [ 7069AAB8536F29ED7323140973A2894B ] C:\Windows\SysWOW64\msdmo.dll

17:25:23.0984 6056 C:\Windows\SysWOW64\msdmo.dll - ok

17:25:23.0984 6056 [ E24FE90E9DE8D8AE70E59F7B01675DEF ] C:\Windows\SysWOW64\avicap32.dll

17:25:23.0984 6056 C:\Windows\SysWOW64\avicap32.dll - ok

17:25:23.0999 6056 [ C335EC1182AC10B188705554E0BC1186 ] C:\Windows\SysWOW64\msvfw32.dll

17:25:23.0999 6056 C:\Windows\SysWOW64\msvfw32.dll - ok

17:25:23.0999 6056 [ 24498D084FAA7A459C91066EC241E1CE ] C:\Windows\SysWOW64\vfwwdm32.dll

17:25:23.0999 6056 C:\Windows\SysWOW64\vfwwdm32.dll - ok

17:25:23.0999 6056 [ D9EB000FC7C43833BC8E4E7A7F6FA3AE ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\coSvcPlg.dll

17:25:23.0999 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\coSvcPlg.dll - ok

17:25:24.0015 6056 [ 1A6F7C832BE552F67C3A034486A07FED ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccglog.dll

17:25:24.0015 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccglog.dll - ok

17:25:24.0015 6056 [ F2CA336DB46EC0941B08A11DD03620BD ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\coFFPlgn.dll

17:25:24.0015 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\coFFPlgn.dll - ok

17:25:24.0031 6056 [ F2CA336DB46EC0941B08A11DD03620BD ] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\components\coFFPlgn.dll

17:25:24.0031 6056 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\components\coFFPlgn.dll - ok

17:25:24.0031 6056 [ 95F84EDCE6FC2DC3E2DF82126D4C9CB3 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccjobmgr.dll

17:25:24.0031 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccjobmgr.dll - ok

17:25:24.0031 6056 [ 66872F61C1BBC99B530B9D37B7A61025 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccsubeng.dll

17:25:24.0031 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccsubeng.dll - ok

17:25:24.0046 6056 [ 1314E60A6339CD88BCBEACF702A8C8C7 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccemlpxy.dll

17:25:24.0046 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccemlpxy.dll - ok

17:25:24.0046 6056 [ 5A79B1723A1128E57239B5A713377E8E ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\iron.dll

17:25:24.0046 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\iron.dll - ok

17:25:24.0062 6056 [ 9577A29F09BD392DEE9786BC102DB6A4 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\busvc.dll

17:25:24.0062 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\busvc.dll - ok

17:25:24.0062 6056 [ 2146C133412A3E09E60D7D08CDD387DF ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\symredir.dll

17:25:24.0062 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\symredir.dll - ok

17:25:24.0077 6056 [ 2F7BC7AEA60585D0B56E00400D5E257E ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\bucomm.dll

17:25:24.0077 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\bucomm.dll - ok

17:25:24.0093 6056 [ 065878E29EBCC5B2C901AC92229D3167 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\bueng.dll

17:25:24.0093 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\bueng.dll - ok

17:25:24.0093 6056 [ 236F286E103FD44BD85FDD93097FD5DD ] C:\Windows\SysWOW64\SearchIndexer.exe

17:25:24.0093 6056 C:\Windows\SysWOW64\SearchIndexer.exe - ok

17:25:24.0109 6056 [ 6A9A804175AC6015F8843838D1FB9970 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\sndsvc.dll

17:25:24.0109 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\sndsvc.dll - ok

17:25:24.0109 6056 [ E0B340996A41C9A75DFA3B99BBA9C500 ] C:\Windows\System32\SearchIndexer.exe

17:25:24.0109 6056 C:\Windows\System32\SearchIndexer.exe - ok

17:25:24.0124 6056 [ 839F96DBAAFD3353E0B248A5E0BD2A51 ] C:\Windows\SysWOW64\rasapi32.dll

17:25:24.0124 6056 C:\Windows\SysWOW64\rasapi32.dll - ok

17:25:24.0140 6056 [ FFA7172354B9256DBB2CDD75F16F33FE ] C:\Windows\SysWOW64\rasman.dll

17:25:24.0140 6056 C:\Windows\SysWOW64\rasman.dll - ok

17:25:24.0140 6056 [ A10F446963B39EEAB50868944A3D8E99 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\symrdrsv.dll

17:25:24.0140 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\symrdrsv.dll - ok

17:25:24.0155 6056 [ 0915C4DB6DBC3BB9E11B7ECBBE4B7159 ] C:\Windows\SysWOW64\rtutils.dll

17:25:24.0155 6056 C:\Windows\SysWOW64\rtutils.dll - ok

17:25:24.0155 6056 [ 5277B1C52B53DD542BB0341AD8287F79 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\hncore.dll

17:25:24.0155 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\hncore.dll - ok

17:25:24.0171 6056 [ 26E049064069ADAAE40468E4B144873D ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\appmgr32.dll

17:25:24.0171 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\appmgr32.dll - ok

17:25:24.0171 6056 [ B1D03347BE3F47187E78CB9D873FCA48 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ncw.dll

17:25:24.0171 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ncw.dll - ok

17:25:24.0171 6056 [ 006F4A78D6C0014F18D638E77974E36B ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\avmodule.dll

17:25:24.0171 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\avmodule.dll - ok

17:25:24.0187 6056 [ 0241CB16136B9A4939CA0395768AE286 ] C:\Windows\SysWOW64\mssrch.dll

17:25:24.0187 6056 C:\Windows\SysWOW64\mssrch.dll - ok

17:25:24.0187 6056 [ 465DBF63A5049E4DB4BC5C12FFE781CB ] C:\Windows\SysWOW64\tquery.dll

17:25:24.0187 6056 C:\Windows\SysWOW64\tquery.dll - ok

17:25:24.0202 6056 [ 589DF683A6C81424A6CECE52ABF98A50 ] C:\Windows\System32\tquery.dll

17:25:24.0202 6056 C:\Windows\System32\tquery.dll - ok

17:25:24.0202 6056 [ A329EE5A003E92538DF55D72CAF17A80 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\defutdcd.dll

17:25:24.0202 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\defutdcd.dll - ok

17:25:24.0202 6056 [ 50AE7CE01C391218BCD8FE33200D4921 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\avpsvc32.dll

17:25:24.0202 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\avpsvc32.dll - ok

17:25:24.0218 6056 [ 7568CC720ACE4D03B84AF97817E745EF ] C:\Windows\System32\mssrch.dll

17:25:24.0218 6056 C:\Windows\System32\mssrch.dll - ok

17:25:24.0218 6056 [ 5B3772221354687B5BA82CBDED40693B ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\datastor.dll

17:25:24.0218 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\datastor.dll - ok

17:25:24.0233 6056 [ FFC9128367BA19F175562CAFE23BAF8F ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ducclib.dll

17:25:24.0233 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ducclib.dll - ok

17:25:24.0233 6056 [ 81600E2E27ED61427AAD865B9BCDDB9D ] C:\Windows\SysWOW64\msidle.dll

17:25:24.0233 6056 C:\Windows\SysWOW64\msidle.dll - ok

17:25:24.0233 6056 [ 3121A79D13A61562BE9CC902CD46B542 ] C:\Windows\System32\msidle.dll

17:25:24.0233 6056 C:\Windows\System32\msidle.dll - ok

17:25:24.0249 6056 [ 5E20B3E042A42EFEC419C3E74817FFE4 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\sqsvc.dll

17:25:24.0249 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\sqsvc.dll - ok

17:25:24.0249 6056 [ 636A2964A8D255A924680A99C493596B ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\cltpe.dll

17:25:24.0249 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\cltpe.dll - ok

17:25:24.0265 6056 [ 1CBF15FDB0310345A68972EB5C5B948F ] C:\Windows\SysWOW64\mssprxy.dll

17:25:24.0265 6056 C:\Windows\SysWOW64\mssprxy.dll - ok

17:25:24.0265 6056 [ ACE1BB07E0377E37A2C514CD2EC119B1 ] C:\Windows\System32\mssprxy.dll

17:25:24.0265 6056 C:\Windows\System32\mssprxy.dll - ok

17:25:24.0265 6056 [ A417752DCEFED9460887F7F3AD65B812 ] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130704.021\NAVENG32.DLL

17:25:24.0265 6056 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130704.021\NAVENG32.DLL - ok

17:25:24.0280 6056 [ FFBE713990C5CA6A444A94B055A173EF ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\avifc.dll

17:25:24.0280 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\avifc.dll - ok

17:25:24.0280 6056 [ B63E24E9271E99FD4540E3CA22A937DA ] C:\Windows\SysWOW64\en-US\tquery.dll.mui

17:25:24.0280 6056 C:\Windows\SysWOW64\en-US\tquery.dll.mui - ok

17:25:24.0296 6056 [ C9FB9038B15036CA28CF0B4BE2BED9BD ] C:\Windows\System32\en-US\tquery.dll.mui

17:25:24.0296 6056 C:\Windows\System32\en-US\tquery.dll.mui - ok

17:25:24.0296 6056 [ 14D289F63D9538306CB560C4CD12172F ] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130704.001\IDSxpx86.dll

17:25:24.0296 6056 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130704.001\IDSxpx86.dll - ok

17:25:24.0296 6056 [ 18D72340DDFB8F011C78490D13ADACC6 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\codatapr.dll

17:25:24.0296 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\codatapr.dll - ok

17:25:24.0311 6056 [ FD297F63C7BE5A1600EE19B7E3CA30FE ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\coshdobj.dll

17:25:24.0311 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\coshdobj.dll - ok

17:25:24.0311 6056 [ 0F30C6E40FDC964188C7DE7A9B37C942 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\budatacl.dll

17:25:24.0311 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\budatacl.dll - ok

17:25:24.0327 6056 [ C010B15045B1652EFEADD32C63D5890D ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\buprov.dll

17:25:24.0327 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\buprov.dll - ok

17:25:24.0327 6056 [ 4FC36B1BA8C8642EDD310A93D36008B1 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\gwrks32.dll

17:25:24.0327 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\gwrks32.dll - ok

17:25:24.0327 6056 [ 00120204D347C4FECE76F18E2A2EE295 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\gearaw32.dll

17:25:24.0327 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\gearaw32.dll - ok

17:25:24.0343 6056 [ F4ADADBB0A2B560D4F2AAB5DA623E5BE ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\tudatapr.dll

17:25:24.0343 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\tudatapr.dll - ok

17:25:24.0343 6056 [ 378A0748DE5ADF90BF9DB897DA8564E6 ] C:\Windows\System32\drivers\N360x64\1403010.016\srtsp64.sys

17:25:24.0343 6056 C:\Windows\System32\drivers\N360x64\1403010.016\srtsp64.sys - ok

17:25:24.0358 6056 [ A71B3E625DD48506084F651B485A31A9 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\qsplugin.dll

17:25:24.0358 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\qsplugin.dll - ok

17:25:24.0358 6056 [ 706C88C16EE19124DF09713B296CF6AE ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\cltlms.dll

17:25:24.0358 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\cltlms.dll - ok

17:25:24.0374 6056 [ 1FD37C00535502429DD964EC53D66FB8 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\bhsvcplg.dll

17:25:24.0374 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\bhsvcplg.dll - ok

17:25:24.0374 6056 [ EA40BEDF1F747F7E1D9211B1B0663FD7 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\spocclnt.dll

17:25:24.0374 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\spocclnt.dll - ok

17:25:24.0374 6056 [ 09362D91CF5631EBB1C99276E1DCDAF2 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\dscli.dll

17:25:24.0374 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\dscli.dll - ok

17:25:24.0389 6056 [ C4D7C006F3AD511B17BD7D808838E6F3 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\sqlite.dll

17:25:24.0389 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\sqlite.dll - ok

17:25:24.0389 6056 [ 02B4DE433FFCFE82C737A4B101AEF1B3 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\comm.dll

17:25:24.0389 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\comm.dll - ok

17:25:24.0405 6056 [ 1A628825B33AA564EB179851DAFC28CA ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\eventsvc.dll

17:25:24.0405 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\eventsvc.dll - ok

17:25:24.0405 6056 [ A24AE00D2BB2C572ED58581D4551256F ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\cltlmj.dll

17:25:24.0405 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\cltlmj.dll - ok

17:25:24.0421 6056 [ 51E63C3F6AA9BFF484C63D38D2BDD2A9 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\proxyclt.dll

17:25:24.0421 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\proxyclt.dll - ok

17:25:24.0421 6056 [ 28ED26B74EF2004C0E7D4802BA56293F ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ispwd.dll

17:25:24.0421 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ispwd.dll - ok

17:25:24.0421 6056 [ 37C0067B315D3F6BC3DCE26BCEB648EA ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\nahelper.dll

17:25:24.0421 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\nahelper.dll - ok

17:25:24.0436 6056 [ 18F2D656D28363939DEE16ADE2F7F127 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\bhclient.dll

17:25:24.0436 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\bhclient.dll - ok

17:25:24.0436 6056 [ C5D664FCEFE3B7E1541B38529A9E994A ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ipsplug.dll

17:25:24.0436 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ipsplug.dll - ok

17:25:24.0452 6056 [ C8AE1C9EFA61DB02804E9217F71B1007 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\isdatasv.dll

17:25:24.0452 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\isdatasv.dll - ok

17:25:24.0452 6056 [ 03861C52C83937D671FFCDF7C4B5BC65 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\fwcore.dll

17:25:24.0452 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\fwcore.dll - ok

17:25:24.0467 6056 [ 1EACA2B96A73B38F4C3A0D1FC33B3FED ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\fwgenplg.dll

17:25:24.0467 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\fwgenplg.dll - ok

17:25:24.0467 6056 [ EE91FC4637E3D69CA2CF32C50E5FB79F ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ashelper.dll

17:25:24.0467 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ashelper.dll - ok

17:25:24.0467 6056 [ 45EA374851DC1A316D6B5893B4CA76CF ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\fwhelper.dll

17:25:24.0467 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\fwhelper.dll - ok

17:25:24.0483 6056 [ 8AD1F52EB8191D250BEA79B693659D8B ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\asoehook.dll

17:25:24.0483 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\asoehook.dll - ok

17:25:24.0483 6056 [ E1AC581598D79B6C97066060270F8BC6 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\avpapp32.dll

17:25:24.0483 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\avpapp32.dll - ok

17:25:24.0499 6056 [ F3824924F00A5D8A5C35799B1EAB81CD ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\buuiplg.dll

17:25:24.0499 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\buuiplg.dll - ok

17:25:24.0499 6056 [ 8A19D3991F9F14B885CDE8BC640F6B68 ] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130704.021\ex64.sys

17:25:24.0499 6056 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130704.021\ex64.sys - ok

17:25:24.0499 6056 [ 56540E526B46E379A476FB5BC381B290 ] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130704.021\eng64.sys

17:25:24.0499 6056 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130704.021\eng64.sys - ok

17:25:24.0514 6056 [ CA3A6F3C9C963DA7BE8964848D739E9C ] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\BHEngine.dll

17:25:24.0514 6056 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130702.001\BHEngine.dll - ok

17:25:24.0514 6056 [ 824355011BF5AFF4C1B24178268EDB0B ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\cltaldis.dll

17:25:24.0514 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\cltaldis.dll - ok

17:25:24.0530 6056 [ D364B78FDA705DBC36674D8AF10255BE ] C:\Program Files (x86)\Norton Security Suite\MUI\20.3.1.22\09\01\cltres.loc

17:25:24.0530 6056 C:\Program Files (x86)\Norton Security Suite\MUI\20.3.1.22\09\01\cltres.loc - ok

17:25:24.0530 6056 [ F85AA579F2FFA89A836ED6C0DAC5A9F4 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\fwsesal.dll

17:25:24.0530 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\fwsesal.dll - ok

17:25:24.0530 6056 [ 5987EA8A82C53359BCD2C29D6588583E ] C:\Windows\SysWOW64\linkinfo.dll

17:25:24.0530 6056 C:\Windows\SysWOW64\linkinfo.dll - ok

17:25:24.0545 6056 [ 51193704964B43C719898783C394CE46 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\coactmgr.dll

17:25:24.0545 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\coactmgr.dll - ok

17:25:24.0545 6056 [ 996C6E958FD4981C2C44F3C754A23F44 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\idsaux.dll

17:25:24.0545 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\idsaux.dll - ok

17:25:24.0561 6056 [ C8333F1F77A1B2E25F2202E892CAF634 ] C:\Windows\SysWOW64\prnfldr.dll

17:25:24.0561 6056 C:\Windows\SysWOW64\prnfldr.dll - ok

17:25:24.0561 6056 [ 5D50BB423CCC09BCABFE9BD5551BFA08 ] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130704.001\IPSFFPl.dll

17:25:24.0561 6056 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130704.001\IPSFFPl.dll - ok

17:25:24.0561 6056 [ 13337A3FB17F2242487FD45488ED0485 ] C:\Windows\SysWOW64\vssapi.dll

17:25:24.0561 6056 C:\Windows\SysWOW64\vssapi.dll - ok

17:25:24.0577 6056 [ 45D5610E63EA3EAFCE94B12EC3F3EF7E ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\wincfi39.dll

17:25:24.0577 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\wincfi39.dll - ok

17:25:24.0577 6056 [ B940289C83121046BD6A60ACC6028593 ] C:\Windows\SysWOW64\vsstrace.dll

17:25:24.0577 6056 C:\Windows\SysWOW64\vsstrace.dll - ok

17:25:24.0592 6056 [ F6916EFC29D9953D5D0DF06882AE8E16 ] C:\Windows\SysWOW64\es.dll

17:25:24.0592 6056 C:\Windows\SysWOW64\es.dll - ok

17:25:24.0592 6056 [ 5521928AA79079565B7CB8FCE6806131 ] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

17:25:24.0592 6056 C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - ok

17:25:24.0592 6056 [ 1087649B78D941BFF585E079D8B4D39A ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\sdkcmn.dll

17:25:24.0592 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\sdkcmn.dll - ok

17:25:24.0608 6056 [ E1AC89F6C5252057E6062843E36A6701 ] C:\Windows\SysWOW64\SearchProtocolHost.exe

17:25:24.0608 6056 C:\Windows\SysWOW64\SearchProtocolHost.exe - ok

17:25:24.0608 6056 [ 5D50BB423CCC09BCABFE9BD5551BFA08 ] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn\components\ipsffpl.dll

17:25:24.0608 6056 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn\components\ipsffpl.dll - ok

17:25:24.0623 6056 [ A96A8FDD7D35F55DF08A8CEC067334ED ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\avmail.dll

17:25:24.0623 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\avmail.dll - ok

17:25:24.0623 6056 [ D9E21CBF9E6A87847AFFD39EA3FA28EE ] C:\Windows\System32\SearchProtocolHost.exe

17:25:24.0623 6056 C:\Windows\System32\SearchProtocolHost.exe - ok

17:25:24.0623 6056 [ A5D237B8673025B052C0E6FDB6A883E8 ] C:\Windows\SysWOW64\msshooks.dll

17:25:24.0623 6056 C:\Windows\SysWOW64\msshooks.dll - ok

17:25:24.0639 6056 [ D12A3D8CAA8380D9323771BB8C7C6CB9 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\asengine.dll

17:25:24.0639 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\asengine.dll - ok

17:25:24.0639 6056 [ D2A5B2B09F2AF5ED13BF494508B09788 ] C:\Windows\System32\msshooks.dll

17:25:24.0639 6056 C:\Windows\System32\msshooks.dll - ok

17:25:24.0655 6056 [ 81F08948A0F1475894C99D4D19A158A8 ] C:\Windows\SysWOW64\wshqos.dll

17:25:24.0655 6056 C:\Windows\SysWOW64\wshqos.dll - ok

17:25:24.0655 6056 [ A6CD6B3F71E13E2E45B727FB8A47EA87 ] C:\Windows\SysWOW64\SearchFilterHost.exe

17:25:24.0655 6056 C:\Windows\SysWOW64\SearchFilterHost.exe - ok

17:25:24.0655 6056 [ 3B6ACE8A4562B8181188E015D23A39EE ] C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

17:25:24.0655 6056 C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe - ok

17:25:24.0670 6056 [ A72B8AC6F76111F1C980B1B45F85DF97 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\uialert.dll

17:25:24.0670 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\uialert.dll - ok

17:25:24.0670 6056 [ 49A3AD5CE578CD77F445F3D244AEAB2D ] C:\Windows\System32\SearchFilterHost.exe

17:25:24.0670 6056 C:\Windows\System32\SearchFilterHost.exe - ok

17:25:24.0686 6056 [ AA794B099F776B37ACCDEAD00E0FBFC9 ] C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll

17:25:24.0686 6056 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - ok

17:25:24.0686 6056 [ 9F1CDEF3A366FFEC4857C4DB728E425E ] C:\Windows\SysWOW64\en-US\hid.dll.mui

17:25:24.0686 6056 C:\Windows\SysWOW64\en-US\hid.dll.mui - ok

17:25:24.0686 6056 [ 4476C54D84C792E6B9ECFE4C68BE50D0 ] C:\Program Files (x86)\iTunes\iTunesHelper.exe

17:25:24.0686 6056 C:\Program Files (x86)\iTunes\iTunesHelper.exe - ok

17:25:24.0701 6056 [ 409A4282B53D8CF731F4A7EE4E178A8D ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\userctxt.dll

17:25:24.0701 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\userctxt.dll - ok

17:25:24.0701 6056 [ E780C87CB6D58E54D47AF236AA66FAD7 ] C:\Program Files (x86)\VMware\VMware Player\hqtray.exe

17:25:24.0701 6056 C:\Program Files (x86)\VMware\VMware Player\hqtray.exe - ok

17:25:24.0717 6056 [ F0CF2905189A36DC0CF5C40AC3FB6B08 ] C:\Windows\SysWOW64\en-US\sens.dll.mui

17:25:24.0717 6056 C:\Windows\SysWOW64\en-US\sens.dll.mui - ok

17:25:24.0717 6056 [ 61E4289E91E88C90478D7F4BEB10DCF7 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe

17:25:24.0717 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe - ok

17:25:24.0717 6056 [ 7337A43BF4C98826FF50DEAB5377F6CC ] C:\Windows\SysWOW64\en-US\ulib.dll.mui

17:25:24.0717 6056 C:\Windows\SysWOW64\en-US\ulib.dll.mui - ok

17:25:24.0733 6056 [ E84DA43E726D043CA2DEE71F01DB261A ] C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

17:25:24.0733 6056 C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE - ok

17:25:24.0733 6056 [ 079D12BFED9E3E03D02A44BAF8FFA3A9 ] C:\Windows\SysWOW64\desk.cpl

17:25:24.0733 6056 C:\Windows\SysWOW64\desk.cpl - ok

17:25:24.0733 6056 [ BBE028D60D633EA07041CDD9F004D4DB ] C:\Windows\SysWOW64\en-US\desk.cpl.mui

17:25:24.0733 6056 C:\Windows\SysWOW64\en-US\desk.cpl.mui - ok

17:25:24.0748 6056 [ 5312D73BDCB32BC3DD361C429A25785E ] C:\Windows\System32\en-US\uDWM.dll.mui

17:25:24.0748 6056 C:\Windows\System32\en-US\uDWM.dll.mui - ok

17:25:24.0748 6056 [ 4D8158A96F98834147F85AF687644CC7 ] C:\Windows\SysWOW64\en-US\apds.dll.mui

17:25:24.0748 6056 C:\Windows\SysWOW64\en-US\apds.dll.mui - ok

17:25:24.0764 6056 [ CAFD59740A8D7121D41781F4768DE51D ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

17:25:24.0764 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe - ok

17:25:24.0764 6056 [ BA2B249CD7C8CE15E1A8D69ECAEE5FA3 ] C:\Windows\SysWOW64\main.cpl

17:25:24.0764 6056 C:\Windows\SysWOW64\main.cpl - ok

17:25:24.0764 6056 [ E3F1F417E80E40CBC3C953648241592F ] C:\Windows\SysWOW64\en-US\main.cpl.mui

17:25:24.0764 6056 C:\Windows\SysWOW64\en-US\main.cpl.mui - ok

17:25:24.0779 6056 [ A31A4FEA0A455FDAF92E5A3F73EB6EB4 ] C:\Windows\SysWOW64\en-US\apss.dll.mui

17:25:24.0779 6056 C:\Windows\SysWOW64\en-US\apss.dll.mui - ok

17:25:24.0779 6056 [ 628FE2BD6BC67DA0B620682379B74D98 ] C:\Windows\SysWOW64\en-US\smss.exe.mui

17:25:24.0779 6056 C:\Windows\SysWOW64\en-US\smss.exe.mui - ok

17:25:24.0795 6056 [ 887967EEA5D40BD23F9D6257E3F9697E ] C:\Windows\SysWOW64\en-US\ubpm.dll.mui

17:25:24.0795 6056 C:\Windows\SysWOW64\en-US\ubpm.dll.mui - ok

17:25:24.0795 6056 [ 63412EE8B4D5EAEBE43F50D5B3BB84F2 ] C:\Windows\SysWOW64\en-US\mshta.exe.mui

17:25:24.0795 6056 C:\Windows\SysWOW64\en-US\mshta.exe.mui - ok

17:25:24.0795 6056 [ 53E054880ADBB856ECE6EB10EDBB8A32 ] C:\Windows\SysWOW64\mmsys.cpl

17:25:24.0795 6056 C:\Windows\SysWOW64\mmsys.cpl - ok

17:25:24.0811 6056 [ 0BA1A4E86EF8F128C3F7CB4FF7FAF00C ] C:\Windows\SysWOW64\en-US\sccls.dll.mui

17:25:24.0811 6056 C:\Windows\SysWOW64\en-US\sccls.dll.mui - ok

17:25:24.0811 6056 [ 218E6FCC9FC9BC37F013A5C37991B8E4 ] C:\Windows\System32\en-US\scext.dll.mui

17:25:24.0811 6056 C:\Windows\System32\en-US\scext.dll.mui - ok

17:25:24.0811 6056 [ 8A3B69683E63808719D24E1C68C21CC7 ] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe

17:25:24.0811 6056 C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe - ok

17:25:24.0826 6056 [ FCA0670A06F5473675369D0A776CFC2D ] C:\Windows\SysWOW64\en-US\mssvp.dll.mui

17:25:24.0826 6056 C:\Windows\SysWOW64\en-US\mssvp.dll.mui - ok

17:25:24.0826 6056 [ 73A2B5AD029C5654B636DD46B16D9E79 ] C:\Windows\System32\en-US\KMSVC.DLL.MUI

17:25:24.0826 6056 C:\Windows\System32\en-US\KMSVC.DLL.MUI - ok

17:25:24.0842 6056 [ 33A8D1DA3AAFA6068ABF30560E39602A ] C:\Windows\SysWOW64\en-US\dmocx.dll.mui

17:25:24.0842 6056 C:\Windows\SysWOW64\en-US\dmocx.dll.mui - ok

17:25:24.0842 6056 [ 8ABCD82B927505EE90792BE86A8D5AAA ] C:\Windows\System32\en-US\eapsvc.dll.mui

17:25:24.0842 6056 C:\Windows\System32\en-US\eapsvc.dll.mui - ok

17:25:24.0857 6056 [ 2E006667445F285EC1C8CA3DDFC47CE2 ] C:\Windows\SysWOW64\en-US\ikeext.dll.mui

17:25:24.0857 6056 C:\Windows\SysWOW64\en-US\ikeext.dll.mui - ok

17:25:24.0857 6056 [ D1C8B0DC04347B6B9B5B3B9204DF6756 ] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe

17:25:24.0857 6056 C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe - ok

17:25:24.0857 6056 [ 88BC8632EF91AE30E447B29ED827CE05 ] C:\Windows\SysWOW64\en-US\csrsrv.dll.mui

17:25:24.0857 6056 C:\Windows\SysWOW64\en-US\csrsrv.dll.mui - ok

17:25:24.0873 6056 [ 14E8D715B1F4033EE11C5BAF264473FA ] C:\Windows\SysWOW64\en-US\mpssvc.dll.mui

17:25:24.0873 6056 C:\Windows\SysWOW64\en-US\mpssvc.dll.mui - ok

17:25:24.0873 6056 [ 4AFB1FB0B5579ECB91188F9E04B8B530 ] C:\Windows\SysWOW64\en-US\msimtf.dll.mui

17:25:24.0873 6056 C:\Windows\SysWOW64\en-US\msimtf.dll.mui - ok

17:25:24.0889 6056 [ 70EF2ABD01131D88C0E85B87B3A668FD ] C:\Windows\System32\en-US\sti_ci.dll.mui

17:25:24.0889 6056 C:\Windows\System32\en-US\sti_ci.dll.mui - ok

17:25:24.0889 6056 [ EF35597ABC76041304FB7B85926314FA ] C:\Windows\SysWOW64\en-US\keyiso.dll.mui

17:25:24.0889 6056 C:\Windows\SysWOW64\en-US\keyiso.dll.mui - ok

17:25:24.0889 6056 [ 3C20E62C8FA75ABE3A386F8FE873E154 ] C:\Windows\System32\en-US\wkssvc.dll.mui

17:25:24.0889 6056 C:\Windows\System32\en-US\wkssvc.dll.mui - ok

17:25:24.0904 6056 [ 213D1ADD15BC99F3C6F9316E938F094D ] C:\Windows\System32\en-US\trkwks.dll.mui

17:25:24.0904 6056 C:\Windows\System32\en-US\trkwks.dll.mui - ok

17:25:24.0904 6056 [ A851EC95B2B83B18A8C9277FE45EA18F ] C:\Windows\SysWOW64\en-US\sscore.dll.mui

17:25:24.0904 6056 C:\Windows\SysWOW64\en-US\sscore.dll.mui - ok

17:25:24.0904 6056 [ EE3A87861521C2D1171E9ADDD05E09ED ] C:\Windows\SysWOW64\en-US\devmgr.dll.mui

17:25:24.0904 6056 C:\Windows\SysWOW64\en-US\devmgr.dll.mui - ok

17:25:24.0920 6056 [ 04EFCF2769E9B23A0D1BD6299E8E18B5 ] C:\Windows\SysWOW64\en-US\winbio.dll.mui

17:25:24.0920 6056 C:\Windows\SysWOW64\en-US\winbio.dll.mui - ok

17:25:24.0920 6056 [ CABE4234E0BC22294BBEE4FAFD8BB4DF ] C:\Windows\SysWOW64\en-US\scrrun.dll.mui

17:25:24.0920 6056 C:\Windows\SysWOW64\en-US\scrrun.dll.mui - ok

17:25:24.0935 6056 [ CD0BC0F1EA885BA657A7CB17EF71ED7F ] C:\Windows\System32\en-US\dispci.dll.mui

17:25:24.0935 6056 C:\Windows\System32\en-US\dispci.dll.mui - ok

17:25:24.0935 6056 [ 30D5F532400D2B87D0FAF017C718BFDB ] C:\Windows\SysWOW64\en-US\comres.dll.mui

17:25:24.0935 6056 C:\Windows\SysWOW64\en-US\comres.dll.mui - ok

17:25:24.0935 6056 [ 901AA7A38CE13F14B6BBEC38C0595698 ] C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe

17:25:24.0935 6056 C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe - ok

17:25:24.0951 6056 [ 8192B2E274607D1D530F5C191698C544 ] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

17:25:24.0951 6056 C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe - ok

17:25:24.0951 6056 [ F00F94B605934481B2C2043CE0637E85 ] C:\Windows\SysWOW64\en-US\scesrv.dll.mui

17:25:24.0951 6056 C:\Windows\SysWOW64\en-US\scesrv.dll.mui - ok

17:25:24.0967 6056 [ 48C41B106714F72B188888969104A170 ] C:\Windows\System32\en-US\netman.dll.mui

17:25:24.0967 6056 C:\Windows\System32\en-US\netman.dll.mui - ok

17:25:24.0967 6056 [ 28564968973AC0BF7BE1C2B4B32568F9 ] C:\Windows\SysWOW64\en-US\srvsvc.dll.mui

17:25:24.0967 6056 C:\Windows\SysWOW64\en-US\srvsvc.dll.mui - ok

17:25:24.0967 6056 [ 5AE86CDDF1F5F882CE576B1D455021D8 ] C:\Windows\SysWOW64\en-US\shgina.dll.mui

17:25:24.0967 6056 C:\Windows\SysWOW64\en-US\shgina.dll.mui - ok

17:25:24.0982 6056 [ C8796602409C91D0B784C0AF740FC525 ] C:\Windows\SysWOW64\en-US\EAPQEC.DLL.MUI

17:25:24.0982 6056 C:\Windows\SysWOW64\en-US\EAPQEC.DLL.MUI - ok

17:25:24.0982 6056 [ 598C87C3EBF9AD8DDF63FCB6E814F4DF ] C:\Windows\SysWOW64\en-US\mstask.dll.mui

17:25:24.0982 6056 C:\Windows\SysWOW64\en-US\mstask.dll.mui - ok

17:25:24.0998 6056 [ 48BE298F7FD1BEF4D8FBACB04D8D95C4 ] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

17:25:24.0998 6056 C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe - ok

17:25:24.0998 6056 [ A08C010D859F8EB42BDD7E1D55B8CA27 ] C:\Windows\System32\mscoree.dll

17:25:24.0998 6056 C:\Windows\System32\mscoree.dll - ok

17:25:24.0998 6056 [ DB67C7C62038BDE813CB6486581A7611 ] C:\Windows\SysWOW64\mssph.dll

17:25:24.0998 6056 C:\Windows\SysWOW64\mssph.dll - ok

17:25:25.0013 6056 [ 9FF8F684BACF326082E5562F7C104A79 ] C:\Windows\SysWOW64\d2d1.dll

17:25:25.0013 6056 C:\Windows\SysWOW64\d2d1.dll - ok

17:25:25.0013 6056 [ 48041BAEB60CE5F34F13CC2A1361E49C ] C:\Windows\System32\mssph.dll

17:25:25.0013 6056 C:\Windows\System32\mssph.dll - ok

17:25:25.0029 6056 [ 0ED04FAA4DC1974FE669AB3A945CBA04 ] C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe

17:25:25.0029 6056 C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe - ok

17:25:25.0029 6056 [ 8BC9DB92C4B2F3BE89185BEAB2AFC1F6 ] C:\Windows\SysWOW64\mapi32.dll

17:25:25.0029 6056 C:\Windows\SysWOW64\mapi32.dll - ok

17:25:25.0045 6056 [ 8F4BB0CFECED925D440ABC2481278360 ] C:\Windows\System32\mapi32.dll

17:25:25.0045 6056 C:\Windows\System32\mapi32.dll - ok

17:25:25.0045 6056 [ FB4EB9352B7D698E6B3C2AA2ED724DAD ] C:\Windows\SysWOW64\authz.dll

17:25:25.0045 6056 C:\Windows\SysWOW64\authz.dll - ok

17:25:25.0045 6056 [ 9ACCBC5891BA51B5B29C1A88F80D4CE3 ] C:\Program Files (x86)\QuickTime\QTTask.exe

17:25:25.0045 6056 C:\Program Files (x86)\QuickTime\QTTask.exe - ok

17:25:25.0060 6056 [ D63797E8E7781EE1500A810CB6194FA6 ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

17:25:25.0060 6056 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe - ok

17:25:25.0060 6056 [ 4076E418CD3EB0E09FFBCD828C35CE26 ] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

17:25:25.0060 6056 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe - ok

17:25:25.0076 6056 [ C50911A387912D1397E777E24EFD36EB ] C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe

17:25:25.0076 6056 C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe - ok

17:25:25.0076 6056 [ 94BFCE236D6340011721470E394056E3 ] C:\Program Files\IDT\WDM\sttray64.exe

17:25:25.0076 6056 C:\Program Files\IDT\WDM\sttray64.exe - ok

17:25:25.0076 6056 [ 1EA7969E3271CBC59E1730697DC74682 ] C:\Windows\System32\qmgr.dll

17:25:25.0076 6056 C:\Windows\System32\qmgr.dll - ok

17:25:25.0091 6056 [ DB282FA0CBA880D36BA5FBE748BD6F4F ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe

17:25:25.0091 6056 C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe - ok

17:25:25.0091 6056 [ CC37819A9C45FDF9E0577D71D8044319 ] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

17:25:25.0091 6056 C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe - ok

17:25:25.0091 6056 [ 0552A8684BF7566F744D5B19FF6AEC6B ] C:\Windows\SysWOW64\bitsperf.dll

17:25:25.0091 6056 C:\Windows\SysWOW64\bitsperf.dll - ok

17:25:25.0107 6056 [ 29409ED7400CA5BCCC30C0EE5147A60D ] C:\Windows\System32\bitsperf.dll

17:25:25.0107 6056 C:\Windows\System32\bitsperf.dll - ok

17:25:25.0107 6056 [ D9431DCF90B0253773F51FDEFE7FD42F ] C:\Windows\System32\bitsigd.dll

17:25:25.0107 6056 C:\Windows\System32\bitsigd.dll - ok

17:25:25.0123 6056 [ C5A75EB48E2344ABDC162BDA79E16841 ] C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

17:25:25.0123 6056 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe - ok

17:25:25.0123 6056 [ 954EA9B34F155C844B11F4047A8F6F89 ] C:\Windows\SysWOW64\upnp.dll

17:25:25.0123 6056 C:\Windows\SysWOW64\upnp.dll - ok

17:25:25.0123 6056 [ 96DB78C9C50CEED9DA5050EFFEE272A2 ] C:\Windows\System32\upnp.dll

17:25:25.0123 6056 C:\Windows\System32\upnp.dll - ok

17:25:25.0138 6056 [ 28E2231BD34A39C854BDF3923AB2FF86 ] C:\Windows\SysWOW64\ssdpapi.dll

17:25:25.0138 6056 C:\Windows\SysWOW64\ssdpapi.dll - ok

17:25:25.0138 6056 [ E5F7C30EDF0892667933BE879F067D67 ] C:\Windows\SysWOW64\msvcr100_clr0400.dll

17:25:25.0138 6056 C:\Windows\SysWOW64\msvcr100_clr0400.dll - ok

17:25:25.0138 6056 [ 5259D6B68ABB8253792458FE94D9D006 ] C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll

17:25:25.0138 6056 C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll - ok

17:25:25.0154 6056 [ D6D26A698BCCD17AB0761E6221C5F3C4 ] C:\Windows\assembly\GAC_32\BDATunePIA\6.1.0.0__31bf3856ad364e35\BDATunePIA.dll

17:25:25.0154 6056 C:\Windows\assembly\GAC_32\BDATunePIA\6.1.0.0__31bf3856ad364e35\BDATunePIA.dll - ok

17:25:25.0154 6056 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] C:\Windows\System32\ssdpsrv.dll

17:25:25.0154 6056 C:\Windows\System32\ssdpsrv.dll - ok

17:25:25.0169 6056 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

17:25:25.0169 6056 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe - ok

17:25:25.0169 6056 [ 21D3A18769EC2C4E56756D04E989A221 ] C:\Windows\SysWOW64\msxml3.dll

17:25:25.0169 6056 C:\Windows\SysWOW64\msxml3.dll - ok

17:25:25.0169 6056 [ CB21CD39637AC13F3455454B2F648257 ] C:\Windows\System32\msvcr100_clr0400.dll

17:25:25.0169 6056 C:\Windows\System32\msvcr100_clr0400.dll - ok

17:25:25.0185 6056 [ BB1FC298BE53AAB1E110F6E786BD8AC5 ] C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe

17:25:25.0185 6056 C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe - ok

17:25:25.0185 6056 [ 02CD5B2C3B017122CAC00BDB520CD7AC ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll

17:25:25.0185 6056 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll - ok

17:25:25.0201 6056 [ 2C1BB3AD51826AA96C9802CBC123814F ] C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\51a23687fdafc32b697f5a719e364651\mscorlib.ni.dll

17:25:25.0201 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\51a23687fdafc32b697f5a719e364651\mscorlib.ni.dll - ok

17:25:25.0201 6056 [ 1B1431D9520C7578AD5633ED2A70625F ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll

17:25:25.0201 6056 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll - ok

17:25:25.0201 6056 [ 9682D5B9D9309377C1A7E08C3E6B7B3D ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System\6be6efa1e2ffc9d46e99839edac5c5a8\System.ni.dll

17:25:25.0201 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\System\6be6efa1e2ffc9d46e99839edac5c5a8\System.ni.dll - ok

17:25:25.0216 6056 [ D36AE1B392FAA88FBEF39DE1142DF051 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\f5ec8051a7f0dc49a56aa2563039702e\System.ServiceProcess.ni.dll

17:25:25.0216 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\f5ec8051a7f0dc49a56aa2563039702e\System.ServiceProcess.ni.dll - ok

17:25:25.0216 6056 [ 4444C18E9B847E1058DB4BF909A52B34 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\52e5192b6783ee92246b583c36e85f95\System.Runtime.Remoting.ni.dll

17:25:25.0216 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Remo#\52e5192b6783ee92246b583c36e85f95\System.Runtime.Remoting.ni.dll - ok

17:25:25.0232 6056 [ 63F18EFC8842E8C053C86952E9768AA8 ] C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.ServiceManager\7.0.0.1__afd7346f05a57c11\HP.SupportFramework.ServiceManager.dll

17:25:25.0232 6056 C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.ServiceManager\7.0.0.1__afd7346f05a57c11\HP.SupportFramework.ServiceManager.dll - ok

17:25:25.0232 6056 [ 0A94DE4AA9864D312E60D747FD249ABE ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsec.dll

17:25:25.0232 6056 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsec.dll - ok

17:25:25.0247 6056 [ 72910F1DEB838E6E08A9017BFB7D4F0B ] C:\Windows\SysWOW64\browcli.dll

17:25:25.0247 6056 C:\Windows\SysWOW64\browcli.dll - ok

17:25:25.0247 6056 [ 2B6D4D96F1F895033D4AC011AB1531F6 ] C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.Common\7.0.0.1__41bdec5abf54f6dc\HP.SupportFramework.Common.dll

17:25:25.0247 6056 C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.Common\7.0.0.1__41bdec5abf54f6dc\HP.SupportFramework.Common.dll - ok

17:25:25.0247 6056 [ 012787CEB35505EB78DF82E0A0072888 ] C:\Windows\System32\browcli.dll

17:25:25.0247 6056 C:\Windows\System32\browcli.dll - ok

17:25:25.0263 6056 [ 850BD2D2D9CB5894935C3B6333CAD6FD ] C:\Windows\System32\riched20.dll

17:25:25.0263 6056 C:\Windows\System32\riched20.dll - ok

17:25:25.0263 6056 [ E17E0188BB90FAE42D83E98707EFA59C ] C:\Windows\System32\sppsvc.exe

17:25:25.0263 6056 C:\Windows\System32\sppsvc.exe - ok

17:25:25.0263 6056 [ FFF95479C7AB1550F0750A5D01744211 ] C:\Windows\System32\drivers\spsys.sys

17:25:25.0263 6056 C:\Windows\System32\drivers\spsys.sys - ok

17:25:25.0279 6056 [ A9F3BFC9345F49614D5859EC95B9E994 ] C:\Program Files\Windows Media Player\wmpnetwk.exe

17:25:25.0279 6056 C:\Program Files\Windows Media Player\wmpnetwk.exe - ok

17:25:25.0279 6056 [ 5CF15474FFDB5005E54958DF6EDD97AB ] C:\Windows\SysWOW64\wmdrmdev.dll

17:25:25.0279 6056 C:\Windows\SysWOW64\wmdrmdev.dll - ok

17:25:25.0294 6056 [ 47D052D9EE1FD3BA2A55D13F61E3EF24 ] C:\Windows\SysWOW64\drmv2clt.dll

17:25:25.0294 6056 C:\Windows\SysWOW64\drmv2clt.dll - ok

17:25:25.0294 6056 [ 40B82688907A7DBA4DB3B5ADDE3EAB3B ] C:\Windows\SysWOW64\mfplat.dll

17:25:25.0294 6056 C:\Windows\SysWOW64\mfplat.dll - ok

17:25:25.0294 6056 [ EA2B00551F3E7B3D5F7FB730A55F8246 ] C:\Windows\SysWOW64\blackbox.dll

17:25:25.0294 6056 C:\Windows\SysWOW64\blackbox.dll - ok

17:25:25.0310 6056 [ F6F22291024906E43D135A4B1705FEAC ] C:\Windows\System32\sppwinob.dll

17:25:25.0310 6056 C:\Windows\System32\sppwinob.dll - ok

17:25:25.0310 6056 [ 139D3AB6AA920C34C50CBFFB9EB7D222 ] C:\Windows\SysWOW64\avrt.dll

17:25:25.0310 6056 C:\Windows\SysWOW64\avrt.dll - ok

17:25:25.0310 6056 [ E36112A8A6C7F840169A7E92C12F4203 ] C:\Windows\System32\wsock32.dll

17:25:25.0310 6056 C:\Windows\System32\wsock32.dll - ok

17:25:25.0325 6056 [ 423982DD851406A52B6399DDB196C606 ] C:\Windows\System32\wmdrmdev.dll

17:25:25.0325 6056 C:\Windows\System32\wmdrmdev.dll - ok

17:25:25.0325 6056 [ 2C1055E2C6D42753241FB2A129136994 ] C:\Windows\System32\drmv2clt.dll

17:25:25.0325 6056 C:\Windows\System32\drmv2clt.dll - ok

17:25:25.0325 6056 [ 54B5DCD55B223BC5DF50B82E1E9E86B1 ] C:\Windows\System32\mfplat.dll

17:25:25.0325 6056 C:\Windows\System32\mfplat.dll - ok

17:25:25.0341 6056 [ E8B1FE6669397D1772D8196DF0E57A9E ] C:\Windows\System32\wscsvc.dll

17:25:25.0341 6056 C:\Windows\System32\wscsvc.dll - ok

17:25:25.0341 6056 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] C:\Windows\System32\wuaueng.dll

17:25:25.0341 6056 C:\Windows\System32\wuaueng.dll - ok

17:25:25.0357 6056 [ 97A891E2BF7FDA830BCFC6269DA3F5E9 ] C:\Windows\System32\blackbox.dll

17:25:25.0357 6056 C:\Windows\System32\blackbox.dll - ok

17:25:25.0357 6056 [ 7A6986DD659B96398A11AF5173892715 ] C:\Windows\SysWOW64\cabinet.dll

17:25:25.0357 6056 C:\Windows\SysWOW64\cabinet.dll - ok

17:25:25.0357 6056 [ FA43D418BC945D27D0625B697B8442B5 ] C:\Windows\System32\cabinet.dll

17:25:25.0357 6056 C:\Windows\System32\cabinet.dll - ok

17:25:25.0372 6056 [ 2B373B5F7E36B5ED5DA176D4400EF091 ] C:\Windows\System32\sppobjs.dll

17:25:25.0372 6056 C:\Windows\System32\sppobjs.dll - ok

17:25:25.0372 6056 [ 387A8A473ECC5BA02CF453277C1F3274 ] C:\Windows\SysWOW64\mspatcha.dll

17:25:25.0372 6056 C:\Windows\SysWOW64\mspatcha.dll - ok

17:25:25.0388 6056 [ 1957D49A9613FAAD1C73B508CCE02AA5 ] C:\Windows\SysWOW64\wmp.dll

17:25:25.0388 6056 C:\Windows\SysWOW64\wmp.dll - ok

17:25:25.0388 6056 [ 1EB82516F21F27EED1833B4F9FD9614E ] C:\Windows\System32\wmp.dll

17:25:25.0388 6056 C:\Windows\System32\wmp.dll - ok

17:25:25.0388 6056 [ 0FBC74AA20FE0AE6884279F893169C60 ] C:\Windows\SysWOW64\wmploc.DLL

17:25:25.0388 6056 C:\Windows\SysWOW64\wmploc.DLL - ok

17:25:25.0403 6056 [ 617F6EC0AC677C685479C1D0D1E76C6F ] C:\Windows\System32\mspatcha.dll

17:25:25.0403 6056 C:\Windows\System32\mspatcha.dll - ok

17:25:25.0403 6056 [ 92E0508D924512F63FFEEFE498CBD11F ] C:\Windows\System32\p2pcollab.dll

17:25:25.0403 6056 C:\Windows\System32\p2pcollab.dll - ok

17:25:25.0403 6056 [ 582AC6D9873E31DFA28A4547270862DD ] C:\Windows\System32\QAGENTRT.DLL

17:25:25.0403 6056 C:\Windows\System32\QAGENTRT.DLL - ok

17:25:25.0419 6056 [ 506A83A3BEEE9FCA09F0170DE9FC7D1B ] C:\Windows\System32\fveui.dll

17:25:25.0419 6056 C:\Windows\System32\fveui.dll - ok

17:25:25.0419 6056 [ E19AD0D49BFF5938B3E374873AC174DE ] C:\Windows\System32\wmploc.DLL

17:25:25.0419 6056 C:\Windows\System32\wmploc.DLL - ok

17:25:25.0435 6056 [ 7D4DC95A1F5E0818E74A399960569EA1 ] C:\Windows\SysWOW64\wuapi.dll

17:25:25.0435 6056 C:\Windows\SysWOW64\wuapi.dll - ok

17:25:25.0435 6056 [ C47F35CC6FA4F1BDBEF8F87AC1A46537 ] C:\Windows\System32\wuapi.dll

17:25:25.0435 6056 C:\Windows\System32\wuapi.dll - ok

17:25:25.0435 6056 [ FB633DCC8664E4CCACF562DB5BAE38CF ] C:\Windows\SysWOW64\wups.dll

17:25:25.0435 6056 C:\Windows\SysWOW64\wups.dll - ok

17:25:25.0450 6056 [ E746ED90132C6B6313CE9179F56BD31D ] C:\Windows\System32\wups.dll

17:25:25.0450 6056 C:\Windows\System32\wups.dll - ok

17:25:25.0450 6056 [ EAA2B8155272BC5789E81E7819518559 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\wscstub.exe

17:25:25.0450 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\wscstub.exe - ok

17:25:25.0450 6056 [ A5BE518E515EF80EFD10B6727F31E366 ] C:\Program Files\Internet Explorer\ieproxy.dll

17:25:25.0450 6056 C:\Program Files\Internet Explorer\ieproxy.dll - ok

17:25:25.0466 6056 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] C:\Windows\SysWOW64\provsvc.dll

17:25:25.0466 6056 C:\Windows\SysWOW64\provsvc.dll - ok

17:25:25.0466 6056 [ 3F2B83695E5BF11930C16AF50E991F96 ] C:\Windows\SysWOW64\wmpps.dll

17:25:25.0466 6056 C:\Windows\SysWOW64\wmpps.dll - ok

17:25:25.0481 6056 [ 355A138ABDFD43FBABCAE3A1B06AB93D ] C:\Windows\System32\wmpps.dll

17:25:25.0481 6056 C:\Windows\System32\wmpps.dll - ok

17:25:25.0481 6056 [ 7B97346CE563B74BBCC120FC83E5A6D9 ] C:\Windows\SysWOW64\wmpmde.dll

17:25:25.0481 6056 C:\Windows\SysWOW64\wmpmde.dll - ok

17:25:25.0481 6056 [ F149E8CAE538DBF7059B00326673F602 ] C:\Windows\System32\wmpmde.dll

17:25:25.0481 6056 C:\Windows\System32\wmpmde.dll - ok

17:25:25.0497 6056 [ 8CD1DEE212E52B9C22E66DBA44991D32 ] C:\Windows\SysWOW64\httpapi.dll

17:25:25.0497 6056 C:\Windows\SysWOW64\httpapi.dll - ok

17:25:25.0497 6056 [ 5893EBDCE371174AC89ECD7731DD6D77 ] C:\Windows\SysWOW64\pcwum.dll

17:25:25.0497 6056 C:\Windows\SysWOW64\pcwum.dll - ok

17:25:25.0497 6056 [ E0D3DEAB2BE285BAA18B5BF24EBD880D ] C:\Windows\SysWOW64\WinSATAPI.dll

17:25:25.0497 6056 C:\Windows\SysWOW64\WinSATAPI.dll - ok

17:25:25.0513 6056 [ 5526C01DA71D2CD10ABDA7AE155560E9 ] C:\Windows\System32\WinSATAPI.dll

17:25:25.0513 6056 C:\Windows\System32\WinSATAPI.dll - ok

17:25:25.0513 6056 [ EAADD6E47ED2A7003ACE1793B98CF63F ] C:\Windows\SysWOW64\msxml6.dll

17:25:25.0513 6056 C:\Windows\SysWOW64\msxml6.dll - ok

17:25:25.0528 6056 [ FB4045578F5180BDB1963AB352B78548 ] C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

17:25:25.0528 6056 C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll - ok

17:25:25.0528 6056 [ 66C87DB880052104808507D6FA84D68E ] C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

17:25:25.0528 6056 C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL - ok

17:25:25.0528 6056 [ CBBD4D79EEC3EF5A4ADAE9697944C6B9 ] C:\Windows\SysWOW64\MSMPEG2ENC.DLL

17:25:25.0528 6056 C:\Windows\SysWOW64\MSMPEG2ENC.DLL - ok

17:25:25.0544 6056 [ 28A7D7C7E2FDD1D55F12F750CD6331EC ] C:\Windows\System32\MSMPEG2ENC.DLL

17:25:25.0544 6056 C:\Windows\System32\MSMPEG2ENC.DLL - ok

17:25:25.0544 6056 [ 46767946E7B559D981C1DC04EC0AB36F ] C:\Windows\System32\devenum.dll

17:25:25.0544 6056 C:\Windows\System32\devenum.dll - ok

17:25:25.0544 6056 [ 833FBB672460EFCE8011D262175FAD33 ] C:\Windows\SysWOW64\upnphost.dll

17:25:25.0544 6056 C:\Windows\SysWOW64\upnphost.dll - ok

17:25:25.0559 6056 [ D47EC6A8E81633DD18D2436B19BAF6DE ] C:\Windows\System32\upnphost.dll

17:25:25.0559 6056 C:\Windows\System32\upnphost.dll - ok

17:25:25.0559 6056 [ D412B1B72C5AB020218E9A047D90CA05 ] C:\Windows\SysWOW64\wmsgapi.dll

17:25:25.0559 6056 C:\Windows\SysWOW64\wmsgapi.dll - ok

17:25:25.0575 6056 [ 7FE0D0C8F53735EA17C9AE93EFE7AD5A ] C:\Windows\System32\wups2.dll

17:25:25.0575 6056 C:\Windows\System32\wups2.dll - ok

17:25:25.0575 6056 [ 7B7C677C14CAEF21C6C1FF5D64CE2360 ] C:\Program Files (x86)\Norton Security Suite\Branding\20.1.0.24\09\01\isBrand.loc

17:25:25.0575 6056 C:\Program Files (x86)\Norton Security Suite\Branding\20.1.0.24\09\01\isBrand.loc - ok

17:25:25.0575 6056 [ A0035F776F9357720BFED276FA191320 ] C:\Program Files (x86)\Norton Security Suite\MUI\20.3.1.22\09\01\isres.loc

17:25:25.0575 6056 C:\Program Files (x86)\Norton Security Suite\MUI\20.3.1.22\09\01\isres.loc - ok

17:25:25.0591 6056 [ 8258362DDB18B644A82D8B5061AD9426 ] C:\Windows\SysWOW64\wscisvif.dll

17:25:25.0591 6056 C:\Windows\SysWOW64\wscisvif.dll - ok

17:25:25.0591 6056 [ A8CDF3768604FF95B54669E20053D569 ] C:\Windows\SysWOW64\wscapi.dll

17:25:25.0591 6056 C:\Windows\SysWOW64\wscapi.dll - ok

17:25:25.0606 6056 [ 7DF186D86CF8C571A12AAB788C777F84 ] C:\Windows\SysWOW64\wscproxystub.dll

17:25:25.0606 6056 C:\Windows\SysWOW64\wscproxystub.dll - ok

17:25:25.0606 6056 [ 230EA9ABBC3432CDE388F4891E76E867 ] C:\Windows\SysWOW64\udhisapi.dll

17:25:25.0606 6056 C:\Windows\SysWOW64\udhisapi.dll - ok

17:25:25.0606 6056 [ 71E68F2443A80BD4DA89181889C457EA ] C:\Windows\System32\udhisapi.dll

17:25:25.0606 6056 C:\Windows\System32\udhisapi.dll - ok

17:25:25.0622 6056 [ A0A65D306A5490D2EB8E7DE66898ECFD ] C:\Windows\System32\linkinfo.dll

17:25:25.0622 6056 C:\Windows\System32\linkinfo.dll - ok

17:25:25.0622 6056 [ 3D57FFBAD3ED16B63DE3879BAB0FB56F ] C:\Windows\SysWOW64\networkexplorer.dll

17:25:25.0622 6056 C:\Windows\SysWOW64\networkexplorer.dll - ok

17:25:25.0622 6056 [ 405F4D32D2185F1F1BD753D8EEAFFB3A ] C:\Windows\System32\networkexplorer.dll

17:25:25.0622 6056 C:\Windows\System32\networkexplorer.dll - ok

17:25:25.0637 6056 [ D6692338B985D4A0CA52B828314D897D ] C:\Windows\SysWOW64\drprov.dll

17:25:25.0637 6056 C:\Windows\SysWOW64\drprov.dll - ok

17:25:25.0637 6056 [ 5F639198C4137075DA50E61C23963C11 ] C:\Windows\System32\drprov.dll

17:25:25.0637 6056 C:\Windows\System32\drprov.dll - ok

17:25:25.0653 6056 [ D7B7159BC8374E87D8C45A30377A3440 ] C:\Windows\SysWOW64\ntlanman.dll

17:25:25.0653 6056 C:\Windows\SysWOW64\ntlanman.dll - ok

17:25:25.0653 6056 [ BC566D17914B07ABAAB3A5A385CC3300 ] C:\Windows\System32\ntlanman.dll

17:25:25.0653 6056 C:\Windows\System32\ntlanman.dll - ok

17:25:25.0653 6056 [ 284B59D7B56FC76C80E622AB856B1FAB ] C:\Windows\SysWOW64\davclnt.dll

17:25:25.0653 6056 C:\Windows\SysWOW64\davclnt.dll - ok

17:25:25.0669 6056 [ B3A33600DCDFB84D7FBE09ADEB1C9B8A ] C:\Windows\System32\davclnt.dll

17:25:25.0669 6056 C:\Windows\System32\davclnt.dll - ok

17:25:25.0669 6056 [ 179BECE8D1A4C488DDB7191FF9BE3FB0 ] C:\Windows\SysWOW64\davhlpr.dll

17:25:25.0669 6056 C:\Windows\SysWOW64\davhlpr.dll - ok

17:25:25.0669 6056 [ 45B24A357C801CE62052FE0CDC8BD4D2 ] C:\Windows\System32\davhlpr.dll

17:25:25.0669 6056 C:\Windows\System32\davhlpr.dll - ok

galen222 · July 6, 2013

Part 5 TDSSKiller Report

17:25:25.0684 6056 [ F8E4E9839D4278A5F3F77E8101D899C4 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\qbackup.dll

17:25:25.0684 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\qbackup.dll - ok

17:25:25.0684 6056 [ EC6F5E416749AC9CC17DBE4EB5687625 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccscanw.dll

17:25:25.0684 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccscanw.dll - ok

17:25:25.0700 6056 [ F890C197ADF21D08DBA4643C9AA54B9F ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ecmldr32.dll

17:25:25.0700 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ecmldr32.dll - ok

17:25:25.0700 6056 [ 755D0F9F93E5893EBDA81FF12F0AEE10 ] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130704.021\ECMSVR32.DLL

17:25:25.0700 6056 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130704.021\ECMSVR32.DLL - ok

17:25:25.0700 6056 [ F16C0CD6CDF7CD5704492C7717889BA3 ] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130704.021\NAVEX32A.DLL

17:25:25.0700 6056 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130704.021\NAVEX32A.DLL - ok

17:25:25.0715 6056 [ 590D5C506044FE02FF7643E32FF9BDAC ] C:\Windows\SysWOW64\wer.dll

17:25:25.0715 6056 C:\Windows\SysWOW64\wer.dll - ok

17:25:25.0715 6056 [ 4F6E72B34ED3DC53DCC5E8708E60B61F ] C:\Windows\SysWOW64\security.dll

17:25:25.0715 6056 C:\Windows\SysWOW64\security.dll - ok

17:25:25.0715 6056 [ 0D893F8D145D3B125B0226727C243A69 ] C:\Windows\System32\security.dll

17:25:25.0715 6056 C:\Windows\System32\security.dll - ok

17:25:25.0731 6056 [ A42E7748BE906434C5FD17161D168C20 ] C:\Windows\SysWOW64\schedcli.dll

17:25:25.0731 6056 C:\Windows\SysWOW64\schedcli.dll - ok

17:25:25.0731 6056 [ C4BFE4B61086416B0529212F92BCE081 ] C:\Windows\System32\schedcli.dll

17:25:25.0731 6056 C:\Windows\System32\schedcli.dll - ok

17:25:25.0747 6056 [ 5EA9A0950F322BFA382AF277801C0307 ] C:\Windows\System32\wbem\wmipcima.dll

17:25:25.0747 6056 C:\Windows\System32\wbem\wmipcima.dll - ok

17:25:25.0747 6056 [ 907281ED4AD35D41B29FFDC211EBAD80 ] C:\Windows\SysWOW64\wmi.dll

17:25:25.0747 6056 C:\Windows\SysWOW64\wmi.dll - ok

17:25:25.0762 6056 [ C00DB14550E4BD49737F311C644E45FF ] C:\Windows\System32\wmi.dll

17:25:25.0762 6056 C:\Windows\System32\wmi.dll - ok

17:25:25.0762 6056 [ 40CAEEE0EAF1B8569F7C8DF6420F2CB9 ] C:\Windows\SysWOW64\sfc.dll

17:25:25.0762 6056 C:\Windows\SysWOW64\sfc.dll - ok

17:25:25.0762 6056 [ 84799328D87B3091A3BDD251E1AD31F9 ] C:\Windows\SysWOW64\sfc_os.dll

17:25:25.0762 6056 C:\Windows\SysWOW64\sfc_os.dll - ok

17:25:25.0778 6056 [ 162D247E995EAEBF3EF4289069E1111C ] C:\Windows\SysWOW64\devrtl.dll

17:25:25.0778 6056 C:\Windows\SysWOW64\devrtl.dll - ok

17:25:25.0778 6056 [ 2CFA4569350B7F84F815E9EC34E85766 ] C:\Windows\SysWOW64\SndVolSSO.dll

17:25:25.0778 6056 C:\Windows\SysWOW64\SndVolSSO.dll - ok

17:25:25.0778 6056 [ 63DF770DF74ACB370EF5A16727069AAF ] C:\Windows\SysWOW64\hid.dll

17:25:25.0778 6056 C:\Windows\SysWOW64\hid.dll - ok

17:25:25.0793 6056 [ 243974EC02F7AE49E4179C54624143AB ] C:\Windows\SysWOW64\MMDevAPI.dll

17:25:25.0793 6056 C:\Windows\SysWOW64\MMDevAPI.dll - ok

17:25:25.0793 6056 [ 7E9917D5309A90E7576653BFE39F80D8 ] C:\Windows\SysWOW64\timedate.cpl

17:25:25.0793 6056 C:\Windows\SysWOW64\timedate.cpl - ok

17:25:25.0793 6056 [ FB10715E4099AF9FA389C71873245226 ] C:\Windows\System32\timedate.cpl

17:25:25.0793 6056 C:\Windows\System32\timedate.cpl - ok

17:25:25.0809 6056 [ 22A0AE97360C1B146FDD9AA55AC0E989 ] C:\Windows\System32\shdocvw.dll

17:25:25.0809 6056 C:\Windows\System32\shdocvw.dll - ok

17:25:25.0809 6056 [ F1278B3514EA6FA9BC39B20D26139AAC ] C:\Windows\SysWOW64\msiltcfg.dll

17:25:25.0809 6056 C:\Windows\SysWOW64\msiltcfg.dll - ok

17:25:25.0809 6056 [ 69754747274B76E7FAF287239333D7E6 ] C:\Windows\System32\msiltcfg.dll

17:25:25.0809 6056 C:\Windows\System32\msiltcfg.dll - ok

17:25:25.0825 6056 [ 5EB6E9C8BE1ACC5830780E0F9A846255 ] C:\Windows\System32\msi.dll

17:25:25.0825 6056 C:\Windows\System32\msi.dll - ok

17:25:25.0825 6056 [ 64E211E0FDFCE4D186DF58BB7D0503BC ] C:\Windows\SysWOW64\gameux.dll

17:25:25.0825 6056 C:\Windows\SysWOW64\gameux.dll - ok

17:25:25.0840 6056 [ 2BCBA6052374959A30BD7948444DBB79 ] C:\Windows\System32\gameux.dll

17:25:25.0840 6056 C:\Windows\System32\gameux.dll - ok

17:25:25.0840 6056 [ 3A16EA01FCFAAB40882DB5BFEE632322 ] C:\Windows\SysWOW64\msftedit.dll

17:25:25.0840 6056 C:\Windows\SysWOW64\msftedit.dll - ok

17:25:25.0840 6056 [ 1EAC1A8CA6874BF5B15E2EFB9A9A7B86 ] C:\Windows\System32\msftedit.dll

17:25:25.0840 6056 C:\Windows\System32\msftedit.dll - ok

17:25:25.0856 6056 [ C225E5307D8D4982A1687F2702C37C78 ] C:\Windows\SysWOW64\msls31.dll

17:25:25.0856 6056 C:\Windows\SysWOW64\msls31.dll - ok

17:25:25.0856 6056 [ 112183DF91C9BAECB498E4A86ECDE598 ] C:\Windows\System32\msls31.dll

17:25:25.0856 6056 C:\Windows\System32\msls31.dll - ok

17:25:25.0856 6056 [ E904178851A6A44BFA97E064EF779E9D ] C:\Windows\SysWOW64\authui.dll

17:25:25.0856 6056 C:\Windows\SysWOW64\authui.dll - ok

17:25:25.0871 6056 [ 4C2C4640BF23AAFCF90519E0F34436CE ] C:\Windows\System32\DeviceCenter.dll

17:25:25.0871 6056 C:\Windows\System32\DeviceCenter.dll - ok

17:25:25.0871 6056 [ F5EA99BD43A762945547DBCBC119E9D4 ] C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\5baea82888a13fa558004b24e3b107cf\CustomMarshalers.ni.dll

17:25:25.0871 6056 C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\5baea82888a13fa558004b24e3b107cf\CustomMarshalers.ni.dll - ok

17:25:25.0887 6056 [ C80DA476BFBAD97D874A0EFE037D7113 ] C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll

17:25:25.0887 6056 C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll - ok

17:25:25.0887 6056 [ BC83108B18756547013ED443B8CDB31B ] C:\Windows\SysWOW64\msvcp100.dll

17:25:25.0887 6056 C:\Windows\SysWOW64\msvcp100.dll - ok

17:25:25.0887 6056 [ 0E37FBFA79D349D672456923EC5FBBE3 ] C:\Windows\SysWOW64\msvcr100.dll

17:25:25.0887 6056 C:\Windows\SysWOW64\msvcr100.dll - ok

17:25:25.0903 6056 [ 24CAEDCD73B5B0E22226283B7B2468C7 ] C:\Windows\SysWOW64\mfc42u.dll

17:25:25.0903 6056 C:\Windows\SysWOW64\mfc42u.dll - ok

17:25:25.0903 6056 [ 1ABD836197E38318A744E5C40C49EC46 ] C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe

17:25:25.0903 6056 C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe - ok

17:25:25.0903 6056 [ 672D7C5080ACB003343006405DA2E621 ] C:\Windows\SysWOW64\thumbcache.dll

17:25:25.0903 6056 C:\Windows\SysWOW64\thumbcache.dll - ok

17:25:25.0918 6056 [ 6EC8D8BA1E37F89CB127DF8A21FE5566 ] C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar2.exe

17:25:25.0918 6056 C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar2.exe - ok

17:25:25.0918 6056 [ 7D34AF98A706230CC2DEDFE0CABF87AB ] C:\Windows\SysWOW64\odbc32.dll

17:25:25.0918 6056 C:\Windows\SysWOW64\odbc32.dll - ok

17:25:25.0934 6056 [ 24F4B480F335A6C724AF352253C5D98B ] C:\Windows\System32\thumbcache.dll

17:25:25.0934 6056 C:\Windows\System32\thumbcache.dll - ok

17:25:25.0934 6056 [ 8E9FEFF971F3679F7D4A122A21901A8A ] C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar3.exe

17:25:25.0934 6056 C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar3.exe - ok

17:25:25.0934 6056 [ 923657D22AF581ACA6225239B9575B8E ] C:\Program Files\IDT\WDM\stlang64.dll

17:25:25.0934 6056 C:\Program Files\IDT\WDM\stlang64.dll - ok

17:25:25.0949 6056 [ CA2736270DE7AA714C22F916834C9B45 ] C:\Windows\SysWOW64\SynCOM.dll

17:25:25.0949 6056 C:\Windows\SysWOW64\SynCOM.dll - ok

17:25:25.0949 6056 [ ABA457BFC7EC0B5E130B2F1E0F549DFF ] C:\Windows\SysWOW64\odbcint.dll

17:25:25.0949 6056 C:\Windows\SysWOW64\odbcint.dll - ok

17:25:25.0965 6056 [ 773D7DC2BABC0C3DEFE910C44637F573 ] C:\Windows\System32\SynTPAPI.dll

17:25:25.0965 6056 C:\Windows\System32\SynTPAPI.dll - ok

17:25:25.0965 6056 [ 9D822C07AF12303D12BB6A73BAEB1AA5 ] C:\Windows\SysWOW64\atiadlxy.dll

17:25:25.0965 6056 C:\Windows\SysWOW64\atiadlxy.dll - ok

17:25:25.0965 6056 [ 8B285BDAB7735FDFB18E6F7122923B77 ] C:\Windows\SysWOW64\UIAnimation.dll

17:25:25.0965 6056 C:\Windows\SysWOW64\UIAnimation.dll - ok

17:25:25.0981 6056 [ C940F2F5C60B3727C5F18840735B229C ] C:\Windows\SysWOW64\AudioSes.dll

17:25:25.0981 6056 C:\Windows\SysWOW64\AudioSes.dll - ok

17:25:25.0981 6056 [ 8610C1A912EEF89C3AAB9D64D78505C4 ] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams_main.dll

17:25:25.0981 6056 C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams_main.dll - ok

17:25:25.0996 6056 [ 04CB7C8FDC6D9640DD82A527208F72C4 ] C:\Windows\System32\UIAnimation.dll

17:25:25.0996 6056 C:\Windows\System32\UIAnimation.dll - ok

17:25:25.0996 6056 [ AE2523EB48B0401262BEC0A59C1C19C2 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CoreGraphics.dll

17:25:25.0996 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\CoreGraphics.dll - ok

17:25:25.0996 6056 [ C861851A0BBD9903E324487011AA3705 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

17:25:25.0996 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe - ok

17:25:26.0012 6056 [ 7F2D96D28D47ED3E0974B72580FE965F ] C:\Program Files\Synaptics\SynTP\SynTPRes.dll

17:25:26.0012 6056 C:\Program Files\Synaptics\SynTP\SynTPRes.dll - ok

17:25:26.0012 6056 [ 4214EBCC2EA861B6F7FA9CD1596879AC ] C:\Program Files (x86)\Hewlett-Packard\Shared\hputils.dll

17:25:26.0012 6056 C:\Program Files (x86)\Hewlett-Packard\Shared\hputils.dll - ok

17:25:26.0027 6056 [ E1B7222E9BB951EF62DD09677B5069D0 ] C:\Program Files (x86)\Common Files\Apple\Internet Services\mmcs.dll

17:25:26.0027 6056 C:\Program Files (x86)\Common Files\Apple\Internet Services\mmcs.dll - ok

17:25:26.0027 6056 [ 514455F6586473791C5C6B25BA4E1BAB ] C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

17:25:26.0027 6056 C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe - ok

17:25:26.0027 6056 [ B3170CCC779B682C3341873EA60CF084 ] C:\Windows\SysWOW64\d3d10warp.dll

17:25:26.0027 6056 C:\Windows\SysWOW64\d3d10warp.dll - ok

17:25:26.0043 6056 [ 28638660E651578C354BF43CD646EF6D ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\672fc9526d8954656bcb46e42082e09c\System.Drawing.ni.dll

17:25:26.0043 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\672fc9526d8954656bcb46e42082e09c\System.Drawing.ni.dll - ok

17:25:26.0043 6056 [ 2BD83B74D712020B05DCEE25509E7C01 ] C:\Program Files (x86)\Common Files\Apple\Internet Services\ChunkingLibrary.dll

17:25:26.0043 6056 C:\Program Files (x86)\Common Files\Apple\Internet Services\ChunkingLibrary.dll - ok

17:25:26.0059 6056 [ 5AE88135C6A86FCD67BA16AFBB1C8389 ] C:\Windows\SysWOW64\wbem\esscli.dll

17:25:26.0059 6056 C:\Windows\SysWOW64\wbem\esscli.dll - ok

17:25:26.0059 6056 [ 60623B63FFC4943561297E926656A846 ] C:\Program Files (x86)\Common Files\Apple\Internet Services\AOSKit.dll

17:25:26.0059 6056 C:\Program Files (x86)\Common Files\Apple\Internet Services\AOSKit.dll - ok

17:25:26.0059 6056 [ 41D113966CAFEE905864259B7D4ECD65 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\18f31a371a986b6f6b968530d8b89e25\System.Windows.Forms.ni.dll

17:25:26.0059 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\18f31a371a986b6f6b968530d8b89e25\System.Windows.Forms.ni.dll - ok

17:25:26.0074 6056 [ BA28E3782BB7DA6B4DB32FBD83B34BE7 ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\Foundation.dll

17:25:26.0074 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\Foundation.dll - ok

17:25:26.0074 6056 [ 3AC81CACDBF2349090A165BDB56C8D65 ] C:\Program Files (x86)\Adobe\Acrobat 11.0\Esl\Aiod.dll

17:25:26.0074 6056 C:\Program Files (x86)\Adobe\Acrobat 11.0\Esl\Aiod.dll - ok

17:25:26.0074 6056 [ 3687E37869B69040657E0CE3F5DB58AA ] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libtidy.dll

17:25:26.0074 6056 C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libtidy.dll - ok

17:25:26.0090 6056 [ C3F07DA1C0C3DF0CB3A3D1E703D18895 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.Implementation.dll

17:25:26.0090 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.Implementation.dll - ok

17:25:26.0090 6056 [ 3CA607B1453F45283F5CF81A49E7E847 ] C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrobat.exe

17:25:26.0090 6056 C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrobat.exe - ok

17:25:26.0105 6056 [ 061BB8B56C72E3E839106E83F7E685FD ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.dll

17:25:26.0105 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.dll - ok

17:25:26.0105 6056 [ 05AA1093DDA2B0A06F1C6E33DC543141 ] C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrobat_sl.exe

17:25:26.0105 6056 C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrobat_sl.exe - ok

17:25:26.0121 6056 [ DF48408BD8A76BC35FCC8514A89B55A9 ] C:\Windows\System32\SynCOM.dll

17:25:26.0121 6056 C:\Windows\System32\SynCOM.dll - ok

17:25:26.0121 6056 [ D08B6ABF67707AAC5F82CB5A9F201D02 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Private.dll

17:25:26.0121 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Private.dll - ok

17:25:26.0121 6056 [ DFED363FF67C6A6C249A5AB56065CB78 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Implementation.dll

17:25:26.0121 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Implementation.dll - ok

17:25:26.0137 6056 [ D28C7B233A72564E9B63B07D2D3EF255 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.Foundation.dll

17:25:26.0137 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.Foundation.dll - ok

17:25:26.0137 6056 [ 1938D69085E2914E75A74C46167E9CC2 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Implementation.Private.dll

17:25:26.0137 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOG.Foundation.Implementation.Private.dll - ok

17:25:26.0152 6056 [ D205C24A9D069049FE2DF2A1B38726A7 ] C:\Windows\SysWOW64\wdmaud.drv

17:25:26.0152 6056 C:\Windows\SysWOW64\wdmaud.drv - ok

17:25:26.0152 6056 [ 9C67F6BBDA3881CFD02095160CF91576 ] C:\Windows\SysWOW64\ksuser.dll

17:25:26.0152 6056 C:\Windows\SysWOW64\ksuser.dll - ok

17:25:26.0152 6056 [ CDAD3376DFF3D9AC7FDCBE2B94B0D3C8 ] C:\Windows\System32\shfolder.dll

17:25:26.0152 6056 C:\Windows\System32\shfolder.dll - ok

17:25:26.0168 6056 [ 9AA7C9E9CCB96F99C1D5349534253FE6 ] C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\ccvrtrst.dll

17:25:26.0168 6056 C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\ccvrtrst.dll - ok

17:25:26.0168 6056 [ 675E21013EA33011C5DD609BCA59D887 ] C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\ccset.dll

17:25:26.0168 6056 C:\Program Files (x86)\Norton Security Suite\Engine64\20.3.1.22\ccset.dll - ok

17:25:26.0183 6056 [ BD0EA5C8A4EF518C46E05F99908A56CE ] C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

17:25:26.0183 6056 C:\Program Files\Synaptics\SynTP\SynTPHelper.exe - ok

17:25:26.0183 6056 [ 912649A1B3F9E6ACB3899FBDABA2ED5F ] C:\Windows\SysWOW64\stobject.dll

17:25:26.0183 6056 C:\Windows\SysWOW64\stobject.dll - ok

17:25:26.0183 6056 [ C3761661C17C2248A9379A8FB89E3DE1 ] C:\Windows\System32\stobject.dll

17:25:26.0183 6056 C:\Windows\System32\stobject.dll - ok

17:25:26.0199 6056 [ 67C1B58706B47EEBA4E117AC197289E6 ] C:\Windows\SysWOW64\batmeter.dll

17:25:26.0199 6056 C:\Windows\SysWOW64\batmeter.dll - ok

17:25:26.0199 6056 [ AB2F2F56064E8AA8634C790956860A3D ] C:\Windows\System32\ieframe.dll

17:25:26.0199 6056 C:\Windows\System32\ieframe.dll - ok

17:25:26.0199 6056 [ F832EEEA97CDDA1AF577E721F652A0D1 ] C:\Windows\System32\batmeter.dll

17:25:26.0199 6056 C:\Windows\System32\batmeter.dll - ok

17:25:26.0215 6056 [ E948D1D42DC68923ABD75EEB5BCCD1D3 ] C:\Windows\System32\consent.exe

17:25:26.0215 6056 C:\Windows\System32\consent.exe - ok

17:25:26.0215 6056 [ 07393A09C46083588E751B63B03C8301 ] C:\Windows\SysWOW64\msacm32.drv

17:25:26.0215 6056 C:\Windows\SysWOW64\msacm32.drv - ok

17:25:26.0230 6056 [ 85683DF1F917E4D7F6BE1A04986BF1C8 ] C:\Windows\SysWOW64\msacm32.dll

17:25:26.0230 6056 C:\Windows\SysWOW64\msacm32.dll - ok

17:25:26.0230 6056 [ 1A2B1111BD201D7FB6DB98FCBB97DA63 ] C:\Windows\SysWOW64\input.dll

17:25:26.0230 6056 C:\Windows\SysWOW64\input.dll - ok

17:25:26.0230 6056 [ 5A12C364AD1D4FCC0AD0E56DBBC34462 ] C:\Windows\SysWOW64\midimap.dll

17:25:26.0230 6056 C:\Windows\SysWOW64\midimap.dll - ok

17:25:26.0246 6056 [ D629F73E88B2DA7F5BDA2C06466DCCC4 ] C:\Windows\IME\SPTIP.DLL

17:25:26.0246 6056 C:\Windows\IME\SPTIP.DLL - ok

17:25:26.0246 6056 [ 3EE10E01F87C77690AAE39DA7B8FDC2D ] C:\Program Files\Windows NT\TableTextService\TableTextService.dll

17:25:26.0246 6056 C:\Program Files\Windows NT\TableTextService\TableTextService.dll - ok

17:25:26.0246 6056 [ CE7803953FE7314061B3F9188D310EB2 ] C:\Windows\SysWOW64\en-US\KernelBase.dll.mui

17:25:26.0246 6056 C:\Windows\SysWOW64\en-US\KernelBase.dll.mui - ok

17:25:26.0261 6056 [ 2D2A6EC8EAD30EC3ACE2FD6FB1B3E122 ] C:\Windows\System32\prnfldr.dll

17:25:26.0261 6056 C:\Windows\System32\prnfldr.dll - ok

17:25:26.0261 6056 [ 42A9CB6906D9A8BEDC83B57163E62924 ] C:\Windows\System32\DXP.dll

17:25:26.0261 6056 C:\Windows\System32\DXP.dll - ok

17:25:26.0277 6056 [ B2B3DAE040F6B5AE1DF52B0CD7631A18 ] C:\Windows\SysWOW64\AltTab.dll

17:25:26.0277 6056 C:\Windows\SysWOW64\AltTab.dll - ok

17:25:26.0277 6056 [ E7368F0A8D19445EAF5C5D0DBB8B8DAB ] C:\Windows\System32\AltTab.dll

17:25:26.0277 6056 C:\Windows\System32\AltTab.dll - ok

17:25:26.0277 6056 [ 3D6F22551D422F97AACB0BB927E4C846 ] C:\Windows\SysWOW64\pnidui.dll

17:25:26.0277 6056 C:\Windows\SysWOW64\pnidui.dll - ok

17:25:26.0293 6056 [ 10F815BE90A66AAFC6C713D1BD626064 ] C:\Windows\System32\pnidui.dll

17:25:26.0293 6056 C:\Windows\System32\pnidui.dll - ok

17:25:26.0293 6056 [ BD626EF05967D14C772B8096292731A3 ] C:\Windows\SysWOW64\QUTIL.DLL

17:25:26.0293 6056 C:\Windows\SysWOW64\QUTIL.DLL - ok

17:25:26.0293 6056 [ B9F0A4020AA98B7A20287BF7FE99A1FD ] C:\Windows\System32\QUTIL.DLL

17:25:26.0293 6056 C:\Windows\System32\QUTIL.DLL - ok

17:25:26.0308 6056 [ 856CFFCD835528136367BB1A8FE1DB87 ] C:\Windows\SysWOW64\Syncreg.dll

17:25:26.0308 6056 C:\Windows\SysWOW64\Syncreg.dll - ok

17:25:26.0308 6056 [ 49A30729371AFF3C85919ABF79CE89D4 ] C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\imcfg.dll

17:25:26.0308 6056 C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\imcfg.dll - ok

17:25:26.0324 6056 [ 2BC7C9FD0A9F2C9AFC373F3AD1EE3891 ] C:\Windows\System32\Syncreg.dll

17:25:26.0324 6056 C:\Windows\System32\Syncreg.dll - ok

17:25:26.0324 6056 [ 9A39A2A5F443A756C568C6ED5748AFE4 ] C:\Windows\SysWOW64\ActionCenter.dll

17:25:26.0324 6056 C:\Windows\SysWOW64\ActionCenter.dll - ok

17:25:26.0324 6056 [ 92DBF0A4C9239169010FC6E07859C82E ] C:\Windows\System32\ActionCenter.dll

17:25:26.0324 6056 C:\Windows\System32\ActionCenter.dll - ok

17:25:26.0339 6056 [ C836175870E00ACC546066632E15BD10 ] C:\Windows\ehome\ehSSO.dll

17:25:26.0339 6056 C:\Windows\ehome\ehSSO.dll - ok

17:25:26.0339 6056 [ E3D5E244807AD655787FCD25477CC1BC ] C:\Windows\SysWOW64\bthprops.cpl

17:25:26.0339 6056 C:\Windows\SysWOW64\bthprops.cpl - ok

17:25:26.0339 6056 [ F7A256EC899C72B4ECDD2C02CB592EFD ] C:\Windows\System32\bthprops.cpl

17:25:26.0339 6056 C:\Windows\System32\bthprops.cpl - ok

17:25:26.0355 6056 [ 735263DA17BF5BAF9CCD483843BF9D5A ] C:\Windows\SysWOW64\WPDShServiceObj.dll

17:25:26.0355 6056 C:\Windows\SysWOW64\WPDShServiceObj.dll - ok

17:25:26.0355 6056 [ C8FDF0FA9E97E2FAAF3F814716AAA881 ] C:\Windows\System32\WPDShServiceObj.dll

17:25:26.0355 6056 C:\Windows\System32\WPDShServiceObj.dll - ok

17:25:26.0371 6056 [ ADB45A977BD9E45790CA496DB84BA148 ] C:\Windows\SysWOW64\PortableDeviceTypes.dll

17:25:26.0371 6056 C:\Windows\SysWOW64\PortableDeviceTypes.dll - ok

17:25:26.0371 6056 [ 4F3CD1C59EA71401E155C432BCECE180 ] C:\Windows\System32\PortableDeviceTypes.dll

17:25:26.0371 6056 C:\Windows\System32\PortableDeviceTypes.dll - ok

17:25:26.0371 6056 [ E98278865E8DABA21CFE5FE4BE34210A ] C:\Windows\SysWOW64\PortableDeviceApi.dll

17:25:26.0371 6056 C:\Windows\SysWOW64\PortableDeviceApi.dll - ok

17:25:26.0386 6056 [ 9108540E866F75C7AF2B91DD921A8091 ] C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll

17:25:26.0386 6056 C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll - ok

17:25:26.0386 6056 [ 140D9F911182357626165EA0BEB98C4F ] C:\Windows\SysWOW64\ncsi.dll

17:25:26.0386 6056 C:\Windows\SysWOW64\ncsi.dll - ok

17:25:26.0386 6056 [ D28C5A1411BB0B47E05E0D6AAF896690 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

17:25:26.0386 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe - ok

17:25:26.0402 6056 [ 674B0C0F6A448EB185CAAB9C51D44032 ] C:\Windows\SysWOW64\srchadmin.dll

17:25:26.0402 6056 C:\Windows\SysWOW64\srchadmin.dll - ok

17:25:26.0402 6056 [ 8569E35D00F45972E506502EEE622BA4 ] C:\Windows\System32\srchadmin.dll

17:25:26.0402 6056 C:\Windows\System32\srchadmin.dll - ok

17:25:26.0417 6056 [ F4687BCD29BA7D958DD942DB0624D5A2 ] C:\Windows\SysWOW64\MigAutoPlay.exe

17:25:26.0417 6056 C:\Windows\SysWOW64\MigAutoPlay.exe - ok

17:25:26.0417 6056 [ 9DF7A7C74D8632CB5EBD37E3A374825E ] C:\Windows\SysWOW64\webcheck.dll

17:25:26.0417 6056 C:\Windows\SysWOW64\webcheck.dll - ok

17:25:26.0417 6056 [ BC0D4AFBE94D8E1F81C8926D805C3366 ] C:\Windows\System32\webcheck.dll

17:25:26.0417 6056 C:\Windows\System32\webcheck.dll - ok

17:25:26.0433 6056 [ F87F38131F93598425EC0F28E5644602 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.Implementation.dll

17:25:26.0433 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.Implementation.dll - ok

17:25:26.0433 6056 [ 8EE6BDE1D572677AA35707C52C585F75 ] C:\Windows\SysWOW64\mlang.dll

17:25:26.0433 6056 C:\Windows\SysWOW64\mlang.dll - ok

17:25:26.0449 6056 [ B450B143CB7FD3D433E7C20456A455D0 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.dll

17:25:26.0449 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.dll - ok

17:25:26.0449 6056 [ 8494E126F0B10180F3293AF861CE1F7A ] C:\Windows\System32\mlang.dll

17:25:26.0449 6056 C:\Windows\System32\mlang.dll - ok

17:25:26.0449 6056 [ 2DDEA2C345DA5BC589EFD398F220DB0E ] C:\Windows\SysWOW64\SyncCenter.dll

17:25:26.0449 6056 C:\Windows\SysWOW64\SyncCenter.dll - ok

17:25:26.0464 6056 [ B6FAD0CED87DB358C1ADC2DE24595056 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.XManifest.dll

17:25:26.0464 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.XManifest.dll - ok

17:25:26.0464 6056 [ 689EBD0C6D6D28FFCAA7A132F5F988AC ] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\WirelessOffMsg.exe

17:25:26.0464 6056 C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\WirelessOffMsg.exe - ok

17:25:26.0480 6056 [ 5CCD5B62076D4432D4728BB6CB3DEBFD ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\7a560781987776298120763de1df8f77\System.Xml.ni.dll

17:25:26.0480 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\7a560781987776298120763de1df8f77\System.Xml.ni.dll - ok

17:25:26.0480 6056 [ 101797BA603D227946B4B5109867EB19 ] C:\Windows\System32\SyncCenter.dll

17:25:26.0480 6056 C:\Windows\System32\SyncCenter.dll - ok

17:25:26.0480 6056 [ 03E9314004F504A14A61C3D364B62F66 ] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\msvcp100.dll

17:25:26.0480 6056 C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\msvcp100.dll - ok

17:25:26.0495 6056 [ 90FB1802D488FFA9029854A77D4F3F27 ] C:\Windows\SysWOW64\oleaccrc.dll

17:25:26.0495 6056 C:\Windows\SysWOW64\oleaccrc.dll - ok

17:25:26.0495 6056 [ 2394E49CC52F1F010C4E050A46A73FBD ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.dll

17:25:26.0495 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.dll - ok

17:25:26.0511 6056 [ 43106F415BA3980A17478E0631B5DA1B ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.Private.dll

17:25:26.0511 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.Private.dll - ok

17:25:26.0511 6056 [ 42FC42AD8E72D8CBA7F113E3A28AA953 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.Private.dll

17:25:26.0511 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.Private.dll - ok

17:25:26.0511 6056 [ 393DEAA69C182C6440D4B10229A521BF ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.dll

17:25:26.0511 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Shared.dll - ok

17:25:26.0527 6056 [ 678321B61F5B24CA59F870656F54EE12 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ATICCCom.dll

17:25:26.0527 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ATICCCom.dll - ok

17:25:26.0527 6056 [ 1FD5F0007400A3A608A104CA2645AC2A ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ADL.Foundation.dll

17:25:26.0527 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ADL.Foundation.dll - ok

17:25:26.0542 6056 [ 8CEBAC98C7F2A5D982BA800CE8EA0ED0 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Server.dll

17:25:26.0542 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Server.dll - ok

17:25:26.0542 6056 [ 99D30BF847999250967BB3B750CE475C ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\NEWAEM.Foundation.dll

17:25:26.0542 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\NEWAEM.Foundation.dll - ok

17:25:26.0558 6056 [ D1ECBEEA6F8EBC158853B04DEA44038E ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Server.Shared.dll

17:25:26.0558 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Server.Shared.dll - ok

17:25:26.0558 6056 [ C1D7FCC83CE42A031CB9F9F98FA848A1 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.Source.Kit.Server.dll

17:25:26.0558 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.Source.Kit.Server.dll - ok

17:25:26.0558 6056 [ 0D6D5D7E3DD7EC02DF296CDDA90E4CAA ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.CoreAudioAPI.dll

17:25:26.0558 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.CoreAudioAPI.dll - ok

17:25:26.0573 6056 [ 10CD09ECEB897FA6B4A7ACAEB94DEF28 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.DPPE.Shared.dll

17:25:26.0573 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.DPPE.Shared.dll - ok

17:25:26.0573 6056 [ 5943DE3E10AD8AE4E77DCF873CACCB47 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.Hotkeys.Shared.dll

17:25:26.0573 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.Hotkeys.Shared.dll - ok

17:25:26.0589 6056 [ 1224EE22F606CE2BF5C63E4C6DCBFCC4 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.WinMessages.Shared.dll

17:25:26.0589 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.WinMessages.Shared.dll - ok

17:25:26.0589 6056 [ CCE69BC85D019F49691C592DDCC2FA97 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0601.dll

17:25:26.0589 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0601.dll - ok

17:25:26.0589 6056 [ C746F3BF98E92FB137B5BD2B8B5925BD ] C:\Windows\System32\FXSST.dll

17:25:26.0589 6056 C:\Windows\System32\FXSST.dll - ok

17:25:26.0605 6056 [ 110D2A7BBFBA80AAE36B5F229FE800AD ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Foundation.dll

17:25:26.0605 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Foundation.dll - ok

17:25:26.0605 6056 [ 942E57152F1CD0533644AB30EF1A4728 ] C:\Windows\SysWOW64\FXSAPI.dll

17:25:26.0605 6056 C:\Windows\SysWOW64\FXSAPI.dll - ok

17:25:26.0620 6056 [ 2D0739B7EC2AB75C4C25FBD161D45211 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.dll

17:25:26.0620 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.dll - ok

17:25:26.0620 6056 [ 650CAEA856943E29F25A25D31E004B18 ] C:\Windows\System32\FXSAPI.dll

17:25:26.0620 6056 C:\Windows\System32\FXSAPI.dll - ok

17:25:26.0620 6056 [ ACD97BB6D9E7D3AC803C7D1D946CF871 ] C:\Windows\System32\ATIDEMGX.dll

17:25:26.0620 6056 C:\Windows\System32\ATIDEMGX.dll - ok

17:25:26.0636 6056 [ A5C47C3E4D34ABA18BEE65674E53516C ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I1010.dll

17:25:26.0636 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I1010.dll - ok

17:25:26.0636 6056 [ 2D11BC8B460957E62E4420373A0D8BDA ] C:\Windows\SysWOW64\imapi2.dll

17:25:26.0636 6056 C:\Windows\SysWOW64\imapi2.dll - ok

17:25:26.0651 6056 [ D9709FA638B789C1C961F028135CC696 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\bef0bd98b9d5d323d693a9cda5facdf3\System.Configuration.ni.dll

17:25:26.0651 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\bef0bd98b9d5d323d693a9cda5facdf3\System.Configuration.ni.dll - ok

17:25:26.0651 6056 [ 8130391F82D52D36C0441F714136957F ] C:\Windows\System32\imapi2.dll

17:25:26.0651 6056 C:\Windows\System32\imapi2.dll - ok

17:25:26.0651 6056 [ 6FD32953146AA492395BD78097C4B120 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.REG.Shared.dll

17:25:26.0651 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.REG.Shared.dll - ok

17:25:26.0667 6056 [ C244450509312AE6BB723770EBCCFD5E ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.dll

17:25:26.0667 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.dll - ok

17:25:26.0667 6056 [ C4096CA42199428B3D63DC206C197F0E ] C:\Windows\SysWOW64\FXSRESM.dll

17:25:26.0667 6056 C:\Windows\SysWOW64\FXSRESM.dll - ok

17:25:26.0683 6056 [ D39DA70FEA6BD713682F70635587DA9E ] C:\Windows\SysWOW64\rasdlg.dll

17:25:26.0683 6056 C:\Windows\SysWOW64\rasdlg.dll - ok

17:25:26.0683 6056 [ 6CCA167367CB9F873103462266E95BF4 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Shared.dll

17:25:26.0683 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Shared.dll - ok

17:25:26.0698 6056 [ C8E8B8239FCF17BEA10E751BE5854631 ] C:\Windows\System32\FXSRESM.dll

17:25:26.0698 6056 C:\Windows\System32\FXSRESM.dll - ok

17:25:26.0698 6056 [ D2155709E336C3BC15729EB87FEC6064 ] C:\Windows\System32\rasdlg.dll

17:25:26.0698 6056 C:\Windows\System32\rasdlg.dll - ok

17:25:26.0714 6056 [ 40261429E4139A04D27BC9489F3ED7EB ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0709.dll

17:25:26.0714 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0709.dll - ok

17:25:26.0714 6056 [ 5DA1B2ACEC743E374EDE14C3A6D1070C ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.GD.Shared.dll

17:25:26.0714 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.GD.Shared.dll - ok

17:25:26.0714 6056 [ D64D99EC088B54FFE8EE67A480386C20 ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Culture.dll

17:25:26.0714 6056 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Culture.dll - ok

17:25:26.0729 6056 [ E284497B16DB214B1B118157352394A2 ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorrc.dll

17:25:26.0729 6056 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorrc.dll - ok

17:25:26.0729 6056 [ 8EADBFAB9B762530F13AFB248196FDB5 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.Audio.Shared.dll

17:25:26.0729 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.Audio.Shared.dll - ok

17:25:26.0745 6056 [ DB4547136DE183481F45BDE2674A898F ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Actions.CCAA.Shared.dll

17:25:26.0745 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Actions.CCAA.Shared.dll - ok

17:25:26.0745 6056 [ 759BFC207916D310397CEAC6B0F3C21F ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ResourceManagement.Foundation.Private.dll

17:25:26.0745 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ResourceManagement.Foundation.Private.dll - ok

17:25:26.0761 6056 [ D4191EFAB91E00FC09257AA5EBAF503B ] C:\Windows\SysWOW64\mprapi.dll

17:25:26.0761 6056 C:\Windows\SysWOW64\mprapi.dll - ok

17:25:26.0761 6056 [ 7F9A009E33940087FDE0FA25D8AA5706 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0804.dll

17:25:26.0761 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0804.dll - ok

17:25:26.0761 6056 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] C:\Windows\System32\FXSSVC.exe

17:25:26.0761 6056 C:\Windows\System32\FXSSVC.exe - ok

17:25:26.0776 6056 [ 4804BF25E3E67F5B1A868A5C731C468E ] C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\8c10f6a37a1d02cb391898b304ecd9bd\WindowsBase.ni.dll

17:25:26.0776 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\WindowsBase\8c10f6a37a1d02cb391898b304ecd9bd\WindowsBase.ni.dll - ok

17:25:26.0776 6056 [ 8E2F6E814C6E9CCAB88D7E000F2112F2 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll

17:25:26.0776 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll - ok

17:25:26.0792 6056 [ B81244AF3D324C861FA5EBDF7B01F755 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll

17:25:26.0792 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll - ok

17:25:26.0792 6056 [ BE372CEC5649D8DD4F8DCCD92348CF56 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll

17:25:26.0792 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll - ok

17:25:26.0792 6056 [ 6383C60EC0133B14F5705F96369421B2 ] C:\Windows\SysWOW64\hnetcfg.dll

17:25:26.0792 6056 C:\Windows\SysWOW64\hnetcfg.dll - ok

17:25:26.0807 6056 [ 49A5BB9F830D9B1016B57C2C458AF624 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.Shared.dll

17:25:26.0807 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceCRT.Graphics.Shared.dll - ok

17:25:26.0807 6056 [ 9E897687058F8A8D95CE888AC6835AD7 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0912.dll

17:25:26.0807 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0912.dll - ok

17:25:26.0823 6056 [ 2E7FAB502A8615B1AAB0EAB35AFBCA3B ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0706.dll

17:25:26.0823 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0706.dll - ok

17:25:26.0823 6056 [ 8063046AA70B97CA9985672B8848FB2E ] C:\Windows\SysWOW64\wlanhlp.dll

17:25:26.0823 6056 C:\Windows\SysWOW64\wlanhlp.dll - ok

17:25:26.0823 6056 [ E4FCA0F99A41E460C84016DEFD31E6EF ] C:\Windows\System32\wlanhlp.dll

17:25:26.0823 6056 C:\Windows\System32\wlanhlp.dll - ok

17:25:26.0839 6056 [ B010CF886420EE29C2C276646721D255 ] C:\Windows\SysWOW64\wlanapi.dll

17:25:26.0839 6056 C:\Windows\SysWOW64\wlanapi.dll - ok

17:25:26.0839 6056 [ F87C1C9507851B0F7AF57A8C994AF375 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Shared.dll

17:25:26.0839 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Shared.dll - ok

17:25:26.0854 6056 [ 04B88428A872390D235BE52D38A9D4EF ] C:\Windows\SysWOW64\dot3api.dll

17:25:26.0854 6056 C:\Windows\SysWOW64\dot3api.dll - ok

17:25:26.0854 6056 [ 3C2993A625547BBD8ED7626CDA234CDC ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects2.Runtime.dll

17:25:26.0854 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects2.Runtime.dll - ok

17:25:26.0854 6056 [ 42D4E0201377F96189680C1255800171 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceLCD.Graphics.Shared.dll

17:25:26.0854 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceLCD.Graphics.Shared.dll - ok

17:25:26.0870 6056 [ F9AFD12BB4B1CFA5FCC0A5B37C604FD2 ] C:\Windows\System32\dot3api.dll

17:25:26.0870 6056 C:\Windows\System32\dot3api.dll - ok

17:25:26.0870 6056 [ 34EBD4FF6A24D86BB4716D6AFCC1A89B ] C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe

17:25:26.0870 6056 C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe - ok

17:25:26.0870 6056 [ 3073BFF2DE45BC5B5E6EDA3DEB81C3DB ] C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE

17:25:26.0870 6056 C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE - ok

17:25:26.0885 6056 [ 6699A112A3BDC9B52338512894EBA9D6 ] C:\Program Files\Windows Media Player\wmpnscfg.exe

17:25:26.0885 6056 C:\Program Files\Windows Media Player\wmpnscfg.exe - ok

17:25:26.0885 6056 [ 1D6A771D1D702AE07919DB52C889A249 ] C:\Windows\SysWOW64\wlanutil.dll

17:25:26.0885 6056 C:\Windows\SysWOW64\wlanutil.dll - ok

17:25:26.0901 6056 [ 625020DE1DBE6A19EDF26916A127AD3D ] C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\outicon.exe

17:25:26.0901 6056 C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\outicon.exe - ok

17:25:26.0901 6056 [ C02AA67276FEE0C15CC4D6D616BDE95E ] C:\Windows\SysWOW64\WWanAPI.dll

17:25:26.0901 6056 C:\Windows\SysWOW64\WWanAPI.dll - ok

17:25:26.0901 6056 [ 0F144ECA8CFEC8882A3809D176886255 ] C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE

17:25:26.0901 6056 C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE - ok

17:25:26.0917 6056 [ 5DA219F57A9076FB6FBD3C9C3713A672 ] C:\Windows\System32\WWanAPI.dll

17:25:26.0917 6056 C:\Windows\System32\WWanAPI.dll - ok

17:25:26.0917 6056 [ C7494C67A6BF6FE914808E42F8265FEF ] C:\Program Files\Windows Media Player\wmpnssci.dll

17:25:26.0917 6056 C:\Program Files\Windows Media Player\wmpnssci.dll - ok

17:25:26.0932 6056 [ F949C7855B9E7A2A604C8747CF893AEC ] C:\Program Files (x86)\QuickTime\PictureViewer.exe

17:25:26.0932 6056 C:\Program Files (x86)\QuickTime\PictureViewer.exe - ok

17:25:26.0932 6056 [ F2ED6D00921CA138289E5E0CCB9ABF87 ] C:\Windows\SysWOW64\wwapi.dll

17:25:26.0932 6056 C:\Windows\SysWOW64\wwapi.dll - ok

17:25:26.0932 6056 [ 62C7AACC746C9723468A8F2169ED3E85 ] C:\Windows\System32\wwapi.dll

17:25:26.0932 6056 C:\Windows\System32\wwapi.dll - ok

17:25:26.0948 6056 [ 0105EC1D0C014DC112E15AA65CCF702B ] C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE

17:25:26.0948 6056 C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE - ok

17:25:26.0948 6056 [ E26C32401A6CC046C7AEFAE3A287D842 ] C:\Windows\SysWOW64\en-US\wmploc.DLL.mui

17:25:26.0948 6056 C:\Windows\SysWOW64\en-US\wmploc.DLL.mui - ok

17:25:26.0948 6056 [ 02530B0B7E048DD5AC8D52DAEACAEB2B ] C:\Windows\SysWOW64\QAGENT.DLL

17:25:26.0948 6056 C:\Windows\SysWOW64\QAGENT.DLL - ok

17:25:26.0963 6056 [ 6B851E682A36453E1B1EE297FFB6E2AB ] C:\Windows\System32\QAGENT.DLL

17:25:26.0963 6056 C:\Windows\System32\QAGENT.DLL - ok

17:25:26.0963 6056 [ 0EDBEB3BB7B7300B118155B89608AB89 ] C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.EXE

17:25:26.0963 6056 C:\Program Files (x86)\Microsoft Office\Office14\MSPUB.EXE - ok

17:25:26.0979 6056 [ 8B1D303310774DDE4E94003C21064707 ] C:\Program Files (x86)\Microsoft Office\Office14\INFOPATH.EXE

17:25:26.0979 6056 C:\Program Files (x86)\Microsoft Office\Office14\INFOPATH.EXE - ok

17:25:26.0979 6056 [ 42C7A85F458D89005985C1604F09C86E ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Shared.dll

17:25:26.0979 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Shared.dll - ok

17:25:26.0979 6056 [ 258C457AED786E5F6360A8472BF6C176 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0906.dll

17:25:26.0979 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0906.dll - ok

17:25:26.0995 6056 [ 3DBC47609EB7C5F765AF5298471A25D1 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0702.dll

17:25:26.0995 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0702.dll - ok

17:25:26.0995 6056 [ B3C7AE99C12FD3B00D146689DA4B5B56 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Launchpad.dll

17:25:26.0995 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Launchpad.dll - ok

17:25:27.0010 6056 [ B042037A546B8336A4E1BD65838479D5 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Client.Shared.Private.dll

17:25:27.0010 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Client.Shared.Private.dll - ok

17:25:27.0010 6056 [ 0CA300636289ECB792EED29C58E22C94 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Client.Shared.dll

17:25:27.0010 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Client.Shared.dll - ok

17:25:27.0026 6056 [ 2ACF02F2AE84B6FA383328F564A88599 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\e21fe1eb2ab308fa095d6df79ec6f59a\PresentationCore.ni.dll

17:25:27.0026 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationCore\e21fe1eb2ab308fa095d6df79ec6f59a\PresentationCore.ni.dll - ok

17:25:27.0026 6056 [ C7952D0A4C43A965A1741916BB134751 ] C:\Windows\SysWOW64\hgcpl.dll

17:25:27.0026 6056 C:\Windows\SysWOW64\hgcpl.dll - ok

17:25:27.0026 6056 [ 6A5C1A8AC0B572679361026D0E900420 ] C:\Windows\System32\hgcpl.dll

17:25:27.0026 6056 C:\Windows\System32\hgcpl.dll - ok

17:25:27.0041 6056 [ 738B5ABCCF24F9ADAEFE0D28CFF40583 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\0203a69e9107295fbdfeb99b267291b6\PresentationFramework.ni.dll

17:25:27.0041 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\PresentationFramewo#\0203a69e9107295fbdfeb99b267291b6\PresentationFramework.ni.dll - ok

17:25:27.0041 6056 [ 0438CAB2E03F4FB61455A7956026FE86 ] C:\Windows\System32\fdPHost.dll

17:25:27.0041 6056 C:\Windows\System32\fdPHost.dll - ok

17:25:27.0041 6056 [ DE6F4B7E62FDE776F3DE8E5FB5A05C48 ] C:\Windows\SysWOW64\fdWSD.dll

17:25:27.0041 6056 C:\Windows\SysWOW64\fdWSD.dll - ok

17:25:27.0057 6056 [ 171D7DB433314A868507C4326E8209DC ] C:\Windows\System32\fdWSD.dll

17:25:27.0057 6056 C:\Windows\System32\fdWSD.dll - ok

17:25:27.0057 6056 [ 73F6C5223F7E9B5780DD4A6C30FCF569 ] C:\Windows\SysWOW64\WSDApi.dll

17:25:27.0057 6056 C:\Windows\SysWOW64\WSDApi.dll - ok

17:25:27.0073 6056 [ 5B1148A1FF2245486FC106CA7EF226F1 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOCALIZATION.Foundation.Private.dll

17:25:27.0073 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\LOCALIZATION.Foundation.Private.dll - ok

17:25:27.0073 6056 [ DB846EECA70EE9D2E2FF31147C57B0F4 ] C:\Windows\SysWOW64\webservices.dll

17:25:27.0073 6056 C:\Windows\SysWOW64\webservices.dll - ok

17:25:27.0073 6056 [ DEBC20590BB4585FC7584905BCFB6B8F ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web\04dbd0d1375914f2e9f2f31384064e2c\System.Web.ni.dll

17:25:27.0073 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web\04dbd0d1375914f2e9f2f31384064e2c\System.Web.ni.dll - ok

17:25:27.0088 6056 [ 674611721264013DB169EC12AFC9C3B6 ] C:\Windows\SysWOW64\fdSSDP.dll

17:25:27.0088 6056 C:\Windows\SysWOW64\fdSSDP.dll - ok

17:25:27.0088 6056 [ A2E5B2D20954210DCE1A75A1FC8CC36D ] C:\Windows\System32\fdSSDP.dll

17:25:27.0088 6056 C:\Windows\System32\fdSSDP.dll - ok

17:25:27.0104 6056 [ 4140940BA8575F6AE528FD01C068ADEB ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\Localization.Foundation.Implementation.default_Localization.dll

17:25:27.0104 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\Localization.Foundation.Implementation.default_Localization.dll - ok

17:25:27.0104 6056 [ 89D90579E5FB1469CB0464F6512E42B7 ] C:\Windows\SysWOW64\fundisc.dll

17:25:27.0104 6056 C:\Windows\SysWOW64\fundisc.dll - ok

17:25:27.0104 6056 [ 3FF0FA0A81910617739644A06D06D016 ] C:\Windows\SysWOW64\fdProxy.dll

17:25:27.0104 6056 C:\Windows\SysWOW64\fdProxy.dll - ok

17:25:27.0119 6056 [ 2A436796758BF2555A26C770FE8A6FEE ] C:\Windows\System32\fdProxy.dll

17:25:27.0119 6056 C:\Windows\System32\fdProxy.dll - ok

17:25:27.0119 6056 [ 08DF1B8C9C0754A7069E80A986373F52 ] C:\Windows\SysWOW64\P2P.dll

17:25:27.0119 6056 C:\Windows\SysWOW64\P2P.dll - ok

17:25:27.0119 6056 [ EFDFB3DD38A4376F93E7985173813ABD ] C:\Windows\System32\ListSvc.dll

17:25:27.0119 6056 C:\Windows\System32\ListSvc.dll - ok

17:25:27.0135 6056 [ B6411CED931AFD059E48C52DBFBA95B4 ] C:\Windows\System32\P2P.dll

17:25:27.0135 6056 C:\Windows\System32\P2P.dll - ok

17:25:27.0135 6056 [ 4A82EA2807B16FF577AEAF8ADB8779FF ] C:\Windows\System32\IdListen.dll

17:25:27.0135 6056 C:\Windows\System32\IdListen.dll - ok

17:25:27.0151 6056 [ 8373471798BAFF83A4033C48659FDE10 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ResourceManagement.Foundation.Implementation.dll

17:25:27.0151 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\ResourceManagement.Foundation.Implementation.dll - ok

17:25:27.0151 6056 [ 1B0EC94520CAB89A9CE1B2DA405166AF ] C:\Windows\SysWOW64\p2pcollab.dll

17:25:27.0151 6056 C:\Windows\SysWOW64\p2pcollab.dll - ok

17:25:27.0151 6056 [ 0A7977FF7535F237C8C745AE09887C35 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll

17:25:27.0151 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll - ok

17:25:27.0166 6056 [ 54A47F6B5E09A77E61649109C6A08866 ] C:\Windows\SysWOW64\svchost.exe

17:25:27.0166 6056 C:\Windows\SysWOW64\svchost.exe - ok

17:25:27.0166 6056 [ A0524499F4C63CADA7E1529FC77F5DC1 ] C:\Windows\System32\hgprint.dll

17:25:27.0166 6056 C:\Windows\System32\hgprint.dll - ok

17:25:27.0166 6056 [ 3EAC4455472CC2C97107B5291E0DCAFE ] C:\Windows\System32\pnrpsvc.dll

17:25:27.0166 6056 C:\Windows\System32\pnrpsvc.dll - ok

17:25:27.0182 6056 [ CE292C4C10B8DB6070F262EA2733F0DC ] C:\Windows\SysWOW64\sqmapi.dll

17:25:27.0182 6056 C:\Windows\SysWOW64\sqmapi.dll - ok

17:25:27.0182 6056 [ 927463ECB02179F88E4B9A17568C63C3 ] C:\Windows\System32\p2psvc.dll

17:25:27.0182 6056 C:\Windows\System32\p2psvc.dll - ok

17:25:27.0197 6056 [ 1372E8E8FD066002131E3D509275E697 ] C:\Windows\SysWOW64\P2PGraph.dll

17:25:27.0197 6056 C:\Windows\SysWOW64\P2PGraph.dll - ok

17:25:27.0197 6056 [ 52799EAD792B0E9AE7FD4BA5BD18FE5C ] C:\Windows\SysWOW64\wbem\WMIADAP.exe

17:25:27.0197 6056 C:\Windows\SysWOW64\wbem\WMIADAP.exe - ok

17:25:27.0197 6056 [ 005247E3057BC5D5C3F8C6F886FFC10C ] C:\Windows\System32\wbem\WMIADAP.exe

17:25:27.0197 6056 C:\Windows\System32\wbem\WMIADAP.exe - ok

17:25:27.0213 6056 [ 529879612A7FAE235914E3AA6A9A669C ] C:\Windows\SysWOW64\loadperf.dll

17:25:27.0213 6056 C:\Windows\SysWOW64\loadperf.dll - ok

17:25:27.0213 6056 [ 3AEE02CEDAA3ACD14F9D7E038E44D6D1 ] C:\Windows\System32\P2PGraph.dll

17:25:27.0213 6056 C:\Windows\System32\P2PGraph.dll - ok

17:25:27.0213 6056 [ 9FE3ED67345F0FF829A4A53B90E09672 ] C:\Windows\System32\loadperf.dll

17:25:27.0213 6056 C:\Windows\System32\loadperf.dll - ok

17:25:27.0229 6056 [ 5074FE3947A3F7BD3939C8517FBCDE07 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe

17:25:27.0229 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe - ok

17:25:27.0229 6056 [ 5074FE3947A3F7BD3939C8517FBCDE07 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrvPXDiscrete.exe

17:25:27.0229 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrvPXDiscrete.exe - ok

17:25:27.0244 6056 [ 67EC459E42D3081DD8FD34356F7CAFC1 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\msvcr100.dll

17:25:27.0244 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\msvcr100.dll - ok

17:25:27.0244 6056 [ 0AE0C4955E1DE29CCDC9DA1B816FE5EE ] C:\Windows\SysWOW64\quartz.dll

17:25:27.0244 6056 C:\Windows\SysWOW64\quartz.dll - ok

17:25:27.0244 6056 [ 11F19738411735F93BB55DDFE919EF84 ] C:\Windows\SysWOW64\aticfx32.dll

17:25:27.0244 6056 C:\Windows\SysWOW64\aticfx32.dll - ok

17:25:27.0260 6056 [ 6DDF73CCA1E5A2EFAFB76E5819B8BF3C ] C:\Windows\SysWOW64\atiu9pag.dll

17:25:27.0260 6056 C:\Windows\SysWOW64\atiu9pag.dll - ok

17:25:27.0260 6056 [ 669872890BDA8D262276355A59B30E95 ] C:\Windows\SysWOW64\atiumdag.dll

17:25:27.0260 6056 C:\Windows\SysWOW64\atiumdag.dll - ok

17:25:27.0275 6056 [ 5BFB574CF63034D5C387E1A82440BE09 ] C:\Windows\SysWOW64\atiumdva.dll

17:25:27.0275 6056 C:\Windows\SysWOW64\atiumdva.dll - ok

17:25:27.0275 6056 [ 1F27643C4C626457FCE8F047AE1CD7E1 ] C:\Windows\SysWOW64\dxva2.dll

17:25:27.0275 6056 C:\Windows\SysWOW64\dxva2.dll - ok

17:25:27.0275 6056 [ 2A2D8084EEA8149C4DFA9161D1AA165A ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll

17:25:27.0275 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll - ok

17:25:27.0291 6056 [ 5824266C0A2706CF4907ABC13CAEC279 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.Shared.Private.dll

17:25:27.0291 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Runtime.Shared.Private.dll - ok

17:25:27.0291 6056 [ 34C1145D458EA534ADAA0040AABD4C72 ] C:\Windows\SysWOW64\en-US\devenum.dll.mui

17:25:27.0291 6056 C:\Windows\SysWOW64\en-US\devenum.dll.mui - ok

17:25:27.0307 6056 [ 0A7590756D91F3FA8BEA3C6695330155 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll

17:25:27.0307 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll - ok

17:25:27.0307 6056 [ 5C281FFE91B8639A7448FCEC5754E123 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0712.dll

17:25:27.0307 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0712.dll - ok

17:25:27.0322 6056 [ DBBF1DBB95B3E15FD19B2BC4F6AFF496 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll

17:25:27.0322 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll - ok

17:25:27.0322 6056 [ 2FDC28BE61A892E68E3CFD2D2E5A4ACD ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll

17:25:27.0322 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll - ok

17:25:27.0322 6056 [ CD54DF4D7948831DBB241310FCE70647 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Shared.dll

17:25:27.0322 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Shared.dll - ok

17:25:27.0338 6056 [ ED0A0E9A421414D97FD936E45FD3BB3E ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CustomFormats.Graphics.Shared.dll

17:25:27.0338 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CustomFormats.Graphics.Shared.dll - ok

17:25:27.0338 6056 [ ACFD0D2CD67C478673F2EAB1CB4D9D79 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0812.dll

17:25:27.0338 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0812.dll - ok

17:25:27.0353 6056 [ 0386FAD4FEE556BE7C263DD397D30E75 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0805.dll

17:25:27.0353 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0805.dll - ok

17:25:27.0353 6056 [ 7846C2C6A00F62778DD9E1C4736812AF ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MultiVPU2.Graphics.Shared.dll

17:25:27.0353 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MultiVPU2.Graphics.Shared.dll - ok

17:25:27.0353 6056 [ 90F4DA60A80294C2F190373A239F7F76 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\APM.Foundation.dll

17:25:27.0353 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\APM.Foundation.dll - ok

17:25:27.0369 6056 [ 231BE00DB6ECFDAC90EB2EF4F21890E0 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Runtime.dll

17:25:27.0369 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Runtime.dll - ok

17:25:27.0369 6056 [ 1B48148D45BFE836C0E23747F2212E1D ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Shared.dll

17:25:27.0369 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Shared.dll - ok

17:25:27.0385 6056 [ D25B8113055CF4A7BC4E1CE30B5A9133 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I1011.dll

17:25:27.0385 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I1011.dll - ok

17:25:27.0385 6056 [ DF8F496AA2602BC23A4484EE2D487920 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Runtime.dll

17:25:27.0385 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Runtime.dll - ok

17:25:27.0385 6056 [ F146E2BA475893DD77B2370DC1211FC6 ] C:\Windows\System32\drivers\06596629.sys

17:25:27.0385 6056 C:\Windows\System32\drivers\06596629.sys - ok

17:25:27.0400 6056 [ 8234C60629A025CAEA08181B6EF1A1E2 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll

17:25:27.0400 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll - ok

17:25:27.0400 6056 [ 5F14118CB1D5514086293211B2126DD0 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll

17:25:27.0400 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll - ok

17:25:27.0416 6056 [ B1D3E47452586CFAB3FAD74FE5D61B6F ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerXpress.Graphics.Runtime.dll

17:25:27.0416 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerXpress.Graphics.Runtime.dll - ok

17:25:27.0416 6056 [ AED22879184969FF6999324223D1FC81 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerXpress.Graphics.Shared.dll

17:25:27.0416 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.PowerXpress.Graphics.Shared.dll - ok

17:25:27.0431 6056 [ 32C88430F162B5B07C6CA790EC92CED7 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0710.dll

17:25:27.0431 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0710.dll - ok

17:25:27.0431 6056 [ 271151A48C755B826A16CE7A9C3DC1AA ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0901.dll

17:25:27.0431 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0901.dll - ok

17:25:27.0431 6056 [ A0535EB132E519BDD062273C2D331F0E ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Runtime.dll

17:25:27.0431 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Runtime.dll - ok

17:25:27.0447 6056 [ 74601EB58979E2AD0CBC7C434EE03E84 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Shared.dll

17:25:27.0447 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.TransCode.Graphics.Shared.dll - ok

17:25:27.0447 6056 [ EE850C95ED088E8835F2425EE551296F ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atixclib.dll

17:25:27.0447 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atixclib.dll - ok

17:25:27.0463 6056 [ 5CF640EDDB1E40A5AB1BB743BCDEC610 ] C:\Windows\SysWOW64\pnrpnsp.dll

17:25:27.0463 6056 C:\Windows\SysWOW64\pnrpnsp.dll - ok

17:25:27.0463 6056 [ 4F77A3B4BB5BFFE0855BEE9A2D7EE122 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Runtime.dll

17:25:27.0463 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Runtime.dll - ok

17:25:27.0478 6056 [ 8089A210A3939DCD5A749BB0DFC1FD3F ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Shared.dll

17:25:27.0478 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Shared.dll - ok

17:25:27.0478 6056 [ 026A3D73CBB4B2CED1042FC17BF84613 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll

17:25:27.0478 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll - ok

17:25:27.0478 6056 [ C031F422AE49C0F3A0DB14C410EC2002 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll

17:25:27.0478 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll - ok

17:25:27.0494 6056 [ 2ADF34B08B979F25C14F5DD6D966F8F7 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Runtime.dll

17:25:27.0494 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Runtime.dll - ok

17:25:27.0494 6056 [ BDD598B8168DCABA021D3E2A045BB5DC ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Shared.dll

17:25:27.0494 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.UpdateNotification.Graphics.Shared.dll - ok

17:25:27.0509 6056 [ AA3B91B70E79BCE70AD3B190789B9574 ] C:\Windows\SysWOW64\drttransport.dll

17:25:27.0509 6056 C:\Windows\SysWOW64\drttransport.dll - ok

17:25:27.0509 6056 [ 2E7ADF9B0389CD94605717784D7E416A ] C:\Windows\System32\drttransport.dll

17:25:27.0509 6056 C:\Windows\System32\drttransport.dll - ok

17:25:27.0509 6056 [ 46E1899899FCFB6D25E0DB9161441F9A ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.Client.dll

17:25:27.0525 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Foundation.Client.dll - ok

17:25:27.0525 6056 [ EE29FCC244C8033E2F748D863DCBF378 ] C:\Windows\SysWOW64\drt.dll

17:25:27.0525 6056 C:\Windows\SysWOW64\drt.dll - ok

17:25:27.0525 6056 [ C57BC99A4467B3E8F1CC2184A3F46729 ] C:\Windows\System32\drt.dll

17:25:27.0525 6056 C:\Windows\System32\drt.dll - ok

17:25:27.0541 6056 [ C264145F107437CBD3B30303733AEE4F ] C:\Windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll

17:25:27.0541 6056 C:\Windows\assembly\GAC_64\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll - ok

17:25:27.0541 6056 [ C8541AECCCA9260DE93C85F214110FA8 ] C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll

17:25:27.0541 6056 C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\wpfgfx_v0300.dll - ok

17:25:27.0541 6056 [ DFD75CED0C1287985634692174E4EE61 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Fuel.Runtime.dll

17:25:27.0541 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Fuel.Runtime.dll - ok

17:25:27.0556 6056 [ 289AA358B6AEEFA9D053576F40FEE84A ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Fuel.Shared.dll

17:25:27.0556 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Fuel.Shared.dll - ok

17:25:27.0556 6056 [ 1D57D141BCBFED877B15450D95894559 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\Fuel.Foundation.dll

17:25:27.0556 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\Fuel.Foundation.dll - ok

17:25:27.0572 6056 [ A1377D4A19ACAB8D0260F2FCAF04A379 ] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Implementation.dll

17:25:27.0572 6056 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Implementation.dll - ok

17:25:27.0572 6056 [ B412EF55ADA1D38D9D018764E0538C23 ] C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll

17:25:27.0572 6056 C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll - ok

17:25:27.0587 6056 [ 4C1E16B9A53102C8D6FBA587CBCB95DE ] C:\Windows\SysWOW64\msv1_0.dll

17:25:27.0587 6056 C:\Windows\SysWOW64\msv1_0.dll - ok

17:25:27.0587 6056 [ 1128637CAD49A8E3C8B5FA5D0A061525 ] C:\Windows\SysWOW64\cryptdll.dll

17:25:27.0587 6056 C:\Windows\SysWOW64\cryptdll.dll - ok

17:25:27.0587 6056 [ 99F9AEBE7D287DE848B83DA59EC8AF4A ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Combined.Fusion.Aspects.Runtime.dll

17:25:27.0587 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Combined.Fusion.Aspects.Runtime.dll - ok

17:25:27.0603 6056 [ B378D6C54881CCFC972F1011BF4705E3 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DPPE.Fuel.Shared.dll

17:25:27.0603 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DPPE.Fuel.Shared.dll - ok

17:25:27.0603 6056 [ 5872EF8ECFFECCC950D8B5C3F829013B ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Fets.Fuel.Shared.dll

17:25:27.0603 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Fets.Fuel.Shared.dll - ok

17:25:27.0619 6056 [ FCE75453ED089BE665E841ADB6C9F40B ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.WiFi.Fuel.Shared.dll

17:25:27.0619 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.WiFi.Fuel.Shared.dll - ok

17:25:27.0619 6056 [ C41753C4E1484AAB8104C9290702697F ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CPUPStates.Fuel.Shared.dll

17:25:27.0619 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CPUPStates.Fuel.Shared.dll - ok

17:25:27.0634 6056 [ AEE90F9259C21E168BC654CD8C7EC874 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CPUOverDrive.Fuel.Runtime.dll

17:25:27.0634 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CPUOverDrive.Fuel.Runtime.dll - ok

17:25:27.0634 6056 [ A2D941FCDDE07D901C1077B4F19C99B8 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CPUOverDrive.Fuel.Shared.dll

17:25:27.0634 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CPUOverDrive.Fuel.Shared.dll - ok

17:25:27.0634 6056 [ C8B154E995B292441682AF9D2A81B38C ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Platform.Runtime.dll

17:25:27.0634 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Platform.Runtime.dll - ok

17:25:27.0650 6056 [ 796E418536E852D9909C2940E5ACB25D ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Platform.Shared.dll

17:25:27.0650 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Platform.Shared.dll - ok

17:25:27.0650 6056 [ 531EFE4317C2B23E0B91F3B2E09200B9 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDOverDrive.Platform.Runtime.dll

17:25:27.0650 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDOverDrive.Platform.Runtime.dll - ok

17:25:27.0665 6056 [ F683D086A69C042B06FBE402D067A475 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDOverDrive.Platform.Shared.dll

17:25:27.0665 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDOverDrive.Platform.Shared.dll - ok

17:25:27.0665 6056 [ 2B69EF47C4449B6ED4FCE8C85F95A959 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.OverDrive5.Graphics.Shared.dll

17:25:27.0665 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.OverDrive5.Graphics.Shared.dll - ok

17:25:27.0665 6056 [ ED7235E8747B80C207E8B96B5F5BDE3D ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Runtime.dll

17:25:27.0665 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Runtime.dll - ok

17:25:27.0681 6056 [ FCC7C77616B7700EB7BEABD4C1D406F1 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Shared.dll

17:25:27.0681 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.HydraVision.Shared.dll - ok

17:25:27.0681 6056 [ 057ABA6EB28F5F7F984912CAD356C500 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\APM.Server.dll

17:25:27.0681 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\APM.Server.dll - ok

17:25:27.0697 6056 [ C8895A80904B212CF1361F8CE7C0782D ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Extension.EEU.dll

17:25:27.0697 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Runtime.Extension.EEU.dll - ok

17:25:27.0697 6056 [ 51EF1DDC1B1625649204BD6DEF2611CC ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.EEU.Shared.dll

17:25:27.0697 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\AEM.Plugin.EEU.Shared.dll - ok

17:25:27.0697 6056 [ E7160659D95868C732397D5F3999E040 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.dll

17:25:27.0697 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.dll - ok

17:25:27.0712 6056 [ 751729D1E92E25006CCE35C9843A359D ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.dll

17:25:27.0712 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.dll - ok

17:25:27.0712 6056 [ 021C122B508EAED637083A750380A5DD ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.Private.dll

17:25:27.0712 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Component.Dashboard.Shared.Private.dll - ok

17:25:27.0728 6056 [ 0BF4362E18DFC52382F418278DCC52C4 ] C:\Windows\System32\rdpdd.dll

17:25:27.0728 6056 C:\Windows\System32\rdpdd.dll - ok

17:25:27.0728 6056 [ FF6148B1C150DA05D35C68D143AD6DEA ] C:\Windows\System32\RDPENCDD.dll

17:25:27.0728 6056 C:\Windows\System32\RDPENCDD.dll - ok

17:25:27.0728 6056 [ A23A9301EE7152FB6776052E52BDE9D9 ] C:\Windows\System32\RDPREFDD.dll

17:25:27.0728 6056 C:\Windows\System32\RDPREFDD.dll - ok

17:25:27.0743 6056 [ 0AE2C218A9AB6C16D79160CCE55B35FC ] C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe

17:25:27.0743 6056 C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe - ok

17:25:27.0743 6056 [ 5DB532F7DA8E3F2232693E3885652C8F ] C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.Localization\7.0.0.1__a2352a4c73e11587\HP.SupportFramework.Localization.dll

17:25:27.0743 6056 C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.Localization\7.0.0.1__a2352a4c73e11587\HP.SupportFramework.Localization.dll - ok

17:25:27.0759 6056 [ 4A4C0C81EE6658CF6E0048F21A028905 ] C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HP.SupportAssistant.UIController.dll

17:25:27.0759 6056 C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HP.SupportAssistant.UIController.dll - ok

17:25:27.0759 6056 [ 54E327B342D63D194A79C69E0177C5BB ] C:\Windows\assembly\GAC_MSIL\HP.SupportAssistant.Engine\7.0.1.1__e1eab6ede003577a\HP.SupportAssistant.Engine.dll

17:25:27.0759 6056 C:\Windows\assembly\GAC_MSIL\HP.SupportAssistant.Engine\7.0.1.1__e1eab6ede003577a\HP.SupportAssistant.Engine.dll - ok

17:25:27.0775 6056 [ 03ED6D6B608F75D8F6717CF35BDE13C3 ] C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.Utilities\7.0.0.1__deb98ab3a292405a\HP.SupportFramework.Utilities.dll

17:25:27.0775 6056 C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.Utilities\7.0.0.1__deb98ab3a292405a\HP.SupportFramework.Utilities.dll - ok

17:25:27.0775 6056 [ 366E3163A4832C39ED51ADAA7670C312 ] C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.UI\7.0.0.1__3d7f4982d5e863bc\HP.SupportFramework.UI.dll

17:25:27.0775 6056 C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.UI\7.0.0.1__3d7f4982d5e863bc\HP.SupportFramework.UI.dll - ok

17:25:27.0775 6056 [ 4A8E1C95237CFD5BC84A894A4CC291FA ] C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.Communicator\7.0.0.1__370cd15173f7ac8f\HP.SupportFramework.Communicator.dll

17:25:27.0775 6056 C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.Communicator\7.0.0.1__370cd15173f7ac8f\HP.SupportFramework.Communicator.dll - ok

17:25:27.0790 6056 [ 2774222AFA6FB9F9940F2211CE7CCC29 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\8e03b29f6562f1b7ce14fa3337d9cee2\System.Runtime.Serialization.Formatters.Soap.ni.dll

17:25:27.0790 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\8e03b29f6562f1b7ce14fa3337d9cee2\System.Runtime.Serialization.Formatters.Soap.ni.dll - ok

17:25:27.0790 6056 [ 3C06536A9AA332E9E0CEBDE5A596822A ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDPROV.DLL

17:25:27.0790 6056 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDPROV.DLL - ok

17:25:27.0806 6056 [ 0C15DB6FF927935F0ECA52FEEA40E6C2 ] C:\Program Files\Common Files\Microsoft Shared\Windows Live\wlidcli.dll

17:25:27.0806 6056 C:\Program Files\Common Files\Microsoft Shared\Windows Live\wlidcli.dll - ok

17:25:27.0806 6056 [ 0181B4C10F409299E0D8EE130EF87353 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management\c54fc0cac648a174c5e35bd6589c9390\System.Management.ni.dll

17:25:27.0806 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management\c54fc0cac648a174c5e35bd6589c9390\System.Management.ni.dll - ok

17:25:27.0821 6056 [ 9419ABF3163B6F0E3AD3DD2B381C879F ] C:\Windows\SysWOW64\WinSCard.dll

17:25:27.0821 6056 C:\Windows\SysWOW64\WinSCard.dll - ok

17:25:27.0821 6056 [ 45375DF47ED4D0535739465105AAABE3 ] C:\Windows\Microsoft.NET\Framework64\v2.0.50727\WMINet_Utils.dll

17:25:27.0821 6056 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\WMINet_Utils.dll - ok

17:25:27.0821 6056 [ 4EA6459A17212B8323878F51B2C75B4B ] C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.Logging\7.0.0.1__a5a013d267b3a679\HP.SupportFramework.Logging.dll

17:25:27.0821 6056 C:\Windows\assembly\GAC_MSIL\HP.SupportFramework.Logging\7.0.0.1__a5a013d267b3a679\HP.SupportFramework.Logging.dll - ok

17:25:27.0837 6056 [ A12B33B12634EDD3771C415474F8CC09 ] C:\Users\Galen\AppData\Local\Temp\HP Support Framework\HPSF_Config1.dll

17:25:27.0837 6056 C:\Users\Galen\AppData\Local\Temp\HP Support Framework\HPSF_Config1.dll - ok

17:25:27.0837 6056 [ 4620D45507C453697E4BCDB28C01C582 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Core\2ffef4ff54c15b578bfede370af4b745\System.Core.ni.dll

17:25:27.0837 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Core\2ffef4ff54c15b578bfede370af4b745\System.Core.ni.dll - ok

17:25:27.0853 6056 [ 954EE14D7E78FD1FAA38C81001B9FD85 ] C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\eb9697c59c9146442c46ac0b72969343\System.Xml.Linq.ni.dll

17:25:27.0853 6056 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml.Linq\eb9697c59c9146442c46ac0b72969343\System.Xml.Linq.ni.dll - ok

17:25:27.0853 6056 [ F4079F18F919248CF978BBAEDB139A61 ] C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\interop.Scheduler.dll

17:25:27.0853 6056 C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\interop.Scheduler.dll - ok

17:25:27.0868 6056 [ 65B5A277590CEB0B7EF0774D6DC135BF ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.dll

17:25:27.0868 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.dll - ok

17:25:27.0868 6056 [ B281A60E93F91B70850D0A38278AB119 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.Shared.dll

17:25:27.0868 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Caste.Graphics.Dashboard.Shared.dll - ok

17:25:27.0868 6056 [ E7089D4CB22F54C16DC7B451AA786009 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Dashboard.dll

17:25:27.0868 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.AMDHome.Graphics.Dashboard.dll - ok

17:25:27.0884 6056 [ 2A58967B4531283B3D5C54DFB39DD30A ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll

17:25:27.0884 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll - ok

17:25:27.0884 6056 [ A02F5AF46BCF55706E40D94C79AC5490 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects1.Dashboard.dll

17:25:27.0884 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Combined.Graphics.Aspects1.Dashboard.dll - ok

17:25:27.0899 6056 [ EA0568C5B428B976CA2EEB4615047249 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll

17:25:27.0899 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll - ok

17:25:27.0899 6056 [ 3AB79F7DFF90CFD5A523515679C6C1F6 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

17:25:27.0899 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll - ok

17:25:27.0915 6056 [ 3D82E8AD72006D332D6E066C1C3B33B9 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll

17:25:27.0915 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll - ok

17:25:27.0915 6056 [ F877109981EBD996F465BAB6F5D6F655 ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll

17:25:27.0915 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll - ok

17:25:27.0915 6056 [ 33539C463E7FB0F5A36719CBDDFA508F ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll

17:25:27.0915 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll - ok

17:25:27.0931 6056 [ 7211CA3F7E17CB0FF52E1E7C6622DCFD ] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Dashboard.dll

17:25:27.0931 6056 C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.MMVideo.Graphics.Dashboard.dll - ok

17:25:27.0931 6056 ============================================================

17:25:27.0931 6056 Scan finished

17:25:27.0931 6056 ============================================================

17:25:27.0946 6044 Detected object count: 0

17:25:27.0946 6044 Actual detected object count: 0

Help Please!

Recommended Posts

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites