Jump to content

alureon.k


stuff2
 Share

Recommended Posts

Hi

I got a unwanted guest that will not go away.  took over . please i need some help.

 

 

 

I tried to do a re-install vista, nothing ran a program like this it show 

I ran tddkiller, roguekiller,  others still there.  

 

here is txt. information off the vista.

 

 

=============

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft® Windows Vista™ Home Premium 
Boot Device: \Device\HarddiskVolume1
Install Date: 11/25/2013 9:16:15 PM
System Uptime: 12/1/2013 3:26:16 PM (0 hours ago)
.
Motherboard: ASUSTek Computer INC. |  | Acacia
Processor: AMD Athlon 64 X2 Dual Core Processor 5200+ | Socket AM2  | 2700/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 456 GiB total, 412.216 GiB free.
D: is FIXED (NTFS) - 9 GiB total, 1.267 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
.
==== Installed Programs ======================
.
Adobe Flash Player ActiveX
Adobe Reader 8.1.0
Cards_Calendar_OrderGift_DoMorePlugout
Compatibility Pack for the 2007 Office system
CyberLink DVD Suite Deluxe
Enhanced Multimedia Keyboard Solution
Google Chrome
Google Update Helper
Hardware Diagnostic Tools
Hewlett-Packard Active Check
Hewlett-Packard Asset Agent for Health Check
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
HP Customer Experience Enhancements
HP Customer Feedback
HP Demo
HP Easy Setup - Frontend
HP On-Screen Cap/Num/Scroll Lock Indicator
HP Photosmart Essential 2.5
HP Picasso Media Center Add-In
HP Total Care Advisor
HP Update
HPPhotoSmartPhotobookWebPack1
Java SE Runtime Environment 6 Update 1
LabelPrint
LightScribe System Software  1.10.23.1
LightScribeTemplateLabeler
Microsoft .NET Framework 3.5 SP1
Microsoft Office Home and Student 60 day trial
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
muvee autoProducer 6.1
My HP Games
NVIDIA Drivers
Power2Go
PowerDirector
PSSWCORE
Python 2.5
Realtek High Definition Audio Driver
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Snapfish Picture Mover
Soft Data Fax Modem with SmartCP
Toolwiz Care
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
VideoToolkit01
WeatherBug Gadget
Yahoo! Toolbar
.
==== End Of File ===========================
 
 
 
 
 
 
DDS (Ver_2012-11-20.01) - NTFS_x86 NETWORK
Internet Explorer: 7.0.6001.18639
Run by zeeland at 15:27:43 on 2013-12-01
#Option MBR scan  is disabled.
Microsoft® Windows Vista™ Home Premium   6.0.6001.1.1252.1.1033.18.3454.3018 [GMT -8:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
c:\Program Files\Microsoft Security Client\MpCmdRun.exe
C:\Windows\Explorer.EXE
C:\Windows\helppane.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
.
============== Pseudo HJT Report ===============
.
BHO: Adobe PDF Reader Link Helper: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: SSVHelper Class: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre1.6.0_01\bin\ssv.dll
uRun: [sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
uRun: [ToolwizCareFree] "c:\program files\toolwizcarefree\ToolwizCares.exe" -autorun
mRun: [Windows Defender] c:\program files\windows defender\MSASCui.exe -hide
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [hpsysdrv] c:\hp\support\hpsysdrv.exe
mRun: [KBD] c:\hp\kbd\KbdStub.EXE
mRun: [OsdMaestro] "c:\program files\hewlett-packard\on-screen osd indicator\OSD.exe"
mRun: [NvSvc] RUNDLL32.EXE c:\windows\system32\nvsvc.dll,nvsvcStart
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [sunJavaUpdateSched] "c:\program files\java\jre1.6.0_01\bin\jusched.exe"
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\snapfi~1.lnk - c:\program files\snapfish picture mover\SnapfishMediaDetector.exe
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_01\bin\ssv.dll
LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\31.0.1650.57\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
============= SERVICES / DRIVERS ===============
.
R0 BTOWSVF;BTOWSVF;c:\windows\system32\drivers\BTOWSVF.sys [2013-11-26 45952]
R0 KSafeDISK;KSafeDISK;c:\windows\system32\drivers\KSafeDISK.sys [2013-11-26 48640]
R3 netr73;USB Wireless 802.11 b/g Adaptor Driver for Vista;c:\windows\system32\drivers\netr73.sys [2008-2-27 464384]
S0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2013-9-27 214696]
S1 BTOWSFF;BTOWSFF;c:\windows\system32\drivers\BTOWSFF.sys [2013-11-26 27648]
S1 MpKsl4057042a;MpKsl4057042a;c:\programdata\microsoft\microsoft antimalware\definition updates\{7af0674d-3bce-42a8-8af8-cdd11248f09c}\MpKsl4057042a.sys [2013-12-1 40392]
S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2013-9-27 104768]
S3 NisSrv;Microsoft Network Inspection;c:\program files\microsoft security client\NisSrv.exe [2013-10-23 280288]
.
=============== Created Last 30 ================
.
2013-12-01 20:32:31 40392 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{7af0674d-3bce-42a8-8af8-cdd11248f09c}\MpKsl4057042a.sys
2013-12-01 20:12:48 62576 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{7af0674d-3bce-42a8-8af8-cdd11248f09c}\offreg.dll
2013-11-30 02:18:30 7772552 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{7af0674d-3bce-42a8-8af8-cdd11248f09c}\mpengine.dll
2013-11-30 02:17:56 719224 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\nisbackup\gapaengine.dll
2013-11-30 02:17:56 719224 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\{928b0087-c1fc-4efc-bc57-4784ad9819db}\gapaengine.dll
2013-11-29 22:58:38 -------- d-----w- c:\windows\system32\MRT
2013-11-29 22:57:01 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2013-11-29 22:57:00 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2013-11-29 22:57:00 1695744 ----a-w- c:\windows\system32\gameux.dll
2013-11-28 18:07:28 -------- d-----w- C:\TDSSKiller_Quarantine
2013-11-28 17:43:01 7772552 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2013-11-28 17:33:39 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2013-11-28 17:33:39 49472 ----a-w- c:\windows\system32\netfxperf.dll
2013-11-28 17:33:39 297808 ----a-w- c:\windows\system32\mscoree.dll
2013-11-28 17:33:39 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2013-11-28 17:33:39 1130824 ----a-w- c:\windows\system32\dfshim.dll
2013-11-27 20:32:00 -------- d-----w- c:\users\zeeland\appdata\roaming\QuickScan
2013-11-27 20:27:50 -------- d-----w- c:\users\zeeland\appdata\roaming\HpUpdate
2013-11-27 20:27:49 -------- d-----w- c:\windows\Hewlett-Packard
2013-11-27 20:27:34 17920 ----a-w- c:\windows\system32\netevent.dll
2013-11-27 20:27:34 125952 ----a-w- c:\windows\system32\srvsvc.dll
2013-11-27 20:27:30 378368 ----a-w- c:\windows\system32\winhttp.dll
2013-11-27 20:25:09 -------- d-----w- c:\users\zeeland\appdata\local\Hewlett-Packard
2013-11-27 15:51:27 454656 ----a-w- c:\program files\common files\system\msadc\msadce.dll
2013-11-27 15:39:56 97800 ----a-w- c:\windows\system32\infocardapi.dll
2013-11-27 15:39:55 105016 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-27 15:39:54 622080 ----a-w- c:\windows\system32\icardagt.exe
2013-11-27 15:39:54 37384 ----a-w- c:\windows\system32\infocardcpl.cpl
2013-11-27 15:39:54 11264 ----a-w- c:\windows\system32\icardres.dll
2013-11-27 15:39:51 781344 ----a-w- c:\windows\system32\PresentationNative_v0300.dll
2013-11-27 15:35:31 158720 ----a-w- c:\windows\system32\mscorier.dll
2013-11-27 15:35:25 83968 ----a-w- c:\windows\system32\mscories.dll
2013-11-27 15:33:37 24064 ----a-w- c:\windows\system32\nshhttp.dll
2013-11-27 15:33:34 411136 ----a-w- c:\windows\system32\drivers\http.sys
2013-11-27 15:33:33 31232 ----a-w- c:\windows\system32\httpapi.dll
2013-11-26 21:46:40 -------- d-----w- c:\program files\Microsoft Security Client
2013-11-26 21:24:54 48640 ----a-w- c:\windows\system32\drivers\KSafeDISK.sys
2013-11-26 21:24:53 45952 ----a-w- c:\windows\system32\drivers\BTOWSVF.sys
2013-11-26 21:24:53 27648 ----a-w- c:\windows\system32\drivers\BTOWSFF.sys
2013-11-26 21:24:53 -------- d--h--w- C:\TOOLWIZ
2013-11-26 21:24:52 -------- d-----w- c:\users\zeeland\appdata\local\ToolwizCareFree
2013-11-26 21:24:50 -------- d-----w- c:\program files\ToolwizCareFree
2013-11-26 21:15:58 12240896 ----a-w- c:\windows\system32\NlsLexicons0007.dll
2013-11-26 21:15:56 2644480 ----a-w- c:\windows\system32\NlsLexicons0009.dll
2013-11-26 21:15:50 801280 ----a-w- c:\windows\system32\NaturalLanguage6.dll
2013-11-26 21:12:35 -------- d-----w- c:\users\zeeland\appdata\local\Google
2013-11-26 21:12:11 -------- d-----w- c:\users\zeeland\appdata\roaming\Symantec
2013-11-26 18:13:52 168960 ----a-w- c:\program files\windows media player\wmplayer.exe
2013-11-26 18:12:59 302592 ----a-w- c:\windows\system32\wlansec.dll
2013-11-26 18:11:59 954288 ----a-w- c:\windows\system32\mfc40u.dll
2013-11-26 18:10:59 996352 ----a-w- c:\windows\system32\WMNetMgr.dll
2013-11-26 18:05:40 276992 ----a-w- c:\windows\system32\schannel.dll
2013-11-26 18:04:51 2730536 ----a-w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll
2013-11-26 18:04:40 7772552 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{e5c07f36-803f-42f4-8e05-0a389246cac0}\mpengine.dll
2013-11-26 18:04:37 230048 ------w- c:\windows\system32\MpSigStub.exe
2013-11-26 18:03:27 171520 ----a-w- c:\windows\system32\wintrust.dll
2013-11-26 18:03:09 98304 ----a-w- c:\windows\system32\cabview.dll
2013-11-26 05:21:30 -------- d-sh--we C:\Documents and Settings
.
==================== Find3M  ====================
.
2013-09-27 17:53:06 214696 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2013-09-27 17:53:06 104768 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
.
============= FINISH: 15:28:35.54 ===============
 
 
Link to post
Share on other sites

Hello stuff2 and :welcome:! My name is Borislav and I will be glad to help you solve your malware problem.

Please note:

  • If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
  • I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
  • Make sure you read all of the instructions and fixes thoroughly before continuing with them.
  • Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
  • Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
  • Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.
Why do you think that your system is infected with Alureon? Please give me more details.

Please download Malwarebytes Anti-Rootkit from here

  • Unzip the contents to a folder in a convenient location.
  • Open the folder where the contents were unzipped and run mbar.exe
  • Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
  • Click on the Cleanup button to remove any threats and reboot if prompted to do so.
  • Wait while the system shuts down and the cleanup process is performed.
  • Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
  • When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt
Link to post
Share on other sites

The scan came back with nothing wrong and this is the only log I saw in the folder.

 

Microsoft essential show Trojandos/alureon.k was only partially removed.

 

 

 
File system is: NTFS
Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED
CPU speed: 2.700000 GHz
Memory total: 3621404672, free: 2614796288
 
Host not found
Downloaded database version: v2013.12.05.01
Downloaded database version: v2013.10.11.02
Initializing...
======================
------------ Kernel report ------------
     12/04/2013 19:13:11
------------ Loaded modules -----------
\SystemRoot\system32\ntkrnlpa.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\BOOTVID.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\acpi.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\system32\drivers\pciide.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\nvraid.sys
\SystemRoot\system32\drivers\CLASSPNP.SYS
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\DRIVERS\nvstor32.sys
\SystemRoot\system32\DRIVERS\storport.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\system32\DRIVERS\MpFilter.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\msrpc.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\system32\Drivers\KSafeDISK.sys
\SystemRoot\System32\drivers\ecache.sys
\SystemRoot\system32\drivers\disk.sys
\SystemRoot\system32\drivers\crcdisk.sys
\SystemRoot\system32\Drivers\BTOWSVF.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\tunmp.sys
\SystemRoot\system32\DRIVERS\amdk8.sys
\SystemRoot\system32\DRIVERS\i8042prt.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\PS2.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\usbohci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\DRIVERS\ohci1394.sys
\SystemRoot\system32\DRIVERS\1394BUS.SYS
\SystemRoot\system32\DRIVERS\HSXHWBS2.sys
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\DRIVERS\HSX_DP.sys
\SystemRoot\system32\DRIVERS\HSX_CNXT.sys
\SystemRoot\system32\drivers\modem.sys
\SystemRoot\system32\DRIVERS\HDAudBus.sys
\SystemRoot\system32\DRIVERS\nvmfdx32.sys
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\system32\DRIVERS\nvlddmkm.sys
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\system32\DRIVERS\msiscsi.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\termdd.sys
\SystemRoot\system32\DRIVERS\swenum.sys
\SystemRoot\system32\DRIVERS\mssmbios.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\RTKVHDA.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\??\C:\Windows\system32\Drivers\BTOWSFF.sys
\SystemRoot\System32\Drivers\Fs_Rec.SYS
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\System32\DRIVERS\rasacd.sys
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\smb.sys
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\netr73.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\USBSTOR.SYS
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_diskdump.sys
\SystemRoot\System32\Drivers\dump_nvstor32.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\drivers\spsys.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\drivers\mrxdav.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\system32\DRIVERS\mdmxsdk.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\Drivers\secdrv.SYS
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\system32\DRIVERS\xaudio.sys
\SystemRoot\system32\DRIVERS\NisDrvWFP.sys
\SystemRoot\system32\DRIVERS\cdfs.sys
\??\C:\Windows\system32\drivers\mbam.sys
\??\C:\Windows\system32\drivers\mbamchameleon.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
\WINDOWS\System32\ntdll.dll
----------- End -----------
Done!
<<<1>>>
Upper Device Name: \Device\Harddisk4\DR4
Upper Device Object: 0xffffffff876d7190
Upper Device Driver Name: \Driver\disk\
Lower Device Name: \Device\0000005c\
Lower Device Object: 0xffffffff876cd088
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk3\DR3
Upper Device Object: 0xffffffff876cf190
Upper Device Driver Name: \Driver\disk\
Lower Device Name: \Device\0000005b\
Lower Device Object: 0xffffffff876d9398
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk2\DR2
Upper Device Object: 0xffffffff876cb190
Upper Device Driver Name: \Driver\disk\
Lower Device Name: \Device\0000005a\
Lower Device Object: 0xffffffff876c3398
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk1\DR1
Upper Device Object: 0xffffffff876d3190
Upper Device Driver Name: \Driver\disk\
Lower Device Name: \Device\00000059\
Lower Device Object: 0xffffffff876c9398
Lower Device Driver Name: \Driver\USBSTOR\
<<<1>>>
Upper Device Name: \Device\Harddisk0\DR0
Upper Device Object: 0xffffffff859f98e0
Upper Device Driver Name: \Driver\disk\
Lower Device Name: \Device\00000050\
Lower Device Object: 0xffffffff846324f8
Lower Device Driver Name: \Driver\nvstor32\
<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xffffffff859f98e0, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff859f95d0, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffffffff859f98e0, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
DevicePointer: 0xffffffff846144a0, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xffffffff846324f8, DeviceName: \Device\00000050\, DriverName: \Driver\nvstor32\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Done!
Drive 0
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: 1549F232
 
Partition information:
 
    Partition 0 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 63  Numsec = 957200832
    Partition file system is NTFS
    Partition is bootable
 
    Partition 1 type is HIDDEN (0x17)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 976768065  Numsec = 5087
    Partition is not bootable
Hidden partition VBR is not infected.
 
    Partition 2 type is Primary (0x7)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 957200895  Numsec = 19567170
 
    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0
 
Disk Size: 500107862016 bytes
Sector size: 512 bytes
 
Scanning physical sectors of unpartitioned space on drive 0 (1-62-976753168-976773168)...
Done!
Physical Sector Size: 0
Drive: 1, DevicePointer: 0xffffffff876d3190, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff876cd3e8, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffffffff876d3190, DeviceName: \Device\Harddisk1\DR1\, DriverName: \Driver\disk\
DevicePointer: 0xffffffff876c9398, DeviceName: \Device\00000059\, DriverName: \Driver\USBSTOR\
------------ End ----------
Physical Sector Size: 0
Drive: 2, DevicePointer: 0xffffffff876cb190, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff876b1208, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffffffff876cb190, DeviceName: \Device\Harddisk2\DR2\, DriverName: \Driver\disk\
DevicePointer: 0xffffffff876c3398, DeviceName: \Device\0000005a\, DriverName: \Driver\USBSTOR\
------------ End ----------
Physical Sector Size: 0
Drive: 3, DevicePointer: 0xffffffff876cf190, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff876d53e8, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffffffff876cf190, DeviceName: \Device\Harddisk3\DR3\, DriverName: \Driver\disk\
DevicePointer: 0xffffffff876d9398, DeviceName: \Device\0000005b\, DriverName: \Driver\USBSTOR\
------------ End ----------
Physical Sector Size: 0
Drive: 4, DevicePointer: 0xffffffff876d7190, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\
--------- Disk Stack ------
DevicePointer: 0xffffffff876d9088, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xffffffff876d7190, DeviceName: \Device\Harddisk4\DR4\, DriverName: \Driver\disk\
DevicePointer: 0xffffffff876cd088, DeviceName: \Device\0000005c\, DriverName: \Driver\USBSTOR\
------------ End ----------
Link to post
Share on other sites

Thanks!

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
  • Use the arrow keys to select the Repair your computer menu item.
  • Select English as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account an click Next.
To enter System Recovery Options by using Windows installation disc:
  • Insert the installation disc.
  • Restart your computer.
  • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
  • Click Repair your computer.
  • Select English as the keyboard language settings, and then click Next.
  • Select the operating system you want to repair, and then click Next.
  • Select your user account and click Next.
On the System Recovery Options menu you will get the following options:
    • Startup Repair

      System Restore

      Windows Complete PC Restore

      Windows Memory Diagnostic Tool

      Command Prompt

  • Select Command Prompt
  • In the command window type in notepad and press Enter.
  • The notepad opens. Under File menu select Open.
  • Select "Computer" and find your flash drive letter and close the notepad.
  • In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter

    Note: Replace letter e with the drive letter of your flash drive.

  • The tool will start to run.
  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
Link to post
Share on other sites

I am lost

 

I looked and looked hit and hit the F8 for the days, still no Advanced Boot Options.

a screen comes on and offer; safe mode, network safe mode or safe mode with command prompts. I even went to safe mode with command prompts nothing no offer to repair machine.

 

 I even checked on a vista board to see how to find Advanced Boot Options.  

Looked like I was doing every thing right still nothing but safe mode.

 

This is a friend computer and she has no disc around.

 

Any ideas?

Link to post
Share on other sites

Try to run it in Regular mode.

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system.  You can check here if you're not sure if your computer is 32-bit or 64-bit

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
Link to post
Share on other sites

here is 

 

 

 

 Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-12-2013

Ran by zeeland (administrator) on DONNATANAKA-PC on 11-12-2013 12:06:10
Running from C:\Users\zeeland\Desktop
Microsoft® Windows Vista™ Home Premium  Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 7
Boot Mode: Normal
 
==================== Processes (Whitelisted) ===================
 
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\WINDOWS\System32\SLsvc.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Conexant Systems, Inc.) C:\WINDOWS\System32\drivers\XAudio.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek Semiconductor) C:\WINDOWS\RtHDVCpl.exe
(Hewlett-Packard Company) C:\hp\support\hpsysdrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(OsdMaestro) C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Toolwiz) C:\Program Files\ToolwizCareFree\ToolwizCares.exe
() C:\Program Files\Snapfish Picture Mover\SnapfishMediaDetector.exe
(Toolwiz.com) C:\Program Files\ToolwizCareFree\ToolwizTools.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Hewlett-Packard Company) C:\hp\KBD\kbd.exe
 
==================== Registry (Whitelisted) ==================
 
HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-20] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\WINDOWS\RtHDVCpl.exe [4874240 2008-01-15] (Realtek Semiconductor)
HKLM\...\Run: [hpsysdrv] - C:\hp\support\hpsysdrv.exe [65536 2007-04-18] (Hewlett-Packard Company)
HKLM\...\Run: [KBD] - C:\hp\KBD\KbdStub.exe [65536 2006-12-08] ()
HKLM\...\Run: [OsdMaestro] - C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [118784 2007-02-15] (OsdMaestro)
HKLM\...\Run: [NvSvc] - RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [HP Health Check Scheduler] - [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [40048 2007-05-11] (Adobe Systems Incorporated)
HKLM\...\Run: [sunJavaUpdateSched] - C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe [132760 2007-04-07] (Sun Microsystems, Inc.)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKCU\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKCU\...\Run: [ToolwizCareFree] - C:\Program Files\ToolwizCareFree\ToolwizCares.exe [5286160 2013-11-26] (Toolwiz)
HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Default User\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)
HKU\Donna Tanaka\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Donna Tanaka\...\Run: [HPAdvisor] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)
HKU\Guest\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\Guest\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)
 
==================== Internet (Whitelisted) ====================
 
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=desktop
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=desktop
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=desktop
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=desktop
SearchScopes: HKLM - DefaultScope {508A4A7F-C702-4AE4-B67F-0343CD614D48} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvdt
SearchScopes: HKLM - {3A3F7E4B-FA3B-4DDF-9929-8994B6A30D65} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpd
SearchScopes: HKLM - {508A4A7F-C702-4AE4-B67F-0343CD614D48} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvdt
SearchScopes: HKCU - DefaultScope {508A4A7F-C702-4AE4-B67F-0343CD614D48} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvdt
SearchScopes: HKCU - {3A3F7E4B-FA3B-4DDF-9929-8994B6A30D65} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpd
SearchScopes: HKCU - {508A4A7F-C702-4AE4-B67F-0343CD614D48} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvdt
BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
 
Chrome: 
=======
CHR DefaultSearchKeyword: google.com
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}
CHR Extension: (Google Docs) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Bitdefender QuickScan) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.131_0
CHR Extension: (Gmail) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
 
========================== Services (Whitelisted) =================
 
R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [65536 2007-09-19] (Hewlett-Packard)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
 
==================== Drivers (Whitelisted) ====================
 
R1 BTOWSFF; C:\Windows\system32\Drivers\BTOWSFF.sys [27648 2013-11-26] (Toolwiz.com)
R0 BTOWSVF; C:\Windows\System32\Drivers\BTOWSVF.sys [45952 2013-11-26] (Toolwiz.com)
R0 KSafeDISK; C:\Windows\System32\Drivers\KSafeDISK.sys [48640 2013-11-26] (Toolwiz.com)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 MFE_RR; \??\C:\Users\zeeland\AppData\Local\Temp\mfe_rr.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
 
==================== NetSvcs (Whitelisted) ===================
 
 
Link to post
Share on other sites

part 2 it said my post was to long

 

 
==================== One Month Created Files and Folders ========
 
2013-12-11 12:06 - 2013-12-11 12:06 - 00010113 _____ C:\Users\zeeland\Desktop\FRST.txt
2013-12-11 12:06 - 2013-12-11 12:06 - 00000000 ____D C:\FRST
2013-12-11 12:05 - 2013-12-11 12:05 - 01060135 _____ (Farbar) C:\Users\zeeland\Desktop\FRST.exe
2013-12-08 15:27 - 2013-12-08 15:27 - 00000714 _____ C:\Windows\setupact.log
2013-12-08 15:27 - 2013-12-08 15:27 - 00000000 _____ C:\Windows\setuperr.log
2013-12-04 19:06 - 2013-12-04 19:21 - 00000000 ____D C:\Users\zeeland\Desktop\mbar
2013-12-04 19:06 - 2013-12-04 19:21 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-04 19:06 - 2013-12-04 19:13 - 00105176 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-04 19:06 - 2013-12-04 19:12 - 00075992 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-04 19:05 - 2013-12-04 19:05 - 12576792 _____ (Malwarebytes Corp.) C:\Users\zeeland\Downloads\mbar-1.07.0.1007 (1).exe
2013-12-04 19:05 - 2013-12-04 19:05 - 12576792 _____ (Malwarebytes Corp.) C:\Users\zeeland\Desktop\mbar-1.07.0.1007.exe
2013-12-04 19:03 - 2013-12-04 19:03 - 00000000 ____D C:\Users\zeeland\Desktop\help
2013-12-04 18:16 - 2013-12-04 18:16 - 00000908 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-04 18:16 - 2013-12-04 18:16 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Malwarebytes
2013-12-04 18:16 - 2013-12-04 18:16 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 18:16 - 2013-12-04 18:16 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-04 18:16 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-04 18:15 - 2013-12-04 18:15 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\zeeland\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-04 18:08 - 2013-12-04 18:08 - 00001917 _____ C:\Users\zeeland\Desktop\aswMBR.txt
2013-12-04 18:04 - 2013-12-04 18:04 - 00000104 _____ C:\Users\zeeland\Documents\Recycle Bin - Shortcut.lnk
2013-12-01 15:29 - 2013-12-01 15:29 - 00002384 _____ C:\Users\zeeland\Desktop\attach.txt
2013-12-01 15:29 - 2013-12-01 15:28 - 00010298 _____ C:\Users\zeeland\Desktop\dds.txt
2013-12-01 15:28 - 2013-12-01 15:28 - 00081276 _____ C:\Users\zeeland\Downloads\2.xps
2013-12-01 12:53 - 2013-12-01 12:53 - 00688992 ____R (Swearware) C:\Users\zeeland\Desktop\dds.com
2013-12-01 12:53 - 2013-12-01 12:53 - 00688992 _____ (Swearware) C:\Users\zeeland\Downloads\dds.scr
2013-12-01 12:32 - 2013-12-01 12:32 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131201_123229.log
2013-12-01 12:13 - 2013-12-01 12:13 - 00072192 _____ C:\Users\Guest\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-01 12:13 - 2013-12-01 12:13 - 00000951 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-01 12:13 - 2013-12-01 12:13 - 00000946 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2013-12-01 12:13 - 2013-12-01 12:13 - 00000917 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2013-12-01 12:13 - 2013-12-01 12:13 - 00000020 ___SH C:\Users\Guest\ntuser.ini
2013-12-01 12:13 - 2013-12-01 12:13 - 00000000 ____D C:\Users\Guest\AppData\Roaming\Snapfish
2013-12-01 12:13 - 2013-12-01 12:13 - 00000000 ____D C:\Users\Guest\AppData\Local\VirtualStore
2013-12-01 12:13 - 2013-12-01 12:13 - 00000000 ____D C:\Users\Guest
2013-12-01 12:13 - 2008-02-27 13:58 - 00001034 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite Deluxe.lnk
2013-12-01 12:13 - 2008-01-20 18:42 - 00000000 ___RD C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-01 12:13 - 2008-01-20 18:42 - 00000000 ___RD C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-29 18:53 - 2013-11-29 18:53 - 17245644 _____ C:\Users\zeeland\Downloads\fiction.xps
2013-11-29 18:21 - 2013-11-29 18:21 - 00860176 _____ (Microsoft Corporation) C:\Users\zeeland\Downloads\mssstool32.exe
2013-11-29 18:17 - 2013-11-29 18:17 - 00511248 _____ (Microsoft Corporation) C:\Users\zeeland\Downloads\nis_full.exe
2013-11-29 15:00 - 2013-12-04 18:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-11-29 14:58 - 2013-11-29 14:58 - 00000000 ____D C:\Windows\system32\MRT
2013-11-29 14:57 - 2011-03-03 06:56 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Apphlpdm.dll
2013-11-29 14:57 - 2011-03-03 05:01 - 04240384 _____ (Microsoft) C:\Windows\system32\GameUXLegacyGDFs.dll
2013-11-29 14:57 - 2008-03-07 20:21 - 01695744 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2013-11-29 14:56 - 2013-11-29 14:56 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131129_145639.log
2013-11-29 14:56 - 2013-11-29 14:56 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131129_145621.log
2013-11-29 14:56 - 2013-11-29 14:56 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131129_145618.log
2013-11-29 14:46 - 2013-11-29 14:46 - 00000680 _____ C:\Users\zeeland\AppData\Local\d3d9caps.dat
2013-11-29 13:42 - 2013-11-29 13:42 - 01441838 _____ C:\Users\zeeland\Downloads\Daily Deal Millionaires.zip
2013-11-28 19:13 - 2013-11-28 19:13 - 00283757 _____ C:\Users\zeeland\Desktop\3.xps
2013-11-28 19:12 - 2013-11-28 19:12 - 00081276 _____ C:\Users\zeeland\Desktop\2.xps
2013-11-28 19:11 - 2013-11-28 19:12 - 17245644 _____ C:\Users\zeeland\Desktop\fiction.xps
2013-11-28 18:51 - 2013-11-28 18:51 - 13317370 _____ C:\Users\zeeland\Desktop\Tee_Profits.zip
2013-11-28 18:33 - 2013-11-28 18:34 - 02990323 _____ C:\Users\zeeland\Downloads\KM.rar
2013-11-28 18:26 - 2013-11-28 18:26 - 19236964 _____ C:\DONNATANAKA-PC_2013.11.28-1752.27_9B31A9DB-00BD-00A1-006A-00153AC32D20_816.zip
2013-11-28 17:52 - 2013-11-28 18:26 - 00000000 ____D C:\Users\zeeland\Downloads\TrendMicro AntiThreat Toolkit
2013-11-28 17:48 - 2013-11-28 17:49 - 23658800 _____ (Trend Micro Inc.) C:\Users\zeeland\Downloads\attk_ScanCleanOnline_gui_x86.exe
2013-11-28 17:30 - 2013-11-28 17:30 - 03298896 _____ (Trend Micro Inc.) C:\Users\zeeland\Downloads\attk_collector_cli_x86 (1).exe
2013-11-28 17:27 - 2013-11-28 17:27 - 03298896 _____ (Trend Micro Inc.) C:\Users\zeeland\Downloads\attk_collector_cli_x86.exe
2013-11-28 17:24 - 2013-11-28 17:24 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131128_172405.log
2013-11-28 17:23 - 2013-11-28 17:23 - 00782640 _____ (McAfee, Inc.) C:\Users\zeeland\Downloads\rootkitremover.exe
2013-11-28 17:20 - 2013-11-28 17:20 - 07103512 _____ (Bitdefender LLC) C:\Users\zeeland\Desktop\BootkitRemoval_x86.exe
2013-11-28 17:13 - 2013-11-28 17:13 - 01258032 _____ C:\Users\zeeland\Downloads\avg_remover_bootkit (2).exe
2013-11-28 17:13 - 2013-11-28 17:13 - 00000151 _____ C:\Users\zeeland\Documents\VirusRemover.log
2013-11-28 17:12 - 2013-11-28 17:12 - 01258032 _____ C:\Users\zeeland\Downloads\avg_remover_bootkit (1).exe
2013-11-28 17:09 - 2013-11-28 17:09 - 01258032 _____ C:\Users\zeeland\Downloads\avg_remover_bootkit.exe
2013-11-28 17:03 - 2013-11-28 17:03 - 00044607 _____ C:\Users\zeeland\Downloads\bootkit_remover.zip
2013-11-28 17:02 - 2013-12-04 18:08 - 00000512 _____ C:\Users\zeeland\Desktop\MBR.dat
2013-11-28 17:02 - 2013-11-28 17:02 - 00002079 _____ C:\Users\zeeland\Downloads\aswMBR.txt
2013-11-28 15:36 - 2013-11-28 15:36 - 04745728 _____ (AVAST Software) C:\Users\zeeland\Downloads\aswMBR.exe
2013-11-28 15:33 - 2013-11-28 15:33 - 00235560 _____ C:\Users\zeeland\AppData\Local\census.cache
2013-11-28 15:33 - 2013-11-28 15:33 - 00199427 _____ C:\Users\zeeland\AppData\Local\ars.cache
2013-11-28 15:12 - 2013-11-28 15:12 - 02002320 _____ (Trend Micro Inc.) C:\Users\zeeland\Downloads\HousecallLauncher.exe
2013-11-28 15:12 - 2013-11-28 15:12 - 00000036 _____ C:\Users\zeeland\AppData\Local\housecall.guid.cache
2013-11-28 11:33 - 2013-11-28 11:33 - 00456799 _____ C:\Users\zeeland\Downloads\pg1155.txt
2013-11-28 10:41 - 2013-11-28 18:26 - 00000332 _____ C:\Users\zeeland\Downloads\Result.txt
2013-11-28 10:41 - 2013-11-28 10:41 - 00360587 _____ (Farbar) C:\Users\zeeland\Downloads\ListParts.exe
2013-11-28 10:07 - 2013-11-28 10:07 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-11-28 10:04 - 2013-11-28 10:04 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\zeeland\Downloads\tdsskiller.exe
2013-11-28 09:42 - 2013-11-28 09:42 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\CyberLink
2013-11-28 09:42 - 2013-11-28 09:42 - 00000000 ____D C:\Users\Public\CyberLink
2013-11-28 09:42 - 2013-11-28 09:42 - 00000000 ____D C:\ProgramData\CyberLink
2013-11-28 09:36 - 2013-11-28 09:41 - 389330944 _____ C:\Users\zeeland\Downloads\kav_rescue_10.iso
2013-11-28 09:33 - 2009-11-08 10:55 - 01130824 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2013-11-28 09:33 - 2009-11-08 10:55 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2013-11-28 09:33 - 2009-11-08 10:55 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2013-11-28 09:33 - 2009-11-08 10:55 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2013-11-28 09:33 - 2009-11-08 10:55 - 00049472 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2013-11-27 13:43 - 2013-11-27 13:44 - 89886059 _____ C:\Users\zeeland\Downloads\Unconfirmed 419508.crdownload
2013-11-27 12:32 - 2013-11-27 12:32 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\QuickScan
2013-11-27 12:27 - 2013-11-27 12:28 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\HpUpdate
2013-11-27 12:27 - 2013-11-27 12:27 - 00000000 ____D C:\Windows\Hewlett-Packard
2013-11-27 12:27 - 2010-09-06 08:24 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2013-11-27 12:27 - 2010-09-06 08:23 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll
2013-11-27 12:27 - 2009-08-24 04:16 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2013-11-27 12:25 - 2013-11-27 12:25 - 00000000 ____D C:\Users\zeeland\AppData\Local\Hewlett-Packard
2013-11-27 07:39 - 2008-06-19 17:14 - 00781344 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2013-11-27 07:39 - 2008-06-19 17:14 - 00622080 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2013-11-27 07:39 - 2008-06-19 17:14 - 00105016 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-27 07:39 - 2008-06-19 17:14 - 00097800 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2013-11-27 07:39 - 2008-06-19 17:14 - 00037384 _____ (Microsoft Corporation) C:\Windows\system32\infocardcpl.cpl
2013-11-27 07:39 - 2008-06-19 17:14 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2013-11-27 07:35 - 2008-07-27 10:03 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2013-11-27 07:35 - 2008-07-27 10:03 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2013-11-27 07:33 - 2010-02-20 15:39 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\nshhttp.dll
2013-11-27 07:33 - 2010-02-20 15:37 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
2013-11-27 07:33 - 2010-02-20 13:18 - 00411136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2013-11-27 07:30 - 2013-11-27 07:30 - 90642704 _____ (Microsoft Corporation) C:\Users\zeeland\Desktop\msert.exe
2013-11-26 13:53 - 2013-11-26 13:53 - 00002154 _____ C:\Windows\epplauncher.mif
2013-11-26 13:48 - 2013-11-26 13:48 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Macromedia
2013-11-26 13:46 - 2013-11-26 13:47 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-26 13:46 - 2010-04-05 06:50 - 00208966 _____ C:\Windows\system32\WFP.TMF
2013-11-26 13:37 - 2013-11-26 13:37 - 00869456 _____ C:\Users\zeeland\Downloads\Norton_Removal_Tool (1).exe
2013-11-26 13:35 - 2013-11-26 13:35 - 00869456 _____ C:\Users\zeeland\Downloads\Norton_Removal_Tool.exe
2013-11-26 13:24 - 2013-11-29 18:06 - 00000000 ___HD C:\TOOLWIZ
2013-11-26 13:24 - 2013-11-27 12:42 - 00000000 ____D C:\Users\zeeland\AppData\Local\ToolwizCareFree
2013-11-26 13:24 - 2013-11-26 13:24 - 00048640 _____ (Toolwiz.com) C:\Windows\system32\Drivers\KSafeDISK.sys
2013-11-26 13:24 - 2013-11-26 13:24 - 00045952 _____ (Toolwiz.com) C:\Windows\system32\Drivers\BTOWSVF.sys
2013-11-26 13:24 - 2013-11-26 13:24 - 00027648 _____ (Toolwiz.com) C:\Windows\system32\Drivers\BTOWSFF.sys
2013-11-26 13:24 - 2013-11-26 13:24 - 00000877 _____ C:\Users\zeeland\Desktop\Toolwiz Care.lnk
2013-11-26 13:24 - 2013-11-26 13:24 - 00000877 _____ C:\Users\Donna Tanaka\Desktop\Toolwiz Care.lnk
2013-11-26 13:24 - 2013-11-26 13:24 - 00000000 ____D C:\Program Files\ToolwizCareFree
2013-11-26 13:23 - 2013-11-26 13:23 - 07619344 _____ (ToolWiz) C:\Users\zeeland\Downloads\Setup_ToolwizCare.exe
2013-11-26 13:17 - 2013-11-26 13:18 - 11125072 _____ (Microsoft Corporation) C:\Users\zeeland\Downloads\mseinstall.exe
2013-11-26 13:15 - 2008-06-25 19:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2013-11-26 13:15 - 2008-06-25 17:45 - 12240896 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0007.dll
2013-11-26 13:15 - 2008-06-25 17:45 - 02644480 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0009.dll
2013-11-26 13:13 - 2013-11-26 13:13 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Hewlett-Packard
2013-11-26 13:12 - 2013-11-27 12:45 - 00072192 _____ C:\Users\zeeland\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-26 13:12 - 2013-11-26 13:12 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Symantec
2013-11-26 13:12 - 2013-11-26 13:12 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Snapfish
2013-11-26 13:12 - 2013-11-26 13:12 - 00000000 ____D C:\Users\zeeland\AppData\Local\Google
2013-11-26 13:11 - 2013-11-29 18:06 - 00000000 ____D C:\Users\zeeland
2013-11-26 13:11 - 2013-11-26 13:12 - 00000000 ____D C:\Users\zeeland\AppData\Local\VirtualStore
2013-11-26 13:11 - 2013-11-26 13:11 - 00000951 _____ C:\Users\zeeland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-26 13:11 - 2013-11-26 13:11 - 00000946 _____ C:\Users\zeeland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2013-11-26 13:11 - 2013-11-26 13:11 - 00000917 _____ C:\Users\zeeland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2013-11-26 13:11 - 2013-11-26 13:11 - 00000020 ___SH C:\Users\zeeland\ntuser.ini
2013-11-26 13:11 - 2008-02-27 13:58 - 00001034 _____ C:\Users\zeeland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite Deluxe.lnk
2013-11-26 13:11 - 2008-01-20 18:42 - 00000000 ___RD C:\Users\zeeland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-26 13:11 - 2008-01-20 18:42 - 00000000 ___RD C:\Users\zeeland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-26 10:13 - 2011-04-21 07:00 - 01174528 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-26 10:13 - 2011-04-21 07:00 - 00833024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 10:13 - 2011-04-21 06:59 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-26 10:13 - 2011-04-21 06:58 - 03593728 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 10:13 - 2011-04-21 06:58 - 00671232 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2013-11-26 10:13 - 2011-04-21 06:58 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-26 10:13 - 2011-04-21 06:58 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-26 10:13 - 2011-04-21 06:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 10:13 - 2011-04-21 06:57 - 06078976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 10:13 - 2011-04-21 06:57 - 00389120 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-26 10:13 - 2011-04-21 06:57 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 10:13 - 2011-04-21 06:57 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 10:13 - 2011-04-21 06:57 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-11-26 10:13 - 2011-04-21 06:57 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-26 10:13 - 2011-04-21 06:57 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\ieencode.dll
2013-11-26 10:13 - 2011-04-21 05:28 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-26 10:13 - 2011-04-21 05:08 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 10:13 - 2011-02-22 04:51 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2013-11-26 10:13 - 2011-02-16 07:29 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-11-26 10:13 - 2011-02-16 05:24 - 00292864 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-11-26 10:13 - 2010-12-28 06:57 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
2013-11-26 10:13 - 2010-09-10 10:18 - 10626560 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-11-26 10:13 - 2010-09-10 08:37 - 08147456 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-11-26 10:13 - 2010-06-16 07:12 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-11-26 10:13 - 2010-05-04 08:53 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 10:13 - 2010-04-16 08:10 - 00501760 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2013-11-26 10:13 - 2010-02-25 20:03 - 02452872 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-26 10:13 - 2009-08-14 08:29 - 00104960 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2013-11-26 10:13 - 2009-08-14 06:16 - 00027136 _____ (Microsoft Corporation) C:\Windows\system32\NETSTAT.EXE
2013-11-26 10:13 - 2009-08-14 06:16 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\ARP.EXE
2013-11-26 10:13 - 2009-08-14 06:16 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\ROUTE.EXE
2013-11-26 10:13 - 2009-08-14 06:16 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\MRINFO.EXE
2013-11-26 10:13 - 2009-08-14 06:16 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\finger.exe
2013-11-26 10:13 - 2009-08-14 06:16 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\TCPSVCS.EXE
2013-11-26 10:13 - 2009-08-14 06:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\HOSTNAME.EXE
2013-11-26 10:13 - 2009-06-15 07:20 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-11-26 10:13 - 2008-06-18 19:31 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2013-11-26 10:12 - 2011-07-06 06:56 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2013-11-26 10:12 - 2011-06-02 04:59 - 02042368 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-11-26 10:12 - 2011-04-29 04:49 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2013-11-26 10:12 - 2011-04-29 04:49 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2013-11-26 10:12 - 2011-04-29 04:49 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2013-11-26 10:12 - 2011-04-29 04:49 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2013-11-26 10:12 - 2011-04-21 05:16 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-26 10:12 - 2011-04-14 06:24 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys
2013-11-26 10:12 - 2011-03-10 08:12 - 01161728 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2013-11-26 10:12 - 2011-03-10 08:12 - 01136640 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2013-11-26 10:12 - 2011-03-02 06:49 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2013-11-26 10:12 - 2011-03-02 06:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2013-11-26 10:12 - 2011-02-18 05:31 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2013-11-26 10:12 - 2011-02-16 07:35 - 00430080 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-26 10:12 - 2011-02-16 07:32 - 00512000 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-26 10:12 - 2010-12-20 07:39 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2013-11-26 10:12 - 2010-12-14 07:49 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\sdclt.exe
2013-11-26 10:12 - 2010-10-15 06:08 - 03600272 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-11-26 10:12 - 2010-10-15 06:08 - 03548048 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-11-26 10:12 - 2010-10-15 05:48 - 01205080 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-11-26 10:12 - 2010-08-31 07:41 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll
2013-11-26 10:12 - 2010-08-26 08:07 - 00157184 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2013-11-26 10:12 - 2010-08-17 05:32 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2013-11-26 10:12 - 2010-06-28 08:15 - 01315840 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2013-11-26 10:12 - 2010-05-27 11:16 - 00081920 _____ (Radius Inc.) C:\Windows\system32\iccvid.dll
2013-11-26 10:12 - 2010-04-05 08:08 - 00317952 _____ (Microsoft Corporation) C:\Windows\system32\MP4SDECD.DLL
2013-11-26 10:12 - 2010-04-05 08:07 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2013-11-26 10:12 - 2009-09-10 09:30 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2013-11-26 10:12 - 2009-08-10 03:01 - 01399296 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2013-11-26 10:12 - 2009-07-17 06:35 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\atl.dll
2013-11-26 10:12 - 2009-07-11 11:32 - 00513024 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2013-11-26 10:12 - 2009-07-11 11:32 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2013-11-26 10:12 - 2009-07-11 11:32 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2013-11-26 10:12 - 2009-07-11 11:29 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\L2SecHC.dll
2013-11-26 10:12 - 2009-07-11 09:18 - 02501921 _____ C:\Windows\system32\wlan.tmf
2013-11-26 10:12 - 2009-07-10 04:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll
2013-11-26 10:12 - 2009-06-10 04:12 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2013-11-26 10:12 - 2009-06-10 04:11 - 02868224 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2013-11-26 10:12 - 2009-06-10 04:11 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
2013-11-26 10:12 - 2009-05-04 02:11 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe
2013-11-26 10:12 - 2009-04-23 04:42 - 00636928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2013-11-26 10:12 - 2008-10-20 21:25 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-26 10:12 - 2008-10-15 20:47 - 00466944 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2013-11-26 10:12 - 2008-06-25 19:29 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2013-11-26 10:12 - 2008-06-05 19:27 - 00562176 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2013-11-26 10:12 - 2008-06-05 19:27 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\xolehlp.dll
2013-11-26 10:12 - 2008-04-17 21:48 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\es.dll
2013-11-26 10:12 - 2008-04-04 19:34 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\pacerprf.dll
2013-11-26 10:12 - 2008-04-04 17:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
2013-11-26 10:11 - 2011-05-02 07:58 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2013-11-26 10:11 - 2011-01-21 07:46 - 11582464 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-11-26 10:11 - 2011-01-21 07:46 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
2013-11-26 10:11 - 2010-12-29 09:41 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2013-11-26 10:11 - 2010-12-29 09:41 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2013-11-26 10:11 - 2010-12-29 09:41 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\sbeio.dll
2013-11-26 10:11 - 2010-12-29 09:39 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax
2013-11-26 10:11 - 2010-11-06 03:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2013-11-26 10:11 - 2010-11-06 03:10 - 00345088 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
2013-11-26 10:11 - 2010-11-06 03:10 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2013-11-26 10:11 - 2010-11-06 03:09 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2013-11-26 10:11 - 2010-11-04 16:53 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2013-11-26 10:11 - 2010-10-28 04:56 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-11-26 10:11 - 2010-10-18 06:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-11-26 10:11 - 2010-08-31 07:41 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll
2013-11-26 10:11 - 2010-08-20 07:21 - 00866816 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2013-11-26 10:11 - 2010-06-18 08:43 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2013-11-26 10:11 - 2010-06-11 07:30 - 01257472 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2013-11-26 10:11 - 2010-05-04 10:39 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\msshsq.dll
2013-11-26 10:11 - 2010-04-16 08:10 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2013-11-26 10:11 - 2010-02-18 06:11 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2013-11-26 10:11 - 2010-02-18 03:52 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tunnel.sys
2013-11-26 10:11 - 2010-01-21 07:59 - 00062464 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\system32\l3codeca.acm
2013-11-26 10:11 - 2009-07-14 05:00 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2013-11-26 10:11 - 2009-07-14 04:59 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2013-11-26 10:11 - 2009-07-14 04:59 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2013-11-26 10:11 - 2009-07-14 04:58 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2013-11-26 10:11 - 2009-07-14 00:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.tlb
2013-11-26 10:11 - 2009-07-14 00:30 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\amcompat.tlb
2013-11-26 10:11 - 2009-06-15 10:20 - 00439896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-26 10:11 - 2009-06-15 07:24 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2013-11-26 10:11 - 2009-06-15 07:24 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-26 10:11 - 2009-06-15 07:23 - 01256448 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-26 10:11 - 2009-06-15 07:21 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2013-11-26 10:11 - 2009-06-15 04:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-26 10:11 - 2009-03-16 19:38 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\amxread.dll
2013-11-26 10:11 - 2009-03-16 19:38 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\apilogen.dll
2013-11-26 10:11 - 2009-03-02 20:39 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2013-11-26 10:11 - 2009-03-02 20:39 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\sdohlp.dll
2013-11-26 10:11 - 2009-03-02 20:39 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll
2013-11-26 10:11 - 2009-03-02 20:37 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
2013-11-26 10:11 - 2009-03-02 20:37 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\iasads.dll
2013-11-26 10:11 - 2009-03-02 20:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\iasdatastore.dll
2013-11-26 10:11 - 2009-03-02 19:04 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2013-11-26 10:11 - 2009-03-02 18:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\iashost.exe
2013-11-26 10:11 - 2009-02-13 00:49 - 00888832 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-11-26 10:11 - 2008-10-28 22:29 - 02927104 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-11-26 10:11 - 2008-08-11 19:39 - 00443392 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-11-26 10:11 - 2008-08-01 19:26 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-11-26 10:11 - 2008-08-01 17:01 - 00625152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-11-26 10:11 - 2008-06-25 19:29 - 00565248 _____ (Microsoft Corporation) C:\Windows\system32\emdmgmt.dll
2013-11-26 10:11 - 2008-06-25 19:29 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2013-11-26 10:11 - 2008-05-19 18:07 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2013-11-26 10:11 - 2008-05-09 17:33 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2013-11-26 10:11 - 2008-02-28 23:14 - 00019000 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2013-11-26 10:11 - 2008-02-28 23:11 - 00988216 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2013-11-26 10:11 - 2008-02-28 23:11 - 00927288 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2013-11-26 10:11 - 2008-02-28 22:53 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2013-11-26 10:11 - 2008-02-28 22:53 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2013-11-26 10:11 - 2008-02-28 22:53 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2013-11-26 10:11 - 2008-02-28 22:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\kbd106n.dll
2013-11-26 10:11 - 2008-02-28 20:12 - 00318464 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2013-11-26 10:11 - 2008-02-28 20:12 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\srdelayed.exe
2013-11-26 10:11 - 2008-02-21 21:05 - 00615992 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2013-11-26 10:10 - 2011-04-20 06:47 - 00375808 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-11-26 10:10 - 2011-04-20 06:44 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-11-26 10:10 - 2010-12-17 08:43 - 02067456 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-11-26 10:10 - 2010-12-17 07:06 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-11-26 10:10 - 2010-08-31 07:40 - 00531968 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-11-26 10:10 - 2010-06-16 07:56 - 00098192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2013-11-26 10:10 - 2010-06-16 07:55 - 00902032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-11-26 10:10 - 2010-06-16 07:55 - 00220040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2013-11-26 10:10 - 2010-06-16 07:11 - 00438272 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-26 10:10 - 2010-06-16 07:10 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-26 10:10 - 2010-06-16 07:09 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2013-11-26 10:10 - 2009-12-28 04:35 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
2013-11-26 10:10 - 2009-12-28 04:32 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\msvfw32.dll
2013-11-26 10:10 - 2009-12-28 04:32 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\msvidc32.dll
2013-11-26 10:10 - 2009-12-28 04:32 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\msyuv.dll
2013-11-26 10:10 - 2009-12-28 04:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msrle32.dll
2013-11-26 10:10 - 2009-12-28 04:31 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\mciavi32.dll
2013-11-26 10:10 - 2009-12-28 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\iyuv_32.dll
2013-11-26 10:10 - 2009-12-28 04:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\avifil32.dll
2013-11-26 10:10 - 2009-12-28 04:28 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\avicap32.dll
2013-11-26 10:10 - 2009-10-07 04:41 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2013-11-26 10:10 - 2009-10-07 04:41 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2013-11-26 10:10 - 2009-09-04 04:24 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
2013-11-26 10:10 - 2009-08-10 05:05 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2013-11-26 10:10 - 2009-04-23 04:43 - 00784896 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-11-26 10:10 - 2009-04-02 04:37 - 00604672 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2013-11-26 10:10 - 2008-06-22 17:59 - 00996352 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
2013-11-26 10:10 - 2008-06-22 17:58 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe
2013-11-26 10:10 - 2008-05-08 13:59 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2013-11-26 10:10 - 2008-05-08 13:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-11-26 10:10 - 2008-05-08 13:59 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-11-26 10:10 - 2008-05-08 13:59 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\wshext.dll
2013-11-26 10:10 - 2008-05-08 13:58 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-11-26 10:10 - 2008-05-08 13:58 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-11-26 10:05 - 2011-04-29 06:54 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-26 10:04 - 2013-11-19 02:21 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-26 10:03 - 2010-01-14 16:04 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cabview.dll
2013-11-26 10:03 - 2009-12-23 04:43 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-11-26 10:02 - 2013-11-26 10:02 - 00001973 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-26 10:01 - 2013-12-11 12:02 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-26 10:01 - 2013-12-04 19:11 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-26 10:01 - 2013-11-26 10:02 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Local\Google
2013-11-26 10:01 - 2013-11-26 10:02 - 00000000 ____D C:\Program Files\Google
2013-11-26 10:01 - 2013-11-26 10:01 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Local\Deployment
2013-11-26 10:01 - 2013-11-26 10:01 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Local\Apps\2.0
2013-11-26 09:57 - 2013-11-26 09:57 - 00000680 _____ C:\Users\Donna Tanaka\AppData\Local\d3d9caps.dat
2013-11-25 21:29 - 2013-11-25 21:29 - 00072192 _____ C:\Users\Donna Tanaka\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-25 21:29 - 2013-11-25 21:29 - 00000951 _____ C:\Users\Donna Tanaka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-25 21:29 - 2013-11-25 21:29 - 00000946 _____ C:\Users\Donna Tanaka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2013-11-25 21:29 - 2013-11-25 21:29 - 00000917 _____ C:\Users\Donna Tanaka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2013-11-25 21:29 - 2013-11-25 21:29 - 00000044 _____ C:\Windows\system\hpsysdrv.dat
2013-11-25 21:29 - 2013-11-25 21:29 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Roaming\Symantec
2013-11-25 21:29 - 2013-11-25 21:29 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Roaming\Snapfish
2013-11-25 21:29 - 2013-11-25 21:29 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Local\VirtualStore
2013-11-25 21:27 - 2013-11-25 21:27 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Roaming\Macromedia
2013-11-25 21:26 - 2013-11-25 21:30 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Roaming\Hewlett-Packard
2013-11-25 21:25 - 2013-11-25 21:25 - 00001853 _____ C:\Users\Public\Desktop\Internet & Digital Services.lnk
2013-11-25 21:25 - 2013-11-25 21:25 - 00001834 __RSH C:\Windows\system32\Drivers\103C_HP_CPC_KJ375AA-ABA s3400f_YC_0Pavi_QMXU810_E82NAv3PrA1_49_IAcacia_SASUSTek Computer INC._V1.02_B5.11_T080212_WUH1_L409_M3454_J500_7AMD_8Athlon 64 X2 Dual Core_92.7_#080429_N10DE03EF_Z14F12F20_G10DE03D0.MRK
2013-11-25 21:25 - 2008-02-27 14:08 - 00002117 _____ C:\Users\Public\Desktop\eBay.lnk
2013-11-25 21:25 - 2008-02-27 14:08 - 00002047 _____ C:\Users\Public\Desktop\MSN.lnk
2013-11-25 21:24 - 2013-11-25 21:29 - 00000000 ____D C:\Users\Donna Tanaka
2013-11-25 21:24 - 2013-11-25 21:24 - 00000020 ___SH C:\Users\Donna Tanaka\ntuser.ini
2013-11-25 21:24 - 2008-02-27 13:58 - 00001034 _____ C:\Users\Donna Tanaka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite Deluxe.lnk
2013-11-25 21:24 - 2008-01-20 18:42 - 00000000 ___RD C:\Users\Donna Tanaka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-25 21:24 - 2008-01-20 18:42 - 00000000 ___RD C:\Users\Donna Tanaka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-25 21:21 - 2013-12-11 12:06 - 01964121 _____ C:\Windows\WindowsUpdate.log
 
==================== One Month Modified Files and Folders =======
 
2013-12-11 12:06 - 2013-12-11 12:06 - 00010113 _____ C:\Users\zeeland\Desktop\FRST.txt
2013-12-11 12:06 - 2013-12-11 12:06 - 00000000 ____D C:\FRST
2013-12-11 12:06 - 2013-11-25 21:21 - 01964121 _____ C:\Windows\WindowsUpdate.log
2013-12-11 12:05 - 2013-12-11 12:05 - 01060135 _____ (Farbar) C:\Users\zeeland\Desktop\FRST.exe
2013-12-11 12:02 - 2013-11-26 10:01 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-11 12:02 - 2006-11-02 05:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-11 12:02 - 2006-11-02 04:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-11 12:02 - 2006-11-02 04:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-08 15:27 - 2013-12-08 15:27 - 00000714 _____ C:\Windows\setupact.log
2013-12-08 15:27 - 2013-12-08 15:27 - 00000000 _____ C:\Windows\setuperr.log
2013-12-08 15:27 - 2006-11-02 05:01 - 00016780 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-04 19:21 - 2013-12-04 19:06 - 00000000 ____D C:\Users\zeeland\Desktop\mbar
2013-12-04 19:21 - 2013-12-04 19:06 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-04 19:13 - 2013-12-04 19:06 - 00105176 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-04 19:12 - 2013-12-04 19:06 - 00075992 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2013-12-04 19:11 - 2013-11-26 10:01 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-04 19:05 - 2013-12-04 19:05 - 12576792 _____ (Malwarebytes Corp.) C:\Users\zeeland\Downloads\mbar-1.07.0.1007 (1).exe
2013-12-04 19:05 - 2013-12-04 19:05 - 12576792 _____ (Malwarebytes Corp.) C:\Users\zeeland\Desktop\mbar-1.07.0.1007.exe
2013-12-04 19:03 - 2013-12-04 19:03 - 00000000 ____D C:\Users\zeeland\Desktop\help
2013-12-04 18:16 - 2013-12-04 18:16 - 00000908 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-04 18:16 - 2013-12-04 18:16 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Malwarebytes
2013-12-04 18:16 - 2013-12-04 18:16 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-04 18:16 - 2013-12-04 18:16 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-04 18:15 - 2013-12-04 18:15 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\zeeland\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-04 18:08 - 2013-12-04 18:08 - 00001917 _____ C:\Users\zeeland\Desktop\aswMBR.txt
2013-12-04 18:08 - 2013-11-28 17:02 - 00000512 _____ C:\Users\zeeland\Desktop\MBR.dat
2013-12-04 18:04 - 2013-12-04 18:04 - 00000104 _____ C:\Users\zeeland\Documents\Recycle Bin - Shortcut.lnk
2013-12-04 18:03 - 2013-11-29 15:00 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-12-01 15:29 - 2013-12-01 15:29 - 00002384 _____ C:\Users\zeeland\Desktop\attach.txt
2013-12-01 15:28 - 2013-12-01 15:29 - 00010298 _____ C:\Users\zeeland\Desktop\dds.txt
2013-12-01 15:28 - 2013-12-01 15:28 - 00081276 _____ C:\Users\zeeland\Downloads\2.xps
2013-12-01 12:53 - 2013-12-01 12:53 - 00688992 ____R (Swearware) C:\Users\zeeland\Desktop\dds.com
2013-12-01 12:53 - 2013-12-01 12:53 - 00688992 _____ (Swearware) C:\Users\zeeland\Downloads\dds.scr
2013-12-01 12:32 - 2013-12-01 12:32 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131201_123229.log
2013-12-01 12:13 - 2013-12-01 12:13 - 00072192 _____ C:\Users\Guest\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-01 12:13 - 2013-12-01 12:13 - 00000951 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-01 12:13 - 2013-12-01 12:13 - 00000946 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2013-12-01 12:13 - 2013-12-01 12:13 - 00000917 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2013-12-01 12:13 - 2013-12-01 12:13 - 00000020 ___SH C:\Users\Guest\ntuser.ini
2013-12-01 12:13 - 2013-12-01 12:13 - 00000000 ____D C:\Users\Guest\AppData\Roaming\Snapfish
2013-12-01 12:13 - 2013-12-01 12:13 - 00000000 ____D C:\Users\Guest\AppData\Local\VirtualStore
2013-12-01 12:13 - 2013-12-01 12:13 - 00000000 ____D C:\Users\Guest
2013-11-29 18:53 - 2013-11-29 18:53 - 17245644 _____ C:\Users\zeeland\Downloads\fiction.xps
2013-11-29 18:21 - 2013-11-29 18:21 - 00860176 _____ (Microsoft Corporation) C:\Users\zeeland\Downloads\mssstool32.exe
2013-11-29 18:17 - 2013-11-29 18:17 - 00511248 _____ (Microsoft Corporation) C:\Users\zeeland\Downloads\nis_full.exe
2013-11-29 18:06 - 2013-11-26 13:24 - 00000000 ___HD C:\TOOLWIZ
2013-11-29 18:06 - 2013-11-26 13:11 - 00000000 ____D C:\Users\zeeland
2013-11-29 14:58 - 2013-11-29 14:58 - 00000000 ____D C:\Windows\system32\MRT
2013-11-29 14:56 - 2013-11-29 14:56 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131129_145639.log
2013-11-29 14:56 - 2013-11-29 14:56 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131129_145621.log
2013-11-29 14:56 - 2013-11-29 14:56 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131129_145618.log
2013-11-29 14:46 - 2013-11-29 14:46 - 00000680 _____ C:\Users\zeeland\AppData\Local\d3d9caps.dat
2013-11-29 13:42 - 2013-11-29 13:42 - 01441838 _____ C:\Users\zeeland\Downloads\Daily Deal Millionaires.zip
2013-11-28 19:13 - 2013-11-28 19:13 - 00283757 _____ C:\Users\zeeland\Desktop\3.xps
2013-11-28 19:12 - 2013-11-28 19:12 - 00081276 _____ C:\Users\zeeland\Desktop\2.xps
2013-11-28 19:12 - 2013-11-28 19:11 - 17245644 _____ C:\Users\zeeland\Desktop\fiction.xps
2013-11-28 18:51 - 2013-11-28 18:51 - 13317370 _____ C:\Users\zeeland\Desktop\Tee_Profits.zip
2013-11-28 18:34 - 2013-11-28 18:33 - 02990323 _____ C:\Users\zeeland\Downloads\KM.rar
2013-11-28 18:26 - 2013-11-28 18:26 - 19236964 _____ C:\DONNATANAKA-PC_2013.11.28-1752.27_9B31A9DB-00BD-00A1-006A-00153AC32D20_816.zip
2013-11-28 18:26 - 2013-11-28 17:52 - 00000000 ____D C:\Users\zeeland\Downloads\TrendMicro AntiThreat Toolkit
2013-11-28 18:26 - 2013-11-28 10:41 - 00000332 _____ C:\Users\zeeland\Downloads\Result.txt
2013-11-28 17:49 - 2013-11-28 17:48 - 23658800 _____ (Trend Micro Inc.) C:\Users\zeeland\Downloads\attk_ScanCleanOnline_gui_x86.exe
2013-11-28 17:30 - 2013-11-28 17:30 - 03298896 _____ (Trend Micro Inc.) C:\Users\zeeland\Downloads\attk_collector_cli_x86 (1).exe
2013-11-28 17:27 - 2013-11-28 17:27 - 03298896 _____ (Trend Micro Inc.) C:\Users\zeeland\Downloads\attk_collector_cli_x86.exe
2013-11-28 17:24 - 2013-11-28 17:24 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131128_172405.log
2013-11-28 17:23 - 2013-11-28 17:23 - 00782640 _____ (McAfee, Inc.) C:\Users\zeeland\Downloads\rootkitremover.exe
2013-11-28 17:20 - 2013-11-28 17:20 - 07103512 _____ (Bitdefender LLC) C:\Users\zeeland\Desktop\BootkitRemoval_x86.exe
2013-11-28 17:13 - 2013-11-28 17:13 - 01258032 _____ C:\Users\zeeland\Downloads\avg_remover_bootkit (2).exe
2013-11-28 17:13 - 2013-11-28 17:13 - 00000151 _____ C:\Users\zeeland\Documents\VirusRemover.log
2013-11-28 17:12 - 2013-11-28 17:12 - 01258032 _____ C:\Users\zeeland\Downloads\avg_remover_bootkit (1).exe
2013-11-28 17:09 - 2013-11-28 17:09 - 01258032 _____ C:\Users\zeeland\Downloads\avg_remover_bootkit.exe
2013-11-28 17:03 - 2013-11-28 17:03 - 00044607 _____ C:\Users\zeeland\Downloads\bootkit_remover.zip
2013-11-28 17:02 - 2013-11-28 17:02 - 00002079 _____ C:\Users\zeeland\Downloads\aswMBR.txt
2013-11-28 15:36 - 2013-11-28 15:36 - 04745728 _____ (AVAST Software) C:\Users\zeeland\Downloads\aswMBR.exe
2013-11-28 15:33 - 2013-11-28 15:33 - 00235560 _____ C:\Users\zeeland\AppData\Local\census.cache
2013-11-28 15:33 - 2013-11-28 15:33 - 00199427 _____ C:\Users\zeeland\AppData\Local\ars.cache
2013-11-28 15:12 - 2013-11-28 15:12 - 02002320 _____ (Trend Micro Inc.) C:\Users\zeeland\Downloads\HousecallLauncher.exe
2013-11-28 15:12 - 2013-11-28 15:12 - 00000036 _____ C:\Users\zeeland\AppData\Local\housecall.guid.cache
2013-11-28 11:33 - 2013-11-28 11:33 - 00456799 _____ C:\Users\zeeland\Downloads\pg1155.txt
2013-11-28 10:41 - 2013-11-28 10:41 - 00360587 _____ (Farbar) C:\Users\zeeland\Downloads\ListParts.exe
2013-11-28 10:24 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\rescache
2013-11-28 10:17 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-11-28 10:07 - 2013-11-28 10:07 - 00000000 ____D C:\TDSSKiller_Quarantine
2013-11-28 10:04 - 2013-11-28 10:04 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\zeeland\Downloads\tdsskiller.exe
2013-11-28 09:42 - 2013-11-28 09:42 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\CyberLink
2013-11-28 09:42 - 2013-11-28 09:42 - 00000000 ____D C:\Users\Public\CyberLink
2013-11-28 09:42 - 2013-11-28 09:42 - 00000000 ____D C:\ProgramData\CyberLink
2013-11-28 09:42 - 2006-11-02 03:18 - 00000000 ___RD C:\Users\Public
2013-11-28 09:41 - 2013-11-28 09:36 - 389330944 _____ C:\Users\zeeland\Downloads\kav_rescue_10.iso
2013-11-27 13:44 - 2013-11-27 13:43 - 89886059 _____ C:\Users\zeeland\Downloads\Unconfirmed 419508.crdownload
2013-11-27 12:45 - 2013-11-26 13:12 - 00072192 _____ C:\Users\zeeland\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-27 12:45 - 2006-11-02 04:47 - 00286144 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-27 12:42 - 2013-11-26 13:24 - 00000000 ____D C:\Users\zeeland\AppData\Local\ToolwizCareFree
2013-11-27 12:42 - 2008-02-27 14:13 - 00000000 ____D C:\Windows\SMINST
2013-11-27 12:32 - 2013-11-27 12:32 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\QuickScan
2013-11-27 12:28 - 2013-11-27 12:27 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\HpUpdate
2013-11-27 12:27 - 2013-11-27 12:27 - 00000000 ____D C:\Windows\Hewlett-Packard
2013-11-27 12:27 - 2008-02-27 13:52 - 00000000 ____D C:\Program Files\HP
2013-11-27 12:25 - 2013-11-27 12:25 - 00000000 ____D C:\Users\zeeland\AppData\Local\Hewlett-Packard
2013-11-27 08:41 - 2006-11-02 02:33 - 00690960 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-27 08:34 - 2006-11-02 04:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2013-11-27 08:34 - 2006-11-02 04:37 - 00000000 ____D C:\Program Files\Movie Maker
2013-11-27 07:49 - 2008-02-27 14:01 - 00000000 ____D C:\Program Files\Microsoft Works
2013-11-27 07:32 - 2006-11-02 03:18 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-11-27 07:30 - 2013-11-27 07:30 - 90642704 _____ (Microsoft Corporation) C:\Users\zeeland\Desktop\msert.exe
2013-11-26 13:53 - 2013-11-26 13:53 - 00002154 _____ C:\Windows\epplauncher.mif
2013-11-26 13:48 - 2013-11-26 13:48 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Macromedia
2013-11-26 13:47 - 2013-11-26 13:46 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-26 13:41 - 2008-02-27 14:10 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-11-26 13:37 - 2013-11-26 13:37 - 00869456 _____ C:\Users\zeeland\Downloads\Norton_Removal_Tool (1).exe
2013-11-26 13:35 - 2013-11-26 13:35 - 00869456 _____ C:\Users\zeeland\Downloads\Norton_Removal_Tool.exe
2013-11-26 13:24 - 2013-11-26 13:24 - 00048640 _____ (Toolwiz.com) C:\Windows\system32\Drivers\KSafeDISK.sys
2013-11-26 13:24 - 2013-11-26 13:24 - 00045952 _____ (Toolwiz.com) C:\Windows\system32\Drivers\BTOWSVF.sys
2013-11-26 13:24 - 2013-11-26 13:24 - 00027648 _____ (Toolwiz.com) C:\Windows\system32\Drivers\BTOWSFF.sys
2013-11-26 13:24 - 2013-11-26 13:24 - 00000877 _____ C:\Users\zeeland\Desktop\Toolwiz Care.lnk
2013-11-26 13:24 - 2013-11-26 13:24 - 00000877 _____ C:\Users\Donna Tanaka\Desktop\Toolwiz Care.lnk
2013-11-26 13:24 - 2013-11-26 13:24 - 00000000 ____D C:\Program Files\ToolwizCareFree
2013-11-26 13:23 - 2013-11-26 13:23 - 07619344 _____ (ToolWiz) C:\Users\zeeland\Downloads\Setup_ToolwizCare.exe
2013-11-26 13:18 - 2013-11-26 13:17 - 11125072 _____ (Microsoft Corporation) C:\Users\zeeland\Downloads\mseinstall.exe
2013-11-26 13:13 - 2013-11-26 13:13 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Hewlett-Packard
2013-11-26 13:12 - 2013-11-26 13:12 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Symantec
2013-11-26 13:12 - 2013-11-26 13:12 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Snapfish
2013-11-26 13:12 - 2013-11-26 13:12 - 00000000 ____D C:\Users\zeeland\AppData\Local\Google
2013-11-26 13:12 - 2013-11-26 13:11 - 00000000 ____D C:\Users\zeeland\AppData\Local\VirtualStore
2013-11-26 13:11 - 2013-11-26 13:11 - 00000951 _____ C:\Users\zeeland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-26 13:11 - 2013-11-26 13:11 - 00000946 _____ C:\Users\zeeland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2013-11-26 13:11 - 2013-11-26 13:11 - 00000917 _____ C:\Users\zeeland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2013-11-26 13:11 - 2013-11-26 13:11 - 00000020 ___SH C:\Users\zeeland\ntuser.ini
2013-11-26 10:02 - 2013-11-26 10:02 - 00001973 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-11-26 10:02 - 2013-11-26 10:01 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Local\Google
2013-11-26 10:02 - 2013-11-26 10:01 - 00000000 ____D C:\Program Files\Google
2013-11-26 10:01 - 2013-11-26 10:01 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Local\Deployment
2013-11-26 10:01 - 2013-11-26 10:01 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Local\Apps\2.0
2013-11-26 09:57 - 2013-11-26 09:57 - 00000680 _____ C:\Users\Donna Tanaka\AppData\Local\d3d9caps.dat
2013-11-26 09:57 - 2008-02-27 13:37 - 00000000 ___HD C:\hp
2013-11-25 21:30 - 2013-11-25 21:26 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Roaming\Hewlett-Packard
2013-11-25 21:30 - 2008-02-27 14:04 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2013-11-25 21:29 - 2013-11-25 21:29 - 00072192 _____ C:\Users\Donna Tanaka\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-25 21:29 - 2013-11-25 21:29 - 00000951 _____ C:\Users\Donna Tanaka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-25 21:29 - 2013-11-25 21:29 - 00000946 _____ C:\Users\Donna Tanaka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2013-11-25 21:29 - 2013-11-25 21:29 - 00000917 _____ C:\Users\Donna Tanaka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2013-11-25 21:29 - 2013-11-25 21:29 - 00000044 _____ C:\Windows\system\hpsysdrv.dat
2013-11-25 21:29 - 2013-11-25 21:29 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Roaming\Symantec
2013-11-25 21:29 - 2013-11-25 21:29 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Roaming\Snapfish
2013-11-25 21:29 - 2013-11-25 21:29 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Local\VirtualStore
2013-11-25 21:29 - 2013-11-25 21:24 - 00000000 ____D C:\Users\Donna Tanaka
2013-11-25 21:29 - 2008-02-27 13:51 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-25 21:29 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system
2013-11-25 21:27 - 2013-11-25 21:27 - 00000000 ____D C:\Users\Donna Tanaka\AppData\Roaming\Macromedia
2013-11-25 21:25 - 2013-11-25 21:25 - 00001853 _____ C:\Users\Public\Desktop\Internet & Digital Services.lnk
2013-11-25 21:25 - 2013-11-25 21:25 - 00001834 __RSH C:\Windows\system32\Drivers\103C_HP_CPC_KJ375AA-ABA s3400f_YC_0Pavi_QMXU810_E82NAv3PrA1_49_IAcacia_SASUSTek Computer INC._V1.02_B5.11_T080212_WUH1_L409_M3454_J500_7AMD_8Athlon 64 X2 Dual Core_92.7_#080429_N10DE03EF_Z14F12F20_G10DE03D0.MRK
2013-11-25 21:25 - 2008-02-27 14:05 - 00000000 ___RD C:\Program Files\Online Services
2013-11-25 21:25 - 2006-11-02 04:37 - 00000000 ____D C:\Windows\system32\restore
2013-11-25 21:24 - 2013-11-25 21:24 - 00000020 ___SH C:\Users\Donna Tanaka\ntuser.ini
2013-11-25 21:21 - 2006-11-02 03:18 - 00000000 __RHD C:\Users\Default
2013-11-25 21:16 - 2008-02-27 13:37 - 00000000 ____D C:\Windows\Panther
2013-11-19 02:21 - 2013-11-26 10:04 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
 
Some content of TEMP:
====================
C:\Users\Donna Tanaka\AppData\Local\Temp\swt-win32-3333.dll
C:\Users\Donna Tanaka\AppData\Local\Temp\symlcsv1.exe
 
 
==================== Bamital & volsnap Check =================
 
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 
LastRegBack: 2013-12-04 18:15
 
==================== End Of Log ============================
 
 
 
 
 
 
 

 

Link to post
Share on other sites

here is the second scan

 

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-12-2013
Ran by zeeland at 2013-12-11 12:06:55
Running from C:\Users\zeeland\Desktop
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
 
==================== Installed Programs ======================
 
Adobe Flash Player ActiveX (Version: 9.0.45.0)
Adobe Reader 8.1.0 (Version: 8.1.0)
Cards_Calendar_OrderGift_DoMorePlugout (Version: 1.00.0000)
Compatibility Pack for the 2007 Office system (Version: 12.0.6612.1000)
CyberLink DVD Suite Deluxe (Version: 5.5.1126)
Enhanced Multimedia Keyboard Solution
Google Chrome (Version: 31.0.1650.57)
Google Update Helper (Version: 1.3.21.165)
Hardware Diagnostic Tools (Version: 5.1.4708.19)
Hewlett-Packard Active Check (Version: 1.1.11.0)
Hewlett-Packard Asset Agent for Health Check (Version: 2.0.62.5)
HP Customer Experience Enhancements (Version: 5.6.0.2499)
HP Customer Feedback (Version: 1.0.0)
HP Demo (Version: 4.1.0)
HP Easy Setup - Frontend (Version: 5.6.0.2542)
HP On-Screen Cap/Num/Scroll Lock Indicator
HP Photosmart Essential 2.5 (Version: 1.02.0000)
HP Photosmart Essential 2.5 (Version: 2.5)
HP Picasso Media Center Add-In (Version: 1.0.0)
HP Total Care Advisor (Version: 1.6.12.2542)
HP Update (Version: 5.005.000.002)
HPPhotoSmartPhotobookWebPack1 (Version: 1.00.0000)
Java SE Runtime Environment 6 Update 1 (Version: 1.6.0.10)
LabelPrint (Version: 2.2.2329)
LightScribe System Software  1.10.23.1 (Version: 1.10.23.1)
LightScribeTemplateLabeler (Version: 1.10.23.1)
Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Office Home and Student 60 day trial
Microsoft Office PowerPoint Viewer 2007 (English) (Version: 12.0.6612.1000)
Microsoft Security Client (Version: 4.4.0304.0)
Microsoft Security Essentials (Version: 4.4.304.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Works (Version: 9.7.0621)
muvee autoProducer 6.1 (Version: 6.10.050)
My HP Games (Version: HPCMPQ1902)
NVIDIA Drivers
Power2Go (Version: 5.6.3610)
PowerDirector (Version: 6.5.2420)
PSSWCORE (Version: 2.02.0000)
Python 2.5 (Version: 2.5.150)
Realtek High Definition Audio Driver
Snapfish Picture Mover (Version: 1.9.0.16)
Soft Data Fax Modem with SmartCP (Version: 7.74.00)
Toolwiz Care (Version: 3.1.0.5100)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
VideoToolkit01 (Version: 100.0.128.000)
WeatherBug Gadget (Version: 1.0.0.6)
Yahoo! Toolbar
 
==================== Restore Points  =========================
 
26-11-2013 05:25:15 Scripted restore
26-11-2013 18:04:20 Windows Update
26-11-2013 21:24:42 Toolwiz Care(3.1.0.5100)
26-11-2013 21:46:25 Windows Update
26-11-2013 21:51:10 Windows Update
26-11-2013 22:00:06 Windows Update
27-11-2013 15:30:51 Windows Update
28-11-2013 17:32:32 Windows Update
28-11-2013 17:41:50 Windows Update
29-11-2013 21:44:14 Windows Update
29-11-2013 22:57:36 Windows Update
29-11-2013 23:18:11 Windows Update
30-11-2013 02:15:41 Windows Update
30-11-2013 02:18:22 Windows Update
05-12-2013 01:52:34 Windows Update
05-12-2013 03:15:28 Windows Update
 
==================== Hosts content: ==========================
 
2006-11-02 02:23 - 2006-09-18 13:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost
 
==================== Scheduled Tasks (whitelisted) =============
 
Task: {14BE614B-BFEE-4332-84E9-5577E2FF7E50} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-26] (Google Inc.)
Task: {1C4F2298-1498-4526-8383-4F6CB5437ED0} - System32\Tasks\ExtendedServicePlan => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-12-17] ()
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {29FBD9BE-9C1F-4EB9-8151-B9F090620079} - System32\Tasks\PC-Doctor\Scheduled Maintenance => C:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe [2007-10-04] (PC-Doctor, Inc.)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3FE2FF18-EFF6-4249-8E42-C61ABC6F52BB} - System32\Tasks\ServicePlan => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-12-17] ()
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\WINDOWS\System32\RacAgent.exe [2008-01-20] (Microsoft Corporation)
Task: {5B1F54CC-7F50-4B7D-9C33-86B5E427E135} - System32\Tasks\PC-Doctor\Scheduled Maintenance Swap => C:\Program Files\PC-Doctor 5 for Windows\task_swap.bat [2008-02-27] ()
Task: {73F25119-D79E-4FEA-9265-72C3292D2848} - System32\Tasks\IntenetServiceOffers => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-12-17] ()
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => C:\WINDOWS\System32\pla.dll [2008-01-20] (Microsoft Corporation)
Task: {C2518D44-021D-40B8-B161-22170A16F23A} - System32\Tasks\ToolwizCareFree => C:\Program Files\ToolwizCareFree\ToolwizCares.exe [2013-11-26] (Toolwiz)
Task: {C2E45A30-41F1-45B2-9C0B-CB35B473A2A4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-26] (Google Inc.)
Task: {D58921BA-0D80-4346-99BA-796CEA5807DD} - System32\Tasks\RecoveryCD => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-12-17] ()
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\WINDOWS\System32\gatherWirelessInfo.vbs [2008-01-20] ()
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (whitelisted) =============
 
 
==================== Safe Mode (whitelisted) ===================
 
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (12/11/2013 00:03:14 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/04/2013 06:11:56 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/04/2013 06:04:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/04/2013 05:50:28 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/01/2013 03:28:17 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/01/2013 03:27:20 PM) (Source: EventSystem) (User: )
Description: d:\vistasp1_gdr\com\complus\src\events\tier1\eventsystemobj.cpp458007043c
 
Error: (12/01/2013 00:14:28 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/01/2013 00:07:35 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (11/29/2013 06:07:59 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (11/29/2013 03:07:59 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
System errors:
=============
Error: (12/11/2013 00:03:15 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
 
Error: (12/11/2013 00:03:07 PM) (Source: Microsoft Antimalware) (User: )
Description: %Trojan:DOS/Alureon.K60 has encountered a critical error when taking action on malware or other potentially unwanted software.
 
For more information please see the following:
%Trojan:DOS/Alureon.K603
 
Name: Trojan:DOS/Alureon.K
 
 
Severity: %Trojan:DOS/Alureon.K600
 
Category: %Trojan:DOS/Alureon.K602
 
Path: 4.4.0304.02
 
Detection Origin: 4.4.0304.04
 
Detection Type: 4.4.0304.08
 
Detection Source: %Trojan:DOS/Alureon.K608
 
User: {C18C25C1-0222-4014-8C0F-D028060F7894}9
 
Process Name: %Trojan:DOS/Alureon.K609
 
Action: {C18C25C1-0222-4014-8C0F-D028060F7894}1
 
Action Status:  {C18C25C1-0222-4014-8C0F-D028060F7894}8
 
Error Code: {C18C25C1-0222-4014-8C0F-D028060F7894}3
 
Error description: {C18C25C1-0222-4014-8C0F-D028060F7894}4
 
Signature Version: 2013-12-11T20:02:28.122Z1
 
Engine Version: 2013-12-11T20:02:28.122Z2
 
Error: (12/11/2013 00:02:16 PM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueueKerberos
 
Error: (12/08/2013 03:27:34 PM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueueKerberos
 
Error: (12/04/2013 08:05:26 PM) (Source: DCOM) (User: )
Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}
 
Error: (12/04/2013 08:05:03 PM) (Source: DCOM) (User: )
Description: {6295DF2D-35EE-11D1-8707-00C04FD93327}
 
Error: (12/04/2013 07:21:49 PM) (Source: mbamchameleon) (User: )
Description: PROGRAM FILES\MICROSOFT SECURITY CLIENT\MPCMDRUN.EXE
 
Error: (12/04/2013 07:21:49 PM) (Source: mbamchameleon) (User: )
Description: PROGRAM FILES\MICROSOFT SECURITY CLIENT\MPCMDRUN.EXE
 
Error: (12/04/2013 07:21:49 PM) (Source: mbamchameleon) (User: )
Description: \PROGRAM FILES\MICROSOFT SECURITY CLIENT\MSSECES.EXE
 
Error: (12/04/2013 07:21:49 PM) (Source: mbamchameleon) (User: )
Description: 1\PROGRAM FILES\MICROSOFT SECURITY CLIENT\NISSRV.EXE
 
 
Microsoft Office Sessions:
=========================
Error: (12/11/2013 00:03:14 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/04/2013 06:11:56 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/04/2013 06:04:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/04/2013 05:50:28 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/01/2013 03:28:17 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/01/2013 03:27:20 PM) (Source: EventSystem)(User: )
Description: d:\vistasp1_gdr\com\complus\src\events\tier1\eventsystemobj.cpp458007043c
 
Error: (12/01/2013 00:14:28 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/01/2013 00:07:35 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (11/29/2013 06:07:59 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (11/29/2013 03:07:59 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
CodeIntegrity Errors:
===================================
  Date: 2013-12-11 12:06:52.968
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-11 12:06:52.906
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-11 12:06:52.832
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-11 12:06:52.769
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-11 12:06:51.589
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-11 12:06:51.529
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-11 12:06:51.465
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-11 12:06:51.400
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-11 12:06:51.341
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-11 12:06:51.281
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\tcpip.sys because the set of per-page image hashes could not be found on the system.
 
 
==================== Memory info =========================== 
 
Percentage of memory in use: 34%
Total physical RAM: 3453.64 MB
Available physical RAM: 2251.72 MB
Total Pagefile: 7097.76 MB
Available Pagefile: 5898.94 MB
Total Virtual: 2047.88 MB
Available Virtual: 1912.92 MB
 
==================== Drives ================================
 
Drive c: (HP) (Fixed) (Total:456.43 GB) (Free:407.07 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (FACTORY_IMAGE) (Fixed) (Total:9.33 GB) (Free:1.27 GB) NTFS ==>[system with boot components (obtained from reading drive)]
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 1549F232)
Partition 1: (Active) - (Size=456 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=2544 KB) - (Type=17) ATTENTION ===> Suspicious partition bootkit on partition 2
Partition 3: (Not Active) - (Size=9 GB) - (Type=07 NTFS)
 
==================== End Of Log ============================
Link to post
Share on other sites

Thanks!

Step 1

Please download the latest version of TDSSKiller from here and save it to your Desktop.

  • Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.

    image000q.png

  • Put a checkmark beside loaded modules.

    2012081514h0118.png

  • A reboot will be needed to apply the changes. Do it.
  • TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
  • Then click on Change parameters in TDSSKiller.
  • Check all boxes then click OK.

    2012081517h0349.png

  • Click the Start Scan button.

    19695967.jpg

  • The scan should take no longer than 2 minutes.
  • If a suspicious object is detected, the default action will be Skip, click on Continue.

    67776163.jpg

  • If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.

    Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.

    62117367.jpg

    Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.

  • A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
  • Step 2

    Note: Please do not run this tool without special supervision and instructions of someone authorized to do so. Otherwise, you could end up with serious problems. For more details, read this article: ComboFix usage, Questions, Help? - Look here

    Please visit this webpage and read the ComboFix User's Guide:

    • Once you've read the article and are ready to use the program you can download it directly from the link below.
    • Important! - Please make sure you save combofix to your desktop and do not run it from your browser
    • Direct download link for: ComboFix.exe
    • Please make sure you disable your security applications before running ComboFix.
    • Once Combofix has completed it will produce and open a log file. Please be patient as it can take some time to load.
    • Please copy/paste the contents or attach that log file to your next reply.
    • If needed the file can be located here: C:\combofix.txt
    • NOTE: If you receive the message "illegal operation has been attempted on a registry key that has been marked for deletion", just reboot the computer.
    In your next reply, post the following log files:
    • TDSSKiller log
    • ComboFix log
Link to post
Share on other sites

Thank you so much for your help.

 

I am now using a libarary computer.  I think both computers are have some problem with trojans

can not open virus, or dowload one or send to some bogus page.  when i do get one to run it comes back from a full scan in 30 seconds or less.

even in safe mode having the same problems. 

I will still keep tring it's it putting a drain on me.  I am sorry it looks like it will be slow going tackling this one.

I do have a tddsskiller log I will send that one to you as soon as I can. :wacko:

-

Link to post
Share on other sites

 

I did the killer tdsskiller and the combo fix 2 or more times they were no logs made at all.  I looked around and no logs.    I even tried in safe mode same   I even tried it on my laptop it just crash or frozen.   

 

If nothing else I was thinking about erasing hard drive, reformatting did not get rid of it before.. 

Link to post
Share on other sites

Please download Rkill by Grinler from one of the links below and save it to your desktop.

Link 1

Link 2

  • On Windows XP double-click on the Rkill desktop icon to run the tool.
  • On Windows Vista/Windows 7 or 8, right-click on the Rkill desktop icon and select Run As Administrator
  • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
  • If not, delete the file, then download and use the one provided in Link 2.
  • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
  • If the tool does not run from any of the links provided, please let me know.
  • Do not reboot the computer, you will need to run the application again.
Link to post
Share on other sites

 

comfix must have rebooted I had to take care of something else when i got back the log in screen was on, i log back in waited a box pop up and sad windows have to shout down. I left it there an just waited not sure what i was waiting for. that was it.

 

   

 

tdsskiller I no log pop up below is the report i copy and paste below.  trojan still there..

 

 

14:54:26.0179 0x125c  ============================================================

14:54:26.0179 0x125c  Current date / time: 2013/12/28 14:54:26.0179

14:54:26.0179 0x125c  SystemInfo:

14:54:26.0179 0x125c  

14:54:26.0179 0x125c  OS Version: 6.0.6002 ServicePack: 2.0

14:54:26.0179 0x125c  Product type: Workstation

14:54:26.0179 0x125c  ComputerName: DONNATANAKA-PC

14:54:26.0179 0x125c  UserName: zeeland

14:54:26.0179 0x125c  Windows directory: C:\Windows

14:54:26.0179 0x125c  System windows directory: C:\Windows

14:54:26.0179 0x125c  Processor architecture: Intel x86

14:54:26.0180 0x125c  Number of processors: 2

14:54:26.0180 0x125c  Page size: 0x1000

14:54:26.0180 0x125c  Boot type: Normal boot

14:54:26.0180 0x125c  ============================================================

14:54:26.0306 0x125c  KLMD registered as C:\Windows\system32\drivers\00753558.sys

14:54:26.0405 0x125c  System UUID: {9E7FC0FF-1A65-040B-BE06-621358B97DDF}

14:54:26.0849 0x125c  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050

14:54:26.0867 0x125c  ============================================================

14:54:26.0867 0x125c  \Device\Harddisk0\DR0:

14:54:26.0867 0x125c  MBR partitions:

14:54:26.0867 0x125c  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x390DB9C0

14:54:26.0867 0x125c  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x390DB9FF, BlocksNum 0x12A9242

14:54:26.0867 0x125c  ============================================================

14:54:26.0899 0x125c  C: <-> \Device\Harddisk0\DR0\Partition1

14:54:26.0949 0x125c  D: <-> \Device\Harddisk0\DR0\Partition2

14:54:26.0949 0x125c  ============================================================

14:54:26.0949 0x125c  Initialize success

14:54:26.0949 0x125c  ============================================================

14:54:34.0218 0x12ac  ============================================================

14:54:34.0218 0x12ac  Scan started

14:54:34.0218 0x12ac  Mode: Manual; SigCheck; TDLFS; 

14:54:34.0218 0x12ac  ============================================================

14:54:34.0218 0x12ac  KSN ping started

14:54:34.0267 0x12ac  KSN ping finished: false

14:54:38.0278 0x12ac  ================ Scan system memory ========================

14:54:38.0279 0x12ac  System memory - ok

14:54:38.0279 0x12ac  ================ Scan services =============================

14:54:38.0407 0x12ac  22475791 - ok

14:54:38.0456 0x12ac  [ 82B296AE1892FE3DBEE00C9CF92F8AC7, 54B22BA63E1DA616B546992141B0C3117BA057283B8F60CB9BECE203661FEBF3 ] ACPI            C:\Windows\system32\drivers\acpi.sys

14:54:38.0547 0x12ac  ACPI - ok

14:54:38.0873 0x12ac  [ 04F0FCAC69C7C71A3AC4EB97FAFC8303, FBBDD38574A1F66A5AA12B82E34FDE60B870180C4B7100C15757539DC869ED4B ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys

14:54:38.0895 0x12ac  adp94xx - ok

14:54:38.0917 0x12ac  [ 60505E0041F7751BDBB80F88BF45C2CE, 1DE16042B8ABD7B643189E836DE273832EE743FD66AFBB641E8049C4E0CD04D8 ] adpahci         C:\Windows\system32\drivers\adpahci.sys

14:54:38.0931 0x12ac  adpahci - ok

14:54:38.0960 0x12ac  [ 8A42779B02AEC986EAB64ECFC98F8BD7, B89938EFF4E81FA44197D2D839EBD3340DDE01FBC79605049C088621784C1B91 ] adpu160m        C:\Windows\system32\drivers\adpu160m.sys

14:54:38.0970 0x12ac  adpu160m - ok

14:54:39.0000 0x12ac  [ 241C9E37F8CE45EF51C3DE27515CA4E5, 1A03E93DD8C1F3640C96124A14A3D0F4E349B06CCA2118CE40B8AE201A4030A7 ] adpu320         C:\Windows\system32\drivers\adpu320.sys

14:54:39.0010 0x12ac  adpu320 - ok

14:54:39.0043 0x12ac  [ 9D1FDA9E086BA64E3C93C9DE32461BCF, 200FD0BFC811EC8993AF9FC78F58823ECC717063F438B627FBCDD6BD7790CAA8 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll

14:54:39.0072 0x12ac  AeLookupSvc - ok

14:54:39.0112 0x12ac  [ 3911B972B55FEA0478476B2E777B29FA, 62545B90C7DD3F73777E62CD8264E611A4D71B6956CABFD2D820D25F41F471FD ] AFD             C:\Windows\system32\drivers\afd.sys

14:54:39.0130 0x12ac  AFD - ok

14:54:39.0187 0x12ac  [ 13F9E33747E6B41A3FF305C37DB0D360, 066DD6060B1CF93F85BBAAA52848C801128CD294E8B7EACD912E0EF219DBFBC2 ] agp440          C:\Windows\system32\drivers\agp440.sys

14:54:39.0195 0x12ac  agp440 - ok

14:54:39.0214 0x12ac  [ AE1FDF7BF7BB6C6A70F67699D880592A, B831BF156FC49287A19FC149383D437B1034EA6F42CE9D761EB90ABD0F8D96B1 ] aic78xx         C:\Windows\system32\drivers\djsvs.sys

14:54:39.0224 0x12ac  aic78xx - ok

14:54:39.0244 0x12ac  [ A1545B731579895D8CC44FC0481C1192, 6B0EE833BA39C142D625A03586CCD8F6C9C3136C603CE5DF5BAC1AA3423E3E7F ] ALG             C:\Windows\System32\alg.exe

14:54:39.0268 0x12ac  ALG - ok

14:54:39.0290 0x12ac  [ 9EAEF5FC9B8E351AFA7E78A6FAE91F91, 0EADB6AE21FEDAB55D41F41B638198B556CC2BE2EE57F6C8B40EB044A318319F ] aliide          C:\Windows\system32\drivers\aliide.sys

14:54:39.0297 0x12ac  aliide - ok

14:54:39.0321 0x12ac  [ C47344BC706E5F0B9DCE369516661578, 689C9CDAF6F38227F1C34359CAEB3C7798F318EDFD4B7FE532FBE3C8E4EE3DC8 ] amdagp          C:\Windows\system32\drivers\amdagp.sys

14:54:39.0329 0x12ac  amdagp - ok

14:54:39.0355 0x12ac  [ 9B78A39A4C173FDBC1321E0DD659B34C, 2CA66EB68AD7A317D91C13B8CFD4E8CA985926A610D19595B613F5553B145C7B ] amdide          C:\Windows\system32\drivers\amdide.sys

14:54:39.0362 0x12ac  amdide - ok

14:54:39.0385 0x12ac  [ 18F29B49AD23ECEE3D2A826C725C8D48, 0FA08882301D218E367E63E1966B6406220EE94BAE7E7DAD6E55EB70BF6FED7F ] AmdK7           C:\Windows\system32\drivers\amdk7.sys

14:54:39.0408 0x12ac  AmdK7 - ok

14:54:39.0461 0x12ac  [ 93AE7F7DD54AB986A6F1A1B37BE7442D, ECE0ABA2DECEED94AC678240A4B604F04022F0740F2295CBD07D25F5917E878A ] AmdK8           C:\Windows\system32\DRIVERS\amdk8.sys

14:54:39.0518 0x12ac  AmdK8 - ok

14:54:39.0550 0x12ac  [ C6D704C7F0434DC791AAC37CAC4B6E14, 35CF7D1895F97637E0C678A39F3049B871BCA9526D379C7793ED33B87D2EAC4C ] Appinfo         C:\Windows\System32\appinfo.dll

14:54:39.0563 0x12ac  Appinfo - ok

14:54:39.0621 0x12ac  [ 5D2888182FB46632511ACEE92FDAD522, 2E53231ACAF9B2FB7993DBC1CD15C06D7B0CCE0D08DAFF7B0CC13A2040028A75 ] arc             C:\Windows\system32\drivers\arc.sys

14:54:39.0632 0x12ac  arc - ok

14:54:39.0680 0x12ac  [ 5E2A321BD7C8B3624E41FDEC3E244945, 9D47FF6C823868F2267FEFAB5851D3CD2BC3F619A2D6EFF803EA22DB0509C450 ] arcsas          C:\Windows\system32\drivers\arcsas.sys

14:54:39.0690 0x12ac  arcsas - ok

14:54:39.0723 0x12ac  [ 53B202ABEE6455406254444303E87BE1, 4C91CA8DD345FEDD74A6AF2C07580717703F979B7DE2532B1D00B9F6896DDE70 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys

14:54:39.0749 0x12ac  AsyncMac - ok

14:54:39.0817 0x12ac  [ 1F05B78AB91C9075565A9D8A4B880BC4, 737BE9F9376DAB0CCDFED93EA6D67F0C432367EA63CD772A453485BE769AF3BD ] atapi           C:\Windows\system32\drivers\atapi.sys

14:54:39.0827 0x12ac  atapi - ok

14:54:39.0908 0x12ac  [ 68E2A1A0407A66CF50DA0300852424AB, 5FFDAE4E477C90A855081B5120582810471F67D3E9C343779A7AFB8D684D16F8 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll

14:54:39.0940 0x12ac  AudioEndpointBuilder - ok

14:54:39.0965 0x12ac  [ 68E2A1A0407A66CF50DA0300852424AB, 5FFDAE4E477C90A855081B5120582810471F67D3E9C343779A7AFB8D684D16F8 ] Audiosrv        C:\Windows\System32\Audiosrv.dll

14:54:39.0998 0x12ac  Audiosrv - ok

14:54:40.0017 0x12ac  [ 67E506B75BD5326A3EC7B70BD014DFB6, 3B07243970CAB4E93A858BEA6E31F56AD0157C42D624F3FEB469E68EEEF65669 ] Beep            C:\Windows\system32\drivers\Beep.sys

14:54:40.0043 0x12ac  Beep - ok

14:54:40.0102 0x12ac  [ C789AF0F724FDA5852FB9A7D3A432381, 4B0F7A3A8F2D45E49630D24F2630B8014BCDB793B9C6E83FD2B2863A54F62BF5 ] BFE             C:\Windows\System32\bfe.dll

14:54:40.0170 0x12ac  BFE - ok

14:54:40.0247 0x12ac  [ 93952506C6D67330367F7E7934B6A02F, 1D9A6B10B9489C1A32F730E22CC399BFF0796E3FCB3BA52BE45ED487CAC59EBD ] BITS            C:\Windows\System32\qmgr.dll

14:54:40.0327 0x12ac  BITS - ok

14:54:40.0342 0x12ac  [ D4DF28447741FD3D953526E33A617397, E7239BA432090F8AC7DF453DB876507CD4419ECA964D289408A1B2B353618693 ] blbdrive        C:\Windows\system32\drivers\blbdrive.sys

14:54:40.0367 0x12ac  blbdrive - ok

14:54:40.0399 0x12ac  [ 35F376253F687BDE63976CCB3F2108CA, C5EF6301D7BC067050038DB75D961681D1CBE418285AD60167C1334B0B54DFE9 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys

14:54:40.0417 0x12ac  bowser - ok

14:54:40.0440 0x12ac  [ 9F9ACC7F7CCDE8A15C282D3F88B43309, A9131334BD9CF8FD60BA9D54AA054E2DF2BE1219FB650DF1464F2787BDEAE98F ] BrFiltLo        C:\Windows\system32\drivers\brfiltlo.sys

14:54:40.0465 0x12ac  BrFiltLo - ok

14:54:40.0479 0x12ac  [ 56801AD62213A41F6497F96DEE83755A, 0DEB8318FB47DF6473C171C795C735E26A73FA12232876C6856549EA16F33361 ] BrFiltUp        C:\Windows\system32\drivers\brfiltup.sys

14:54:40.0504 0x12ac  BrFiltUp - ok

14:54:40.0530 0x12ac  [ A3629A0C4226F9E9C72FAAEEBC3AD33C, FB4D2738B64AADA52B95A6CF7ED4CDBFE4DD4BEBCAF1AE9CE64317F97DB38DDF ] Browser         C:\Windows\System32\browser.dll

14:54:40.0553 0x12ac  Browser - ok

14:54:40.0697 0x12ac  [ B304E75CFF293029EDDF094246747113, CB6B219B186C3511A0DE3CDE7F7B8966A9E32D808A952CA8C5B42B3A3A17BFB0 ] Brserid         C:\Windows\system32\drivers\brserid.sys

14:54:40.0764 0x12ac  Brserid - ok

14:54:40.0789 0x12ac  [ 203F0B1E73ADADBBB7B7B1FABD901F6B, 782FA7B26940FE479C49C9BAA2EB582CDAAAD607013E9BCFC85E6FBBB7D49A6D ] BrSerWdm        C:\Windows\system32\drivers\brserwdm.sys

14:54:40.0833 0x12ac  BrSerWdm - ok

14:54:40.0842 0x12ac  [ BD456606156BA17E60A04E18016AE54B, DFBDC9DA6A3EA40BACFF204BC6C55C2C122B5885D2CBF6D45054DE43EE15EC4D ] BrUsbMdm        C:\Windows\system32\drivers\brusbmdm.sys

14:54:40.0913 0x12ac  BrUsbMdm - ok

14:54:40.0925 0x12ac  [ AF72ED54503F717A43268B3CC5FAEC2E, 4A638669B0C30B1BDED242A8BF2015A37749570FF4D67D190BACC8D7E0C44468 ] BrUsbSer        C:\Windows\system32\drivers\brusbser.sys

14:54:40.0963 0x12ac  BrUsbSer - ok

14:54:40.0972 0x12ac  [ AD07C1EC6665B8B35741AB91200C6B68, DCE1305A30D6713222A01C1F1D03ED0ADABE23C742CE1E82BB142531B82A3FF7 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys

14:54:41.0015 0x12ac  BTHMODEM - ok

14:54:41.0079 0x12ac  [ 9026258E6FD965982CBB090569AD7042, A9D0BC5273D165B6320602EF03CAA8A88ED20D07C2F3395E7EB401027B69234F ] BTOWSFF         C:\Windows\system32\Drivers\BTOWSFF.sys

14:54:41.0103 0x12ac  BTOWSFF - ok

14:54:41.0158 0x12ac  [ E12F2E9E0CF646FEBCB948EDDF76CAB4, D865B4642777DB97000BB11FEA34E871917D749E04CCFD62DC61F980246E99F2 ] BTOWSVF         C:\Windows\system32\Drivers\BTOWSVF.sys

14:54:41.0166 0x12ac  BTOWSVF - ok

14:54:41.0229 0x12ac  catchme - ok

14:54:41.0246 0x12ac  [ 7ADD03E75BEB9E6DD102C3081D29840A, 0CA14A77CE990B5AA32C0725C22CA190ECBC73B75064DD959CABAD79B8846F1D ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys

14:54:41.0272 0x12ac  cdfs - ok

14:54:41.0307 0x12ac  [ 6B4BFFB9BECD728097024276430DB314, 4451EFEAD37B05C8A3CB610B6D72E73B55D3D1E1CC1B17405598C1EDAA93C2D5 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys

14:54:41.0327 0x12ac  cdrom - ok

14:54:41.0378 0x12ac  [ 312EC3E37A0A1F2006534913E37B4423, 81B8F462336791D162DAFA8092C1F437638DA3022CA24A2458B9FE183FC18C5D ] CertPropSvc     C:\Windows\System32\certprop.dll

14:54:41.0419 0x12ac  CertPropSvc - ok

14:54:41.0436 0x12ac  [ E5D4133F37219DBCFE102BC61072589D, 74C7F8C53D9C71CE3C8B33BC0331948571318402B0A8E1AC4552360504092A46 ] circlass        C:\Windows\system32\drivers\circlass.sys

14:54:41.0463 0x12ac  circlass - ok

14:54:41.0510 0x12ac  [ D7659D3B5B92C31E84E53C1431F35132, 6BFE644AD9890A8CEEDCC4B97ADD564AD57202FBC5D21599469E0C4B31BB27C6 ] CLFS            C:\Windows\system32\CLFS.sys

14:54:41.0538 0x12ac  CLFS - ok

14:54:41.0612 0x12ac  [ 8EE772032E2FE80A924F3B8DD5082194, B743DF91563A22CC15D9B44105804B5866A29D3DFC156DBE88DFAFEF903B94C0 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

14:54:41.0622 0x12ac  clr_optimization_v2.0.50727_32 - ok

14:54:41.0649 0x12ac  [ 0CA25E686A4928484E9FDABD168AB629, C2CB2333CAB40CDF93219870E66700F957188C86A1B1A004BC4652953091E5C5 ] cmdide          C:\Windows\system32\drivers\cmdide.sys

14:54:41.0657 0x12ac  cmdide - ok

14:54:41.0686 0x12ac  [ 6AFEF0B60FA25DE07C0968983EE4F60A, E4037EF9EDE57A1039AB814EBCE9A8B12C9A084E7FAC6296212ACF2394DD37B6 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys

14:54:41.0694 0x12ac  Compbatt - ok

14:54:41.0700 0x12ac  COMSysApp - ok

14:54:41.0711 0x12ac  [ 741E9DFF4F42D2D8477D0FC1DC0DF871, 06EA43D771E3455F943AB624CC00C2259FE5E561164908630755E933EF44A522 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys

14:54:41.0720 0x12ac  crcdisk - ok

14:54:41.0742 0x12ac  [ 1F07BECDCA750766A96CDA811BA86410, F4E36F0003184BCB36D59B23AC903421AD8C0A1FD2D6315E06375235ABC9A0AD ] Crusoe          C:\Windows\system32\drivers\crusoe.sys

14:54:41.0769 0x12ac  Crusoe - ok

14:54:41.0818 0x12ac  [ FB27772BEAF8E1D28CCD825C09DA939B, D074A314FB3E6B2248F2DB0A734B98A110F618804449E055B4178BF414826982 ] CryptSvc        C:\Windows\system32\cryptsvc.dll

14:54:41.0842 0x12ac  CryptSvc - ok

14:54:41.0899 0x12ac  [ 3B5B4D53FEC14F7476CA29A20CC31AC9, EC02A412DA5FDE2C759A4A2C5904579E1CE7C4999CE87145812F354FC8F5E183 ] DcomLaunch      C:\Windows\system32\rpcss.dll

14:54:41.0963 0x12ac  DcomLaunch - ok

14:54:42.0005 0x12ac  [ 622C41A07CA7E6DD91770F50D532CB6C, 2A9040949CB45F9970FDE930278F30D2F08E957290CB3D4DC4F2CA94F3D444D2 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys

14:54:42.0021 0x12ac  DfsC - ok

14:54:42.0160 0x12ac  [ 2CC3DCFB533A1035B13DCAB6160AB38B, C88C91F662ADE248EEE3B568E70C2BC2D5075B7D9B7D3C63E83D011C5F7812B0 ] DFSR            C:\Windows\system32\DFSR.exe

14:54:42.0308 0x12ac  DFSR - ok

14:54:42.0390 0x12ac  [ 9028559C132146FB75EB7ACF384B086A, 35159D86706441ED94895B4629411B4445FCB4526AFD1F7036EE647931B7A94D ] Dhcp            C:\Windows\System32\dhcpcsvc.dll

14:54:42.0441 0x12ac  Dhcp - ok

14:54:42.0469 0x12ac  [ 5D4AEFC3386920236A548271F8F1AF6A, 11B74D6800EC6F7AAEFB0B6A9F2E8376C7C3B8DB677F03AC3743CB004CA96B08 ] disk            C:\Windows\system32\drivers\disk.sys

14:54:42.0478 0x12ac  disk - ok

14:54:42.0544 0x12ac  [ 57D762F6F5974AF0DA2BE88A3349BAAA, D9E7DC8F9FB7837F88BBB95B52147AA80E688FB9762EEA99B8046D9C6AD48F3C ] Dnscache        C:\Windows\System32\dnsrslvr.dll

14:54:42.0571 0x12ac  Dnscache - ok

14:54:42.0617 0x12ac  [ 324FD74686B1EF5E7C19A8AF49E748F6, DC6EB4304555B60DD17E04D20DFE4E279718E4041A9310DE29E678834BB22C5B ] dot3svc         C:\Windows\System32\dot3svc.dll

14:54:42.0639 0x12ac  dot3svc - ok

14:54:42.0678 0x12ac  [ A622E888F8AA2F6B49E9BC466F0E5DEF, 3DED7F22A29AD2F8C927DFA0FD87FDE5ED0BDCAC7260BD9F71D8EA34328C772A ] DPS             C:\Windows\system32\dps.dll

14:54:42.0703 0x12ac  DPS - ok

14:54:42.0754 0x12ac  [ 97FEF831AB90BEE128C9AF390E243F80, A7F4118603E2D5DDDB117EF7C058684EA5B37690EFAB2BEBA570EEF9C36281BE ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys

14:54:42.0769 0x12ac  drmkaud - ok

14:54:42.0873 0x12ac  [ FB85F7F69E9B109820409243F578CC4D, FBE0426E51B83DD973EC08ABA4E69E99F54B1C44995E0FD42B68A07549D52D7F ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys

14:54:42.0928 0x12ac  DXGKrnl - ok

14:54:42.0949 0x12ac  [ 5425F74AC0C1DBD96A1E04F17D63F94C, AD133CEDCDEA75420C75A91BB4CF7152475D46ED7B7703E3BAE5F9946D610292 ] E1G60           C:\Windows\system32\DRIVERS\E1G60I32.sys

14:54:42.0985 0x12ac  E1G60 - ok

14:54:43.0003 0x12ac  [ C0B95E40D85CD807D614E264248A45B9, 30421DAF1722A225222268CB8BA4FE60CB76C6FD0C9157B0F53FC1368F806A4E ] EapHost         C:\Windows\System32\eapsvc.dll

14:54:43.0021 0x12ac  EapHost - ok

14:54:43.0073 0x12ac  [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371, F3E9CF5D8E9124CB06F08454C5F0E510DE19A92780151FB2F8A58A0905D59B8F ] Ecache          C:\Windows\system32\drivers\ecache.sys

14:54:43.0096 0x12ac  Ecache - ok

14:54:43.0153 0x12ac  [ 9BE3744D295A7701EB425332014F0797, 1A139EE9232581E466591C5EBEF41E4BF1F82D99C1959F1C68C879B240E9F46D ] ehRecvr         C:\Windows\ehome\ehRecvr.exe

14:54:43.0173 0x12ac  ehRecvr - ok

14:54:43.0183 0x12ac  [ AD1870C8E5D6DD340C829E6074BF3C3F, 064D07106A1BBE80294F1913354832F2B67D22274BB4D36C81D2D83C96FE0B88 ] ehSched         C:\Windows\ehome\ehsched.exe

14:54:43.0198 0x12ac  ehSched - ok

14:54:43.0226 0x12ac  [ C27C4EE8926E74AA72EFCAB24C5242C3, F1EBF78CCE9BA76AFD0478BC66B67CA44DEAF3C380369BFCE91BD8F678C8608A ] ehstart         C:\Windows\ehome\ehstart.dll

14:54:43.0237 0x12ac  ehstart - ok

14:54:43.0267 0x12ac  [ 23B62471681A124889978F6295B3F4C6, A90C521F06125B86A26EA625B0E7F811AF7D328E1313165E7AD4A83596A23819 ] elxstor         C:\Windows\system32\drivers\elxstor.sys

14:54:43.0289 0x12ac  elxstor - ok

14:54:43.0355 0x12ac  [ 4E6B23DFC917EA39306B529B773950F4, C4BA77632B4BD46C4C1797F7F57399DB506D3EB6E5A0A36C269A793DAA3445C2 ] EMDMgmt         C:\Windows\system32\emdmgmt.dll

14:54:43.0428 0x12ac  EMDMgmt - ok

14:54:43.0476 0x12ac  [ 3DB974F3935483555D7148663F726C61, C288CFC04213B0340ABEC752C0A7B308B29122B5F51E68387BA1D9E9D7166FDD ] ErrDev          C:\Windows\system32\drivers\errdev.sys

14:54:43.0501 0x12ac  ErrDev - ok

14:54:43.0552 0x12ac  [ 67058C46504BC12D821F38CF99B7B28F, E8D19F305F78BCA1DA8425315F2C77A377CD51E3CC54323DC2FF355120EA097D ] EventSystem     C:\Windows\system32\es.dll

14:54:43.0578 0x12ac  EventSystem - ok

14:54:43.0682 0x12ac  [ 22B408651F9123527BCEE54B4F6C5CAE, 31AF9649333A9496A9224001266D1B68CE2A31B9FB182A755D127FC5492AA6B2 ] exfat           C:\Windows\system32\drivers\exfat.sys

14:54:43.0698 0x12ac  exfat - ok

14:54:43.0726 0x12ac  [ 1E9B9A70D332103C52995E957DC09EF8, 7E709D545D4025A2E9F3489CF2A231040904CB53E3E4EEAC15A22468FAB2A5B3 ] fastfat         C:\Windows\system32\drivers\fastfat.sys

14:54:43.0750 0x12ac  fastfat - ok

14:54:43.0784 0x12ac  [ AFE1E8B9782A0DD7FB46BBD88E43F89A, B4CBE1DC3430F2F3485F49007C71293D5B86E9C405741EA00A67B00A38BE1F8D ] fdc             C:\Windows\system32\DRIVERS\fdc.sys

14:54:43.0810 0x12ac  fdc - ok

14:54:43.0864 0x12ac  [ 6629B5F0E98151F4AFDD87567EA32BA3, 8CC02D5E0639CDF74B2F85DB56D6199E1858F1A58465ED1D8B25C968E986132C ] fdPHost         C:\Windows\system32\fdPHost.dll

14:54:43.0892 0x12ac  fdPHost - ok

14:54:43.0911 0x12ac  [ 89ED56DCE8E47AF40892778A5BD31FD2, 924360875796C3DDDDA8097FDF53F6846B227F7413766F00AEDD981EFD691BF9 ] FDResPub        C:\Windows\system32\fdrespub.dll

14:54:43.0960 0x12ac  FDResPub - ok

14:54:43.0997 0x12ac  [ A8C0139A884861E3AAE9CFE73B208A9F, 3B021D148A2989AAA46AE58E5FED8A2DCA25E9212C2FA7F922880EF5A077E49B ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys

14:54:44.0007 0x12ac  FileInfo - ok

14:54:44.0041 0x12ac  [ 0AE429A696AECBC5970E3CF2C62635AE, 1ECC315C099D17835788B68F0DE00EC98DC5AEE8F329D739E0DB90A898F22244 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys

14:54:44.0072 0x12ac  Filetrace - ok

14:54:44.0110 0x12ac  [ 85B7CF99D532820495D68D747FDA9EBD, 682D35D219D1AFBE51CF0AB03F2D3E15C940F5AF291C1A611A19F4D279143F3C ] flpydisk        C:\Windows\system32\DRIVERS\flpydisk.sys

14:54:44.0138 0x12ac  flpydisk - ok

14:54:44.0217 0x12ac  [ 01334F9EA68E6877C4EF05D3EA8ABB05, 82F8AA6AD2B5077898773D4A5814819EAF0E872FFD95894E06FEDAB6EE92CF99 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys

14:54:44.0230 0x12ac  FltMgr - ok

14:54:44.0326 0x12ac  [ C7FBDD1ED42F82BFA35167A5C9803EA3, 372FF71070D5ECE17342466A690737A0622E93C98DBED8172C49B0854F0012B7 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe

14:54:44.0334 0x12ac  FontCache3.0.0.0 - ok

14:54:44.0360 0x12ac  [ 65EA8B77B5851854F0C55C43FA51A198, 150BE6C195094DBEAC4FD73CC1C31FF59B77A73944574E244D280EE2DE69DC2F ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys

14:54:44.0376 0x12ac  Fs_Rec - ok

14:54:44.0429 0x12ac  [ 34582A6E6573D54A07ECE5FE24A126B5, 5F45DC38F8015AD90616EAD3B57820CCD284938A96B2C4E1FF5FC7BDEE8A848D ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys

14:54:44.0437 0x12ac  gagp30kx - ok

14:54:44.0573 0x12ac  [ 44D07E5A444692E9B6A5CDD7401B4402, 1D8EAA49750CFFB89B758D65813E0608C8973D8509BC4E05A8BA74B24737DEFF ] GameConsoleService C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe

14:54:44.0585 0x12ac  GameConsoleService - ok

14:54:44.0637 0x12ac  [ CD5D0AEEE35DFD4E986A5AA1500A6E66, DCED5126837292593F1C1B35DF18E3B631D6C0C6D0742B77C7B7742C55A7825F ] gpsvc           C:\Windows\System32\gpsvc.dll

14:54:44.0698 0x12ac  gpsvc - ok

14:54:44.0772 0x12ac  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe

14:54:44.0782 0x12ac  gupdate - ok

14:54:44.0796 0x12ac  [ 506708142BC63DABA64F2D3AD1DCD5BF, 9C36A08D9E7932FF4DA7B5F24E6B42C92F28685B8ABE964C870E8D7670FD531A ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe

14:54:44.0804 0x12ac  gupdatem - ok

14:54:44.0981 0x12ac  [ 062452B7FFD68C8C042A6261FE8DFF4A, DD9873502456D3C058C6177AC223B28C71370E624FA0814C17EA3D93201F2B56 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys

14:54:45.0036 0x12ac  HDAudBus - ok

14:54:45.0061 0x12ac  [ 1338520E78D90154ED6BE8F84DE5FCEB, 8531F1C5856983EBDA4C2B70162645ECE72FFFBA9FE7A28BCEDDF2169B7ECF9D ] HidBth          C:\Windows\system32\drivers\hidbth.sys

14:54:45.0138 0x12ac  HidBth - ok

14:54:45.0168 0x12ac  [ FF3160C3A2445128C5A6D9B076DA519E, DC1A70C80CD55F33B3AD5A21E86AF7C3086D8CC2DC6148C058E74A871E0BAD4A ] HidIr           C:\Windows\system32\drivers\hidir.sys

14:54:45.0212 0x12ac  HidIr - ok

14:54:45.0245 0x12ac  [ 84067081F3318162797385E11A8F0582, 11E32E3800CFCA37354388243F88D0239D622891BAC5483518A2BE5D1CA19015 ] hidserv         C:\Windows\System32\hidserv.dll

14:54:45.0258 0x12ac  hidserv - ok

14:54:45.0275 0x12ac  [ 3C64042B95E583B366BA4E5D2450235E, B431F9692D66188AFEE372F312581178B14F49D763F8D1100D264623A239002A ] HidUsb          C:\Windows\system32\drivers\hidusb.sys

14:54:45.0319 0x12ac  HidUsb - ok

14:54:45.0361 0x12ac  [ D8AD255B37DA92434C26E4876DB7D418, C901EADDD93FC90C8F29F4B6DE808F8E4F486C877FC0AA27DA4ACDE17E28899D ] hkmsvc          C:\Windows\system32\kmsvc.dll

14:54:45.0391 0x12ac  hkmsvc - ok

14:54:45.0483 0x12ac  [ 0D26C438E2938A3E6BDD91173BC96FF0, 69FAB9328BC9B49F0A1A3758FDEC31E71C5ED0948D3F5D76992A2E15C2B96511 ] HP Health Check Service c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

14:54:45.0496 0x12ac  HP Health Check Service - detected UnsignedFile.Multi.Generic ( 1 )

14:54:45.0623 0x12ac  HP Health Check Service ( UnsignedFile.Multi.Generic ) - warning

14:54:45.0650 0x12ac  [ 16EE7B23A009E00D835CDB79574A91A6, 964AFE7D2F7E48C7DE7FDAB48F57ADC4AD44A0B2A9A03071E0E8D334007E5572 ] HpCISSs         C:\Windows\system32\drivers\hpcisss.sys

14:54:45.0656 0x12ac  HpCISSs - ok

14:54:45.0717 0x12ac  [ 88749FBF8BEB18C90E7D6626C8C1910B, 8CCCCF75EE8D7C8F052DE48DCE7099BFA9D29E9D94E9EEB8C84F0EEE73CC2EDD ] HSF_DP          C:\Windows\system32\DRIVERS\HSX_DP.sys

14:54:45.0783 0x12ac  HSF_DP - ok

14:54:45.0851 0x12ac  [ FE440536BD98AF772130DC3A6FE1915F, F890A4336E6BC11A5D0A7D49CFD0626FFC2131E81260AE3E2501BCD29434C131 ] HSXHWBS2        C:\Windows\system32\DRIVERS\HSXHWBS2.sys

14:54:45.0871 0x12ac  HSXHWBS2 - ok

14:54:45.0931 0x12ac  [ F870AA3E254628EBEAFE754108D664DE, B0444E7D246AA1982094030ACB991690F6A7DD3FB07B1BB6A1BC0F3AA9718A70 ] HTTP            C:\Windows\system32\drivers\HTTP.sys

14:54:45.0953 0x12ac  HTTP - ok

14:54:45.0985 0x12ac  [ C6B032D69650985468160FC9937CF5B4, 4D5A944C70037F35A9DBA4F49F174455FA80ED7EAEDAA143F0A2C0E05AE585D8 ] i2omp           C:\Windows\system32\drivers\i2omp.sys

14:54:45.0992 0x12ac  i2omp - ok

14:54:46.0021 0x12ac  [ 22D56C8184586B7A1F6FA60BE5F5A2BD, D96A2962848C1F59B143BFEC22EC48BD1C5A75D0EBCFD7FB965E66B85FF7D8CA ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys

14:54:46.0038 0x12ac  i8042prt - ok

14:54:46.0088 0x12ac  [ 54155EA1B0DF185878E0FC9EC3AC3A14, 344A0793499261D2E4FF2FCCC70501329485F8E299EBC68953D07BA86F0D4729 ] iaStorV         C:\Windows\system32\drivers\iastorv.sys

14:54:46.0102 0x12ac  iaStorV - ok

14:54:46.0176 0x12ac  [ 98477B08E61945F974ED9FDC4CB6BDAB, C7E8F661F6FBF6AB493E950D2E70363496E155B1838CE7B490B981BD840B04FC ] idsvc           C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

14:54:46.0261 0x12ac  idsvc - ok

14:54:46.0296 0x12ac  [ 2D077BF86E843F901D8DB709C95B49A5, 78FF558A881F307858F5C7C74A748B8B2562AF3CAC7EA8639945609001D790CE ] iirsp           C:\Windows\system32\drivers\iirsp.sys

14:54:46.0304 0x12ac  iirsp - ok

14:54:46.0363 0x12ac  [ 9908D8A397B76CD8D31D0D383C5773C9, FFA6996BE9F11A81CB63C849C2400EB44A07706D1EEB7A3502D4110DAC3684A2 ] IKEEXT          C:\Windows\System32\ikeext.dll

14:54:46.0418 0x12ac  IKEEXT - ok

14:54:46.0578 0x12ac  [ EDC37B918E583A5A813C53D4F5588255, 169DF53DB9B06914A84B3706662DBFCDCC58FCCF64A6DA5ED2BBE9C2DAE37C5B ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys

14:54:46.0656 0x12ac  IntcAzAudAddService - ok

14:54:46.0700 0x12ac  [ 83AA759F3189E6370C30DE5DC5590718, 7406FE41EA8FB80052517318CB72E2641E92E579FAFAF5E8DDDFF0BF8DAE773A ] intelide        C:\Windows\system32\drivers\intelide.sys

14:54:46.0707 0x12ac  intelide - ok

14:54:46.0762 0x12ac  [ 224191001E78C89DFA78924C3EA595FF, E4EC9CAAEEEAEB30E13F4A8023AF687F29514667380DDFD638BBFFF1D5FC2563 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys

14:54:46.0784 0x12ac  intelppm - ok

14:54:46.0807 0x12ac  [ 9AC218C6E6105477484C6FDBE7D409A4, FF30D09CD2A0F5BBEC309E953370F194B6F26BF4227E627B594AAA48B0F5D3C2 ] IPBusEnum       C:\Windows\system32\ipbusenum.dll

14:54:46.0839 0x12ac  IPBusEnum - ok

14:54:46.0858 0x12ac  [ 62C265C38769B864CB25B4BCF62DF6C3, CAF6BCE967104233E216464E4729B0275C3BD426D812F404AB0EE83A7F2063D8 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys

14:54:46.0880 0x12ac  IpFilterDriver - ok

14:54:46.0910 0x12ac  [ 1998BD97F950680BB55F55A7244679C2, A4E8BB4C6B2AF4800BD5E0BA8725FD0927F8FB6751AEBF6DD16B59C414CCB9D8 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll

14:54:46.0926 0x12ac  iphlpsvc - ok

14:54:46.0932 0x12ac  IpInIp - ok

14:54:46.0977 0x12ac  [ B25AAF203552B7B3491139D582B39AD1, EA9C38F512F40FF12975A6719E6FE4D7EA93A4B2497103E0FDA5A4CD6033C0A6 ] IPMIDRV         C:\Windows\system32\drivers\ipmidrv.sys

14:54:47.0019 0x12ac  IPMIDRV - ok

14:54:47.0046 0x12ac  [ 8793643A67B42CEC66490B2A0CF92D68, 8B1ED1314E4C6623824DD6B9C15A0F7F996F4D243BF0B305421251BE40850907 ] IPNAT           C:\Windows\system32\DRIVERS\ipnat.sys

14:54:47.0069 0x12ac  IPNAT - ok

14:54:47.0098 0x12ac  [ 109C0DFB82C3632FBD11949B73AEEAC9, 73B01426100256B7110DF0B74483AF1B62FC209612EEC29A7BF6DC31A7FBEFB6 ] IRENUM          C:\Windows\system32\drivers\irenum.sys

14:54:47.0119 0x12ac  IRENUM - ok

14:54:47.0163 0x12ac  [ 6C70698A3E5C4376C6AB5C7C17FB0614, 10FBCBA5A74AF5D136B152FD4D3DFA2A1F2CEBC3F979D5BA6DB98B3DCB2F7A07 ] isapnp          C:\Windows\system32\drivers\isapnp.sys

14:54:47.0171 0x12ac  isapnp - ok

14:54:47.0267 0x12ac  [ 232FA340531D940AAC623B121A595034, 90C93F04D8A0094EEBD118F10223605B8169DA5F24C466F503CED5C014BD17B1 ] iScsiPrt        C:\Windows\system32\DRIVERS\msiscsi.sys

14:54:47.0279 0x12ac  iScsiPrt - ok

14:54:47.0297 0x12ac  [ BCED60D16156E428F8DF8CF27B0DF150, 4934E9AB8A8A548548F0C63517F2BF4DE84B05E5C9C7C2AA6C1517B8F9C340D4 ] iteatapi        C:\Windows\system32\drivers\iteatapi.sys

14:54:47.0305 0x12ac  iteatapi - ok

14:54:47.0351 0x12ac  [ 06FA654504A498C30ADCA8BEC4E87E7E, 651BC35A0A3D504573BBAB40DE81929BB18C9FC0CD7944FEAE0E99CD7658EA88 ] iteraid         C:\Windows\system32\drivers\iteraid.sys

14:54:47.0358 0x12ac  iteraid - ok

14:54:47.0397 0x12ac  [ 37605E0A8CF00CBBA538E753E4344C6E, B9A9FFDCE45B0830E277CF322C28ACB49372C16144B0F676B283BE5DAE9A7F30 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys

14:54:47.0405 0x12ac  kbdclass - ok

14:54:47.0443 0x12ac  [ 18247836959BA67E3511B62846B9C2E0, 9623FF990A1C11A707C358CC9FDD4306C2992A8C766A50DAFC9534A283AA011D ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys

14:54:47.0468 0x12ac  kbdhid - ok

14:54:47.0505 0x12ac  [ 3978F3540329E16C0AC3BCF677E5669F, 2CC9F1C9D9E33F8A0DA72490D74BED9E746FB142EDF78DE2F2A33A34B76D9868 ] KeyIso          C:\Windows\system32\lsass.exe

14:54:47.0516 0x12ac  KeyIso - ok

14:54:47.0582 0x12ac  [ B630D5631B8BEB259DEA049EBC4FC57B, BBC005A49CE9B46EE4591D139863A83DB6C35BB6D294E30BFF1E444C5FFAFEE8 ] KSafeDISK       C:\Windows\system32\Drivers\KSafeDISK.sys

14:54:47.0591 0x12ac  KSafeDISK - ok

14:54:47.0708 0x12ac  [ 86165728AF9BF72D6442A894FDFB4F8B, 97A95C1856C761C93F43B177995749E45FA066C7FF6E93E6C3F34C1593ED2FB7 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys

14:54:47.0738 0x12ac  KSecDD - ok

14:54:47.0778 0x12ac  [ 8078F8F8F7A79E2E6B494523A828C585, BB399993166853F0C01B7508649ECD7E7473238267BA8333D0441128FE656347 ] KtmRm           C:\Windows\system32\msdtckrm.dll

14:54:47.0833 0x12ac  KtmRm - ok

14:54:47.0857 0x12ac  [ 1BF5EEBFD518DD7298434D8C862F825D, F41C79410345C40B346EB5EDEA397ECD29ECB9B921AC3E19F9453E52A7B9288A ] LanmanServer    C:\Windows\System32\srvsvc.dll

14:54:47.0881 0x12ac  LanmanServer - ok

14:54:47.0924 0x12ac  [ 1DB69705B695B987082C8BAEC0C6B34F, D395B272F6B69D4A9FC3CDEFD812EF0DBFECF3C1B1C787C7CC1E1A1B091B8DB3 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll

14:54:47.0945 0x12ac  LanmanWorkstation - ok

14:54:48.0043 0x12ac  [ 9039717A906DA0AE38420918801D9AB3, 5CB3954061393821E062EFF454B5992E570FE8970A8C1C6C84B7B0B0D7D83EC4 ] LightScribeService c:\Program Files\Common Files\LightScribe\LSSrvc.exe

14:54:48.0053 0x12ac  LightScribeService - ok

14:54:48.0106 0x12ac  [ D1C5883087A0C3F1344D9D55A44901F6, 608D67357AFDDD538D2C12C93EB0793ECA4EB3AF2BAB779E881C41F50E4AB911 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys

14:54:48.0168 0x12ac  lltdio - ok

14:54:48.0225 0x12ac  [ 2D5A428872F1442631D0959A34ABFF63, E532C6ECFFB936EFF744CA57BDC6394C89E797B6B0822D04F1F3F35D9BDDD4F0 ] lltdsvc         C:\Windows\System32\lltdsvc.dll

14:54:48.0274 0x12ac  lltdsvc - ok

14:54:48.0299 0x12ac  [ 35D40113E4A5B961B6CE5C5857702518, 453097AEF46ED48107395D9A1696AAC259FD6CEA8A655D38C5E246FDDAB81664 ] lmhosts         C:\Windows\System32\lmhsvc.dll

14:54:48.0354 0x12ac  lmhosts - ok

14:54:48.0377 0x12ac  [ C7E15E82879BF3235B559563D4185365, 98C9268ADF6BAEB0522BB84BE6C98D0D6D5EB4BD27BB61412D208232164C8435 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys

14:54:48.0389 0x12ac  LSI_FC - ok

14:54:48.0437 0x12ac  [ EE01EBAE8C9BF0FA072E0FF68718920A, 655924440E611278998226299645BC72B3627A8A057286DC8D65A162CFBBE484 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys

14:54:48.0469 0x12ac  LSI_SAS - ok

14:54:48.0494 0x12ac  [ 912A04696E9CA30146A62AFA1463DD5C, 1D336D47B9D1C8449F29CDB776C092235E3D70CE53D9440970533E376EB004D3 ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys

14:54:48.0506 0x12ac  LSI_SCSI - ok

14:54:48.0531 0x12ac  [ 8F5C7426567798E62A3B3614965D62CC, 659810257D942C5F4168E1247868CDA990F2324AC9ACAA9A6211F64B7AC9EC6E ] luafv           C:\Windows\system32\drivers\luafv.sys

14:54:48.0577 0x12ac  luafv - ok

14:54:48.0609 0x12ac  [ 4470E3C1E0C3378E4CAB137893C12C3A, CA8E66356F0E671D5454E561E7EAD74DE25DCF53BE452369F96ECACFA8709489 ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys

14:54:48.0620 0x12ac  MBAMProtector - ok

14:54:48.0718 0x12ac  [ 65085456FD9A74D7F1A999520C299ECB, EA564BC913EF1B8A4CAA9242FC70F525B68CF1F3CA462F63B0B7215B93FE8530 ] MBAMScheduler   C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

14:54:48.0745 0x12ac  MBAMScheduler - ok

14:54:48.0792 0x12ac  [ E0D7732F2D2E24B2DB3F67B6750295B8, AA5CA86AF1ACEC900F60339016B3DC55472DB40ADB99186005A7ABE67B7D66FC ] MBAMService     C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

14:54:48.0830 0x12ac  MBAMService - ok

14:54:48.0848 0x12ac  [ AEF9BABB8A506BC4CE0451A64AADED46, D5608A703EA7E97F11ED4D029B4B820440B0C9317DB7D7DC0152253CD723DC07 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll

14:54:48.0864 0x12ac  Mcx2Svc - ok

14:54:48.0956 0x12ac  [ 0CEA2D0D3FA284B85ED5B68365114F76, E6FF0EC98FDC3F628438B613C356C237E68686E3B5B17A58A60C16F4B9A2B968 ] mdmxsdk         C:\Windows\system32\DRIVERS\mdmxsdk.sys

14:54:48.0992 0x12ac  mdmxsdk - ok

14:54:49.0021 0x12ac  [ 0001CE609D66632FA17B84705F658879, D5F9758BDC2B733307B565A74B33F5581FB425A5A9F32CCFA307DA1569EBD6CD ] megasas         C:\Windows\system32\drivers\megasas.sys

14:54:49.0031 0x12ac  megasas - ok

14:54:49.0059 0x12ac  [ C252F32CD9A49DBFC25ECF26EBD51A99, 47EC8F475AB62A00FAF989CD2C3ABDF2922588F75CC15C83CD99A62EF6400FB0 ] MegaSR          C:\Windows\system32\drivers\megasr.sys

14:54:49.0112 0x12ac  MegaSR - ok

14:54:49.0128 0x12ac  MFE_RR - ok

14:54:49.0150 0x12ac  [ 1076FFCFFAAE8385FD62DFCB25AC4708, 8C5C106FCB018E019DEBA8E1A6AA170CD7A93293F27994F724EBC486238DA0AA ] MMCSS           C:\Windows\system32\mmcss.dll

14:54:49.0187 0x12ac  MMCSS - ok

14:54:49.0224 0x12ac  [ E13B5EA0F51BA5B1512EC671393D09BA, 5B380D1B435D809CA201FD5ED075D42F3C6BA1A4EEDBC4040F7E3329F05A334A ] Modem           C:\Windows\system32\drivers\modem.sys

14:54:49.0253 0x12ac  Modem - ok

14:54:49.0322 0x12ac  [ 0A9BB33B56E294F686ABB7C1E4E2D8A8, 1E8031D51E074FDFB53E98E26DABF313B901C028D01196BFD402EED5D0A89595 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys

14:54:49.0365 0x12ac  monitor - ok

14:54:49.0414 0x12ac  [ 5BF6A1326A335C5298477754A506D263, CC7F58E5955A448F6CE28D6D8EB98C7479E11F931B5C733CFE71A29B2E95923D ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys

14:54:49.0424 0x12ac  mouclass - ok

14:54:49.0465 0x12ac  [ 93B8D4869E12CFBE663915502900876F, 7464DE60FAAD8793D855F1F86C3C865B3A3EE41C19A3E926D1BE4426E67F5EC2 ] mouhid          C:\Windows\system32\drivers\mouhid.sys

14:54:49.0494 0x12ac  mouhid - ok

14:54:49.0525 0x12ac  [ BDAFC88AA6B92F7842416EA6A48E1600, 2CA8A7BB260016D6B7953980A94C45A3C5D41F7DC7E73EEFB1C18EA144749503 ] MountMgr        C:\Windows\system32\drivers\mountmgr.sys

14:54:49.0535 0x12ac  MountMgr - ok

14:54:49.0616 0x12ac  [ E77DC03DD3C8E5A388BF9EED2A28F3D1, ED0DAA975D1EC35CE036F02596218E15CC6A054167628D12A0A5AD91B841F422 ] MpFilter        C:\Windows\system32\DRIVERS\MpFilter.sys

14:54:49.0652 0x12ac  MpFilter - ok

14:54:49.0739 0x12ac  [ 511D011289755DD9F9A7579FB0B064E6, 1FD0D0D5B6E08FE06F7A5D0821BCD859B0F98A6DEA58AAB7FB6C95B64212FFC8 ] mpio            C:\Windows\system32\drivers\mpio.sys

14:54:49.0779 0x12ac  mpio - ok

14:54:49.0829 0x12ac  [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E, 62055C0DCEB69873B8961AB17DBD002F44319A44CB05EC3A61421A0C6D4736CD ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys

14:54:49.0872 0x12ac  mpsdrv - ok

14:54:49.0964 0x12ac  [ 5DE62C6E9108F14F6794060A9BDECAEC, 655E6645CC4A1EDBE5F51F5F80C7B504DD956851E788A6E4E4E08CDCDCE160D9 ] MpsSvc          C:\Windows\system32\mpssvc.dll

14:54:50.0038 0x12ac  MpsSvc - ok

14:54:50.0064 0x12ac  [ 4FBBB70D30FD20EC51F80061703B001E, 72907A0CA5CFF82F40C02A65CD8EFD51D7CFC33BE67DE572D1ACF4FD3B248F0A ] Mraid35x        C:\Windows\system32\drivers\mraid35x.sys

14:54:50.0071 0x12ac  Mraid35x - ok

14:54:50.0110 0x12ac  [ 82CEA0395524AACFEB58BA1448E8325C, 16E37990A291C848DE35F48EA7E09AE5B258AE589EB08A3FA2C60DC1278DE182 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys

14:54:50.0122 0x12ac  MRxDAV - ok

14:54:50.0157 0x12ac  [ 1E94971C4B446AB2290DEB71D01CF0C2, 4701AA1B419AEF735CB2DA34532B0F1844433272C36D79F4EB55807E39B923D1 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys

14:54:50.0169 0x12ac  mrxsmb - ok

14:54:50.0237 0x12ac  [ 4FCCB34D793B116423209C0F8B7A3B03, 7A483AEB691ADBE82779F12F0BB1CCCBFFD7E92902EC1ADC99AB7D129F887143 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys

14:54:50.0278 0x12ac  mrxsmb10 - ok

14:54:50.0294 0x12ac  [ C3CB1B40AD4A0124D617A1199B0B9D7C, B975A39DE6D324C6274B6E3B883F36082A958F028335CEB3A37F44481EB284B3 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys

14:54:50.0306 0x12ac  mrxsmb20 - ok

14:54:50.0321 0x12ac  [ 28023E86F17001F7CD9B15A5BC9AE07D, FC7EAA592C5F796E3BCD7F7EF261709CD899B33FC8486E594A480F143D0D6320 ] msahci          C:\Windows\system32\drivers\msahci.sys

14:54:50.0329 0x12ac  msahci - ok

14:54:50.0344 0x12ac  [ 4468B0F385A86ECDDAF8D3CA662EC0E7, EAEDC9CDD2EEC5000AF8190A4BE7729282576C3F88E64FDF57F455F5CECC81C9 ] msdsm           C:\Windows\system32\drivers\msdsm.sys

14:54:50.0353 0x12ac  msdsm - ok

14:54:50.0369 0x12ac  [ FD7520CC3A80C5FC8C48852BB24C6DED, C3F3D7A07FAB9AF38A2A00BF0DF6EEE18CA8FE26277BEC9D8ADB793F2CD5EC1F ] MSDTC           C:\Windows\System32\msdtc.exe

14:54:50.0395 0x12ac  MSDTC - ok

14:54:50.0412 0x12ac  [ A9927F4A46B816C92F461ACB90CF8515, 753284F726F9B4D3E7322C75532244CA43714F00717C2019391FB36DEE0738C0 ] Msfs            C:\Windows\system32\drivers\Msfs.sys

14:54:50.0433 0x12ac  Msfs - ok

14:54:50.0453 0x12ac  [ 0F400E306F385C56317357D6DEA56F62, C48FA8193787359902D20D869F5F602CD66D3C5D061A58DDB72F51EED433C4BC ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys

14:54:50.0460 0x12ac  msisadrv - ok

14:54:50.0481 0x12ac  [ 85466C0757A23D9A9AECDC0755203CB2, 79141B8DF9D7470466872AF03A85C3D3976512BFDBDB8B92A22225DC8EFD70A6 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll

14:54:50.0507 0x12ac  MSiSCSI - ok

14:54:50.0513 0x12ac  msiserver - ok

14:54:50.0527 0x12ac  [ D8C63D34D9C9E56C059E24EC7185CC07, D0CBFB8D57E6D908679DC0488ED659CA35B92626DEA890873E165F051A1AD2AE ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys

14:54:50.0550 0x12ac  MSKSSRV - ok

14:54:50.0594 0x12ac  [ B0F49DA36F30922F5DDC3B623B778FCE, EE025AEFA4A2095AFEABFB3A49639DA77D78068A3F5EEDA6C15D34853AFD5609 ] MsMpSvc         c:\Program Files\Microsoft Security Client\MsMpEng.exe

14:54:50.0602 0x12ac  MsMpSvc - ok

14:54:50.0632 0x12ac  [ 1D373C90D62DDB641D50E55B9E78D65E, 1D4897A96EA54D6FAC7916D69B4E88CAE1397C38CC8FAE08554772808476357B ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys

14:54:50.0656 0x12ac  MSPCLOCK - ok

14:54:50.0668 0x12ac  [ B572DA05BF4E098D4BBA3A4734FB505B, B7923F204CEADD0F62C2FE4B7CF8C56DAB70F88093B15C5692D0E61490CF4BAA ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys

14:54:50.0690 0x12ac  MSPQM - ok

14:54:50.0760 0x12ac  [ B49456D70555DE905C311BCDA6EC6ADB, 8E40586B3A1FAE9996459E0261726C9DD6A8D5F575604868C45604613385C92F ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys

14:54:50.0773 0x12ac  MsRPC - ok

14:54:50.0797 0x12ac  [ E384487CB84BE41D09711C30CA79646C, 520391DEE14D4D6C1EA99C7D31DD95D56B44D54CA3CD8E5C9855E9C0A04F026C ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys

14:54:50.0806 0x12ac  mssmbios - ok

14:54:50.0823 0x12ac  [ 7199C1EEC1E4993CAF96B8C0A26BD58A, DD02DF8ED7AF5BB88BD2A91F38CE4C52432CB8044BDCBC41C320CD22B10B8A3B ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys

14:54:50.0864 0x12ac  MSTEE - ok

14:54:50.0886 0x12ac  [ 6A57B5733D4CB702C8EA4542E836B96C, 080FB0B01E949D24CDD6876125B3A72DA9F88845D8B9A1A425BCA99E7ACF6821 ] Mup             C:\Windows\system32\Drivers\mup.sys

14:54:50.0894 0x12ac  Mup - ok

14:54:50.0941 0x12ac  [ E4EAF0C5C1B41B5C83386CF212CA9584, 5946C3DCE65A0DB164169A1775DFCA544AF4E1895ADF6916BB1653F373F8D9AF ] napagent        C:\Windows\system32\qagentRT.dll

14:54:50.0982 0x12ac  napagent - ok

14:54:51.0061 0x12ac  [ 85C44FDFF9CF7E72A40DCB7EC06A4416, DC37C99C458CA69B33BFD3894187089E947F4F9C01EC2ED024FA8614989E0956 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys

14:54:51.0114 0x12ac  NativeWifiP - ok

14:54:51.0172 0x12ac  [ 1357274D1883F68300AEADD15D7BBB42, EE6352CBF0D9D633816F338159CDA27F1A805C3DDC3402D8605B50D8F3CD3300 ] NDIS            C:\Windows\system32\drivers\ndis.sys

14:54:51.0225 0x12ac  NDIS - ok

14:54:51.0232 0x12ac  [ 0E186E90404980569FB449BA7519AE61, DE41791D9D3074007D6DD1D3933E7A2A13E3789D0AD4F029105B58279622FC1B ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys

14:54:51.0248 0x12ac  NdisTapi - ok

14:54:51.0294 0x12ac  [ D6973AA34C4D5D76C0430B181C3CD389, 7C303F3D6BFF8B82E39998135B444837091AB1F9EB8F28D013E5EF45DB237EFC ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys

14:54:51.0315 0x12ac  Ndisuio - ok

14:54:51.0370 0x12ac  [ 818F648618AE34F729FDB47EC68345C3, 5FC8F9237BD7FCE3C62D5BDDD49DC104BE2BECDC2FA8CDC1DB8F1891CBAA9140 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys

14:54:51.0389 0x12ac  NdisWan - ok

14:54:51.0429 0x12ac  [ 71DAB552B41936358F3B541AE5997FB3, 30A8B3E33CBF04FC047254E404C0321F9028F2640036AA8AC1EA0A5E64551684 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys

14:54:51.0447 0x12ac  NDProxy - ok

14:54:51.0472 0x12ac  [ BCD093A5A6777CF626434568DC7DBA78, 2A283DD93230361204EA0897864EAF0224CB8C02E025AE2E4237B07A598B3EBD ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys

14:54:51.0494 0x12ac  NetBIOS - ok

14:54:51.0547 0x12ac  [ ECD64230A59CBD93C85F1CD1CAB9F3F6, 83650D756C1F2768A2AAAFC7924F2A4316ABAEB1708F4B05803CDDD699B5AB6F ] netbt           C:\Windows\system32\DRIVERS\netbt.sys

14:54:51.0570 0x12ac  netbt - ok

14:54:51.0602 0x12ac  [ 3978F3540329E16C0AC3BCF677E5669F, 2CC9F1C9D9E33F8A0DA72490D74BED9E746FB142EDF78DE2F2A33A34B76D9868 ] Netlogon        C:\Windows\system32\lsass.exe

14:54:51.0613 0x12ac  Netlogon - ok

14:54:51.0697 0x12ac  [ C8052711DAECC48B982434C5116CA401, 417DEB86D157DD3F0B4678410FE27FDD3E8FA04AB03AF398F6C02BF207070B35 ] Netman          C:\Windows\System32\netman.dll

14:54:51.0728 0x12ac  Netman - ok

14:54:51.0786 0x12ac  [ 2EF3BBE22E5A5ACD1428EE387A0D0172, 55DB91EDD0339D2434C06445F8A716A48EA90925B0FF7EBF45BB79D4B54B80BF ] netprofm        C:\Windows\System32\netprofm.dll

14:54:51.0839 0x12ac  netprofm - ok

14:54:51.0896 0x12ac  [ 847B64E9069946556BCFCDCE638566D8, D8173151001EC27D3B98278C85BEC99271DA72D0F679600A070E634BD687BC61 ] netr73          C:\Windows\system32\DRIVERS\netr73.sys

14:54:51.0961 0x12ac  netr73 - ok

14:54:52.0010 0x12ac  [ D6C4E4A39A36029AC0813D476FBD0248, A0907D98580D1CD3007365CBBB53E84BEF39001E05912776F68EB0564B54B6EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

14:54:52.0021 0x12ac  NetTcpPortSharing - ok

14:54:52.0040 0x12ac  [ 2E7FB731D4790A1BC6270ACCEFACB36E, EE9A00B694E8A3A5842CDC56C7BA1364317AC8134E046A0059661D057094B1A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys

14:54:52.0049 0x12ac  nfrd960 - ok

14:54:52.0077 0x12ac  [ 32FF06EC6D946EF791D98D6C838A3090, 319BDD491CB22D0CCCCE76A2854CF469D7AF046289F9C56CD03AE3D3CBC0275E ] NisDrv          C:\Windows\system32\DRIVERS\NisDrvWFP.sys

14:54:52.0090 0x12ac  NisDrv - ok

14:54:52.0131 0x12ac  [ 42D33042371BFB1A7D40834590CAFD30, 53DA3618EC10293B2DF686E291A4EF6ACBBD41D116EC762D54106D201A784E87 ] NisSrv          c:\Program Files\Microsoft Security Client\NisSrv.exe

14:54:52.0151 0x12ac  NisSrv - ok

14:54:52.0211 0x12ac  [ 2997B15415F9BBE05B5A4C1C85E0C6A2, 5455536515FE740E18E090329FDCC40288724372AD18ACDB2CB4BB9D85CF681E ] NlaSvc          C:\Windows\System32\nlasvc.dll

14:54:52.0251 0x12ac  NlaSvc - ok

14:54:52.0302 0x12ac  [ D36F239D7CCE1931598E8FB90A0DBC26, DF9397411D0CE5A87E3346D4E6E25BEC537A21BCE196CC55FD999CD08FC4A637 ] Npfs            C:\Windows\system32\drivers\Npfs.sys

14:54:52.0323 0x12ac  Npfs - ok

14:54:52.0375 0x12ac  [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD, 15CA178518EB3D457AA4C109D97A8490821590842AE4E9841703B5A55870C8F6 ] nsi             C:\Windows\system32\nsisvc.dll

14:54:52.0405 0x12ac  nsi - ok

14:54:52.0434 0x12ac  [ 609773E344A97410CE4EBF74A8914FCF, 90B9CBD2B62854DD503DE4A910CB987D402368EB99882FE20FFB6DEACD70F2BD ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys

14:54:52.0463 0x12ac  nsiproxy - ok

14:54:52.0571 0x12ac  [ 6A4A98CEE84CF9E99564510DDA4BAA47, 18C3D8C0F12761D3B7FC43D9413CF4C4CEBF8CA9BEC521381F40D241B35EA779 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys

14:54:52.0624 0x12ac  Ntfs - ok

14:54:52.0660 0x12ac  [ E875C093AEC0C978A90F30C9E0DFBB72, D3A480CD7EF374EFBC1BB831B33B81534774DDDBB0FB338BEE1D444949FD8DE7 ] ntrigdigi       C:\Windows\system32\drivers\ntrigdigi.sys

14:54:52.0712 0x12ac  ntrigdigi - ok

14:54:52.0731 0x12ac  [ C5DBBCDA07D780BDA9B685DF333BB41E, 3652893DFF05469A273C3073D8D0A9D6D6BBDEC7855FEA8EAB768F95BA674108 ] Null            C:\Windows\system32\drivers\Null.sys

14:54:52.0760 0x12ac  Null - ok

14:54:52.0875 0x12ac  [ D668632606D1CEBF0B6EC64C1DF7ED6F, 3409D6D7318902CAAED5AEEEA4C293BA809017BCCADC538938942380C52B923F ] NVENETFD        C:\Windows\system32\DRIVERS\nvmfdx32.sys

14:54:52.0948 0x12ac  NVENETFD - ok

14:54:53.0392 0x12ac  [ 1924B437D113E909ABB7F11623884D77, 3B129653433624371CAA6D6931E42FC97B4E9BF9206D66F108BD7286BD451941 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys

14:54:53.0759 0x12ac  nvlddmkm - ok

14:54:53.0805 0x12ac  [ 2EDF9E7751554B42CBB60116DE727101, 37A0AA78E83DBB5A788F7F067EB71DDF6CCC72A66BB41B209E1A5E2F68F8AF9B ] nvraid          C:\Windows\system32\drivers\nvraid.sys

14:54:53.0814 0x12ac  nvraid - ok

14:54:53.0838 0x12ac  [ 6F5BB0B40D251351A913B61BA9D64B3F, 69004AA640F59FF44F3EEAD3A0F9BF50850B161675BA9B837299649F92FBC0F6 ] nvrd32          C:\Windows\system32\drivers\nvrd32.sys

14:54:53.0849 0x12ac  nvrd32 - ok

14:54:53.0865 0x12ac  [ C44EE36DD84FA95EB81D79C374756003, 1BBFA4A473CA0B19346EA458430377B1979BB533ECDAB2297D7E767DF9BD3682 ] nvsmu           C:\Windows\system32\drivers\nvsmu.sys

14:54:53.0887 0x12ac  nvsmu - ok

14:54:53.0907 0x12ac  [ ABED0C09758D1D97DB0042DBB2688177, 84B9BF886EF9181915E8AB6D971446BC681E6DE4485DBECD62838EAFA10E7F46 ] nvstor          C:\Windows\system32\drivers\nvstor.sys

14:54:53.0915 0x12ac  nvstor - ok

14:54:53.0968 0x12ac  [ 1A649B87A7B7C1220A2B16B121F2198E, A434863836F45707DB6AF1D46C642EB32753E6A1BC568E4F6FB12C265E664EB9 ] nvstor32        C:\Windows\system32\DRIVERS\nvstor32.sys

14:54:53.0979 0x12ac  nvstor32 - ok

14:54:54.0019 0x12ac  [ 18BBDF913916B71BD54575BDB6EEAC0B, 5FBA165149AB09E869DCE35622E91CFC964BDD22B31A5E76CF12F1565402B207 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys

14:54:54.0033 0x12ac  nv_agp - ok

14:54:54.0039 0x12ac  NwlnkFlt - ok

14:54:54.0047 0x12ac  NwlnkFwd - ok

14:54:54.0088 0x12ac  [ 6F310E890D46E246E0E261A63D9B36B4, 7050B0C43CC0DF2DDAD3EB8D2FF9EEE425A627C68654CBB154D55A4B1A47AA08 ] ohci1394        C:\Windows\system32\DRIVERS\ohci1394.sys

14:54:54.0108 0x12ac  ohci1394 - ok

14:54:54.0166 0x12ac  [ 0C8E8E61AD1EB0B250B846712C917506, 8F23657B90BFFCD7273B93EDA2D3768F35C1C5A313F22AE33452BE3B2A550649 ] p2pimsvc        C:\Windows\system32\p2psvc.dll

14:54:54.0203 0x12ac  p2pimsvc - ok

14:54:54.0228 0x12ac  [ 0C8E8E61AD1EB0B250B846712C917506, 8F23657B90BFFCD7273B93EDA2D3768F35C1C5A313F22AE33452BE3B2A550649 ] p2psvc          C:\Windows\system32\p2psvc.dll

14:54:54.0299 0x12ac  p2psvc - ok

14:54:54.0331 0x12ac  [ 0FA9B5055484649D63C303FE404E5F4D, ABF357001A5E7B21621560E74FA538E2D899C5111A6AAC784B5B12D9D819C6CD ] Parport         C:\Windows\system32\drivers\parport.sys

14:54:54.0371 0x12ac  Parport - ok

14:54:54.0443 0x12ac  [ 57389FA59A36D96B3EB09D0CB91E9CDC, 05A3E2B155789990517CCFDC57FC3D1E9A596E4F31D86350B8BF0C043DE5EE9B ] partmgr         C:\Windows\system32\drivers\partmgr.sys

14:54:54.0452 0x12ac  partmgr - ok

14:54:54.0501 0x12ac  [ 4F9A6A8A31413180D0FCB279AD5D8112, DCE48BC6E3447403521BB9FBF727E629DEE45B69B8AE8CFEE1A67FECAE3CB9D3 ] Parvdm          C:\Windows\system32\drivers\parvdm.sys

14:54:54.0538 0x12ac  Parvdm - ok

14:54:54.0582 0x12ac  [ C6276AD11F4BB49B58AA1ED88537F14A, 409E956AF994640DF8D062E5E41F87A6EE7EEE0335C191B582722A49322357CE ] PcaSvc          C:\Windows\System32\pcasvc.dll

14:54:54.0615 0x12ac  PcaSvc - ok

14:54:54.0676 0x12ac  [ 941DC1D19E7E8620F40BBC206981EFDB, 156142A8B587131D2D47074CBFD0A31F69B3C27A8C74C8C4F29DFE7B53BBA802 ] pci             C:\Windows\system32\drivers\pci.sys

14:54:54.0687 0x12ac  pci - ok

14:54:54.0732 0x12ac  [ 1636D43F10416AEB483BC6001097B26C, 36E61A993693A46538FE0F726D67BB28886F61D53384AD600D1282296A27662E ] pciide          C:\Windows\system32\drivers\pciide.sys

14:54:54.0740 0x12ac  pciide - ok

14:54:54.0790 0x12ac  [ E6F3FB1B86AA519E7698AD05E58B04E5, 2C4B45DDD3B980C9DAA6F039CAEFCD6E84A4D5BB43AFBA73C0C42B5556C1303C ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys

14:54:54.0800 0x12ac  pcmcia - ok

14:54:54.0860 0x12ac  [ 6349F6ED9C623B44B52EA3C63C831A92, 9EAA3ABD396870123107D6E1B758F56FDA378BD28B28DB8415AA470D24294F92 ] PEAUTH          C:\Windows\system32\drivers\peauth.sys

14:54:54.0971 0x12ac  PEAUTH - ok

14:54:55.0096 0x12ac  [ B1689DF169143F57053F795390C99DB3, 887B8C76B34CABC68067C0F27CC4EEF02457A53634C96FE5B0FE9B99453BDBEF ] pla             C:\Windows\system32\pla.dll

14:54:55.0218 0x12ac  pla - ok

14:54:55.0256 0x12ac  [ C5E7F8A996EC0A82D508FD9064A5569E, 416A93816CDF12DD42DEA796D37E6E2000D3172AAAB20D3EAD3B715DACD4B61F ] PlugPlay        C:\Windows\system32\umpnpmgr.dll

14:54:55.0290 0x12ac  PlugPlay - ok

14:54:55.0392 0x12ac  [ 0C8E8E61AD1EB0B250B846712C917506, 8F23657B90BFFCD7273B93EDA2D3768F35C1C5A313F22AE33452BE3B2A550649 ] PNRPAutoReg     C:\Windows\system32\p2psvc.dll

14:54:55.0422 0x12ac  PNRPAutoReg - ok

14:54:55.0445 0x12ac  [ 0C8E8E61AD1EB0B250B846712C917506, 8F23657B90BFFCD7273B93EDA2D3768F35C1C5A313F22AE33452BE3B2A550649 ] PNRPsvc         C:\Windows\system32\p2psvc.dll

14:54:55.0539 0x12ac  PNRPsvc - ok

14:54:55.0593 0x12ac  [ D0494460421A03CD5225CCA0059AA146, FC30E90522C63F2A66D89381705712D2CDF07B2E029DF40C2DEBB2353E763E90 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll

14:54:55.0624 0x12ac  PolicyAgent - ok

14:54:55.0672 0x12ac  [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1, 6E4B188A4BFDBBCA51347BCCE2873F2D0F858398851B9B5129CB9F36A02E4354 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys

14:54:55.0694 0x12ac  PptpMiniport - ok

14:54:55.0746 0x12ac  [ 2027293619DD0F047C584CF2E7DF4FFD, B7C172CCD08D8A30483D27536355ED1E5009B33629355B426470AFBA8542B394 ] Processor       C:\Windows\system32\drivers\processr.sys

14:54:55.0769 0x12ac  Processor - ok

14:54:55.0798 0x12ac  [ 0508FAA222D28835310B7BFCA7A77346, 3AE2340C6E365F137CC00D9560069501DD2724756EA9EBF7A6CDFFC91B43709C ] ProfSvc         C:\Windows\system32\profsvc.dll

14:54:55.0822 0x12ac  ProfSvc - ok

14:54:55.0849 0x12ac  [ 3978F3540329E16C0AC3BCF677E5669F, 2CC9F1C9D9E33F8A0DA72490D74BED9E746FB142EDF78DE2F2A33A34B76D9868 ] ProtectedStorage C:\Windows\system32\lsass.exe

14:54:55.0859 0x12ac  ProtectedStorage - ok

14:54:55.0908 0x12ac  [ 390C204CED3785609AB24E9C52054A84, D997A9EAAE4A7FED9C2FEBD1AA7D1171431B9C9D56F8BFB587DCAE26203FF4D2 ] Ps2             C:\Windows\system32\DRIVERS\PS2.sys

14:54:55.0915 0x12ac  Ps2 - ok

14:54:55.0959 0x12ac  [ 99514FAA8DF93D34B5589187DB3AA0BA, 4DDE5EC0C721B22E1D7D55ED3514B60EA07435C232A3A931BB49C7F486B52C18 ] PSched          C:\Windows\system32\DRIVERS\pacer.sys

14:54:55.0993 0x12ac  PSched - ok

14:54:56.0078 0x12ac  [ 0A6DB55AFB7820C99AA1F3A1D270F4F6, 8B7D44A7698B95FE34CBBE4FAB2F01EC1F5BA86C2B19672F99767E650E99BF1C ] ql2300          C:\Windows\system32\drivers\ql2300.sys

14:54:56.0123 0x12ac  ql2300 - ok

14:54:56.0149 0x12ac  [ 81A7E5C076E59995D54BC1ED3A16E60B, A2988F065F93C41B3B389BFF3BB3FD69F768C2AF249C2356F315CC92E5C9E128 ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys

14:54:56.0158 0x12ac  ql40xx - ok

14:54:56.0193 0x12ac  [ E9ECAE663F47E6CB43962D18AB18890F, F1A05320CAED9E745AA36A6DA9B64C48AAEDE888B42B249840CEB31448F7F432 ] QWAVE           C:\Windows\system32\qwave.dll

14:54:56.0215 0x12ac  QWAVE - ok

14:54:56.0235 0x12ac  [ 9F5E0E1926014D17486901C88ECA2DB7, 67CDFB99AB546DCEEF20507EAC07DD52FFB51BFDFE9416ABEDDC1201B60D720E ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys

14:54:56.0246 0x12ac  QWAVEdrv - ok

14:54:56.0271 0x12ac  [ 147D7F9C556D259924351FEB0DE606C3, E41EBA5F3098C6CF2BE4C0060A5F4BF161C3677D983B7A0D70ACC12FC3CFEFD7 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys

14:54:56.0292 0x12ac  RasAcd - ok

14:54:56.0313 0x12ac  [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F, 6A410ABCCD2211EFF511CDBF22E4152B57D2996336EBE711DFF71904AF232DB2 ] RasAuto         C:\Windows\System32\rasauto.dll

14:54:56.0349 0x12ac  RasAuto - ok

14:54:56.0374 0x12ac  [ A214ADBAF4CB47DD2728859EF31F26B0, A24F37F55E2C018B1B4FA2C568A01AAAAEA1220833ED24A93378386174A70A32 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys

14:54:56.0397 0x12ac  Rasl2tp - ok

14:54:56.0448 0x12ac  [ 75D47445D70CA6F9F894B032FBC64FCF, 9112EA5D25F867136858524C7965ACCEDC02675D1E2985B950598D89CCF25E14 ] RasMan          C:\Windows\System32\rasmans.dll

14:54:56.0502 0x12ac  RasMan - ok

14:54:56.0551 0x12ac  [ 509A98DD18AF4375E1FC40BC175F1DEF, CC7C278CA298CE102D871E34C176E73F903D6687D1E8B5AFAB8772C7DE1A60B1 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys

14:54:56.0567 0x12ac  RasPppoe - ok

14:54:56.0587 0x12ac  [ 2005F4A1E05FA09389AC85840F0A9E4D, D8A664073FDE82F9AB324347024CDB7043635C84EB11C24C59AB384C52F0FD94 ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys

14:54:56.0600 0x12ac  RasSstp - ok

14:54:56.0679 0x12ac  [ B14C9D5B9ADD2F84F70570BBBFAA7935, 3D533767A50554B86C769DF4D8841B3EA680B3807E85EA3533BDA9B649548269 ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys

14:54:56.0700 0x12ac  rdbss - ok

14:54:56.0723 0x12ac  [ 89E59BE9A564262A3FB6C4F4F1CD9899, 6F948FB0E73495CA60B7B19E758268495EC8A084C475EC59AD7940AA619570BB ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys

14:54:56.0744 0x12ac  RDPCDD - ok

14:54:56.0795 0x12ac  [ FBC0BACD9C3D7F6956853F64A66E252D, 7672B10C7039295B152C02C96903E869FF2C0A88A2C3FA89BAE9F1D593B43569 ] rdpdr           C:\Windows\system32\drivers\rdpdr.sys

14:54:56.0824 0x12ac  rdpdr - ok

14:54:56.0831 0x12ac  [ 9D91FE5286F748862ECFFA05F8A0710C, 33F37F1B207151A5564BF051BBF16F35D8C5A0F426CCA078A51F125BF09E487B ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys

14:54:56.0854 0x12ac  RDPENCDD - ok

14:54:56.0929 0x12ac  [ 30BFBDFB7F95559EDE971F9DDB9A00BA, 1BDD3FD0ABCF5EA2C4D2618E76AC782894E5A7132700BA4C4226E1F9C7CE547B ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys

14:54:56.0949 0x12ac  RDPWD - ok

14:54:57.0049 0x12ac  [ BCDD6B4804D06B1F7EBF29E53A57ECE9, 8A961CCD0A0265E03D9952C733B593B02B5CF64E308D6B420276D2D6B20F86FC ] RemoteAccess    C:\Windows\System32\mprdim.dll

14:54:57.0082 0x12ac  RemoteAccess - ok

14:54:57.0122 0x12ac  [ 9E6894EA18DAFF37B63E1005F83AE4AB, 5D6DF994D297C875D547C7B111A571AA90D582DAECADE18A53F65AD988819E67 ] RemoteRegistry  C:\Windows\system32\regsvc.dll

14:54:57.0141 0x12ac  RemoteRegistry - ok

14:54:57.0170 0x12ac  [ 5123F83CBC4349D065534EEB6BBDC42B, 92A3F38EA924D83D601BB93E3750F9DBC2DD963FB7ACF2A0E776297E21815225 ] RpcLocator      C:\Windows\system32\locator.exe

14:54:57.0195 0x12ac  RpcLocator - ok

14:54:57.0229 0x12ac  [ 3B5B4D53FEC14F7476CA29A20CC31AC9, EC02A412DA5FDE2C759A4A2C5904579E1CE7C4999CE87145812F354FC8F5E183 ] RpcSs           C:\Windows\system32\rpcss.dll

14:54:57.0278 0x12ac  RpcSs - ok

14:54:57.0318 0x12ac  [ 9C508F4074A39E8B4B31D27198146FAD, 84913471E5A6C297B1EDABE45EF3FE7D2C4410EF04370F615109FD9E2690FFDB ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys

14:54:57.0354 0x12ac  rspndr - ok

14:54:57.0383 0x12ac  [ 3978F3540329E16C0AC3BCF677E5669F, 2CC9F1C9D9E33F8A0DA72490D74BED9E746FB142EDF78DE2F2A33A34B76D9868 ] SamSs           C:\Windows\system32\lsass.exe

14:54:57.0393 0x12ac  SamSs - ok

14:54:57.0429 0x12ac  [ 3CE8F073A557E172B330109436984E30, CEC281C6076FAA1E34372CF419C6308E73811316606B8D0D9055B7D8952BDC88 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys

14:54:57.0437 0x12ac  sbp2port - ok

14:54:57.0451 0x12ac  [ 77B7A11A0C3D78D3386398FBBEA1B632, A3D290AB793BDC2F84C7B963300DFCE81CFE082A0FFF7489E8E5B14714892C00 ] SCardSvr        C:\Windows\System32\SCardSvr.dll

14:54:57.0476 0x12ac  SCardSvr - ok

14:54:57.0602 0x12ac  [ 1A58069DB21D05EB2AB58EE5753EBE8D, EED8111EB613F4C93D1638C74FDB0A6DC6694E1B108DCD0D794B5B5F9B8C6EE4 ] Schedule        C:\Windows\system32\schedsvc.dll

14:54:57.0660 0x12ac  Schedule - ok

14:54:57.0700 0x12ac  [ 312EC3E37A0A1F2006534913E37B4423, 81B8F462336791D162DAFA8092C1F437638DA3022CA24A2458B9FE183FC18C5D ] SCPolicySvc     C:\Windows\System32\certprop.dll

14:54:57.0716 0x12ac  SCPolicySvc - ok

14:54:57.0798 0x12ac  [ 716313D9F6B0529D03F726D5AAF6F191, 44FE994A11631C1D99C73026340BACE39973C65A1281D87A61B481C9B5FAB251 ] SDRSVC          C:\Windows\System32\SDRSVC.dll

14:54:57.0812 0x12ac  SDRSVC - ok

14:54:57.0856 0x12ac  [ 90A3935D05B494A5A39D37E71F09A677, F72733A69BC6E1A2BB91D7632FF3463C12563F60FDCC00A2CDD67FF20D479952 ] secdrv          C:\Windows\system32\drivers\secdrv.sys

14:54:57.0900 0x12ac  secdrv - ok

14:54:57.0943 0x12ac  [ FD5199D4D8A521005E4B5EE7FE00FA9B, 0FB7A1D300C72B1ADC423CC57343C17853E5F8ACFE3EA2C42FAC2FF72E502FBE ] seclogon        C:\Windows\system32\seclogon.dll

14:54:57.0990 0x12ac  seclogon - ok

14:54:58.0036 0x12ac  [ A9BBAB5759771E523F55563D6CBE140F, 415BF6F6A1E4C5F98DABF9C2EEAF8CA49730693046E5F94C7655683717EDAD75 ] SENS            C:\Windows\system32\sens.dll

14:54:58.0070 0x12ac  SENS - ok

14:54:58.0116 0x12ac  [ 68E44E331D46F0FB38F0863A84CD1A31, 0778D85B6869CE2610820DC9724360538BFE832426E898AEBC34E53D2AB4322B ] Serenum         C:\Windows\system32\drivers\serenum.sys

14:54:58.0155 0x12ac  Serenum - ok

14:54:58.0201 0x12ac  [ C70D69A918B178D3C3B06339B40C2E1B, 40BEEECA4C797A3355F4B01C57C2763C33028F27826315062320789A496D0810 ] Serial          C:\Windows\system32\drivers\serial.sys

14:54:58.0244 0x12ac  Serial - ok

14:54:58.0288 0x12ac  [ 8AF3D28A879BF75DB53A0EE7A4289624, C870BEBB969DCD9170E64584D1CD329A193D9FC812A45EF3574891110CA68B45 ] sermouse        C:\Windows\system32\drivers\sermouse.sys

14:54:58.0311 0x12ac  sermouse - ok

14:54:58.0356 0x12ac  [ D2193326F729B163125610DBF3E17D57, 82C894E24E2C139C884246A693AD37BBF0A4E9375B7F7A288EF1DB22F89434B9 ] SessionEnv      C:\Windows\system32\sessenv.dll

14:54:58.0391 0x12ac  SessionEnv - ok

14:54:58.0407 0x12ac  [ 3EFA810BDCA87F6ECC24F9832243FE86, E50FEA94DB9851A46A8A71A8C061AC953A9D5B14585382B3F0FFC84931A0A68F ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys

14:54:58.0426 0x12ac  sffdisk - ok

14:54:58.0439 0x12ac  [ E95D451F7EA3E583AEC75F3B3EE42DC5, B014BE4F9B0C79ECCE2537D1CF4AAD48ACB4C5AD3DACAC4444F0F465B9689921 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys

14:54:58.0470 0x12ac  sffp_mmc - ok

14:54:58.0479 0x12ac  [ 3D0EA348784B7AC9EA9BD9F317980979, 2500CE188C9B71C50E966FA575303AEFE50934E376C530AECEC7C7533C15EF08 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys

14:54:58.0504 0x12ac  sffp_sd - ok

14:54:58.0563 0x12ac  [ 46ED8E91793B2E6F848015445A0AC188, 34A97304F23EA153422848F6F1CAF8ADF0944EA781E12F027B6DEAF751A04B5D ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys

14:54:58.0600 0x12ac  sfloppy - ok

14:54:58.0645 0x12ac  [ E1499BD0FF76B1B2FBBF1AF339D91165, 9A8F0403467E75880D3070C4D862489A75134383BAF8E7C45F8C5E7DFB0605A5 ] SharedAccess    C:\Windows\System32\ipnathlp.dll

14:54:58.0675 0x12ac  SharedAccess - ok

14:54:58.0746 0x12ac  [ C7230FBEE14437716701C15BE02C27B8, 8221DE73D77CF71C2857D78829E807D015D9CB8BDEE4BAFD6950BF0C718CC774 ] ShellHWDetection C:\Windows\System32\shsvcs.dll

14:54:58.0763 0x12ac  ShellHWDetection - ok

14:54:58.0782 0x12ac  [ 1D76624A09A054F682D746B924E2DBC3, DC903DD466AB8899883253F09477B02E4E93A31C8B279F9F02BD555F1AA083B7 ] sisagp          C:\Windows\system32\drivers\sisagp.sys

14:54:58.0790 0x12ac  sisagp - ok

14:54:58.0817 0x12ac  [ 43CB7AA756C7DB280D01DA9B676CFDE2, 08484CAEA0518C0A4CCCD292D8C803B27FEC453537EE1E4CEE74A7208356A474 ] SiSRaid2        C:\Windows\system32\drivers\sisraid2.sys

14:54:58.0824 0x12ac  SiSRaid2 - ok

14:54:58.0834 0x12ac  [ A99C6C8B0BAA970D8AA59DDC50B57F94, 97AC9DD6DC4F58AC60E819B999BB157663EE7C1739521D16768AA9AC00DAD012 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys

14:54:58.0843 0x12ac  SiSRaid4 - ok

14:54:59.0185 0x12ac  [ 862BB4CBC05D80C5B45BE430E5EF872F, F4961B22C93E472C8C862421AA231CDDA9E40D3958741A1D666357F22CC3143D ] slsvc           C:\Windows\system32\SLsvc.exe

14:54:59.0325 0x12ac  slsvc - ok

14:54:59.0394 0x12ac  [ 6EDC422215CD78AA8A9CDE6B30ABBD35, D8342BC3152859F4F7512E85ABEC61147DBCAB515458644728874E42F639D6CA ] SLUINotify      C:\Windows\system32\SLUINotify.dll

14:54:59.0428 0x12ac  SLUINotify - ok

14:54:59.0489 0x12ac  [ 7B75299A4D201D6A6533603D6914AB04, 172BE3951F06B1991EF70B71EB91786D1EFC4E381C22BCA3A5F622CD59F3227E ] Smb             C:\Windows\system32\DRIVERS\smb.sys

14:54:59.0506 0x12ac  Smb - ok

14:54:59.0575 0x12ac  [ 2A146A055B4401C16EE62D18B8E2A032, D0930FFA53951C92F56E1ECB41374F4C0AA01ECBF99F474513A21EAD579CFE47 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe

14:54:59.0586 0x12ac  SNMPTRAP - ok

14:54:59.0608 0x12ac  [ 7AEBDEEF071FE28B0EEF2CDD69102BFF, E03BEE733F4C2A5F39946D4955679A290E22758DFCE4222EE69ABF64FC54EDF7 ] spldr           C:\Windows\system32\drivers\spldr.sys

14:54:59.0615 0x12ac  spldr - ok

14:54:59.0673 0x12ac  [ 8554097E5136C3BF9F69FE578A1B35F4, 2578545CFD647FB18F217B33C8CB4F0184A35F548659494056E455020CC15FB0 ] Spooler         C:\Windows\System32\spoolsv.exe

14:54:59.0687 0x12ac  Spooler - ok

14:54:59.0758 0x12ac  [ 41987F9FC0E61ADF54F581E15029AD91, A46E718648C2DD3B43FC3798932C966315893A59442A0686CE46C605B9E4641E ] srv             C:\Windows\system32\DRIVERS\srv.sys

14:54:59.0776 0x12ac  srv - ok

14:54:59.0836 0x12ac  [ FF33AFF99564B1AA534F58868CBE41EF, EFBB005DA19E5B320009CBF93E686D8BFA6A50A23B5A5001C7C84C7D85EF7D49 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys

14:54:59.0884 0x12ac  srv2 - ok

14:54:59.0915 0x12ac  [ 7605C0E1D01A08F3ECD743F38B834A44, 83A77E31004BCF83443F30EFC290E04BB1A2F332E8DFD614AB6E25B527C92299 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys

14:54:59.0981 0x12ac  srvnet - ok

14:55:00.0001 0x12ac  [ 03D50B37234967433A5EA5BA72BC0B62, 7B61D6A4BF5D446A9473D058BC207FB6DA7C2FEFB8083F3B66CAC8907DBD8327 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll

14:55:00.0031 0x12ac  SSDPSRV - ok

14:55:00.0057 0x12ac  [ 6F1A32E7B7B30F004D9A20AFADB14944, AA9D874A14CA4779E76701D2B02F4CCA92CD5917435FB4CACA149FCB2D1D4C4C ] SstpSvc         C:\Windows\system32\sstpsvc.dll

14:55:00.0072 0x12ac  SstpSvc - ok

14:55:00.0131 0x12ac  [ 5DE7D67E49B88F5F07F3E53C4B92A352, 6930A598C35646646ED0E91633797EFE139AE6CDD0012335BD1340754A22F997 ] stisvc          C:\Windows\System32\wiaservc.dll

14:55:00.0167 0x12ac  stisvc - ok

14:55:00.0185 0x12ac  [ 7BA58ECF0C0A9A69D44B3DCA62BECF56, 23CC47FA2D6E183D69DB0D3D3F3081A830D94A58FBC0A9A295B3A56C51E9486A ] swenum          C:\Windows\system32\DRIVERS\swenum.sys

14:55:00.0193 0x12ac  swenum - ok

14:55:00.0244 0x12ac  [ F21FD248040681CCA1FB6C9A03AAA93D, 32FE765841A183A1F2C1ACACBBF8CDB11E7D4D4396F9C9F6CFF1B51C9B620ED3 ] swprv           C:\Windows\System32\swprv.dll

14:55:00.0279 0x12ac  swprv - ok

14:55:00.0296 0x12ac  [ 192AA3AC01DF071B541094F251DEED10, 5C6EB56D1C39F3717EB754A1B37C8A618BA4F2107F64048E985D71FA04D1AD05 ] Symc8xx         C:\Windows\system32\drivers\symc8xx.sys

14:55:00.0302 0x12ac  Symc8xx - ok

14:55:00.0350 0x12ac  [ 8C8EB8C76736EBAF3B13B633B2E64125, A6C4845DDED81CCF4947612A4D6E42035136025BCD80812D2FF396927CAADEC5 ] Sym_hi          C:\Windows\system32\drivers\sym_hi.sys

14:55:00.0357 0x12ac  Sym_hi - ok

14:55:00.0374 0x12ac  [ 8072AF52B5FD103BBBA387A1E49F62CB, D336A7D008D145619E79043EBF5D0D455086BA1FEF89612BC2EA11CC363D82B0 ] Sym_u3          C:\Windows\system32\drivers\sym_u3.sys

14:55:00.0381 0x12ac  Sym_u3 - ok

14:55:00.0495 0x12ac  [ 9A51B04E9886AA4EE90093586B0BA88D, 1666C29FBFA34174B506678C920636519051D03456A6DDCCD6FF708CAE5D9962 ] SysMain         C:\Windows\system32\sysmain.dll

14:55:00.0559 0x12ac  SysMain - ok

14:55:00.0602 0x12ac  [ 2DCA225EAE15F42C0933E998EE0231C3, 67C7913E41854DFA3043426B7D59AA1FBBB9DE01A6E6904E40A696A7C61A5F98 ] TabletInputService C:\Windows\System32\TabSvc.dll

14:55:00.0616 0x12ac  TabletInputService - ok

14:55:00.0701 0x12ac  [ D7673E4B38CE21EE54C59EEEB65E2483, 330D0AD13F5008D8569CE8E5EA0BBD69F54F59FEB54FD903FA18D2849CEC6AF0 ] TapiSrv         C:\Windows\System32\tapisrv.dll

14:55:00.0726 0x12ac  TapiSrv - ok

14:55:00.0747 0x12ac  [ CB05822CD9CC6C688168E113C603DBE7, 9DB8945BDC702BB13E9DE477F2D3CCA4CE0E9E8CE9B54CE1A25375F2A2C93F0E ] TBS             C:\Windows\System32\tbssvc.dll

14:55:00.0788 0x12ac  TBS - ok

14:55:00.0865 0x12ac  [ 6A10AFCE0B38371064BE41C1FBFD3C6B, 20FDB47DCF54B857B09C2753B49737F5B2D2D9ED7942C4DB0BFDEDC7811D02E1 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys

14:55:00.0927 0x12ac  Tcpip - ok

14:55:00.0961 0x12ac  [ 6A10AFCE0B38371064BE41C1FBFD3C6B, 20FDB47DCF54B857B09C2753B49737F5B2D2D9ED7942C4DB0BFDEDC7811D02E1 ] Tcpip6          C:\Windows\system32\DRIVERS\tcpip.sys

14:55:00.0997 0x12ac  Tcpip6 - ok

14:55:01.0041 0x12ac  [ 9BF343F4C878D6AD6922B2C5A4FEFE0D, D3A8E2BC16A998D28228E7931624AF52C991E1D7959B8679F0867BA8241935D4 ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys

14:55:01.0068 0x12ac  tcpipreg - ok

14:55:01.0082 0x12ac  [ 5DCF5E267BE67A1AE926F2DF77FBCC56, E00C0A03AEE579B51B39930A72F39F4EFFE7CDA37187B0AE90F4E001AD15473B ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys

14:55:01.0105 0x12ac  TDPIPE - ok

14:55:01.0136 0x12ac  [ 389C63E32B3CEFED425B61ED92D3F021, E4718E290678F00995E754AE66F1027D227BFAB9E1A1D2AC8E4EAD27DC50CB17 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys

14:55:01.0162 0x12ac  TDTCP - ok

14:55:01.0206 0x12ac  [ 76B06EB8A01FC8624D699E7045303E54, EC30F244B48A35622ED3EE91792F6A1517C5A50770FAB3945E7A945EB7AF28A8 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys

14:55:01.0230 0x12ac  tdx - ok

14:55:01.0275 0x12ac  [ 3CAD38910468EAB9A6479E2F01DB43C7, 9D18C71EDF39743A0A592BC0873909D2B75B5B177B2672A865D1EEC0BFD2F61C ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys

14:55:01.0285 0x12ac  TermDD - ok

14:55:01.0331 0x12ac  [ BB95DA09BEF6E7A131BFF3BA5032090D, BAF6997F8D944F85F0553957677866C7F22E72AA434BA45FFFB6CC41041070DC ] TermService     C:\Windows\System32\termsrv.dll

14:55:01.0366 0x12ac  TermService - ok

14:55:01.0400 0x12ac  [ C7230FBEE14437716701C15BE02C27B8, 8221DE73D77CF71C2857D78829E807D015D9CB8BDEE4BAFD6950BF0C718CC774 ] Themes          C:\Windows\system32\shsvcs.dll

14:55:01.0418 0x12ac  Themes - ok

14:55:01.0433 0x12ac  [ 1076FFCFFAAE8385FD62DFCB25AC4708, 8C5C106FCB018E019DEBA8E1A6AA170CD7A93293F27994F724EBC486238DA0AA ] THREADORDER     C:\Windows\system32\mmcss.dll

14:55:01.0457 0x12ac  THREADORDER - ok

14:55:01.0543 0x12ac  [ EC74E77D0EB004BD3A809B5F8FB8C2CE, 1E4BBC58D0E35D79C764CF1BA73602C5E29A5A2393D40332801D533E445C6667 ] TrkWks          C:\Windows\System32\trkwks.dll

14:55:01.0588 0x12ac  TrkWks - ok

14:55:01.0655 0x12ac  [ 97D9D6A04E3AD9B6C626B9931DB78DBA, 8E42133ED5EE5EEC414A8B11C1035385C6141E445EA9677F947D20768F25A877 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe

14:55:01.0671 0x12ac  TrustedInstaller - ok

14:55:01.0715 0x12ac  [ DCF0F056A2E4F52287264F5AB29CF206, D9F770BD65AE4320A8C130DEA1D093AA4E37FCA573BBE6A59D6D045452EA711D ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys

14:55:01.0737 0x12ac  tssecsrv - ok

14:55:01.0754 0x12ac  [ CAECC0120AC49E3D2F758B9169872D38, 80DB15ADF5F4FF78D0C7D5081B6C0E8F1E5125872B60D23C19DA8E62C9DAC9A8 ] tunmp           C:\Windows\system32\DRIVERS\tunmp.sys

14:55:01.0766 0x12ac  tunmp - ok

14:55:01.0809 0x12ac  [ 300DB877AC094FEAB0BE7688C3454A9C, 3B36AA191FBE25B1A61150EAA2BDF8BA286DC4C052F6E98B0ED8202135553D8C ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys

14:55:01.0819 0x12ac  tunnel - ok

14:55:01.0850 0x12ac  [ 7D33C4DB2CE363C8518D2DFCF533941F, C6A539AD31B0BD9F895E0A537783AA75D5760C8590D83BA832D59A9B090CA0E9 ] uagp35          C:\Windows\system32\drivers\uagp35.sys

14:55:01.0858 0x12ac  uagp35 - ok

14:55:01.0998 0x12ac  [ D9728AF68C4C7693CB100B8441CBDEC6, A2CEE1EE4EF17106349F4E6967F504354801934179FBB3F10B9A4E3C30BC28CE ] udfs            C:\Windows\system32\DRIVERS\udfs.sys

14:55:02.0019 0x12ac  udfs - ok

14:55:02.0050 0x12ac  [ ECEF404F62863755951E09C802C94AD5, 5D92062B3E371F196774EBFE840C78501E55A244DB2A49703C7AC0141C7DABF1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe

14:55:02.0083 0x12ac  UI0Detect - ok

14:55:02.0102 0x12ac  [ B0ACFDC9E4AF279E9116C03E014B2B27, 455D30859E381361FF6EE8B01EDC22A2E66CD5EC22CA9F314E88009DB77A8BAF ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys

14:55:02.0112 0x12ac  uliagpkx - ok

14:55:02.0134 0x12ac  [ 9224BB254F591DE4CA8D572A5F0D635C, C5E7B24587AC5A28ECA63300307AD95B8A846833340126AE378840A40E53C056 ] uliahci         C:\Windows\system32\drivers\uliahci.sys

14:55:02.0149 0x12ac  uliahci - ok

14:55:02.0164 0x12ac  [ 8514D0E5CD0534467C5FC61BE94A569F, A6EFB967044F88335469DB3351587E31CEC659BB6A7D8ED45C68329232C31BB9 ] UlSata          C:\Windows\system32\drivers\ulsata.sys

14:55:02.0173 0x12ac  UlSata - ok

14:55:02.0188 0x12ac  [ 38C3C6E62B157A6BC46594FADA45C62B, 44F87DC955CB4E35E0EB4C8B4E931472B33D97FE000C22370A06AD5EDCEFD0BA ] ulsata2         C:\Windows\system32\drivers\ulsata2.sys

14:55:02.0198 0x12ac  ulsata2 - ok

14:55:02.0210 0x12ac  [ 32CFF9F809AE9AED85464492BF3E32D2, 91AAA47AEF17F373276B01AC8FA823592A0C854541A7A9A3B78F2350DB964EBC ] umbus           C:\Windows\system32\DRIVERS\umbus.sys

14:55:02.0233 0x12ac  umbus - ok

14:55:02.0256 0x12ac  [ 68308183F4AE0BE7BF8ECD07CB297999, 4444233CA3C42BEE50ED47553D4AE5A7C12D8F288D2FA4B2DAE1D9B9FEC1A72D ] upnphost        C:\Windows\System32\upnphost.dll

14:55:02.0284 0x12ac  upnphost - ok

14:55:02.0297 0x12ac  [ 8BD3AE150D97BA4E633C6C5C51B41AE1, 6B529901B0311197CB67B9D9A2DED7D79B820F66E75BEF0FA912EFE50F941217 ] usbccgp         C:\Windows\system32\drivers\usbccgp.sys

14:55:02.0336 0x12ac  usbccgp - ok

14:55:02.0364 0x12ac  [ E9476E6C486E76BC4898074768FB7131, D14B8F69A511DC1F990A9C123C18689AFE59659BA8130D248D8D03E9BD2143B6 ] usbcir          C:\Windows\system32\drivers\usbcir.sys

14:55:02.0402 0x12ac  usbcir - ok

14:55:02.0434 0x12ac  [ 79E96C23A97CE7B8F14D310DA2DB0C9B, EB441D3B93965CD927E0C181031AD1082F59F9885BF35CABFDCA08C6C76B0DAF ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys

14:55:02.0450 0x12ac  usbehci - ok

14:55:02.0558 0x12ac  [ 4673BBCB006AF60E7ABDDBE7A130BA42, 0B7DED0D887A3530AA5497FDBCB69389486FB9E2B6FAE3163E33713256D575BA ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys

14:55:02.0579 0x12ac  usbhub - ok

14:55:02.0623 0x12ac  [ CE697FEE0D479290D89BEC80DFE793B7, D10F6BAD0467672CCE4F97C7F2E13437CE89AC754C895EAE05F0726B6DC617B1 ] usbohci         C:\Windows\system32\DRIVERS\usbohci.sys

14:55:02.0654 0x12ac  usbohci - ok

14:55:02.0684 0x12ac  [ B51E52ACF758BE00EF3A58EA452FE360, 79E629EC5DE8AB7F31B0EE9AE94C71E8F703FED5C09A816228726974F7790C85 ] usbprint        C:\Windows\system32\drivers\usbprint.sys

14:55:02.0728 0x12ac  usbprint - ok

14:55:02.0741 0x12ac  [ BE3DA31C191BC222D9AD503C5224F2AD, 201FB0FDBF423342202686DC0D8A3221B7798AE04C04A649D3441C257C733CE8 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS

14:55:02.0758 0x12ac  USBSTOR - ok

14:55:02.0785 0x12ac  [ 814D653EFC4D48BE3B04A307ECEFF56F, D73D62F51AEFE2F8F2B938B20107C246F2AC2F62ED49112DBD092A5D2E4024B3 ] usbuhci         C:\Windows\system32\DRIVERS\usbuhci.sys

14:55:02.0801 0x12ac  usbuhci - ok

14:55:02.0848 0x12ac  [ 1509E705F3AC1D474C92454A5C2DD81F, 7F525921A3513224F8B093A16E19B4235B300349A14B0B86EE11B7473BA53337 ] UxSms           C:\Windows\System32\uxsms.dll

14:55:02.0865 0x12ac  UxSms - ok

14:55:02.0959 0x12ac  [ CD88D1B7776DC17A119049742EC07EB4, 6B68B9EDB8C6BCB2644F1F004D5743E928509D12107D996F390A24A72E0AA528 ] vds             C:\Windows\System32\vds.exe

14:55:03.0023 0x12ac  vds - ok

14:55:03.0048 0x12ac  [ 87B06E1F30B749A114F74622D013F8D4, 06C06EF87F7DC668D23B50AA5F419F62474ACF90E325E167491BF290286D6594 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys

14:55:03.0070 0x12ac  vga - ok

14:55:03.0107 0x12ac  [ 2E93AC0A1D8C79D019DB6C51F036636C, 8B6F3B4EE90691A22788915AD0F99D8EE617750430A34E7CEB9AB4FB4E581755 ] VgaSave         C:\Windows\System32\drivers\vga.sys

14:55:03.0129 0x12ac  VgaSave - ok

14:55:03.0173 0x12ac  [ 5D7159DEF58A800D5781BA3A879627BC, 499A8E51FDE61AE0D7C1812D1E5B331211A36BD095A4992C629B93DE6D80F4E6 ] viaagp          C:\Windows\system32\drivers\viaagp.sys

14:55:03.0181 0x12ac  viaagp - ok

14:55:03.0232 0x12ac  [ C4F3A691B5BAD343E6249BD8C2D45DEE, 19DE07AD6CD51036FA8A6B8EE82F34D7F5264FF3A12CBE6E52BD036D0303E319 ] ViaC7           C:\Windows\system32\drivers\viac7.sys

14:55:03.0255 0x12ac  ViaC7 - ok

14:55:03.0292 0x12ac  [ AADF5587A4063F52C2C3FED7887426FC, 0A74791A236FDAFCD045CFB79A159245B94F7C2033E0CD830C1B76F0F994E06D ] viaide          C:\Windows\system32\drivers\viaide.sys

14:55:03.0299 0x12ac  viaide - ok

14:55:03.0312 0x12ac  [ 69503668AC66C77C6CD7AF86FBDF8C43, 2CE407674A58313737073F02B9A617460BBA84B36C3A16D98AE5ED45279F5006 ] volmgr          C:\Windows\system32\drivers\volmgr.sys

14:55:03.0320 0x12ac  volmgr - ok

14:55:03.0471 0x12ac  [ 23E41B834759917BFD6B9A0D625D0C28, 9F60992805262F936E8DA33610FDF60A191ECAFC08BBF657C8F9A21833C8EFC5 ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys

14:55:03.0523 0x12ac  volmgrx - ok

14:55:03.0554 0x12ac  [ 147281C01FCB1DF9252DE2A10D5E7093, DF5DCF6FD472F21863DC10B62F7647420B9686607857D08286B618D585E50219 ] volsnap         C:\Windows\system32\drivers\volsnap.sys

14:55:03.0647 0x12ac  volsnap - ok

14:55:03.0681 0x12ac  [ 587253E09325E6BF226B299774B728A9, C9F46197819C2A095456393C518A9B00B59ECDC54F464D038AA7F8DCCDB93CCF ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys

14:55:03.0693 0x12ac  vsmraid - ok

14:55:03.0870 0x12ac  [ DB3D19F850C6EB32BDCB9BC0836ACDDB, D81FF1CDA87A2FE83EFD5B3FE01EFF940952F8BAEE70BEA3B2F6EF30E2121704 ] VSS             C:\Windows\system32\vssvc.exe

14:55:03.0936 0x12ac  VSS - ok

14:55:03.0976 0x12ac  [ 96EA68B9EB310A69C25EBB0282B2B9DE, C76D3427F8A2953CB4D96BBA1523679CBE1BBF7FA821A35D2FBEB3E67AC6A10B ] W32Time         C:\Windows\system32\w32time.dll

14:55:04.0008 0x12ac  W32Time - ok

14:55:04.0079 0x12ac  [ 48DFEE8F1AF7C8235D4E626F0C4FE031, A41D05BC0DA3C476C32E0A4DAF015DF7BADF28A03CE236D5596885FF1772F148 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys

14:55:04.0127 0x12ac  WacomPen - ok

14:55:04.0148 0x12ac  [ 55201897378CCA7AF8B5EFD874374A26, 350ADDCEFAA33E301027CFEA8DDE703F6FBD6E53624598CB2E7B671B9E48F7CC ] Wanarp          C:\Windows\system32\DRIVERS\wanarp.sys

14:55:04.0170 0x12ac  Wanarp - ok

14:55:04.0190 0x12ac  [ 55201897378CCA7AF8B5EFD874374A26, 350ADDCEFAA33E301027CFEA8DDE703F6FBD6E53624598CB2E7B671B9E48F7CC ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys

14:55:04.0212 0x12ac  Wanarpv6 - ok

14:55:04.0304 0x12ac  [ A3CD60FD826381B49F03832590E069AF, 213C5DB5E5D828264286FD7548527566D6160CCA780BC6853B7B28CECF329674 ] wcncsvc         C:\Windows\System32\wcncsvc.dll

14:55:04.0332 0x12ac  wcncsvc - ok

14:55:04.0381 0x12ac  [ 11BCB7AFCDD7AADACB5746F544D3A9C7, 0370E20FD12ED713F94E5CD76F068F7A7A5E7F42416DD2A8A41249020DA7DA31 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll

14:55:04.0399 0x12ac  WcsPlugInService - ok

14:55:04.0413 0x12ac  [ 78FE9542363F297B18C027B2D7E7C07F, 6BC3ED2A48EF41E1EE597FD58271DB12256EC013518663331CD0FBCB3FC415EE ] Wd              C:\Windows\system32\drivers\wd.sys

14:55:04.0422 0x12ac  Wd - ok

14:55:04.0447 0x12ac  [ B6F0A7AD6D4BD325FBCD8BAC96CD8D96, 6A6EFFDB538DE1E201058A00F3E056F1256E92EED943FBFBCE28E54BE751E33D ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys

14:55:04.0480 0x12ac  Wdf01000 - ok

14:55:04.0501 0x12ac  [ ABFC76B48BB6C96E3338D8943C5D93B5, B5B22D445724D58641A53276063A4AA2A98F07B93865C86E94661EB31BD63511 ] WdiServiceHost  C:\Windows\system32\wdi.dll

14:55:04.0526 0x12ac  WdiServiceHost - ok

14:55:04.0532 0x12ac  [ ABFC76B48BB6C96E3338D8943C5D93B5, B5B22D445724D58641A53276063A4AA2A98F07B93865C86E94661EB31BD63511 ] WdiSystemHost   C:\Windows\system32\wdi.dll

14:55:04.0556 0x12ac  WdiSystemHost - ok

14:55:04.0691 0x12ac  [ 04C37D8107320312FBAE09926103D5E2, 1C6726A9871CBACB240AFA93E57781515F01758D43693DDA395EA683D97234F0 ] WebClient       C:\Windows\System32\webclnt.dll

14:55:04.0751 0x12ac  WebClient - ok

14:55:04.0797 0x12ac  [ 905214925A88311FCE52F66153DE7610, 5D18C6E835A2EA4108C93D9E6AA976142119860C8FC8ECB2DFA961A241B6E61C ] Wecsvc          C:\Windows\system32\wecsvc.dll

14:55:04.0863 0x12ac  Wecsvc - ok

14:55:04.0880 0x12ac  [ 670FF720071ED741206D69BD995EA453, 4B96F5E3545F69AE9EBC75DC4AB27B87306D656EE526AE39E7EC7E2B6F83F7FD ] wercplsupport   C:\Windows\System32\wercplsupport.dll

14:55:04.0909 0x12ac  wercplsupport - ok

14:55:04.0965 0x12ac  [ 32B88481D3B326DA6DEB07B1D03481E7, 821FBAF147E525ED15EB9391B16A96C6D5464841258B11F277EFB57A3BD50E37 ] WerSvc          C:\Windows\System32\WerSvc.dll

14:55:04.0996 0x12ac  WerSvc - ok

14:55:05.0164 0x12ac  [ 72CC6A8CA7891031D6380DB5025C773C, 33D5021C3A2FE8E9F6E2C22F4777E1D82A6B3998EB857B618A3C8838D3C8B03E ] winachsf        C:\Windows\system32\DRIVERS\HSX_CNXT.sys

14:55:05.0216 0x12ac  winachsf - ok

14:55:05.0264 0x12ac  [ 4575AA12561C5648483403541D0D7F2B, 2DBB7904285F16E879E1662C4CC4DFAA420D5EB24DDFC4BAC0B7616F5F44649A ] WinDefend       C:\Program Files\Windows Defender\mpsvc.dll

14:55:05.0281 0x12ac  WinDefend - ok

14:55:05.0291 0x12ac  WinHttpAutoProxySvc - ok

14:55:05.0352 0x12ac  [ 6B2A1D0E80110E3D04E6863C6E62FD8A, EE8BC7C378993EFE90273764C83119EBF331768CD7B24DE949233C74A51306C2 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll

14:55:05.0394 0x12ac  Winmgmt - ok

14:55:05.0465 0x12ac  [ 01874D4689C212460FBABF0ECD7CB7F7, 8FC46BAD704A1E057DC4A8DC7374AAB93A96CC4A46E06FF9C2E06A6D62820469 ] WinRM           C:\Windows\system32\WsmSvc.dll

14:55:05.0539 0x12ac  WinRM - ok

14:55:05.0671 0x12ac  [ C008405E4FEEB069E30DA1D823910234, C392A7B5FEACB7D11A3A231C1AD65D533984E6E7429ECD3BFBF90A27E8DEB157 ] Wlansvc         C:\Windows\System32\wlansvc.dll

14:55:05.0712 0x12ac  Wlansvc - ok

14:55:05.0753 0x12ac  [ 2E7255D172DF0B8283CDFB7B433B864E, 60C786CF0EA4A29B309B9457F0496D5A0AF1F093FC2C5D88078865814B7DBBA3 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys

14:55:05.0792 0x12ac  WmiAcpi - ok

14:55:05.0834 0x12ac  [ 43BE3875207DCB62A85C8C49970B66CC, 27169F2E8A30807794407DA8F80611E4287F940AAE2A1F00F547901872FB9703 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe

14:55:05.0880 0x12ac  wmiApSrv - ok

14:55:06.0043 0x12ac  [ 3978704576A121A9204F8CC49A301A9B, 936CC13B90A183613BDA4081556C96D48CA415B5F65D61E18CB5F2E51EEBE59F ] WMPNetworkSvc   C:\Program Files\Windows Media Player\wmpnetwk.exe

14:55:06.0126 0x12ac  WMPNetworkSvc - ok

14:55:06.0156 0x12ac  [ CFC5A04558F5070CEE3E3A7809F3FF52, 45899E04000E21C4E009BE8B6149F199A5B2E0512C657A525770BF9DBFED7D2B ] WPCSvc          C:\Windows\System32\wpcsvc.dll

14:55:06.0194 0x12ac  WPCSvc - ok

14:55:06.0251 0x12ac  [ 396D406292B0CD26E3504FFE82784702, 5F9015BB515AC13D4DFE8F4B532352CF2C5B61DEFD3D0D61BCD82C781D36E7AF ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll

14:55:06.0284 0x12ac  WPDBusEnum - ok

14:55:06.0303 0x12ac  [ E3A3CB253C0EC2494D4A61F5E43A389C, 10BA8B102E31B961819E524FCA5FA817B588EC77FB26B4E176D0A5CFF11EDF79 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys

14:55:06.0332 0x12ac  ws2ifsl - ok

14:55:06.0434 0x12ac  [ 1CA6C40261DDC0425987980D0CD2AAAB, 727C1E3A170316641F832A8D197EDA6D6EE1206E4ED7B741E5A4017B7F2F7B88 ] wscsvc          C:\Windows\system32\wscsvc.dll

14:55:06.0474 0x12ac  wscsvc - ok

14:55:06.0480 0x12ac  WSearch - ok

14:55:06.0774 0x12ac  [ 01E1499A7A4FCA7CDE102B60976544C1, E0DFC8F229A3B9235658DC47237715E41FC71DC6F7C0EBB4FF0C632FCA89FB91 ] wuauserv        C:\Windows\system32\wuaueng.dll

14:55:06.0886 0x12ac  wuauserv - ok

14:55:06.0910 0x12ac  [ AC13CB789D93412106B0FB6C7EB2BCB6, 8F5B0BD0CBBAB182A400F8994D4727BC0C978D749B6429A2D41B412AE97428B6 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys

14:55:06.0933 0x12ac  WUDFRd - ok

14:55:06.0979 0x12ac  [ 575A4190D989F64732119E4114045A4F, 373C344B106AFDB1E6125A21DFE28CA6CFC77FA87FE904656A4F209DB2ED69C7 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll

14:55:07.0010 0x12ac  wudfsvc - ok

14:55:07.0032 0x12ac  [ DAB33CFA9DD24251AAA389FF36B64D4B, 1C5D7C3D6C3552BDD52EB7E76031746D7DAAF64CA2432CC23329DA72BE7252D0 ] XAudio          C:\Windows\system32\DRIVERS\xaudio.sys

14:55:07.0041 0x12ac  XAudio - ok

14:55:07.0073 0x12ac  [ CD5F291A1161F15896D1A4D63DAFF5DF, 4F30DC454F255249431FCD14DE17858A79A088A4084F2CEDD0CF25382D427285 ] XAudioService   C:\Windows\system32\DRIVERS\xaudio.exe

14:55:07.0094 0x12ac  XAudioService - ok

14:55:07.0104 0x12ac  ================ Scan global ===============================

14:55:07.0132 0x12ac  [ F31EEBC1A1C81FD04005489CC3DCDFE7, 098C35ACFCCE1686C5A6DB6057001CBF8B06A863A0802CB2E9D793F4795F8CEE ] C:\Windows\system32\basesrv.dll

14:55:07.0171 0x12ac  [ 5DF01708D214FDC0075AD197F1889557, 7E9ABB5C1F873AD3CE4FDB66CA6E2278F966F238CB4E78994D6A2014B10BCAC4 ] C:\Windows\system32\winsrv.dll

14:55:07.0214 0x12ac  [ 5DF01708D214FDC0075AD197F1889557, 7E9ABB5C1F873AD3CE4FDB66CA6E2278F966F238CB4E78994D6A2014B10BCAC4 ] C:\Windows\system32\winsrv.dll

14:55:07.0265 0x12ac  [ D4E6D91C1349B7BFB3599A6ADA56851B, 8748091BF27F05D28D45688E04DD9229A4B2E159209A64F457703F66A8CECE4D ] C:\Windows\system32\services.exe

14:55:07.0273 0x12ac  [ Global ] - ok

14:55:07.0274 0x12ac  ================ Scan MBR ==================================

14:55:07.0299 0x12ac  [ 03BA8F890B47C0BE359A4D5A636D214D ] \Device\Harddisk0\DR0

14:55:07.0839 0x12ac  \Device\Harddisk0\DR0 - ok

14:55:07.0839 0x12ac  ================ Scan VBR ==================================

14:55:07.0873 0x12ac  [ E30625107FE6AB8675B0F338CA3BEFB1 ] \Device\Harddisk0\DR0\Partition1

14:55:07.0900 0x12ac  \Device\Harddisk0\DR0\Partition1 - ok

14:55:07.0929 0x12ac  [ 60F98F500C7AE6BD3EC70C13646926C3 ] \Device\Harddisk0\DR0\Partition2

14:55:07.0955 0x12ac  \Device\Harddisk0\DR0\Partition2 - ok

14:55:07.0973 0x12ac  AV detected via SS2: Microsoft Security Essentials, C:\Program Files\Microsoft Security Client\msseces.exe ( 4.4.304.0 ), 0x60000 ( disabled : updated )

14:55:07.0979 0x12ac  Win FW state via NFP2: enabled

14:55:07.0980 0x12ac  ============================================================

14:55:07.0980 0x12ac  Scan finished

14:55:07.0980 0x12ac  ============================================================

14:55:07.0995 0x12a4  Detected object count: 1

14:55:07.0995 0x12a4  Actual detected object count: 1

14:55:20.0285 0x12a4  HP Health Check Service ( UnsignedFile.Multi.Generic ) - skipped by user

14:55:20.0285 0x12a4  HP Health Check Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 
Link to post
Share on other sites

can result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-12-2013 01

Ran by zeeland (administrator) on DONNATANAKA-PC on 29-12-2013 18:30:41

Running from C:\Users\zeeland\Desktop

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: English(US)

Internet Explorer Version 7

Boot Mode: Normal

 

==================== Processes (Whitelisted) ===================

 

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(Microsoft Corporation) C:\WINDOWS\System32\SLsvc.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe

() C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe

(Conexant Systems, Inc.) C:\WINDOWS\System32\drivers\XAudio.exe

(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

(Realtek Semiconductor) C:\WINDOWS\RtHDVCpl.exe

(Hewlett-Packard Company) C:\hp\support\hpsysdrv.exe

(OsdMaestro) C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe

(Sun Microsystems, Inc.) C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe

() C:\Program Files\Snapfish Picture Mover\SnapfishMediaDetector.exe

(Toolwiz) C:\Program Files\ToolwizCareFree\ToolwizCares.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Toolwiz.com) C:\Program Files\ToolwizCareFree\ToolwizTools.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Hewlett-Packard Company) C:\hp\KBD\kbd.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\WINDOWS\System32\wuauclt.exe

 

==================== Registry (Whitelisted) ==================

 

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-20] (Microsoft Corporation)

HKLM\...\Run: [RtHDVCpl] - C:\WINDOWS\RtHDVCpl.exe [4874240 2008-01-15] (Realtek Semiconductor)

HKLM\...\Run: [hpsysdrv] - C:\hp\support\hpsysdrv.exe [65536 2007-04-18] (Hewlett-Packard Company)

HKLM\...\Run: [KBD] - C:\hp\KBD\KbdStub.exe [65536 2006-12-08] ()

HKLM\...\Run: [OsdMaestro] - C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [118784 2007-02-15] (OsdMaestro)

HKLM\...\Run: [NvSvc] - RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

HKLM\...\Run: [HP Health Check Scheduler] - [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe

HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [40048 2007-05-11] (Adobe Systems Incorporated)

HKLM\...\Run: [sunJavaUpdateSched] - C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe [132760 2007-04-07] (Sun Microsystems, Inc.)

HKLM\...\Run: [] - [x]

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)

HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKCU\...\Run: [ToolwizCareFree] - C:\Program Files\ToolwizCareFree\ToolwizCares.exe [5286160 2013-11-26] (Toolwiz)

HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Default\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)

HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Default User\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)

HKU\Donna Tanaka\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Donna Tanaka\...\Run: [HPAdvisor] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)

HKU\Guest\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Guest\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)
Link to post
Share on other sites

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 29-12-2013 01

Ran by zeeland (administrator) on DONNATANAKA-PC on 29-12-2013 18:37:34

Running from C:\Users\zeeland\Desktop

Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: English(US)

Internet Explorer Version 7

Boot Mode: Normal

 

==================== Processes (Whitelisted) ===================

 

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe

(Microsoft Corporation) C:\WINDOWS\System32\SLsvc.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe

() C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe

(Conexant Systems, Inc.) C:\WINDOWS\System32\drivers\XAudio.exe

(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

(Realtek Semiconductor) C:\WINDOWS\RtHDVCpl.exe

(Hewlett-Packard Company) C:\hp\support\hpsysdrv.exe

(OsdMaestro) C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe

(Sun Microsystems, Inc.) C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe

() C:\Program Files\Snapfish Picture Mover\SnapfishMediaDetector.exe

(Toolwiz) C:\Program Files\ToolwizCareFree\ToolwizCares.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Toolwiz.com) C:\Program Files\ToolwizCareFree\ToolwizTools.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Hewlett-Packard Company) C:\hp\KBD\kbd.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\WINDOWS\System32\wuauclt.exe

(Microsoft Corporation) C:\WINDOWS\System32\mcbuilder.exe

 

==================== Registry (Whitelisted) ==================

 

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-20] (Microsoft Corporation)

HKLM\...\Run: [RtHDVCpl] - C:\WINDOWS\RtHDVCpl.exe [4874240 2008-01-15] (Realtek Semiconductor)

HKLM\...\Run: [hpsysdrv] - C:\hp\support\hpsysdrv.exe [65536 2007-04-18] (Hewlett-Packard Company)

HKLM\...\Run: [KBD] - C:\hp\KBD\KbdStub.exe [65536 2006-12-08] ()

HKLM\...\Run: [OsdMaestro] - C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [118784 2007-02-15] (OsdMaestro)

HKLM\...\Run: [NvSvc] - RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

HKLM\...\Run: [HP Health Check Scheduler] - [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe

HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [40048 2007-05-11] (Adobe Systems Incorporated)

HKLM\...\Run: [sunJavaUpdateSched] - C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe [132760 2007-04-07] (Sun Microsystems, Inc.)

HKLM\...\Run: [] - [x]

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)

HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKCU\...\Run: [ToolwizCareFree] - C:\Program Files\ToolwizCareFree\ToolwizCares.exe [5286160 2013-11-26] (Toolwiz)

HKU\Default\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Default\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)

HKU\Default User\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Default User\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)

HKU\Donna Tanaka\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Donna Tanaka\...\Run: [HPAdvisor] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)

HKU\Guest\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\Guest\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [ 2008-01-18] (Hewlett-Packard)

 

==================== Internet (Whitelisted) ====================

 


HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=desktop

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm


HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=81&bd=Pavilion&pf=desktop

SearchScopes: HKLM - DefaultScope {508A4A7F-C702-4AE4-B67F-0343CD614D48} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvdt

SearchScopes: HKLM - {3A3F7E4B-FA3B-4DDF-9929-8994B6A30D65} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpd

SearchScopes: HKLM - {508A4A7F-C702-4AE4-B67F-0343CD614D48} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvdt

SearchScopes: HKCU - DefaultScope {508A4A7F-C702-4AE4-B67F-0343CD614D48} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvdt

SearchScopes: HKCU - {3A3F7E4B-FA3B-4DDF-9929-8994B6A30D65} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpd

SearchScopes: HKCU - {508A4A7F-C702-4AE4-B67F-0343CD614D48} URL = http://search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=hp-pvdt

SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://mysearch.avg.com/search?cid={A0D24AFC-3F5F-4975-8497-97DD9311F974}&mid=26c3c34aa62147d2b594d157ca21f3b8-cef38b5d3d50a79db66d7f07723e5e77d74d4ff3〈=en&ds=st011&pr=sa&d=2013-12-28 16:48:38&v=14.0.0.12&pid=safeguard&sg=&sap=dsp&q={searchTerms}

BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll (Sun Microsystems, Inc.)

Toolbar: HKLM - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\14.0.0.12\AVG SafeGuard toolbar_toolbar.dll ()




Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)

Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\14.0.1\ViProtocol.dll ()

Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76

 

Chrome: 

=======


CHR DefaultSearchKeyword: mysearch.avg.com

CHR DefaultSearchProvider: AVG Secure Search

CHR DefaultSearchURL: http://mysearch.avg.com/search?cid={A0D24AFC-3F5F-4975-8497-97DD9311F974}&mid=26c3c34aa62147d2b594d157ca21f3b8-cef38b5d3d50a79db66d7f07723e5e77d74d4ff3〈=en&ds=st011&pr=sa&d=2013-12-28 16:48:38&v=14.0.0.12&pid=safeguard&sg=&sap=dsp&q={searchTerms}

CHR DefaultNewTabURL: 

CHR Extension: (Google Docs) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0

CHR Extension: (Google Drive) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Google Wallet) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR Extension: (Bitdefender QuickScan) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.131_0

CHR Extension: (Gmail) - C:\Users\zeeland\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR HKLM\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG SafeGuard toolbar\ChromeExt\14.0.0.12\avg.crx

 

========================== Services (Whitelisted) =================

 

R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [65536 2007-09-19] (Hewlett-Packard)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)

S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)

R2 vToolbarUpdater14.0.1; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe [945480 2013-12-28] ()

 

==================== Drivers (Whitelisted) ====================

 

R1 BTOWSFF; C:\Windows\system32\Drivers\BTOWSFF.sys [27648 2013-11-26] (Toolwiz.com)

R0 BTOWSVF; C:\Windows\System32\Drivers\BTOWSVF.sys [45952 2013-11-26] (Toolwiz.com)

R0 KSafeDISK; C:\Windows\System32\Drivers\KSafeDISK.sys [48640 2013-11-26] (Toolwiz.com)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)

R1 SCDEmu; C:\Windows\System32\Drivers\SCDEmu.sys [114376 2013-10-23] (Power Software Ltd)

S0 22475791; system32\drivers\19334667.sys [x]

U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-20] (Microsoft Corporation)

S3 catchme; \??\C:\Users\zeeland\AppData\Local\Temp\catchme.sys [x]

S3 IpInIp; system32\DRIVERS\ipinip.sys [x]

S3 MFE_RR; \??\C:\Users\zeeland\AppData\Local\Temp\mfe_rr.sys [x]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

 

==================== NetSvcs (Whitelisted) ===================

 

 

==================== One Month Created Files and Folders ========

 

2013-12-29 18:33 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2013-12-29 18:33 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2013-12-29 18:33 - 2012-06-02 14:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2013-12-29 18:33 - 2012-06-02 14:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2013-12-29 18:33 - 2012-06-02 14:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2013-12-29 18:33 - 2012-06-02 14:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2013-12-29 18:28 - 2013-12-29 18:28 - 01064199 _____ (Farbar) C:\Users\zeeland\Desktop\FRST.exe

2013-12-29 18:26 - 2013-12-29 18:27 - 00112023 _____ C:\Users\zeeland\Downloads\FRST.txt

2013-12-29 18:05 - 2013-12-29 18:06 - 00002286 _____ C:\Windows\IE9_main.log

2013-12-28 19:28 - 2013-12-28 19:29 - 79388215 _____ C:\Users\zeeland\Downloads\create-book.zip

2013-12-28 19:28 - 2013-12-28 19:28 - 11326541 _____ C:\Users\zeeland\Downloads\install-mac.zip

2013-12-28 19:28 - 2013-12-28 19:28 - 02431989 _____ C:\Users\zeeland\Desktop\add-account.zip

2013-12-28 19:20 - 2013-12-28 19:20 - 00436558 _____ C:\Users\zeeland\Downloads\TheKindleProfitSystem.zip

2013-12-28 19:20 - 2013-10-29 16:35 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-28 19:20 - 2013-07-31 19:16 - 00638400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2013-12-28 19:20 - 2013-07-31 18:49 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2013-12-28 19:20 - 2013-06-15 05:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll

2013-12-28 19:20 - 2013-06-15 03:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2013-12-28 19:20 - 2012-05-11 07:57 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2013-12-28 19:20 - 2011-10-14 08:03 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll

2013-12-28 19:20 - 2011-10-14 08:00 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\mciseq.dll

2013-12-28 19:20 - 2011-07-29 08:01 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll

2013-12-28 19:20 - 2011-07-29 08:01 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax

2013-12-28 19:20 - 2011-07-29 08:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax

2013-12-28 19:20 - 2011-07-29 08:00 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax

2013-12-28 19:19 - 2013-07-20 02:44 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-12-28 19:12 - 2013-10-29 18:12 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll

2013-12-28 19:12 - 2013-10-29 17:43 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-28 19:12 - 2013-10-29 16:43 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-28 19:12 - 2013-10-23 18:17 - 06119424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-28 19:12 - 2013-10-23 18:17 - 03626496 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-28 19:12 - 2013-10-23 18:17 - 01177600 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-28 19:12 - 2013-10-23 18:17 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-28 19:12 - 2013-10-23 18:17 - 00671232 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll

2013-12-28 19:12 - 2013-10-23 18:17 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-28 19:12 - 2013-10-23 18:17 - 00480256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-28 19:12 - 2013-10-23 18:17 - 00380928 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-28 19:12 - 2013-10-23 18:17 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-28 19:12 - 2013-10-23 18:17 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-28 19:12 - 2013-10-23 18:17 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-28 19:12 - 2013-10-23 18:17 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-28 19:12 - 2013-10-23 18:17 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-28 19:12 - 2013-10-23 18:16 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\corpol.dll

2013-12-28 19:12 - 2013-10-23 16:55 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-28 19:12 - 2013-10-23 16:44 - 01383424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-28 19:12 - 2013-07-17 11:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-28 19:12 - 2013-07-10 01:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-12-28 19:12 - 2013-07-04 19:20 - 00914880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-12-28 19:12 - 2013-07-04 17:43 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2013-12-28 19:12 - 2012-11-02 02:18 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll

2013-12-28 19:12 - 2012-11-02 00:26 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe

2013-12-28 19:12 - 2012-09-25 08:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll

2013-12-28 19:12 - 2012-08-21 03:47 - 00224640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys

2013-12-28 19:12 - 2012-06-29 08:01 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll

2013-12-28 19:12 - 2012-06-08 09:47 - 11586048 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-12-28 19:12 - 2012-03-20 15:28 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys

2013-12-28 19:12 - 2011-11-18 09:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2013-12-28 19:12 - 2011-10-14 08:02 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll

2013-12-28 19:11 - 2013-10-21 23:19 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-28 19:11 - 2013-10-10 18:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2013-12-28 19:11 - 2013-10-10 18:08 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-28 19:11 - 2013-10-10 18:08 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-28 19:11 - 2013-10-10 18:08 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wshcon.dll

2013-12-28 19:11 - 2013-10-10 18:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2013-12-28 19:11 - 2013-10-10 16:39 - 00218228 _____ C:\Windows\system32\WFP.TMF

2013-12-28 19:11 - 2013-10-10 16:35 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-28 19:11 - 2013-10-10 16:35 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-28 19:11 - 2013-10-03 04:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-12-28 19:11 - 2013-10-03 04:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2013-12-28 19:11 - 2013-08-01 20:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-12-28 19:11 - 2013-07-15 20:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll

2013-12-28 19:11 - 2013-07-09 04:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-12-28 19:11 - 2013-07-07 20:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe

2013-12-28 19:11 - 2013-07-07 20:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-12-28 19:11 - 2013-06-28 18:07 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2013-12-28 19:11 - 2013-06-28 18:07 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2013-12-28 19:11 - 2013-06-28 18:06 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2013-12-28 19:11 - 2013-06-26 15:01 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-12-28 19:11 - 2013-06-26 15:01 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys

2013-12-28 19:11 - 2013-06-26 15:01 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll

2013-12-28 19:11 - 2013-06-03 20:16 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2013-12-28 19:11 - 2013-06-03 17:49 - 00293376 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2013-12-28 19:11 - 2013-05-31 20:06 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-12-28 19:11 - 2013-05-01 20:04 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2013-12-28 19:11 - 2013-05-01 20:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\printcom.dll

2013-12-28 19:11 - 2013-04-23 20:00 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll

2013-12-28 19:11 - 2013-04-23 17:46 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe

2013-12-28 19:11 - 2013-03-08 19:45 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-12-28 19:11 - 2013-03-08 17:28 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-12-28 19:11 - 2013-03-03 11:07 - 01082232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2013-12-28 19:11 - 2012-11-19 20:22 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2013-12-28 19:11 - 2012-11-07 19:48 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2013-12-28 19:11 - 2012-11-02 02:19 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2013-12-28 19:11 - 2012-09-28 08:11 - 00892928 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-12-28 19:11 - 2012-02-29 07:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll

2013-12-28 19:11 - 2012-02-29 05:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys

2013-12-28 19:11 - 2011-12-14 08:17 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll

2013-12-28 19:11 - 2011-11-16 08:23 - 00377344 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll

2013-12-28 19:11 - 2011-10-25 07:58 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2013-12-28 19:11 - 2011-08-25 08:15 - 00555520 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll

2013-12-28 19:11 - 2011-08-25 08:14 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2013-12-28 19:11 - 2011-08-25 08:14 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll

2013-12-28 19:11 - 2011-08-25 05:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\oleaccrc.dll

2013-12-28 19:11 - 2011-05-05 05:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2013-12-28 19:11 - 2011-05-05 05:54 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2013-12-28 19:10 - 2013-07-07 20:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-12-28 19:10 - 2013-07-07 20:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-12-28 19:10 - 2013-07-07 20:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-12-28 19:10 - 2013-07-03 20:21 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll

2013-12-28 19:10 - 2013-03-07 19:53 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-12-28 19:10 - 2013-03-07 19:52 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2013-12-28 19:10 - 2013-02-11 17:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys

2013-12-28 19:10 - 2012-06-05 08:47 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2013-12-28 19:10 - 2012-06-04 07:26 - 00440704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2013-12-28 19:10 - 2012-06-01 16:04 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2013-12-28 19:10 - 2012-05-01 06:03 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2013-12-28 19:10 - 2011-11-16 08:23 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2013-12-28 19:10 - 2011-11-16 08:21 - 01259008 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2013-12-28 19:10 - 2011-11-16 06:12 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2013-12-28 19:05 - 2012-01-09 07:54 - 00613376 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll

2013-12-28 17:17 - 2013-12-28 17:17 - 00000000 ____D C:\Users\zeeland\Documents\Ashampoo Burning Studio FREE

2013-12-28 16:56 - 2013-12-28 16:56 - 00000844 _____ C:\Users\Public\Desktop\Ashampoo Burning Studio FREE.lnk

2013-12-28 16:56 - 2013-12-28 16:56 - 00000000 ____D C:\Users\zeeland\Ashampoo Burning Studio FREE

2013-12-28 16:56 - 2013-12-28 16:56 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Ashampoo

2013-12-28 16:56 - 2013-12-28 16:56 - 00000000 ____D C:\Users\zeeland\AppData\Local\ashampoo

2013-12-28 16:56 - 2013-12-28 16:56 - 00000000 ____D C:\ProgramData\Ashampoo

2013-12-28 16:52 - 2013-12-28 16:52 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\PowerISO

2013-12-28 16:50 - 2013-12-28 16:50 - 30465288 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\zeeland\Downloads\ashampoo_burning_studio_free_1.12.0_sm.exe

2013-12-28 16:48 - 2013-12-28 16:48 - 00031576 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys

2013-12-28 16:48 - 2013-12-28 16:48 - 00000806 _____ C:\Users\Public\Desktop\PowerISO.lnk

2013-12-28 16:48 - 2013-12-28 16:48 - 00000000 ____D C:\Users\zeeland\AppData\Local\AVG SafeGuard toolbar

2013-12-28 16:48 - 2013-12-28 16:48 - 00000000 ____D C:\ProgramData\AVG SafeGuard toolbar

2013-12-28 16:48 - 2013-12-28 16:48 - 00000000 ____D C:\Program Files\PowerISO

2013-12-28 16:48 - 2013-12-28 16:48 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search

2013-12-28 16:48 - 2013-12-28 16:48 - 00000000 ____D C:\Program Files\AVG SafeGuard toolbar

2013-12-28 16:30 - 2013-12-28 16:30 - 00008224 _____ C:\Windows\system32\GDIPFONTCACHEV1.DAT

2013-12-28 14:59 - 2013-12-28 15:01 - 00000000 ___SD C:\ComboFix

2013-12-28 14:58 - 2013-12-28 14:58 - 00082513 _____ C:\Users\zeeland\Desktop\12 .28 tdds.txt

2013-12-28 14:46 - 2013-12-28 14:46 - 00000000 ____D C:\Windows\system32\vi-VN

2013-12-28 14:46 - 2013-12-28 14:46 - 00000000 ____D C:\Windows\system32\eu-ES

2013-12-28 14:46 - 2013-12-28 14:46 - 00000000 ____D C:\Windows\system32\ca-ES

2013-12-28 14:21 - 2013-12-28 14:21 - 00000000 ____D C:\Windows\system32\EventProviders

2013-12-25 19:27 - 2013-12-25 19:27 - 00071451 _____ C:\Users\zeeland\Desktop\FRST 25.txt

2013-12-25 19:18 - 2013-12-25 19:18 - 00860176 _____ (Microsoft Corporation) C:\Users\zeeland\Desktop\mssstool32 (1).exe

2013-12-25 19:13 - 2013-12-25 19:13 - 11125072 _____ (Microsoft Corporation) C:\Users\zeeland\Downloads\mseinstall (1).exe

2013-12-25 19:12 - 2013-12-25 19:13 - 92215576 _____ (Microsoft Corporation) C:\Users\zeeland\Desktop\msert.exe

2013-12-25 18:18 - 2011-06-25 22:45 - 00256000 _____ C:\Windows\PEV.exe

2013-12-25 18:18 - 2010-11-07 09:20 - 00208896 _____ C:\Windows\MBR.exe

2013-12-25 18:18 - 2009-04-19 20:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-12-25 18:18 - 2000-08-30 16:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-12-25 18:18 - 2000-08-30 16:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-12-25 18:18 - 2000-08-30 16:00 - 00098816 _____ C:\Windows\sed.exe

2013-12-25 18:18 - 2000-08-30 16:00 - 00080412 _____ C:\Windows\grep.exe

2013-12-25 18:18 - 2000-08-30 16:00 - 00068096 _____ C:\Windows\zip.exe

2013-12-25 17:08 - 2013-12-25 17:08 - 05158070 ____R (Swearware) C:\Users\zeeland\Downloads\ComboFix.exe

2013-12-25 17:08 - 2013-12-25 17:08 - 00000855 _____ C:\Users\zeeland\Desktop\ComboFix - Shortcut.lnk

2013-12-25 16:16 - 2013-12-28 14:54 - 00002198 _____ C:\Users\zeeland\Desktop\Rkill.txt

2013-12-25 16:10 - 2013-12-25 16:10 - 00000855 _____ C:\Users\zeeland\Desktop\iExplore - Shortcut.lnk

2013-12-25 16:00 - 2013-12-25 16:00 - 01937144 _____ (Bleeping Computer, LLC) C:\Users\zeeland\Downloads\iExplore.exe

2013-12-25 16:00 - 2013-12-25 16:00 - 01937144 _____ (Bleeping Computer, LLC) C:\Users\zeeland\Desktop\rkill.exe

2013-12-23 10:15 - 2013-12-23 10:15 - 04101441 _____ C:\Users\zeeland\Downloads\tdsskiller.zip

2013-12-23 10:08 - 2013-12-28 19:04 - 00000000 ____D C:\Windows\Minidump

2013-12-23 09:40 - 2013-12-23 10:15 - 00000000 ____D C:\Users\zeeland\Desktop\hp

2013-12-23 09:40 - 2013-12-19 13:29 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\zeeland\Desktop\tdsskiller.exe

2013-12-23 09:38 - 2013-12-23 09:39 - 00000000 ____D C:\Qoobox

2013-12-23 09:37 - 2013-12-23 09:37 - 00000000 ____D C:\Windows\erdnt

2013-12-22 11:15 - 2013-12-22 11:15 - 49940480 _____ C:\Program Files\GUT6049.tmp

2013-12-22 11:15 - 2013-12-22 11:15 - 00000000 ____D C:\Program Files\GUM6019.tmp

2013-12-16 18:23 - 2013-12-16 18:23 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\zeeland\Downloads\tdsskiller (1).exe

2013-12-11 12:06 - 2013-12-29 18:37 - 00011179 _____ C:\Users\zeeland\Desktop\FRST.txt

2013-12-11 12:06 - 2013-12-11 12:07 - 00017087 _____ C:\Users\zeeland\Desktop\Addition.txt

2013-12-11 12:06 - 2013-12-11 12:06 - 00000000 ____D C:\FRST

2013-12-04 19:06 - 2013-12-23 10:18 - 00075992 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-12-04 19:06 - 2013-12-23 10:18 - 00000000 ____D C:\Users\zeeland\Desktop\mbar

2013-12-04 19:06 - 2013-12-23 09:28 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-12-04 19:05 - 2013-12-04 19:05 - 12576792 _____ (Malwarebytes Corp.) C:\Users\zeeland\Downloads\mbar-1.07.0.1007 (1).exe

2013-12-04 19:05 - 2013-12-04 19:05 - 12576792 _____ (Malwarebytes Corp.) C:\Users\zeeland\Desktop\16m7bar.exe

2013-12-04 19:03 - 2013-12-04 19:03 - 00000000 ____D C:\Users\zeeland\Desktop\help

2013-12-04 18:16 - 2013-12-04 18:16 - 00000908 _____ C:\Users\Public\Desktop\may.lnk

2013-12-04 18:16 - 2013-12-04 18:16 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Malwarebytes

2013-12-04 18:16 - 2013-12-04 18:16 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-04 18:16 - 2013-12-04 18:16 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-12-04 18:16 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-12-04 18:15 - 2013-12-04 18:15 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\zeeland\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-04 18:08 - 2013-12-04 18:08 - 00001917 _____ C:\Users\zeeland\Desktop\aswMBR.txt

2013-12-04 18:04 - 2013-12-04 18:04 - 00000104 _____ C:\Users\zeeland\Documents\Recycle Bin - Shortcut.lnk

2013-12-01 15:29 - 2013-12-01 15:29 - 00002384 _____ C:\Users\zeeland\Desktop\attach.txt

2013-12-01 15:29 - 2013-12-01 15:28 - 00010298 _____ C:\Users\zeeland\Desktop\dds.txt

2013-12-01 15:28 - 2013-12-01 15:28 - 00081276 _____ C:\Users\zeeland\Downloads\2.xps

2013-12-01 12:53 - 2013-12-01 12:53 - 00688992 ____R (Swearware) C:\Users\zeeland\Desktop\dds.com

2013-12-01 12:53 - 2013-12-01 12:53 - 00688992 _____ (Swearware) C:\Users\zeeland\Downloads\dds.scr

2013-12-01 12:40 - 2009-04-10 22:33 - 00986600 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2013-12-01 12:40 - 2009-04-10 22:33 - 00926184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2013-12-01 12:40 - 2009-04-10 22:33 - 00614376 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll

2013-12-01 12:40 - 2009-04-10 22:32 - 00438744 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe

2013-12-01 12:40 - 2009-04-10 22:28 - 03174400 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 02167808 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 02134528 _____ (Microsoft Corporation) C:\Windows\system32\FunctionDiscoveryFolder.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 02012160 _____ (Microsoft Corporation) C:\Windows\system32\milcore.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01985024 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01856512 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01788416 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\apds.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01591296 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01589248 _____ (Microsoft Corporation) C:\Windows\system32\msjet40.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01576960 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01524736 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01480704 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01459200 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01381376 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01324032 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01209856 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01112064 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01086464 _____ (Microsoft Corporation) C:\Windows\system32\NetProjW.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01081344 _____ (Microsoft Corporation) C:\Windows\system32\SLCExt.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01078784 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01055232 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe

2013-12-01 12:40 - 2009-04-10 22:28 - 01053696 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 01017856 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00978432 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00968192 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz2.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00928768 _____ (Microsoft Corporation) C:\Windows\system32\scavenge.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00807424 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00747008 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2013-12-01 12:40 - 2009-04-10 22:28 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00670720 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00644608 _____ (Microsoft Corporation) C:\Windows\system32\p2psvc.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\msrepl40.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00618496 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2VDEC.DLL

2013-12-01 12:40 - 2009-04-10 22:28 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00582144 _____ (Microsoft Corporation) C:\Windows\system32\SLCommDlg.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\emdmgmt.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00550400 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00476672 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00472064 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00469504 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00466944 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\msxbde40.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00454144 _____ (Microsoft) C:\Windows\system32\IasMigPlugin.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\msexch40.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\msvcp60.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00398848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe

2013-12-01 12:40 - 2009-04-10 22:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\devmgr.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\mspbde40.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\SLUI.exe

2013-12-01 12:40 - 2009-04-10 22:28 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\msrd3x40.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL

2013-12-01 12:40 - 2009-04-10 22:28 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\P2PGraph.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\sdohlp.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\msrd2x40.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL

2013-12-01 12:40 - 2009-04-10 22:28 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\WscEapPr.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\msjtes40.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe

2013-12-01 12:40 - 2009-04-10 22:28 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\mstext40.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\es.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\msltus40.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\SLC.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\adsldpc.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\sperror.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\WcnNetsh.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\wevtutil.exe

2013-12-01 12:40 - 2009-04-10 22:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\spoolss.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\korwbrkr.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\nlhtml.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00117248 _____ C:\Windows\system32\EhStorAuthn.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayDriverLib.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\EhStorShell.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe

2013-12-01 12:40 - 2009-04-10 22:28 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\fdBth.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\msctfp.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\propdefs.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\slwmi.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\xmlfilter.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingProxy.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\EhStorPwdMgr.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\msscb.dll

2013-12-01 12:40 - 2009-04-10 22:28 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\fdBthProxy.dll

2013-12-01 12:40 - 2009-04-10 22:27 - 03408896 _____ (Microsoft Corporation) C:\Windows\system32\SLsvc.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 02926592 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 02092544 _____ (Microsoft Corporation) C:\Windows\system32\dfsr.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\Magnify.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl

2013-12-01 12:40 - 2009-04-10 22:27 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00518144 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\IasMigReader.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00441344 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\PresentationSettings.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingWizard.exe

2013-12-01 12:40 - 2009-04-10 22:27 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\compcln.exe

2013-12-01 12:40 - 2009-04-10 22:22 - 00883712 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME

2013-12-01 12:40 - 2009-04-10 21:03 - 12240896 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0007.dll
Link to post
Share on other sites

2013-12-01 12:40 - 2009-04-10 21:03 - 02644480 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0009.dll

2013-12-01 12:40 - 2009-04-10 20:48 - 00344698 _____ C:\Windows\system32\eaphost.tmf

2013-12-01 12:40 - 2009-04-10 20:43 - 00442788 _____ C:\Windows\system32\dot3.tmf

2013-12-01 12:40 - 2009-04-10 20:43 - 00392170 _____ C:\Windows\system32\onex.tmf

2013-12-01 12:40 - 2009-04-10 20:42 - 00561152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys

2013-12-01 12:40 - 2009-04-10 20:42 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2013-12-01 12:40 - 2009-04-10 20:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys

2013-12-01 12:40 - 2009-04-10 20:14 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2013-12-01 12:40 - 2009-04-10 18:52 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spsys.sys

2013-12-01 12:40 - 2009-04-10 17:59 - 00107612 _____ C:\Windows\system32\StructuredQuerySchema.bin

2013-12-01 12:40 - 2009-04-10 17:54 - 03662128 _____ C:\Windows\system32\locale.nls

2013-12-01 12:40 - 2009-03-06 17:11 - 00130008 _____ C:\Windows\system32\systemsf.ebd

2013-12-01 12:40 - 2009-02-19 16:20 - 00009239 _____ C:\Windows\system32\spcinstrumentation.man

2013-12-01 12:40 - 2009-02-18 10:39 - 00779136 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll

2013-12-01 12:40 - 2009-02-18 10:38 - 11967524 _____ C:\Windows\system32\korwbrkr.lex

2013-12-01 12:40 - 2009-02-18 10:38 - 00619864 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe

2013-12-01 12:40 - 2009-02-18 10:38 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll

2013-12-01 12:39 - 2009-04-10 22:33 - 00292840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00527848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00265688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00245736 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00190424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00180712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00161752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00149480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00141288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ecache.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00125928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00122344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Storport.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00109032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00099816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2013-12-01 12:39 - 2009-04-10 22:32 - 00053736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00053224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00050664 _____ (Microsoft Corporation) C:\Windows\system32\PSHED.DLL

2013-12-01 12:39 - 2009-04-10 22:32 - 00048104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00043496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciidex.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00035304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00027624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Dumpata.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00019944 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll

2013-12-01 12:39 - 2009-04-10 22:32 - 00019944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\atapi.sys

2013-12-01 12:39 - 2009-04-10 22:32 - 00017896 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll

2013-12-01 12:39 - 2009-04-10 22:32 - 00017384 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll

2013-12-01 12:39 - 2009-04-10 22:32 - 00014312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciide.sys

2013-12-01 12:39 - 2009-04-10 22:28 - 06103040 _____ (Microsoft Corporation) C:\Windows\system32\chtbrkr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 03072000 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 02515968 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 02225664 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 02205184 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 02153472 _____ (Microsoft Corporation) C:\Windows\system32\oobefldr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01823744 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01671680 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01671680 _____ (Microsoft Corporation) C:\Windows\system32\chsbrkr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01645568 _____ (Microsoft Corporation) C:\Windows\system32\connect.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01580544 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01575936 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL

2013-12-01 12:39 - 2009-04-10 22:28 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01541120 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01533440 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01502720 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01382912 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL

2013-12-01 12:39 - 2009-04-10 22:28 - 01342464 _____ (Microsoft Corporation) C:\Windows\system32\brcpl.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01224192 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01152000 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\wercon.exe

2013-12-01 12:39 - 2009-04-10 22:28 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01107968 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00996352 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00971264 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00876032 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe

2013-12-01 12:39 - 2009-04-10 22:28 - 00856064 _____ (Microsoft Corporation) C:\Windows\system32\mswdat10.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00852992 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00825856 _____ (Microsoft Corporation) C:\Windows\system32\rasdlg.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00777216 _____ (Microsoft Corporation) C:\Windows\system32\slcc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00759296 _____ (Microsoft Corporation) C:\Windows\system32\ipsecsnp.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00712704 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00657408 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL

2013-12-01 12:39 - 2009-04-10 22:28 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\Utilman.exe

2013-12-01 12:39 - 2009-04-10 22:28 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\CertEnrollUI.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\comuid.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00586752 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00560640 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\wiaaut.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00542720 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\pnpui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00532992 _____ (Microsoft Corporation) C:\Windows\system32\wpcao.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00516608 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00507904 _____ (Microsoft Corporation) C:\Windows\system32\vdsdyn.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\cmdial32.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00450560 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\dsound.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00425472 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00425472 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00399360 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rasplap.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00368640 _____ C:\Windows\system32\msjetoledb40.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00364032 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL

2013-12-01 12:39 - 2009-04-10 22:28 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00347648 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\RelMon.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe

2013-12-01 12:39 - 2009-04-10 22:28 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\thawbrkr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\modemui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\SnippingTool.exe

2013-12-01 12:39 - 2009-04-10 22:28 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\wow32.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\iassdo.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe

2013-12-01 12:39 - 2009-04-10 22:28 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00233984 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\wscntfy.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\mscandui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe

2013-12-01 12:39 - 2009-04-10 22:28 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\input.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe

2013-12-01 12:39 - 2009-04-10 22:28 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\offfilt.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00193024 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\SLLUA.exe

2013-12-01 12:39 - 2009-04-10 22:28 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\iassam.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\pnpsetup.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceTypes.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\rasmontr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\fundisc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe

2013-12-01 12:39 - 2009-04-10 22:28 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wpcsvc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\dsprop.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\extmgr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\softkbd.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\ntmarta.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\imapi.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\dmsynth.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\dmusic.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\ulib.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\powrprof.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\oleprn.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\SCardSvr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceClassExtension.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL

2013-12-01 12:39 - 2009-04-10 22:28 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\wshext.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\msctfui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mstlsapi.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00083456 _____ (Microsoft) C:\Windows\system32\SMBHelperClass.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\wlgpclnt.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\iassvcs.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\iashlpr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\PNPXAssoc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\mpr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\fdSSDP.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\fdWSD.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\msjter40.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\SLUINotify.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\iasads.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Storprop.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\feclient.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\mmci.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\l2nacp.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\iasdatastore.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\bthci.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msstrc.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\slcinst.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\bthserv.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\networkitemfactory.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\TSTheme.exe

2013-12-01 12:39 - 2009-04-10 22:28 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\rtffilt.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iaspolcy.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\perfdisk.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\bitsigd.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\whealogr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\msimtf.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\ifmon.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\wsepno.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\uxsms.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\hidserv.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\version.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\winrnr.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\NcdProp.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\MsCtfMonitor.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wscisvif.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\vdmdbg.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\midimap.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msisip.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\spcmsg.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mmcico.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\spwinsat.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll

2013-12-01 12:39 - 2009-04-10 22:28 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\CHxReadingStringIME.dll

2013-12-01 12:39 - 2009-04-10 22:27 - 01827840 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-01 12:39 - 2009-04-10 22:27 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl

2013-12-01 12:39 - 2009-04-10 22:27 - 01122304 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl

2013-12-01 12:39 - 2009-04-10 22:27 - 01102848 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl

2013-12-01 12:39 - 2009-04-10 22:27 - 00714240 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl

2013-12-01 12:39 - 2009-04-10 22:27 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr

2013-12-01 12:39 - 2009-04-10 22:27 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00636416 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00407040 _____ (Microsoft Corporation) C:\Windows\system32\dpapimig.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx

2013-12-01 12:39 - 2009-04-10 22:27 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp

2013-12-01 12:39 - 2009-04-10 22:27 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\services.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv

2013-12-01 12:39 - 2009-04-10 22:27 - 00241128 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll

2013-12-01 12:39 - 2009-04-10 22:27 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\certreq.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv

2013-12-01 12:39 - 2009-04-10 22:27 - 00130024 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll

2013-12-01 12:39 - 2009-04-10 22:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\gpresult.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax

2013-12-01 12:39 - 2009-04-10 22:27 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax

2013-12-01 12:39 - 2009-04-10 22:27 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\hdwwiz.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\newdev.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\conime.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\reg.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\cipher.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\cmmon32.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\csrstub.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cbsra.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\rekeywiz.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\bthudtask.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\PnPutil.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ipconfig.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEject.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\msacm32.drv

2013-12-01 12:39 - 2009-04-10 22:27 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\fc.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\rasdial.exe

2013-12-01 12:39 - 2009-04-10 22:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\gpupdate.exe

2013-12-01 12:39 - 2009-04-10 22:23 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime

2013-12-01 12:39 - 2009-04-10 22:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime

2013-12-01 12:39 - 2009-04-10 22:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime

2013-12-01 12:39 - 2009-04-10 22:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime

2013-12-01 12:39 - 2009-04-10 22:23 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime

2013-12-01 12:39 - 2009-04-10 22:22 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime

2013-12-01 12:39 - 2009-04-10 22:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime

2013-12-01 12:39 - 2009-04-10 22:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime

2013-12-01 12:39 - 2009-04-10 22:22 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\f3ahvoas.dll

2013-12-01 12:39 - 2009-04-10 21:42 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys

2013-12-01 12:39 - 2009-04-10 20:46 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys

2013-12-01 12:39 - 2009-04-10 20:46 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rassstp.sys

2013-12-01 12:39 - 2009-04-10 20:46 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\raspppoe.sys

2013-12-01 12:39 - 2009-04-10 20:46 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys

2013-12-01 12:39 - 2009-04-10 20:45 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys

2013-12-01 12:39 - 2009-04-10 20:45 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys

2013-12-01 12:39 - 2009-04-10 20:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2013-12-01 12:39 - 2009-04-10 20:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys

2013-12-01 12:39 - 2009-04-10 20:45 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\smb.sys

2013-12-01 12:39 - 2009-04-10 20:43 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys

2013-12-01 12:39 - 2009-04-10 20:43 - 00062208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ohci1394.sys

2013-12-01 12:39 - 2009-04-10 20:42 - 00052992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys

2013-12-01 12:39 - 2009-04-10 20:42 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys

2013-12-01 12:39 - 2009-04-10 20:42 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys

2013-12-01 12:39 - 2009-04-10 20:39 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys

2013-12-01 12:39 - 2009-04-10 20:39 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys

2013-12-01 12:39 - 2009-04-10 20:39 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\iscsilog.dll

2013-12-01 12:39 - 2009-04-10 20:38 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys

2013-12-01 12:39 - 2009-04-10 20:27 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll

2013-12-01 12:39 - 2009-04-10 20:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxg.sys

2013-12-01 12:39 - 2009-04-10 20:22 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\watchdog.sys

2013-12-01 12:39 - 2009-04-10 20:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys

2013-12-01 12:39 - 2009-04-10 20:13 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys

2013-12-01 12:39 - 2009-04-10 20:13 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys

2013-12-01 12:39 - 2009-04-10 20:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys

2013-12-01 12:39 - 2009-04-10 20:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2013-12-01 12:39 - 2009-04-10 17:59 - 00018904 _____ C:\Windows\system32\StructuredQuerySchemaTrivial.bin

2013-12-01 12:39 - 2009-03-29 20:42 - 00155456 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll

2013-12-01 12:39 - 2009-03-29 20:42 - 00080720 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll

2013-12-01 12:39 - 2009-02-19 16:20 - 00009212 _____ C:\Windows\system32\RacUR.xml

2013-12-01 12:39 - 2009-02-18 10:43 - 00000153 _____ C:\Windows\system32\RacUREx.xml

2013-12-01 12:39 - 2009-02-18 10:39 - 00092918 _____ C:\Windows\system32\slmgr.vbs

2013-12-01 12:39 - 2009-02-18 10:39 - 00035680 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2013-12-01 12:39 - 2009-02-18 10:38 - 00035168 _____ (Microsoft Corporation) C:\Windows\system32\infocardcpl.cpl

2013-12-01 12:39 - 2009-02-18 10:38 - 00009048 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll

2013-12-01 12:38 - 2009-04-10 22:28 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll

2013-12-01 12:38 - 2009-04-10 22:28 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll

2013-12-01 12:38 - 2009-04-10 22:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll

2013-12-01 12:38 - 2009-04-10 22:27 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe

2013-12-01 12:32 - 2013-12-01 12:32 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131201_123229.log

2013-12-01 12:13 - 2013-12-01 12:13 - 00072192 _____ C:\Users\Guest\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-01 12:13 - 2013-12-01 12:13 - 00000951 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-01 12:13 - 2013-12-01 12:13 - 00000946 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2013-12-01 12:13 - 2013-12-01 12:13 - 00000917 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk

2013-12-01 12:13 - 2013-12-01 12:13 - 00000020 ___SH C:\Users\Guest\ntuser.ini

2013-12-01 12:13 - 2013-12-01 12:13 - 00000000 ____D C:\Users\Guest\AppData\Roaming\Snapfish

2013-12-01 12:13 - 2013-12-01 12:13 - 00000000 ____D C:\Users\Guest\AppData\Local\VirtualStore

2013-12-01 12:13 - 2013-12-01 12:13 - 00000000 ____D C:\Users\Guest

2013-12-01 12:13 - 2008-02-27 13:58 - 00001034 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite Deluxe.lnk

2013-12-01 12:13 - 2008-01-20 18:42 - 00000000 ___RD C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-12-01 12:13 - 2008-01-20 18:42 - 00000000 ___RD C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-11-29 18:53 - 2013-11-29 18:53 - 17245644 _____ C:\Users\zeeland\Downloads\fiction.xps

2013-11-29 18:21 - 2013-11-29 18:21 - 00860176 _____ (Microsoft Corporation) C:\Users\zeeland\Downloads\mssstool32.exe

2013-11-29 18:17 - 2013-11-29 18:17 - 00511248 _____ (Microsoft Corporation) C:\Users\zeeland\Downloads\nis_full.exe

2013-11-29 15:00 - 2013-12-04 18:03 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-11-29 14:58 - 2013-12-25 15:27 - 00000000 ____D C:\Windows\system32\MRT

2013-11-29 14:57 - 2011-03-03 07:40 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\Apphlpdm.dll

2013-11-29 14:57 - 2011-03-03 05:35 - 04240384 _____ (Microsoft) C:\Windows\system32\GameUXLegacyGDFs.dll

2013-11-29 14:57 - 2010-08-26 08:34 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll

2013-11-29 14:56 - 2013-11-29 14:56 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131129_145639.log

2013-11-29 14:56 - 2013-11-29 14:56 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131129_145621.log

2013-11-29 14:56 - 2013-11-29 14:56 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131129_145618.log

2013-11-29 14:46 - 2013-11-29 14:46 - 00000680 _____ C:\Users\zeeland\AppData\Local\d3d9caps.dat

2013-11-29 13:42 - 2013-11-29 13:42 - 01441838 _____ C:\Users\zeeland\Downloads\Daily Deal Millionaires.zip

 

==================== One Month Modified Files and Folders =======

 

2013-12-29 18:37 - 2013-12-11 12:06 - 00011179 _____ C:\Users\zeeland\Desktop\FRST.txt

2013-12-29 18:34 - 2013-11-25 21:21 - 01989560 _____ C:\Windows\WindowsUpdate.log

2013-12-29 18:28 - 2013-12-29 18:28 - 01064199 _____ (Farbar) C:\Users\zeeland\Desktop\FRST.exe

2013-12-29 18:28 - 2006-11-02 02:33 - 00690960 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-29 18:27 - 2013-12-29 18:26 - 00112023 _____ C:\Users\zeeland\Downloads\FRST.txt

2013-12-29 18:24 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\Microsoft.NET

2013-12-29 18:23 - 2013-11-26 10:01 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-29 18:22 - 2006-11-02 05:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-29 18:22 - 2006-11-02 04:47 - 00286144 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-29 18:22 - 2006-11-02 04:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-29 18:22 - 2006-11-02 04:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-29 18:20 - 2008-02-27 13:41 - 00000000 ____D C:\Windows\system32\RTCOM

2013-12-29 18:20 - 2006-11-02 05:01 - 00025574 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-12-29 18:20 - 2006-11-02 04:37 - 00000000 ____D C:\Windows\system32\XPSViewer

2013-12-29 18:20 - 2006-11-02 04:37 - 00000000 ____D C:\Program Files\Windows Journal

2013-12-29 18:20 - 2006-11-02 03:18 - 00000000 ____D C:\Program Files\Common Files\System

2013-12-29 18:17 - 2013-11-26 10:01 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-29 18:06 - 2013-12-29 18:05 - 00002286 _____ C:\Windows\IE9_main.log

2013-12-29 18:02 - 2013-11-27 12:27 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\HpUpdate

2013-12-28 19:29 - 2013-12-28 19:28 - 79388215 _____ C:\Users\zeeland\Downloads\create-book.zip

2013-12-28 19:28 - 2013-12-28 19:28 - 11326541 _____ C:\Users\zeeland\Downloads\install-mac.zip

2013-12-28 19:28 - 2013-12-28 19:28 - 02431989 _____ C:\Users\zeeland\Desktop\add-account.zip

2013-12-28 19:20 - 2013-12-28 19:20 - 00436558 _____ C:\Users\zeeland\Downloads\TheKindleProfitSystem.zip

2013-12-28 19:04 - 2013-12-23 10:08 - 00000000 ____D C:\Windows\Minidump

2013-12-28 17:17 - 2013-12-28 17:17 - 00000000 ____D C:\Users\zeeland\Documents\Ashampoo Burning Studio FREE

2013-12-28 16:56 - 2013-12-28 16:56 - 00000844 _____ C:\Users\Public\Desktop\Ashampoo Burning Studio FREE.lnk

2013-12-28 16:56 - 2013-12-28 16:56 - 00000000 ____D C:\Users\zeeland\Ashampoo Burning Studio FREE

2013-12-28 16:56 - 2013-12-28 16:56 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Ashampoo

2013-12-28 16:56 - 2013-12-28 16:56 - 00000000 ____D C:\Users\zeeland\AppData\Local\ashampoo

2013-12-28 16:56 - 2013-12-28 16:56 - 00000000 ____D C:\ProgramData\Ashampoo

2013-12-28 16:56 - 2013-11-26 13:11 - 00000000 ____D C:\Users\zeeland

2013-12-28 16:52 - 2013-12-28 16:52 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\PowerISO

2013-12-28 16:50 - 2013-12-28 16:50 - 30465288 _____ (Ashampoo GmbH & Co. KG                                      ) C:\Users\zeeland\Downloads\ashampoo_burning_studio_free_1.12.0_sm.exe

2013-12-28 16:48 - 2013-12-28 16:48 - 00031576 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx86.sys

2013-12-28 16:48 - 2013-12-28 16:48 - 00000806 _____ C:\Users\Public\Desktop\PowerISO.lnk

2013-12-28 16:48 - 2013-12-28 16:48 - 00000000 ____D C:\Users\zeeland\AppData\Local\AVG SafeGuard toolbar

2013-12-28 16:48 - 2013-12-28 16:48 - 00000000 ____D C:\ProgramData\AVG SafeGuard toolbar

2013-12-28 16:48 - 2013-12-28 16:48 - 00000000 ____D C:\Program Files\PowerISO

2013-12-28 16:48 - 2013-12-28 16:48 - 00000000 ____D C:\Program Files\Common Files\AVG Secure Search

2013-12-28 16:48 - 2013-12-28 16:48 - 00000000 ____D C:\Program Files\AVG SafeGuard toolbar

2013-12-28 16:30 - 2013-12-28 16:30 - 00008224 _____ C:\Windows\system32\GDIPFONTCACHEV1.DAT

2013-12-28 16:30 - 2013-11-25 21:29 - 00008224 _____ C:\Users\Donna Tanaka\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-28 16:30 - 2013-11-25 21:29 - 00000951 _____ C:\Users\Donna Tanaka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-28 16:30 - 2013-11-25 21:29 - 00000917 _____ C:\Users\Donna Tanaka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk

2013-12-28 16:30 - 2008-02-27 13:51 - 00000000 ____D C:\ProgramData\NVIDIA

2013-12-28 15:42 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\rescache

2013-12-28 15:01 - 2013-12-28 14:59 - 00000000 ___SD C:\ComboFix

2013-12-28 14:58 - 2013-12-28 14:58 - 00082513 _____ C:\Users\zeeland\Desktop\12 .28 tdds.txt

2013-12-28 14:54 - 2013-12-25 16:16 - 00002198 _____ C:\Users\zeeland\Desktop\Rkill.txt

2013-12-28 14:52 - 2013-11-26 13:11 - 00000951 _____ C:\Users\zeeland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-28 14:52 - 2013-11-26 13:11 - 00000917 _____ C:\Users\zeeland\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk

2013-12-28 14:47 - 2006-11-02 04:37 - 00000000 ____D C:\Program Files\Windows Sidebar

2013-12-28 14:47 - 2006-11-02 04:37 - 00000000 ____D C:\Program Files\Windows Photo Gallery

2013-12-28 14:47 - 2006-11-02 04:37 - 00000000 ____D C:\Program Files\Windows Defender

2013-12-28 14:47 - 2006-11-02 04:37 - 00000000 ____D C:\Program Files\Windows Collaboration

2013-12-28 14:47 - 2006-11-02 04:37 - 00000000 ____D C:\Program Files\Windows Calendar

2013-12-28 14:47 - 2006-11-02 04:37 - 00000000 ____D C:\Program Files\Movie Maker

2013-12-28 14:46 - 2013-12-28 14:46 - 00000000 ____D C:\Windows\system32\vi-VN

2013-12-28 14:46 - 2013-12-28 14:46 - 00000000 ____D C:\Windows\system32\eu-ES

2013-12-28 14:46 - 2013-12-28 14:46 - 00000000 ____D C:\Windows\system32\ca-ES

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\zh-TW

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\zh-CN

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\uk-UA

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\tr-TR

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\th-TH

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\sv-SE

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\sr-Latn-CS

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\SLUI

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\sl-SI

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\sk-SK

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\ru-RU

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\ro-RO

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\pt-PT

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\pt-BR

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\pl-PL

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\nl-NL

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\nb-NO

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\lv-LV

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\lt-LT

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\ko-KR

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\ja-JP

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\it-IT

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\hu-HU

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\hr-HR

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\he-IL

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\fr-FR

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\fi-FI

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\et-EE

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\el-GR

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\de-DE

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\bg-BG

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\ar-SA

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\system32\AdvancedInstallers

2013-12-28 14:46 - 2006-11-02 03:18 - 00000000 ____D C:\Windows\IME

2013-12-28 14:21 - 2013-12-28 14:21 - 00000000 ____D C:\Windows\system32\EventProviders

2013-12-25 19:27 - 2013-12-25 19:27 - 00071451 _____ C:\Users\zeeland\Desktop\FRST 25.txt

2013-12-25 19:18 - 2013-12-25 19:18 - 00860176 _____ (Microsoft Corporation) C:\Users\zeeland\Desktop\mssstool32 (1).exe

2013-12-25 19:14 - 2013-11-26 13:53 - 00002198 _____ C:\Windows\epplauncher.mif

2013-12-25 19:13 - 2013-12-25 19:13 - 11125072 _____ (Microsoft Corporation) C:\Users\zeeland\Downloads\mseinstall (1).exe

2013-12-25 19:13 - 2013-12-25 19:12 - 92215576 _____ (Microsoft Corporation) C:\Users\zeeland\Desktop\msert.exe

2013-12-25 17:08 - 2013-12-25 17:08 - 05158070 ____R (Swearware) C:\Users\zeeland\Downloads\ComboFix.exe

2013-12-25 17:08 - 2013-12-25 17:08 - 00000855 _____ C:\Users\zeeland\Desktop\ComboFix - Shortcut.lnk

2013-12-25 16:10 - 2013-12-25 16:10 - 00000855 _____ C:\Users\zeeland\Desktop\iExplore - Shortcut.lnk

2013-12-25 16:05 - 2008-02-27 14:13 - 00000000 ____D C:\Windows\SMINST

2013-12-25 16:00 - 2013-12-25 16:00 - 01937144 _____ (Bleeping Computer, LLC) C:\Users\zeeland\Downloads\iExplore.exe

2013-12-25 16:00 - 2013-12-25 16:00 - 01937144 _____ (Bleeping Computer, LLC) C:\Users\zeeland\Desktop\rkill.exe

2013-12-25 15:27 - 2013-11-29 14:58 - 00000000 ____D C:\Windows\system32\MRT

2013-12-25 15:27 - 2006-11-02 02:24 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2013-12-23 10:18 - 2013-12-04 19:06 - 00075992 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2013-12-23 10:18 - 2013-12-04 19:06 - 00000000 ____D C:\Users\zeeland\Desktop\mbar

2013-12-23 10:18 - 2013-11-28 10:07 - 00000000 ____D C:\TDSSKiller_Quarantine

2013-12-23 10:15 - 2013-12-23 10:15 - 04101441 _____ C:\Users\zeeland\Downloads\tdsskiller.zip

2013-12-23 10:15 - 2013-12-23 09:40 - 00000000 ____D C:\Users\zeeland\Desktop\hp

2013-12-23 09:39 - 2013-12-23 09:38 - 00000000 ____D C:\Qoobox

2013-12-23 09:37 - 2013-12-23 09:37 - 00000000 ____D C:\Windows\erdnt

2013-12-23 09:28 - 2013-12-04 19:06 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2013-12-22 11:15 - 2013-12-22 11:15 - 49940480 _____ C:\Program Files\GUT6049.tmp

2013-12-22 11:15 - 2013-12-22 11:15 - 00000000 ____D C:\Program Files\GUM6019.tmp

2013-12-22 11:14 - 2006-11-02 04:37 - 00000000 ____D C:\Windows\DigitalLocker

2013-12-19 13:29 - 2013-12-23 09:40 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\zeeland\Desktop\tdsskiller.exe

2013-12-16 18:23 - 2013-12-16 18:23 - 04121952 _____ (Kaspersky Lab ZAO) C:\Users\zeeland\Downloads\tdsskiller (1).exe

2013-12-11 12:07 - 2013-12-11 12:06 - 00017087 _____ C:\Users\zeeland\Desktop\Addition.txt

2013-12-11 12:06 - 2013-12-11 12:06 - 00000000 ____D C:\FRST

2013-12-04 19:05 - 2013-12-04 19:05 - 12576792 _____ (Malwarebytes Corp.) C:\Users\zeeland\Downloads\mbar-1.07.0.1007 (1).exe

2013-12-04 19:05 - 2013-12-04 19:05 - 12576792 _____ (Malwarebytes Corp.) C:\Users\zeeland\Desktop\16m7bar.exe

2013-12-04 19:03 - 2013-12-04 19:03 - 00000000 ____D C:\Users\zeeland\Desktop\help

2013-12-04 18:16 - 2013-12-04 18:16 - 00000908 _____ C:\Users\Public\Desktop\may.lnk

2013-12-04 18:16 - 2013-12-04 18:16 - 00000000 ____D C:\Users\zeeland\AppData\Roaming\Malwarebytes

2013-12-04 18:16 - 2013-12-04 18:16 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-12-04 18:16 - 2013-12-04 18:16 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-12-04 18:15 - 2013-12-04 18:15 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\zeeland\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-04 18:08 - 2013-12-04 18:08 - 00001917 _____ C:\Users\zeeland\Desktop\aswMBR.txt

2013-12-04 18:08 - 2013-11-28 17:02 - 00000512 _____ C:\Users\zeeland\Desktop\MBR.dat

2013-12-04 18:04 - 2013-12-04 18:04 - 00000104 _____ C:\Users\zeeland\Documents\Recycle Bin - Shortcut.lnk

2013-12-04 18:03 - 2013-11-29 15:00 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-12-01 15:29 - 2013-12-01 15:29 - 00002384 _____ C:\Users\zeeland\Desktop\attach.txt

2013-12-01 15:28 - 2013-12-01 15:29 - 00010298 _____ C:\Users\zeeland\Desktop\dds.txt

2013-12-01 15:28 - 2013-12-01 15:28 - 00081276 _____ C:\Users\zeeland\Downloads\2.xps

2013-12-01 12:53 - 2013-12-01 12:53 - 00688992 ____R (Swearware) C:\Users\zeeland\Desktop\dds.com

2013-12-01 12:53 - 2013-12-01 12:53 - 00688992 _____ (Swearware) C:\Users\zeeland\Downloads\dds.scr

2013-12-01 12:32 - 2013-12-01 12:32 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131201_123229.log

2013-12-01 12:13 - 2013-12-01 12:13 - 00072192 _____ C:\Users\Guest\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-01 12:13 - 2013-12-01 12:13 - 00000951 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-01 12:13 - 2013-12-01 12:13 - 00000946 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2013-12-01 12:13 - 2013-12-01 12:13 - 00000917 _____ C:\Users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk

2013-12-01 12:13 - 2013-12-01 12:13 - 00000020 ___SH C:\Users\Guest\ntuser.ini

2013-12-01 12:13 - 2013-12-01 12:13 - 00000000 ____D C:\Users\Guest\AppData\Roaming\Snapfish

2013-12-01 12:13 - 2013-12-01 12:13 - 00000000 ____D C:\Users\Guest\AppData\Local\VirtualStore

2013-12-01 12:13 - 2013-12-01 12:13 - 00000000 ____D C:\Users\Guest

2013-11-29 18:53 - 2013-11-29 18:53 - 17245644 _____ C:\Users\zeeland\Downloads\fiction.xps

2013-11-29 18:21 - 2013-11-29 18:21 - 00860176 _____ (Microsoft Corporation) C:\Users\zeeland\Downloads\mssstool32.exe

2013-11-29 18:17 - 2013-11-29 18:17 - 00511248 _____ (Microsoft Corporation) C:\Users\zeeland\Downloads\nis_full.exe

2013-11-29 18:06 - 2013-11-26 13:24 - 00000000 ___HD C:\TOOLWIZ

2013-11-29 14:56 - 2013-11-29 14:56 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131129_145639.log

2013-11-29 14:56 - 2013-11-29 14:56 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131129_145621.log

2013-11-29 14:56 - 2013-11-29 14:56 - 00000310 _____ C:\Users\zeeland\Downloads\RootkitRemover_20131129_145618.log

2013-11-29 14:46 - 2013-11-29 14:46 - 00000680 _____ C:\Users\zeeland\AppData\Local\d3d9caps.dat

2013-11-29 13:42 - 2013-11-29 13:42 - 01441838 _____ C:\Users\zeeland\Downloads\Daily Deal Millionaires.zip

 

==================== Bamital & volsnap Check =================

 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

 

 

LastRegBack: 2013-12-29 18:27

 

==================== End Of Log ============================

Link to post
Share on other sites

Sorry about the double post I could not find how to delete it.

 

  Additional scan result of Farbar Recovery Scan Tool (x86) Version: 29-12-2013 01

Ran by zeeland at 2013-12-30 15:54:19
Running from C:\Users\zeeland\Desktop
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
AV: Microsoft Security Essentials (Disabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Disabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
 
==================== Installed Programs ======================
 
Adobe Flash Player ActiveX (Version: 9.0.45.0 - Adobe Systems Incorporated)
Adobe Reader 8.1.0 (Version: 8.1.0 - Adobe Systems Incorporated)
Ashampoo Burning Studio FREE v.1.12.0 (Version: 1.12.0 - Ashampoo GmbH & Co. KG)
AVG SafeGuard toolbar (Version: 14.0.0.12 - AVG Technologies)
Cards_Calendar_OrderGift_DoMorePlugout (Version: 1.00.0000 - Hewlett-Packard)
Compatibility Pack for the 2007 Office system (Version: 12.0.6612.1000 - Microsoft Corporation)
CyberLink DVD Suite Deluxe (Version: 5.5.1126 - CyberLink Corp.)
Enhanced Multimedia Keyboard Solution (Version:  - Hewlett-Packard)
Google Chrome (Version: 31.0.1650.57 - Google Inc.)
Google Update Helper (Version: 1.3.22.3 - Google Inc.)
Hardware Diagnostic Tools (Version: 5.1.4708.19 - PC-Doctor, Inc.)
Hewlett-Packard Active Check (Version: 1.1.11.0 - Hewlett-Packard)
Hewlett-Packard Asset Agent for Health Check (Version: 2.0.62.5 - HP)
HP Customer Experience Enhancements (Version: 5.6.0.2499 - Hewlett-Packard)
HP Customer Feedback (Version: 1.0.0 - Hewlett-Packard)
HP Demo (Version: 4.1.0 - Hewlett-Packard)
HP Easy Setup - Frontend (Version: 5.6.0.2542 - Hewlett-Packard)
HP On-Screen Cap/Num/Scroll Lock Indicator (Version:  - Hewlett-Packard)
HP Photosmart Essential 2.5 (Version: 1.02.0000 - Hewlett-Packard)
HP Photosmart Essential 2.5 (Version: 2.5 - HP)
HP Picasso Media Center Add-In (Version: 1.0.0 - HP)
HP Total Care Advisor (Version: 1.6.12.2542 - Hewlett-Packard)
HP Update (Version: 5.005.000.002 - Hewlett-Packard)
HPPhotoSmartPhotobookWebPack1 (Version: 1.00.0000 - Hewlett-Packard)
Java SE Runtime Environment 6 Update 1 (Version: 1.6.0.10 - Sun Microsystems, Inc.)
LabelPrint (Version: 2.2.2329 - CyberLink Corp.)
LightScribe System Software  1.10.23.1 (Version: 1.10.23.1 - http://www.lightscribe.com)
LightScribeTemplateLabeler (Version: 1.10.23.1 - LightScribe)
Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 3.5 SP1 (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation)
Microsoft Office Home and Student 60 day trial (Version:  - )
Microsoft Office PowerPoint Viewer 2007 (English) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation)
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Works (Version: 9.7.0621 - Microsoft Corporation)
muvee autoProducer 6.1 (Version: 6.10.050 - muvee Technologies)
My HP Games (Version: HPCMPQ1902 - WildTangent)
NVIDIA Drivers (Version:  - )
Power2Go (Version: 5.6.3610 - CyberLink Corp.)
PowerDirector (Version: 6.5.2420 - CyberLink Corp.)
PowerISO (Version: 5.8 - Power Software Ltd)
PSSWCORE (Version: 2.02.0000 - Hewlett-Packard)
Python 2.5 (Version: 2.5.150 - Martin v. Löwis)
Realtek High Definition Audio Driver (Version:  - )
Snapfish Picture Mover (Version: 1.9.0.16 - HP Snapfish)
Soft Data Fax Modem with SmartCP (Version: 7.74.00 - Conexant Systems)
Toolwiz Care (Version: 3.1.0.5100 - ToolWiz Care)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1 - Microsoft Corporation)
VideoToolkit01 (Version: 100.0.128.000 - Hewlett-Packard)
WeatherBug Gadget (Version: 1.0.0.6 - AWS Convergence Technologies)
Yahoo! Toolbar (Version:  - )
 
==================== Restore Points  =========================
 
26-11-2013 05:25:15 Scripted restore
26-11-2013 18:04:20 Windows Update
26-11-2013 21:24:42 Toolwiz Care(3.1.0.5100)
26-11-2013 21:46:25 Windows Update
26-11-2013 21:51:10 Windows Update
26-11-2013 22:00:06 Windows Update
27-11-2013 15:30:51 Windows Update
28-11-2013 17:32:32 Windows Update
28-11-2013 17:41:50 Windows Update
29-11-2013 21:44:14 Windows Update
29-11-2013 22:57:36 Windows Update
29-11-2013 23:18:11 Windows Update
30-11-2013 02:15:41 Windows Update
30-11-2013 02:18:22 Windows Update
05-12-2013 01:52:34 Windows Update
05-12-2013 03:15:28 Windows Update
22-12-2013 17:33:43 Scheduled Checkpoint
22-12-2013 17:53:18 Malwarebytes Anti-Rootkit Restore Point
25-12-2013 23:26:40 Windows Update
26-12-2013 00:08:01 Windows Update
26-12-2013 00:30:22 Windows Update
26-12-2013 03:06:34 Windows Update
26-12-2013 04:38:36 Microsoft Antimalware Checkpoint
28-12-2013 22:16:28 Microsoft Antimalware Checkpoint
28-12-2013 22:21:18 Windows Update
29-12-2013 00:45:28 Windows Update
30-12-2013 01:57:21 Microsoft Antimalware Checkpoint
30-12-2013 02:00:44 Windows Update
30-12-2013 02:32:49 Windows Update
30-12-2013 23:50:42 Windows Update
 
==================== Hosts content: ==========================
 
2006-11-02 02:23 - 2006-09-18 13:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost
 
==================== Scheduled Tasks (whitelisted) =============
 
Task: {14BE614B-BFEE-4332-84E9-5577E2FF7E50} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-26] (Google Inc.)
Task: {1C4F2298-1498-4526-8383-4F6CB5437ED0} - System32\Tasks\ExtendedServicePlan => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-12-17] ()
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {29FBD9BE-9C1F-4EB9-8151-B9F090620079} - System32\Tasks\PC-Doctor\Scheduled Maintenance => C:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe [2007-10-04] (PC-Doctor, Inc.)
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3FE2FF18-EFF6-4249-8E42-C61ABC6F52BB} - System32\Tasks\ServicePlan => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-12-17] ()
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\WINDOWS\System32\RacAgent.exe [2008-01-20] (Microsoft Corporation)
Task: {5B1F54CC-7F50-4B7D-9C33-86B5E427E135} - System32\Tasks\PC-Doctor\Scheduled Maintenance Swap => C:\Program Files\PC-Doctor 5 for Windows\task_swap.bat [2008-02-27] ()
Task: {73F25119-D79E-4FEA-9265-72C3292D2848} - System32\Tasks\IntenetServiceOffers => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-12-17] ()
Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => Rundll32.exe %windir%\system32\pla.dll,PlaConvertLogEntries
Task: {C2518D44-021D-40B8-B161-22170A16F23A} - System32\Tasks\ToolwizCareFree => C:\Program Files\ToolwizCareFree\ToolwizCares.exe [2013-11-26] (Toolwiz)
Task: {C2E45A30-41F1-45B2-9C0B-CB35B473A2A4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-26] (Google Inc.)
Task: {D58921BA-0D80-4346-99BA-796CEA5807DD} - System32\Tasks\RecoveryCD => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-12-17] ()
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\WINDOWS\System32\gatherWirelessInfo.vbs [2008-01-20] ()
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 
==================== Loaded Modules (whitelisted) =============
 
2013-11-26 10:02 - 2013-11-14 03:29 - 04055504 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.57\pdf.dll
2013-11-26 10:02 - 2013-11-14 03:29 - 00399312 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll
2013-11-26 10:02 - 2013-11-14 03:28 - 01619408 _____ () C:\Program Files\Google\Chrome\Application\31.0.1650.57\ffmpegsumo.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
 
==================== Safe Mode (whitelisted) ===================
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\11654386.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\19343800.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\22475791.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\26363123.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\65533879.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\77338195.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\11654386.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\19343800.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\22475791.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\26363123.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\65533879.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\77338195.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver"
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (12/30/2013 03:48:44 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/29/2013 06:22:35 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/29/2013 05:57:55 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/29/2013 05:57:20 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface.  hr = 0x80070005.
This is often caused by incorrect security settings in either the writer or requestor process.
 
 
Operation:
   Gathering Writer Data
 
Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {f79e8b95-1a32-4916-97e3-3fddcb104531}
 
Error: (12/28/2013 06:58:01 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/28/2013 04:31:37 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/28/2013 04:30:26 PM) (Source: ESENT) (User: )
Description: WinMail (2676) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed.
 
Error: (12/28/2013 03:28:09 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/28/2013 02:52:08 PM) (Source: ESENT) (User: )
Description: WinMail (2832) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed.
 
Error: (12/28/2013 02:50:18 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
System errors:
=============
Error: (12/30/2013 03:54:32 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: 0x80070643Windows Internet Explorer 9 for Windows Vista{CE545479-357C-49F8-8DB9-D1434AC00075}101
 
Error: (12/30/2013 03:48:45 PM) (Source: Service Control Manager) (User: )
Description: 22475791
 
Error: (12/30/2013 03:48:45 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
 
Error: (12/30/2013 03:48:09 PM) (Source: Microsoft Antimalware) (User: )
Description: %Trojan:DOS/Alureon.K60 has encountered a critical error when taking action on malware or other potentially unwanted software.
 
For more information please see the following:
%Trojan:DOS/Alureon.K603
 
Name: Trojan:DOS/Alureon.K
 
ID: 2147660148
 
Severity: %Trojan:DOS/Alureon.K600
 
Category: %Trojan:DOS/Alureon.K602
 
Path: 4.4.0304.02
 
Detection Origin: 4.4.0304.04
 
Detection Type: 4.4.0304.08
 
Detection Source: %Trojan:DOS/Alureon.K608
 
User: {43F5D604-D786-4B5B-A146-312CB8191FE4}9
 
Process Name: %Trojan:DOS/Alureon.K609
 
Action: {43F5D604-D786-4B5B-A146-312CB8191FE4}1
 
Action Status:  {43F5D604-D786-4B5B-A146-312CB8191FE4}8
 
Error Code: {43F5D604-D786-4B5B-A146-312CB8191FE4}3
 
Error description: {43F5D604-D786-4B5B-A146-312CB8191FE4}4
 
Signature Version: 2013-12-30T23:47:31.298Z1
 
Engine Version: 2013-12-30T23:47:31.298Z2
 
Error: (12/29/2013 06:34:01 PM) (Source: Microsoft-Windows-Servicing) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of changing update Aux from package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US(Language Pack) into Staged(Staged) state
 
Error: (12/29/2013 06:34:01 PM) (Source: Microsoft-Windows-Servicing) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of setting package WindowsUpdateClient-SelfUpdate-Aux-AuxComp-Package_en-US (Language Pack) into Install Requested(Install Requested) state
 
Error: (12/29/2013 06:34:01 PM) (Source: Microsoft-Windows-Servicing) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of changing update AuxResourcesLP from package WindowsUpdateClient-SelfUpdate-Aux-Package(Language Pack) into Staged(Staged) state
 
Error: (12/29/2013 06:34:01 PM) (Source: Microsoft-Windows-Servicing) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of setting package WindowsUpdateClient-SelfUpdate-Aux-Package (Language Pack) into Install Requested(Install Requested) state
 
Error: (12/29/2013 06:34:01 PM) (Source: Microsoft-Windows-Servicing) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of changing update WUClient-SelfUpdate-Aux-en-us-LP from package WUClient-SelfUpdate-Aux-Package-en-us-MiniLP(Feature Pack) into Staged(Staged) state
 
Error: (12/29/2013 06:34:01 PM) (Source: Microsoft-Windows-Servicing) (User: NT AUTHORITY)
Description: Windows Servicing failed to complete the process of setting package WUClient-SelfUpdate-Aux-Package-en-us-MiniLP (Feature Pack) into Install Requested(Install Requested) state
 
 
Microsoft Office Sessions:
=========================
Error: (12/30/2013 03:48:44 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/29/2013 06:22:35 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/29/2013 05:57:55 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/29/2013 05:57:20 PM) (Source: VSS)(User: )
Description: 0x80070005
 
Operation:
   Gathering Writer Data
 
Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer
   Writer Instance ID: {f79e8b95-1a32-4916-97e3-3fddcb104531}
 
Error: (12/28/2013 06:58:01 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/28/2013 04:31:37 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/28/2013 04:30:26 PM) (Source: ESENT)(User: )
Description: WinMail2676WindowsMail0:
 
Error: (12/28/2013 03:28:09 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
Error: (12/28/2013 02:52:08 PM) (Source: ESENT)(User: )
Description: WinMail2832WindowsMail0:
 
Error: (12/28/2013 02:50:18 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 
CodeIntegrity Errors:
===================================
  Date: 2013-12-30 15:54:09.571
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-30 15:54:09.454
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-30 15:54:09.345
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-30 15:54:09.233
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-30 15:54:09.107
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-30 15:54:08.987
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-30 15:54:08.870
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-30 15:54:08.730
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-29 18:38:33.867
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-12-29 18:38:33.762
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\WINDOWS\System32\drivers\mbamchameleon.sys because the set of per-page image hashes could not be found on the system.
 
 
==================== Memory info =========================== 
 
Percentage of memory in use: 43%
Total physical RAM: 3453.64 MB
Available physical RAM: 1954.07 MB
Total Pagefile: 7097.7 MB
Available Pagefile: 5667.79 MB
Total Virtual: 2047.88 MB
Available Virtual: 1940.84 MB
 
==================== Drives ================================
 
Drive c: (HP) (Fixed) (Total:456.43 GB) (Free:382.11 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (FACTORY_IMAGE) (Fixed) (Total:9.33 GB) (Free:1.27 GB) NTFS ==>[system with boot components (obtained from reading drive)]
Drive e: (WTLIB10E) (CDROM) (Total:0.39 GB) (Free:0 GB) CDFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 1549F232)
Partition 1: (Active) - (Size=456 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=2544 KB) - (Type=17) ATTENTION ===> Suspicious partition bootkit on partition 2
Partition 3: (Not Active) - (Size=9 GB) - (Type=07 NTFS)
 
==================== End Of Log ============================
Link to post
Share on other sites