Spyware / Malware / Virus Removal

System hangs and continual activity light flashing [Closed] [Solved]

44 min read

Looking for the outcome? Ask AI

jeffce

Post #16March 23, 2012, 11:47 AM UTC

OMG….I am so sorry. Hold on a second…

jeffce

Post #17March 23, 2012, 11:50 AM UTC

Sorry about that….I chose the wrong tool…
———–

Run OTL.exe

Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

:Services

:Files
C:\Users\kids\AppData\Local\{6E77CB9A-3E62-4D3F-8565-4CFE7D00778B}\BRAND_FILES\E4DC0C1B\DF788E19\SetupDataMngr_BearShare.exe	
C:\Users\kids\AppData\Local\{D7941DA4-2EF5-4E70-8A3D-3CF7634A336B}\BRAND_FILES\65038823\216567D5\SetupDataMngr_iMesh.exe
ipconfig /flushdns /c

:Commands
[purity]
[resethosts]
[emptytemp]
[start explorer]
[Reboot]

Then click the Run Fix button at the top
Let the program run unhindered, reboot when it is done
Then run a new scan and post a new OTL log ( don't check the boxes beside LOP Check or Purity this time )

————

Once that has been completed post the new OTL log and let me know how your system is running.

jeffce

Post #18March 25, 2012, 12:51 PM UTC

Hi, Do you still need help?

jeffce

Post #19March 26, 2012, 1:36 PM UTC

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html and start a new topic

jeffce

Post #20March 27, 2012, 11:39 AM UTC

Per OP's PM we are opening this topic to continue.

jeffce

Post #21March 29, 2012, 11:37 AM UTC

Hi, Are you still with me? Do you still need help?

kevin_czarnota

Post #22March 29, 2012, 12:58 PM UTC

Yes, sorry life got hectic, here is my OTL log
OTL logfile created on: 3/29/2012 7:54:06 AM - Run 8
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Users\kevin\Desktop\highjackthis
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 54.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 76.00% Paging File free
Paging file location(s): ?:\pagefile.sys

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 901.41 Gb Total Space | 304.46 Gb Free Space | 33.78% Space Free | Partition Type: NTFS
Drive D: | 30.00 Gb Total Space | 23.74 Gb Free Space | 79.15% Space Free | Partition Type: NTFS
Drive E: | 465.76 Gb Total Space | 16.89 Gb Free Space | 3.63% Space Free | Partition Type: NTFS
Drive F: | 232.88 Gb Total Space | 77.93 Gb Free Space | 33.46% Space Free | Partition Type: NTFS
Drive G: | 29.79 Gb Total Space | 14.58 Gb Free Space | 48.94% Space Free | Partition Type: FAT32
Drive H: | 262.72 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive M: | 1.84 Gb Total Space | 0.62 Gb Free Space | 33.82% Space Free | Partition Type: FAT

Computer Name: CZARNOTA-FAMILY | User Name: kevin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe (Carbonite, Inc.)
PRC - C:\Users\kevin\Desktop\highjackthis\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - c:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\Common Files\aol\acs\AOLacsd.exe (AOL LLC)

========== Modules (SafeList) ==========

MOD - C:\Users\kevin\Desktop\highjackthis\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrcInj.dll (Logitech Inc.)

========== Win32 Services (SafeList) ==========

SRV:64bit: - (!SASCORE) – C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (SUPERAntiSpyware.com)
SRV:64bit: - (ZuneWlanCfgSvc) – C:\Program Files\Zune\ZuneWlanCfgSvc.exe (Microsoft Corporation)
SRV:64bit: - (WMZuneComm) – C:\Program Files\Zune\WMZuneComm.exe (Microsoft Corporation)
SRV:64bit: - (ZuneNetworkSvc) – C:\Program Files\Zune\ZuneNss.exe (Microsoft Corporation)
SRV:64bit: - (ReflectService) – C:\Program Files\Macrium\Reflect\ReflectService.exe ()
SRV:64bit: - (LBTServ) – C:\Program Files\Common Files\logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV:64bit: - (NisSrv) – c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe (Microsoft Corporation)
SRV:64bit: - (MsMpSvc) – c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
SRV:64bit: - (CarboniteService) – C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe (Carbonite, Inc. (www.carbonite.com))
SRV:64bit: - (MSCamSvc) – C:\Program Files\Microsoft LifeCam\MSCamS64.exe (Microsoft Corporation)
SRV:64bit: - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV:64bit: - (AERTFilters) – C:\Windows\SysNative\AERTSr64.exe (Andrea Electronics Corporation)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (LVSrvLauncher) – C:\Program Files\Common Files\logishrd\SrvLnch\SrvLnch.exe (Logitech Inc.)
SRV:64bit: - (LVPrcS64) – c:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (MBAMService) – C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ShowAnalyzerMaster) – C:\Program Files (x86)\Dragon Global\ShowAnalyzerSuite\ShowAnalyzerMaster.exe (Dragon Global)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) – C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (SEIKO EPSON CORPORATION)
SRV - (AOL ACS) – C:\Program Files (x86)\Common Files\AOL\ACS\AOLAcsd.exe (AOL LLC)

========== Driver Services (SafeList) ==========

DRV:64bit: - (MBAMProtector) – C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (PSMounter) – C:\Windows\SysNative\drivers\psmounter.sys (Macrium Software)
DRV:64bit: - (motusbdevice) – C:\Windows\SysNative\DRIVERS\motusbdevice.sys (Motorola Inc)
DRV:64bit: - (LUsbFilt) – C:\Windows\SysNative\Drivers\LUsbFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) – C:\Windows\SysNative\DRIVERS\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LMouFilt) – C:\Windows\SysNative\DRIVERS\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (NisDrv) – C:\Windows\SysNative\DRIVERS\NisDrvWFP.sys (Microsoft Corporation)
DRV:64bit: - (motccgp) – C:\Windows\SysNative\DRIVERS\motccgp.sys (Motorola)
DRV:64bit: - (motmodem) – C:\Windows\SysNative\DRIVERS\motmodem.sys (Motorola)
DRV:64bit: - (MSHUSBVideo) – C:\Windows\SysNative\Drivers\nx6000.sys (Microsoft Corporation)
DRV:64bit: - (RTL8169) – C:\Windows\SysNative\DRIVERS\Rtlh64.sys (Realtek )
DRV:64bit: - (timounter) – C:\Windows\SysNative\DRIVERS\timntr.sys (Acronis)
DRV:64bit: - (tifsfilter) – C:\Windows\SysNative\DRIVERS\tifsfilt.sys (Acronis)
DRV:64bit: - (Motousbnet) – C:\Windows\SysNative\DRIVERS\Motousbnet.sys (Motorola)
DRV:64bit: - (ATIAVPCI) – C:\Windows\SysNative\DRIVERS\atinavrr.sys (ATI Technologies Inc.)
DRV:64bit: - (WpdUsb) – C:\Windows\SysNative\DRIVERS\wpdusb.sys (Microsoft Corporation)
DRV:64bit: - (AuviPCI) – C:\Windows\SysNative\DRIVERS\AuviPCI64.sys (Auvitek Corp.)
DRV:64bit: - (motccgpfl) – C:\Windows\SysNative\DRIVERS\motccgpfl.sys (Motorola)
DRV:64bit: - (BTCFilterService) – C:\Windows\SysNative\DRIVERS\motfilt.sys (Motorola Inc)
DRV:64bit: - (RimVSerPort) – C:\Windows\SysNative\DRIVERS\RimSerial_AMD64.sys (Research in Motion Ltd)
DRV:64bit: - (igfx) – C:\Windows\SysNative\DRIVERS\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iastor.sys (Intel Corporation)
DRV:64bit: - (SQTECH9052) – C:\Windows\SysNative\Drivers\Capt9052.sys (Service & Quality Technology.)
DRV:64bit: - (ROOTMODEM) – C:\Windows\SysNative\Drivers\RootMdm.sys (Microsoft Corporation)
DRV:64bit: - (e1express) Intel® – C:\Windows\SysNative\DRIVERS\e1e6032e.sys (Intel Corporation)
DRV:64bit: - (MotoSwitchService) – C:\Windows\SysNative\DRIVERS\motswch.sys (Motorola)
DRV:64bit: - (FlyUsb) – C:\Windows\SysNative\DRIVERS\FlyUsb.sys (LeapFrog)
DRV:64bit: - (SQTECH905C) – C:\Windows\SysNative\Drivers\Capt905c.sys (Service & Quality Technology.)
DRV:64bit: - (LVPr2Mon) – C:\Windows\SysNative\DRIVERS\LVPr2Mon.sys ()
DRV:64bit: - (LVMVDrv) – C:\Windows\SysNative\DRIVERS\LVMVDrv.sys (Logitech Inc.)
DRV:64bit: - (LVcKap64) – C:\Windows\SysNative\DRIVERS\LVcKap64.sys (Logitech Inc.)
DRV:64bit: - (LVUSBS64) – C:\Windows\SysNative\drivers\LVUSBS64.sys (Logitech Inc.)
DRV:64bit: - (CamDrL64) Logitech QuickCam Pro 3000(PID_08B0) – C:\Windows\SysNative\DRIVERS\CamDrL64.sys (Logitech Inc.)
DRV:64bit: - (wanatw) WAN Miniport (ATW) – C:\Windows\SysNative\DRIVERS\wanatw64.sys (America Online, Inc.)
DRV:64bit: - (R300) – C:\Windows\SysNative\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\Wbem\ntfs.mof ()

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.nickjr.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.techsupportalert.com/"
FF - prefs.js..extensions.enabledItems: {FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}:1.3.5
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.63
FF - prefs.js..extensions.enabledItems: SkipScreen@SkipScreen:0.5.21amo
FF - prefs.js..extensions.enabledItems: {AF445D67-154C-4c69-A17B-7F392BCC36A3}:1.0.16
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4
FF - prefs.js..extensions.enabledItems: {340c2bbc-ce74-4362-90b5-7c26312808ef}:1.7
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22

FF - HKLM\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/03/18 22:25:00 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/11/11 21:11:04 | 000,000,000 | —D | M]

[2009/01/16 15:36:21 | 000,000,000 | —D | M] (No name found) – C:\Users\kevin\AppData\Roaming\Mozilla\Extensions
[2012/03/29 07:33:09 | 000,000,000 | —D | M] (No name found) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions
[2011/08/28 17:33:30 | 000,000,000 | —D | M] (Garmin Communicator) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2011/03/09 20:15:19 | 000,000,000 | —D | M] (No name found) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}-trash
[2011/12/23 20:38:17 | 000,000,000 | —D | M] (DownloadHelper) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2009/09/14 13:04:52 | 000,000,000 | —D | M] (IE View Lite) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}
[2012/03/29 07:33:05 | 000,000,000 | —D | M] ("I Want This") – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\[removed]
[2011/08/16 19:19:29 | 000,000,000 | —D | M] (Разпознаване на устройство Logitech) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\[removed]
[2011/11/13 10:17:23 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
File not found (No name found) –
() (No name found) – C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TU1FLXA4.DEFAULT\EXTENSIONS\[removed]
() (No name found) – C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TU1FLXA4.DEFAULT\EXTENSIONS\[removed]
[2012/03/18 22:25:00 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll
[2011/06/19 10:00:07 | 000,466,944 | —- | M] (Catalina Marketing Corporation) – C:\Program Files (x86)\Mozilla Firefox\plugins\NPcol400.dll
[2011/06/19 10:00:07 | 000,466,944 | —- | M] (Catalina Marketing Corporation) – C:\Program Files (x86)\Mozilla Firefox\plugins\NPcol500.dll
[2011/07/03 12:41:05 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2011/11/13 10:17:14 | 000,002,252 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\bing.xml
[2011/11/13 10:17:13 | 000,002,040 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2012/03/29 07:41:39 | 000,000,098 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Carbonite Backup] C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe (Carbonite, Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - Startup: C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files (x86)\ERUNT\AUTOBACK.EXE ()
O4 - Startup: C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stoic Joker's T-Clock x64.lnk = C:\Program Files (x86)\Tclock\tclock-x64\Clock.exe (Stoic Joker's Network)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15:64bit: - ..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: aol.com ([objects] * is out of zone range - 5)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Reg Error: Key error.)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 10.1.0)
O16 - DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0_01)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files%20(x86)/Virtual%20Families/Images/stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8714912E-380D-11D5-B8AA-00D0B78F3D48} http://chat.yahoo.com/cab/yuplapp.cab (Yahoo! Webcam Upload Wrapper)
O16 - DPF: {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} http://support.dell.com/systemprofiler/DellSystemLite.CAB (DellSystemLite.Scanner)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files%20(x86)/Peggle/Images/armhelper.ocx (ArmHelper Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18:64bit: - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img36.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img36.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/10/08 04:52:42 | 000,000,054 | R— | M] () - H:\AUTORUN.INF – [ CDFS ]
O33 - MountPoints2\{e6f09cca-e1c7-11dd-9d6b-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{e6f09cca-e1c7-11dd-9d6b-806e6f6e6963}\Shell\AutoRun\command - "" = H:\Setup.exe – [2010/12/08 11:58:04 | 000,140,736 | R— | M] (Motorola, Inc.)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/03/26 21:59:48 | 000,000,000 | —D | C] – C:\Program Files (x86)\Daum
[2012/03/26 13:49:31 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Adobe AIR
[2012/03/22 13:55:09 | 000,000,000 | —D | C] – C:\Program Files (x86)\ESET
[2012/03/22 10:34:21 | 000,000,000 | —D | C] – C:\Users\kevin\AppData\Roaming\Malwarebytes
[2012/03/22 10:34:14 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/03/22 10:34:12 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2012/03/22 10:34:10 | 000,023,152 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2012/03/22 10:34:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/03/21 15:58:55 | 000,000,000 | —D | C] – C:\Users\kevin\AppData\Roaming\gtk-2.0
[2012/03/21 15:58:21 | 000,000,000 | —D | C] – C:\Users\kevin\.thumbnails
[2012/03/21 08:04:24 | 000,000,000 | —D | C] – C:\Users\kevin\.gimp-2.4
[2012/03/21 08:04:16 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP
[2012/03/21 08:03:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\GIMP-2.0
[2012/03/21 08:02:32 | 000,000,000 | —D | C] – C:\Users\kevin\AppData\Local\I Want This
[2012/03/21 06:27:31 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2012/03/21 06:27:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\ERUNT
[2012/03/13 20:20:28 | 001,555,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2012/03/13 20:20:28 | 001,068,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2012/03/13 20:20:27 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10warp.dll
[2012/03/13 20:20:27 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2012/03/13 20:20:27 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1core.dll
[2012/03/13 20:20:23 | 002,002,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2012/03/13 20:20:19 | 000,683,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll
[2012/03/13 20:20:18 | 000,834,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2012/03/13 20:20:14 | 000,196,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2012/03/13 20:20:14 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1.dll
[2012/03/13 20:14:32 | 000,708,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpencom.dll
[2012/03/13 20:14:20 | 000,613,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpencom.dll
[2002/03/11 04:06:30 | 001,822,520 | —- | C] (Microsoft Corporation) – C:\Program Files (x86)\instmsiw.exe
[2002/03/11 03:45:04 | 001,708,856 | —- | C] (Microsoft Corporation) – C:\Program Files (x86)\instmsia.exe

========== Files - Modified Within 30 Days ==========

[2012/03/29 07:53:42 | 000,000,406 | —- | M] () – C:\Windows\tasks\AutoSmartDefrag.job
[2012/03/29 07:51:07 | 000,763,778 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2012/03/29 07:51:07 | 000,645,624 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2012/03/29 07:51:07 | 000,120,716 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2012/03/29 07:44:56 | 000,003,744 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/03/29 07:44:56 | 000,003,744 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/03/29 07:44:50 | 000,000,510 | —- | M] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task a00d761c-5b80-4a6f-8e41-11857ef8a885.job
[2012/03/29 07:44:50 | 000,000,510 | —- | M] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 8b753a4f-7f81-44f0-93e1-52469fd63d88.job
[2012/03/29 07:44:48 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/03/22 10:34:15 | 000,000,950 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/03/21 16:01:15 | 000,001,449 | —- | M] () – C:\Users\kevin\.recently-used.xbel
[2012/03/21 08:04:18 | 000,000,930 | —- | M] () – C:\Users\kevin\Desktop\GIMP 2.lnk
[2012/03/21 06:27:53 | 000,000,945 | —- | M] () – C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2012/03/20 15:01:20 | 670,005,447 | —- | M] () – C:\Windows\MEMORY.DMP
[2012/03/15 10:05:30 | 000,002,643 | —- | M] () – C:\Users\kevin\Desktop\Microsoft Outlook 2010.lnk
[2012/03/15 09:30:11 | 000,016,262 | —- | M] () – C:\Users\kevin\Documents\2012TagRenewal.PDF
[2012/03/13 20:50:09 | 000,406,552 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2012/03/11 12:05:14 | 000,002,637 | —- | M] () – C:\Users\kevin\Desktop\Microsoft Word 2010.lnk
[2012/03/04 21:40:26 | 000,003,053 | —- | M] () – C:\Users\kevin\Desktop\Macrium Reflect.lnk

========== Files Created - No Company Name ==========

[2012/03/29 07:33:51 | 000,000,510 | —- | C] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task a00d761c-5b80-4a6f-8e41-11857ef8a885.job
[2012/03/29 07:33:50 | 000,000,510 | —- | C] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 8b753a4f-7f81-44f0-93e1-52469fd63d88.job
[2012/03/22 10:34:15 | 000,000,950 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/03/21 16:01:15 | 000,001,449 | —- | C] () – C:\Users\kevin\.recently-used.xbel
[2012/03/21 08:04:18 | 000,000,930 | —- | C] () – C:\Users\kevin\Desktop\GIMP 2.lnk
[2012/03/21 06:27:53 | 000,000,945 | —- | C] () – C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2012/03/20 15:01:20 | 670,005,447 | —- | C] () – C:\Windows\MEMORY.DMP
[2012/03/15 09:30:10 | 000,016,262 | —- | C] () – C:\Users\kevin\Documents\2012TagRenewal.PDF
[2012/03/04 21:40:26 | 000,003,053 | —- | C] () – C:\Users\kevin\Desktop\Macrium Reflect.lnk
[2011/08/11 15:23:35 | 000,000,185 | —- | C] () – C:\Windows\WININIT.INI
[2011/08/11 15:19:23 | 000,000,000 | —- | C] () – C:\Windows\setup32.INI
[2011/07/28 16:51:56 | 000,000,510 | —- | C] () – C:\Windows\WORDPAD.INI
[2011/04/11 17:06:44 | 000,000,732 | —- | C] () – C:\Users\kevin\AppData\Local\d3d9caps64.dat
[2011/02/20 15:30:36 | 000,000,056 | -H– | C] () – C:\Windows\SysWow64\ezsidmv.dat
[2010/12/28 20:51:23 | 000,057,344 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2010/12/24 10:01:53 | 000,758,692 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/11/20 13:39:48 | 000,000,173 | —- | C] () – C:\Users\kevin\AppData\Local\rahistory.xml
[2010/07/16 12:10:49 | 000,000,256 | —- | C] () – C:\Windows\SysWow64\pool.bin
[2010/04/11 10:39:24 | 000,000,004 | —- | C] () – C:\Windows\msoffice.ini
[2009/12/23 13:27:26 | 000,000,094 | —- | C] () – C:\Windows\family.ini
[2009/11/22 12:27:51 | 000,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2009/11/22 12:27:30 | 000,107,612 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchema.bin
[2009/11/22 12:27:11 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/01/26 17:17:15 | 000,000,154 | —- | C] () – C:\Windows\[removed]
[2009/01/26 12:23:01 | 000,000,376 | —- | C] () – C:\Windows\ODBC.INI
[2009/01/25 18:15:36 | 000,000,411 | —- | C] () – C:\Windows\COOK'N5.INI
[2009/01/17 11:17:05 | 000,210,944 | —- | C] () – C:\Windows\SysWow64\Msvcrt10.dll
[2009/01/17 10:50:20 | 000,073,220 | —- | C] () – C:\Windows\SysWow64\EPPICPrinterDB.dat
[2009/01/17 10:50:20 | 000,031,053 | —- | C] () – C:\Windows\SysWow64\EPPICPattern131.dat
[2009/01/17 10:50:20 | 000,029,114 | —- | C] () – C:\Windows\SysWow64\EPPICPattern1.dat
[2009/01/17 10:50:20 | 000,027,417 | —- | C] () – C:\Windows\SysWow64\EPPICPattern121.dat
[2009/01/17 10:50:20 | 000,021,021 | —- | C] () – C:\Windows\SysWow64\EPPICPattern3.dat
[2009/01/17 10:50:20 | 000,015,670 | —- | C] () – C:\Windows\SysWow64\EPPICPattern5.dat
[2009/01/17 10:50:20 | 000,013,280 | —- | C] () – C:\Windows\SysWow64\EPPICPattern2.dat
[2009/01/17 10:50:20 | 000,010,673 | —- | C] () – C:\Windows\SysWow64\EPPICPattern4.dat
[2009/01/17 10:50:20 | 000,004,943 | —- | C] () – C:\Windows\SysWow64\EPPICPattern6.dat
[2009/01/17 10:50:20 | 000,001,140 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2009/01/17 10:50:20 | 000,001,140 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2009/01/17 10:50:20 | 000,001,137 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2009/01/17 10:50:20 | 000,001,130 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2009/01/17 10:50:20 | 000,001,130 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2009/01/17 10:50:20 | 000,001,104 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2009/01/17 10:50:20 | 000,000,097 | —- | C] () – C:\Windows\SysWow64\PICSDK.ini
[2009/01/17 10:23:27 | 000,005,216 | —- | C] () – C:\Users\kevin\AppData\Local\d3d9caps.dat
[2009/01/16 16:30:17 | 000,000,335 | —- | C] () – C:\Windows\nsreg.dat
[2009/01/14 02:07:05 | 000,018,904 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2008/09/30 12:06:06 | 128,535,711 | —- | C] () – C:\Program Files (x86)\openofficeorg1.cab
[2008/09/30 11:29:36 | 000,000,217 | —- | C] () – C:\Program Files (x86)\setup.ini
[2008/09/30 11:29:32 | 009,772,544 | —- | C] () – C:\Program Files (x86)\openofficeorg30.msi
[2008/09/18 11:08:54 | 000,424,728 | —- | C] () – C:\Program Files (x86)\setup.exe
[2008/01/20 21:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini
[2006/11/02 10:37:05 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 07:37:14 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2006/11/02 07:24:17 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2006/11/02 07:18:17 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2006/11/02 04:47:54 | 000,043,131 | —- | C] () – C:\Windows\mib.bin

========== Alternate Data Streams ==========

@Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:7E927D7D
@Alternate Data Stream - 96 bytes -> C:\ProgramData\TEMP:E962FBDB
@Alternate Data Stream - 239 bytes -> C:\ProgramData\TEMP:F0A06891
@Alternate Data Stream - 236 bytes -> C:\ProgramData\TEMP:E7B4296D
@Alternate Data Stream - 236 bytes -> C:\ProgramData\TEMP:BACB6B6C
@Alternate Data Stream - 235 bytes -> C:\ProgramData\TEMP:38FF076E
@Alternate Data Stream - 234 bytes -> C:\ProgramData\TEMP:CC4C59B4
@Alternate Data Stream - 234 bytes -> C:\ProgramData\TEMP:09867A8B
@Alternate Data Stream - 227 bytes -> C:\ProgramData\TEMP:D93AABC7
@Alternate Data Stream - 226 bytes -> C:\ProgramData\TEMP:571CCF8E
@Alternate Data Stream - 224 bytes -> C:\ProgramData\TEMP:92EDCBF3
@Alternate Data Stream - 223 bytes -> C:\ProgramData\TEMP:BEB6D0B2
@Alternate Data Stream - 223 bytes -> C:\ProgramData\TEMP:2D3CB929
@Alternate Data Stream - 222 bytes -> C:\ProgramData\TEMP:15E76ABF
@Alternate Data Stream - 218 bytes -> C:\ProgramData\TEMP:F5FC5DCE
@Alternate Data Stream - 218 bytes -> C:\ProgramData\TEMP:A774141A
@Alternate Data Stream - 217 bytes -> C:\ProgramData\TEMP:EA7D76BE
@Alternate Data Stream - 216 bytes -> C:\ProgramData\TEMP:8F067037
@Alternate Data Stream - 216 bytes -> C:\ProgramData\TEMP:30DA8392
@Alternate Data Stream - 216 bytes -> C:\ProgramData\TEMP:0ACF1AF5
@Alternate Data Stream - 215 bytes -> C:\ProgramData\TEMP:E222F217
@Alternate Data Stream - 215 bytes -> C:\ProgramData\TEMP:BD27B7FC
@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:70B3C619
@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:35629AE6
@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:0E22C5DB
@Alternate Data Stream - 211 bytes -> C:\ProgramData\TEMP:ACCFA538
@Alternate Data Stream - 210 bytes -> C:\ProgramData\TEMP:98DFF516
@Alternate Data Stream - 203 bytes -> C:\ProgramData\TEMP:84E7BFEB
@Alternate Data Stream - 200 bytes -> C:\ProgramData\TEMP:EAFDF1CF
@Alternate Data Stream - 200 bytes -> C:\ProgramData\TEMP:9ACB70D7
@Alternate Data Stream - 192 bytes -> C:\ProgramData\TEMP:95775248
@Alternate Data Stream - 191 bytes -> C:\ProgramData\TEMP:3473F385
@Alternate Data Stream - 149 bytes -> C:\ProgramData\TEMP:D667795F
@Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:EE7AAC75
@Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:A652BC99
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:4A448DB2
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:98F0614F
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:EF5B3572
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:6C08335F
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:B8AF0F0F
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:8944C195
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:322D2CD3
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:22313216
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:D2C51E3D
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:89C6F032
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:567FC9C2
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:EA701346
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:1B7E2022
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:45F3AD49
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:CB16385F
@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:99A29126

< End of report >

System still seems to hang but not nearly as often or as long.

jeffce

Post #23March 29, 2012, 2:37 PM UTC

Hi,

If you are going to be away or need some extra time just let me know and I can keep the topic open.

———–

Run OTL.exe

Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

:Services

:OTL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.nickjr.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - Reg Error: Key error. File not found
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.techsupportalert.com/"
[2011/11/13 10:17:14 | 000,002,252 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\bing.xml
O15:64bit: - ..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: aol.com ([objects] * is out of zone range - 5)
O33 - MountPoints2\{e6f09cca-e1c7-11dd-9d6b-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{e6f09cca-e1c7-11dd-9d6b-806e6f6e6963}\Shell\AutoRun\command - "" = H:\Setup.exe – [2010/12/08 11:58:04 | 000,140,736 | R— | M] (Motorola, Inc.)
@Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:7E927D7D
@Alternate Data Stream - 96 bytes -> C:\ProgramData\TEMP:E962FBDB
@Alternate Data Stream - 239 bytes -> C:\ProgramData\TEMP:F0A06891
@Alternate Data Stream - 236 bytes -> C:\ProgramData\TEMP:E7B4296D
@Alternate Data Stream - 236 bytes -> C:\ProgramData\TEMP:BACB6B6C
@Alternate Data Stream - 235 bytes -> C:\ProgramData\TEMP:38FF076E
@Alternate Data Stream - 234 bytes -> C:\ProgramData\TEMP:CC4C59B4
@Alternate Data Stream - 234 bytes -> C:\ProgramData\TEMP:09867A8B
@Alternate Data Stream - 227 bytes -> C:\ProgramData\TEMP:D93AABC7
@Alternate Data Stream - 226 bytes -> C:\ProgramData\TEMP:571CCF8E
@Alternate Data Stream - 224 bytes -> C:\ProgramData\TEMP:92EDCBF3
@Alternate Data Stream - 223 bytes -> C:\ProgramData\TEMP:BEB6D0B2
@Alternate Data Stream - 223 bytes -> C:\ProgramData\TEMP:2D3CB929
@Alternate Data Stream - 222 bytes -> C:\ProgramData\TEMP:15E76ABF
@Alternate Data Stream - 218 bytes -> C:\ProgramData\TEMP:F5FC5DCE
@Alternate Data Stream - 218 bytes -> C:\ProgramData\TEMP:A774141A
@Alternate Data Stream - 217 bytes -> C:\ProgramData\TEMP:EA7D76BE
@Alternate Data Stream - 216 bytes -> C:\ProgramData\TEMP:8F067037
@Alternate Data Stream - 216 bytes -> C:\ProgramData\TEMP:30DA8392
@Alternate Data Stream - 216 bytes -> C:\ProgramData\TEMP:0ACF1AF5
@Alternate Data Stream - 215 bytes -> C:\ProgramData\TEMP:E222F217
@Alternate Data Stream - 215 bytes -> C:\ProgramData\TEMP:BD27B7FC
@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:70B3C619
@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:35629AE6
@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:0E22C5DB
@Alternate Data Stream - 211 bytes -> C:\ProgramData\TEMP:ACCFA538
@Alternate Data Stream - 210 bytes -> C:\ProgramData\TEMP:98DFF516
@Alternate Data Stream - 203 bytes -> C:\ProgramData\TEMP:84E7BFEB
@Alternate Data Stream - 200 bytes -> C:\ProgramData\TEMP:EAFDF1CF
@Alternate Data Stream - 200 bytes -> C:\ProgramData\TEMP:9ACB70D7
@Alternate Data Stream - 192 bytes -> C:\ProgramData\TEMP:95775248
@Alternate Data Stream - 191 bytes -> C:\ProgramData\TEMP:3473F385
@Alternate Data Stream - 149 bytes -> C:\ProgramData\TEMP:D667795F
@Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:EE7AAC75
@Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:A652BC99
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:4A448DB2
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:98F0614F
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:EF5B3572
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:6C08335F
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:B8AF0F0F
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:8944C195
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:322D2CD3
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:22313216
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:D2C51E3D
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:89C6F032
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:567FC9C2
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:EA701346
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:1B7E2022
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:45F3AD49
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:CB16385F
@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:99A29126

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Then click the Run Fix button at the top
Let the program run unhindered, reboot when it is done
Then run a new scan and post a new OTL log ( don't check the boxes beside LOP Check or Purity this time )

kevin_czarnota

Post #24March 29, 2012, 7:07 PM UTC

Here is the latest OTL log file,
OTL logfile created on: 3/29/2012 2:02:26 PM - Run 9
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Users\kevin\Desktop\highjackthis
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 58.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 79.00% Paging File free
Paging file location(s): ?:\pagefile.sys

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 901.41 Gb Total Space | 300.71 Gb Free Space | 33.36% Space Free | Partition Type: NTFS
Drive D: | 30.00 Gb Total Space | 23.74 Gb Free Space | 79.15% Space Free | Partition Type: NTFS
Drive E: | 465.76 Gb Total Space | 16.89 Gb Free Space | 3.63% Space Free | Partition Type: NTFS
Drive F: | 232.88 Gb Total Space | 77.93 Gb Free Space | 33.46% Space Free | Partition Type: NTFS
Drive G: | 29.79 Gb Total Space | 14.53 Gb Free Space | 48.77% Space Free | Partition Type: FAT32
Drive H: | 262.72 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: CZARNOTA-FAMILY | User Name: kevin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe (Carbonite, Inc.)
PRC - C:\Users\kevin\Desktop\highjackthis\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - c:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\Common Files\aol\acs\AOLacsd.exe (AOL LLC)

========== Modules (SafeList) ==========

MOD - C:\Users\kevin\Desktop\highjackthis\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrcInj.dll (Logitech Inc.)

========== Win32 Services (SafeList) ==========

SRV:64bit: - (!SASCORE) – C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (SUPERAntiSpyware.com)
SRV:64bit: - (ZuneWlanCfgSvc) – C:\Program Files\Zune\ZuneWlanCfgSvc.exe (Microsoft Corporation)
SRV:64bit: - (WMZuneComm) – C:\Program Files\Zune\WMZuneComm.exe (Microsoft Corporation)
SRV:64bit: - (ZuneNetworkSvc) – C:\Program Files\Zune\ZuneNss.exe (Microsoft Corporation)
SRV:64bit: - (ReflectService) – C:\Program Files\Macrium\Reflect\ReflectService.exe ()
SRV:64bit: - (LBTServ) – C:\Program Files\Common Files\logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV:64bit: - (NisSrv) – c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe (Microsoft Corporation)
SRV:64bit: - (MsMpSvc) – c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
SRV:64bit: - (CarboniteService) – C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe (Carbonite, Inc. (www.carbonite.com))
SRV:64bit: - (MSCamSvc) – C:\Program Files\Microsoft LifeCam\MSCamS64.exe (Microsoft Corporation)
SRV:64bit: - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV:64bit: - (AERTFilters) – C:\Windows\SysNative\AERTSr64.exe (Andrea Electronics Corporation)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (LVSrvLauncher) – C:\Program Files\Common Files\logishrd\SrvLnch\SrvLnch.exe (Logitech Inc.)
SRV:64bit: - (LVPrcS64) – c:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (MBAMService) – C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ShowAnalyzerMaster) – C:\Program Files (x86)\Dragon Global\ShowAnalyzerSuite\ShowAnalyzerMaster.exe (Dragon Global)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) – C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (SEIKO EPSON CORPORATION)
SRV - (AOL ACS) – C:\Program Files (x86)\Common Files\AOL\ACS\AOLAcsd.exe (AOL LLC)

========== Driver Services (SafeList) ==========

DRV:64bit: - (MBAMProtector) – C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (PSMounter) – C:\Windows\SysNative\drivers\psmounter.sys (Macrium Software)
DRV:64bit: - (motusbdevice) – C:\Windows\SysNative\DRIVERS\motusbdevice.sys (Motorola Inc)
DRV:64bit: - (LUsbFilt) – C:\Windows\SysNative\Drivers\LUsbFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) – C:\Windows\SysNative\DRIVERS\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LMouFilt) – C:\Windows\SysNative\DRIVERS\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (NisDrv) – C:\Windows\SysNative\DRIVERS\NisDrvWFP.sys (Microsoft Corporation)
DRV:64bit: - (motccgp) – C:\Windows\SysNative\DRIVERS\motccgp.sys (Motorola)
DRV:64bit: - (motmodem) – C:\Windows\SysNative\DRIVERS\motmodem.sys (Motorola)
DRV:64bit: - (MSHUSBVideo) – C:\Windows\SysNative\Drivers\nx6000.sys (Microsoft Corporation)
DRV:64bit: - (RTL8169) – C:\Windows\SysNative\DRIVERS\Rtlh64.sys (Realtek )
DRV:64bit: - (timounter) – C:\Windows\SysNative\DRIVERS\timntr.sys (Acronis)
DRV:64bit: - (tifsfilter) – C:\Windows\SysNative\DRIVERS\tifsfilt.sys (Acronis)
DRV:64bit: - (Motousbnet) – C:\Windows\SysNative\DRIVERS\Motousbnet.sys (Motorola)
DRV:64bit: - (ATIAVPCI) – C:\Windows\SysNative\DRIVERS\atinavrr.sys (ATI Technologies Inc.)
DRV:64bit: - (WpdUsb) – C:\Windows\SysNative\DRIVERS\wpdusb.sys (Microsoft Corporation)
DRV:64bit: - (AuviPCI) – C:\Windows\SysNative\DRIVERS\AuviPCI64.sys (Auvitek Corp.)
DRV:64bit: - (motccgpfl) – C:\Windows\SysNative\DRIVERS\motccgpfl.sys (Motorola)
DRV:64bit: - (BTCFilterService) – C:\Windows\SysNative\DRIVERS\motfilt.sys (Motorola Inc)
DRV:64bit: - (RimVSerPort) – C:\Windows\SysNative\DRIVERS\RimSerial_AMD64.sys (Research in Motion Ltd)
DRV:64bit: - (igfx) – C:\Windows\SysNative\DRIVERS\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iastor.sys (Intel Corporation)
DRV:64bit: - (SQTECH9052) – C:\Windows\SysNative\Drivers\Capt9052.sys (Service & Quality Technology.)
DRV:64bit: - (ROOTMODEM) – C:\Windows\SysNative\Drivers\RootMdm.sys (Microsoft Corporation)
DRV:64bit: - (e1express) Intel® – C:\Windows\SysNative\DRIVERS\e1e6032e.sys (Intel Corporation)
DRV:64bit: - (MotoSwitchService) – C:\Windows\SysNative\DRIVERS\motswch.sys (Motorola)
DRV:64bit: - (FlyUsb) – C:\Windows\SysNative\DRIVERS\FlyUsb.sys (LeapFrog)
DRV:64bit: - (SQTECH905C) – C:\Windows\SysNative\Drivers\Capt905c.sys (Service & Quality Technology.)
DRV:64bit: - (LVPr2Mon) – C:\Windows\SysNative\DRIVERS\LVPr2Mon.sys ()
DRV:64bit: - (LVMVDrv) – C:\Windows\SysNative\DRIVERS\LVMVDrv.sys (Logitech Inc.)
DRV:64bit: - (LVcKap64) – C:\Windows\SysNative\DRIVERS\LVcKap64.sys (Logitech Inc.)
DRV:64bit: - (LVUSBS64) – C:\Windows\SysNative\drivers\LVUSBS64.sys (Logitech Inc.)
DRV:64bit: - (CamDrL64) Logitech QuickCam Pro 3000(PID_08B0) – C:\Windows\SysNative\DRIVERS\CamDrL64.sys (Logitech Inc.)
DRV:64bit: - (wanatw) WAN Miniport (ATW) – C:\Windows\SysNative\DRIVERS\wanatw64.sys (America Online, Inc.)
DRV:64bit: - (R300) – C:\Windows\SysNative\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\Wbem\ntfs.mof ()

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.nickjr.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache =
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.search.useDBForOrder: ""
FF - prefs.js..extensions.enabledItems: {FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}:1.3.5
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.63
FF - prefs.js..extensions.enabledItems: SkipScreen@SkipScreen:0.5.21amo
FF - prefs.js..extensions.enabledItems: {AF445D67-154C-4c69-A17B-7F392BCC36A3}:1.0.16
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4
FF - prefs.js..extensions.enabledItems: {340c2bbc-ce74-4362-90b5-7c26312808ef}:1.7
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22

FF - HKLM\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/03/18 22:25:00 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/11/11 21:11:04 | 000,000,000 | —D | M]

[2009/01/16 15:36:21 | 000,000,000 | —D | M] (No name found) – C:\Users\kevin\AppData\Roaming\Mozilla\Extensions
[2012/03/29 07:33:09 | 000,000,000 | —D | M] (No name found) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions
[2011/08/28 17:33:30 | 000,000,000 | —D | M] (Garmin Communicator) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2011/03/09 20:15:19 | 000,000,000 | —D | M] (No name found) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}-trash
[2011/12/23 20:38:17 | 000,000,000 | —D | M] (DownloadHelper) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2009/09/14 13:04:52 | 000,000,000 | —D | M] (IE View Lite) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}
[2012/03/29 07:33:05 | 000,000,000 | —D | M] ("I Want This") – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\[removed]
[2011/08/16 19:19:29 | 000,000,000 | —D | M] (Разпознаване на устройство Logitech) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\[removed]
[2011/11/13 10:17:23 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
File not found (No name found) –
() (No name found) – C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TU1FLXA4.DEFAULT\EXTENSIONS\[removed]
() (No name found) – C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TU1FLXA4.DEFAULT\EXTENSIONS\[removed]
[2012/03/18 22:25:00 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll
[2011/06/19 10:00:07 | 000,466,944 | —- | M] (Catalina Marketing Corporation) – C:\Program Files (x86)\Mozilla Firefox\plugins\NPcol400.dll
[2011/06/19 10:00:07 | 000,466,944 | —- | M] (Catalina Marketing Corporation) – C:\Program Files (x86)\Mozilla Firefox\plugins\NPcol500.dll
[2011/07/03 12:41:05 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2011/11/13 10:17:13 | 000,002,040 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2012/03/29 07:41:39 | 000,000,098 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Carbonite Backup] C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe (Carbonite, Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - Startup: C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files (x86)\ERUNT\AUTOBACK.EXE ()
O4 - Startup: C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stoic Joker's T-Clock x64.lnk = C:\Program Files (x86)\Tclock\tclock-x64\Clock.exe (Stoic Joker's Network)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15:64bit: - ..Trusted Domains: localhost ([]http in Local intranet)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Reg Error: Key error.)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 10.1.0)
O16 - DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0_01)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files%20(x86)/Virtual%20Families/Images/stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8714912E-380D-11D5-B8AA-00D0B78F3D48} http://chat.yahoo.com/cab/yuplapp.cab (Yahoo! Webcam Upload Wrapper)
O16 - DPF: {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} http://support.dell.com/systemprofiler/DellSystemLite.CAB (DellSystemLite.Scanner)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files%20(x86)/Peggle/Images/armhelper.ocx (ArmHelper Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18:64bit: - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img36.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img36.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/10/08 04:52:42 | 000,000,054 | R— | M] () - H:\AUTORUN.INF – [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/03/26 21:59:48 | 000,000,000 | —D | C] – C:\Program Files (x86)\Daum
[2012/03/26 13:49:31 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Adobe AIR
[2012/03/22 13:55:09 | 000,000,000 | —D | C] – C:\Program Files (x86)\ESET
[2012/03/22 10:34:21 | 000,000,000 | —D | C] – C:\Users\kevin\AppData\Roaming\Malwarebytes
[2012/03/22 10:34:14 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/03/22 10:34:12 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2012/03/22 10:34:10 | 000,023,152 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2012/03/22 10:34:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/03/21 15:58:55 | 000,000,000 | —D | C] – C:\Users\kevin\AppData\Roaming\gtk-2.0
[2012/03/21 15:58:21 | 000,000,000 | —D | C] – C:\Users\kevin\.thumbnails
[2012/03/21 08:04:24 | 000,000,000 | —D | C] – C:\Users\kevin\.gimp-2.4
[2012/03/21 08:04:16 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP
[2012/03/21 08:03:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\GIMP-2.0
[2012/03/21 08:02:32 | 000,000,000 | —D | C] – C:\Users\kevin\AppData\Local\I Want This
[2012/03/21 06:27:31 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2012/03/21 06:27:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\ERUNT
[2012/03/13 20:20:28 | 001,555,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2012/03/13 20:20:28 | 001,068,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2012/03/13 20:20:27 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10warp.dll
[2012/03/13 20:20:27 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2012/03/13 20:20:27 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1core.dll
[2012/03/13 20:20:23 | 002,002,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2012/03/13 20:20:19 | 000,683,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll
[2012/03/13 20:20:18 | 000,834,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2012/03/13 20:20:14 | 000,196,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2012/03/13 20:20:14 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1.dll
[2012/03/13 20:14:32 | 000,708,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpencom.dll
[2012/03/13 20:14:20 | 000,613,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpencom.dll
[2002/03/11 04:06:30 | 001,822,520 | —- | C] (Microsoft Corporation) – C:\Program Files (x86)\instmsiw.exe
[2002/03/11 03:45:04 | 001,708,856 | —- | C] (Microsoft Corporation) – C:\Program Files (x86)\instmsia.exe

========== Files - Modified Within 30 Days ==========

[2012/03/29 14:01:47 | 000,000,510 | —- | M] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task a00d761c-5b80-4a6f-8e41-11857ef8a885.job
[2012/03/29 14:01:46 | 000,000,510 | —- | M] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 8b753a4f-7f81-44f0-93e1-52469fd63d88.job
[2012/03/29 14:01:08 | 000,000,406 | —- | M] () – C:\Windows\tasks\AutoSmartDefrag.job
[2012/03/29 14:01:02 | 000,003,744 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/03/29 14:01:02 | 000,003,744 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/03/29 14:00:56 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/03/29 07:51:07 | 000,763,778 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2012/03/29 07:51:07 | 000,645,624 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2012/03/29 07:51:07 | 000,120,716 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2012/03/22 10:34:15 | 000,000,950 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/03/21 16:01:15 | 000,001,449 | —- | M] () – C:\Users\kevin\.recently-used.xbel
[2012/03/21 08:04:18 | 000,000,930 | —- | M] () – C:\Users\kevin\Desktop\GIMP 2.lnk
[2012/03/21 06:27:53 | 000,000,945 | —- | M] () – C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2012/03/20 15:01:20 | 670,005,447 | —- | M] () – C:\Windows\MEMORY.DMP
[2012/03/15 10:05:30 | 000,002,643 | —- | M] () – C:\Users\kevin\Desktop\Microsoft Outlook 2010.lnk
[2012/03/15 09:30:11 | 000,016,262 | —- | M] () – C:\Users\kevin\Documents\2012TagRenewal.PDF
[2012/03/13 20:50:09 | 000,406,552 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2012/03/11 12:05:14 | 000,002,637 | —- | M] () – C:\Users\kevin\Desktop\Microsoft Word 2010.lnk
[2012/03/04 21:40:26 | 000,003,053 | —- | M] () – C:\Users\kevin\Desktop\Macrium Reflect.lnk

========== Files Created - No Company Name ==========

[2012/03/29 14:01:47 | 000,000,510 | —- | C] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task a00d761c-5b80-4a6f-8e41-11857ef8a885.job
[2012/03/29 14:01:46 | 000,000,510 | —- | C] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 8b753a4f-7f81-44f0-93e1-52469fd63d88.job
[2012/03/22 10:34:15 | 000,000,950 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/03/21 16:01:15 | 000,001,449 | —- | C] () – C:\Users\kevin\.recently-used.xbel
[2012/03/21 08:04:18 | 000,000,930 | —- | C] () – C:\Users\kevin\Desktop\GIMP 2.lnk
[2012/03/21 06:27:53 | 000,000,945 | —- | C] () – C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2012/03/20 15:01:20 | 670,005,447 | —- | C] () – C:\Windows\MEMORY.DMP
[2012/03/15 09:30:10 | 000,016,262 | —- | C] () – C:\Users\kevin\Documents\2012TagRenewal.PDF
[2012/03/04 21:40:26 | 000,003,053 | —- | C] () – C:\Users\kevin\Desktop\Macrium Reflect.lnk
[2011/08/11 15:23:35 | 000,000,185 | —- | C] () – C:\Windows\WININIT.INI
[2011/08/11 15:19:23 | 000,000,000 | —- | C] () – C:\Windows\setup32.INI
[2011/07/28 16:51:56 | 000,000,510 | —- | C] () – C:\Windows\WORDPAD.INI
[2011/04/11 17:06:44 | 000,000,732 | —- | C] () – C:\Users\kevin\AppData\Local\d3d9caps64.dat
[2011/02/20 15:30:36 | 000,000,056 | -H– | C] () – C:\Windows\SysWow64\ezsidmv.dat
[2010/12/28 20:51:23 | 000,057,344 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2010/12/24 10:01:53 | 000,758,692 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/11/20 13:39:48 | 000,000,173 | —- | C] () – C:\Users\kevin\AppData\Local\rahistory.xml
[2010/07/16 12:10:49 | 000,000,256 | —- | C] () – C:\Windows\SysWow64\pool.bin
[2010/04/11 10:39:24 | 000,000,004 | —- | C] () – C:\Windows\msoffice.ini
[2009/12/23 13:27:26 | 000,000,094 | —- | C] () – C:\Windows\family.ini
[2009/11/22 12:27:51 | 000,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2009/11/22 12:27:30 | 000,107,612 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchema.bin
[2009/11/22 12:27:11 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/01/26 17:17:15 | 000,000,154 | —- | C] () – C:\Windows\[removed]
[2009/01/26 12:23:01 | 000,000,376 | —- | C] () – C:\Windows\ODBC.INI
[2009/01/25 18:15:36 | 000,000,411 | —- | C] () – C:\Windows\COOK'N5.INI
[2009/01/17 11:17:05 | 000,210,944 | —- | C] () – C:\Windows\SysWow64\Msvcrt10.dll
[2009/01/17 10:50:20 | 000,073,220 | —- | C] () – C:\Windows\SysWow64\EPPICPrinterDB.dat
[2009/01/17 10:50:20 | 000,031,053 | —- | C] () – C:\Windows\SysWow64\EPPICPattern131.dat
[2009/01/17 10:50:20 | 000,029,114 | —- | C] () – C:\Windows\SysWow64\EPPICPattern1.dat
[2009/01/17 10:50:20 | 000,027,417 | —- | C] () – C:\Windows\SysWow64\EPPICPattern121.dat
[2009/01/17 10:50:20 | 000,021,021 | —- | C] () – C:\Windows\SysWow64\EPPICPattern3.dat
[2009/01/17 10:50:20 | 000,015,670 | —- | C] () – C:\Windows\SysWow64\EPPICPattern5.dat
[2009/01/17 10:50:20 | 000,013,280 | —- | C] () – C:\Windows\SysWow64\EPPICPattern2.dat
[2009/01/17 10:50:20 | 000,010,673 | —- | C] () – C:\Windows\SysWow64\EPPICPattern4.dat
[2009/01/17 10:50:20 | 000,004,943 | —- | C] () – C:\Windows\SysWow64\EPPICPattern6.dat
[2009/01/17 10:50:20 | 000,001,140 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2009/01/17 10:50:20 | 000,001,140 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2009/01/17 10:50:20 | 000,001,137 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2009/01/17 10:50:20 | 000,001,130 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2009/01/17 10:50:20 | 000,001,130 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2009/01/17 10:50:20 | 000,001,104 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2009/01/17 10:50:20 | 000,000,097 | —- | C] () – C:\Windows\SysWow64\PICSDK.ini
[2009/01/17 10:23:27 | 000,005,216 | —- | C] () – C:\Users\kevin\AppData\Local\d3d9caps.dat
[2009/01/16 16:30:17 | 000,000,335 | —- | C] () – C:\Windows\nsreg.dat
[2009/01/14 02:07:05 | 000,018,904 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2008/09/30 12:06:06 | 128,535,711 | —- | C] () – C:\Program Files (x86)\openofficeorg1.cab
[2008/09/30 11:29:36 | 000,000,217 | —- | C] () – C:\Program Files (x86)\setup.ini
[2008/09/30 11:29:32 | 009,772,544 | —- | C] () – C:\Program Files (x86)\openofficeorg30.msi
[2008/09/18 11:08:54 | 000,424,728 | —- | C] () – C:\Program Files (x86)\setup.exe
[2008/01/20 21:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini
[2006/11/02 10:37:05 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 07:37:14 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2006/11/02 07:24:17 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2006/11/02 07:18:17 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2006/11/02 04:47:54 | 000,043,131 | —- | C] () – C:\Windows\mib.bin

< End of report >

jeffce

Post #25March 29, 2012, 8:01 PM UTC

Great…how are things running?

kevin_czarnota

Post #26March 31, 2012, 12:34 PM UTC

Still Hangs and get a spinning wheel on occasion. Not as often and not as long.

jeffce

Post #27March 31, 2012, 1:23 PM UTC

Hi Kevin,

Please download TDSSKiller

Right-click and Run as Administrator TDSSKiller.exe
Press Change Parameters
Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.
Click on the Start Scan button
- Only if Malicious objects are found then ensure Cure is selected
- Then click Continue > Reboot now
- Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
Copy and paste the log in your next reply
- A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste its contents on your next reply.

———-

kevin_czarnota

Post #28April 2, 2012, 12:48 AM UTC

Jeff, It found 4 threats but were medium threats, so I skipped them. I did not reboot after the scan and here is the report file. 19:43:01.0944 7864 TDSS rootkit removing tool [removed] Mar 26 2012 13:40:18 19:43:02.0262 7864 ============================================================ 19:43:02.0262 7864 Current date / time: 2012/04/01 19:43:02.0262 19:43:02.0262 7864 SystemInfo: 19:43:02.0262 7864 19:43:02.0262 7864 OS Version: 6.0.6002 ServicePack: 2.0 19:43:02.0262 7864 Product type: Workstation 19:43:02.0262 7864 ComputerName: CZARNOTA-FAMILY 19:43:02.0263 7864 UserName: kevin 19:43:02.0263 7864 Windows directory: C:\Windows 19:43:02.0263 7864 System windows directory: C:\Windows 19:43:02.0263 7864 Running under WOW64 19:43:02.0263 7864 Processor architecture: Intel x64 19:43:02.0263 7864 Number of processors: 2 19:43:02.0263 7864 Page size: 0x1000 19:43:02.0263 7864 Boot type: Normal boot 19:43:02.0263 7864 ============================================================ 19:43:02.0977 7864 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 19:43:02.0991 7864 Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 19:43:03.0013 7864 Drive \Device\Harddisk2\DR2 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 19:43:03.0041 7864 \Device\Harddisk0\DR0: 19:43:03.0042 7864 MBR used 19:43:03.0042 7864 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1D1C4800 19:43:03.0042 7864 \Device\Harddisk1\DR1: 19:43:03.0055 7864 MBR used 19:43:03.0055 7864 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x36E8E, BlocksNum 0x3BFF04C 19:43:03.0055 7864 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3C35EDA, BlocksNum 0x70ACFAE7 19:43:03.0055 7864 \Device\Harddisk2\DR2: 19:43:03.0056 7864 MBR used 19:43:03.0056 7864 \Device\Harddisk2\DR2\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x3A384800 19:43:03.0276 7864 Initialize success 19:43:03.0276 7864 ============================================================ 19:43:20.0165 8452 ============================================================ 19:43:20.0165 8452 Scan started 19:43:20.0165 8452 Mode: Manual; SigCheck; TDLFS; 19:43:20.0165 8452 ============================================================ 19:43:20.0353 8452 !SASCORE (7d9d615201a483d6fa99491c2e655a5a) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE 19:43:20.0526 8452 !SASCORE - ok 19:43:20.0589 8452 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys 19:43:20.0639 8452 ACPI - ok 19:43:20.0683 8452 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys 19:43:20.0734 8452 adp94xx - ok 19:43:20.0769 8452 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys 19:43:20.0800 8452 adpahci - ok 19:43:20.0818 8452 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys 19:43:20.0841 8452 adpu160m - ok 19:43:20.0861 8452 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys 19:43:20.0888 8452 adpu320 - ok 19:43:20.0915 8452 AeLookupSvc (0f421175574bfe0bf2f4d8e910a253bb) C:\Windows\System32\aelupsvc.dll 19:43:21.0028 8452 AeLookupSvc - ok 19:43:21.0053 8452 AERTFilters (0d7a11395c0a33d9e7587cdb9866efad) C:\Windows\system32\AERTSr64.exe 19:43:21.0170 8452 AERTFilters - ok 19:43:21.0209 8452 AFD (c4f6ce6087760ad70960c9eb130e7943) C:\Windows\system32\drivers\afd.sys 19:43:21.0283 8452 AFD - ok 19:43:21.0301 8452 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys 19:43:21.0336 8452 agp440 - ok 19:43:21.0354 8452 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys 19:43:21.0392 8452 aic78xx - ok 19:43:21.0411 8452 ALG (5922f4f59b7868f3d74bbbbeb7b825a3) C:\Windows\System32\alg.exe 19:43:21.0593 8452 ALG - ok 19:43:21.0615 8452 aliide (9544c2c55541c0c6bfd7b489d0e7d430) C:\Windows\system32\drivers\aliide.sys 19:43:21.0645 8452 aliide - ok 19:43:21.0657 8452 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys 19:43:21.0690 8452 amdide - ok 19:43:21.0708 8452 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys 19:43:21.0784 8452 AmdK8 - ok 19:43:21.0813 8452 AOL ACS (85180cf88c5ebad73b452a43a004ca51) C:\Program Files (x86)\Common Files\AOL\ACS\AOLAcsd.exe 19:43:21.0869 8452 AOL ACS - ok 19:43:21.0892 8452 Appinfo (9c37b3fd5615477cb9a0cd116cf43f5c) C:\Windows\System32\appinfo.dll 19:43:21.0937 8452 Appinfo - ok 19:43:21.0945 8452 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys 19:43:21.0965 8452 arc - ok 19:43:21.0979 8452 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys 19:43:21.0997 8452 arcsas - ok 19:43:22.0051 8452 aspnet_state (9217d874131ae6ff8f642f124f00a555) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 19:43:22.0072 8452 aspnet_state - ok 19:43:22.0087 8452 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys 19:43:22.0135 8452 AsyncMac - ok 19:43:22.0161 8452 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys 19:43:22.0179 8452 atapi - ok 19:43:22.0227 8452 ATIAVPCI (2fdf783e6285c3765de5520296df1cab) C:\Windows\system32\DRIVERS\atinavrr.sys 19:43:22.0324 8452 ATIAVPCI - ok 19:43:22.0351 8452 AudioEndpointBuilder (79318c744693ec983d20e9337a2f8196) C:\Windows\System32\Audiosrv.dll 19:43:22.0442 8452 AudioEndpointBuilder - ok 19:43:22.0468 8452 AudioSrv (79318c744693ec983d20e9337a2f8196) C:\Windows\System32\Audiosrv.dll 19:43:22.0525 8452 AudioSrv - ok 19:43:22.0577 8452 AuviPCI (b0b44abf90893891c5b4c0a11cc72e27) C:\Windows\system32\DRIVERS\AuviPCI64.sys 19:43:22.0654 8452 AuviPCI ( UnsignedFile.Multi.Generic ) - warning 19:43:22.0654 8452 AuviPCI - detected UnsignedFile.Multi.Generic (1) 19:43:22.0714 8452 BFE (ffb96c2589ffa60473ead78b39fbde29) C:\Windows\System32\bfe.dll 19:43:22.0797 8452 BFE - ok 19:43:22.0829 8452 BITS (6d316f4859634071cc25c4fd4589ad2c) C:\Windows\System32\qmgr.dll 19:43:22.0948 8452 BITS - ok 19:43:22.0963 8452 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys 19:43:23.0026 8452 blbdrive - ok 19:43:23.0057 8452 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys 19:43:23.0110 8452 bowser - ok 19:43:23.0128 8452 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys 19:43:23.0200 8452 BrFiltLo - ok 19:43:23.0219 8452 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys 19:43:23.0284 8452 BrFiltUp - ok 19:43:23.0311 8452 Browser (a1b39de453433b115b4ea69ee0343816) C:\Windows\System32\browser.dll 19:43:23.0405 8452 Browser - ok 19:43:23.0426 8452 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys 19:43:23.0556 8452 Brserid - ok 19:43:23.0574 8452 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys 19:43:23.0638 8452 BrSerWdm - ok 19:43:23.0645 8452 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys 19:43:23.0701 8452 BrUsbMdm - ok 19:43:23.0714 8452 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys 19:43:23.0767 8452 BrUsbSer - ok 19:43:23.0805 8452 BTCFilterService (ff7c57973eead140062238c5a0b7d455) C:\Windows\system32\DRIVERS\motfilt.sys 19:43:23.0841 8452 BTCFilterService - ok 19:43:23.0853 8452 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys 19:43:23.0915 8452 BTHMODEM - ok 19:43:23.0957 8452 CamDrL64 (6e1641724439e18ce55adee2d347aa19) C:\Windows\system32\DRIVERS\CamDrL64.sys 19:43:24.0027 8452 CamDrL64 - ok 19:43:24.0148 8452 CarboniteService (33e43a31ac6ac6ba95d4772d8cca076f) C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe 19:43:24.0529 8452 CarboniteService - ok 19:43:24.0549 8452 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys 19:43:24.0599 8452 cdfs - ok 19:43:24.0622 8452 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys 19:43:24.0656 8452 cdrom - ok 19:43:24.0699 8452 CertPropSvc (5a268127633c7ee2a7fb87f39d748d56) C:\Windows\System32\certprop.dll 19:43:24.0755 8452 CertPropSvc - ok 19:43:24.0763 8452 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\drivers\circlass.sys 19:43:24.0820 8452 circlass - ok 19:43:24.0845 8452 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys 19:43:24.0880 8452 CLFS - ok 19:43:24.0926 8452 clr_optimization_v2.0.50727_32 (8ee772032e2fe80a924f3b8dd5082194) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 19:43:24.0965 8452 clr_optimization_v2.0.50727_32 - ok 19:43:24.0996 8452 clr_optimization_v2.0.50727_64 (ce07a466201096f021cd09d631b21540) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 19:43:25.0028 8452 clr_optimization_v2.0.50727_64 - ok 19:43:25.0085 8452 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 19:43:25.0122 8452 clr_optimization_v4.0.30319_32 - ok 19:43:25.0144 8452 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 19:43:25.0182 8452 clr_optimization_v4.0.30319_64 - ok 19:43:25.0203 8452 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys 19:43:25.0219 8452 cmdide - ok 19:43:25.0235 8452 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\drivers\compbatt.sys 19:43:25.0262 8452 Compbatt - ok 19:43:25.0269 8452 COMSysApp - ok 19:43:25.0286 8452 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys 19:43:25.0305 8452 crcdisk - ok 19:43:25.0325 8452 CryptSvc (18918613e63f387cde4d95ca7d49dcf7) C:\Windows\system32\cryptsvc.dll 19:43:25.0380 8452 CryptSvc - ok 19:43:25.0416 8452 DcomLaunch (cf8b9a3a5e7dc57724a89d0c3e8cf9ef) C:\Windows\system32\rpcss.dll 19:43:25.0505 8452 DcomLaunch - ok 19:43:25.0531 8452 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys 19:43:25.0568 8452 DfsC - ok 19:43:25.0618 8452 Dhcp (3ed0321127ce70acdaabbf77e157c2a7) C:\Windows\System32\dhcpcsvc.dll 19:43:25.0693 8452 Dhcp - ok 19:43:25.0712 8452 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys 19:43:25.0743 8452 disk - ok 19:43:25.0781 8452 Dnscache (06230f1b721494a6df8d47fd395bb1b0) C:\Windows\System32\dnsrslvr.dll 19:43:25.0830 8452 Dnscache - ok 19:43:25.0875 8452 DockLoginService (db29915209770d8b59654345ec2d943a) C:\Program Files\Dell\DellDock\DockLogin.exe 19:43:25.0983 8452 DockLoginService ( UnsignedFile.Multi.Generic ) - warning 19:43:25.0983 8452 DockLoginService - detected UnsignedFile.Multi.Generic (1) 19:43:26.0015 8452 dot3svc (1a7156dd1e850e9914e5e991e3225b94) C:\Windows\System32\dot3svc.dll 19:43:26.0110 8452 dot3svc - ok 19:43:26.0130 8452 DPS (1583b39790db3eaec7edb0cb0140c708) C:\Windows\system32\dps.dll 19:43:26.0235 8452 DPS - ok 19:43:26.0257 8452 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys 19:43:26.0297 8452 drmkaud - ok 19:43:26.0337 8452 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys 19:43:26.0395 8452 DXGKrnl - ok 19:43:26.0453 8452 e1express (17d40652ef3e55eeae187a89df40965a) C:\Windows\system32\DRIVERS\e1e6032e.sys 19:43:26.0499 8452 e1express - ok 19:43:26.0514 8452 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys 19:43:26.0557 8452 E1G60 - ok 19:43:26.0571 8452 EapHost (c2303883fd9be49dc36a6400643002ea) C:\Windows\System32\eapsvc.dll 19:43:26.0622 8452 EapHost - ok 19:43:26.0644 8452 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys 19:43:26.0670 8452 Ecache - ok 19:43:26.0693 8452 ehRecvr (14ce384d2e27b64c256bda4dc39c312d) C:\Windows\ehome\ehRecvr.exe 19:43:26.0774 8452 ehRecvr - ok 19:43:26.0791 8452 ehSched (b93159c1313d66fdfbbe876f5189cd52) C:\Windows\ehome\ehsched.exe 19:43:26.0848 8452 ehSched - ok 19:43:26.0867 8452 ehstart (f5ee2527d74449868e3c3227a59bcd28) C:\Windows\ehome\ehstart.dll 19:43:26.0922 8452 ehstart - ok 19:43:26.0952 8452 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys 19:43:26.0986 8452 elxstor - ok 19:43:27.0020 8452 EMDMgmt (a9b18b63a4fd6baab83326706d857fab) C:\Windows\system32\emdmgmt.dll 19:43:27.0118 8452 EMDMgmt - ok 19:43:27.0193 8452 EPSON_PM_RPCV4_01 (1e345f2a2d95da3190596e691cde9342) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE 19:43:27.0343 8452 EPSON_PM_RPCV4_01 - ok 19:43:27.0354 8452 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys 19:43:27.0399 8452 ErrDev - ok 19:43:27.0422 8452 EventSystem (e12f22b73f153dece721cd45ec05b4af) C:\Windows\system32\es.dll 19:43:27.0475 8452 EventSystem - ok 19:43:27.0494 8452 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys 19:43:27.0535 8452 exfat - ok 19:43:27.0561 8452 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys 19:43:27.0597 8452 fastfat - ok 19:43:27.0610 8452 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys 19:43:27.0662 8452 fdc - ok 19:43:27.0672 8452 fdPHost (bb9267acacd8b7533dd936c34a0cba5e) C:\Windows\system32\fdPHost.dll 19:43:27.0730 8452 fdPHost - ok 19:43:27.0749 8452 FDResPub (300c80931eabbe1db7591c516efe8d0f) C:\Windows\system32\fdrespub.dll 19:43:27.0812 8452 FDResPub - ok 19:43:27.0823 8452 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys 19:43:27.0845 8452 FileInfo - ok 19:43:27.0853 8452 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys 19:43:27.0904 8452 Filetrace - ok 19:43:27.0919 8452 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys 19:43:27.0957 8452 flpydisk - ok 19:43:27.0970 8452 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys 19:43:28.0001 8452 FltMgr - ok 19:43:28.0031 8452 FlyUsb (6cd6bb45bd3e0eef6ce496bf52854ff1) C:\Windows\system32\DRIVERS\FlyUsb.sys 19:43:28.0063 8452 FlyUsb - ok 19:43:28.0122 8452 FontCache (be1c5bd1ca7ed015bc6fa1ae67e592c8) C:\Windows\system32\FntCache.dll 19:43:28.0231 8452 FontCache - ok 19:43:28.0276 8452 FontCache3.0.0.0 (bc5b0be5af3510b0fd8c140ee42c6d3e) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 19:43:28.0299 8452 FontCache3.0.0.0 - ok 19:43:28.0311 8452 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys 19:43:28.0354 8452 Fs_Rec - ok 19:43:28.0367 8452 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys 19:43:28.0394 8452 gagp30kx - ok 19:43:28.0441 8452 GizmoDrv (4cf044db46f79bfa47fbdfd35192d765) C:\Windows\system32\drivers\GizmoDrv.sys 19:43:28.0482 8452 GizmoDrv - ok 19:43:28.0509 8452 gpsvc (a0e1b575ba8f504968cd40c0faeb2384) C:\Windows\System32\gpsvc.dll 19:43:28.0589 8452 gpsvc - ok 19:43:28.0620 8452 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys 19:43:28.0687 8452 HDAudBus - ok 19:43:28.0703 8452 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys 19:43:28.0756 8452 HidBth - ok 19:43:28.0773 8452 HidIr (4e77a77e2c986e8f88f996bb3e1ad829) C:\Windows\system32\drivers\hidir.sys 19:43:28.0827 8452 HidIr - ok 19:43:28.0855 8452 hidserv (59361d38a297755d46a540e450202b2a) C:\Windows\system32\hidserv.dll 19:43:28.0904 8452 hidserv - ok 19:43:28.0918 8452 HidUsb (443bdd2d30bb4f00795c797e2cf99edf) C:\Windows\system32\DRIVERS\hidusb.sys 19:43:28.0953 8452 HidUsb - ok 19:43:28.0977 8452 hkmsvc (b12f367ea39c0795fd57e31242ce1a5a) C:\Windows\system32\kmsvc.dll 19:43:29.0050 8452 hkmsvc - ok 19:43:29.0077 8452 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys 19:43:29.0098 8452 HpCISSs - ok 19:43:29.0128 8452 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys 19:43:29.0246 8452 HTTP - ok 19:43:29.0264 8452 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys 19:43:29.0289 8452 i2omp - ok 19:43:29.0306 8452 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys 19:43:29.0350 8452 i8042prt - ok 19:43:29.0374 8452 iaStor (ceb53bb804b41c52ab0782505c8e2994) C:\Windows\system32\drivers\iastor.sys 19:43:29.0404 8452 iaStor - ok 19:43:29.0425 8452 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys 19:43:29.0453 8452 iaStorV - ok 19:43:29.0520 8452 IDriverT (6f95324909b502e2651442c1548ab12f) C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe 19:43:29.0572 8452 IDriverT ( UnsignedFile.Multi.Generic ) - warning 19:43:29.0572 8452 IDriverT - detected UnsignedFile.Multi.Generic (1) 19:43:29.0623 8452 idsvc (749f5f8cedca70f2a512945325fc489d) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 19:43:29.0678 8452 idsvc - ok 19:43:29.0829 8452 igfx (2161876969e428a494f8d7c38fa6f513) C:\Windows\system32\DRIVERS\igdkmd64.sys 19:43:30.0104 8452 igfx - ok 19:43:30.0121 8452 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys 19:43:30.0142 8452 iirsp - ok 19:43:30.0167 8452 IKEEXT (0c9ea6e654e7b0471741e343a6c671af) C:\Windows\System32\ikeext.dll 19:43:30.0228 8452 IKEEXT - ok 19:43:30.0286 8452 IntcAzAudAddService (0dd17d4b59d0ec40e3c86a505bb0b6dd) C:\Windows\system32\drivers\RTKVHD64.sys 19:43:30.0356 8452 IntcAzAudAddService - ok 19:43:30.0374 8452 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys 19:43:30.0392 8452 intelide - ok 19:43:30.0399 8452 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys 19:43:30.0442 8452 intelppm - ok 19:43:30.0472 8452 IPBusEnum (5624bc1bc5eeb49c0ab76a8114f05ea3) C:\Windows\system32\ipbusenum.dll 19:43:30.0534 8452 IPBusEnum - ok 19:43:30.0542 8452 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys 19:43:30.0582 8452 IpFilterDriver - ok 19:43:30.0608 8452 iphlpsvc (bf0dbfa9792c5c14fa00f61c75116c1b) C:\Windows\System32\iphlpsvc.dll 19:43:30.0647 8452 iphlpsvc - ok 19:43:30.0654 8452 IpInIp - ok 19:43:30.0664 8452 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys 19:43:30.0706 8452 IPMIDRV - ok 19:43:30.0714 8452 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys 19:43:30.0756 8452 IPNAT - ok 19:43:30.0763 8452 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys 19:43:30.0803 8452 IRENUM - ok 19:43:30.0821 8452 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys 19:43:30.0840 8452 isapnp - ok 19:43:30.0867 8452 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys 19:43:30.0894 8452 iScsiPrt - ok 19:43:30.0912 8452 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys 19:43:30.0930 8452 iteatapi - ok 19:43:30.0946 8452 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys 19:43:30.0967 8452 iteraid - ok 19:43:30.0981 8452 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys 19:43:31.0003 8452 kbdclass - ok 19:43:31.0026 8452 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys 19:43:31.0068 8452 kbdhid - ok 19:43:31.0099 8452 KeyIso (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe 19:43:31.0157 8452 KeyIso - ok 19:43:31.0175 8452 KSecDD (2758d174604f597bbc8a217ff667913d) C:\Windows\system32\Drivers\ksecdd.sys 19:43:31.0233 8452 KSecDD - ok 19:43:31.0254 8452 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys 19:43:31.0301 8452 ksthunk - ok 19:43:31.0332 8452 KtmRm (1faf6926f3416d3da05c5b265491bdae) C:\Windows\system32\msdtckrm.dll 19:43:31.0417 8452 KtmRm - ok 19:43:31.0441 8452 LanmanServer (50c7a3cb427e9bb5ed0708a669956ab5) C:\Windows\system32\srvsvc.dll 19:43:31.0497 8452 LanmanServer - ok 19:43:31.0527 8452 LanmanWorkstation (caf86fc1388be1e470f1a7b43e348adb) C:\Windows\System32\wkssvc.dll 19:43:31.0586 8452 LanmanWorkstation - ok 19:43:31.0666 8452 LBTServ (19eff704cd16dd0429e128431f1dd631) C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe 19:43:31.0813 8452 LBTServ - ok 19:43:31.0862 8452 LHidFilt (1074c77a47835e03c15bf92452f9a750) C:\Windows\system32\DRIVERS\LHidFilt.Sys 19:43:31.0895 8452 LHidFilt - ok 19:43:31.0911 8452 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys 19:43:31.0995 8452 lltdio - ok 19:43:32.0019 8452 lltdsvc (961ccbd0b1ccb5675d64976fae37d092) C:\Windows\System32\lltdsvc.dll 19:43:32.0089 8452 lltdsvc - ok 19:43:32.0101 8452 lmhosts (a47f8080cacc23c91fe823ad19aa5612) C:\Windows\System32\lmhsvc.dll 19:43:32.0154 8452 lmhosts - ok 19:43:32.0172 8452 LMouFilt (96999c364c649e2866a268f7420a304a) C:\Windows\system32\DRIVERS\LMouFilt.Sys 19:43:32.0191 8452 LMouFilt - ok 19:43:32.0208 8452 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys 19:43:32.0229 8452 LSI_FC - ok 19:43:32.0241 8452 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys 19:43:32.0261 8452 LSI_SAS - ok 19:43:32.0279 8452 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys 19:43:32.0299 8452 LSI_SCSI - ok 19:43:32.0317 8452 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys 19:43:32.0370 8452 luafv - ok 19:43:32.0390 8452 LUsbFilt (11ddb1d900078fbe3691df7b878aec28) C:\Windows\system32\Drivers\LUsbFilt.Sys 19:43:32.0408 8452 LUsbFilt - ok 19:43:32.0457 8452 LVcKap64 (3c7a54ae999841f30e4648e0de9e4b46) C:\Windows\system32\DRIVERS\LVcKap64.sys 19:43:32.0510 8452 LVcKap64 - ok 19:43:32.0558 8452 LVMVDrv (d621d1c9650a5add39c64047fcf860a5) C:\Windows\system32\DRIVERS\LVMVDrv.sys 19:43:32.0654 8452 LVMVDrv - ok 19:43:32.0680 8452 LVPr2Mon (e379cb87bf2dc0787d825d4cb91c27a8) C:\Windows\system32\DRIVERS\LVPr2Mon.sys 19:43:32.0703 8452 LVPr2Mon - ok 19:43:32.0722 8452 LVPrcS64 (df8b20bbec546d94cecf75c48a596aec) c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe 19:43:32.0851 8452 LVPrcS64 - ok 19:43:32.0871 8452 LVSrvLauncher (65e0ec0338c9ade32d044a8cc18c147b) C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe 19:43:32.0970 8452 LVSrvLauncher - ok 19:43:32.0979 8452 LVUSBS64 (9761370ffb533cf6e4a7176f4baa3ba9) C:\Windows\system32\drivers\LVUSBS64.sys 19:43:33.0000 8452 LVUSBS64 - ok 19:43:33.0027 8452 MBAMProtector (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys 19:43:33.0044 8452 MBAMProtector - ok 19:43:33.0072 8452 MBAMService (056b19651bd7b7ce5f89a3ac46dbdc08) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 19:43:33.0164 8452 MBAMService - ok 19:43:33.0179 8452 Mcx2Svc (76a58df02bd4ea29f189b82d0bef17f8) C:\Windows\system32\Mcx2Svc.dll 19:43:33.0224 8452 Mcx2Svc - ok 19:43:33.0247 8452 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys 19:43:33.0268 8452 megasas - ok 19:43:33.0281 8452 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys 19:43:33.0317 8452 MegaSR - ok 19:43:33.0357 8452 Microsoft SharePoint Workspace Audit Service - ok 19:43:33.0371 8452 MMCSS (3cbe4995e80e13ccfbc42e5dcf3ac81a) C:\Windows\system32\mmcss.dll 19:43:33.0436 8452 MMCSS - ok 19:43:33.0455 8452 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys 19:43:33.0502 8452 Modem - ok 19:43:33.0516 8452 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys 19:43:33.0570 8452 monitor - ok 19:43:33.0606 8452 motccgp (c94a2ea3fdfa5d650884926b710b7db1) C:\Windows\system32\DRIVERS\motccgp.sys 19:43:33.0642 8452 motccgp - ok 19:43:33.0658 8452 motccgpfl (d51e009baeda07ebc107d49d224c2414) C:\Windows\system32\DRIVERS\motccgpfl.sys 19:43:33.0693 8452 motccgpfl - ok 19:43:33.0722 8452 motmodem (060f0ef84f430802df3788f3dcfd009c) C:\Windows\system32\DRIVERS\motmodem.sys 19:43:33.0752 8452 motmodem - ok 19:43:33.0766 8452 MotoSwitchService (ebd05f60cafc5bba2602b8d7101082d3) C:\Windows\system32\DRIVERS\motswch.sys 19:43:33.0795 8452 MotoSwitchService - ok 19:43:33.0804 8452 Motousbnet (87701078c3f720ac7a028e937994cc49) C:\Windows\system32\DRIVERS\Motousbnet.sys 19:43:33.0841 8452 Motousbnet - ok 19:43:33.0871 8452 motusbdevice (4244e427cda5f6485e74461b5b48a7b6) C:\Windows\system32\DRIVERS\motusbdevice.sys 19:43:33.0927 8452 motusbdevice - ok 19:43:33.0949 8452 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys 19:43:33.0972 8452 mouclass - ok 19:43:33.0995 8452 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys 19:43:34.0046 8452 mouhid - ok 19:43:34.0055 8452 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys 19:43:34.0076 8452 MountMgr - ok 19:43:34.0108 8452 MpFilter (c177a7ebf5e8a0b596f618870516cab8) C:\Windows\system32\DRIVERS\MpFilter.sys 19:43:34.0135 8452 MpFilter - ok 19:43:34.0150 8452 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys 19:43:34.0170 8452 mpio - ok 19:43:34.0186 8452 MpNWMon (8fbf6b31fe8af1833d93c5913d5b4d55) C:\Windows\system32\DRIVERS\MpNWMon.sys 19:43:34.0207 8452 MpNWMon - ok 19:43:34.0220 8452 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys 19:43:34.0259 8452 mpsdrv - ok 19:43:34.0298 8452 MpsSvc (897e3baf68ba406a61682ae39c83900c) C:\Windows\system32\mpssvc.dll 19:43:34.0359 8452 MpsSvc - ok 19:43:34.0371 8452 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys 19:43:34.0391 8452 Mraid35x - ok 19:43:34.0418 8452 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys 19:43:34.0448 8452 MRxDAV - ok 19:43:34.0479 8452 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys 19:43:34.0515 8452 mrxsmb - ok 19:43:34.0537 8452 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys 19:43:34.0577 8452 mrxsmb10 - ok 19:43:34.0588 8452 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys 19:43:34.0625 8452 mrxsmb20 - ok 19:43:34.0641 8452 msahci (730b784962d22d2c6481eae2370e7c8c) C:\Windows\system32\drivers\msahci.sys 19:43:34.0659 8452 msahci - ok 19:43:34.0698 8452 MSCamSvc (41fb1d61df09c36ccab0b04eec66f6d5) C:\Program Files\Microsoft LifeCam\MSCamS64.exe 19:43:34.0752 8452 MSCamSvc - ok 19:43:34.0777 8452 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys 19:43:34.0799 8452 msdsm - ok 19:43:34.0835 8452 MSDTC (7ec02ce772f068ed0beafa3da341a9bc) C:\Windows\System32\msdtc.exe 19:43:34.0886 8452 MSDTC - ok 19:43:34.0912 8452 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys 19:43:34.0957 8452 Msfs - ok 19:43:34.0983 8452 MSHUSBVideo (bb590070d606ae6f008341fc9a7b2ad7) C:\Windows\system32\Drivers\nx6000.sys 19:43:35.0007 8452 MSHUSBVideo - ok 19:43:35.0020 8452 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys 19:43:35.0041 8452 msisadrv - ok 19:43:35.0068 8452 MSiSCSI (366b0c1f4478b519c181e37d43dcda32) C:\Windows\system32\iscsiexe.dll 19:43:35.0130 8452 MSiSCSI - ok 19:43:35.0140 8452 msiserver - ok 19:43:35.0152 8452 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys 19:43:35.0190 8452 MSKSSRV - ok 19:43:35.0236 8452 MsMpSvc (157e9e498206a3366baa7e4697bdd947) c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe 19:43:35.0256 8452 MsMpSvc - ok 19:43:35.0273 8452 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys 19:43:35.0321 8452 MSPCLOCK - ok 19:43:35.0335 8452 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys 19:43:35.0373 8452 MSPQM - ok 19:43:35.0397 8452 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys 19:43:35.0427 8452 MsRPC - ok 19:43:35.0442 8452 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys 19:43:35.0462 8452 mssmbios - ok 19:43:35.0473 8452 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys 19:43:35.0511 8452 MSTEE - ok 19:43:35.0531 8452 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys 19:43:35.0551 8452 Mup - ok 19:43:35.0582 8452 napagent (a5b10c845e7538c60c0f5d87a57cb3f5) C:\Windows\system32\qagentRT.dll 19:43:35.0636 8452 napagent - ok 19:43:35.0667 8452 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys 19:43:35.0700 8452 NativeWifiP - ok 19:43:35.0744 8452 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys 19:43:35.0797 8452 NDIS - ok 19:43:35.0811 8452 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys 19:43:35.0867 8452 NdisTapi - ok 19:43:35.0883 8452 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys 19:43:35.0940 8452 Ndisuio - ok 19:43:35.0956 8452 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys 19:43:35.0991 8452 NdisWan - ok 19:43:36.0007 8452 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys 19:43:36.0046 8452 NDProxy - ok 19:43:36.0060 8452 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys 19:43:36.0099 8452 NetBIOS - ok 19:43:36.0128 8452 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys 19:43:36.0167 8452 netbt - ok 19:43:36.0182 8452 Netlogon (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe 19:43:36.0213 8452 Netlogon - ok 19:43:36.0244 8452 Netman (9b63b29defc0f3115a559d2597bf5d75) C:\Windows\System32\netman.dll 19:43:36.0312 8452 Netman - ok 19:43:36.0363 8452 NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 19:43:36.0390 8452 NetMsmqActivator - ok 19:43:36.0395 8452 NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 19:43:36.0421 8452 NetPipeActivator - ok 19:43:36.0439 8452 netprofm (7846d0136cc2b264926a73047ba7688a) C:\Windows\System32\netprofm.dll 19:43:36.0504 8452 netprofm - ok 19:43:36.0517 8452 NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 19:43:36.0546 8452 NetTcpActivator - ok 19:43:36.0551 8452 NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 19:43:36.0579 8452 NetTcpPortSharing - ok 19:43:36.0594 8452 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys 19:43:36.0611 8452 nfrd960 - ok 19:43:36.0645 8452 NisDrv (5f7d72cbcdd025af1f38fdeee5646968) C:\Windows\system32\DRIVERS\NisDrvWFP.sys 19:43:36.0664 8452 NisDrv - ok 19:43:36.0715 8452 NisSrv (566ddd5d82520da01d75f81428ac4c38) c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe 19:43:36.0760 8452 NisSrv - ok 19:43:36.0780 8452 NlaSvc (f145bf4c4668e7e312069f81ef847cfc) C:\Windows\System32\nlasvc.dll 19:43:36.0851 8452 NlaSvc - ok 19:43:36.0871 8452 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys 19:43:36.0910 8452 Npfs - ok 19:43:36.0921 8452 nsi (acb62baa1c319b17752553df3026eeeb) C:\Windows\system32\nsisvc.dll 19:43:36.0987 8452 nsi - ok 19:43:36.0996 8452 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys 19:43:37.0041 8452 nsiproxy - ok 19:43:37.0082 8452 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys 19:43:37.0144 8452 Ntfs - ok 19:43:37.0159 8452 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys 19:43:37.0202 8452 Null - ok 19:43:37.0219 8452 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys 19:43:37.0242 8452 nvraid - ok 19:43:37.0257 8452 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys 19:43:37.0276 8452 nvstor - ok 19:43:37.0288 8452 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys 19:43:37.0313 8452 nv_agp - ok 19:43:37.0320 8452 NwlnkFlt - ok 19:43:37.0330 8452 NwlnkFwd - ok 19:43:37.0359 8452 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys 19:43:37.0399 8452 ohci1394 - ok 19:43:37.0436 8452 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 19:43:37.0510 8452 ose - ok 19:43:37.0611 8452 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 19:43:37.0950 8452 osppsvc - ok 19:43:37.0989 8452 p2pimsvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll 19:43:38.0058 8452 p2pimsvc - ok 19:43:38.0080 8452 p2psvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll 19:43:38.0136 8452 p2psvc - ok 19:43:38.0153 8452 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys 19:43:38.0222 8452 Parport - ok 19:43:38.0238 8452 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys 19:43:38.0264 8452 partmgr - ok 19:43:38.0283 8452 PcaSvc (9ab157b374192ff276c1628fbdba2b0e) C:\Windows\System32\pcasvc.dll 19:43:38.0346 8452 PcaSvc - ok 19:43:38.0368 8452 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys 19:43:38.0399 8452 pci - ok 19:43:38.0414 8452 pciide (2657f6c0b78c36d95034be109336e382) C:\Windows\system32\drivers\pciide.sys 19:43:38.0437 8452 pciide - ok 19:43:38.0458 8452 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys 19:43:38.0495 8452 pcmcia - ok 19:43:38.0520 8452 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys 19:43:38.0665 8452 PEAUTH - ok 19:43:38.0708 8452 PerfHost (0ed8727ea0172860f47258456c06caea) C:\Windows\SysWow64\perfhost.exe 19:43:38.0781 8452 PerfHost - ok 19:43:38.0837 8452 pla (e9e68c1a0f25cf4a7ac966eea74ee89e) C:\Windows\system32\pla.dll 19:43:38.0939 8452 pla - ok 19:43:38.0956 8452 PlugPlay (fe6b0f59215c9fd9f9d26539c58c8b82) C:\Windows\system32\umpnpmgr.dll 19:43:39.0032 8452 PlugPlay - ok 19:43:39.0049 8452 PNRPAutoReg (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll 19:43:39.0094 8452 PNRPAutoReg - ok 19:43:39.0107 8452 PNRPsvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll 19:43:39.0153 8452 PNRPsvc - ok 19:43:39.0180 8452 PolicyAgent (89a5560671c2d8b4a4b51f3e1aa069d8) C:\Windows\System32\ipsecsvc.dll 19:43:39.0232 8452 PolicyAgent - ok 19:43:39.0263 8452 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys 19:43:39.0305 8452 PptpMiniport - ok 19:43:39.0321 8452 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys 19:43:39.0359 8452 Processor - ok 19:43:39.0387 8452 ProfSvc (e058ce4fc2449d8bfa14739c83b7ff2a) C:\Windows\system32\profsvc.dll 19:43:39.0433 8452 ProfSvc - ok 19:43:39.0449 8452 ProtectedStorage (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe 19:43:39.0481 8452 ProtectedStorage - ok 19:43:39.0515 8452 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys 19:43:39.0552 8452 PSched - ok 19:43:39.0587 8452 PSMounter (838e03c9da764467edd9b99d1efb809c) C:\Windows\system32\drivers\psmounter.sys 19:43:39.0618 8452 PSMounter - ok 19:43:39.0656 8452 PSVolAcc (f428cb5ecb3f2cc77e13764b34a0871a) C:\Windows\system32\drivers\PSVolAcc.sys 19:43:39.0691 8452 PSVolAcc - ok 19:43:39.0743 8452 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys 19:43:39.0797 8452 ql2300 - ok 19:43:39.0814 8452 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys 19:43:39.0838 8452 ql40xx - ok 19:43:39.0862 8452 QWAVE (90574842c3da781e279061a3eff91f07) C:\Windows\system32\qwave.dll 19:43:39.0932 8452 QWAVE - ok 19:43:39.0951 8452 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys 19:43:39.0986 8452 QWAVEdrv - ok 19:43:40.0040 8452 R300 (2a09a6b271d1f50adf5e33b37d460de6) C:\Windows\system32\DRIVERS\atikmdag.sys 19:43:40.0190 8452 R300 - ok 19:43:40.0198 8452 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys 19:43:40.0242 8452 RasAcd - ok 19:43:40.0266 8452 RasAuto (b2ae18f847d07f0044404ddf7cb04497) C:\Windows\System32\rasauto.dll 19:43:40.0323 8452 RasAuto - ok 19:43:40.0338 8452 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys 19:43:40.0380 8452 Rasl2tp - ok 19:43:40.0397 8452 RasMan (3ad83e4046c43be510de681588acb8af) C:\Windows\System32\rasmans.dll 19:43:40.0448 8452 RasMan - ok 19:43:40.0471 8452 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys 19:43:40.0510 8452 RasPppoe - ok 19:43:40.0538 8452 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys 19:43:40.0580 8452 RasSstp - ok 19:43:40.0593 8452 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys 19:43:40.0639 8452 rdbss - ok 19:43:40.0653 8452 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys 19:43:40.0697 8452 RDPCDD - ok 19:43:40.0718 8452 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys 19:43:40.0778 8452 rdpdr - ok 19:43:40.0789 8452 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys 19:43:40.0833 8452 RDPENCDD - ok 19:43:40.0861 8452 RDPWD (5c141fc457f1ac833664789235aca673) C:\Windows\system32\drivers\RDPWD.sys 19:43:40.0927 8452 RDPWD - ok 19:43:40.0984 8452 ReflectService (be9861e1a18e01c38338feacd75c5ead) C:\Program Files\Macrium\Reflect\ReflectService.exe 19:43:41.0075 8452 ReflectService - ok 19:43:41.0097 8452 RemoteAccess (c612b9557da73f70d41f8a6fbc8e5344) C:\Windows\System32\mprdim.dll 19:43:41.0173 8452 RemoteAccess - ok 19:43:41.0204 8452 RemoteRegistry (44b9d8ec2f3ef3a0efb00857af70d861) C:\Windows\system32\regsvc.dll 19:43:41.0272 8452 RemoteRegistry - ok 19:43:41.0290 8452 RimUsb - ok 19:43:41.0319 8452 RimVSerPort (c903d49655b4aae46673f0aaa6be0f58) C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys 19:43:41.0355 8452 RimVSerPort - ok 19:43:41.0373 8452 ROOTMODEM (6a0cf73b019cbc9255e23c9192ec3702) C:\Windows\system32\Drivers\RootMdm.sys 19:43:41.0444 8452 ROOTMODEM - ok 19:43:41.0467 8452 RpcLocator (f46c457840d4b7a4daafee739ce04102) C:\Windows\system32\locator.exe 19:43:41.0503 8452 RpcLocator - ok 19:43:41.0525 8452 RpcSs (cf8b9a3a5e7dc57724a89d0c3e8cf9ef) C:\Windows\system32\rpcss.dll 19:43:41.0585 8452 RpcSs - ok 19:43:41.0598 8452 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys 19:43:41.0639 8452 rspndr - ok 19:43:41.0669 8452 RTL8169 (b263b3aebcde2210d1cc25756601b8ea) C:\Windows\system32\DRIVERS\Rtlh64.sys 19:43:41.0694 8452 RTL8169 - ok 19:43:41.0724 8452 SamSs (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe 19:43:41.0756 8452 SamSs - ok 19:43:41.0807 8452 SASDIFSV (3289766038db2cb14d07dc84392138d5) C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS 19:43:41.0827 8452 SASDIFSV - ok 19:43:41.0838 8452 SASKUTIL (58a38e75f3316a83c23df6173d41f2b5) C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS 19:43:41.0857 8452 SASKUTIL - ok 19:43:41.0871 8452 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys 19:43:41.0894 8452 sbp2port - ok 19:43:41.0908 8452 SCardSvr (fd1cdcf108d5ef3366f00d18b70fb89b) C:\Windows\System32\SCardSvr.dll 19:43:41.0972 8452 SCardSvr - ok 19:43:42.0001 8452 Schedule (0f838c811ad295d2a4489b9993096c63) C:\Windows\system32\schedsvc.dll 19:43:42.0099 8452 Schedule - ok 19:43:42.0121 8452 SCPolicySvc (5a268127633c7ee2a7fb87f39d748d56) C:\Windows\System32\certprop.dll 19:43:42.0180 8452 SCPolicySvc - ok 19:43:42.0195 8452 SDRSVC (4ff71b076a7760fe75ea5ae2d0ee0018) C:\Windows\System32\SDRSVC.dll 19:43:42.0261 8452 SDRSVC - ok 19:43:42.0280 8452 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 19:43:42.0352 8452 secdrv - ok 19:43:42.0368 8452 seclogon (5acdcbc67fcf894a1815b9f96d704490) C:\Windows\system32\seclogon.dll 19:43:42.0424 8452 seclogon - ok 19:43:42.0437 8452 SENS (90973a64b96cd647ff81c79443618eed) C:\Windows\System32\sens.dll 19:43:42.0486 8452 SENS - ok 19:43:42.0498 8452 Serenum (f71bfe7ac6c52273b7c82cbf1bb2a222) C:\Windows\system32\drivers\serenum.sys 19:43:42.0558 8452 Serenum - ok 19:43:42.0570 8452 Serial (e62fac91ee288db29a9696a9d279929c) C:\Windows\system32\drivers\serial.sys 19:43:42.0625 8452 Serial - ok 19:43:42.0644 8452 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys 19:43:42.0682 8452 sermouse - ok 19:43:42.0703 8452 SessionEnv (a8e4a4407a09f35dccc3771af590b0c4) C:\Windows\system32\sessenv.dll 19:43:42.0761 8452 SessionEnv - ok 19:43:42.0779 8452 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys 19:43:42.0822 8452 sffdisk - ok 19:43:42.0834 8452 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys 19:43:42.0872 8452 sffp_mmc - ok 19:43:42.0889 8452 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys 19:43:42.0927 8452 sffp_sd - ok 19:43:42.0954 8452 sfloppy (40567781f0785c4a69411d1b40da8987) C:\Windows\system32\DRIVERS\sfloppy.sys 19:43:42.0992 8452 sfloppy - ok 19:43:43.0019 8452 SharedAccess (4c5aee179da7e1ee9a9ccb9da289af34) C:\Windows\System32\ipnathlp.dll 19:43:43.0084 8452 SharedAccess - ok 19:43:43.0119 8452 ShellHWDetection (56793271ecdedd350c5add305603e963) C:\Windows\System32\shsvcs.dll 19:43:43.0164 8452 ShellHWDetection - ok 19:43:43.0233 8452 ShowAnalyzerMaster (4466855e197294959fd2cd4bbb7ce405) C:\Program Files (x86)\Dragon Global\ShowAnalyzerSuite\ShowAnalyzerMaster.exe 19:44:03.0007 8452 ShowAnalyzerMaster ( UnsignedFile.Multi.Generic ) - warning 19:44:03.0007 8452 ShowAnalyzerMaster - detected UnsignedFile.Multi.Generic (1) 19:44:03.0044 8452 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys 19:44:03.0062 8452 SiSRaid2 - ok 19:44:03.0073 8452 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys 19:44:03.0093 8452 SiSRaid4 - ok 19:44:03.0152 8452 slsvc (a9a27a8e257b45a604fdad4f26fe7241) C:\Windows\system32\SLsvc.exe 19:44:03.0277 8452 slsvc - ok 19:44:03.0310 8452 SLUINotify (fd74b4b7c2088e390a30c85a896fc3af) C:\Windows\system32\SLUINotify.dll 19:44:03.0364 8452 SLUINotify - ok 19:44:03.0383 8452 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys 19:44:03.0426 8452 Smb - ok 19:44:03.0453 8452 SNMPTRAP (f8f47f38909823b1af28d60b96340cff) C:\Windows\System32\snmptrap.exe 19:44:03.0491 8452 SNMPTRAP - ok 19:44:03.0517 8452 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys 19:44:03.0536 8452 spldr - ok 19:44:03.0572 8452 Spooler (f66ff751e7efc816d266977939ef5dc3) C:\Windows\System32\spoolsv.exe 19:44:03.0618 8452 Spooler - ok 19:44:03.0653 8452 SQTECH9052 (c452e091e1c0cdecd0d16402632781e2) C:\Windows\system32\Drivers\Capt9052.sys 19:44:03.0692 8452 SQTECH9052 - ok 19:44:03.0704 8452 SQTECH905C (cf058a6b628ba385caf54dca9c68c22b) C:\Windows\system32\Drivers\Capt905c.sys 19:44:03.0745 8452 SQTECH905C - ok 19:44:03.0769 8452 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys 19:44:03.0820 8452 srv - ok 19:44:03.0838 8452 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys 19:44:03.0894 8452 srv2 - ok 19:44:03.0913 8452 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys 19:44:03.0953 8452 srvnet - ok 19:44:03.0987 8452 SSDPSRV (192c74646ec5725aef3f80d19ff75f6a) C:\Windows\System32\ssdpsrv.dll 19:44:04.0058 8452 SSDPSRV - ok 19:44:04.0089 8452 SstpSvc (2ee3fa0308e6185ba64a9a7f2e74332b) C:\Windows\system32\sstpsvc.dll 19:44:04.0145 8452 SstpSvc - ok 19:44:04.0166 8452 stisvc (15825c1fbfb8779992cb65087f316af5) C:\Windows\System32\wiaservc.dll 19:44:04.0220 8452 stisvc - ok 19:44:04.0235 8452 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys 19:44:04.0257 8452 swenum - ok 19:44:04.0285 8452 swprv (6de37f4de19d4efd9c48c43addbc949a) C:\Windows\System32\swprv.dll 19:44:04.0344 8452 swprv - ok 19:44:04.0363 8452 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys 19:44:04.0380 8452 Symc8xx - ok 19:44:04.0390 8452 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys 19:44:04.0407 8452 Sym_hi - ok 19:44:04.0420 8452 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys 19:44:04.0437 8452 Sym_u3 - ok 19:44:04.0473 8452 SysMain (92d7a8b0f87b036f17d25885937897a6) C:\Windows\system32\sysmain.dll 19:44:04.0544 8452 SysMain - ok 19:44:04.0557 8452 TabletInputService (005ce42567f9113a3bccb3b20073b029) C:\Windows\System32\TabSvc.dll 19:44:04.0610 8452 TabletInputService - ok 19:44:04.0641 8452 TapiSrv (cc2562b4d55e0b6a4758c65407f63b79) C:\Windows\System32\tapisrv.dll 19:44:04.0708 8452 TapiSrv - ok 19:44:04.0737 8452 TBS (cdbe8d7c1e201b911cdc346d06617fb5) C:\Windows\System32\tbssvc.dll 19:44:04.0796 8452 TBS - ok 19:44:04.0843 8452 Tcpip (73bed5067ed53a9df05fa8eab42578d0) C:\Windows\system32\drivers\tcpip.sys 19:44:04.0927 8452 Tcpip - ok 19:44:04.0958 8452 Tcpip6 (73bed5067ed53a9df05fa8eab42578d0) C:\Windows\system32\DRIVERS\tcpip.sys 19:44:05.0036 8452 Tcpip6 - ok 19:44:05.0059 8452 tcpipreg (848f87c604b5e674602498cb51067db6) C:\Windows\system32\drivers\tcpipreg.sys 19:44:05.0092 8452 tcpipreg - ok 19:44:05.0105 8452 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys 19:44:05.0144 8452 TDPIPE - ok 19:44:05.0158 8452 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys 19:44:05.0204 8452 TDTCP - ok 19:44:05.0217 8452 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys 19:44:05.0262 8452 tdx - ok 19:44:05.0288 8452 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys 19:44:05.0310 8452 TermDD - ok 19:44:05.0329 8452 TermService (5cdd30bc217082dac71a9878d9bfd566) C:\Windows\System32\termsrv.dll 19:44:05.0458 8452 TermService - ok 19:44:05.0486 8452 Themes (56793271ecdedd350c5add305603e963) C:\Windows\system32\shsvcs.dll 19:44:05.0527 8452 Themes - ok 19:44:05.0554 8452 THREADORDER (3cbe4995e80e13ccfbc42e5dcf3ac81a) C:\Windows\system32\mmcss.dll 19:44:05.0608 8452 THREADORDER - ok 19:44:05.0643 8452 tifsfilter (3e24b7fe52bc455da8d6e2cc2b4ca23f) C:\Windows\system32\DRIVERS\tifsfilt.sys 19:44:05.0669 8452 tifsfilter - ok 19:44:05.0707 8452 timounter (ec4fd4d147985a97e881729e808e6f34) C:\Windows\system32\DRIVERS\timntr.sys 19:44:05.0750 8452 timounter - ok 19:44:05.0769 8452 TrkWks (f4689f05af472a651a7b1b7b02d200e7) C:\Windows\System32\trkwks.dll 19:44:05.0842 8452 TrkWks - ok 19:44:05.0870 8452 TrustedInstaller (66328b08ef5a9305d8ede36b93930369) C:\Windows\servicing\TrustedInstaller.exe 19:44:05.0916 8452 TrustedInstaller - ok 19:44:05.0932 8452 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys 19:44:05.0971 8452 tssecsrv - ok 19:44:05.0988 8452 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys 19:44:06.0020 8452 tunmp - ok 19:44:06.0041 8452 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys 19:44:06.0065 8452 tunnel - ok 19:44:06.0079 8452 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys 19:44:06.0098 8452 uagp35 - ok 19:44:06.0128 8452 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys 19:44:06.0173 8452 udfs - ok 19:44:06.0191 8452 UI0Detect (060507c4113391394478f6953a79eedc) C:\Windows\system32\UI0Detect.exe 19:44:06.0257 8452 UI0Detect - ok 19:44:06.0277 8452 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys 19:44:06.0297 8452 uliagpkx - ok 19:44:06.0314 8452 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys 19:44:06.0336 8452 uliahci - ok 19:44:06.0352 8452 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys 19:44:06.0373 8452 UlSata - ok 19:44:06.0391 8452 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys 19:44:06.0414 8452 ulsata2 - ok 19:44:06.0430 8452 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys 19:44:06.0469 8452 umbus - ok 19:44:06.0496 8452 UMPass (01abe05c401e70795b43a8933b44831e) C:\Windows\system32\DRIVERS\umpass.sys 19:44:06.0542 8452 UMPass - ok 19:44:06.0561 8452 upnphost (7093799ff80e9deca0680d2e3535be60) C:\Windows\System32\upnphost.dll 19:44:06.0627 8452 upnphost - ok 19:44:06.0644 8452 usbaudio (c6ba890de6e41857fbe84175519cae7d) C:\Windows\system32\drivers\usbaudio.sys 19:44:06.0682 8452 usbaudio - ok 19:44:06.0707 8452 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys 19:44:06.0739 8452 usbccgp - ok 19:44:06.0749 8452 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys 19:44:06.0810 8452 usbcir - ok 19:44:06.0835 8452 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys 19:44:06.0872 8452 usbehci - ok 19:44:06.0889 8452 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys 19:44:06.0936 8452 usbhub - ok 19:44:06.0955 8452 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys 19:44:07.0007 8452 usbohci - ok 19:44:07.0031 8452 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys 19:44:07.0069 8452 usbprint - ok 19:44:07.0103 8452 usbscan (ea0bf666868964fbe8cb10e50c97b9f1) C:\Windows\system32\DRIVERS\usbscan.sys 19:44:07.0132 8452 usbscan - ok 19:44:07.0154 8452 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS 19:44:07.0188 8452 USBSTOR - ok 19:44:07.0202 8452 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys 19:44:07.0232 8452 usbuhci - ok 19:44:07.0262 8452 usbvideo (fc33099877790d51b0927b7039059855) C:\Windows\system32\Drivers\usbvideo.sys 19:44:07.0305 8452 usbvideo - ok 19:44:07.0326 8452 UxSms (d76e231e4850bb3f88a3d9a78df191e3) C:\Windows\System32\uxsms.dll 19:44:07.0370 8452 UxSms - ok 19:44:07.0404 8452 vds (294945381dfa7ce58cecf0a9896af327) C:\Windows\System32\vds.exe 19:44:07.0481 8452 vds - ok 19:44:07.0515 8452 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys 19:44:07.0559 8452 vga - ok 19:44:07.0580 8452 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys 19:44:07.0621 8452 VgaSave - ok 19:44:07.0641 8452 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys 19:44:07.0662 8452 viaide - ok 19:44:07.0676 8452 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys 19:44:07.0703 8452 volmgr - ok 19:44:07.0738 8452 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys 19:44:07.0773 8452 volmgrx - ok 19:44:07.0798 8452 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys 19:44:07.0828 8452 volsnap - ok 19:44:07.0850 8452 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys 19:44:07.0873 8452 vsmraid - ok 19:44:07.0910 8452 VSS (b75232dad33bfd95bf6f0a3e6bff51e1) C:\Windows\system32\vssvc.exe 19:44:08.0006 8452 VSS - ok 19:44:08.0033 8452 W32Time (f14a7de2ea41883e250892e1e5230a9a) C:\Windows\system32\w32time.dll 19:44:08.0097 8452 W32Time - ok 19:44:08.0128 8452 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys 19:44:08.0195 8452 WacomPen - ok 19:44:08.0214 8452 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys 19:44:08.0266 8452 Wanarp - ok 19:44:08.0273 8452 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys 19:44:08.0313 8452 Wanarpv6 - ok 19:44:08.0342 8452 wanatw (eceb715bece47e101ddec06b11126066) C:\Windows\system32\DRIVERS\wanatw64.sys 19:44:08.0373 8452 wanatw - ok 19:44:08.0408 8452 wcncsvc (b4e4c37d0aa6100090a53213ee2bf1c1) C:\Windows\System32\wcncsvc.dll 19:44:08.0494 8452 wcncsvc - ok 19:44:08.0519 8452 WcsPlugInService (ea4b369560e986f19d93f45a881484ac) C:\Windows\System32\WcsPlugInService.dll 19:44:08.0578 8452 WcsPlugInService - ok 19:44:08.0597 8452 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys 19:44:08.0616 8452 Wd - ok 19:44:08.0654 8452 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 19:44:08.0691 8452 Wdf01000 - ok 19:44:08.0703 8452 WdiServiceHost (c5efda73ebfca8b02a094898de0a9276) C:\Windows\system32\wdi.dll 19:44:08.0765 8452 WdiServiceHost - ok 19:44:08.0769 8452 WdiSystemHost (c5efda73ebfca8b02a094898de0a9276) C:\Windows\system32\wdi.dll 19:44:08.0830 8452 WdiSystemHost - ok 19:44:08.0852 8452 WebClient (3e6d05381cf35f75ebb055544a8ed9ac) C:\Windows\System32\webclnt.dll 19:44:08.0916 8452 WebClient - ok 19:44:08.0945 8452 Wecsvc (8d40bc587993f876658bf9fb0f7d3462) C:\Windows\system32\wecsvc.dll 19:44:08.0992 8452 Wecsvc - ok 19:44:09.0021 8452 wercplsupport (9c980351d7e96288ea0c23ae232bd065) C:\Windows\System32\wercplsupport.dll 19:44:09.0073 8452 wercplsupport - ok 19:44:09.0088 8452 WerSvc (66b9ecebc46683f47edc06333c075fef) C:\Windows\System32\WerSvc.dll 19:44:09.0153 8452 WerSvc - ok 19:44:09.0159 8452 WinDefend - ok 19:44:09.0171 8452 WinHttpAutoProxySvc - ok 19:44:09.0272 8452 Winmgmt (d2e7296ed1bd26d8db2799770c077a02) C:\Windows\system32\wbem\WMIsvc.dll 19:44:09.0327 8452 Winmgmt - ok 19:44:09.0376 8452 WinRM (6cbb0c68f13b9c2ec1b16f5fa5e7c869) C:\Windows\system32\WsmSvc.dll 19:44:09.0495 8452 WinRM - ok 19:44:09.0553 8452 WinUSB (7f2f9e48566b2087f2aaad258cb2a8d4) C:\Windows\system32\DRIVERS\WinUSB.sys 19:44:09.0590 8452 WinUSB - ok 19:44:09.0618 8452 Wlansvc (ec339c8115e91baed835957e9a677f16) C:\Windows\System32\wlansvc.dll 19:44:09.0691 8452 Wlansvc - ok 19:44:09.0722 8452 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\drivers\wmiacpi.sys 19:44:09.0766 8452 WmiAcpi - ok 19:44:09.0788 8452 wmiApSrv (21fa389e65a852698b6a1341f36ee02d) C:\Windows\system32\wbem\WmiApSrv.exe 19:44:09.0846 8452 wmiApSrv - ok 19:44:09.0889 8452 WMPNetworkSvc - ok 19:44:09.0945 8452 WMZuneComm (83b6ca03c846fcd47f9883d77d1eb27b) C:\Program Files\Zune\WMZuneComm.exe 19:44:09.0974 8452 WMZuneComm - ok 19:44:09.0990 8452 WPCSvc (cbc156c913f099e6680d1df9307db7a8) C:\Windows\System32\wpcsvc.dll 19:44:10.0039 8452 WPCSvc - ok 19:44:10.0062 8452 WPDBusEnum (490a18b4e4d53dc10879deaa8e8b70d9) C:\Windows\system32\wpdbusenum.dll 19:44:10.0111 8452 WPDBusEnum - ok 19:44:10.0132 8452 WpdUsb (5e2401b3fc1089c90e081291357371a9) C:\Windows\system32\DRIVERS\wpdusb.sys 19:44:10.0155 8452 WpdUsb - ok 19:44:10.0237 8452 WPFFontCache_v0400 (991e2c2cf3bc204c2bb2ee1476149e4e) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe 19:44:10.0292 8452 WPFFontCache_v0400 - ok 19:44:10.0306 8452 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys 19:44:10.0370 8452 ws2ifsl - ok 19:44:10.0398 8452 wscsvc (9ea3e6d0ef7a5c2b9181961052a4b01a) C:\Windows\System32\wscsvc.dll 19:44:10.0443 8452 wscsvc - ok 19:44:10.0451 8452 WSearch - ok 19:44:10.0710 8452 wuauserv (fb3796754fe00f0bdc87a36f164a5f4d) C:\Windows\system32\wuaueng.dll 19:44:10.0862 8452 wuauserv - ok 19:44:10.0916 8452 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys 19:44:10.0953 8452 WudfPf - ok 19:44:10.0989 8452 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys 19:44:11.0023 8452 WUDFRd - ok 19:44:11.0042 8452 wudfsvc (3dcc7bf5afa921b479e622bd999121f3) C:\Windows\System32\WUDFSvc.dll 19:44:11.0089 8452 wudfsvc - ok 19:44:11.0529 8452 ZuneNetworkSvc (67b787c34fb2888d01b130ae007042d8) C:\Program Files\Zune\ZuneNss.exe 19:44:11.0870 8452 ZuneNetworkSvc - ok 19:44:11.0912 8452 ZuneWlanCfgSvc (4d89fc1c20cf655739efac5da81a67bc) C:\Program Files\Zune\ZuneWlanCfgSvc.exe 19:44:11.0969 8452 ZuneWlanCfgSvc - ok 19:44:11.0978 8452 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0 19:44:12.0051 8452 \Device\Harddisk0\DR0 - ok 19:44:12.0070 8452 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk1\DR1 19:44:12.0282 8452 \Device\Harddisk1\DR1 - ok 19:44:12.0751 8452 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk2\DR2 19:44:12.0822 8452 \Device\Harddisk2\DR2 - ok 19:44:12.0827 8452 Boot (0x1200) (fcf3d0c525ca0f4570cb92a3b6a1050f) \Device\Harddisk0\DR0\Partition0 19:44:12.0828 8452 \Device\Harddisk0\DR0\Partition0 - ok 19:44:12.0849 8452 Boot (0x1200) (7220da63e7108ee91c4ec3bcf2073648) \Device\Harddisk1\DR1\Partition0 19:44:12.0851 8452 \Device\Harddisk1\DR1\Partition0 - ok 19:44:12.0856 8452 Boot (0x1200) (9f0b6a15a4555ee87e22317e089a26ae) \Device\Harddisk1\DR1\Partition1 19:44:12.0857 8452 \Device\Harddisk1\DR1\Partition1 - ok 19:44:12.0884 8452 Boot (0x1200) (e1e79fe77fa7a00816652316061aadfa) \Device\Harddisk2\DR2\Partition0 19:44:12.0886 8452 \Device\Harddisk2\DR2\Partition0 - ok 19:44:12.0886 8452 ============================================================ 19:44:12.0886 8452 Scan finished 19:44:12.0886 8452 ============================================================ 19:44:12.0906 8636 Detected object count: 4 19:44:12.0906 8636 Actual detected object count: 4 19:45:18.0794 8636 AuviPCI ( UnsignedFile.Multi.Generic ) - skipped by user 19:45:18.0794 8636 AuviPCI ( UnsignedFile.Multi.Generic ) - User select action: Skip 19:45:18.0797 8636 DockLoginService ( UnsignedFile.Multi.Generic ) - skipped by user 19:45:18.0797 8636 DockLoginService ( UnsignedFile.Multi.Generic ) - User select action: Skip 19:45:18.0799 8636 IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user 19:45:18.0799 8636 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip 19:45:18.0802 8636 ShowAnalyzerMaster ( UnsignedFile.Multi.Generic ) - skipped by user 19:45:18.0802 8636 ShowAnalyzerMaster ( UnsignedFile.Multi.Generic ) - User select action: Skip 19:45:33.0082 8356 Deinitialize success

jeffce

Post #29April 2, 2012, 11:54 AM UTC

Hi Kevin,

I am not seeing anything that is jumping out at me malware related…

Do you have your Windows Vista CD or can you borrow one from a friend? If so, get it out as we may need this during the following steps:

Click on Start, type cmd in the Start Search bar.
Right click on Command Prompt at the top of the window and select Run as Administrator.
In the Command Prompt Window, type (or copy and paste) sfc /scannow and press Enter.

The scan may take some time, so be patient. Windows will repair any corrupted or missing files that it finds. If information from the installation CD is needed to repair the problem, you may be prompted to insert your Windows Vista CD.
———–

Next…

First open an elevated command prompt > Click Start and type cmd in Start Search.
When cmd.exe populates above, right click it and select Run as Administrator to open an elevated command prompt.
Copy/Paste the following text in the code box into the command prompt window and press Enter.

chkdsk /r

In your next reply let me know if you have any problems with the instructions and if not whether or not you are still having the same problems.

kevin_czarnota

Post #30April 2, 2012, 8:47 PM UTC

Jeff I have no idea where my VISA CD would be, Can I run the command in hope of not needing it?

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

System hangs and continual activity light flashing [Closed] [Solved]

✨ Ask AI

Ask AI