Internet Connection has slowed [Solved]

Hello,
In the past I have gotten some great help. I would really appreciate any help that someone could give with my Vista Ultimate 64bit system. Any surfing with Firefox, or IE freezes at regular intervals. This happens on multiple internet connections from different providers. I have included below my HJT Log. Thanks again for any help you can give.
Regards,
elmkd

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 09:44:30 PM, on 27/03/2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files\TrueCrypt\TrueCrypt.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files (x86)\DigitalPersona\Bin\DpAgent.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files (x86)\Hewlett-Packard\Media\TV\TVAgent.exe
C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Marcel\Desktop\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf=cnnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Microsoft Live Search Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll
O4 - HKLM\..\Run: [TSMAgent] "C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe"
O4 - HKLM\..\Run: [CLMLServer for HP TouchSmart] "C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [DpAgent] C:\Program Files (x86)\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] "C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [DVDAgent] "C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe"
O4 - HKLM\..\Run: [TVAgent] "C:\Program Files (x86)\Hewlett-Packard\Media\TV\TVAgent.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Intuit SyncManager] C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe startup
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [TrueCrypt] "C:\Program Files\TrueCrypt\TrueCrypt.exe" /q preferences /a logon
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [RIMDeviceManager] C:\Program Files (x86)\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe" -RunServer
O4 - HKUS\S-1-5-21-2238092807-3030197615-1941950054-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'QBDataServiceUser17')
O4 - HKUS\S-1-5-21-2238092807-3030197615-1941950054-1003\..\Run: [HPADVISOR] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN (User 'QBDataServiceUser17')
O4 - HKUS\S-1-5-21-2238092807-3030197615-1941950054-1004\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'QBDataServiceUser20')
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll/206 (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted IP range: http://208.138.22.10
O16 - DPF: {36299202-09EF-4ABF-ADB9-47C599DBE778} (HP Product Detection Control) - https://www.hpwindows7upgrade.arvato.com/no…PProdDetect.cab
O16 - DPF: {46D8BEE7-0B27-4466-ABA2-A5F1E157971C} (Remote200 Control) - http://208.138.22.10:81/RemoteWeb.cab
O16 - DPF: {5FFDFC21-AE40-4C7C-955C-415A1ACE01C8} (CViewerControl Object) - http://208.138.22.10:81/VideoViewer.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{92D5B0AE-CC61-4EF8-86EC-B658303E79A1}: NameServer = 192.168.1.1
O18 - Protocol: intu-help-qb3 - {C5E479EA-0A65-4B05-8C6C-2FC8CC682EB4} - C:\Program Files (x86)\Intuit\QuickBooks 2010\HelpAsyncPluggableProtocol.dll
O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Symantec pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files (x86)\Symantec\pcAnywhere\awhost32.exe
O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - www.BitComet.com - C:\Program Files (x86)\BitComet\tools\BitCometService.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: @C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~2\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: lxdx_device - Unknown owner - C:\Windows\system32\lxdxcoms.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: QBCFMonitorService - Intuit - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: QuickBooksDB17 - iAnywhere Solutions, Inc. - C:\PROGRA~2\Intuit\QUICKB~1\QBDBMgrN.exe
O23 - Service: QuickBooksDB20 - Intuit, Inc. - C:\PROGRA~2\Intuit\QUICKB~3\QBDBMgrN.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Program Files (x86)\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Audio Service (STacSV) - Unknown owner - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_6ef279c8\STacSV64.exe (file missing)
O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
O23 - Service: TV Task Scheduler (TVTS) (TVSched) - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 14124 bytes

Hi,

Please do the following:

Please download TDSSKiller.zip

• Extract it to your desktop
• Double click TDSSKiller.exe
• when the window opens, click on Change Parameters
• under ”Additional options”, put a check mark in the box next to “Detect TDLFS File System”
• click OK
• Press Start Scan
  
  • If Malicious objects are found then ensure Cure is selected
  • If TDLFS File System is found then ensure Delete is selected
  • Then click Continue > Reboot now
• Copy and paste the log in your next reply
  
  • A copy of the log will be saved automatically to the root of the drive (typically C:\)

NEXT

Refer to the ComboFix User's Guide

• Download ComboFix from one of these locations:
  
  Link 1
  Link 2
  
  * IMPORTANT !!! Place ComboFix.exe on your Desktop
  
• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with ComboFix.
  You can get help on disabling your protection programs here
  
• Double click on ComboFix.exe & follow the prompts.
• Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.
• When finished, it shall produce a log for you. Post that log in your next reply
  
  Note:
  Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
  
  ———————————————————————————————
  
• Ensure your AntiVirus and AntiSpyware applications are re-enabled.
  
  ———————————————————————————————

NOTE: If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.

Thanks for your help. Here are the logs. 17:57:03.0687 2292 TDSS rootkit removing tool [removed] Mar 26 2012 13:40:18 17:57:04.0232 2292 ============================================================ 17:57:04.0232 2292 Current date / time: 2012/03/31 17:57:04.0232 17:57:04.0232 2292 SystemInfo: 17:57:04.0232 2292 17:57:04.0232 2292 OS Version: 6.0.6002 ServicePack: 2.0 17:57:04.0232 2292 Product type: Workstation 17:57:04.0232 2292 ComputerName: COW-FOOT 17:57:04.0233 2292 UserName: Marcel 17:57:04.0233 2292 Windows directory: C:\Windows 17:57:04.0233 2292 System windows directory: C:\Windows 17:57:04.0233 2292 Running under WOW64 17:57:04.0233 2292 Processor architecture: Intel x64 17:57:04.0233 2292 Number of processors: 4 17:57:04.0233 2292 Page size: 0x1000 17:57:04.0233 2292 Boot type: Normal boot 17:57:04.0233 2292 ============================================================ 17:57:05.0492 2292 Drive \Device\Harddisk2\DR2 - Size: 0x1D9C00000 (7.40 Gb), SectorSize: 0x200, Cylinders: 0x3C6, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000048 17:57:05.0503 2292 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 17:57:05.0570 2292 Drive \Device\Harddisk1\DR1 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 17:57:05.0586 2292 Drive \Device\Harddisk2\DR2 - Size: 0x1D9C00000 (7.40 Gb), SectorSize: 0x200, Cylinders: 0x3C6, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 17:57:05.0593 2292 \Device\Harddisk2\DR2: 17:57:05.0593 2292 MBR used 17:57:05.0593 2292 \Device\Harddisk2\DR2\Partition0: MBR, Type 0x7, StartLBA 0x2000, BlocksNum 0xECC000 17:57:05.0593 2292 \Device\Harddisk0\DR0: 17:57:05.0594 2292 MBR used 17:57:05.0594 2292 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1BC43000 17:57:05.0594 2292 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1BC43800, BlocksNum 0x1580800 17:57:05.0594 2292 \Device\Harddisk1\DR1: 17:57:05.0594 2292 MBR used 17:57:05.0594 2292 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1D1C4800 17:57:05.0594 2292 \Device\Harddisk2\DR2: 17:57:05.0595 2292 MBR used 17:57:05.0595 2292 \Device\Harddisk2\DR2\Partition0: MBR, Type 0x7, StartLBA 0x2000, BlocksNum 0xECC000 17:57:05.0691 2292 Initialize success 17:57:05.0691 2292 ============================================================ 17:57:37.0143 6284 ============================================================ 17:57:37.0143 6284 Scan started 17:57:37.0143 6284 Mode: Manual; TDLFS; 17:57:37.0143 6284 ============================================================ 17:57:37.0704 6284 Accelerometer (5c368f4b04ed2a923e6afca2d37baff5) C:\Windows\system32\DRIVERS\Accelerometer.sys 17:57:37.0709 6284 Accelerometer - ok 17:57:37.0752 6284 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys 17:57:37.0767 6284 ACPI - ok 17:57:37.0858 6284 AdobeARMservice (11a52cf7b265631deeb24c6149309eff) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 17:57:37.0859 6284 AdobeARMservice - ok 17:57:37.0920 6284 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys 17:57:37.0955 6284 adp94xx - ok 17:57:37.0971 6284 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys 17:57:37.0997 6284 adpahci - ok 17:57:38.0020 6284 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys 17:57:38.0030 6284 adpu160m - ok 17:57:38.0045 6284 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys 17:57:38.0059 6284 adpu320 - ok 17:57:38.0099 6284 AeLookupSvc (0f421175574bfe0bf2f4d8e910a253bb) C:\Windows\System32\aelupsvc.dll 17:57:38.0100 6284 AeLookupSvc - ok 17:57:38.0144 6284 AFD (c4f6ce6087760ad70960c9eb130e7943) C:\Windows\system32\drivers\afd.sys 17:57:38.0165 6284 AFD - ok 17:57:38.0193 6284 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys 17:57:38.0198 6284 agp440 - ok 17:57:38.0219 6284 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys 17:57:38.0226 6284 aic78xx - ok 17:57:38.0244 6284 ALG (5922f4f59b7868f3d74bbbbeb7b825a3) C:\Windows\System32\alg.exe 17:57:38.0245 6284 ALG - ok 17:57:38.0261 6284 aliide (e0ca5bb8e6c79533dc6b1da7361a201e) C:\Windows\system32\drivers\aliide.sys 17:57:38.0264 6284 aliide - ok 17:57:38.0275 6284 amdide (7034f8d1b9703d711d3f92c95deb377d) C:\Windows\system32\drivers\amdide.sys 17:57:38.0278 6284 amdide - ok 17:57:38.0302 6284 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys 17:57:38.0307 6284 AmdK8 - ok 17:57:38.0392 6284 AntiVirMailService (b0bca3b6a95d02287bb9a48224e39b5a) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe 17:57:38.0400 6284 AntiVirMailService - ok 17:57:38.0473 6284 AntiVirSchedulerService (d2ca88edb24bb59a830eb2d404c1915c) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe 17:57:38.0476 6284 AntiVirSchedulerService - ok 17:57:38.0531 6284 AntiVirService (dbb40b2415e5422c12c9976a1f50e68b) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe 17:57:38.0533 6284 AntiVirService - ok 17:57:38.0587 6284 AntiVirWebService (834070ebf5d387cf22df76ec2e30e899) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE 17:57:38.0595 6284 AntiVirWebService - ok 17:57:38.0644 6284 Appinfo (9c37b3fd5615477cb9a0cd116cf43f5c) C:\Windows\System32\appinfo.dll 17:57:38.0645 6284 Appinfo - ok 17:57:38.0682 6284 AppMgmt (3da98c07b18a676180fe7eed924d1673) C:\Windows\System32\appmgmts.dll 17:57:38.0685 6284 AppMgmt - ok 17:57:38.0716 6284 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys 17:57:38.0719 6284 arc - ok 17:57:38.0759 6284 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys 17:57:38.0762 6284 arcsas - ok 17:57:38.0823 6284 aspnet_state - ok 17:57:38.0851 6284 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys 17:57:38.0857 6284 AsyncMac - ok 17:57:38.0890 6284 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys 17:57:38.0890 6284 atapi - ok 17:57:38.0955 6284 AudioEndpointBuilder (79318c744693ec983d20e9337a2f8196) C:\Windows\System32\Audiosrv.dll 17:57:38.0987 6284 AudioEndpointBuilder - ok 17:57:38.0996 6284 AudioSrv (79318c744693ec983d20e9337a2f8196) C:\Windows\System32\Audiosrv.dll 17:57:38.0999 6284 AudioSrv - ok 17:57:39.0077 6284 avgntflt (aa8f79a1bdfc03b3bc70c44ab00589b4) C:\Windows\system32\DRIVERS\avgntflt.sys 17:57:39.0085 6284 avgntflt - ok 17:57:39.0118 6284 avipbb (852e3c0a60d368c487949e55ad52a47f) C:\Windows\system32\DRIVERS\avipbb.sys 17:57:39.0128 6284 avipbb - ok 17:57:39.0155 6284 avkmgr (248db59fc86de44d2779f4c7fb1a567d) C:\Windows\system32\DRIVERS\avkmgr.sys 17:57:39.0158 6284 avkmgr - ok 17:57:39.0227 6284 awecho (b7a8fe974f4c5785f21b8edfccd1bb86) C:\Windows\syswow64\drivers\awechomd.sys 17:57:39.0230 6284 awecho - ok 17:57:39.0283 6284 awhost32 (6118ce3aea5db6c34872b934002e1ab6) C:\Program Files (x86)\Symantec\pcAnywhere\awhost32.exe 17:57:39.0295 6284 awhost32 - ok 17:57:39.0329 6284 AW_HOST (9808626ec988c6b7c773589b3b5993a0) C:\Windows\syswow64\drivers\aw_host5.sys 17:57:39.0332 6284 AW_HOST - ok 17:57:39.0360 6284 Beep - ok 17:57:39.0406 6284 BFE (ffb96c2589ffa60473ead78b39fbde29) C:\Windows\System32\bfe.dll 17:57:39.0436 6284 BFE - ok 17:57:39.0491 6284 BITCOMET_HELPER_SERVICE - ok 17:57:39.0567 6284 BITS (6d316f4859634071cc25c4fd4589ad2c) C:\Windows\system32\qmgr.dll 17:57:39.0634 6284 BITS - ok 17:57:39.0660 6284 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys 17:57:39.0665 6284 blbdrive - ok 17:57:39.0697 6284 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys 17:57:39.0705 6284 bowser - ok 17:57:39.0741 6284 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys 17:57:39.0744 6284 BrFiltLo - ok 17:57:39.0769 6284 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys 17:57:39.0771 6284 BrFiltUp - ok 17:57:39.0801 6284 Bridge (71142fa02068cb93c9319417737c915d) C:\Windows\system32\DRIVERS\bridge.sys 17:57:39.0804 6284 Bridge - ok 17:57:39.0830 6284 BridgeMP (71142fa02068cb93c9319417737c915d) C:\Windows\system32\DRIVERS\bridge.sys 17:57:39.0831 6284 BridgeMP - ok 17:57:39.0880 6284 Browser (a1b39de453433b115b4ea69ee0343816) C:\Windows\System32\browser.dll 17:57:39.0888 6284 Browser - ok 17:57:39.0924 6284 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys 17:57:39.0931 6284 Brserid - ok 17:57:39.0958 6284 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys 17:57:39.0962 6284 BrSerWdm - ok 17:57:39.0990 6284 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys 17:57:39.0993 6284 BrUsbMdm - ok 17:57:40.0018 6284 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys 17:57:40.0021 6284 BrUsbSer - ok 17:57:40.0042 6284 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys 17:57:40.0047 6284 BTHMODEM - ok 17:57:40.0053 6284 catchme - ok 17:57:40.0067 6284 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys 17:57:40.0075 6284 cdfs - ok 17:57:40.0111 6284 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys 17:57:40.0111 6284 cdrom - ok 17:57:40.0173 6284 CertPropSvc (5a268127633c7ee2a7fb87f39d748d56) C:\Windows\System32\certprop.dll 17:57:40.0174 6284 CertPropSvc - ok 17:57:40.0195 6284 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\DRIVERS\circlass.sys 17:57:40.0199 6284 circlass - ok 17:57:40.0237 6284 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys 17:57:40.0263 6284 CLFS - ok 17:57:40.0300 6284 clr_optimization_v2.0.50727_32 (8ee772032e2fe80a924f3b8dd5082194) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 17:57:40.0308 6284 clr_optimization_v2.0.50727_32 - ok 17:57:40.0355 6284 clr_optimization_v2.0.50727_64 (ce07a466201096f021cd09d631b21540) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 17:57:40.0363 6284 clr_optimization_v2.0.50727_64 - ok 17:57:40.0419 6284 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 17:57:40.0432 6284 clr_optimization_v4.0.30319_32 - ok 17:57:40.0459 6284 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 17:57:40.0471 6284 clr_optimization_v4.0.30319_64 - ok 17:57:40.0509 6284 CmBatt (b52d9a14ce4101577900a364ba86f3df) C:\Windows\system32\DRIVERS\CmBatt.sys 17:57:40.0511 6284 CmBatt - ok 17:57:40.0523 6284 cmdide (8c6aa24c1d7273a02284588426ab8ce3) C:\Windows\system32\drivers\cmdide.sys 17:57:40.0525 6284 cmdide - ok 17:57:40.0596 6284 Com4QLBEx (c7a0e61d5714ac20de52d4f66ec773b8) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe 17:57:40.0612 6284 Com4QLBEx - ok 17:57:40.0631 6284 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\DRIVERS\compbatt.sys 17:57:40.0634 6284 Compbatt - ok 17:57:40.0645 6284 COMSysApp - ok 17:57:40.0658 6284 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys 17:57:40.0661 6284 crcdisk - ok 17:57:40.0695 6284 CryptSvc (18918613e63f387cde4d95ca7d49dcf7) C:\Windows\system32\cryptsvc.dll 17:57:40.0707 6284 CryptSvc - ok 17:57:40.0747 6284 CSC (f60f50c8ed3fcbe358430b95fe27d09c) C:\Windows\system32\drivers\csc.sys 17:57:40.0782 6284 CSC - ok 17:57:40.0861 6284 CscService (1b5f256d31836ed2ba60b3a6c800200c) C:\Windows\System32\cscsvc.dll 17:57:40.0890 6284 CscService - ok 17:57:40.0938 6284 DcomLaunch (cf8b9a3a5e7dc57724a89d0c3e8cf9ef) C:\Windows\system32\rpcss.dll 17:57:40.0988 6284 DcomLaunch - ok 17:57:41.0026 6284 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys 17:57:41.0034 6284 DfsC - ok 17:57:41.0129 6284 DFSR (c647f468f7de343df8c143655c5557d4) C:\Windows\system32\DFSR.exe 17:57:41.0204 6284 DFSR - ok 17:57:41.0272 6284 Dhcp (3ed0321127ce70acdaabbf77e157c2a7) C:\Windows\System32\dhcpcsvc.dll 17:57:41.0275 6284 Dhcp - ok 17:57:41.0313 6284 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys 17:57:41.0315 6284 disk - ok 17:57:41.0367 6284 Dnscache (06230f1b721494a6df8d47fd395bb1b0) C:\Windows\System32\dnsrslvr.dll 17:57:41.0369 6284 Dnscache - ok 17:57:41.0407 6284 dot3svc (1a7156dd1e850e9914e5e991e3225b94) C:\Windows\System32\dot3svc.dll 17:57:41.0409 6284 dot3svc - ok 17:57:41.0462 6284 DpHost (087236f57b946424c263fa7b5bc28499) C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe 17:57:41.0469 6284 DpHost - ok 17:57:41.0517 6284 DPS (1583b39790db3eaec7edb0cb0140c708) C:\Windows\system32\dps.dll 17:57:41.0521 6284 DPS - ok 17:57:41.0591 6284 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys 17:57:41.0593 6284 drmkaud - ok 17:57:41.0645 6284 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys 17:57:41.0659 6284 DXGKrnl - ok 17:57:41.0694 6284 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys 17:57:41.0703 6284 E1G60 - ok 17:57:41.0738 6284 EapHost (c2303883fd9be49dc36a6400643002ea) C:\Windows\System32\eapsvc.dll 17:57:41.0739 6284 EapHost - ok 17:57:41.0797 6284 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys 17:57:41.0809 6284 Ecache - ok 17:57:41.0839 6284 ehRecvr (14ce384d2e27b64c256bda4dc39c312d) C:\Windows\ehome\ehRecvr.exe 17:57:41.0861 6284 ehRecvr - ok 17:57:41.0874 6284 ehSched (b93159c1313d66fdfbbe876f5189cd52) C:\Windows\ehome\ehsched.exe 17:57:41.0876 6284 ehSched - ok 17:57:41.0884 6284 ehstart (f5ee2527d74449868e3c3227a59bcd28) C:\Windows\ehome\ehstart.dll 17:57:41.0885 6284 ehstart - ok 17:57:41.0917 6284 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys 17:57:41.0944 6284 elxstor - ok 17:57:41.0989 6284 EMDMgmt (a9b18b63a4fd6baab83326706d857fab) C:\Windows\system32\emdmgmt.dll 17:57:42.0001 6284 EMDMgmt - ok 17:57:42.0030 6284 enecir (f218a3a27ed6592c0e22ec3595554447) C:\Windows\system32\DRIVERS\enecir.sys 17:57:42.0035 6284 enecir - ok 17:57:42.0073 6284 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys 17:57:42.0075 6284 ErrDev - ok 17:57:42.0135 6284 EventSystem (e12f22b73f153dece721cd45ec05b4af) C:\Windows\system32\es.dll 17:57:42.0158 6284 EventSystem - ok 17:57:42.0191 6284 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys 17:57:42.0199 6284 exfat - ok 17:57:42.0235 6284 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys 17:57:42.0239 6284 fastfat - ok 17:57:42.0282 6284 Fax (989a776a2ff32a148fcf15c44058b129) C:\Windows\system32\fxssvc.exe 17:57:42.0330 6284 Fax - ok 17:57:42.0388 6284 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys 17:57:42.0392 6284 fdc - ok 17:57:42.0426 6284 fdPHost (bb9267acacd8b7533dd936c34a0cba5e) C:\Windows\system32\fdPHost.dll 17:57:42.0427 6284 fdPHost - ok 17:57:42.0443 6284 FDResPub (300c80931eabbe1db7591c516efe8d0f) C:\Windows\system32\fdrespub.dll 17:57:42.0444 6284 FDResPub - ok 17:57:42.0463 6284 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys 17:57:42.0470 6284 FileInfo - ok 17:57:42.0491 6284 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys 17:57:42.0494 6284 Filetrace - ok 17:57:42.0516 6284 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys 17:57:42.0519 6284 flpydisk - ok 17:57:42.0553 6284 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys 17:57:42.0573 6284 FltMgr - ok 17:57:42.0624 6284 FontCache (be1c5bd1ca7ed015bc6fa1ae67e592c8) C:\Windows\system32\FntCache.dll 17:57:42.0685 6284 FontCache - ok 17:57:42.0724 6284 FontCache3.0.0.0 (bc5b0be5af3510b0fd8c140ee42c6d3e) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 17:57:42.0727 6284 FontCache3.0.0.0 - ok 17:57:42.0756 6284 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys 17:57:42.0759 6284 Fs_Rec - ok 17:57:42.0793 6284 fvevol (849e38db7d829962d0233a0a252b60c3) C:\Windows\system32\DRIVERS\fvevol.sys 17:57:42.0805 6284 fvevol - ok 17:57:42.0832 6284 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys 17:57:42.0839 6284 gagp30kx - ok 17:57:42.0884 6284 gpsvc (a0e1b575ba8f504968cd40c0faeb2384) C:\Windows\System32\gpsvc.dll 17:57:42.0898 6284 gpsvc - ok 17:57:42.0935 6284 HdAudAddService (df45f8142dc6df9d18c39b3effbd0409) C:\Windows\system32\drivers\HdAudio.sys 17:57:42.0942 6284 HdAudAddService - ok 17:57:42.0993 6284 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys 17:57:43.0008 6284 HDAudBus - ok 17:57:43.0030 6284 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys 17:57:43.0032 6284 HidBth - ok 17:57:43.0063 6284 HidIr (1d4e03e5c5ba4c3679c38cb6b4c60d5f) C:\Windows\system32\DRIVERS\hidir.sys 17:57:43.0065 6284 HidIr - ok 17:57:43.0110 6284 hidserv (59361d38a297755d46a540e450202b2a) C:\Windows\System32\hidserv.dll 17:57:43.0112 6284 hidserv - ok 17:57:43.0148 6284 HidUsb (59a7b5e13356c20d67983868242167c5) C:\Windows\system32\DRIVERS\hidusb.sys 17:57:43.0150 6284 HidUsb - ok 17:57:43.0190 6284 hkmsvc (b12f367ea39c0795fd57e31242ce1a5a) C:\Windows\system32\kmsvc.dll 17:57:43.0194 6284 hkmsvc - ok 17:57:43.0265 6284 HP Health Check Service (a19b0bb5a7eb6df2dd4a0711d36955ee) c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe 17:57:43.0266 6284 HP Health Check Service - ok 17:57:43.0314 6284 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys 17:57:43.0323 6284 HpCISSs - ok 17:57:43.0346 6284 hpdskflt (4e0bec0f78096ffd6d3314b497fc49d3) C:\Windows\system32\DRIVERS\hpdskflt.sys 17:57:43.0350 6284 hpdskflt - ok 17:57:43.0407 6284 HpqKbFiltr (9af482d058be59cc28bce52e7c4b747c) C:\Windows\system32\DRIVERS\HpqKbFiltr.sys 17:57:43.0410 6284 HpqKbFiltr - ok 17:57:43.0427 6284 hpqwmiex (fdf273a845f1ffcceadf363aaf47582f) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe 17:57:43.0447 6284 hpqwmiex - ok 17:57:43.0478 6284 hpsrv (fc7c13b5a9e9be23b7ae72bbc7fdb278) C:\Windows\system32\Hpservice.exe 17:57:43.0482 6284 hpsrv - ok 17:57:43.0526 6284 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys 17:57:43.0547 6284 HTTP - ok 17:57:43.0570 6284 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys 17:57:43.0574 6284 i2omp - ok 17:57:43.0612 6284 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys 17:57:43.0618 6284 i8042prt - ok 17:57:43.0666 6284 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys 17:57:43.0688 6284 iaStorV - ok 17:57:43.0753 6284 IDriverT (6f95324909b502e2651442c1548ab12f) C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe 17:57:43.0759 6284 IDriverT - ok 17:57:43.0811 6284 idsvc (749f5f8cedca70f2a512945325fc489d) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 17:57:43.0850 6284 idsvc - ok 17:57:43.0912 6284 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys 17:57:43.0917 6284 iirsp - ok 17:57:43.0960 6284 IKEEXT (0c9ea6e654e7b0471741e343a6c671af) C:\Windows\System32\ikeext.dll 17:57:43.0985 6284 IKEEXT - ok 17:57:44.0043 6284 intelide (475490caf376e55e6e8b37bbdfeb2e81) C:\Windows\system32\drivers\intelide.sys 17:57:44.0046 6284 intelide - ok 17:57:44.0067 6284 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys 17:57:44.0068 6284 intelppm - ok 17:57:44.0095 6284 IPBusEnum (5624bc1bc5eeb49c0ab76a8114f05ea3) C:\Windows\system32\ipbusenum.dll 17:57:44.0103 6284 IPBusEnum - ok 17:57:44.0144 6284 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys 17:57:44.0151 6284 IpFilterDriver - ok 17:57:44.0191 6284 iphlpsvc (bf0dbfa9792c5c14fa00f61c75116c1b) C:\Windows\System32\iphlpsvc.dll 17:57:44.0208 6284 iphlpsvc - ok 17:57:44.0218 6284 IpInIp - ok 17:57:44.0245 6284 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys 17:57:44.0252 6284 IPMIDRV - ok 17:57:44.0288 6284 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys 17:57:44.0291 6284 IPNAT - ok 17:57:44.0317 6284 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys 17:57:44.0319 6284 IRENUM - ok 17:57:44.0339 6284 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys 17:57:44.0341 6284 isapnp - ok 17:57:44.0381 6284 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys 17:57:44.0385 6284 iScsiPrt - ok 17:57:44.0397 6284 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys 17:57:44.0399 6284 iteatapi - ok 17:57:44.0426 6284 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys 17:57:44.0428 6284 iteraid - ok 17:57:44.0466 6284 JMCR (54df9eafb54a98e1a2ac3db69c16cf05) C:\Windows\system32\DRIVERS\jmcr.sys 17:57:44.0467 6284 JMCR - ok 17:57:44.0486 6284 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys 17:57:44.0489 6284 kbdclass - ok 17:57:44.0526 6284 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys 17:57:44.0528 6284 kbdhid - ok 17:57:44.0563 6284 KeyIso (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe 17:57:44.0566 6284 KeyIso - ok 17:57:44.0607 6284 KSecDD (2758d174604f597bbc8a217ff667913d) C:\Windows\system32\Drivers\ksecdd.sys 17:57:44.0616 6284 KSecDD - ok 17:57:44.0637 6284 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys 17:57:44.0638 6284 ksthunk - ok 17:57:44.0671 6284 KtmRm (1faf6926f3416d3da05c5b265491bdae) C:\Windows\system32\msdtckrm.dll 17:57:44.0678 6284 KtmRm - ok 17:57:44.0735 6284 LanmanServer (50c7a3cb427e9bb5ed0708a669956ab5) C:\Windows\System32\srvsvc.dll 17:57:44.0753 6284 LanmanServer - ok 17:57:44.0803 6284 LanmanWorkstation (caf86fc1388be1e470f1a7b43e348adb) C:\Windows\System32\wkssvc.dll 17:57:44.0809 6284 LanmanWorkstation - ok 17:57:44.0910 6284 LiveUpdate (f3cb12a5791761ebca4c7ba5fc89f5c2) C:\PROGRA~2\Symantec\LIVEUP~1\LUCOMS~1.EXE 17:57:44.0976 6284 LiveUpdate - ok 17:57:45.0016 6284 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys 17:57:45.0021 6284 lltdio - ok 17:57:45.0058 6284 lltdsvc (961ccbd0b1ccb5675d64976fae37d092) C:\Windows\System32\lltdsvc.dll 17:57:45.0073 6284 lltdsvc - ok 17:57:45.0095 6284 lmhosts (a47f8080cacc23c91fe823ad19aa5612) C:\Windows\System32\lmhsvc.dll 17:57:45.0098 6284 lmhosts - ok 17:57:45.0117 6284 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys 17:57:45.0126 6284 LSI_FC - ok 17:57:45.0148 6284 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys 17:57:45.0157 6284 LSI_SAS - ok 17:57:45.0177 6284 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys 17:57:45.0186 6284 LSI_SCSI - ok 17:57:45.0199 6284 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys 17:57:45.0208 6284 luafv - ok 17:57:45.0233 6284 lxdx_device - ok 17:57:45.0278 6284 mcdbus (79d51e7f5926e8ce1b3ebecebae28cff) C:\Windows\system32\DRIVERS\mcdbus.sys 17:57:45.0294 6284 mcdbus - ok 17:57:45.0337 6284 Mcx2Svc (76a58df02bd4ea29f189b82d0bef17f8) C:\Windows\system32\Mcx2Svc.dll 17:57:45.0344 6284 Mcx2Svc - ok 17:57:45.0356 6284 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys 17:57:45.0359 6284 megasas - ok 17:57:45.0395 6284 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys 17:57:45.0426 6284 MegaSR - ok 17:57:45.0443 6284 MMCSS (3cbe4995e80e13ccfbc42e5dcf3ac81a) C:\Windows\system32\mmcss.dll 17:57:45.0448 6284 MMCSS - ok 17:57:45.0474 6284 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys 17:57:45.0478 6284 Modem - ok 17:57:45.0506 6284 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys 17:57:45.0511 6284 monitor - ok 17:57:45.0528 6284 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys 17:57:45.0532 6284 mouclass - ok 17:57:45.0549 6284 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys 17:57:45.0552 6284 mouhid - ok 17:57:45.0576 6284 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys 17:57:45.0583 6284 MountMgr - ok 17:57:45.0627 6284 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys 17:57:45.0638 6284 mpio - ok 17:57:45.0656 6284 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys 17:57:45.0663 6284 mpsdrv - ok 17:57:45.0707 6284 MpsSvc (897e3baf68ba406a61682ae39c83900c) C:\Windows\system32\mpssvc.dll 17:57:45.0750 6284 MpsSvc - ok 17:57:45.0762 6284 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys 17:57:45.0766 6284 Mraid35x - ok 17:57:45.0801 6284 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys 17:57:45.0812 6284 MRxDAV - ok 17:57:45.0851 6284 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys 17:57:45.0862 6284 mrxsmb - ok 17:57:45.0898 6284 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys 17:57:45.0920 6284 mrxsmb10 - ok 17:57:45.0933 6284 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys 17:57:45.0942 6284 mrxsmb20 - ok 17:57:45.0983 6284 msahci (aa459f2ab3ab603c357ff117cae3d818) C:\Windows\system32\drivers\msahci.sys 17:57:45.0987 6284 msahci - ok 17:57:46.0018 6284 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys 17:57:46.0027 6284 msdsm - ok 17:57:46.0054 6284 MSDTC (7ec02ce772f068ed0beafa3da341a9bc) C:\Windows\System32\msdtc.exe 17:57:46.0058 6284 MSDTC - ok 17:57:46.0089 6284 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys 17:57:46.0095 6284 Msfs - ok 17:57:46.0143 6284 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys 17:57:46.0146 6284 msisadrv - ok 17:57:46.0178 6284 MSiSCSI (366b0c1f4478b519c181e37d43dcda32) C:\Windows\system32\iscsiexe.dll 17:57:46.0184 6284 MSiSCSI - ok 17:57:46.0193 6284 msiserver - ok 17:57:46.0225 6284 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys 17:57:46.0228 6284 MSKSSRV - ok 17:57:46.0245 6284 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys 17:57:46.0247 6284 MSPCLOCK - ok 17:57:46.0280 6284 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys 17:57:46.0281 6284 MSPQM - ok 17:57:46.0319 6284 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys 17:57:46.0342 6284 MsRPC - ok 17:57:46.0364 6284 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys 17:57:46.0365 6284 mssmbios - ok 17:57:46.0406 6284 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys 17:57:46.0408 6284 MSTEE - ok 17:57:46.0435 6284 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys 17:57:46.0440 6284 Mup - ok 17:57:46.0481 6284 napagent (a5b10c845e7538c60c0f5d87a57cb3f5) C:\Windows\system32\qagentRT.dll 17:57:46.0513 6284 napagent - ok 17:57:46.0566 6284 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys 17:57:46.0580 6284 NativeWifiP - ok 17:57:46.0621 6284 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys 17:57:46.0674 6284 NDIS - ok 17:57:46.0704 6284 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys 17:57:46.0707 6284 NdisTapi - ok 17:57:46.0728 6284 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys 17:57:46.0731 6284 Ndisuio - ok 17:57:46.0766 6284 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys 17:57:46.0779 6284 NdisWan - ok 17:57:46.0794 6284 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys 17:57:46.0799 6284 NDProxy - ok 17:57:46.0811 6284 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys 17:57:46.0815 6284 NetBIOS - ok 17:57:46.0854 6284 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys 17:57:46.0874 6284 netbt - ok 17:57:46.0904 6284 Netlogon (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe 17:57:46.0906 6284 Netlogon - ok 17:57:46.0941 6284 Netman (9b63b29defc0f3115a559d2597bf5d75) C:\Windows\System32\netman.dll 17:57:46.0966 6284 Netman - ok 17:57:46.0989 6284 netprofm (7846d0136cc2b264926a73047ba7688a) C:\Windows\System32\netprofm.dll 17:57:46.0997 6284 netprofm - ok 17:57:47.0041 6284 NetTcpPortSharing (74751dda198165947fd7454d83f49825) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 17:57:47.0049 6284 NetTcpPortSharing - ok 17:57:47.0167 6284 NETw3v64 (c86984aee87900c1eeb6942ede3bf4b6) C:\Windows\system32\DRIVERS\NETw3v64.sys 17:57:47.0225 6284 NETw3v64 - ok 17:57:47.0385 6284 NETw5v64 (50d4c98bc85e87e5f38bd3960457c18b) C:\Windows\system32\DRIVERS\NETw5v64.sys 17:57:47.0519 6284 NETw5v64 - ok 17:57:47.0541 6284 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys 17:57:47.0551 6284 nfrd960 - ok 17:57:47.0577 6284 NlaSvc (f145bf4c4668e7e312069f81ef847cfc) C:\Windows\System32\nlasvc.dll 17:57:47.0594 6284 NlaSvc - ok 17:57:47.0648 6284 NPF (351533acc2a069b94e80bbfc177e8fdf) C:\Windows\system32\drivers\npf.sys 17:57:47.0652 6284 NPF - ok 17:57:47.0677 6284 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys 17:57:47.0681 6284 Npfs - ok 17:57:47.0706 6284 nsi (acb62baa1c319b17752553df3026eeeb) C:\Windows\system32\nsisvc.dll 17:57:47.0709 6284 nsi - ok 17:57:47.0728 6284 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys 17:57:47.0731 6284 nsiproxy - ok 17:57:47.0792 6284 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys 17:57:47.0826 6284 Ntfs - ok 17:57:47.0852 6284 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys 17:57:47.0854 6284 Null - ok 17:57:47.0886 6284 NVHDA (ad37248bd442d41c9a896e53eb8a85ee) C:\Windows\system32\drivers\nvhda64v.sys 17:57:47.0889 6284 NVHDA - ok 17:57:48.0136 6284 nvlddmkm (fd39b98ff1bb8ed3848781497e9d02e0) C:\Windows\system32\DRIVERS\nvlddmkm.sys 17:57:48.0438 6284 nvlddmkm - ok 17:57:48.0465 6284 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys 17:57:48.0469 6284 nvraid - ok 17:57:48.0485 6284 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys 17:57:48.0487 6284 nvstor - ok 17:57:48.0524 6284 nvsvc (c1668d58547dd0c4a0fbd6afa20d5890) C:\Windows\system32\nvvsvc.exe 17:57:48.0531 6284 nvsvc - ok 17:57:48.0551 6284 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys 17:57:48.0554 6284 nv_agp - ok 17:57:48.0564 6284 NwlnkFlt - ok 17:57:48.0576 6284 NwlnkFwd - ok 17:57:48.0659 6284 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 17:57:48.0672 6284 odserv - ok 17:57:48.0702 6284 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys 17:57:48.0709 6284 ohci1394 - ok 17:57:48.0734 6284 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 17:57:48.0744 6284 ose - ok 17:57:48.0792 6284 p2pimsvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll 17:57:48.0813 6284 p2pimsvc - ok 17:57:48.0829 6284 p2psvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll 17:57:48.0837 6284 p2psvc - ok 17:57:48.0873 6284 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys 17:57:48.0881 6284 Parport - ok 17:57:48.0913 6284 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys 17:57:48.0919 6284 partmgr - ok 17:57:48.0941 6284 PcaSvc (9ab157b374192ff276c1628fbdba2b0e) C:\Windows\System32\pcasvc.dll 17:57:48.0949 6284 PcaSvc - ok 17:57:48.0996 6284 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys 17:57:49.0010 6284 pci - ok 17:57:49.0032 6284 pciide (15e5c3f89a3452efbda3b39816dbc4ee) C:\Windows\system32\drivers\pciide.sys 17:57:49.0034 6284 pciide - ok 17:57:49.0061 6284 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys 17:57:49.0070 6284 pcmcia - ok 17:57:49.0108 6284 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys 17:57:49.0132 6284 PEAUTH - ok 17:57:49.0177 6284 PerfHost (0ed8727ea0172860f47258456c06caea) C:\Windows\SysWow64\perfhost.exe 17:57:49.0180 6284 PerfHost - ok 17:57:49.0238 6284 pla (e9e68c1a0f25cf4a7ac966eea74ee89e) C:\Windows\system32\pla.dll 17:57:49.0275 6284 pla - ok 17:57:49.0310 6284 PlugPlay (fe6b0f59215c9fd9f9d26539c58c8b82) C:\Windows\system32\umpnpmgr.dll 17:57:49.0314 6284 PlugPlay - ok 17:57:49.0359 6284 PNRPAutoReg (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll 17:57:49.0366 6284 PNRPAutoReg - ok 17:57:49.0380 6284 PNRPsvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll 17:57:49.0388 6284 PNRPsvc - ok 17:57:49.0426 6284 PolicyAgent (89a5560671c2d8b4a4b51f3e1aa069d8) C:\Windows\System32\ipsecsvc.dll 17:57:49.0435 6284 PolicyAgent - ok 17:57:49.0501 6284 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys 17:57:49.0514 6284 PptpMiniport - ok 17:57:49.0544 6284 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys 17:57:49.0548 6284 Processor - ok 17:57:49.0581 6284 ProfSvc (e058ce4fc2449d8bfa14739c83b7ff2a) C:\Windows\system32\profsvc.dll 17:57:49.0585 6284 ProfSvc - ok 17:57:49.0620 6284 ProtectedStorage (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe 17:57:49.0621 6284 ProtectedStorage - ok 17:57:49.0653 6284 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys 17:57:49.0656 6284 PSched - ok 17:57:49.0745 6284 QBCFMonitorService (d2c73b0f27d0750887a3da3bd28f930c) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe 17:57:49.0749 6284 QBCFMonitorService - ok 17:57:49.0790 6284 QBFCService (6bee1814470dc12fa20c53dfc3c97ebb) C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe 17:57:49.0790 6284 QBFCService - ok 17:57:49.0838 6284 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys 17:57:49.0871 6284 ql2300 - ok 17:57:49.0900 6284 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys 17:57:49.0910 6284 ql40xx - ok 17:57:49.0942 6284 QuickBooksDB17 - ok 17:57:49.0996 6284 QuickBooksDB20 - ok 17:57:50.0029 6284 QWAVE (90574842c3da781e279061a3eff91f07) C:\Windows\system32\qwave.dll 17:57:50.0052 6284 QWAVE - ok 17:57:50.0081 6284 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys 17:57:50.0085 6284 QWAVEdrv - ok 17:57:50.0106 6284 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys 17:57:50.0109 6284 RasAcd - ok 17:57:50.0126 6284 RasAuto (b2ae18f847d07f0044404ddf7cb04497) C:\Windows\System32\rasauto.dll 17:57:50.0128 6284 RasAuto - ok 17:57:50.0172 6284 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys 17:57:50.0182 6284 Rasl2tp - ok 17:57:50.0201 6284 RasMan (3ad83e4046c43be510de681588acb8af) C:\Windows\System32\rasmans.dll 17:57:50.0224 6284 RasMan - ok 17:57:50.0258 6284 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys 17:57:50.0263 6284 RasPppoe - ok 17:57:50.0289 6284 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys 17:57:50.0295 6284 RasSstp - ok 17:57:50.0329 6284 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys 17:57:50.0352 6284 rdbss - ok 17:57:50.0376 6284 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys 17:57:50.0378 6284 RDPCDD - ok 17:57:50.0417 6284 rdpdr (ae23e79b13feb62939e2ca1189e71735) C:\Windows\system32\DRIVERS\rdpdr.sys 17:57:50.0440 6284 rdpdr - ok 17:57:50.0453 6284 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys 17:57:50.0455 6284 RDPENCDD - ok 17:57:50.0492 6284 RDPWD (5c141fc457f1ac833664789235aca673) C:\Windows\system32\drivers\RDPWD.sys 17:57:50.0500 6284 RDPWD - ok 17:57:50.0530 6284 Recovery Service for Windows (bc0a4d47472b042537f4e57b950415fa) C:\Program Files (x86)\SMINST\BLService.exe 17:57:50.0534 6284 Recovery Service for Windows - ok 17:57:50.0586 6284 RemoteAccess (c612b9557da73f70d41f8a6fbc8e5344) C:\Windows\System32\mprdim.dll 17:57:50.0588 6284 RemoteAccess - ok 17:57:50.0617 6284 RemoteRegistry (44b9d8ec2f3ef3a0efb00857af70d861) C:\Windows\system32\regsvc.dll 17:57:50.0632 6284 RemoteRegistry - ok 17:57:50.0674 6284 RichVideo (805ae1f90c64758d19aaa001cf8cba12) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe 17:57:50.0691 6284 RichVideo - ok 17:57:50.0763 6284 RimUsb (ad42432d22940b4215177be113e4919c) C:\Windows\system32\Drivers\RimUsb_AMD64.sys 17:57:50.0769 6284 RimUsb - ok 17:57:50.0826 6284 RimVSerPort (4aafffa67ac4dfa3d9985d78573887e2) C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys 17:57:50.0830 6284 RimVSerPort - ok 17:57:50.0876 6284 ROOTMODEM (6a0cf73b019cbc9255e23c9192ec3702) C:\Windows\system32\Drivers\RootMdm.sys 17:57:50.0878 6284 ROOTMODEM - ok 17:57:50.0914 6284 rpcapd (b60f58f175de20a6739194e85b035178) C:\Program Files (x86)\WinPcap\rpcapd.exe 17:57:50.0921 6284 rpcapd - ok 17:57:50.0950 6284 RpcLocator (f46c457840d4b7a4daafee739ce04102) C:\Windows\system32\locator.exe 17:57:50.0953 6284 RpcLocator - ok 17:57:50.0993 6284 RpcSs (cf8b9a3a5e7dc57724a89d0c3e8cf9ef) C:\Windows\System32\rpcss.dll 17:57:51.0000 6284 RpcSs - ok 17:57:51.0022 6284 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys 17:57:51.0029 6284 rspndr - ok 17:57:51.0056 6284 RTL8169 (dfadcae64aebe2c67da9cd2ae74ccde5) C:\Windows\system32\DRIVERS\Rtlh64.sys 17:57:51.0071 6284 RTL8169 - ok 17:57:51.0103 6284 SamSs (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe 17:57:51.0104 6284 SamSs - ok 17:57:51.0126 6284 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys 17:57:51.0134 6284 sbp2port - ok 17:57:51.0168 6284 SCardSvr (fd1cdcf108d5ef3366f00d18b70fb89b) C:\Windows\System32\SCardSvr.dll 17:57:51.0180 6284 SCardSvr - ok 17:57:51.0232 6284 Schedule (0f838c811ad295d2a4489b9993096c63) C:\Windows\system32\schedsvc.dll 17:57:51.0282 6284 Schedule - ok 17:57:51.0311 6284 SCPolicySvc (5a268127633c7ee2a7fb87f39d748d56) C:\Windows\System32\certprop.dll 17:57:51.0312 6284 SCPolicySvc - ok 17:57:51.0340 6284 sdbus (b42ee50f7d24f837f925332eb349eca5) C:\Windows\system32\DRIVERS\sdbus.sys 17:57:51.0343 6284 sdbus - ok 17:57:51.0374 6284 SDRSVC (4ff71b076a7760fe75ea5ae2d0ee0018) C:\Windows\System32\SDRSVC.dll 17:57:51.0377 6284 SDRSVC - ok 17:57:51.0389 6284 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 17:57:51.0393 6284 secdrv - ok 17:57:51.0413 6284 seclogon (5acdcbc67fcf894a1815b9f96d704490) C:\Windows\system32\seclogon.dll 17:57:51.0417 6284 seclogon - ok 17:57:51.0439 6284 SENS (90973a64b96cd647ff81c79443618eed) C:\Windows\system32\sens.dll 17:57:51.0445 6284 SENS - ok 17:57:51.0465 6284 Serenum (f71bfe7ac6c52273b7c82cbf1bb2a222) C:\Windows\system32\drivers\serenum.sys 17:57:51.0469 6284 Serenum - ok 17:57:51.0490 6284 Serial (e62fac91ee288db29a9696a9d279929c) C:\Windows\system32\drivers\serial.sys 17:57:51.0497 6284 Serial - ok 17:57:51.0518 6284 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys 17:57:51.0522 6284 sermouse - ok 17:57:51.0541 6284 SessionEnv (a8e4a4407a09f35dccc3771af590b0c4) C:\Windows\system32\sessenv.dll 17:57:51.0544 6284 SessionEnv - ok 17:57:51.0564 6284 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys 17:57:51.0567 6284 sffdisk - ok 17:57:51.0591 6284 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys 17:57:51.0594 6284 sffp_mmc - ok 17:57:51.0617 6284 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys 17:57:51.0620 6284 sffp_sd - ok 17:57:51.0642 6284 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys 17:57:51.0644 6284 sfloppy - ok 17:57:51.0683 6284 SharedAccess (4c5aee179da7e1ee9a9ccb9da289af34) C:\Windows\System32\ipnathlp.dll 17:57:51.0708 6284 SharedAccess - ok 17:57:51.0766 6284 ShellHWDetection (56793271ecdedd350c5add305603e963) C:\Windows\System32\shsvcs.dll 17:57:51.0786 6284 ShellHWDetection - ok 17:57:51.0811 6284 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys 17:57:51.0816 6284 SiSRaid2 - ok 17:57:51.0839 6284 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys 17:57:51.0846 6284 SiSRaid4 - ok 17:57:51.0915 6284 SkypeUpdate (db0405d9aad62f0762e0876ac142b7e1) C:\Program Files (x86)\Skype\Updater\Updater.exe 17:57:51.0927 6284 SkypeUpdate - ok 17:57:52.0004 6284 slsvc (a9a27a8e257b45a604fdad4f26fe7241) C:\Windows\system32\SLsvc.exe 17:57:52.0054 6284 slsvc - ok 17:57:52.0088 6284 SLUINotify (fd74b4b7c2088e390a30c85a896fc3af) C:\Windows\system32\SLUINotify.dll 17:57:52.0092 6284 SLUINotify - ok 17:57:52.0132 6284 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys 17:57:52.0135 6284 Smb - ok 17:57:52.0183 6284 SNMPTRAP (f8f47f38909823b1af28d60b96340cff) C:\Windows\System32\snmptrap.exe 17:57:52.0186 6284 SNMPTRAP - ok 17:57:52.0214 6284 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys 17:57:52.0217 6284 spldr - ok 17:57:52.0248 6284 Spooler (f66ff751e7efc816d266977939ef5dc3) C:\Windows\System32\spoolsv.exe 17:57:52.0253 6284 Spooler - ok 17:57:52.0288 6284 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys 17:57:52.0295 6284 srv - ok 17:57:52.0319 6284 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys 17:57:52.0324 6284 srv2 - ok 17:57:52.0360 6284 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys 17:57:52.0363 6284 srvnet - ok 17:57:52.0394 6284 SSDPSRV (192c74646ec5725aef3f80d19ff75f6a) C:\Windows\System32\ssdpsrv.dll 17:57:52.0399 6284 SSDPSRV - ok 17:57:52.0454 6284 SstpSvc (2ee3fa0308e6185ba64a9a7f2e74332b) C:\Windows\system32\sstpsvc.dll 17:57:52.0470 6284 SstpSvc - ok 17:57:52.0526 6284 STacSV (72eb6157e892a674e47e08732bb5cce3) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_6ef279c8\STacSV64.exe 17:57:52.0539 6284 STacSV - ok 17:57:52.0616 6284 STHDA (0c7bda7e9a329a071c080eb5210fe019) C:\Windows\system32\DRIVERS\stwrt64.sys 17:57:52.0645 6284 STHDA - ok 17:57:52.0685 6284 StillCam (14b4db4381e4a55f570d8bb699b791d6) C:\Windows\system32\DRIVERS\serscan.sys 17:57:52.0687 6284 StillCam - ok 17:57:52.0732 6284 stisvc (15825c1fbfb8779992cb65087f316af5) C:\Windows\System32\wiaservc.dll 17:57:52.0771 6284 stisvc - ok 17:57:52.0795 6284 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys 17:57:52.0798 6284 swenum - ok 17:57:52.0843 6284 swprv (6de37f4de19d4efd9c48c43addbc949a) C:\Windows\System32\swprv.dll 17:57:52.0875 6284 swprv - ok 17:57:52.0894 6284 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys 17:57:52.0899 6284 Symc8xx - ok 17:57:52.0914 6284 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys 17:57:52.0919 6284 Sym_hi - ok 17:57:52.0932 6284 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys 17:57:52.0936 6284 Sym_u3 - ok 17:57:52.0992 6284 SynTP (3a706a967295e16511e40842b1a2761d) C:\Windows\system32\DRIVERS\SynTP.sys 17:57:53.0014 6284 SynTP - ok 17:57:53.0062 6284 SysMain (92d7a8b0f87b036f17d25885937897a6) C:\Windows\system32\sysmain.dll 17:57:53.0120 6284 SysMain - ok 17:57:53.0147 6284 TabletInputService (005ce42567f9113a3bccb3b20073b029) C:\Windows\System32\TabSvc.dll 17:57:53.0156 6284 TabletInputService - ok 17:57:53.0191 6284 TapiSrv (cc2562b4d55e0b6a4758c65407f63b79) C:\Windows\System32\tapisrv.dll 17:57:53.0215 6284 TapiSrv - ok 17:57:53.0235 6284 TBS (cdbe8d7c1e201b911cdc346d06617fb5) C:\Windows\System32\tbssvc.dll 17:57:53.0237 6284 TBS - ok 17:57:53.0299 6284 Tcpip (2cc45d932bd193cd4117321d469ad6b2) C:\Windows\system32\drivers\tcpip.sys 17:57:53.0332 6284 Tcpip - ok 17:57:53.0374 6284 Tcpip6 (2cc45d932bd193cd4117321d469ad6b2) C:\Windows\system32\DRIVERS\tcpip.sys 17:57:53.0385 6284 Tcpip6 - ok 17:57:53.0422 6284 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys 17:57:53.0425 6284 tcpipreg - ok 17:57:53.0459 6284 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys 17:57:53.0460 6284 TDPIPE - ok 17:57:53.0493 6284 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys 17:57:53.0495 6284 TDTCP - ok 17:57:53.0531 6284 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys 17:57:53.0534 6284 tdx - ok 17:57:53.0570 6284 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys 17:57:53.0573 6284 TermDD - ok 17:57:53.0613 6284 TermService (5cdd30bc217082dac71a9878d9bfd566) C:\Windows\System32\termsrv.dll 17:57:53.0619 6284 TermService - ok 17:57:53.0657 6284 Themes (56793271ecdedd350c5add305603e963) C:\Windows\system32\shsvcs.dll 17:57:53.0661 6284 Themes - ok 17:57:53.0683 6284 THREADORDER (3cbe4995e80e13ccfbc42e5dcf3ac81a) C:\Windows\system32\mmcss.dll 17:57:53.0684 6284 THREADORDER - ok 17:57:53.0707 6284 TrkWks (f4689f05af472a651a7b1b7b02d200e7) C:\Windows\System32\trkwks.dll 17:57:53.0710 6284 TrkWks - ok 17:57:53.0749 6284 truecrypt (ea43de1743c1ba0d2d17b8db90c91d88) C:\Windows\system32\drivers\truecrypt.sys 17:57:53.0766 6284 truecrypt - ok 17:57:53.0792 6284 TrustedInstaller (66328b08ef5a9305d8ede36b93930369) C:\Windows\servicing\TrustedInstaller.exe 17:57:53.0796 6284 TrustedInstaller - ok 17:57:53.0843 6284 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys 17:57:53.0846 6284 tssecsrv - ok 17:57:53.0893 6284 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys 17:57:53.0896 6284 tunmp - ok 17:57:53.0923 6284 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys 17:57:53.0924 6284 tunnel - ok 17:57:54.0024 6284 TVCapSvc (862e9dec4b802dd58d897a151a17c527) C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe 17:57:54.0032 6284 TVCapSvc - ok 17:57:54.0061 6284 TVSched (5dce4656bf1eba4eb475d192f23b0b56) C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe 17:57:54.0070 6284 TVSched - ok 17:57:54.0119 6284 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys 17:57:54.0125 6284 uagp35 - ok 17:57:54.0168 6284 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys 17:57:54.0177 6284 udfs - ok 17:57:54.0216 6284 UI0Detect (060507c4113391394478f6953a79eedc) C:\Windows\system32\UI0Detect.exe 17:57:54.0219 6284 UI0Detect - ok 17:57:54.0245 6284 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys 17:57:54.0251 6284 uliagpkx - ok 17:57:54.0282 6284 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys 17:57:54.0301 6284 uliahci - ok 17:57:54.0321 6284 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys 17:57:54.0333 6284 UlSata - ok 17:57:54.0347 6284 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys 17:57:54.0361 6284 ulsata2 - ok 17:57:54.0373 6284 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys 17:57:54.0378 6284 umbus - ok 17:57:54.0409 6284 UmRdpService (dc5e34f189b827199b9cc8481c648269) C:\Windows\System32\umrdp.dll 17:57:54.0431 6284 UmRdpService - ok 17:57:54.0459 6284 upnphost (7093799ff80e9deca0680d2e3535be60) C:\Windows\System32\upnphost.dll 17:57:54.0485 6284 upnphost - ok 17:57:54.0555 6284 usbaudio (c6ba890de6e41857fbe84175519cae7d) C:\Windows\system32\drivers\usbaudio.sys 17:57:54.0558 6284 usbaudio - ok 17:57:54.0590 6284 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys 17:57:54.0598 6284 usbccgp - ok 17:57:54.0621 6284 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys 17:57:54.0628 6284 usbcir - ok 17:57:54.0685 6284 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys 17:57:54.0689 6284 usbehci - ok 17:57:54.0745 6284 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys 17:57:54.0749 6284 usbhub - ok 17:57:54.0771 6284 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys 17:57:54.0774 6284 usbohci - ok 17:57:54.0803 6284 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys 17:57:54.0806 6284 usbprint - ok 17:57:54.0866 6284 usbscan (ea0bf666868964fbe8cb10e50c97b9f1) C:\Windows\system32\DRIVERS\usbscan.sys 17:57:54.0871 6284 usbscan - ok 17:57:54.0923 6284 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS 17:57:54.0931 6284 USBSTOR - ok 17:57:54.0966 6284 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys 17:57:54.0969 6284 usbuhci - ok 17:57:54.0997 6284 usbvideo (fc33099877790d51b0927b7039059855) C:\Windows\system32\Drivers\usbvideo.sys 17:57:55.0009 6284 usbvideo - ok 17:57:55.0043 6284 UxSms (d76e231e4850bb3f88a3d9a78df191e3) C:\Windows\System32\uxsms.dll 17:57:55.0047 6284 UxSms - ok 17:57:55.0080 6284 VBoxDrv (b6437a7c60c817a0d7bea1d994b01612) C:\Windows\system32\DRIVERS\VBoxDrv.sys 17:57:55.0096 6284 VBoxDrv - ok 17:57:55.0125 6284 VBoxNetAdp (9e607f6240eadc4c0b3570f3e5e0358c) C:\Windows\system32\DRIVERS\VBoxNetAdp.sys 17:57:55.0136 6284 VBoxNetAdp - ok 17:57:55.0190 6284 VBoxNetFlt (9f7bc6d33a3aa4aff35c9dbd69c2bca0) C:\Windows\system32\DRIVERS\VBoxNetFlt.sys 17:57:55.0203 6284 VBoxNetFlt - ok 17:57:55.0239 6284 VBoxUSB (3cc7909465536d89551c2b5374a2f48a) C:\Windows\system32\Drivers\VBoxUSB.sys 17:57:55.0242 6284 VBoxUSB - ok 17:57:55.0265 6284 VBoxUSBMon (84b57b85a550476456ec5ab32fa99513) C:\Windows\system32\DRIVERS\VBoxUSBMon.sys 17:57:55.0274 6284 VBoxUSBMon - ok 17:57:55.0309 6284 vds (294945381dfa7ce58cecf0a9896af327) C:\Windows\System32\vds.exe 17:57:55.0340 6284 vds - ok 17:57:55.0409 6284 vfsFPService (4b6f9959f8df8fadc8170cd8a6bce5c2) C:\Windows\system32\vfsFPService.exe 17:57:55.0457 6284 vfsFPService - ok 17:57:55.0493 6284 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys 17:57:55.0497 6284 vga - ok 17:57:55.0518 6284 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys 17:57:55.0521 6284 VgaSave - ok 17:57:55.0537 6284 viaide (4f964e6828156f0ef3fa8d3a9a7895de) C:\Windows\system32\drivers\viaide.sys 17:57:55.0540 6284 viaide - ok 17:57:55.0576 6284 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys 17:57:55.0583 6284 volmgr - ok 17:57:55.0628 6284 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys 17:57:55.0658 6284 volmgrx - ok 17:57:55.0691 6284 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys 17:57:55.0693 6284 volsnap - ok 17:57:55.0718 6284 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys 17:57:55.0730 6284 vsmraid - ok 17:57:55.0790 6284 VSS (b75232dad33bfd95bf6f0a3e6bff51e1) C:\Windows\system32\vssvc.exe 17:57:55.0840 6284 VSS - ok 17:57:55.0876 6284 W32Time (f14a7de2ea41883e250892e1e5230a9a) C:\Windows\system32\w32time.dll 17:57:55.0902 6284 W32Time - ok 17:57:55.0930 6284 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys 17:57:55.0933 6284 WacomPen - ok 17:57:55.0969 6284 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys 17:57:55.0977 6284 Wanarp - ok 17:57:55.0982 6284 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys 17:57:55.0983 6284 Wanarpv6 - ok 17:57:56.0033 6284 wbengine (48eee289df9e4989128b2283f3eeacc6) C:\Windows\system32\wbengine.exe 17:57:56.0060 6284 wbengine - ok 17:57:56.0088 6284 wcncsvc (b4e4c37d0aa6100090a53213ee2bf1c1) C:\Windows\System32\wcncsvc.dll 17:57:56.0121 6284 wcncsvc - ok 17:57:56.0152 6284 WcsPlugInService (ea4b369560e986f19d93f45a881484ac) C:\Windows\System32\WcsPlugInService.dll 17:57:56.0156 6284 WcsPlugInService - ok 17:57:56.0188 6284 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys 17:57:56.0189 6284 Wd - ok 17:57:56.0235 6284 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 17:57:56.0246 6284 Wdf01000 - ok 17:57:56.0268 6284 WdiServiceHost (c5efda73ebfca8b02a094898de0a9276) C:\Windows\system32\wdi.dll 17:57:56.0272 6284 WdiServiceHost - ok 17:57:56.0277 6284 WdiSystemHost (c5efda73ebfca8b02a094898de0a9276) C:\Windows\system32\wdi.dll 17:57:56.0280 6284 WdiSystemHost - ok 17:57:56.0318 6284 WebClient (3e6d05381cf35f75ebb055544a8ed9ac) C:\Windows\System32\webclnt.dll 17:57:56.0322 6284 WebClient - ok 17:57:56.0350 6284 Wecsvc (8d40bc587993f876658bf9fb0f7d3462) C:\Windows\system32\wecsvc.dll 17:57:56.0357 6284 Wecsvc - ok 17:57:56.0382 6284 wercplsupport (9c980351d7e96288ea0c23ae232bd065) C:\Windows\System32\wercplsupport.dll 17:57:56.0387 6284 wercplsupport - ok 17:57:56.0407 6284 WerSvc (66b9ecebc46683f47edc06333c075fef) C:\Windows\System32\WerSvc.dll 17:57:56.0411 6284 WerSvc - ok 17:57:56.0415 6284 WinDefend - ok 17:57:56.0422 6284 WinHttpAutoProxySvc - ok 17:57:56.0470 6284 Winmgmt (d2e7296ed1bd26d8db2799770c077a02) C:\Windows\system32\wbem\WMIsvc.dll 17:57:56.0489 6284 Winmgmt - ok 17:57:56.0554 6284 WinRM (6cbb0c68f13b9c2ec1b16f5fa5e7c869) C:\Windows\system32\WsmSvc.dll 17:57:56.0610 6284 WinRM - ok 17:57:56.0650 6284 WinUSB (7f2f9e48566b2087f2aaad258cb2a8d4) C:\Windows\system32\DRIVERS\WinUSB.sys 17:57:56.0654 6284 WinUSB - ok 17:57:56.0697 6284 Wlansvc (ec339c8115e91baed835957e9a677f16) C:\Windows\System32\wlansvc.dll 17:57:56.0744 6284 Wlansvc - ok 17:57:56.0880 6284 wlidsvc (2bacd71123f42cea603f4e205e1ae337) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 17:57:56.0946 6284 wlidsvc - ok 17:57:56.0991 6284 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\DRIVERS\wmiacpi.sys 17:57:56.0993 6284 WmiAcpi - ok 17:57:57.0036 6284 wmiApSrv (21fa389e65a852698b6a1341f36ee02d) C:\Windows\system32\wbem\WmiApSrv.exe 17:57:57.0051 6284 wmiApSrv - ok 17:57:57.0070 6284 WMPNetworkSvc - ok 17:57:57.0103 6284 WPCSvc (cbc156c913f099e6680d1df9307db7a8) C:\Windows\System32\wpcsvc.dll 17:57:57.0107 6284 WPCSvc - ok 17:57:57.0141 6284 WPDBusEnum (490a18b4e4d53dc10879deaa8e8b70d9) C:\Windows\system32\wpdbusenum.dll 17:57:57.0151 6284 WPDBusEnum - ok 17:57:57.0209 6284 WpdUsb (5e2401b3fc1089c90e081291357371a9) C:\Windows\system32\DRIVERS\wpdusb.sys 17:57:57.0214 6284 WpdUsb - ok 17:57:57.0279 6284 WPFFontCache_v0400 (991e2c2cf3bc204c2bb2ee1476149e4e) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe 17:57:57.0303 6284 WPFFontCache_v0400 - ok 17:57:57.0334 6284 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys 17:57:57.0336 6284 ws2ifsl - ok 17:57:57.0377 6284 wscsvc (9ea3e6d0ef7a5c2b9181961052a4b01a) C:\Windows\system32\wscsvc.dll 17:57:57.0382 6284 wscsvc - ok 17:57:57.0436 6284 WSDPrintDevice (de5f5212ab34221dd1618b5fefe8db6c) C:\Windows\system32\DRIVERS\WSDPrint.sys 17:57:57.0438 6284 WSDPrintDevice - ok 17:57:57.0449 6284 WSearch - ok 17:57:57.0528 6284 wuauserv (fb3796754fe00f0bdc87a36f164a5f4d) C:\Windows\system32\wuaueng.dll 17:57:57.0585 6284 wuauserv - ok 17:57:57.0619 6284 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys 17:57:57.0620 6284 WUDFRd - ok 17:57:57.0643 6284 wudfsvc (6cbd51ff913c851d56ed9dc7f2a27dde) C:\Windows\System32\WUDFSvc.dll 17:57:57.0650 6284 wudfsvc - ok 17:57:57.0683 6284 yukonx64 (07f7285220307aafb755d890295f0f9a) C:\Windows\system32\DRIVERS\yk60x64.sys 17:57:57.0690 6284 yukonx64 - ok 17:57:57.0769 6284 {55662437-DA8C-40c0-AADA-2C816A897A49} (1cacfef9e5dd866c5b79a135ee729e18) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl 17:57:57.0782 6284 {55662437-DA8C-40c0-AADA-2C816A897A49} - ok 17:57:57.0794 6284 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk2\DR2 17:57:57.0930 6284 \Device\Harddisk2\DR2 - ok 17:57:57.0944 6284 MBR (0x1B8) (5c86adec17b739c437e145e3b3fc2e6d) \Device\Harddisk0\DR0 17:57:58.0060 6284 \Device\Harddisk0\DR0 - ok 17:57:58.0064 6284 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk1\DR1 17:57:58.0375 6284 \Device\Harddisk1\DR1 - ok 17:57:58.0380 6284 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk2\DR2 17:57:58.0514 6284 \Device\Harddisk2\DR2 - ok 17:57:58.0518 6284 Boot (0x1200) (66895600a868b184e56d78283406ed88) \Device\Harddisk2\DR2\Partition0 17:57:58.0521 6284 \Device\Harddisk2\DR2\Partition0 - ok 17:57:58.0596 6284 Boot (0x1200) (6749774d703b26bd032f2bd56b8d4eb4) \Device\Harddisk0\DR0\Partition0 17:57:58.0599 6284 \Device\Harddisk0\DR0\Partition0 - ok 17:57:58.0624 6284 Boot (0x1200) (34689c87c6a0662f4635b8cd64f70327) \Device\Harddisk0\DR0\Partition1 17:57:58.0626 6284 \Device\Harddisk0\DR0\Partition1 - ok 17:57:58.0630 6284 Boot (0x1200) (d82779d6da6280ec24117f4507aebe3b) \Device\Harddisk1\DR1\Partition0 17:57:58.0631 6284 \Device\Harddisk1\DR1\Partition0 - ok 17:57:58.0636 6284 Boot (0x1200) (66895600a868b184e56d78283406ed88) \Device\Harddisk2\DR2\Partition0 17:57:58.0638 6284 \Device\Harddisk2\DR2\Partition0 - ok 17:57:58.0639 6284 ============================================================ 17:57:58.0639 6284 Scan finished 17:57:58.0639 6284 ============================================================ 17:57:58.0650 5088 Detected object count: 0 17:57:58.0650 5088 Actual detected object count: 0 ComboFix 12-03-31.03 - Marcel 31/03/2012 18:19:40.1.4 - x64 Microsoft® Windows Vista™ Ultimate 6.0.6002.2.1252.1.1033.18.4062.1571 [GMT -5:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2012-02-28 to 2012-03-31 ))))))))))))))))))))))))))))))) . . 2012-03-31 23:26 . 2012-03-31 23:26 ——– d—–w- c:\users\QBDataServiceUser20\AppData\Local\temp 2012-03-31 23:26 . 2012-03-31 23:26 ——– d—–w- c:\users\QBDataServiceUser17\AppData\Local\temp 2012-03-31 23:26 . 2012-03-31 23:26 ——– d—–w- c:\users\Public\AppData\Local\temp 2012-03-31 23:26 . 2012-03-31 23:26 ——– d—–w- c:\users\Default\AppData\Local\temp 2012-03-31 23:26 . 2012-03-31 23:26 ——– d—–w- c:\users\Administrator\AppData\Local\temp 2012-03-30 11:17 . 2012-03-14 03:27 8669240 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{1778D89E-78C1-4EA2-9F5B-094A4EF8BEE6}\mpengine.dll 2012-03-28 23:08 . 2012-03-28 23:08 ——– d—–w- c:\users\Marcel\.swt 2012-03-23 17:55 . 2012-03-27 23:59 ——– d—–w- c:\programdata\Visual CertExam Suite 2012-03-23 17:55 . 2012-03-23 17:55 ——– d—–w- c:\program files (x86)\Visual CertExam Suite 2012-03-23 17:32 . 2012-03-23 17:32 ——– d—–w- c:\program files (x86)\Exam Formatter 2012-03-17 22:15 . 2012-03-17 22:15 ——– d—–w- c:\users\Marcel\Packet Tracer 2012-03-17 19:37 . 2012-03-17 19:37 ——– d—–w- c:\program files (x86)\Common Files\Java 2012-03-14 13:41 . 2012-01-09 16:16 708096 —-a-w- c:\windows\system32\rdpencom.dll 2012-03-14 13:41 . 2012-01-09 15:54 613376 —-a-w- c:\windows\SysWow64\rdpencom.dll 2012-03-14 13:41 . 2012-01-09 14:27 209920 —-a-w- c:\windows\system32\drivers\rdpwd.sys 2012-03-08 02:35 . 2012-03-08 03:00 ——– d—–w- c:\users\Marcel\Cisco Packet Tracer 5.3.3 2012-03-08 02:29 . 2012-03-08 02:29 ——– d—–w- c:\program files (x86)\Cisco Packet Tracer 5.3.3 2012-03-06 02:28 . 2012-03-06 02:28 ——– d—–w- c:\program files (x86)\Common Files\Skype . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-03-17 19:36 . 2010-06-04 01:52 472808 —-a-w- c:\windows\SysWow64\deployJava1.dll 2012-02-23 14:18 . 2009-10-10 01:48 279656 ——w- c:\windows\system32\MpSigStub.exe 2012-02-15 10:59 . 2011-10-18 19:28 132320 —-a-w- c:\windows\system32\drivers\avipbb.sys 2012-01-31 17:08 . 2010-06-24 16:33 18328 —-a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2012-01-08 01:44 . 2012-01-08 01:44 750488 —-a-w- c:\windows\system32\npdeployJava1.dll 2012-01-08 01:44 . 2011-06-03 15:40 660368 —-a-w- c:\windows\system32\deployJava1.dll 2012-01-08 01:13 . 2011-05-18 13:08 414368 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-01-03 14:25 . 2012-02-16 04:08 404992 —-a-w- c:\windows\system32\drivers\afd.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "TrueCrypt"="c:\program files\TrueCrypt\TrueCrypt.exe" [2010-12-14 1496528] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240] "RIMDeviceManager"="c:\program files (x86)\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe" [2011-11-03 2024784] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "TSMAgent"="c:\program files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe" [2008-12-25 1316136] "CLMLServer for HP TouchSmart"="c:\program files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe" [2008-12-25 189736] "DpAgent"="c:\program files (x86)\DigitalPersona\Bin\dpagent.exe" [2008-12-11 842816] "QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-11-24 323640] "HP Health Check Scheduler"="c:\program files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-10-09 75008] "DVDAgent"="c:\program files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe" [2009-03-11 1148200] "TVAgent"="c:\program files (x86)\Hewlett-Packard\Media\TV\TVAgent.exe" [2009-02-09 206120] "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2010-03-12 49208] "Intuit SyncManager"="c:\program files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe" [2010-10-19 1439496] "WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-02-06 258512] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920] "RIMBBLaunchAgent.exe"="c:\program files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe" [2011-09-01 90448] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\PCANotify] 2007-04-27 17:10 18744 —-a-w- c:\windows\System32\PCANotify.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Notification Packages REG_MULTI_SZ scecli DPPWDFLT . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952] . . Contents of the 'Scheduled Tasks' folder . 2012-03-31 c:\windows\Tasks\HPCeeScheduleForMarcel.job - c:\program files (x86)\hewlett-packard\sdp\ceement\HPCEE.exe [2009-02-11 19:34] . . ——— x86-64 ———– . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2009-06-04 442368] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-10-03 16395880] . ——- Supplementary Scan ——- . uStart Page = hxxp://www.google.com/ uLocal Page = c:\windows\system32\blank.htm mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb mLocal Page = c:\windows\SysWOW64\blank.htm IE: &D&ownload &with BitComet - c:\program files (x86)\BitComet\BitComet.exe/AddLink.htm IE: &D&ownload all with BitComet - c:\program files (x86)\BitComet\BitComet.exe/AddAllLink.htm IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll TCP: Interfaces\{92D5B0AE-CC61-4EF8-86EC-B658303E79A1}: NameServer = 192.168.1.1 DPF: {36299202-09EF-4ABF-ADB9-47C599DBE778} - hxxps://www.hpwindows7upgrade.arvato.com/north_america/Endcustomer/HPProdDetect.cab DPF: {46D8BEE7-0B27-4466-ABA2-A5F1E157971C} - hxxp://208.138.22.10:81/RemoteWeb.cab DPF: {5FFDFC21-AE40-4C7C-955C-415A1ACE01C8} - hxxp://208.138.22.10:81/VideoViewer.cab CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll FF - ProfilePath - c:\users\Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\5bt4shr0.Public\ FF - prefs.js: browser.startup.homepage - www.google.com . - - - - ORPHANS REMOVED - - - - . HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe HKLM-Run-SmartMenu - c:\program files (x86)\Hewlett-Packard\HP MediaSmart\SmartMenu.exe AddRemove-Octoshape add-in for Adobe Flash Player - c:\users\Marcel\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{55662437-DA8C-40c0-AADA-2C816A897A49}] "ImagePath"="\??\c:\program files (x86)\Hewlett-Packard\Media\DVD\000.fcl" . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}] @Denied: (A 2) (Everyone) @="IFlashBroker3" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}] @Denied: (A 2) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0] @="Shockwave Flash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}] @Denied: (A 2) (Everyone) @="" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0] @="FlashBroker" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes] "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B9A09F18-45AB-4F09-A117-A4ADDA8FA8C8}] @Denied: (A) (Everyone) "Solution"="{36eb6792-3a29-43b3-8cd0-f67d266fb426}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane\0] "Key"="ActionsPane" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\8.0\\ActionsPane.xsd" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . ———————— Other Running Processes ———————— . c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe c:\program files (x86)\DigitalPersona\Bin\DpHostW.exe c:\program files (x86)\Avira\AntiVir Desktop\sched.exe c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE c:\program files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe c:\progra~2\Intuit\QUICKB~1\QBDBMgrN.exe c:\program files (x86)\SMINST\BLService.exe c:\program files (x86)\CyberLink\Shared files\RichVideo.exe c:\program files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe c:\program files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe c:\program files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe c:\progra~2\Intuit\QUICKB~3\QBDBMgrN.exe c:\program files (x86)\Windows Media Player\wmplayer.exe . ************************************************************************** . Completion time: 2012-03-31 18:34:08 - machine was rebooted ComboFix-quarantined-files.txt 2012-03-31 23:34 ComboFix2.txt 2012-01-06 19:43 . Pre-Run: 116,471,922,688 bytes free Post-Run: 116,036,022,272 bytes free . - - End Of File - - ABACFAD12C149F355647032818257495

You didn't appear to have any infection, we have mostly cleared out your temp files, so the machine was probably just bogged down.

I will link you to a temp file cleaner (TFC) so use it regularly.

You might want to defrag your machine as well, it's just part of regular maintenance to keep it in good working order.

First open an elevated Command Prompt

• Go to Start > All Programs > Accessories
• right click on the Command Prompt and choose “Run as administrator”
• Type the following see how much your hard drive is fragmented (in this example, your C:\ drive):
• defrag c: -a (be patient, this can take a while)
• The resulting analysis will tell you a “Percent file fragmentation” and at the bottom, if you need to defragment the drive or not.
• To fully defragment your C:\ drive type the following:
• defrag c: -w
• Give it time to run (it can take a while, best to leave the computer alone) and then you’re done!

now to clean up the tools:


You can delete the TDSSKiller logs and program from your desktop.


NEXT

Follow these steps to uninstall Combofix

• Make sure your security programs are totally disabled.
• Click START then RUN
• Now copy/paste Combofix /uninstall into the runbox and click OK. Note the space between the ..X and the /U, it needs to be there.

[external image: Posted Image]


If there are any logs/tools remaining on your desktop > right click and delete them.


NEXT


Below I have included a number of recommendations for how to protect your computer against malware infections.

• It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection. Refer to this Microsoft article
  Strong passwords: How to create and use them Then consider a password keeper, to keep all your passwords safe. KeePass is a small utility that allows you to manage all your passwords.
  
  
• Keep Windows updated by regularly checking their website at :
  http://windowsupdate.microsoft.com/
  This will ensure your computer has always the latest security updates available installed on your computer.
  
  
• Make Internet Explorer more secure
  
  • Click Start > Run
  • Type Inetcpl.cpl & click OK
  • Click on the Security tab
  • Click Reset all zones to default level
  • Make sure the Internet Zone is selected & Click Custom level
  • In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
  • Next Click OK, then Apply button and then OK to exit the Internet Properties page.
  
  
• Download TFC to your desktop
  
  • Close any open windows.
  • Double click the TFC icon to run the program
  • TFC will close all open programs itself in order to run,
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish it's job
  • Once its finished it should automatically reboot your machine,
  • if it doesn't, manually reboot to ensure a complete clean
  It's normal after running TFC cleaner that the PC will be slower to boot the first time.
  
  
• WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
  • Green to go
  • Yellow for caution
  • Red to stop
  WOT has an addon available for both Firefox and IE
  
  
• Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.
  
  
• ERUNT (Emergency Recovery Utility NT) allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed.
  
  
• In light of your recent issue, I'm sure you'd like to avoid any future infections. Please take a look at this well written article:
  PC Safety and Security–What Do I Need?.

Thank you for your patience, and performing all of the procedures requested.

Please respond one last time so we can consider the thread resolved and close it, thank-you.