Double Click Virus [Closed]

Whew. Here's the TDSS log: 11:00:47.0830 2828 TDSS rootkit removing tool 2.7.34.0 May 2 2012 09:59:18 11:00:48.0454 2828 ============================================================ 11:00:48.0454 2828 Current date / time: 2012/05/12 11:00:48.0454 11:00:48.0454 2828 SystemInfo: 11:00:48.0454 2828 11:00:48.0454 2828 OS Version: 6.0.6002 ServicePack: 2.0 11:00:48.0454 2828 Product type: Workstation 11:00:48.0454 2828 ComputerName: MIKE-PC 11:00:48.0454 2828 UserName: Mike 11:00:48.0454 2828 Windows directory: C:\Windows 11:00:48.0454 2828 System windows directory: C:\Windows 11:00:48.0454 2828 Processor architecture: Intel x86 11:00:48.0454 2828 Number of processors: 2 11:00:48.0454 2828 Page size: 0x1000 11:00:48.0454 2828 Boot type: Normal boot 11:00:48.0454 2828 ============================================================ 11:00:49.0718 2828 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050 11:00:49.0749 2828 ============================================================ 11:00:49.0749 2828 \Device\Harddisk0\DR0: 11:00:49.0749 2828 MBR partitions: 11:00:49.0749 2828 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x18000, BlocksNum 0x1400000 11:00:49.0749 2828 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1418000, BlocksNum 0x38F6D800 11:00:49.0749 2828 ============================================================ 11:00:49.0780 2828 C: <-> \Device\Harddisk0\DR0\Partition1 11:00:49.0843 2828 D: <-> \Device\Harddisk0\DR0\Partition0 11:00:49.0843 2828 ============================================================ 11:00:49.0843 2828 Initialize success 11:00:49.0843 2828 ============================================================ 11:00:58.0967 3716 ============================================================ 11:00:58.0967 3716 Scan started 11:00:58.0967 3716 Mode: Manual; TDLFS; 11:00:58.0967 3716 ============================================================ 11:01:13.0709 2424 ============================================================ 11:01:13.0709 2424 Scan started 11:01:13.0709 2424 Mode: Manual; TDLFS; 11:01:13.0709 2424 ============================================================ 11:01:15.0472 2424 $sys$cor (53b049da317117645068f41ff6a6a80c) C:\Windows\system32\Drivers\$sys$cor.sys 11:01:15.0472 2424 $sys$cor - ok 11:01:15.0487 2424 $sys$crater (1a5e7c6cbaed64159c6b39be64f4c2ff) C:\Windows\system32\$sys$filesystem\crater.sys 11:01:15.0487 2424 $sys$crater - ok 11:01:15.0752 2424 a016bus (b021d0ae4605ce5df67f06e741278cdf) C:\Windows\system32\DRIVERS\a016bus.sys 11:01:15.0768 2424 a016bus - ok 11:01:15.0784 2424 a016mdfl (5b6bc2de851012906d4aae84c802e3f2) C:\Windows\system32\DRIVERS\a016mdfl.sys 11:01:15.0784 2424 a016mdfl - ok 11:01:15.0815 2424 a016mdm (c80cffb5819ccfc97f2b09e2259dfde6) C:\Windows\system32\DRIVERS\a016mdm.sys 11:01:15.0830 2424 a016mdm - ok 11:01:15.0862 2424 a016mgmt (415243177ff67d3cfba44d931b809bf3) C:\Windows\system32\DRIVERS\a016mgmt.sys 11:01:15.0862 2424 a016mgmt - ok 11:01:15.0893 2424 a016obex (3a853f9b8b69541cde714a83a0a6434e) C:\Windows\system32\DRIVERS\a016obex.sys 11:01:15.0908 2424 a016obex - ok 11:01:16.0782 2424 aawservice (0629361fac4576ba48ab39f4903dce9e) C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe 11:01:16.0813 2424 aawservice - ok 11:01:17.0702 2424 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys 11:01:17.0749 2424 ACPI - ok 11:01:17.0765 2424 adfs - ok 11:01:18.0139 2424 Adobe Version Cue CS3 (14c23516c990dcd6052152cf034dde40) C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe 11:01:18.0155 2424 Adobe Version Cue CS3 - ok 11:01:18.0326 2424 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys 11:01:18.0342 2424 adp94xx - ok 11:01:18.0373 2424 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys 11:01:18.0389 2424 adpahci - ok 11:01:18.0404 2424 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys 11:01:18.0420 2424 adpu160m - ok 11:01:18.0436 2424 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys 11:01:18.0436 2424 adpu320 - ok 11:01:18.0467 2424 AeLookupSvc (9d1fda9e086ba64e3c93c9de32461bcf) C:\Windows\System32\aelupsvc.dll 11:01:18.0482 2424 AeLookupSvc - ok 11:01:18.0560 2424 AFD (a201207363aa900abf1a388468688570) C:\Windows\system32\drivers\afd.sys 11:01:18.0576 2424 AFD - ok 11:01:18.0592 2424 agp440 (8b10ce1c1f9f1d47e4deb1a547a00cd4) C:\Windows\system32\drivers\agp440.sys 11:01:18.0607 2424 agp440 - ok 11:01:18.0623 2424 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys 11:01:18.0623 2424 aic78xx - ok 11:01:18.0670 2424 ALG (a1545b731579895d8cc44fc0481c1192) C:\Windows\System32\alg.exe 11:01:18.0685 2424 ALG - ok 11:01:18.0716 2424 aliide (dc67a153fdb8105b25d05334b5e1d8e2) C:\Windows\system32\drivers\aliide.sys 11:01:18.0716 2424 aliide - ok 11:01:18.0748 2424 amdagp (848f27e5b27c1c253f6cefdc1a5d8f21) C:\Windows\system32\drivers\amdagp.sys 11:01:18.0748 2424 amdagp - ok 11:01:18.0763 2424 amdide (835c4c3355088298a5ebd818fa31430f) C:\Windows\system32\drivers\amdide.sys 11:01:18.0763 2424 amdide - ok 11:01:18.0779 2424 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys 11:01:18.0779 2424 AmdK7 - ok 11:01:18.0794 2424 AmdK8 (0ca0071da4315b00fc1328ca86b425da) C:\Windows\system32\drivers\amdk8.sys 11:01:18.0794 2424 AmdK8 - ok 11:01:18.0841 2424 Appinfo (c6d704c7f0434dc791aac37cac4b6e14) C:\Windows\System32\appinfo.dll 11:01:18.0841 2424 Appinfo - ok 11:01:19.0060 2424 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 11:01:19.0075 2424 Apple Mobile Device - ok 11:01:19.0138 2424 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys 11:01:19.0138 2424 arc - ok 11:01:19.0169 2424 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys 11:01:19.0184 2424 arcsas - ok 11:01:19.0216 2424 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys 11:01:19.0216 2424 AsyncMac - ok 11:01:19.0247 2424 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys 11:01:19.0247 2424 atapi - ok 11:01:19.0793 2424 AudioEndpointBuilder (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll 11:01:19.0808 2424 AudioEndpointBuilder - ok 11:01:19.0808 2424 Audiosrv (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll 11:01:19.0824 2424 Audiosrv - ok 11:01:19.0855 2424 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys 11:01:19.0855 2424 Beep - ok 11:01:19.0918 2424 BFE (c789af0f724fda5852fb9a7d3a432381) C:\Windows\System32\bfe.dll 11:01:19.0918 2424 BFE - ok 11:01:20.0011 2424 BITS (93952506c6d67330367f7e7934b6a02f) C:\Windows\system32\qmgr.dll 11:01:20.0027 2424 BITS - ok 11:01:20.0042 2424 blbdrive - ok 11:01:20.0822 2424 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe 11:01:20.0838 2424 Bonjour Service - ok 11:01:20.0916 2424 bowser (74b442b2be1260b7588c136177ceac66) C:\Windows\system32\DRIVERS\bowser.sys 11:01:20.0916 2424 bowser - ok 11:01:20.0947 2424 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys 11:01:20.0947 2424 BrFiltLo - ok 11:01:20.0963 2424 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys 11:01:20.0978 2424 BrFiltUp - ok 11:01:21.0010 2424 Browser (a3629a0c4226f9e9c72faaeebc3ad33c) C:\Windows\System32\browser.dll 11:01:21.0010 2424 Browser - ok 11:01:21.0041 2424 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys 11:01:21.0041 2424 Brserid - ok 11:01:21.0056 2424 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys 11:01:21.0072 2424 BrSerWdm - ok 11:01:21.0103 2424 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys 11:01:21.0103 2424 BrUsbMdm - ok 11:01:21.0134 2424 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys 11:01:21.0134 2424 BrUsbSer - ok 11:01:21.0150 2424 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys 11:01:21.0150 2424 BTHMODEM - ok 11:01:21.0462 2424 catchme - ok 11:01:21.0805 2424 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys 11:01:21.0821 2424 cdfs - ok 11:01:21.0992 2424 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys 11:01:22.0024 2424 cdrom - ok 11:01:22.0055 2424 CertPropSvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll 11:01:22.0055 2424 CertPropSvc - ok 11:01:22.0086 2424 CFcatchme - ok 11:01:22.0117 2424 circlass (da8e0afc7baa226c538ef53ac2f90897) C:\Windows\system32\drivers\circlass.sys 11:01:22.0133 2424 circlass - ok 11:01:22.0195 2424 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys 11:01:22.0211 2424 CLFS - ok 11:01:22.0585 2424 clr_optimization_v2.0.50727_32 (8ee772032e2fe80a924f3b8dd5082194) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 11:01:22.0616 2424 clr_optimization_v2.0.50727_32 - ok 11:01:22.0648 2424 cmdide (e79cbb2195e965f6e3256e2c1b23fd1c) C:\Windows\system32\drivers\cmdide.sys 11:01:22.0648 2424 cmdide - ok 11:01:22.0694 2424 Compbatt (82b8c91d327cfecf76cb58716f7d4997) C:\Windows\system32\drivers\compbatt.sys 11:01:22.0710 2424 Compbatt - ok 11:01:22.0726 2424 COMSysApp - ok 11:01:22.0741 2424 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys 11:01:22.0741 2424 crcdisk - ok 11:01:22.0772 2424 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys 11:01:22.0772 2424 Crusoe - ok 11:01:22.0804 2424 CryptSvc (fb27772beaf8e1d28ccd825c09da939b) C:\Windows\system32\cryptsvc.dll 11:01:22.0819 2424 CryptSvc - ok 11:01:23.0506 2424 DcomLaunch (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll 11:01:23.0537 2424 DcomLaunch - ok 11:01:23.0849 2424 DfsC (218d8ae46c88e82014f5d73d0236d9b2) C:\Windows\system32\Drivers\dfsc.sys 11:01:23.0849 2424 DfsC - ok 11:01:25.0019 2424 DFSR (2cc3dcfb533a1035b13dcab6160ab38b) C:\Windows\system32\DFSR.exe 11:01:25.0097 2424 DFSR - ok 11:01:25.0892 2424 Dhcp (9028559c132146fb75eb7acf384b086a) C:\Windows\System32\dhcpcsvc.dll 11:01:25.0908 2424 Dhcp - ok 11:01:25.0955 2424 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys 11:01:25.0955 2424 disk - ok 11:01:26.0002 2424 Dnscache (30a08728740e71947ae1e073b5ce69b4) C:\Windows\System32\dnsrslvr.dll 11:01:26.0017 2424 Dnscache - ok 11:01:26.0454 2424 dot3svc (324fd74686b1ef5e7c19a8af49e748f6) C:\Windows\System32\dot3svc.dll 11:01:26.0485 2424 dot3svc - ok 11:01:26.0532 2424 DPS (a622e888f8aa2f6b49e9bc466f0e5def) C:\Windows\system32\dps.dll 11:01:26.0532 2424 DPS - ok 11:01:26.0548 2424 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys 11:01:26.0548 2424 drmkaud - ok 11:01:26.0922 2424 DSBrokerService (245f62a2aa67f4a61f10174bf1017327) C:\Program Files\DellSupport\brkrsvc.exe 11:01:26.0922 2424 DSBrokerService - ok 11:01:27.0000 2424 DSproct (413f2d5f9d802688242c23b38f767ecb) C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys 11:01:27.0000 2424 DSproct - ok 11:01:27.0031 2424 dsunidrv (dfeabb7cfffadea4a912ab95bdc3177a) C:\Windows\system32\DRIVERS\dsunidrv.sys 11:01:27.0031 2424 dsunidrv - ok 11:01:27.0140 2424 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys 11:01:27.0172 2424 DXGKrnl - ok 11:01:27.0203 2424 e1express (04944f4fc4f0477185f5d26ae0ddb90e) C:\Windows\system32\DRIVERS\e1e6032.sys 11:01:27.0218 2424 e1express - ok 11:01:27.0265 2424 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys 11:01:27.0265 2424 E1G60 - ok 11:01:27.0296 2424 EapHost (c0b95e40d85cd807d614e264248a45b9) C:\Windows\System32\eapsvc.dll 11:01:27.0312 2424 EapHost - ok 11:01:27.0359 2424 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys 11:01:27.0374 2424 Ecache - ok 11:01:27.0936 2424 ehRecvr (9be3744d295a7701eb425332014f0797) C:\Windows\ehome\ehRecvr.exe 11:01:27.0967 2424 ehRecvr - ok 11:01:27.0983 2424 ehSched (ad1870c8e5d6dd340c829e6074bf3c3f) C:\Windows\ehome\ehsched.exe 11:01:27.0998 2424 ehSched - ok 11:01:28.0030 2424 ehstart (c27c4ee8926e74aa72efcab24c5242c3) C:\Windows\ehome\ehstart.dll 11:01:28.0030 2424 ehstart - ok 11:01:28.0342 2424 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys 11:01:28.0357 2424 elxstor - ok 11:01:28.0934 2424 EMDMgmt (4e6b23dfc917ea39306b529b773950f4) C:\Windows\system32\emdmgmt.dll 11:01:28.0950 2424 EMDMgmt - ok 11:01:29.0059 2424 EventSystem (67058c46504bc12d821f38cf99b7b28f) C:\Windows\system32\es.dll 11:01:29.0215 2424 EventSystem - ok 11:01:29.0324 2424 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys 11:01:29.0340 2424 exfat - ok 11:01:29.0371 2424 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys 11:01:29.0371 2424 fastfat - ok 11:01:29.0418 2424 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys 11:01:29.0418 2424 fdc - ok 11:01:29.0512 2424 fdPHost (6629b5f0e98151f4afdd87567ea32ba3) C:\Windows\system32\fdPHost.dll 11:01:29.0527 2424 fdPHost - ok 11:01:29.0558 2424 FDResPub (89ed56dce8e47af40892778a5bd31fd2) C:\Windows\system32\fdrespub.dll 11:01:29.0558 2424 FDResPub - ok 11:01:29.0902 2424 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys 11:01:29.0948 2424 FileInfo - ok 11:01:29.0995 2424 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys 11:01:29.0995 2424 Filetrace - ok 11:01:30.0994 2424 FLEXnet Licensing Service (1f63900e2eb00101b9aca2b7a870704e) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe 11:01:31.0040 2424 FLEXnet Licensing Service - ok 11:01:31.0103 2424 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys 11:01:31.0118 2424 flpydisk - ok 11:01:31.0165 2424 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys 11:01:31.0181 2424 FltMgr - ok 11:01:31.0930 2424 FontCache (452feaab2a8dbb42ed751754cb2594f5) C:\Windows\system32\FntCache.dll 11:01:31.0976 2424 FontCache - ok 11:01:32.0335 2424 FontCache3.0.0.0 (c7fbdd1ed42f82bfa35167a5c9803ea3) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 11:01:32.0382 2424 FontCache3.0.0.0 - ok 11:01:32.0476 2424 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys 11:01:32.0476 2424 Fs_Rec - ok 11:01:32.0522 2424 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys 11:01:32.0522 2424 gagp30kx - ok 11:01:32.0554 2424 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 11:01:32.0554 2424 GEARAspiWDM - ok 11:01:33.0022 2424 gpsvc (cd5d0aeee35dfd4e986a5aa1500a6e66) C:\Windows\System32\gpsvc.dll 11:01:33.0037 2424 gpsvc - ok 11:01:33.0552 2424 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe 11:01:33.0552 2424 gupdate - ok 11:01:33.0568 2424 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe 11:01:33.0568 2424 gupdatem - ok 11:01:34.0004 2424 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys 11:01:34.0036 2424 HDAudBus - ok 11:01:34.0051 2424 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys 11:01:34.0082 2424 HidBth - ok 11:01:34.0098 2424 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys 11:01:34.0098 2424 HidIr - ok 11:01:34.0145 2424 hidserv (84067081f3318162797385e11a8f0582) C:\Windows\System32\hidserv.dll 11:01:34.0160 2424 hidserv - ok 11:01:34.0176 2424 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys 11:01:34.0176 2424 HidUsb - ok 11:01:34.0426 2424 hkmsvc (d8ad255b37da92434c26e4876db7d418) C:\Windows\system32\kmsvc.dll 11:01:34.0441 2424 hkmsvc - ok 11:01:34.0472 2424 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys 11:01:34.0472 2424 HpCISSs - ok 11:01:34.0862 2424 HSF_DPV (53229dcf431d76434816cd29251168a0) C:\Windows\system32\DRIVERS\HSX_DPV.sys 11:01:34.0909 2424 HSF_DPV - ok 11:01:34.0940 2424 HSXHWBS2 (ed98350ecd4a5a9c9f1e641c09872bb2) C:\Windows\system32\DRIVERS\HSXHWBS2.sys 11:01:34.0956 2424 HSXHWBS2 - ok 11:01:35.0003 2424 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys 11:01:35.0018 2424 HTTP - ok 11:01:35.0050 2424 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys 11:01:35.0050 2424 i2omp - ok 11:01:35.0081 2424 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys 11:01:35.0081 2424 i8042prt - ok 11:01:35.0518 2424 iaStor (997e8f5939f2d12cd9f2e6b395724c16) C:\Windows\system32\drivers\iastor.sys 11:01:35.0549 2424 iaStor - ok 11:01:35.0611 2424 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys 11:01:35.0658 2424 iaStorV - ok 11:01:36.0032 2424 IDriverT (6f95324909b502e2651442c1548ab12f) C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe 11:01:36.0064 2424 IDriverT - ok 11:01:37.0062 2424 idsvc (98477b08e61945f974ed9fdc4cb6bdab) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 11:01:37.0124 2424 idsvc - ok 11:01:38.0107 2424 igfx (c134e69ce901422d1f2d7ea8d69098fe) C:\Windows\system32\DRIVERS\igdkmd32.sys 11:01:38.0170 2424 igfx - ok 11:01:39.0074 2424 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys 11:01:39.0074 2424 iirsp - ok 11:01:39.0168 2424 IKEEXT (9908d8a397b76cd8d31d0d383c5773c9) C:\Windows\System32\ikeext.dll 11:01:39.0246 2424 IKEEXT - ok 11:01:39.0574 2424 IntcAzAudAddService (4eae74c8bcbca309a5d7cbad7e231427) C:\Windows\system32\drivers\RTKVHDA.sys 11:01:39.0636 2424 IntcAzAudAddService - ok 11:01:40.0088 2424 intelide (0084046c084d68e494f8cf36bcf08186) C:\Windows\system32\DRIVERS\intelide.sys 11:01:40.0088 2424 intelide - ok 11:01:40.0307 2424 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys 11:01:40.0322 2424 intelppm - ok 11:01:40.0369 2424 IPBusEnum (9ac218c6e6105477484c6fdbe7d409a4) C:\Windows\system32\ipbusenum.dll 11:01:40.0385 2424 IPBusEnum - ok 11:01:40.0416 2424 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys 11:01:40.0416 2424 IpFilterDriver - ok 11:01:40.0463 2424 iphlpsvc (7f83b06a929a981bc001b2ea304d2036) C:\Windows\System32\iphlpsvc.dll 11:01:40.0478 2424 iphlpsvc - ok 11:01:40.0494 2424 IpInIp - ok 11:01:40.0510 2424 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys 11:01:40.0510 2424 IPMIDRV - ok 11:01:40.0556 2424 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys 11:01:40.0556 2424 IPNAT - ok 11:01:41.0102 2424 iPod Service (178fe38b7740f598391eb2f51ae4ccac) C:\Program Files\iPod\bin\iPodService.exe 11:01:41.0149 2424 iPod Service - ok 11:01:41.0180 2424 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys 11:01:41.0180 2424 IRENUM - ok 11:01:41.0274 2424 isapnp (2f8ece2699e7e2070545e9b0960a8ed2) C:\Windows\system32\drivers\isapnp.sys 11:01:41.0290 2424 isapnp - ok 11:01:41.0336 2424 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys 11:01:41.0352 2424 iScsiPrt - ok 11:01:41.0368 2424 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys 11:01:41.0383 2424 iteatapi - ok 11:01:41.0399 2424 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys 11:01:41.0399 2424 iteraid - ok 11:01:41.0430 2424 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys 11:01:41.0430 2424 kbdclass - ok 11:01:41.0555 2424 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys 11:01:41.0586 2424 kbdhid - ok 11:01:41.0633 2424 KeyIso (3978f3540329e16c0ac3bcf677e5669f) C:\Windows\system32\lsass.exe 11:01:41.0633 2424 KeyIso - ok 11:01:41.0680 2424 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys 11:01:41.0695 2424 KSecDD - ok 11:01:42.0101 2424 KtmRm (8078f8f8f7a79e2e6b494523a828c585) C:\Windows\system32\msdtckrm.dll 11:01:42.0116 2424 KtmRm - ok 11:01:42.0179 2424 LanmanServer (43446f197c74ef2030f84b3a4f39d570) C:\Windows\System32\srvsvc.dll 11:01:42.0257 2424 LanmanServer - ok 11:01:42.0304 2424 LanmanWorkstation (1db69705b695b987082c8baec0c6b34f) C:\Windows\System32\wkssvc.dll 11:01:42.0350 2424 LanmanWorkstation - ok 11:01:42.0678 2424 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys 11:01:42.0678 2424 lltdio - ok 11:01:42.0959 2424 lltdsvc (2d5a428872f1442631d0959a34abff63) C:\Windows\System32\lltdsvc.dll 11:01:42.0974 2424 lltdsvc - ok 11:01:43.0006 2424 lmhosts (35d40113e4a5b961b6ce5c5857702518) C:\Windows\System32\lmhsvc.dll 11:01:43.0037 2424 lmhosts - ok 11:01:43.0099 2424 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys 11:01:43.0115 2424 LSI_FC - ok 11:01:43.0130 2424 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys 11:01:43.0146 2424 LSI_SAS - ok 11:01:43.0177 2424 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys 11:01:43.0177 2424 LSI_SCSI - ok 11:01:43.0208 2424 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys 11:01:43.0224 2424 luafv - ok 11:01:44.0160 2424 McciCMService (e6cb119ef2e148eaa1a247343550756e) C:\Program Files\Common Files\Motive\McciCMService.exe 11:01:44.0160 2424 McciCMService - ok 11:01:44.0425 2424 Mcx2Svc (aef9babb8a506bc4ce0451a64aaded46) C:\Windows\system32\Mcx2Svc.dll 11:01:44.0441 2424 Mcx2Svc - ok 11:01:44.0519 2424 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\Windows\system32\DRIVERS\mdmxsdk.sys 11:01:44.0550 2424 mdmxsdk - ok 11:01:44.0628 2424 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys 11:01:44.0644 2424 megasas - ok 11:01:44.0690 2424 MMCSS (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll 11:01:44.0690 2424 MMCSS - ok 11:01:44.0753 2424 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys 11:01:44.0753 2424 Modem - ok 11:01:44.0768 2424 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys 11:01:44.0768 2424 monitor - ok 11:01:44.0815 2424 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys 11:01:44.0815 2424 mouclass - ok 11:01:44.0846 2424 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys 11:01:44.0846 2424 mouhid - ok 11:01:44.0878 2424 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys 11:01:44.0878 2424 MountMgr - ok 11:01:44.0909 2424 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys 11:01:44.0909 2424 mpio - ok 11:01:44.0940 2424 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys 11:01:44.0940 2424 mpsdrv - ok 11:01:45.0049 2424 MpsSvc (5de62c6e9108f14f6794060a9bdecaec) C:\Windows\system32\mpssvc.dll 11:01:45.0080 2424 MpsSvc - ok 11:01:45.0112 2424 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys 11:01:45.0112 2424 Mraid35x - ok 11:01:45.0236 2424 MREMP50 (9bd4dcb5412921864a7aacdedfbd1923) C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS 11:01:45.0252 2424 MREMP50 - ok 11:01:45.0252 2424 MREMP50a64 - ok 11:01:45.0252 2424 MREMPR5 - ok 11:01:45.0268 2424 MRENDIS5 - ok 11:01:45.0346 2424 MRESP50 (07c02c892e8e1a72d6bf35004f0e9c5e) C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS 11:01:45.0361 2424 MRESP50 - ok 11:01:45.0361 2424 MRESP50a64 - ok 11:01:46.0063 2424 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys 11:01:46.0110 2424 MRxDAV - ok 11:01:46.0141 2424 mrxsmb (454341e652bdf5e01b0f2140232b073e) C:\Windows\system32\DRIVERS\mrxsmb.sys 11:01:46.0141 2424 mrxsmb - ok 11:01:46.0157 2424 mrxsmb10 (2a4901aff069944fa945ed5bbf4dcde3) C:\Windows\system32\DRIVERS\mrxsmb10.sys 11:01:46.0172 2424 mrxsmb10 - ok 11:01:46.0188 2424 mrxsmb20 (28b3f1ab44bdd4432c041581412f17d9) C:\Windows\system32\DRIVERS\mrxsmb20.sys 11:01:46.0204 2424 mrxsmb20 - ok 11:01:46.0375 2424 msahci (d420bc42a637ac3cc4f411220549c0dc) C:\Windows\system32\drivers\msahci.sys 11:01:46.0391 2424 msahci - ok 11:01:46.0406 2424 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys 11:01:46.0406 2424 msdsm - ok 11:01:46.0438 2424 MSDTC (fd7520cc3a80c5fc8c48852bb24c6ded) C:\Windows\System32\msdtc.exe 11:01:46.0453 2424 MSDTC - ok 11:01:46.0594 2424 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys 11:01:46.0594 2424 Msfs - ok 11:01:46.0625 2424 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys 11:01:46.0640 2424 msisadrv - ok 11:01:46.0687 2424 MSiSCSI (85466c0757a23d9a9aecdc0755203cb2) C:\Windows\system32\iscsiexe.dll 11:01:46.0687 2424 MSiSCSI - ok 11:01:46.0703 2424 msiserver - ok 11:01:46.0718 2424 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys 11:01:46.0718 2424 MSKSSRV - ok 11:01:46.0750 2424 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys 11:01:46.0750 2424 MSPCLOCK - ok 11:01:46.0750 2424 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys 11:01:46.0750 2424 MSPQM - ok 11:01:46.0812 2424 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys 11:01:46.0812 2424 MsRPC - ok 11:01:46.0859 2424 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys 11:01:46.0859 2424 mssmbios - ok 11:01:46.0921 2424 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys 11:01:46.0921 2424 MSTEE - ok 11:01:46.0937 2424 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys 11:01:46.0937 2424 Mup - ok 11:01:46.0984 2424 napagent (e4eaf0c5c1b41b5c83386cf212ca9584) C:\Windows\system32\qagentRT.dll 11:01:47.0046 2424 napagent - ok 11:01:47.0171 2424 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys 11:01:47.0186 2424 NativeWifiP - ok 11:01:47.0311 2424 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys 11:01:47.0327 2424 NDIS - ok 11:01:47.0374 2424 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys 11:01:47.0374 2424 NdisTapi - ok 11:01:47.0405 2424 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys 11:01:47.0405 2424 Ndisuio - ok 11:01:47.0452 2424 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys 11:01:47.0483 2424 NdisWan - ok 11:01:47.0530 2424 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys 11:01:47.0530 2424 NDProxy - ok 11:01:47.0545 2424 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys 11:01:47.0545 2424 NetBIOS - ok 11:01:47.0608 2424 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys 11:01:47.0639 2424 netbt - ok 11:01:47.0701 2424 Netlogon (3978f3540329e16c0ac3bcf677e5669f) C:\Windows\system32\lsass.exe 11:01:47.0701 2424 Netlogon - ok 11:01:47.0779 2424 Netman (c8052711daecc48b982434c5116ca401) C:\Windows\System32\netman.dll 11:01:47.0810 2424 Netman - ok 11:01:48.0091 2424 netprofm (2ef3bbe22e5a5acd1428ee387a0d0172) C:\Windows\System32\netprofm.dll 11:01:48.0107 2424 netprofm - ok 11:01:48.0216 2424 NetTcpPortSharing (d6c4e4a39a36029ac0813d476fbd0248) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 11:01:48.0232 2424 NetTcpPortSharing - ok 11:01:48.0419 2424 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys 11:01:48.0419 2424 nfrd960 - ok 11:01:48.0466 2424 NlaSvc (2997b15415f9bbe05b5a4c1c85e0c6a2) C:\Windows\System32\nlasvc.dll 11:01:48.0481 2424 NlaSvc - ok 11:01:48.0559 2424 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys 11:01:48.0575 2424 Npfs - ok 11:01:48.0622 2424 nsi (8bb86f0c7eea2bded6fe095d0b4ca9bd) C:\Windows\system32\nsisvc.dll 11:01:48.0637 2424 nsi - ok 11:01:48.0684 2424 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys 11:01:48.0684 2424 nsiproxy - ok 11:01:48.0793 2424 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys 11:01:48.0856 2424 Ntfs - ok 11:01:48.0965 2424 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys 11:01:48.0980 2424 ntrigdigi - ok 11:01:49.0012 2424 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys 11:01:49.0012 2424 Null - ok 11:01:49.0058 2424 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys 11:01:49.0074 2424 nvraid - ok 11:01:49.0090 2424 nvstor (9e0ba19a28c498a6d323d065db76dffc) C:\Windows\system32\drivers\nvstor.sys 11:01:49.0090 2424 nvstor - ok 11:01:49.0121 2424 nv_agp (055081fd5076401c1ee1bcab08d81911) C:\Windows\system32\drivers\nv_agp.sys 11:01:49.0136 2424 nv_agp - ok 11:01:49.0136 2424 NwlnkFlt - ok 11:01:49.0136 2424 NwlnkFwd - ok 11:01:49.0168 2424 ohci1394 (be32da025a0be1878f0ee8d6d9386cd5) C:\Windows\system32\drivers\ohci1394.sys 11:01:49.0168 2424 ohci1394 - ok 11:01:49.0464 2424 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 11:01:49.0480 2424 ose - ok 11:01:49.0807 2424 p2pimsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 11:01:49.0838 2424 p2pimsvc - ok 11:01:49.0838 2424 p2psvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 11:01:49.0854 2424 p2psvc - ok 11:01:50.0057 2424 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys 11:01:50.0057 2424 Parport - ok 11:01:50.0166 2424 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys 11:01:50.0182 2424 partmgr - ok 11:01:50.0213 2424 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys 11:01:50.0213 2424 Parvdm - ok 11:01:50.0260 2424 PcaSvc (c6276ad11f4bb49b58aa1ed88537f14a) C:\Windows\System32\pcasvc.dll 11:01:50.0275 2424 PcaSvc - ok 11:01:50.0338 2424 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys 11:01:50.0353 2424 pci - ok 11:01:50.0369 2424 pciide (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\drivers\pciide.sys 11:01:50.0384 2424 pciide - ok 11:01:50.0416 2424 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys 11:01:50.0416 2424 pcmcia - ok 11:01:50.0494 2424 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys 11:01:50.0509 2424 PEAUTH - ok 11:01:51.0258 2424 pla (b1689df169143f57053f795390c99db3) C:\Windows\system32\pla.dll 11:01:51.0305 2424 pla - ok 11:01:53.0270 2424 PlugPlay (c5e7f8a996ec0a82d508fd9064a5569e) C:\Windows\system32\umpnpmgr.dll 11:01:53.0270 2424 PlugPlay - ok 11:01:54.0331 2424 PNRPAutoReg (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 11:01:54.0347 2424 PNRPAutoReg - ok 11:01:54.0378 2424 PNRPsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 11:01:54.0378 2424 PNRPsvc - ok 11:01:55.0096 2424 PolicyAgent (d0494460421a03cd5225cca0059aa146) C:\Windows\System32\ipsecsvc.dll 11:01:55.0111 2424 PolicyAgent - ok 11:01:55.0470 2424 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys 11:01:55.0501 2424 PptpMiniport - ok 11:01:55.0704 2424 Processor (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys 11:01:55.0720 2424 Processor - ok 11:01:55.0860 2424 ProfSvc (0508faa222d28835310b7bfca7a77346) C:\Windows\system32\profsvc.dll 11:01:55.0876 2424 ProfSvc - ok 11:01:55.0907 2424 ProtectedStorage (3978f3540329e16c0ac3bcf677e5669f) C:\Windows\system32\lsass.exe 11:01:55.0907 2424 ProtectedStorage - ok 11:01:56.0297 2424 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys 11:01:56.0328 2424 PSched - ok 11:01:56.0921 2424 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\Windows\system32\Drivers\PxHelp20.sys 11:01:56.0968 2424 PxHelp20 - ok 11:01:57.0280 2424 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys 11:01:57.0311 2424 ql2300 - ok 11:01:57.0358 2424 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys 11:01:57.0373 2424 ql40xx - ok 11:01:57.0404 2424 QWAVE (e9ecae663f47e6cb43962d18ab18890f) C:\Windows\system32\qwave.dll 11:01:57.0420 2424 QWAVE - ok 11:01:57.0498 2424 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys 11:01:57.0514 2424 QWAVEdrv - ok 11:01:58.0372 2424 R300 (e642b131fb74caf4bb8a014f31113142) C:\Windows\system32\DRIVERS\atikmdag.sys 11:01:58.0465 2424 R300 - ok 11:01:59.0276 2424 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys 11:01:59.0308 2424 RasAcd - ok 11:01:59.0339 2424 RasAuto (f6a452eb4ceadbb51c9e0ee6b3ecef0f) C:\Windows\System32\rasauto.dll 11:01:59.0354 2424 RasAuto - ok 11:01:59.0401 2424 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys 11:01:59.0401 2424 Rasl2tp - ok 11:01:59.0448 2424 RasMan (75d47445d70ca6f9f894b032fbc64fcf) C:\Windows\System32\rasmans.dll 11:01:59.0526 2424 RasMan - ok 11:01:59.0776 2424 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys 11:01:59.0776 2424 RasPppoe - ok 11:01:59.0822 2424 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys 11:01:59.0822 2424 RasSstp - ok 11:01:59.0885 2424 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys 11:01:59.0900 2424 rdbss - ok 11:01:59.0947 2424 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys 11:01:59.0963 2424 RDPCDD - ok 11:02:00.0010 2424 rdpdr (0245418224cfa77bf4b41c2fe0622258) C:\Windows\system32\drivers\rdpdr.sys 11:02:00.0025 2424 rdpdr - ok 11:02:00.0056 2424 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys 11:02:00.0056 2424 RDPENCDD - ok 11:02:00.0103 2424 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys 11:02:00.0134 2424 RDPWD - ok 11:02:00.0166 2424 RemoteAccess (bcdd6b4804d06b1f7ebf29e53a57ece9) C:\Windows\System32\mprdim.dll 11:02:00.0166 2424 RemoteAccess - ok 11:02:00.0368 2424 RemoteRegistry (9e6894ea18daff37b63e1005f83ae4ab) C:\Windows\system32\regsvc.dll 11:02:00.0384 2424 RemoteRegistry - ok 11:02:01.0398 2424 RoxMediaDB9 (ebcde8b48fadc6479d96a56d0a432160) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe 11:02:01.0460 2424 RoxMediaDB9 - ok 11:02:01.0492 2424 RoxWatch9 (ab2b1de1c8f31efce2384b14b3dc4260) C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe 11:02:01.0507 2424 RoxWatch9 - ok 11:02:01.0554 2424 RpcLocator (5123f83cbc4349d065534eeb6bbdc42b) C:\Windows\system32\locator.exe 11:02:01.0554 2424 RpcLocator - ok 11:02:01.0960 2424 RpcSs (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll 11:02:01.0960 2424 RpcSs - ok 11:02:02.0412 2424 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys 11:02:02.0412 2424 rspndr - ok 11:02:02.0443 2424 SamSs (3978f3540329e16c0ac3bcf677e5669f) C:\Windows\system32\lsass.exe 11:02:02.0459 2424 SamSs - ok 11:02:02.0646 2424 SASDIFSV (c030c9a39e85b6f04a8dd25d1a50258a) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS 11:02:02.0662 2424 SASDIFSV - ok 11:02:02.0677 2424 SASENUM (e9c2d75c748c3f0a4c34d6cf2ae1d754) C:\Program Files\SUPERAntiSpyware\SASENUM.SYS 11:02:02.0677 2424 SASENUM - ok 11:02:02.0708 2424 SASKUTIL (64c100dbf57c6cb6e7d5d24153f5e444) C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys 11:02:02.0708 2424 SASKUTIL - ok 11:02:02.0740 2424 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys 11:02:02.0740 2424 sbp2port - ok 11:02:02.0802 2424 SCardSvr (77b7a11a0c3d78d3386398fbbea1b632) C:\Windows\System32\SCardSvr.dll 11:02:02.0802 2424 SCardSvr - ok 11:02:03.0005 2424 Schedule (323ae0bdfd2eb15b668dda50cc597329) C:\Windows\system32\schedsvc.dll 11:02:03.0036 2424 Schedule - ok 11:02:03.0067 2424 SCPolicySvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll 11:02:03.0067 2424 SCPolicySvc - ok 11:02:03.0114 2424 SDRSVC (716313d9f6b0529d03f726d5aaf6f191) C:\Windows\System32\SDRSVC.dll 11:02:03.0130 2424 SDRSVC - ok 11:02:03.0130 2424 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys 11:02:03.0130 2424 secdrv - ok 11:02:03.0176 2424 seclogon (fd5199d4d8a521005e4b5ee7fe00fa9b) C:\Windows\system32\seclogon.dll 11:02:03.0176 2424 seclogon - ok 11:02:03.0239 2424 SENS (a9bbab5759771e523f55563d6cbe140f) C:\Windows\system32\sens.dll 11:02:03.0239 2424 SENS - ok 11:02:03.0348 2424 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys 11:02:03.0364 2424 Serenum - ok 11:02:03.0379 2424 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys 11:02:03.0395 2424 Serial - ok 11:02:03.0426 2424 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys 11:02:03.0426 2424 sermouse - ok 11:02:03.0473 2424 SessionEnv (d2193326f729b163125610dbf3e17d57) C:\Windows\system32\sessenv.dll 11:02:03.0488 2424 SessionEnv - ok 11:02:03.0520 2424 sffdisk (51cf56aa8bcc241f134b420b8f850406) C:\Windows\system32\drivers\sffdisk.sys 11:02:03.0520 2424 sffdisk - ok 11:02:03.0520 2424 sffp_mmc (96ded8b20c734ac41641ce275250e55d) C:\Windows\system32\drivers\sffp_mmc.sys 11:02:03.0535 2424 sffp_mmc - ok 11:02:03.0535 2424 sffp_sd (8b08cab1267b2c377883fc9e56981f90) C:\Windows\system32\drivers\sffp_sd.sys 11:02:03.0535 2424 sffp_sd - ok 11:02:03.0551 2424 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys 11:02:03.0551 2424 sfloppy - ok 11:02:03.0613 2424 SharedAccess (e1499bd0ff76b1b2fbbf1af339d91165) C:\Windows\System32\ipnathlp.dll 11:02:03.0613 2424 SharedAccess - ok 11:02:03.0707 2424 ShellHWDetection (c818c44c201898399bf999bb6b35d4e3) C:\Windows\System32\shsvcs.dll 11:02:03.0722 2424 ShellHWDetection - ok 11:02:03.0754 2424 sisagp (08072b2fb92477fc813271a84b3a8698) C:\Windows\system32\drivers\sisagp.sys 11:02:03.0754 2424 sisagp - ok 11:02:03.0785 2424 SiSRaid2 (cedd6f4e7d84e9f98b34b3fe988373aa) C:\Windows\system32\drivers\sisraid2.sys 11:02:03.0785 2424 SiSRaid2 - ok 11:02:03.0800 2424 SiSRaid4 (df843c528c4f69d12ce41ce462e973a7) C:\Windows\system32\drivers\sisraid4.sys 11:02:03.0800 2424 SiSRaid4 - ok 11:02:04.0580 2424 slsvc (862bb4cbc05d80c5b45be430e5ef872f) C:\Windows\system32\SLsvc.exe 11:02:04.0690 2424 slsvc - ok 11:02:05.0376 2424 SLUINotify (6edc422215cd78aa8a9cde6b30abbd35) C:\Windows\system32\SLUINotify.dll 11:02:05.0376 2424 SLUINotify - ok 11:02:05.0454 2424 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys 11:02:05.0454 2424 Smb - ok 11:02:05.0485 2424 SNMPTRAP (2a146a055b4401c16ee62d18b8e2a032) C:\Windows\System32\snmptrap.exe 11:02:05.0501 2424 SNMPTRAP - ok 11:02:05.0548 2424 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys 11:02:05.0548 2424 spldr - ok 11:02:05.0610 2424 Spooler (524bfbea40e6e404737ccbc754647a2e) C:\Windows\System32\spoolsv.exe 11:02:05.0626 2424 Spooler - ok 11:02:05.0657 2424 srv (96a5e2c642af8f591a7366429809506b) C:\Windows\system32\DRIVERS\srv.sys 11:02:05.0672 2424 srv - ok 11:02:05.0704 2424 srv2 (71da2d64880c97e5ffc3c81761632751) C:\Windows\system32\DRIVERS\srv2.sys 11:02:05.0704 2424 srv2 - ok 11:02:05.0750 2424 srvnet (0c5ab1892ae0fa504218db094bf6d041) C:\Windows\system32\DRIVERS\srvnet.sys 11:02:05.0766 2424 srvnet - ok 11:02:05.0828 2424 SSDPSRV (03d50b37234967433a5ea5ba72bc0b62) C:\Windows\System32\ssdpsrv.dll 11:02:05.0828 2424 SSDPSRV - ok 11:02:05.0906 2424 SstpSvc (6f1a32e7b7b30f004d9a20afadb14944) C:\Windows\system32\sstpsvc.dll 11:02:05.0922 2424 SstpSvc - ok 11:02:06.0000 2424 stisvc (5de7d67e49b88f5f07f3e53c4b92a352) C:\Windows\System32\wiaservc.dll 11:02:06.0047 2424 stisvc - ok 11:02:06.0421 2424 stllssvr (51778fd315c9882f1cbd932743e62a72) C:\Program Files\Common Files\SureThing Shared\stllssvr.exe 11:02:06.0437 2424 stllssvr - ok 11:02:06.0530 2424 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys 11:02:06.0546 2424 swenum - ok 11:02:06.0624 2424 swprv (f21fd248040681cca1fb6c9a03aaa93d) C:\Windows\System32\swprv.dll 11:02:06.0640 2424 swprv - ok 11:02:06.0718 2424 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys 11:02:06.0733 2424 Symc8xx - ok 11:02:06.0749 2424 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys 11:02:06.0749 2424 Sym_hi - ok 11:02:06.0764 2424 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys 11:02:06.0780 2424 Sym_u3 - ok 11:02:06.0827 2424 SysMain (9a51b04e9886aa4ee90093586b0ba88d) C:\Windows\system32\sysmain.dll 11:02:06.0858 2424 SysMain - ok 11:02:06.0889 2424 TabletInputService (2dca225eae15f42c0933e998ee0231c3) C:\Windows\System32\TabSvc.dll 11:02:06.0920 2424 TabletInputService - ok 11:02:06.0983 2424 TapiSrv (d7673e4b38ce21ee54c59eeeb65e2483) C:\Windows\System32\tapisrv.dll 11:02:06.0998 2424 TapiSrv - ok 11:02:07.0076 2424 TBS (cb05822cd9cc6c688168e113c603dbe7) C:\Windows\System32\tbssvc.dll 11:02:07.0092 2424 TBS - ok 11:02:07.0186 2424 Tcpip (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\drivers\tcpip.sys 11:02:07.0217 2424 Tcpip - ok 11:02:07.0232 2424 Tcpip6 (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\DRIVERS\tcpip.sys 11:02:07.0232 2424 Tcpip6 - ok 11:02:07.0498 2424 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys 11:02:07.0498 2424 tcpipreg - ok 11:02:07.0576 2424 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys 11:02:07.0591 2424 TDPIPE - ok 11:02:07.0622 2424 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys 11:02:07.0622 2424 TDTCP - ok 11:02:07.0654 2424 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys 11:02:07.0669 2424 tdx - ok 11:02:07.0716 2424 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys 11:02:07.0716 2424 TermDD - ok 11:02:07.0778 2424 TermService (bb95da09bef6e7a131bff3ba5032090d) C:\Windows\System32\termsrv.dll 11:02:07.0825 2424 TermService - ok 11:02:07.0856 2424 Themes (c818c44c201898399bf999bb6b35d4e3) C:\Windows\system32\shsvcs.dll 11:02:07.0856 2424 Themes - ok 11:02:07.0903 2424 THREADORDER (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll 11:02:07.0903 2424 THREADORDER - ok 11:02:08.0137 2424 TrkWks (ec74e77d0eb004bd3a809b5f8fb8c2ce) C:\Windows\System32\trkwks.dll 11:02:08.0153 2424 TrkWks - ok 11:02:08.0200 2424 TrustedInstaller (97d9d6a04e3ad9b6c626b9931db78dba) C:\Windows\servicing\TrustedInstaller.exe 11:02:08.0200 2424 TrustedInstaller - ok 11:02:08.0231 2424 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys 11:02:08.0231 2424 tssecsrv - ok 11:02:08.0262 2424 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys 11:02:08.0262 2424 tunmp - ok 11:02:08.0324 2424 tunnel (119b8184e106baedc83fce5ddf3950da) C:\Windows\system32\DRIVERS\tunnel.sys 11:02:08.0340 2424 tunnel - ok 11:02:08.0387 2424 uagp35 (c3ade15414120033a36c0f293d4a4121) C:\Windows\system32\drivers\uagp35.sys 11:02:08.0387 2424 uagp35 - ok 11:02:08.0449 2424 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys 11:02:08.0465 2424 udfs - ok 11:02:08.0636 2424 UI0Detect (ecef404f62863755951e09c802c94ad5) C:\Windows\system32\UI0Detect.exe 11:02:08.0652 2424 UI0Detect - ok 11:02:08.0668 2424 uliagpkx (6d72ef05921abdf59fc45c7ebfe7e8dd) C:\Windows\system32\drivers\uliagpkx.sys 11:02:08.0668 2424 uliagpkx - ok 11:02:08.0699 2424 uliahci (3cd4ea35a6221b85dcc25daa46313f8d) C:\Windows\system32\drivers\uliahci.sys 11:02:08.0714 2424 uliahci - ok 11:02:08.0730 2424 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys 11:02:08.0730 2424 UlSata - ok 11:02:08.0761 2424 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys 11:02:08.0761 2424 ulsata2 - ok 11:02:08.0792 2424 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys 11:02:08.0792 2424 umbus - ok 11:02:08.0948 2424 upnphost (68308183f4ae0be7bf8ecd07cb297999) C:\Windows\System32\upnphost.dll 11:02:08.0964 2424 upnphost - ok 11:02:09.0042 2424 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\Windows\system32\Drivers\usbaapl.sys 11:02:09.0042 2424 USBAAPL - ok 11:02:09.0089 2424 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys 11:02:09.0089 2424 usbccgp - ok 11:02:09.0151 2424 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys 11:02:09.0167 2424 usbcir - ok 11:02:09.0198 2424 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys 11:02:09.0198 2424 usbehci - ok 11:02:09.0229 2424 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys 11:02:09.0245 2424 usbhub - ok 11:02:09.0276 2424 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys 11:02:09.0276 2424 usbohci - ok 11:02:09.0323 2424 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys 11:02:09.0338 2424 usbprint - ok 11:02:09.0370 2424 usbscan (a508c9bd8724980512136b039bba65e9) C:\Windows\system32\DRIVERS\usbscan.sys 11:02:09.0370 2424 usbscan - ok 11:02:09.0401 2424 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS 11:02:09.0401 2424 USBSTOR - ok 11:02:09.0448 2424 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys 11:02:09.0448 2424 usbuhci - ok 11:02:09.0494 2424 UxSms (1509e705f3ac1d474c92454a5c2dd81f) C:\Windows\System32\uxsms.dll 11:02:09.0494 2424 UxSms - ok 11:02:09.0557 2424 vds (cd88d1b7776dc17a119049742ec07eb4) C:\Windows\System32\vds.exe 11:02:09.0604 2424 vds - ok 11:02:09.0635 2424 vga (7d92be0028ecdedec74617009084b5ef) C:\Windows\system32\DRIVERS\vgapnp.sys 11:02:09.0635 2424 vga - ok 11:02:09.0666 2424 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys 11:02:09.0666 2424 VgaSave - ok 11:02:09.0697 2424 viaagp (d5929a28bdff4367a12caf06af901971) C:\Windows\system32\drivers\viaagp.sys 11:02:09.0697 2424 viaagp - ok 11:02:09.0838 2424 ViaC7 (56a4de5f02f2e88182b0981119b4dd98) C:\Windows\system32\drivers\viac7.sys 11:02:09.0838 2424 ViaC7 - ok 11:02:09.0853 2424 viaide (f3b4762eb85a2aff4999401f14c3262b) C:\Windows\system32\drivers\viaide.sys 11:02:09.0853 2424 viaide - ok 11:02:09.0884 2424 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys 11:02:09.0900 2424 volmgr - ok 11:02:09.0947 2424 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys 11:02:09.0962 2424 volmgrx - ok 11:02:10.0134 2424 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys 11:02:10.0150 2424 volsnap - ok 11:02:10.0181 2424 vsmraid (d984439746d42b30fc65a4c3546c6829) C:\Windows\system32\drivers\vsmraid.sys 11:02:10.0196 2424 vsmraid - ok 11:02:10.0493 2424 VSS (db3d19f850c6eb32bdcb9bc0836acddb) C:\Windows\system32\vssvc.exe 11:02:10.0540 2424 VSS - ok 11:02:11.0304 2424 W32Time (96ea68b9eb310a69c25ebb0282b2b9de) C:\Windows\system32\w32time.dll 11:02:11.0320 2424 W32Time - ok 11:02:11.0460 2424 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys 11:02:11.0476 2424 WacomPen - ok 11:02:11.0507 2424 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 11:02:11.0507 2424 Wanarp - ok 11:02:11.0507 2424 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 11:02:11.0507 2424 Wanarpv6 - ok 11:02:11.0803 2424 wcncsvc (a3cd60fd826381b49f03832590e069af) C:\Windows\System32\wcncsvc.dll 11:02:11.0834 2424 wcncsvc - ok 11:02:11.0850 2424 WcsPlugInService (11bcb7afcdd7aadacb5746f544d3a9c7) C:\Windows\System32\WcsPlugInService.dll 11:02:11.0866 2424 WcsPlugInService - ok 11:02:11.0897 2424 Wd (afc5ad65b991c1e205cf25cfdbf7a6f4) C:\Windows\system32\drivers\wd.sys 11:02:11.0897 2424 Wd - ok 11:02:12.0552 2424 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys 11:02:12.0599 2424 Wdf01000 - ok 11:02:12.0646 2424 WdiServiceHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll 11:02:12.0646 2424 WdiServiceHost - ok 11:02:12.0646 2424 WdiSystemHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll 11:02:12.0661 2424 WdiSystemHost - ok 11:02:12.0864 2424 WebClient (04c37d8107320312fbae09926103d5e2) C:\Windows\System32\webclnt.dll 11:02:12.0880 2424 WebClient - ok 11:02:12.0911 2424 Wecsvc (905214925a88311fce52f66153de7610) C:\Windows\system32\wecsvc.dll 11:02:12.0942 2424 Wecsvc - ok 11:02:12.0973 2424 wercplsupport (670ff720071ed741206d69bd995ea453) C:\Windows\System32\wercplsupport.dll 11:02:12.0989 2424 wercplsupport - ok 11:02:13.0535 2424 WerSvc (32b88481d3b326da6deb07b1d03481e7) C:\Windows\System32\WerSvc.dll 11:02:13.0550 2424 WerSvc - ok 11:02:13.0613 2424 winachsf (6d2350bb6e77e800fc4be4e5b7a2e89a) C:\Windows\system32\DRIVERS\HSX_CNXT.sys 11:02:13.0660 2424 winachsf - ok 11:02:14.0564 2424 WinDefend (4575aa12561c5648483403541d0d7f2b) C:\Program Files\Windows Defender\mpsvc.dll 11:02:14.0580 2424 WinDefend - ok 11:02:14.0596 2424 WinHttpAutoProxySvc - ok 11:02:15.0079 2424 Winmgmt (6b2a1d0e80110e3d04e6863c6e62fd8a) C:\Windows\system32\wbem\WMIsvc.dll 11:02:15.0079 2424 Winmgmt - ok 11:02:15.0157 2424 WinRM (01874d4689c212460fbabf0ecd7cb7f7) C:\Windows\system32\WsmSvc.dll 11:02:15.0188 2424 WinRM - ok 11:02:15.0610 2424 Wlansvc (c008405e4feeb069e30da1d823910234) C:\Windows\System32\wlansvc.dll 11:02:15.0625 2424 Wlansvc - ok 11:02:16.0405 2424 wlidsvc (5144ae67d60ec653f97ddf3feed29e77) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 11:02:16.0483 2424 wlidsvc - ok 11:02:16.0592 2424 WLSetupSvc (94a85e956a065e23e0010a6a7826243b) C:\Program Files\Windows Live\installer\WLSetupSvc.exe 11:02:16.0624 2424 WLSetupSvc - ok 11:02:18.0277 2424 WmiAcpi (701a9f884a294327e9141d73746ee279) C:\Windows\system32\drivers\wmiacpi.sys 11:02:18.0308 2424 WmiAcpi - ok 11:02:18.0714 2424 wmiApSrv (43be3875207dcb62a85c8c49970b66cc) C:\Windows\system32\wbem\WmiApSrv.exe 11:02:18.0761 2424 wmiApSrv - ok 11:02:19.0619 2424 WMPNetworkSvc (3978704576a121a9204f8cc49a301a9b) C:\Program Files\Windows Media Player\wmpnetwk.exe 11:02:19.0666 2424 WMPNetworkSvc - ok 11:02:19.0712 2424 WPCSvc (cfc5a04558f5070cee3e3a7809f3ff52) C:\Windows\System32\wpcsvc.dll 11:02:19.0759 2424 WPCSvc - ok 11:02:19.0822 2424 WPDBusEnum (801fbdb89d472b3c467eb112a0fc9246) C:\Windows\system32\wpdbusenum.dll 11:02:19.0837 2424 WPDBusEnum - ok 11:02:20.0087 2424 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys 11:02:20.0134 2424 WpdUsb - ok 11:02:20.0165 2424 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys 11:02:20.0165 2424 ws2ifsl - ok 11:02:20.0212 2424 wscsvc (1ca6c40261ddc0425987980d0cd2aaab) C:\Windows\system32\wscsvc.dll 11:02:20.0212 2424 wscsvc - ok 11:02:20.0227 2424 WSearch - ok 11:02:20.0851 2424 wuauserv (6298277b73c77fa99106b271a7525163) C:\Windows\system32\wuaueng.dll 11:02:20.0898 2424 wuauserv - ok 11:02:22.0052 2424 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys 11:02:22.0052 2424 WUDFRd - ok 11:02:22.0084 2424 wudfsvc (575a4190d989f64732119e4114045a4f) C:\Windows\System32\WUDFSvc.dll 11:02:22.0115 2424 wudfsvc - ok 11:02:22.0146 2424 XAudio (5a7ff9a18ff6d7e0527fe3abf9204ef8) C:\Windows\system32\DRIVERS\xaudio.sys 11:02:22.0146 2424 XAudio - ok 11:02:22.0177 2424 XAudioService (28dc5d626e036a75a572556f0a6eb1f6) C:\Windows\system32\DRIVERS\xaudio.exe 11:02:22.0224 2424 XAudioService - ok 11:02:22.0240 2424 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0 11:02:22.0536 2424 \Device\Harddisk0\DR0 - ok 11:02:22.0583 2424 Boot (0x1200) (b6e05c0220271804e78713efb08b4b66) \Device\Harddisk0\DR0\Partition0 11:02:22.0630 2424 \Device\Harddisk0\DR0\Partition0 - ok 11:02:22.0630 2424 Boot (0x1200) (e10ca2dd63b029878d0323fdcdd9983a) \Device\Harddisk0\DR0\Partition1 11:02:22.0645 2424 \Device\Harddisk0\DR0\Partition1 - ok 11:02:22.0645 2424 ============================================================ 11:02:22.0645 2424 Scan finished 11:02:22.0645 2424 ============================================================ 11:02:22.0661 3684 Detected object count: 0 11:02:22.0661 3684 Actual detected object count: 0

Hello michael81

Thank you for those logs.

Lets take a closer look at the following files:

Please use the instructions provided in post number 10 to scan the following file:

C:\Windows\CDProxyServ.exe

• Please download SystemLook by JPShortstuff
  
  
  
  • Please download SystemLook by JPShortstuff by clicking here or here and save the file (called SystemLook.exe) to your desktop.
  • Right click on SystemLook.exe and select "Run as Administrator" to run the program.
  • Copy the content of the following codebox into the main textfield:
  
  

  :filefind
  *$sys$caj.dll*
  *$sys$upgtool.exe*

  
  
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
  • Note: The log can also be found on your Desktop entitled SystemLook.txt
  
  
• Please scan your system with GMER
  
  
  [external image: Posted Image]
  Download GMER Rootkit Scanner from here or here.
  
  • Extract the contents of the zipped file to desktop.
  • Right click on GMER.exe and select "Run as Administrator" to run the program. If asked to allow gmer.sys driver to load, please consent.
  • If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.
  • In the right panel, you will see several boxes that have been checked. Uncheck the following …
  • IAT/EAT
  • Drives/Partition other than Systemdrive (typically C:\)
  • Show All (don't miss this one)
• Then click the Scan button & wait for it to finish.
• Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
• Save it where you can easily find it, such as your desktop, and post it in your reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries

Please post the link to the Virus Total result page along with the Systemlook log and the GMER log in your next reply.

VirusTotal scan:

https://www.virustotal.com/file/e8e4c24720b…sis/1336836487/

SystemLook log below. Sorry for posting separately but I'm having trouble with copying using the mouse and I don't want to lose anything. SystemLook 30.07.11 by jpshortstuff Log created at 11:31 on 12/05/2012 by Mike Administrator - Elevation successful ========== filefind ========== Searching for "*$sys$caj.dll*" C:\Windows\System32\$sys$caj.dll –a—- 90112 bytes [08:34 22/06/2004] [23:37 02/05/2012] BAE0B7D9BDA1658E3D4DD952FA28E294 Searching for "*$sys$upgtool.exe*" C:\Windows\System32\$sys$upgtool.exe –a—- 77824 bytes [08:34 22/06/2004] [23:37 02/05/2012] 3496610DE09607F53F6844AA84E677E7 -= EOF =-

When I ran Gmer, the scan worked for a few seconds then I got a blue screen saying Windows had experienced a problem and was shutting down to avoid damage. I couldn't catch the error code. Is it safe to try Gmer again?

Hello michael81

Sorry for posting separately but I'm having trouble with copying using the mouse and I don't want to lose anything

Thats no problem at all.

Is it safe to try Gmer again?

Lets try running it this way:

• GMER
  
  
  
  • If you are having trouble getting GMER to complete a scan, please run it again, but this time uncheck everything EXCEPT "Sections" and "C:\".
  • If GMER does not produce a log please try running it from Safe Mode.
  
  
  • How to use the F8 method to Start Your Computer in Safe Mode
  
  
  • Restart your computer.
  • As soon as BIOS is loaded begin tapping the F8 key until the "Advanced Options" menu appears.
  • Use the arrow keys to select the Safe mode menu item.
  • Press Enter.
  
  I would also like you to check for the presence of the following file:
  
  
• Please download SystemLook by JPShortstuff
  
  
  
  • Right click on SystemLook.exe and select "Run as Administrator" to run the program.
  • Copy the content of the following codebox into the main textfield:
  
  

  :filefind
  *aries.sys*

  
  
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
  • Note: The log can also be found on your Desktop entitled SystemLook.txt
  
  Post the GMER log and the systemlook log in your next reply.
  
  If you encounter any difficulty with the scans just let me know.

Hello michael81

Thank you for the extra information.

Before we continue, I would like you to run the following check:

Click on the Start button.
Click on Run.
In the Open: field type services.msc and press the OK button.
The services control panel window will open.
You will see a list of services installed on your computer.
Scroll down and look for a service called XCP CD Proxy.
If you can see this service in the list please let me know.

JonTom, I checked but don't see XCP CDproxy in the list.

Hello michael81

I checked but don't see XCP CDproxy in the list

Thats good

Lets continue as follows:

• Please work through the following steps
  
  
  
• Hold down the Windows key (has the Windows symbol on it) and press the "R" key. A Run box will open. Type in Notepad and press Enter then click on "OK").
• NOTE: Do not Use Wordpad or any other text editor except Notepad or the script will fail.
• Copy and Paste the text in the codebox below (including the link) into the open Notepad window:
  
  

  http://forums.whatthetech.com/index.php?showtopic=123034&st=30&start=30
  
  Collect::
  C:\Windows\CDProxyServ.exe
  C:\Windows\System32\$sys$caj.dll
  C:\Windows\System32\$sys$upgtool.exe
  
  DDS::
  TB: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
  
  ClearJavaCache::

• Save this as "CFScript.txt" (including the quotation marks), change the "Save as type" to "All Files" and save it to your desktop.
• Close any open browsers.
• Disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
• Refering to the picture below, drag CFScript.txt into ComboFix.exe
  
  [external image: Posted Image]
  
  
• When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.
• Once the log is produced, re-engage your resident anti virus.
• Note: When ComboFix finishes running, the ComboFix log will open along with a message box - do not be alarmed. With the above script, ComboFix will capture files to submit for analysis.
• Ensure you are connected to the internet and click OK on the message box.

Once you have completed the above, open MBAM, update it and run a full system scan.

Please post the Combofix log and the MBAM log in your next reply and let me know if there has been any improvement.

Hello michael81

Windows Explorer stopped working a couple of times and I had to reboot

That is not a good sign. It would be wise to backup any important files you have as soon as you can, just in case.

I'm still experiencing double click issues with IE and the system seems extremely sluggish

Just out of curiosity, are you closing in on a possible culprit?

What we are dealing with appears to be the remnants of a DRM rootkit infection.

With rootkit infections (even after removal), system stability cannot be guaranteed.


Although there are no signs of malware in your latest Combofix log (we scripted them out in a previous post), if you are still having problems you may want to consider backing up all of your important data and performing a reformat and reinstallation of your operating system.

At the very least this approach will give you peace of mind that all traces of infecting malware will have been removed.

Please re-scan with aswMBR and post the log in your next reply, along with a new set of DDS logs.

Due to lack of response, this topic is now closed. If you are the topic starter and need this topic reopened, please PM a staff member (include the address of this thread in your request). Everyone else please start a new topic.

Re-opened at Users request.