Spyware / Malware / Virus Removal

rootkit.boot.pihar.b won't go away [Solved]

120 min read

Looking for the outcome? Ask AI

jeffce

Post #61April 28, 2012, 2:34 PM UTC

Hi,

its like a freaking roach i swear.

———-

TDSSKiller

Double-click to run TDSSKiller.exe
Press Change Parameters
Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.
Click on the Start Scan button
- Only if Malicious objects are found then ensure Cure is selected
- Then click Continue > Reboot now
- Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
Copy and paste the log in your next reply
- A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste its contents on your next reply.

———-

Immediately after rebooting your system run ComboFix again and post both logs (TDSSKiller and ComboFix) to your next reply.

Pirus504

Post #62April 28, 2012, 3:06 PM UTC

ok i ran tdsskiller like you said and it found three things all of them it said to skip so i did so there was no restart so i ran combofix here are the logs. 10:55:44.0184 2568 TDSS rootkit removing tool [removed] Apr 24 2012 18:43:43 10:55:44.0699 2568 ============================================================ 10:55:44.0699 2568 Current date / time: 2012/04/28 10:55:44.0699 10:55:44.0699 2568 SystemInfo: 10:55:44.0699 2568 10:55:44.0699 2568 OS Version: 6.1.7600 ServicePack: 0.0 10:55:44.0699 2568 Product type: Workstation 10:55:44.0699 2568 ComputerName: JEFFREY-PC 10:55:44.0699 2568 UserName: Jeffrey 10:55:44.0699 2568 Windows directory: C:\Windows 10:55:44.0699 2568 System windows directory: C:\Windows 10:55:44.0699 2568 Running under WOW64 10:55:44.0699 2568 Processor architecture: Intel x64 10:55:44.0699 2568 Number of processors: 8 10:55:44.0699 2568 Page size: 0x1000 10:55:44.0699 2568 Boot type: Safe boot with network 10:55:44.0699 2568 ============================================================ 10:55:45.0666 2568 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 10:55:45.0682 2568 ============================================================ 10:55:45.0682 2568 \Device\Harddisk0\DR0: 10:55:45.0682 2568 MBR partitions: 10:55:45.0682 2568 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x14000, BlocksNum 0x1D4C000 10:55:45.0682 2568 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1D60000, BlocksNum 0x729A65B0 10:55:45.0682 2568 ============================================================ 10:55:45.0729 2568 C: <-> \Device\Harddisk0\DR0\Partition1 10:55:45.0729 2568 ============================================================ 10:55:45.0729 2568 Initialize success 10:55:45.0729 2568 ============================================================ 10:56:08.0848 3024 ============================================================ 10:56:08.0848 3024 Scan started 10:56:08.0848 3024 Mode: Manual; SigCheck; TDLFS; 10:56:08.0848 3024 ============================================================ 10:56:09.0222 3024 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys 10:56:09.0488 3024 1394ohci - ok 10:56:09.0503 3024 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys 10:56:09.0519 3024 ACPI - ok 10:56:09.0534 3024 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys 10:56:09.0581 3024 AcpiPmi - ok 10:56:09.0644 3024 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 10:56:09.0659 3024 adp94xx - ok 10:56:09.0690 3024 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 10:56:09.0690 3024 adpahci - ok 10:56:09.0706 3024 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 10:56:09.0706 3024 adpu320 - ok 10:56:09.0753 3024 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll 10:56:09.0862 3024 AeLookupSvc - ok 10:56:09.0924 3024 AERTFilters (3ac22a3dfa8a050e35f0e3cd99d0cdf2) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe 10:56:09.0971 3024 AERTFilters - ok 10:56:10.0002 3024 AFD (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys 10:56:10.0049 3024 AFD - ok 10:56:10.0096 3024 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys 10:56:10.0096 3024 agp440 - ok 10:56:10.0127 3024 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe 10:56:10.0158 3024 ALG - ok 10:56:10.0174 3024 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys 10:56:10.0174 3024 aliide - ok 10:56:10.0174 3024 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys 10:56:10.0190 3024 amdide - ok 10:56:10.0190 3024 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 10:56:10.0205 3024 AmdK8 - ok 10:56:10.0221 3024 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 10:56:10.0236 3024 AmdPPM - ok 10:56:10.0236 3024 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys 10:56:10.0252 3024 amdsata - ok 10:56:10.0252 3024 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 10:56:10.0268 3024 amdsbs - ok 10:56:10.0268 3024 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys 10:56:10.0283 3024 amdxata - ok 10:56:10.0283 3024 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys 10:56:10.0346 3024 AppID - ok 10:56:10.0361 3024 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll 10:56:10.0408 3024 AppIDSvc - ok 10:56:10.0424 3024 Appinfo (d065be66822847b7f127d1f90158376e) C:\Windows\System32\appinfo.dll 10:56:10.0439 3024 Appinfo - ok 10:56:10.0455 3024 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 10:56:10.0455 3024 arc - ok 10:56:10.0470 3024 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 10:56:10.0470 3024 arcsas - ok 10:56:10.0486 3024 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 10:56:10.0517 3024 AsyncMac - ok 10:56:10.0533 3024 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys 10:56:10.0533 3024 atapi - ok 10:56:10.0580 3024 AudioEndpointBuilder (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 10:56:10.0626 3024 AudioEndpointBuilder - ok 10:56:10.0626 3024 AudioSrv (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 10:56:10.0658 3024 AudioSrv - ok 10:56:10.0673 3024 AxInstSV (b20b5fa5ca050e9926e4d1db81501b32) C:\Windows\System32\AxInstSV.dll 10:56:10.0720 3024 AxInstSV - ok 10:56:10.0751 3024 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 10:56:10.0782 3024 b06bdrv - ok 10:56:10.0798 3024 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 10:56:10.0814 3024 b57nd60a - ok 10:56:10.0829 3024 BCM42RLY (e001dd475a7c27ebe5a0db45c11bad71) C:\Windows\system32\drivers\BCM42RLY.sys 10:56:10.0938 3024 BCM42RLY - ok 10:56:11.0094 3024 BCM43XX (37394d3553e220fb732c21e217e1bd8b) C:\Windows\system32\DRIVERS\bcmwl664.sys 10:56:11.0126 3024 BCM43XX - ok 10:56:11.0266 3024 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll 10:56:11.0297 3024 BDESVC - ok 10:56:11.0313 3024 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 10:56:11.0344 3024 Beep - ok 10:56:11.0406 3024 BFE (4992c609a6315671463e30f6512bc022) C:\Windows\System32\bfe.dll 10:56:11.0453 3024 BFE - ok 10:56:11.0531 3024 BITS (7f0c323fe3da28aa4aa1bda3f575707f) C:\Windows\system32\qmgr.dll 10:56:11.0594 3024 BITS - ok 10:56:11.0609 3024 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 10:56:11.0640 3024 blbdrive - ok 10:56:11.0656 3024 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys 10:56:11.0703 3024 bowser - ok 10:56:11.0703 3024 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 10:56:11.0718 3024 BrFiltLo - ok 10:56:11.0718 3024 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 10:56:11.0734 3024 BrFiltUp - ok 10:56:11.0750 3024 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys 10:56:11.0781 3024 BridgeMP - ok 10:56:11.0796 3024 Browser (94fbc06f294d58d02361918418f996e3) C:\Windows\System32\browser.dll 10:56:11.0828 3024 Browser - ok 10:56:11.0843 3024 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 10:56:11.0859 3024 Brserid - ok 10:56:11.0874 3024 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 10:56:11.0890 3024 BrSerWdm - ok 10:56:11.0890 3024 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 10:56:11.0906 3024 BrUsbMdm - ok 10:56:11.0906 3024 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 10:56:11.0921 3024 BrUsbSer - ok 10:56:11.0921 3024 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 10:56:11.0937 3024 BTHMODEM - ok 10:56:11.0952 3024 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll 10:56:11.0984 3024 bthserv - ok 10:56:11.0999 3024 catchme - ok 10:56:11.0999 3024 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 10:56:12.0030 3024 cdfs - ok 10:56:12.0046 3024 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys 10:56:12.0062 3024 cdrom - ok 10:56:12.0093 3024 CertPropSvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 10:56:12.0124 3024 CertPropSvc - ok 10:56:12.0155 3024 cfwids (274ce03459896006f7a5069266e0469e) C:\Windows\system32\drivers\cfwids.sys 10:56:12.0155 3024 cfwids - ok 10:56:12.0171 3024 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 10:56:12.0171 3024 circlass - ok 10:56:12.0202 3024 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 10:56:12.0218 3024 CLFS - ok 10:56:12.0264 3024 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 10:56:12.0280 3024 clr_optimization_v2.0.50727_32 - ok 10:56:12.0311 3024 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 10:56:12.0327 3024 clr_optimization_v2.0.50727_64 - ok 10:56:12.0342 3024 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 10:56:12.0342 3024 CmBatt - ok 10:56:12.0342 3024 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys 10:56:12.0358 3024 cmdide - ok 10:56:12.0374 3024 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys 10:56:12.0405 3024 CNG - ok 10:56:12.0420 3024 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 10:56:12.0420 3024 Compbatt - ok 10:56:12.0436 3024 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys 10:56:12.0452 3024 CompositeBus - ok 10:56:12.0452 3024 COMSysApp - ok 10:56:12.0452 3024 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 10:56:12.0452 3024 crcdisk - ok 10:56:12.0498 3024 CryptSvc (8c57411b66282c01533cb776f98ad384) C:\Windows\system32\cryptsvc.dll 10:56:12.0530 3024 CryptSvc - ok 10:56:12.0592 3024 DcomLaunch (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll 10:56:12.0639 3024 DcomLaunch - ok 10:56:12.0670 3024 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll 10:56:12.0701 3024 defragsvc - ok 10:56:12.0717 3024 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys 10:56:12.0748 3024 DfsC - ok 10:56:12.0779 3024 Dhcp (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll 10:56:12.0810 3024 Dhcp - ok 10:56:12.0810 3024 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 10:56:12.0842 3024 discache - ok 10:56:12.0873 3024 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 10:56:12.0873 3024 Disk - ok 10:56:12.0904 3024 Dnscache (676108c4e3aa6f6b34633748bd0bebd9) C:\Windows\System32\dnsrslvr.dll 10:56:12.0935 3024 Dnscache - ok 10:56:13.0029 3024 DockLoginService (0840abbbdf438691ee65a20040635cbe) C:\Program Files\Dell\DellDock\DockLogin.exe 10:56:13.0044 3024 DockLoginService ( UnsignedFile.Multi.Generic ) - warning 10:56:13.0044 3024 DockLoginService - detected UnsignedFile.Multi.Generic (1) 10:56:13.0060 3024 dot3svc (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll 10:56:13.0091 3024 dot3svc - ok 10:56:13.0107 3024 DPS (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll 10:56:13.0154 3024 DPS - ok 10:56:13.0169 3024 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 10:56:13.0185 3024 drmkaud - ok 10:56:13.0232 3024 DXGKrnl (7cb7d2b73813ce05c7bc0f5f95d27cec) C:\Windows\System32\drivers\dxgkrnl.sys 10:56:13.0278 3024 DXGKrnl - ok 10:56:13.0310 3024 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll 10:56:13.0341 3024 EapHost - ok 10:56:13.0497 3024 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 10:56:13.0544 3024 ebdrv - ok 10:56:13.0684 3024 EFS (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\System32\lsass.exe 10:56:13.0700 3024 EFS - ok 10:56:13.0778 3024 ehRecvr (b91d81b3b54a54ccafc03733dbc2e29e) C:\Windows\ehome\ehRecvr.exe 10:56:13.0809 3024 ehRecvr - ok 10:56:13.0824 3024 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe 10:56:13.0840 3024 ehSched - ok 10:56:13.0871 3024 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 10:56:13.0887 3024 elxstor - ok 10:56:13.0887 3024 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys 10:56:13.0902 3024 ErrDev - ok 10:56:13.0965 3024 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll 10:56:13.0996 3024 EventSystem - ok 10:56:14.0027 3024 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 10:56:14.0043 3024 exfat - ok 10:56:14.0074 3024 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 10:56:14.0090 3024 fastfat - ok 10:56:14.0136 3024 Fax (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe 10:56:14.0183 3024 Fax - ok 10:56:14.0183 3024 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 10:56:14.0199 3024 fdc - ok 10:56:14.0214 3024 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll 10:56:14.0246 3024 fdPHost - ok 10:56:14.0246 3024 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll 10:56:14.0277 3024 FDResPub - ok 10:56:14.0277 3024 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 10:56:14.0277 3024 FileInfo - ok 10:56:14.0292 3024 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 10:56:14.0308 3024 Filetrace - ok 10:56:14.0308 3024 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 10:56:14.0324 3024 flpydisk - ok 10:56:14.0339 3024 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys 10:56:14.0339 3024 FltMgr - ok 10:56:14.0402 3024 FontCache (8ac4cb4ea61e41009fae9ae7b2b5da3a) C:\Windows\system32\FntCache.dll 10:56:14.0448 3024 FontCache - ok 10:56:14.0526 3024 FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 10:56:14.0526 3024 FontCache3.0.0.0 - ok 10:56:14.0558 3024 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 10:56:14.0558 3024 FsDepends - ok 10:56:14.0558 3024 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys 10:56:14.0573 3024 Fs_Rec - ok 10:56:14.0573 3024 fvevol (b8b2a6e1558f8f5de5ce431c5b2c7b09) C:\Windows\system32\DRIVERS\fvevol.sys 10:56:14.0589 3024 fvevol - ok 10:56:14.0604 3024 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 10:56:14.0620 3024 gagp30kx - ok 10:56:14.0651 3024 gpsvc (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll 10:56:14.0698 3024 gpsvc - ok 10:56:14.0729 3024 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 10:56:14.0745 3024 hcw85cir - ok 10:56:14.0760 3024 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys 10:56:14.0776 3024 HDAudBus - ok 10:56:14.0792 3024 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 10:56:14.0807 3024 HidBatt - ok 10:56:14.0807 3024 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 10:56:14.0823 3024 HidBth - ok 10:56:14.0823 3024 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 10:56:14.0854 3024 HidIr - ok 10:56:14.0854 3024 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\System32\hidserv.dll 10:56:14.0885 3024 hidserv - ok 10:56:14.0901 3024 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys 10:56:14.0901 3024 HidUsb - ok 10:56:14.0916 3024 hkmsvc (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll 10:56:14.0948 3024 hkmsvc - ok 10:56:14.0979 3024 HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll 10:56:14.0994 3024 HomeGroupListener - ok 10:56:15.0010 3024 HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll 10:56:15.0026 3024 HomeGroupProvider - ok 10:56:15.0041 3024 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys 10:56:15.0041 3024 HpSAMD - ok 10:56:15.0088 3024 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys 10:56:15.0119 3024 HTTP - ok 10:56:15.0135 3024 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys 10:56:15.0135 3024 hwpolicy - ok 10:56:15.0150 3024 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 10:56:15.0166 3024 i8042prt - ok 10:56:15.0213 3024 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys 10:56:15.0213 3024 iaStor - ok 10:56:15.0244 3024 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys 10:56:15.0244 3024 iaStorV - ok 10:56:15.0353 3024 idsvc (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 10:56:15.0369 3024 idsvc - ok 10:56:15.0369 3024 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 10:56:15.0384 3024 iirsp - ok 10:56:15.0447 3024 IKEEXT (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll 10:56:15.0494 3024 IKEEXT - ok 10:56:15.0587 3024 IntcAzAudAddService (d42d651676883181400e22957a7e0b1e) C:\Windows\system32\drivers\RTKVHD64.sys 10:56:15.0618 3024 IntcAzAudAddService - ok 10:56:15.0743 3024 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys 10:56:15.0743 3024 intelide - ok 10:56:15.0759 3024 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 10:56:15.0790 3024 intelppm - ok 10:56:15.0790 3024 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll 10:56:15.0821 3024 IPBusEnum - ok 10:56:15.0821 3024 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys 10:56:15.0852 3024 IpFilterDriver - ok 10:56:15.0884 3024 iphlpsvc (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll 10:56:15.0930 3024 iphlpsvc - ok 10:56:15.0930 3024 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys 10:56:15.0946 3024 IPMIDRV - ok 10:56:15.0946 3024 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 10:56:15.0977 3024 IPNAT - ok 10:56:15.0993 3024 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 10:56:16.0008 3024 IRENUM - ok 10:56:16.0008 3024 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys 10:56:16.0008 3024 isapnp - ok 10:56:16.0040 3024 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys 10:56:16.0040 3024 iScsiPrt - ok 10:56:16.0086 3024 k57nd60a (249ee2d26cb1530f3bede0ac8b9e3099) C:\Windows\system32\DRIVERS\k57nd60a.sys 10:56:16.0086 3024 k57nd60a - ok 10:56:16.0102 3024 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys 10:56:16.0102 3024 kbdclass - ok 10:56:16.0118 3024 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys 10:56:16.0133 3024 kbdhid - ok 10:56:16.0149 3024 KeyIso (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 10:56:16.0149 3024 KeyIso - ok 10:56:16.0149 3024 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys 10:56:16.0164 3024 KSecDD - ok 10:56:16.0164 3024 KSecPkg (bbe1bf6d9b661c354d4857d5fadb943b) C:\Windows\system32\Drivers\ksecpkg.sys 10:56:16.0180 3024 KSecPkg - ok 10:56:16.0180 3024 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 10:56:16.0211 3024 ksthunk - ok 10:56:16.0242 3024 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll 10:56:16.0274 3024 KtmRm - ok 10:56:16.0305 3024 LanmanServer (c926920b8978de6acfe9e15c709e9b57) C:\Windows\System32\srvsvc.dll 10:56:16.0352 3024 LanmanServer - ok 10:56:16.0398 3024 LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll 10:56:16.0414 3024 LanmanWorkstation - ok 10:56:16.0430 3024 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 10:56:16.0445 3024 lltdio - ok 10:56:16.0476 3024 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll 10:56:16.0508 3024 lltdsvc - ok 10:56:16.0523 3024 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll 10:56:16.0554 3024 lmhosts - ok 10:56:16.0570 3024 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 10:56:16.0570 3024 LSI_FC - ok 10:56:16.0586 3024 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 10:56:16.0586 3024 LSI_SAS - ok 10:56:16.0601 3024 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 10:56:16.0601 3024 LSI_SAS2 - ok 10:56:16.0601 3024 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 10:56:16.0617 3024 LSI_SCSI - ok 10:56:16.0617 3024 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 10:56:16.0664 3024 luafv - ok 10:56:16.0710 3024 MBAMProtector (dbc08862a71459e74f7538b432c114cc) C:\Windows\system32\drivers\mbam.sys 10:56:16.0726 3024 MBAMProtector - ok 10:56:16.0804 3024 MBAMService (ba400ed640bca1eae5c727ae17c10207) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 10:56:16.0820 3024 MBAMService - ok 10:56:16.0898 3024 McAfee SiteAdvisor Service (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 10:56:16.0898 3024 McAfee SiteAdvisor Service - ok 10:56:16.0898 3024 McMPFSvc (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 10:56:16.0913 3024 McMPFSvc - ok 10:56:16.0913 3024 mcmscsvc (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 10:56:16.0913 3024 mcmscsvc - ok 10:56:16.0913 3024 McNaiAnn (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 10:56:16.0929 3024 McNaiAnn - ok 10:56:16.0929 3024 McNASvc (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 10:56:16.0929 3024 McNASvc - ok 10:56:16.0976 3024 McODS (dd01bf24dd6bf70a90549f9a7bb2d1eb) C:\Program Files\McAfee\VirusScan\mcods.exe 10:56:16.0991 3024 McODS - ok 10:56:16.0991 3024 McProxy (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 10:56:17.0007 3024 McProxy - ok 10:56:17.0038 3024 McShield (e998e3b12101288d716558466cbf6ae1) C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe 10:56:17.0054 3024 McShield - ok 10:56:17.0178 3024 Mcx2Svc (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll 10:56:17.0194 3024 Mcx2Svc - ok 10:56:17.0210 3024 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 10:56:17.0225 3024 megasas - ok 10:56:17.0241 3024 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 10:56:17.0241 3024 MegaSR - ok 10:56:17.0288 3024 mfeapfk (01884cb7655c8908b43ff5e364fe6fd2) C:\Windows\system32\drivers\mfeapfk.sys 10:56:17.0303 3024 mfeapfk - ok 10:56:17.0334 3024 mfeavfk (dab9a9cdfb04e4d68924492aa043019d) C:\Windows\system32\drivers\mfeavfk.sys 10:56:17.0350 3024 mfeavfk - ok 10:56:17.0350 3024 mfefire (b26782c3d6045b4464017d7926877560) C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe 10:56:17.0350 3024 mfefire - ok 10:56:17.0397 3024 mfefirek (ce9a3680675c0907ade16404ca967b49) C:\Windows\system32\drivers\mfefirek.sys 10:56:17.0397 3024 mfefirek - ok 10:56:17.0444 3024 mfehidk (60cf67458dd29cd17e77f2327b1a9a54) C:\Windows\system32\drivers\mfehidk.sys 10:56:17.0459 3024 mfehidk - ok 10:56:17.0475 3024 mfenlfk (a8129cfb919347f8533c934b365e9202) C:\Windows\system32\DRIVERS\mfenlfk.sys 10:56:17.0475 3024 mfenlfk - ok 10:56:17.0490 3024 mferkdet (5041fa2bd2b3a2693b015771bfbf6dca) C:\Windows\system32\drivers\mferkdet.sys 10:56:17.0490 3024 mferkdet - ok 10:56:17.0522 3024 mfevtp (723a5eb6cef7f408c3d0f15a82a6bff8) C:\Windows\system32\mfevtps.exe 10:56:17.0522 3024 mfevtp - ok 10:56:17.0537 3024 mfewfpk (919c56db14a0e1e2ab6da5d2821dc26e) C:\Windows\system32\drivers\mfewfpk.sys 10:56:17.0553 3024 mfewfpk - ok 10:56:17.0584 3024 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 10:56:17.0615 3024 MMCSS - ok 10:56:17.0646 3024 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 10:56:17.0678 3024 Modem - ok 10:56:17.0693 3024 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 10:56:17.0709 3024 monitor - ok 10:56:17.0724 3024 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 10:56:17.0724 3024 mouclass - ok 10:56:17.0740 3024 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 10:56:17.0740 3024 mouhid - ok 10:56:17.0756 3024 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys 10:56:17.0756 3024 mountmgr - ok 10:56:17.0818 3024 MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 10:56:17.0834 3024 MozillaMaintenance - ok 10:56:17.0849 3024 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys 10:56:17.0849 3024 mpio - ok 10:56:17.0849 3024 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 10:56:17.0880 3024 mpsdrv - ok 10:56:17.0927 3024 MpsSvc (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll 10:56:17.0958 3024 MpsSvc - ok 10:56:17.0974 3024 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys 10:56:17.0990 3024 MRxDAV - ok 10:56:18.0005 3024 mrxsmb (cfdcd8ca87c2a657debc150ac35b5e08) C:\Windows\system32\DRIVERS\mrxsmb.sys 10:56:18.0036 3024 mrxsmb - ok 10:56:18.0052 3024 mrxsmb10 (1bee517b220b7f024f411aec1571dd5a) C:\Windows\system32\DRIVERS\mrxsmb10.sys 10:56:18.0083 3024 mrxsmb10 - ok 10:56:18.0083 3024 mrxsmb20 (6b2d5fef385828b6e485c1c90afb8195) C:\Windows\system32\DRIVERS\mrxsmb20.sys 10:56:18.0114 3024 mrxsmb20 - ok 10:56:18.0114 3024 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys 10:56:18.0114 3024 msahci - ok 10:56:18.0130 3024 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys 10:56:18.0130 3024 msdsm - ok 10:56:18.0161 3024 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe 10:56:18.0161 3024 MSDTC - ok 10:56:18.0177 3024 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 10:56:18.0192 3024 Msfs - ok 10:56:18.0192 3024 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 10:56:18.0224 3024 mshidkmdf - ok 10:56:18.0239 3024 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys 10:56:18.0239 3024 msisadrv - ok 10:56:18.0270 3024 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll 10:56:18.0317 3024 MSiSCSI - ok 10:56:18.0317 3024 msiserver - ok 10:56:18.0333 3024 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 10:56:18.0364 3024 MSKSSRV - ok 10:56:18.0364 3024 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 10:56:18.0380 3024 MSPCLOCK - ok 10:56:18.0395 3024 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 10:56:18.0426 3024 MSPQM - ok 10:56:18.0442 3024 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys 10:56:18.0458 3024 MsRPC - ok 10:56:18.0458 3024 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys 10:56:18.0458 3024 mssmbios - ok 10:56:18.0458 3024 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 10:56:18.0489 3024 MSTEE - ok 10:56:18.0489 3024 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 10:56:18.0504 3024 MTConfig - ok 10:56:18.0504 3024 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 10:56:18.0504 3024 Mup - ok 10:56:18.0551 3024 napagent (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll 10:56:18.0582 3024 napagent - ok 10:56:18.0629 3024 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 10:56:18.0645 3024 NativeWifiP - ok 10:56:18.0692 3024 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys 10:56:18.0707 3024 NDIS - ok 10:56:18.0723 3024 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 10:56:18.0754 3024 NdisCap - ok 10:56:18.0754 3024 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 10:56:18.0801 3024 NdisTapi - ok 10:56:18.0801 3024 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys 10:56:18.0848 3024 Ndisuio - ok 10:56:18.0863 3024 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys 10:56:18.0879 3024 NdisWan - ok 10:56:18.0879 3024 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys 10:56:18.0910 3024 NDProxy - ok 10:56:18.0910 3024 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 10:56:18.0941 3024 NetBIOS - ok 10:56:18.0941 3024 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys 10:56:18.0972 3024 NetBT - ok 10:56:19.0004 3024 Netlogon (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 10:56:19.0019 3024 Netlogon - ok 10:56:19.0066 3024 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll 10:56:19.0082 3024 Netman - ok 10:56:19.0113 3024 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll 10:56:19.0144 3024 netprofm - ok 10:56:19.0206 3024 netr7364 (81b8d0c1ce44a7fdbd596b693783950c) C:\Windows\system32\DRIVERS\netr7364.sys 10:56:19.0238 3024 netr7364 - ok 10:56:19.0316 3024 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 10:56:19.0316 3024 NetTcpPortSharing - ok 10:56:19.0331 3024 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 10:56:19.0347 3024 nfrd960 - ok 10:56:19.0362 3024 NlaSvc (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll 10:56:19.0409 3024 NlaSvc - ok 10:56:19.0409 3024 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 10:56:19.0425 3024 Npfs - ok 10:56:19.0440 3024 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll 10:56:19.0472 3024 nsi - ok 10:56:19.0472 3024 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 10:56:19.0503 3024 nsiproxy - ok 10:56:19.0596 3024 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys 10:56:19.0628 3024 Ntfs - ok 10:56:19.0737 3024 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 10:56:19.0768 3024 Null - ok 10:56:20.0298 3024 nvlddmkm (51bd7ef17f0b525994ad5b3748c8288b) C:\Windows\system32\DRIVERS\nvlddmkm.sys 10:56:20.0486 3024 nvlddmkm - ok 10:56:20.0532 3024 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys 10:56:20.0532 3024 nvraid - ok 10:56:20.0564 3024 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys 10:56:20.0564 3024 nvstor - ok 10:56:20.0626 3024 nvsvc (fce8537bf5d504680212d536a3bfe5e2) C:\Windows\system32\nvvsvc.exe 10:56:20.0626 3024 nvsvc - ok 10:56:20.0642 3024 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys 10:56:20.0642 3024 nv_agp - ok 10:56:20.0657 3024 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys 10:56:20.0657 3024 ohci1394 - ok 10:56:20.0704 3024 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 10:56:20.0735 3024 p2pimsvc - ok 10:56:20.0766 3024 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll 10:56:20.0782 3024 p2psvc - ok 10:56:20.0798 3024 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 10:56:20.0798 3024 Parport - ok 10:56:20.0829 3024 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys 10:56:20.0844 3024 partmgr - ok 10:56:20.0860 3024 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll 10:56:20.0891 3024 PcaSvc - ok 10:56:20.0891 3024 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys 10:56:20.0907 3024 pci - ok 10:56:20.0922 3024 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys 10:56:20.0938 3024 pciide - ok 10:56:20.0954 3024 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 10:56:20.0954 3024 pcmcia - ok 10:56:20.0969 3024 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 10:56:20.0969 3024 pcw - ok 10:56:21.0000 3024 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 10:56:21.0047 3024 PEAUTH - ok 10:56:21.0110 3024 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe 10:56:21.0156 3024 PerfHost - ok 10:56:21.0234 3024 pla (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll 10:56:21.0281 3024 pla - ok 10:56:21.0328 3024 PlugPlay (23157d583244400e1d7fbaee2e4b31b7) C:\Windows\system32\umpnpmgr.dll 10:56:21.0359 3024 PlugPlay - ok 10:56:21.0375 3024 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll 10:56:21.0406 3024 PNRPAutoReg - ok 10:56:21.0422 3024 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 10:56:21.0422 3024 PNRPsvc - ok 10:56:21.0468 3024 PolicyAgent (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll 10:56:21.0515 3024 PolicyAgent - ok 10:56:21.0515 3024 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll 10:56:21.0546 3024 Power - ok 10:56:21.0640 3024 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys 10:56:21.0671 3024 PptpMiniport - ok 10:56:21.0702 3024 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 10:56:21.0718 3024 Processor - ok 10:56:21.0734 3024 ProfSvc (f381975e1f4346de875cb07339ce8d3a) C:\Windows\system32\profsvc.dll 10:56:21.0765 3024 ProfSvc - ok 10:56:21.0780 3024 ProtectedStorage (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 10:56:21.0780 3024 ProtectedStorage - ok 10:56:21.0812 3024 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys 10:56:21.0843 3024 Psched - ok 10:56:21.0843 3024 PxHlpa64 (4712cc14e720ecccc0aa16949d18aaf1) C:\Windows\system32\Drivers\PxHlpa64.sys 10:56:21.0858 3024 PxHlpa64 - ok 10:56:21.0936 3024 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 10:56:21.0968 3024 ql2300 - ok 10:56:22.0061 3024 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 10:56:22.0077 3024 ql40xx - ok 10:56:22.0092 3024 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll 10:56:22.0108 3024 QWAVE - ok 10:56:22.0124 3024 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 10:56:22.0139 3024 QWAVEdrv - ok 10:56:22.0139 3024 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 10:56:22.0170 3024 RasAcd - ok 10:56:22.0217 3024 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 10:56:22.0233 3024 RasAgileVpn - ok 10:56:22.0248 3024 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll 10:56:22.0264 3024 RasAuto - ok 10:56:22.0280 3024 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys 10:56:22.0311 3024 Rasl2tp - ok 10:56:22.0342 3024 RasMan (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll 10:56:22.0358 3024 RasMan - ok 10:56:22.0373 3024 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 10:56:22.0404 3024 RasPppoe - ok 10:56:22.0420 3024 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 10:56:22.0436 3024 RasSstp - ok 10:56:22.0451 3024 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys 10:56:22.0482 3024 rdbss - ok 10:56:22.0498 3024 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 10:56:22.0514 3024 rdpbus - ok 10:56:22.0529 3024 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 10:56:22.0545 3024 RDPCDD - ok 10:56:22.0560 3024 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 10:56:22.0576 3024 RDPENCDD - ok 10:56:22.0592 3024 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 10:56:22.0623 3024 RDPREFMP - ok 10:56:22.0670 3024 RDPWD (074ac702d8b8b660b0e1371555995386) C:\Windows\system32\drivers\RDPWD.sys 10:56:22.0701 3024 RDPWD - ok 10:56:22.0716 3024 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys 10:56:22.0716 3024 rdyboost - ok 10:56:22.0748 3024 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll 10:56:22.0779 3024 RemoteAccess - ok 10:56:22.0810 3024 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll 10:56:22.0841 3024 RemoteRegistry - ok 10:56:23.0013 3024 RoxMediaDB10 (05fc44d32a144925eae45570029fd6e1) c:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe 10:56:23.0044 3024 RoxMediaDB10 - ok 10:56:23.0075 3024 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll 10:56:23.0106 3024 RpcEptMapper - ok 10:56:23.0138 3024 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe 10:56:23.0153 3024 RpcLocator - ok 10:56:23.0184 3024 RpcSs (7266972e86890e2b30c0c322e906b027) C:\Windows\System32\rpcss.dll 10:56:23.0216 3024 RpcSs - ok 10:56:23.0262 3024 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 10:56:23.0294 3024 rspndr - ok 10:56:23.0309 3024 RxFilter - ok 10:56:23.0309 3024 SamSs (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 10:56:23.0325 3024 SamSs - ok 10:56:23.0340 3024 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys 10:56:23.0356 3024 sbp2port - ok 10:56:23.0387 3024 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll 10:56:23.0403 3024 SCardSvr - ok 10:56:23.0403 3024 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys 10:56:23.0434 3024 scfilter - ok 10:56:23.0481 3024 Schedule (ec56b171f85c7e855e7b0588ac503eea) C:\Windows\system32\schedsvc.dll 10:56:23.0528 3024 Schedule - ok 10:56:23.0559 3024 SCPolicySvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 10:56:23.0590 3024 SCPolicySvc - ok 10:56:23.0590 3024 SDRSVC (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll 10:56:23.0621 3024 SDRSVC - ok 10:56:23.0715 3024 SeaPort (d358e077a0a05d9b12da22d137ee8464) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 10:56:23.0715 3024 SeaPort - ok 10:56:23.0746 3024 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 10:56:23.0777 3024 secdrv - ok 10:56:23.0793 3024 seclogon (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll 10:56:23.0808 3024 seclogon - ok 10:56:23.0808 3024 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\system32\sens.dll 10:56:23.0840 3024 SENS - ok 10:56:23.0855 3024 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll 10:56:23.0871 3024 SensrSvc - ok 10:56:23.0871 3024 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 10:56:23.0886 3024 Serenum - ok 10:56:23.0886 3024 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 10:56:23.0902 3024 Serial - ok 10:56:23.0902 3024 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 10:56:23.0933 3024 sermouse - ok 10:56:23.0949 3024 SessionEnv (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll 10:56:23.0980 3024 SessionEnv - ok 10:56:24.0027 3024 SessionLauncher - ok 10:56:24.0027 3024 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys 10:56:24.0042 3024 sffdisk - ok 10:56:24.0058 3024 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys 10:56:24.0058 3024 sffp_mmc - ok 10:56:24.0074 3024 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys 10:56:24.0074 3024 sffp_sd - ok 10:56:24.0074 3024 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 10:56:24.0089 3024 sfloppy - ok 10:56:24.0136 3024 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll 10:56:24.0167 3024 SharedAccess - ok 10:56:24.0198 3024 ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll 10:56:24.0230 3024 ShellHWDetection - ok 10:56:24.0245 3024 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 10:56:24.0245 3024 SiSRaid2 - ok 10:56:24.0245 3024 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 10:56:24.0261 3024 SiSRaid4 - ok 10:56:24.0276 3024 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 10:56:24.0292 3024 Smb - ok 10:56:24.0308 3024 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe 10:56:24.0308 3024 SNMPTRAP - ok 10:56:24.0308 3024 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 10:56:24.0323 3024 spldr - ok 10:56:24.0339 3024 Spooler (89e8550c5862999fcf482ea562b0e98e) C:\Windows\System32\spoolsv.exe 10:56:24.0354 3024 Spooler - ok 10:56:24.0510 3024 sppsvc (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe 10:56:24.0573 3024 sppsvc - ok 10:56:24.0682 3024 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll 10:56:24.0713 3024 sppuinotify - ok 10:56:24.0822 3024 sprtsvc_DellComms (d630b6f2e8379b6f10dc16e82a426552) C:\Program Files (x86)\Dell\DellComms\bin\sprtsvc.exe 10:56:24.0822 3024 sprtsvc_DellComms - ok 10:56:24.0869 3024 srv (ec8f67289105bf270498095f14963464) C:\Windows\system32\DRIVERS\srv.sys 10:56:24.0900 3024 srv - ok 10:56:24.0916 3024 srv2 (f773d2ed090b7baa1c1a034f3ca476c8) C:\Windows\system32\DRIVERS\srv2.sys 10:56:24.0947 3024 srv2 - ok 10:56:24.0963 3024 srvnet (26e84d3649019c3244622e654dfcd75b) C:\Windows\system32\DRIVERS\srvnet.sys 10:56:24.0994 3024 srvnet - ok 10:56:25.0025 3024 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll 10:56:25.0072 3024 SSDPSRV - ok 10:56:25.0072 3024 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll 10:56:25.0103 3024 SstpSvc - ok 10:56:25.0119 3024 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 10:56:25.0134 3024 stexstor - ok 10:56:25.0181 3024 stisvc (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll 10:56:25.0212 3024 stisvc - ok 10:56:25.0290 3024 stllssvr (ff5eb78af7dfb68c2fb363537aaf753e) c:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe 10:56:25.0290 3024 stllssvr - ok 10:56:25.0306 3024 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys 10:56:25.0322 3024 swenum - ok 10:56:25.0337 3024 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll 10:56:25.0368 3024 swprv - ok 10:56:25.0446 3024 SysMain (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll 10:56:25.0478 3024 SysMain - ok 10:56:25.0587 3024 TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll 10:56:25.0602 3024 TabletInputService - ok 10:56:25.0634 3024 TapiSrv (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll 10:56:25.0665 3024 TapiSrv - ok 10:56:25.0680 3024 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll 10:56:25.0712 3024 TBS - ok 10:56:25.0836 3024 Tcpip (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\drivers\tcpip.sys 10:56:25.0868 3024 Tcpip - ok 10:56:25.0961 3024 TCPIP6 (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\DRIVERS\tcpip.sys 10:56:25.0992 3024 TCPIP6 - ok 10:56:26.0024 3024 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys 10:56:26.0039 3024 tcpipreg - ok 10:56:26.0070 3024 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 10:56:26.0086 3024 TDPIPE - ok 10:56:26.0102 3024 TDTCP (7518f7bcfd4b308abc9192bacaf6c970) C:\Windows\system32\drivers\tdtcp.sys 10:56:26.0117 3024 TDTCP - ok 10:56:26.0133 3024 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys 10:56:26.0164 3024 tdx - ok 10:56:26.0180 3024 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys 10:56:26.0180 3024 TermDD - ok 10:56:26.0226 3024 TermService (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll 10:56:26.0258 3024 TermService - ok 10:56:26.0273 3024 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll 10:56:26.0289 3024 Themes - ok 10:56:26.0320 3024 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 10:56:26.0351 3024 THREADORDER - ok 10:56:26.0367 3024 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll 10:56:26.0398 3024 TrkWks - ok 10:56:26.0460 3024 TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe 10:56:26.0460 3024 TrustedInstaller - ok 10:56:26.0476 3024 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys 10:56:26.0492 3024 tssecsrv - ok 10:56:26.0507 3024 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys 10:56:26.0538 3024 tunnel - ok 10:56:26.0554 3024 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 10:56:26.0570 3024 uagp35 - ok 10:56:26.0585 3024 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys 10:56:26.0616 3024 udfs - ok 10:56:26.0632 3024 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe 10:56:26.0632 3024 UI0Detect - ok 10:56:26.0648 3024 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys 10:56:26.0648 3024 uliagpkx - ok 10:56:26.0648 3024 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys 10:56:26.0663 3024 umbus - ok 10:56:26.0679 3024 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 10:56:26.0679 3024 UmPass - ok 10:56:26.0710 3024 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll 10:56:26.0741 3024 upnphost - ok 10:56:26.0741 3024 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys 10:56:26.0757 3024 usbccgp - ok 10:56:26.0772 3024 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys 10:56:26.0788 3024 usbcir - ok 10:56:26.0804 3024 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys 10:56:26.0804 3024 usbehci - ok 10:56:26.0819 3024 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys 10:56:26.0850 3024 usbhub - ok 10:56:26.0866 3024 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys 10:56:26.0882 3024 usbohci - ok 10:56:26.0897 3024 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 10:56:26.0913 3024 usbprint - ok 10:56:26.0928 3024 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS 10:56:26.0928 3024 USBSTOR - ok 10:56:26.0928 3024 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys 10:56:26.0944 3024 usbuhci - ok 10:56:26.0960 3024 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll 10:56:26.0991 3024 UxSms - ok 10:56:27.0006 3024 VaultSvc (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 10:56:27.0022 3024 VaultSvc - ok 10:56:27.0022 3024 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys 10:56:27.0038 3024 vdrvroot - ok 10:56:27.0084 3024 vds (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe 10:56:27.0084 3024 vds - ok 10:56:27.0116 3024 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 10:56:27.0116 3024 vga - ok 10:56:27.0116 3024 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 10:56:27.0162 3024 VgaSave - ok 10:56:27.0178 3024 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys 10:56:27.0194 3024 vhdmp - ok 10:56:27.0194 3024 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys 10:56:27.0194 3024 viaide - ok 10:56:27.0209 3024 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys 10:56:27.0209 3024 volmgr - ok 10:56:27.0225 3024 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys 10:56:27.0240 3024 volmgrx - ok 10:56:27.0256 3024 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys 10:56:27.0256 3024 volsnap - ok 10:56:27.0272 3024 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 10:56:27.0287 3024 vsmraid - ok 10:56:27.0381 3024 VSS (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe 10:56:27.0396 3024 VSS - ok 10:56:27.0537 3024 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 10:56:27.0537 3024 vwifibus - ok 10:56:27.0552 3024 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 10:56:27.0568 3024 vwififlt - ok 10:56:27.0599 3024 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll 10:56:27.0630 3024 W32Time - ok 10:56:27.0630 3024 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 10:56:27.0646 3024 WacomPen - ok 10:56:27.0646 3024 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 10:56:27.0677 3024 WANARP - ok 10:56:27.0693 3024 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 10:56:27.0708 3024 Wanarpv6 - ok 10:56:27.0771 3024 wbengine (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe 10:56:27.0818 3024 wbengine - ok 10:56:27.0880 3024 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll 10:56:27.0896 3024 WbioSrvc - ok 10:56:27.0911 3024 wcncsvc (8321c2ca3b62b61b293cda3451984468) C:\Windows\System32\wcncsvc.dll 10:56:27.0927 3024 wcncsvc - ok 10:56:27.0927 3024 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll 10:56:27.0958 3024 WcsPlugInService - ok 10:56:27.0958 3024 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 10:56:27.0958 3024 Wd - ok 10:56:27.0989 3024 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 10:56:28.0005 3024 Wdf01000 - ok 10:56:28.0020 3024 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 10:56:28.0036 3024 WdiServiceHost - ok 10:56:28.0052 3024 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 10:56:28.0052 3024 WdiSystemHost - ok 10:56:28.0067 3024 WebClient (8a438cbb8c032a0c798b0c642ffbe572) C:\Windows\System32\webclnt.dll 10:56:28.0098 3024 WebClient - ok 10:56:28.0130 3024 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll 10:56:28.0161 3024 Wecsvc - ok 10:56:28.0192 3024 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll 10:56:28.0208 3024 wercplsupport - ok 10:56:28.0239 3024 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll 10:56:28.0270 3024 WerSvc - ok 10:56:28.0301 3024 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 10:56:28.0317 3024 WfpLwf - ok 10:56:28.0332 3024 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 10:56:28.0332 3024 WIMMount - ok 10:56:28.0364 3024 WinDefend - ok 10:56:28.0379 3024 WinHttpAutoProxySvc - ok 10:56:28.0426 3024 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll 10:56:28.0457 3024 Winmgmt - ok 10:56:28.0582 3024 WinRM (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll 10:56:28.0629 3024 WinRM - ok 10:56:28.0769 3024 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll 10:56:28.0785 3024 Wlansvc - ok 10:56:28.0832 3024 wltrysvc (13b0a570e1ae451c92da550085d72cf3) C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE 10:56:28.0847 3024 wltrysvc ( UnsignedFile.Multi.Generic ) - warning 10:56:28.0847 3024 wltrysvc - detected UnsignedFile.Multi.Generic (1) 10:56:28.0894 3024 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys 10:56:28.0894 3024 WmiAcpi - ok 10:56:28.0941 3024 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe 10:56:28.0956 3024 wmiApSrv - ok 10:56:28.0988 3024 WMPNetworkSvc - ok 10:56:29.0003 3024 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll 10:56:29.0019 3024 WPCSvc - ok 10:56:29.0034 3024 WPDBusEnum (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll 10:56:29.0066 3024 WPDBusEnum - ok 10:56:29.0066 3024 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 10:56:29.0097 3024 ws2ifsl - ok 10:56:29.0128 3024 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\system32\wscsvc.dll 10:56:29.0144 3024 wscsvc - ok 10:56:29.0144 3024 WSearch - ok 10:56:29.0268 3024 wuauserv (38340204a2d0228f1e87740fc5e554a7) C:\Windows\system32\wuaueng.dll 10:56:29.0315 3024 wuauserv - ok 10:56:29.0409 3024 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys 10:56:29.0456 3024 WudfPf - ok 10:56:29.0456 3024 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys 10:56:29.0487 3024 WUDFRd - ok 10:56:29.0502 3024 wudfsvc (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll 10:56:29.0518 3024 wudfsvc - ok 10:56:29.0549 3024 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll 10:56:29.0565 3024 WwanSvc - ok 10:56:29.0580 3024 MBR (0x1B8) (cdb4de4bbd714f152979da2dcbef57eb) \Device\Harddisk0\DR0 10:56:29.0690 3024 \Device\Harddisk0\DR0 ( TDSS File System ) - warning 10:56:29.0690 3024 \Device\Harddisk0\DR0 - detected TDSS File System (1) 10:56:29.0690 3024 Boot (0x1200) (a5c682221bb3be9ca89446427c662f59) \Device\Harddisk0\DR0\Partition0 10:56:29.0690 3024 \Device\Harddisk0\DR0\Partition0 - ok 10:56:29.0721 3024 Boot (0x1200) (2173d9f00b8f5ffc95b7fde2a9e0227f) \Device\Harddisk0\DR0\Partition1 10:56:29.0721 3024 \Device\Harddisk0\DR0\Partition1 - ok 10:56:29.0721 3024 ============================================================ 10:56:29.0721 3024 Scan finished 10:56:29.0721 3024 ============================================================ 10:56:29.0736 1120 Detected object count: 3 10:56:29.0736 1120 Actual detected object count: 3 10:57:00.0375 1120 DockLoginService ( UnsignedFile.Multi.Generic ) - skipped by user 10:57:00.0375 1120 DockLoginService ( UnsignedFile.Multi.Generic ) - User select action: Skip 10:57:00.0375 1120 wltrysvc ( UnsignedFile.Multi.Generic ) - skipped by user 10:57:00.0375 1120 wltrysvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 10:57:00.0375 1120 \Device\Harddisk0\DR0 ( TDSS File System ) - skipped by user 10:57:00.0375 1120 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Skip 10:57:04.0821 1516 Deinitialize success and combofix ComboFix 12-04-26.01 - Jeffrey 04/28/2012 10:58:07.4.8 - x64 NETWORK Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.8183.7251 [GMT -4:00] Running from: c:\users\[removed]\Downloads\ComboFix.exe AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637} FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C} SP: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\msxml4-KB954430-enu.LOG c:\windows\msxml4-KB973688-enu.LOG c:\windows\svchost.exe . . ((((((((((((((((((((((((( Files Created from 2012-03-28 to 2012-04-28 ))))))))))))))))))))))))))))))) . . 2012-04-28 15:00 . 2012-04-28 15:00 ——– d—–w- c:\users\Default\AppData\Local\temp 2012-04-27 11:58 . 2011-11-19 15:07 77312 —-a-w- c:\windows\system32\packager.dll 2012-04-27 11:58 . 2011-11-19 14:06 67072 —-a-w- c:\windows\SysWow64\packager.dll 2012-04-26 20:15 . 2012-04-26 20:15 ——– d—–w- c:\program files (x86)\ESET 2012-04-26 20:07 . 2012-04-26 20:07 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-04-26 20:07 . 2012-04-26 20:07 ——– d—–w- c:\programdata\Malwarebytes 2012-04-26 20:07 . 2012-04-04 19:56 24904 —-a-w- c:\windows\system32\drivers\mbam.sys 2012-04-26 18:36 . 2012-04-26 18:37 ——– d—–w- c:\program files (x86)\ERUNT 2012-04-26 16:24 . 2012-04-26 16:24 ——– d—–w- c:\windows\Sun 2012-04-26 15:53 . 2012-04-28 11:15 ——– d—–w- C:\TDSSKiller_Quarantine 2012-04-26 14:54 . 2008-07-31 14:41 68616 —-a-w- c:\windows\SysWow64\XAPOFX1_1.dll 2012-04-26 14:54 . 2008-07-31 14:40 509448 —-a-w- c:\windows\SysWow64\XAudio2_2.dll 2012-04-26 14:54 . 2008-07-12 12:18 467984 —-a-w- c:\windows\SysWow64\d3dx10_39.dll 2012-04-26 14:54 . 2008-07-12 12:18 3851784 —-a-w- c:\windows\SysWow64\D3DX9_39.dll 2012-04-26 14:54 . 2008-07-12 12:18 1493528 —-a-w- c:\windows\SysWow64\D3DCompiler_39.dll 2012-04-26 14:52 . 2012-04-26 14:52 ——– d—–w- C:\Riot Games 2012-04-26 10:43 . 2012-04-26 18:36 ——– d—–w- c:\programdata\PMB Files 2012-04-26 10:36 . 2012-04-26 10:36 ——– d—–w- c:\program files (x86)\Mozilla Maintenance Service 2012-04-26 10:29 . 2012-04-26 10:29 ——– d—–w- c:\program files (x86)\Common Files\McAfee 2012-04-26 10:29 . 2012-02-22 17:29 10248 —-a-w- c:\windows\system32\drivers\mfeclnk.sys 2012-04-26 10:29 . 2012-02-22 17:29 75936 —-a-w- c:\windows\system32\drivers\mfenlfk.sys 2012-04-26 10:29 . 2012-02-22 17:29 65264 —-a-w- c:\windows\system32\drivers\cfwids.sys 2012-04-26 10:29 . 2012-02-22 17:29 487296 —-a-w- c:\windows\system32\drivers\mfefirek.sys 2012-04-26 10:29 . 2012-02-22 17:29 289664 —-a-w- c:\windows\system32\drivers\mfewfpk.sys 2012-04-26 10:29 . 2012-02-22 17:29 229528 —-a-w- c:\windows\system32\drivers\mfeavfk.sys 2012-04-26 10:29 . 2012-02-22 17:29 100912 —-a-w- c:\windows\system32\drivers\mferkdet.sys 2012-04-26 10:29 . 2012-04-26 10:29 ——– d—–w- c:\program files\Common Files\McAfee 2012-04-26 10:29 . 2012-04-26 10:30 ——– d—–w- c:\program files\McAfee 2012-04-26 10:29 . 2012-04-26 15:54 ——– d—–w- c:\program files (x86)\McAfee 2012-04-26 10:13 . 2012-03-20 17:11 162192 —-a-w- c:\windows\system32\mfevtps.exe 2012-04-26 10:13 . 2012-04-26 13:29 ——– d—–w- c:\programdata\McAfee 2012-04-26 10:08 . 2012-04-26 10:08 ——– d—–w- c:\program files (x86)\Compact Wireless-G USB Adapter Wireless Network Monitor 2012-04-26 10:08 . 2001-09-05 08:18 77824 —-a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll 2012-04-26 10:08 . 2001-09-05 08:18 225280 ——w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll 2012-04-26 10:08 . 2001-09-05 08:14 176128 ——w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll 2012-04-26 10:08 . 2001-09-05 08:13 32768 ——w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll 2012-04-26 10:02 . 2012-04-26 10:04 ——– d—–w- c:\users\Jeffrey 2012-04-26 09:45 . 2012-04-18 08:03 8917360 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2E70F480-88C1-4FEF-A7D6-4A31B65AAC75}\mpengine.dll 2012-04-26 09:45 . 2012-02-23 15:18 279656 ——w- c:\windows\system32\MpSigStub.exe 2012-04-26 09:12 . 2012-02-15 06:27 1031680 —-a-w- c:\windows\system32\rdpcore.dll 2012-04-26 09:12 . 2012-02-15 05:44 826368 —-a-w- c:\windows\SysWow64\rdpcore.dll 2012-04-26 09:12 . 2012-02-15 04:47 204800 —-a-w- c:\windows\system32\drivers\rdpwd.sys 2012-04-26 09:12 . 2012-02-15 04:46 23552 —-a-w- c:\windows\system32\drivers\tdtcp.sys 2012-04-26 09:12 . 2012-01-25 06:27 76288 —-a-w- c:\windows\system32\rdpwsx.dll 2012-04-26 09:12 . 2012-01-25 06:27 149504 —-a-w- c:\windows\system32\rdpcorekmts.dll 2012-04-26 09:12 . 2012-01-25 06:20 9216 —-a-w- c:\windows\system32\rdrmemptylst.exe 2012-04-26 09:12 . 2010-01-09 07:19 139264 —-a-w- c:\windows\system32\cabview.dll 2012-04-26 09:12 . 2010-01-09 06:52 132608 —-a-w- c:\windows\SysWow64\cabview.dll . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-02-22 17:29 . 2012-02-22 17:29 647208 —-a-w- c:\windows\system32\drivers\mfehidk.sys 2012-02-22 17:29 . 2012-02-22 17:29 160792 —-a-w- c:\windows\system32\drivers\mfeapfk.sys . . ((((((((((((((((((((((((((((( SnapShot_2012-04-27_02.45.44 ))))))))))))))))))))))))))))))))))))))))) . + 2012-04-26 10:05 . 2012-04-28 11:07 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat - 2012-04-26 10:05 . 2012-04-27 02:28 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2012-04-28 11:11 . 2012-04-28 11:07 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012012042820120429\index.dat + 2012-04-27 11:33 . 2012-04-27 22:13 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012012042720120428\index.dat + 2012-04-26 09:09 . 2012-04-28 11:07 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat + 2009-10-26 23:35 . 2012-04-28 11:12 27264 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2012-04-28 11:12 24576 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:30 . 2012-04-28 11:18 86016 c:\windows\system32\DriverStore\infpub.dat - 2009-07-14 05:30 . 2012-04-26 10:29 86016 c:\windows\system32\DriverStore\infpub.dat - 2012-04-26 09:58 . 2012-04-27 02:27 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2012-04-26 09:58 . 2012-04-28 11:18 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2012-04-26 09:58 . 2012-04-27 02:27 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2012-04-26 09:58 . 2012-04-28 11:18 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2012-04-27 02:27 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:54 . 2012-04-28 11:18 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2012-04-26 09:58 . 2012-04-28 11:06 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2012-04-26 09:58 . 2012-04-27 02:45 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:46 . 2012-04-28 11:15 80144 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat - 2012-04-26 10:09 . 2012-04-27 02:45 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat + 2012-04-26 10:09 . 2012-04-28 11:06 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Temp\Temporary Internet Files\Content.IE5\index.dat - 2012-04-26 10:09 . 2012-04-27 02:45 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Temp\History\History.IE5\index.dat + 2012-04-26 10:09 . 2012-04-28 11:06 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Temp\History\History.IE5\index.dat - 2012-04-26 10:09 . 2012-04-27 02:45 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Temp\Cookies\index.dat + 2012-04-26 10:09 . 2012-04-28 11:06 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Temp\Cookies\index.dat + 2012-04-26 09:58 . 2012-04-28 11:06 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2012-04-26 09:58 . 2012-04-27 02:45 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2012-04-26 09:58 . 2012-04-27 02:45 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2012-04-26 09:58 . 2012-04-28 11:06 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2012-04-26 12:03 . 2012-04-28 11:12 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2012-04-26 12:03 . 2012-04-27 02:30 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2012-04-26 12:03 . 2012-04-27 02:30 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2012-04-26 12:03 . 2012-04-28 11:12 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2012-04-26 09:19 . 2012-04-28 11:12 4814 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1896610987-2083587572-4140636840-1000_UserData.bin + 2012-04-28 11:11 . 2012-04-28 11:15 2390 c:\windows\SoftwareDistribution\PostRebootEventCache\{2F8B679E-D208-4519-A584-FF657B8C8E7E}.bin - 2012-04-27 02:45 . 2012-04-27 02:45 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2012-04-28 15:01 . 2012-04-28 15:01 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2009-07-14 04:54 . 2012-04-27 02:45 212992 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:54 . 2012-04-28 11:07 212992 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-07-14 02:36 . 2012-04-27 02:34 615122 c:\windows\system32\perfh009.dat + 2009-07-14 02:36 . 2012-04-28 11:22 615122 c:\windows\system32\perfh009.dat - 2009-07-14 02:36 . 2012-04-27 02:34 103496 c:\windows\system32\perfc009.dat + 2009-07-14 02:36 . 2012-04-28 11:22 103496 c:\windows\system32\perfc009.dat - 2009-07-14 05:30 . 2012-04-26 10:29 143360 c:\windows\system32\DriverStore\infstrng.dat + 2009-07-14 05:30 . 2012-04-28 11:17 143360 c:\windows\system32\DriverStore\infstrng.dat - 2009-07-14 05:30 . 2012-04-26 10:29 143360 c:\windows\system32\DriverStore\infstor.dat + 2009-07-14 05:30 . 2012-04-28 11:18 143360 c:\windows\system32\DriverStore\infstor.dat - 2009-07-14 05:31 . 2009-07-14 07:43 399360 c:\windows\system32\DriverStore\drvindex.dat + 2009-07-14 05:31 . 2012-04-28 11:17 399360 c:\windows\system32\DriverStore\drvindex.dat + 2009-07-14 05:01 . 2012-04-27 11:59 328644 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat - 2009-07-14 05:01 . 2012-04-27 02:44 328644 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat - 2012-04-26 15:53 . 2012-04-27 02:44 328644 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1896610987-2083587572-4140636840-1000-8192.dat + 2012-04-26 15:53 . 2012-04-27 11:59 328644 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-1896610987-2083587572-4140636840-1000-8192.dat + 2009-07-14 04:54 . 2012-04-28 11:07 4947968 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2012-04-27 02:45 4947968 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2012-04-28 11:07 1277952 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 02:34 . 2012-04-27 02:40 9699328 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT + 2009-07-14 02:34 . 2012-04-28 11:29 9699328 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT - 2009-07-14 04:45 . 2012-04-26 09:24 3802445 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2009-07-14 04:45 . 2012-04-28 11:15 3802445 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat . – Snapshot reset to current date – . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="c:\program files (x86)\Java\jre6\bin\jusched.exe" [2009-10-26 148888] "ShwiconXP9106"="c:\program files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe" [2009-07-17 237568] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "PDVDDXSrv"="c:\program files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2009-06-25 140520] "DellComms"="c:\program files (x86)\Dell\DellComms\bin\sprtcmd.exe" [2009-05-05 206064] "mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2012-03-22 1675160] "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408] . c:\users\Jeffrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-6-30 1316192] ERUNT AutoBackup.lnk - c:\program files (x86)\ERUNT\AUTOBACK.EXE [2005-10-20 38912] . c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dell Dock First Run.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-6-30 1316192] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . R2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-03-31 92160] R2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe [2008-12-18 155648] R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 249936] R2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 249936] R2 SessionLauncher;SessionLauncher;c:\users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe [x] R2 sprtsvc_DellComms;SupportSoft Sprocket Service (DellComms);c:\program files (x86)\Dell\DellComms\bin\sprtsvc.exe [2009-05-05 206064] R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [x] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x] R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [x] R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976] R3 RoxMediaDB10;RoxMediaDB10;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-26 1124848] S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x] S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 249936] S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2012-03-20 210584] S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [x] S3 k57nd60a;Broadcom NetLink ™ Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x] S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [x] S3 netr7364;RT73 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr7364.sys [x] . . . ——— x86-64 ———– . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-05-23 7833120] "Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [BU] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-06-26 16327712] "Broadcom Wireless Manager UI"="c:\program files\Dell\Dell Wireless WLAN Card\WLTRAY.exe" [2009-07-17 4968960] . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm TCP: DhcpNameServer = 192.168.1.254 FF - ProfilePath - c:\users\Jeffrey\AppData\Roaming\Mozilla\Firefox\Profiles\olkt1xwk.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/ FF - prefs.js: network.proxy.type - 0 . - - - - ORPHANS REMOVED - - - - . Toolbar-Locked - (no file) . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10b.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10b.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}] @Denied: (A 2) (Everyone) @="IFlashBroker2" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2012-04-28 11:04:08 - machine was rebooted ComboFix-quarantined-files.txt 2012-04-28 15:04 ComboFix2.txt 2012-04-27 02:47 ComboFix3.txt 2012-04-26 19:50 ComboFix4.txt 2012-04-26 19:28 . Pre-Run: 946,144,235,520 bytes free Post-Run: 945,929,666,560 bytes free . - - End Of File - - E8D94B9722CEB466C8F1A64811389E4A

jeffce

Post #63April 28, 2012, 5:44 PM UTC

Hi,

Good.

Run TDSSKiller again.
When you get to the following entries:

\Device\Harddisk0\DR0 ( TDSS File System )
\Device\Harddisk0\DR0 ( TDSS File System )

Delete these items.
Save the log that is created.
———-

Please delete the current version of Combofix.exe from your desktop by deleting the icon and download a new version from here to your desktop.

Disable your AntiVirus and AntiSpyware applications.

Right-click and Run as Administrator on the Combofix.exe and follow the prombts on your display. When finish, it will create a C:\Combofix.txt. Please post this log for further review.
———

In your next reply please post the logs made by TDSSKiller and ComboFix.

Pirus504

Post #64April 28, 2012, 9:54 PM UTC

ok. only one of the hardisk things came up on tdsskiller so i deleted it. combofix found a lot. when i rebooted i rebooted into safemode with networking. still nothing in my start menu. posting logs tdsskiller 17:41:43.0320 0976 TDSS rootkit removing tool [removed] Apr 24 2012 18:43:43 17:41:43.0710 0976 ============================================================ 17:41:43.0710 0976 Current date / time: 2012/04/28 17:41:43.0710 17:41:43.0710 0976 SystemInfo: 17:41:43.0710 0976 17:41:43.0710 0976 OS Version: 6.1.7600 ServicePack: 0.0 17:41:43.0710 0976 Product type: Workstation 17:41:43.0710 0976 ComputerName: JEFFREY-PC 17:41:43.0710 0976 UserName: Jeffrey 17:41:43.0710 0976 Windows directory: C:\Windows 17:41:43.0710 0976 System windows directory: C:\Windows 17:41:43.0710 0976 Running under WOW64 17:41:43.0710 0976 Processor architecture: Intel x64 17:41:43.0710 0976 Number of processors: 8 17:41:43.0710 0976 Page size: 0x1000 17:41:43.0710 0976 Boot type: Safe boot with network 17:41:43.0710 0976 ============================================================ 17:41:44.0552 0976 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 17:41:44.0552 0976 ============================================================ 17:41:44.0552 0976 \Device\Harddisk0\DR0: 17:41:44.0552 0976 MBR partitions: 17:41:44.0552 0976 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x14000, BlocksNum 0x1D4C000 17:41:44.0552 0976 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1D60000, BlocksNum 0x729A65B0 17:41:44.0552 0976 ============================================================ 17:41:44.0599 0976 C: <-> \Device\Harddisk0\DR0\Partition1 17:41:44.0599 0976 ============================================================ 17:41:44.0599 0976 Initialize success 17:41:44.0599 0976 ============================================================ 17:41:45.0597 1984 ============================================================ 17:41:45.0597 1984 Scan started 17:41:45.0597 1984 Mode: Manual; 17:41:45.0597 1984 ============================================================ 17:41:46.0252 1984 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys 17:41:46.0252 1984 1394ohci - ok 17:41:46.0268 1984 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys 17:41:46.0284 1984 ACPI - ok 17:41:46.0299 1984 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys 17:41:46.0299 1984 AcpiPmi - ok 17:41:46.0330 1984 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 17:41:46.0346 1984 adp94xx - ok 17:41:46.0362 1984 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 17:41:46.0362 1984 adpahci - ok 17:41:46.0377 1984 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 17:41:46.0377 1984 adpu320 - ok 17:41:46.0408 1984 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll 17:41:46.0408 1984 AeLookupSvc - ok 17:41:46.0486 1984 AERTFilters (3ac22a3dfa8a050e35f0e3cd99d0cdf2) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe 17:41:46.0486 1984 AERTFilters - ok 17:41:46.0502 1984 AFD (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys 17:41:46.0518 1984 AFD - ok 17:41:46.0518 1984 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys 17:41:46.0518 1984 agp440 - ok 17:41:46.0549 1984 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe 17:41:46.0549 1984 ALG - ok 17:41:46.0549 1984 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys 17:41:46.0549 1984 aliide - ok 17:41:46.0549 1984 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys 17:41:46.0564 1984 amdide - ok 17:41:46.0580 1984 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 17:41:46.0580 1984 AmdK8 - ok 17:41:46.0580 1984 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 17:41:46.0580 1984 AmdPPM - ok 17:41:46.0580 1984 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys 17:41:46.0596 1984 amdsata - ok 17:41:46.0596 1984 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 17:41:46.0596 1984 amdsbs - ok 17:41:46.0596 1984 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys 17:41:46.0596 1984 amdxata - ok 17:41:46.0611 1984 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys 17:41:46.0611 1984 AppID - ok 17:41:46.0642 1984 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll 17:41:46.0642 1984 AppIDSvc - ok 17:41:46.0642 1984 Appinfo (d065be66822847b7f127d1f90158376e) C:\Windows\System32\appinfo.dll 17:41:46.0642 1984 Appinfo - ok 17:41:46.0674 1984 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 17:41:46.0674 1984 arc - ok 17:41:46.0705 1984 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 17:41:46.0705 1984 arcsas - ok 17:41:46.0705 1984 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 17:41:46.0705 1984 AsyncMac - ok 17:41:46.0720 1984 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys 17:41:46.0720 1984 atapi - ok 17:41:46.0752 1984 AudioEndpointBuilder (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 17:41:46.0767 1984 AudioEndpointBuilder - ok 17:41:46.0767 1984 AudioSrv (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 17:41:46.0767 1984 AudioSrv - ok 17:41:46.0783 1984 AxInstSV (b20b5fa5ca050e9926e4d1db81501b32) C:\Windows\System32\AxInstSV.dll 17:41:46.0783 1984 AxInstSV - ok 17:41:46.0814 1984 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 17:41:46.0814 1984 b06bdrv - ok 17:41:46.0845 1984 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 17:41:46.0845 1984 b57nd60a - ok 17:41:46.0845 1984 BCM42RLY (e001dd475a7c27ebe5a0db45c11bad71) C:\Windows\system32\drivers\BCM42RLY.sys 17:41:46.0845 1984 BCM42RLY - ok 17:41:46.0986 1984 BCM43XX (37394d3553e220fb732c21e217e1bd8b) C:\Windows\system32\DRIVERS\bcmwl664.sys 17:41:47.0001 1984 BCM43XX - ok 17:41:47.0126 1984 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll 17:41:47.0126 1984 BDESVC - ok 17:41:47.0157 1984 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 17:41:47.0157 1984 Beep - ok 17:41:47.0204 1984 BFE (4992c609a6315671463e30f6512bc022) C:\Windows\System32\bfe.dll 17:41:47.0220 1984 BFE - ok 17:41:47.0282 1984 BITS (7f0c323fe3da28aa4aa1bda3f575707f) C:\Windows\system32\qmgr.dll 17:41:47.0298 1984 BITS - ok 17:41:47.0313 1984 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 17:41:47.0313 1984 blbdrive - ok 17:41:47.0344 1984 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys 17:41:47.0344 1984 bowser - ok 17:41:47.0360 1984 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 17:41:47.0360 1984 BrFiltLo - ok 17:41:47.0360 1984 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 17:41:47.0360 1984 BrFiltUp - ok 17:41:47.0391 1984 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys 17:41:47.0391 1984 BridgeMP - ok 17:41:47.0407 1984 Browser (94fbc06f294d58d02361918418f996e3) C:\Windows\System32\browser.dll 17:41:47.0407 1984 Browser - ok 17:41:47.0422 1984 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 17:41:47.0422 1984 Brserid - ok 17:41:47.0454 1984 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 17:41:47.0454 1984 BrSerWdm - ok 17:41:47.0454 1984 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 17:41:47.0454 1984 BrUsbMdm - ok 17:41:47.0454 1984 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 17:41:47.0454 1984 BrUsbSer - ok 17:41:47.0454 1984 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 17:41:47.0454 1984 BTHMODEM - ok 17:41:47.0469 1984 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll 17:41:47.0469 1984 bthserv - ok 17:41:47.0485 1984 catchme - ok 17:41:47.0500 1984 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 17:41:47.0500 1984 cdfs - ok 17:41:47.0516 1984 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys 17:41:47.0532 1984 cdrom - ok 17:41:47.0547 1984 CertPropSvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 17:41:47.0547 1984 CertPropSvc - ok 17:41:47.0578 1984 cfwids (274ce03459896006f7a5069266e0469e) C:\Windows\system32\drivers\cfwids.sys 17:41:47.0578 1984 cfwids - ok 17:41:47.0578 1984 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 17:41:47.0578 1984 circlass - ok 17:41:47.0610 1984 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 17:41:47.0625 1984 CLFS - ok 17:41:47.0672 1984 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 17:41:47.0688 1984 clr_optimization_v2.0.50727_32 - ok 17:41:47.0734 1984 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 17:41:47.0734 1984 clr_optimization_v2.0.50727_64 - ok 17:41:47.0781 1984 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 17:41:47.0781 1984 CmBatt - ok 17:41:47.0781 1984 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys 17:41:47.0797 1984 cmdide - ok 17:41:47.0812 1984 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys 17:41:47.0812 1984 CNG - ok 17:41:47.0828 1984 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 17:41:47.0828 1984 Compbatt - ok 17:41:47.0828 1984 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys 17:41:47.0828 1984 CompositeBus - ok 17:41:47.0828 1984 COMSysApp - ok 17:41:47.0859 1984 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 17:41:47.0859 1984 crcdisk - ok 17:41:47.0890 1984 CryptSvc (8c57411b66282c01533cb776f98ad384) C:\Windows\system32\cryptsvc.dll 17:41:47.0906 1984 CryptSvc - ok 17:41:47.0953 1984 DcomLaunch (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll 17:41:47.0953 1984 DcomLaunch - ok 17:41:47.0968 1984 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll 17:41:47.0984 1984 defragsvc - ok 17:41:47.0984 1984 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys 17:41:47.0984 1984 DfsC - ok 17:41:48.0015 1984 Dhcp (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll 17:41:48.0015 1984 Dhcp - ok 17:41:48.0015 1984 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 17:41:48.0015 1984 discache - ok 17:41:48.0031 1984 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 17:41:48.0031 1984 Disk - ok 17:41:48.0031 1984 Dnscache (676108c4e3aa6f6b34633748bd0bebd9) C:\Windows\System32\dnsrslvr.dll 17:41:48.0031 1984 Dnscache - ok 17:41:48.0124 1984 DockLoginService (0840abbbdf438691ee65a20040635cbe) C:\Program Files\Dell\DellDock\DockLogin.exe 17:41:48.0124 1984 DockLoginService - ok 17:41:48.0156 1984 dot3svc (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll 17:41:48.0156 1984 dot3svc - ok 17:41:48.0171 1984 DPS (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll 17:41:48.0171 1984 DPS - ok 17:41:48.0187 1984 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 17:41:48.0187 1984 drmkaud - ok 17:41:48.0249 1984 DXGKrnl (7cb7d2b73813ce05c7bc0f5f95d27cec) C:\Windows\System32\drivers\dxgkrnl.sys 17:41:48.0265 1984 DXGKrnl - ok 17:41:48.0280 1984 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll 17:41:48.0296 1984 EapHost - ok 17:41:48.0436 1984 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 17:41:48.0468 1984 ebdrv - ok 17:41:48.0624 1984 EFS (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\System32\lsass.exe 17:41:48.0624 1984 EFS - ok 17:41:48.0733 1984 ehRecvr (b91d81b3b54a54ccafc03733dbc2e29e) C:\Windows\ehome\ehRecvr.exe 17:41:48.0733 1984 ehRecvr - ok 17:41:48.0748 1984 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe 17:41:48.0748 1984 ehSched - ok 17:41:48.0811 1984 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 17:41:48.0811 1984 elxstor - ok 17:41:48.0826 1984 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys 17:41:48.0826 1984 ErrDev - ok 17:41:48.0889 1984 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll 17:41:48.0889 1984 EventSystem - ok 17:41:48.0889 1984 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 17:41:48.0889 1984 exfat - ok 17:41:48.0920 1984 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 17:41:48.0920 1984 fastfat - ok 17:41:48.0967 1984 Fax (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe 17:41:48.0982 1984 Fax - ok 17:41:48.0982 1984 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 17:41:48.0982 1984 fdc - ok 17:41:48.0998 1984 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll 17:41:48.0998 1984 fdPHost - ok 17:41:49.0029 1984 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll 17:41:49.0029 1984 FDResPub - ok 17:41:49.0029 1984 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 17:41:49.0029 1984 FileInfo - ok 17:41:49.0045 1984 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 17:41:49.0045 1984 Filetrace - ok 17:41:49.0045 1984 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 17:41:49.0045 1984 flpydisk - ok 17:41:49.0060 1984 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys 17:41:49.0060 1984 FltMgr - ok 17:41:49.0123 1984 FontCache (8ac4cb4ea61e41009fae9ae7b2b5da3a) C:\Windows\system32\FntCache.dll 17:41:49.0138 1984 FontCache - ok 17:41:49.0216 1984 FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 17:41:49.0216 1984 FontCache3.0.0.0 - ok 17:41:49.0263 1984 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 17:41:49.0263 1984 FsDepends - ok 17:41:49.0263 1984 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys 17:41:49.0263 1984 Fs_Rec - ok 17:41:49.0263 1984 fvevol (b8b2a6e1558f8f5de5ce431c5b2c7b09) C:\Windows\system32\DRIVERS\fvevol.sys 17:41:49.0279 1984 fvevol - ok 17:41:49.0279 1984 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 17:41:49.0279 1984 gagp30kx - ok 17:41:49.0326 1984 gpsvc (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll 17:41:49.0341 1984 gpsvc - ok 17:41:49.0341 1984 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 17:41:49.0341 1984 hcw85cir - ok 17:41:49.0372 1984 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys 17:41:49.0372 1984 HDAudBus - ok 17:41:49.0388 1984 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 17:41:49.0388 1984 HidBatt - ok 17:41:49.0388 1984 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 17:41:49.0388 1984 HidBth - ok 17:41:49.0419 1984 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 17:41:49.0419 1984 HidIr - ok 17:41:49.0435 1984 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\System32\hidserv.dll 17:41:49.0450 1984 hidserv - ok 17:41:49.0466 1984 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys 17:41:49.0466 1984 HidUsb - ok 17:41:49.0482 1984 hkmsvc (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll 17:41:49.0482 1984 hkmsvc - ok 17:41:49.0513 1984 HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll 17:41:49.0513 1984 HomeGroupListener - ok 17:41:49.0528 1984 HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll 17:41:49.0544 1984 HomeGroupProvider - ok 17:41:49.0544 1984 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys 17:41:49.0544 1984 HpSAMD - ok 17:41:49.0575 1984 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys 17:41:49.0591 1984 HTTP - ok 17:41:49.0606 1984 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys 17:41:49.0606 1984 hwpolicy - ok 17:41:49.0638 1984 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 17:41:49.0638 1984 i8042prt - ok 17:41:49.0669 1984 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys 17:41:49.0684 1984 iaStor - ok 17:41:49.0731 1984 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys 17:41:49.0731 1984 iaStorV - ok 17:41:49.0840 1984 idsvc (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 17:41:49.0840 1984 idsvc - ok 17:41:49.0840 1984 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 17:41:49.0840 1984 iirsp - ok 17:41:49.0903 1984 IKEEXT (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll 17:41:49.0918 1984 IKEEXT - ok 17:41:50.0028 1984 IntcAzAudAddService (d42d651676883181400e22957a7e0b1e) C:\Windows\system32\drivers\RTKVHD64.sys 17:41:50.0043 1984 IntcAzAudAddService - ok 17:41:50.0168 1984 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys 17:41:50.0168 1984 intelide - ok 17:41:50.0199 1984 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 17:41:50.0199 1984 intelppm - ok 17:41:50.0215 1984 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll 17:41:50.0215 1984 IPBusEnum - ok 17:41:50.0246 1984 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys 17:41:50.0246 1984 IpFilterDriver - ok 17:41:50.0308 1984 iphlpsvc (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll 17:41:50.0308 1984 iphlpsvc - ok 17:41:50.0308 1984 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys 17:41:50.0308 1984 IPMIDRV - ok 17:41:50.0324 1984 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 17:41:50.0340 1984 IPNAT - ok 17:41:50.0355 1984 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 17:41:50.0355 1984 IRENUM - ok 17:41:50.0386 1984 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys 17:41:50.0386 1984 isapnp - ok 17:41:50.0433 1984 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys 17:41:50.0433 1984 iScsiPrt - ok 17:41:50.0496 1984 k57nd60a (249ee2d26cb1530f3bede0ac8b9e3099) C:\Windows\system32\DRIVERS\k57nd60a.sys 17:41:50.0496 1984 k57nd60a - ok 17:41:50.0496 1984 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys 17:41:50.0496 1984 kbdclass - ok 17:41:50.0511 1984 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys 17:41:50.0511 1984 kbdhid - ok 17:41:50.0511 1984 KeyIso (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 17:41:50.0511 1984 KeyIso - ok 17:41:50.0511 1984 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys 17:41:50.0511 1984 KSecDD - ok 17:41:50.0527 1984 KSecPkg (bbe1bf6d9b661c354d4857d5fadb943b) C:\Windows\system32\Drivers\ksecpkg.sys 17:41:50.0527 1984 KSecPkg - ok 17:41:50.0527 1984 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 17:41:50.0527 1984 ksthunk - ok 17:41:50.0558 1984 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll 17:41:50.0558 1984 KtmRm - ok 17:41:50.0605 1984 LanmanServer (c926920b8978de6acfe9e15c709e9b57) C:\Windows\System32\srvsvc.dll 17:41:50.0605 1984 LanmanServer - ok 17:41:50.0652 1984 LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll 17:41:50.0652 1984 LanmanWorkstation - ok 17:41:50.0683 1984 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 17:41:50.0683 1984 lltdio - ok 17:41:50.0730 1984 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll 17:41:50.0730 1984 lltdsvc - ok 17:41:50.0745 1984 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll 17:41:50.0745 1984 lmhosts - ok 17:41:50.0792 1984 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 17:41:50.0792 1984 LSI_FC - ok 17:41:50.0808 1984 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 17:41:50.0808 1984 LSI_SAS - ok 17:41:50.0839 1984 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 17:41:50.0839 1984 LSI_SAS2 - ok 17:41:50.0870 1984 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 17:41:50.0870 1984 LSI_SCSI - ok 17:41:50.0886 1984 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 17:41:50.0886 1984 luafv - ok 17:41:50.0932 1984 MBAMProtector (dbc08862a71459e74f7538b432c114cc) C:\Windows\system32\drivers\mbam.sys 17:41:50.0932 1984 MBAMProtector - ok 17:41:51.0026 1984 MBAMService (ba400ed640bca1eae5c727ae17c10207) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 17:41:51.0042 1984 MBAMService - ok 17:41:51.0120 1984 McAfee SiteAdvisor Service (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 17:41:51.0120 1984 McAfee SiteAdvisor Service - ok 17:41:51.0120 1984 McMPFSvc (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 17:41:51.0120 1984 McMPFSvc - ok 17:41:51.0120 1984 mcmscsvc (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 17:41:51.0120 1984 mcmscsvc - ok 17:41:51.0151 1984 McNaiAnn (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 17:41:51.0151 1984 McNaiAnn - ok 17:41:51.0182 1984 McNASvc (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 17:41:51.0182 1984 McNASvc - ok 17:41:51.0244 1984 McODS (dd01bf24dd6bf70a90549f9a7bb2d1eb) C:\Program Files\McAfee\VirusScan\mcods.exe 17:41:51.0244 1984 McODS - ok 17:41:51.0260 1984 McProxy (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 17:41:51.0260 1984 McProxy - ok 17:41:51.0291 1984 McShield (e998e3b12101288d716558466cbf6ae1) C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe 17:41:51.0291 1984 McShield - ok 17:41:51.0432 1984 Mcx2Svc (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll 17:41:51.0432 1984 Mcx2Svc - ok 17:41:51.0463 1984 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 17:41:51.0463 1984 megasas - ok 17:41:51.0478 1984 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 17:41:51.0478 1984 MegaSR - ok 17:41:51.0525 1984 mfeapfk (01884cb7655c8908b43ff5e364fe6fd2) C:\Windows\system32\drivers\mfeapfk.sys 17:41:51.0525 1984 mfeapfk - ok 17:41:51.0556 1984 mfeavfk (dab9a9cdfb04e4d68924492aa043019d) C:\Windows\system32\drivers\mfeavfk.sys 17:41:51.0556 1984 mfeavfk - ok 17:41:51.0572 1984 mfefire (b26782c3d6045b4464017d7926877560) C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe 17:41:51.0572 1984 mfefire - ok 17:41:51.0603 1984 mfefirek (ce9a3680675c0907ade16404ca967b49) C:\Windows\system32\drivers\mfefirek.sys 17:41:51.0619 1984 mfefirek - ok 17:41:51.0666 1984 mfehidk (60cf67458dd29cd17e77f2327b1a9a54) C:\Windows\system32\drivers\mfehidk.sys 17:41:51.0666 1984 mfehidk - ok 17:41:51.0697 1984 mfenlfk (a8129cfb919347f8533c934b365e9202) C:\Windows\system32\DRIVERS\mfenlfk.sys 17:41:51.0697 1984 mfenlfk - ok 17:41:51.0712 1984 mferkdet (5041fa2bd2b3a2693b015771bfbf6dca) C:\Windows\system32\drivers\mferkdet.sys 17:41:51.0712 1984 mferkdet - ok 17:41:51.0744 1984 mfevtp (723a5eb6cef7f408c3d0f15a82a6bff8) C:\Windows\system32\mfevtps.exe 17:41:51.0744 1984 mfevtp - ok 17:41:51.0775 1984 mfewfpk (919c56db14a0e1e2ab6da5d2821dc26e) C:\Windows\system32\drivers\mfewfpk.sys 17:41:51.0775 1984 mfewfpk - ok 17:41:51.0806 1984 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 17:41:51.0806 1984 MMCSS - ok 17:41:51.0822 1984 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 17:41:51.0822 1984 Modem - ok 17:41:51.0837 1984 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 17:41:51.0837 1984 monitor - ok 17:41:51.0837 1984 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 17:41:51.0837 1984 mouclass - ok 17:41:51.0853 1984 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 17:41:51.0853 1984 mouhid - ok 17:41:51.0868 1984 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys 17:41:51.0868 1984 mountmgr - ok 17:41:51.0962 1984 MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 17:41:51.0962 1984 MozillaMaintenance - ok 17:41:51.0962 1984 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys 17:41:51.0962 1984 mpio - ok 17:41:51.0978 1984 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 17:41:51.0978 1984 mpsdrv - ok 17:41:52.0024 1984 MpsSvc (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll 17:41:52.0024 1984 MpsSvc - ok 17:41:52.0040 1984 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys 17:41:52.0040 1984 MRxDAV - ok 17:41:52.0071 1984 mrxsmb (cfdcd8ca87c2a657debc150ac35b5e08) C:\Windows\system32\DRIVERS\mrxsmb.sys 17:41:52.0071 1984 mrxsmb - ok 17:41:52.0087 1984 mrxsmb10 (1bee517b220b7f024f411aec1571dd5a) C:\Windows\system32\DRIVERS\mrxsmb10.sys 17:41:52.0087 1984 mrxsmb10 - ok 17:41:52.0087 1984 mrxsmb20 (6b2d5fef385828b6e485c1c90afb8195) C:\Windows\system32\DRIVERS\mrxsmb20.sys 17:41:52.0102 1984 mrxsmb20 - ok 17:41:52.0102 1984 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys 17:41:52.0102 1984 msahci - ok 17:41:52.0102 1984 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys 17:41:52.0102 1984 msdsm - ok 17:41:52.0134 1984 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe 17:41:52.0149 1984 MSDTC - ok 17:41:52.0149 1984 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 17:41:52.0149 1984 Msfs - ok 17:41:52.0149 1984 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 17:41:52.0149 1984 mshidkmdf - ok 17:41:52.0165 1984 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys 17:41:52.0165 1984 msisadrv - ok 17:41:52.0180 1984 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll 17:41:52.0196 1984 MSiSCSI - ok 17:41:52.0196 1984 msiserver - ok 17:41:52.0212 1984 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 17:41:52.0212 1984 MSKSSRV - ok 17:41:52.0212 1984 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 17:41:52.0212 1984 MSPCLOCK - ok 17:41:52.0212 1984 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 17:41:52.0212 1984 MSPQM - ok 17:41:52.0227 1984 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys 17:41:52.0227 1984 MsRPC - ok 17:41:52.0227 1984 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys 17:41:52.0227 1984 mssmbios - ok 17:41:52.0243 1984 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 17:41:52.0258 1984 MSTEE - ok 17:41:52.0258 1984 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 17:41:52.0258 1984 MTConfig - ok 17:41:52.0258 1984 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 17:41:52.0258 1984 Mup - ok 17:41:52.0290 1984 napagent (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll 17:41:52.0305 1984 napagent - ok 17:41:52.0352 1984 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 17:41:52.0368 1984 NativeWifiP - ok 17:41:52.0414 1984 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys 17:41:52.0414 1984 NDIS - ok 17:41:52.0430 1984 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 17:41:52.0446 1984 NdisCap - ok 17:41:52.0446 1984 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 17:41:52.0446 1984 NdisTapi - ok 17:41:52.0446 1984 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys 17:41:52.0446 1984 Ndisuio - ok 17:41:52.0446 1984 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys 17:41:52.0461 1984 NdisWan - ok 17:41:52.0461 1984 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys 17:41:52.0461 1984 NDProxy - ok 17:41:52.0461 1984 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 17:41:52.0461 1984 NetBIOS - ok 17:41:52.0477 1984 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys 17:41:52.0477 1984 NetBT - ok 17:41:52.0492 1984 Netlogon (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 17:41:52.0492 1984 Netlogon - ok 17:41:52.0524 1984 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll 17:41:52.0524 1984 Netman - ok 17:41:52.0539 1984 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll 17:41:52.0555 1984 netprofm - ok 17:41:52.0633 1984 netr7364 (81b8d0c1ce44a7fdbd596b693783950c) C:\Windows\system32\DRIVERS\netr7364.sys 17:41:52.0633 1984 netr7364 - ok 17:41:52.0711 1984 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 17:41:52.0711 1984 NetTcpPortSharing - ok 17:41:52.0726 1984 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 17:41:52.0726 1984 nfrd960 - ok 17:41:52.0742 1984 NlaSvc (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll 17:41:52.0742 1984 NlaSvc - ok 17:41:52.0758 1984 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 17:41:52.0758 1984 Npfs - ok 17:41:52.0758 1984 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll 17:41:52.0758 1984 nsi - ok 17:41:52.0758 1984 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 17:41:52.0758 1984 nsiproxy - ok 17:41:52.0836 1984 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys 17:41:52.0851 1984 Ntfs - ok 17:41:52.0992 1984 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 17:41:52.0992 1984 Null - ok 17:41:53.0506 1984 nvlddmkm (51bd7ef17f0b525994ad5b3748c8288b) C:\Windows\system32\DRIVERS\nvlddmkm.sys 17:41:53.0600 1984 nvlddmkm - ok 17:41:53.0662 1984 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys 17:41:53.0662 1984 nvraid - ok 17:41:53.0678 1984 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys 17:41:53.0678 1984 nvstor - ok 17:41:53.0740 1984 nvsvc (fce8537bf5d504680212d536a3bfe5e2) C:\Windows\system32\nvvsvc.exe 17:41:53.0740 1984 nvsvc - ok 17:41:53.0756 1984 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys 17:41:53.0756 1984 nv_agp - ok 17:41:53.0756 1984 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys 17:41:53.0756 1984 ohci1394 - ok 17:41:53.0803 1984 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 17:41:53.0803 1984 p2pimsvc - ok 17:41:53.0834 1984 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll 17:41:53.0850 1984 p2psvc - ok 17:41:53.0850 1984 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 17:41:53.0850 1984 Parport - ok 17:41:53.0865 1984 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys 17:41:53.0865 1984 partmgr - ok 17:41:53.0896 1984 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll 17:41:53.0896 1984 PcaSvc - ok 17:41:53.0896 1984 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys 17:41:53.0912 1984 pci - ok 17:41:53.0912 1984 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys 17:41:53.0912 1984 pciide - ok 17:41:53.0928 1984 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 17:41:53.0928 1984 pcmcia - ok 17:41:53.0943 1984 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 17:41:53.0943 1984 pcw - ok 17:41:53.0974 1984 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 17:41:53.0990 1984 PEAUTH - ok 17:41:54.0037 1984 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe 17:41:54.0052 1984 PerfHost - ok 17:41:54.0146 1984 pla (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll 17:41:54.0162 1984 pla - ok 17:41:54.0208 1984 PlugPlay (23157d583244400e1d7fbaee2e4b31b7) C:\Windows\system32\umpnpmgr.dll 17:41:54.0224 1984 PlugPlay - ok 17:41:54.0240 1984 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll 17:41:54.0240 1984 PNRPAutoReg - ok 17:41:54.0271 1984 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 17:41:54.0271 1984 PNRPsvc - ok 17:41:54.0302 1984 PolicyAgent (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll 17:41:54.0318 1984 PolicyAgent - ok 17:41:54.0318 1984 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll 17:41:54.0318 1984 Power - ok 17:41:54.0380 1984 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys 17:41:54.0380 1984 PptpMiniport - ok 17:41:54.0396 1984 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 17:41:54.0396 1984 Processor - ok 17:41:54.0411 1984 ProfSvc (f381975e1f4346de875cb07339ce8d3a) C:\Windows\system32\profsvc.dll 17:41:54.0427 1984 ProfSvc - ok 17:41:54.0442 1984 ProtectedStorage (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 17:41:54.0442 1984 ProtectedStorage - ok 17:41:54.0474 1984 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys 17:41:54.0474 1984 Psched - ok 17:41:54.0489 1984 PxHlpa64 (4712cc14e720ecccc0aa16949d18aaf1) C:\Windows\system32\Drivers\PxHlpa64.sys 17:41:54.0489 1984 PxHlpa64 - ok 17:41:54.0583 1984 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 17:41:54.0598 1984 ql2300 - ok 17:41:54.0692 1984 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 17:41:54.0708 1984 ql40xx - ok 17:41:54.0739 1984 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll 17:41:54.0739 1984 QWAVE - ok 17:41:54.0754 1984 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 17:41:54.0754 1984 QWAVEdrv - ok 17:41:54.0754 1984 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 17:41:54.0754 1984 RasAcd - ok 17:41:54.0786 1984 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 17:41:54.0786 1984 RasAgileVpn - ok 17:41:54.0801 1984 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll 17:41:54.0801 1984 RasAuto - ok 17:41:54.0817 1984 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys 17:41:54.0817 1984 Rasl2tp - ok 17:41:54.0848 1984 RasMan (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll 17:41:54.0848 1984 RasMan - ok 17:41:54.0848 1984 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 17:41:54.0848 1984 RasPppoe - ok 17:41:54.0864 1984 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 17:41:54.0864 1984 RasSstp - ok 17:41:54.0879 1984 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys 17:41:54.0895 1984 rdbss - ok 17:41:54.0895 1984 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 17:41:54.0895 1984 rdpbus - ok 17:41:54.0895 1984 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 17:41:54.0895 1984 RDPCDD - ok 17:41:54.0926 1984 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 17:41:54.0926 1984 RDPENCDD - ok 17:41:54.0942 1984 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 17:41:54.0942 1984 RDPREFMP - ok 17:41:54.0973 1984 RDPWD (074ac702d8b8b660b0e1371555995386) C:\Windows\system32\drivers\RDPWD.sys 17:41:54.0973 1984 RDPWD - ok 17:41:54.0988 1984 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys 17:41:54.0988 1984 rdyboost - ok 17:41:55.0020 1984 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll 17:41:55.0020 1984 RemoteAccess - ok 17:41:55.0051 1984 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll 17:41:55.0051 1984 RemoteRegistry - ok 17:41:55.0222 1984 RoxMediaDB10 (05fc44d32a144925eae45570029fd6e1) c:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe 17:41:55.0222 1984 RoxMediaDB10 - ok 17:41:55.0238 1984 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll 17:41:55.0238 1984 RpcEptMapper - ok 17:41:55.0254 1984 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe 17:41:55.0269 1984 RpcLocator - ok 17:41:55.0300 1984 RpcSs (7266972e86890e2b30c0c322e906b027) C:\Windows\System32\rpcss.dll 17:41:55.0300 1984 RpcSs - ok 17:41:55.0347 1984 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 17:41:55.0347 1984 rspndr - ok 17:41:55.0347 1984 RxFilter - ok 17:41:55.0363 1984 SamSs (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 17:41:55.0363 1984 SamSs - ok 17:41:55.0394 1984 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys 17:41:55.0394 1984 sbp2port - ok 17:41:55.0410 1984 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll 17:41:55.0425 1984 SCardSvr - ok 17:41:55.0441 1984 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys 17:41:55.0441 1984 scfilter - ok 17:41:55.0488 1984 Schedule (ec56b171f85c7e855e7b0588ac503eea) C:\Windows\system32\schedsvc.dll 17:41:55.0488 1984 Schedule - ok 17:41:55.0519 1984 SCPolicySvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 17:41:55.0519 1984 SCPolicySvc - ok 17:41:55.0534 1984 SDRSVC (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll 17:41:55.0534 1984 SDRSVC - ok 17:41:55.0628 1984 SeaPort (d358e077a0a05d9b12da22d137ee8464) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 17:41:55.0628 1984 SeaPort - ok 17:41:55.0644 1984 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 17:41:55.0644 1984 secdrv - ok 17:41:55.0644 1984 seclogon (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll 17:41:55.0644 1984 seclogon - ok 17:41:55.0659 1984 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\system32\sens.dll 17:41:55.0659 1984 SENS - ok 17:41:55.0690 1984 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll 17:41:55.0690 1984 SensrSvc - ok 17:41:55.0706 1984 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 17:41:55.0706 1984 Serenum - ok 17:41:55.0706 1984 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 17:41:55.0706 1984 Serial - ok 17:41:55.0706 1984 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 17:41:55.0706 1984 sermouse - ok 17:41:55.0722 1984 SessionEnv (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll 17:41:55.0722 1984 SessionEnv - ok 17:41:55.0753 1984 SessionLauncher - ok 17:41:55.0768 1984 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys 17:41:55.0768 1984 sffdisk - ok 17:41:55.0768 1984 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys 17:41:55.0768 1984 sffp_mmc - ok 17:41:55.0768 1984 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys 17:41:55.0768 1984 sffp_sd - ok 17:41:55.0768 1984 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 17:41:55.0768 1984 sfloppy - ok 17:41:55.0831 1984 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll 17:41:55.0846 1984 SharedAccess - ok 17:41:55.0878 1984 ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll 17:41:55.0878 1984 ShellHWDetection - ok 17:41:55.0878 1984 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 17:41:55.0878 1984 SiSRaid2 - ok 17:41:55.0878 1984 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 17:41:55.0878 1984 SiSRaid4 - ok 17:41:55.0909 1984 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 17:41:55.0909 1984 Smb - ok 17:41:55.0909 1984 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe 17:41:55.0924 1984 SNMPTRAP - ok 17:41:55.0940 1984 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 17:41:55.0940 1984 spldr - ok 17:41:55.0956 1984 Spooler (89e8550c5862999fcf482ea562b0e98e) C:\Windows\System32\spoolsv.exe 17:41:55.0956 1984 Spooler - ok 17:41:56.0112 1984 sppsvc (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe 17:41:56.0143 1984 sppsvc - ok 17:41:56.0268 1984 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll 17:41:56.0283 1984 sppuinotify - ok 17:41:56.0377 1984 sprtsvc_DellComms (d630b6f2e8379b6f10dc16e82a426552) C:\Program Files (x86)\Dell\DellComms\bin\sprtsvc.exe 17:41:56.0377 1984 sprtsvc_DellComms - ok 17:41:56.0408 1984 srv (ec8f67289105bf270498095f14963464) C:\Windows\system32\DRIVERS\srv.sys 17:41:56.0408 1984 srv - ok 17:41:56.0439 1984 srv2 (f773d2ed090b7baa1c1a034f3ca476c8) C:\Windows\system32\DRIVERS\srv2.sys 17:41:56.0439 1984 srv2 - ok 17:41:56.0439 1984 srvnet (26e84d3649019c3244622e654dfcd75b) C:\Windows\system32\DRIVERS\srvnet.sys 17:41:56.0455 1984 srvnet - ok 17:41:56.0470 1984 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll 17:41:56.0470 1984 SSDPSRV - ok 17:41:56.0486 1984 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll 17:41:56.0486 1984 SstpSvc - ok 17:41:56.0502 1984 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 17:41:56.0502 1984 stexstor - ok 17:41:56.0549 1984 stisvc (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll 17:41:56.0549 1984 stisvc - ok 17:41:56.0642 1984 stllssvr (ff5eb78af7dfb68c2fb363537aaf753e) c:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe 17:41:56.0642 1984 stllssvr - ok 17:41:56.0658 1984 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys 17:41:56.0658 1984 swenum - ok 17:41:56.0673 1984 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll 17:41:56.0689 1984 swprv - ok 17:41:56.0783 1984 SysMain (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll 17:41:56.0798 1984 SysMain - ok 17:41:56.0923 1984 TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll 17:41:56.0923 1984 TabletInputService - ok 17:41:56.0954 1984 TapiSrv (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll 17:41:56.0954 1984 TapiSrv - ok 17:41:56.0970 1984 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll 17:41:56.0970 1984 TBS - ok 17:41:57.0063 1984 Tcpip (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\drivers\tcpip.sys 17:41:57.0079 1984 Tcpip - ok 17:41:57.0173 1984 TCPIP6 (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\DRIVERS\tcpip.sys 17:41:57.0188 1984 TCPIP6 - ok 17:41:57.0204 1984 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys 17:41:57.0219 1984 tcpipreg - ok 17:41:57.0219 1984 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 17:41:57.0219 1984 TDPIPE - ok 17:41:57.0251 1984 TDTCP (7518f7bcfd4b308abc9192bacaf6c970) C:\Windows\system32\drivers\tdtcp.sys 17:41:57.0251 1984 TDTCP - ok 17:41:57.0282 1984 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys 17:41:57.0282 1984 tdx - ok 17:41:57.0282 1984 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys 17:41:57.0282 1984 TermDD - ok 17:41:57.0329 1984 TermService (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll 17:41:57.0329 1984 TermService - ok 17:41:57.0344 1984 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll 17:41:57.0344 1984 Themes - ok 17:41:57.0375 1984 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 17:41:57.0375 1984 THREADORDER - ok 17:41:57.0391 1984 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll 17:41:57.0407 1984 TrkWks - ok 17:41:57.0453 1984 TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe 17:41:57.0453 1984 TrustedInstaller - ok 17:41:57.0469 1984 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys 17:41:57.0469 1984 tssecsrv - ok 17:41:57.0485 1984 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys 17:41:57.0485 1984 tunnel - ok 17:41:57.0500 1984 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 17:41:57.0500 1984 uagp35 - ok 17:41:57.0516 1984 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys 17:41:57.0531 1984 udfs - ok 17:41:57.0531 1984 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe 17:41:57.0531 1984 UI0Detect - ok 17:41:57.0547 1984 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys 17:41:57.0547 1984 uliagpkx - ok 17:41:57.0563 1984 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys 17:41:57.0563 1984 umbus - ok 17:41:57.0563 1984 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 17:41:57.0563 1984 UmPass - ok 17:41:57.0594 1984 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll 17:41:57.0594 1984 upnphost - ok 17:41:57.0594 1984 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys 17:41:57.0609 1984 usbccgp - ok 17:41:57.0609 1984 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys 17:41:57.0609 1984 usbcir - ok 17:41:57.0609 1984 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys 17:41:57.0609 1984 usbehci - ok 17:41:57.0625 1984 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys 17:41:57.0641 1984 usbhub - ok 17:41:57.0641 1984 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys 17:41:57.0641 1984 usbohci - ok 17:41:57.0672 1984 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 17:41:57.0672 1984 usbprint - ok 17:41:57.0672 1984 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS 17:41:57.0672 1984 USBSTOR - ok 17:41:57.0687 1984 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys 17:41:57.0687 1984 usbuhci - ok 17:41:57.0703 1984 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll 17:41:57.0703 1984 UxSms - ok 17:41:57.0719 1984 VaultSvc (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 17:41:57.0719 1984 VaultSvc - ok 17:41:57.0734 1984 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys 17:41:57.0734 1984 vdrvroot - ok 17:41:57.0765 1984 vds (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe 17:41:57.0765 1984 vds - ok 17:41:57.0765 1984 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 17:41:57.0765 1984 vga - ok 17:41:57.0781 1984 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 17:41:57.0781 1984 VgaSave - ok 17:41:57.0781 1984 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys 17:41:57.0797 1984 vhdmp - ok 17:41:57.0797 1984 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys 17:41:57.0797 1984 viaide - ok 17:41:57.0797 1984 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys 17:41:57.0797 1984 volmgr - ok 17:41:57.0812 1984 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys 17:41:57.0828 1984 volmgrx - ok 17:41:57.0843 1984 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys 17:41:57.0843 1984 volsnap - ok 17:41:57.0843 1984 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 17:41:57.0859 1984 vsmraid - ok 17:41:57.0937 1984 VSS (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe 17:41:57.0953 1984 VSS - ok 17:41:58.0077 1984 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 17:41:58.0077 1984 vwifibus - ok 17:41:58.0093 1984 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 17:41:58.0093 1984 vwififlt - ok 17:41:58.0124 1984 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll 17:41:58.0124 1984 W32Time - ok 17:41:58.0124 1984 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 17:41:58.0124 1984 WacomPen - ok 17:41:58.0155 1984 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 17:41:58.0155 1984 WANARP - ok 17:41:58.0155 1984 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 17:41:58.0155 1984 Wanarpv6 - ok 17:41:58.0218 1984 wbengine (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe 17:41:58.0233 1984 wbengine - ok 17:41:58.0280 1984 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll 17:41:58.0280 1984 WbioSrvc - ok 17:41:58.0296 1984 wcncsvc (8321c2ca3b62b61b293cda3451984468) C:\Windows\System32\wcncsvc.dll 17:41:58.0311 1984 wcncsvc - ok 17:41:58.0311 1984 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll 17:41:58.0311 1984 WcsPlugInService - ok 17:41:58.0311 1984 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 17:41:58.0311 1984 Wd - ok 17:41:58.0343 1984 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 17:41:58.0358 1984 Wdf01000 - ok 17:41:58.0374 1984 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 17:41:58.0374 1984 WdiServiceHost - ok 17:41:58.0374 1984 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 17:41:58.0374 1984 WdiSystemHost - ok 17:41:58.0389 1984 WebClient (8a438cbb8c032a0c798b0c642ffbe572) C:\Windows\System32\webclnt.dll 17:41:58.0389 1984 WebClient - ok 17:41:58.0405 1984 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll 17:41:58.0421 1984 Wecsvc - ok 17:41:58.0421 1984 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll 17:41:58.0421 1984 wercplsupport - ok 17:41:58.0452 1984 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll 17:41:58.0452 1984 WerSvc - ok 17:41:58.0467 1984 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 17:41:58.0467 1984 WfpLwf - ok 17:41:58.0467 1984 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 17:41:58.0467 1984 WIMMount - ok 17:41:58.0514 1984 WinDefend - ok 17:41:58.0514 1984 WinHttpAutoProxySvc - ok 17:41:58.0577 1984 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll 17:41:58.0577 1984 Winmgmt - ok 17:41:58.0686 1984 WinRM (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll 17:41:58.0701 1984 WinRM - ok 17:41:58.0857 1984 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll 17:41:58.0857 1984 Wlansvc - ok 17:41:58.0920 1984 wltrysvc (13b0a570e1ae451c92da550085d72cf3) C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE 17:41:58.0920 1984 wltrysvc - ok 17:41:58.0935 1984 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys 17:41:58.0935 1984 WmiAcpi - ok 17:41:58.0951 1984 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe 17:41:58.0967 1984 wmiApSrv - ok 17:41:58.0982 1984 WMPNetworkSvc - ok 17:41:58.0998 1984 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll 17:41:58.0998 1984 WPCSvc - ok 17:41:59.0013 1984 WPDBusEnum (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll 17:41:59.0013 1984 WPDBusEnum - ok 17:41:59.0013 1984 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 17:41:59.0029 1984 ws2ifsl - ok 17:41:59.0029 1984 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\system32\wscsvc.dll 17:41:59.0029 1984 wscsvc - ok 17:41:59.0045 1984 WSearch - ok 17:41:59.0154 1984 wuauserv (38340204a2d0228f1e87740fc5e554a7) C:\Windows\system32\wuaueng.dll 17:41:59.0169 1984 wuauserv - ok 17:41:59.0279 1984 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys 17:41:59.0279 1984 WudfPf - ok 17:41:59.0294 1984 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys 17:41:59.0294 1984 WUDFRd - ok 17:41:59.0310 1984 wudfsvc (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll 17:41:59.0310 1984 wudfsvc - ok 17:41:59.0341 1984 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll 17:41:59.0341 1984 WwanSvc - ok 17:41:59.0372 1984 MBR (0x1B8) (cdb4de4bbd714f152979da2dcbef57eb) \Device\Harddisk0\DR0 17:41:59.0419 1984 \Device\Harddisk0\DR0 - ok 17:41:59.0435 1984 Boot (0x1200) (a5c682221bb3be9ca89446427c662f59) \Device\Harddisk0\DR0\Partition0 17:41:59.0435 1984 \Device\Harddisk0\DR0\Partition0 - ok 17:41:59.0435 1984 Boot (0x1200) (2173d9f00b8f5ffc95b7fde2a9e0227f) \Device\Harddisk0\DR0\Partition1 17:41:59.0435 1984 \Device\Harddisk0\DR0\Partition1 - ok 17:41:59.0435 1984 ============================================================ 17:41:59.0435 1984 Scan finished 17:41:59.0435 1984 ============================================================ 17:41:59.0450 1368 Detected object count: 0 17:41:59.0450 1368 Actual detected object count: 0 17:42:10.0277 2244 ============================================================ 17:42:10.0277 2244 Scan started 17:42:10.0277 2244 Mode: Manual; SigCheck; TDLFS; 17:42:10.0277 2244 ============================================================ 17:42:10.0386 2244 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys 17:42:10.0495 2244 1394ohci - ok 17:42:10.0511 2244 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys 17:42:10.0526 2244 ACPI - ok 17:42:10.0542 2244 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys 17:42:10.0589 2244 AcpiPmi - ok 17:42:10.0620 2244 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 17:42:10.0635 2244 adp94xx - ok 17:42:10.0651 2244 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 17:42:10.0651 2244 adpahci - ok 17:42:10.0667 2244 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 17:42:10.0667 2244 adpu320 - ok 17:42:10.0698 2244 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll 17:42:10.0807 2244 AeLookupSvc - ok 17:42:10.0869 2244 AERTFilters (3ac22a3dfa8a050e35f0e3cd99d0cdf2) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe 17:42:10.0916 2244 AERTFilters - ok 17:42:10.0932 2244 AFD (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys 17:42:10.0979 2244 AFD - ok 17:42:10.0994 2244 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys 17:42:10.0994 2244 agp440 - ok 17:42:11.0010 2244 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe 17:42:11.0041 2244 ALG - ok 17:42:11.0041 2244 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys 17:42:11.0041 2244 aliide - ok 17:42:11.0041 2244 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys 17:42:11.0057 2244 amdide - ok 17:42:11.0057 2244 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 17:42:11.0072 2244 AmdK8 - ok 17:42:11.0088 2244 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 17:42:11.0088 2244 AmdPPM - ok 17:42:11.0103 2244 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys 17:42:11.0103 2244 amdsata - ok 17:42:11.0119 2244 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 17:42:11.0135 2244 amdsbs - ok 17:42:11.0135 2244 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys 17:42:11.0150 2244 amdxata - ok 17:42:11.0166 2244 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys 17:42:11.0213 2244 AppID - ok 17:42:11.0244 2244 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll 17:42:11.0275 2244 AppIDSvc - ok 17:42:11.0291 2244 Appinfo (d065be66822847b7f127d1f90158376e) C:\Windows\System32\appinfo.dll 17:42:11.0306 2244 Appinfo - ok 17:42:11.0322 2244 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 17:42:11.0322 2244 arc - ok 17:42:11.0322 2244 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 17:42:11.0337 2244 arcsas - ok 17:42:11.0353 2244 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 17:42:11.0384 2244 AsyncMac - ok 17:42:11.0384 2244 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys 17:42:11.0384 2244 atapi - ok 17:42:11.0431 2244 AudioEndpointBuilder (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 17:42:11.0462 2244 AudioEndpointBuilder - ok 17:42:11.0462 2244 AudioSrv (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 17:42:11.0493 2244 AudioSrv - ok 17:42:11.0509 2244 AxInstSV (b20b5fa5ca050e9926e4d1db81501b32) C:\Windows\System32\AxInstSV.dll 17:42:11.0525 2244 AxInstSV - ok 17:42:11.0571 2244 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 17:42:11.0587 2244 b06bdrv - ok 17:42:11.0603 2244 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 17:42:11.0618 2244 b57nd60a - ok 17:42:11.0634 2244 BCM42RLY (e001dd475a7c27ebe5a0db45c11bad71) C:\Windows\system32\drivers\BCM42RLY.sys 17:42:11.0681 2244 BCM42RLY - ok 17:42:11.0821 2244 BCM43XX (37394d3553e220fb732c21e217e1bd8b) C:\Windows\system32\DRIVERS\bcmwl664.sys 17:42:11.0852 2244 BCM43XX - ok 17:42:11.0993 2244 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll 17:42:12.0024 2244 BDESVC - ok 17:42:12.0055 2244 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 17:42:12.0086 2244 Beep - ok 17:42:12.0133 2244 BFE (4992c609a6315671463e30f6512bc022) C:\Windows\System32\bfe.dll 17:42:12.0180 2244 BFE - ok 17:42:12.0242 2244 BITS (7f0c323fe3da28aa4aa1bda3f575707f) C:\Windows\system32\qmgr.dll 17:42:12.0289 2244 BITS - ok 17:42:12.0305 2244 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 17:42:12.0320 2244 blbdrive - ok 17:42:12.0351 2244 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys 17:42:12.0367 2244 bowser - ok 17:42:12.0383 2244 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 17:42:12.0383 2244 BrFiltLo - ok 17:42:12.0414 2244 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 17:42:12.0414 2244 BrFiltUp - ok 17:42:12.0414 2244 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys 17:42:12.0445 2244 BridgeMP - ok 17:42:12.0461 2244 Browser (94fbc06f294d58d02361918418f996e3) C:\Windows\System32\browser.dll 17:42:12.0492 2244 Browser - ok 17:42:12.0507 2244 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 17:42:12.0523 2244 Brserid - ok 17:42:12.0539 2244 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 17:42:12.0554 2244 BrSerWdm - ok 17:42:12.0554 2244 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 17:42:12.0570 2244 BrUsbMdm - ok 17:42:12.0585 2244 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 17:42:12.0601 2244 BrUsbSer - ok 17:42:12.0601 2244 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 17:42:12.0617 2244 BTHMODEM - ok 17:42:12.0632 2244 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll 17:42:12.0663 2244 bthserv - ok 17:42:12.0663 2244 catchme - ok 17:42:12.0663 2244 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 17:42:12.0695 2244 cdfs - ok 17:42:12.0695 2244 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys 17:42:12.0710 2244 cdrom - ok 17:42:12.0741 2244 CertPropSvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 17:42:12.0788 2244 CertPropSvc - ok 17:42:12.0804 2244 cfwids (274ce03459896006f7a5069266e0469e) C:\Windows\system32\drivers\cfwids.sys 17:42:12.0819 2244 cfwids - ok 17:42:12.0819 2244 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 17:42:12.0835 2244 circlass - ok 17:42:12.0866 2244 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 17:42:12.0882 2244 CLFS - ok 17:42:12.0929 2244 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 17:42:12.0929 2244 clr_optimization_v2.0.50727_32 - ok 17:42:12.0960 2244 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 17:42:12.0960 2244 clr_optimization_v2.0.50727_64 - ok 17:42:12.0975 2244 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 17:42:12.0975 2244 CmBatt - ok 17:42:12.0975 2244 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys 17:42:12.0991 2244 cmdide - ok 17:42:13.0007 2244 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys 17:42:13.0038 2244 CNG - ok 17:42:13.0038 2244 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 17:42:13.0038 2244 Compbatt - ok 17:42:13.0038 2244 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys 17:42:13.0069 2244 CompositeBus - ok 17:42:13.0069 2244 COMSysApp - ok 17:42:13.0069 2244 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 17:42:13.0069 2244 crcdisk - ok 17:42:13.0116 2244 CryptSvc (8c57411b66282c01533cb776f98ad384) C:\Windows\system32\cryptsvc.dll 17:42:13.0147 2244 CryptSvc - ok 17:42:13.0209 2244 DcomLaunch (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll 17:42:13.0241 2244 DcomLaunch - ok 17:42:13.0272 2244 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll 17:42:13.0303 2244 defragsvc - ok 17:42:13.0303 2244 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys 17:42:13.0334 2244 DfsC - ok 17:42:13.0365 2244 Dhcp (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll 17:42:13.0397 2244 Dhcp - ok 17:42:13.0412 2244 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 17:42:13.0443 2244 discache - ok 17:42:13.0443 2244 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 17:42:13.0443 2244 Disk - ok 17:42:13.0475 2244 Dnscache (676108c4e3aa6f6b34633748bd0bebd9) C:\Windows\System32\dnsrslvr.dll 17:42:13.0490 2244 Dnscache - ok 17:42:13.0568 2244 DockLoginService (0840abbbdf438691ee65a20040635cbe) C:\Program Files\Dell\DellDock\DockLogin.exe 17:42:13.0584 2244 DockLoginService ( UnsignedFile.Multi.Generic ) - warning 17:42:13.0584 2244 DockLoginService - detected UnsignedFile.Multi.Generic (1) 17:42:13.0615 2244 dot3svc (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll 17:42:13.0662 2244 dot3svc - ok 17:42:13.0662 2244 DPS (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll 17:42:13.0709 2244 DPS - ok 17:42:13.0724 2244 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 17:42:13.0740 2244 drmkaud - ok 17:42:13.0802 2244 DXGKrnl (7cb7d2b73813ce05c7bc0f5f95d27cec) C:\Windows\System32\drivers\dxgkrnl.sys 17:42:13.0849 2244 DXGKrnl - ok 17:42:13.0849 2244 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll 17:42:13.0880 2244 EapHost - ok 17:42:14.0036 2244 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 17:42:14.0067 2244 ebdrv - ok 17:42:14.0208 2244 EFS (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\System32\lsass.exe 17:42:14.0223 2244 EFS - ok 17:42:14.0317 2244 ehRecvr (b91d81b3b54a54ccafc03733dbc2e29e) C:\Windows\ehome\ehRecvr.exe 17:42:14.0348 2244 ehRecvr - ok 17:42:14.0364 2244 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe 17:42:14.0379 2244 ehSched - ok 17:42:14.0411 2244 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 17:42:14.0426 2244 elxstor - ok 17:42:14.0426 2244 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys 17:42:14.0442 2244 ErrDev - ok 17:42:14.0489 2244 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll 17:42:14.0520 2244 EventSystem - ok 17:42:14.0551 2244 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 17:42:14.0567 2244 exfat - ok 17:42:14.0598 2244 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 17:42:14.0613 2244 fastfat - ok 17:42:14.0660 2244 Fax (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe 17:42:14.0691 2244 Fax - ok 17:42:14.0691 2244 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 17:42:14.0707 2244 fdc - ok 17:42:14.0723 2244 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll 17:42:14.0754 2244 fdPHost - ok 17:42:14.0754 2244 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll 17:42:14.0785 2244 FDResPub - ok 17:42:14.0785 2244 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 17:42:14.0785 2244 FileInfo - ok 17:42:14.0785 2244 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 17:42:14.0816 2244 Filetrace - ok 17:42:14.0816 2244 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 17:42:14.0832 2244 flpydisk - ok 17:42:14.0847 2244 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys 17:42:14.0863 2244 FltMgr - ok 17:42:14.0925 2244 FontCache (8ac4cb4ea61e41009fae9ae7b2b5da3a) C:\Windows\system32\FntCache.dll 17:42:14.0957 2244 FontCache - ok 17:42:15.0035 2244 FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 17:42:15.0050 2244 FontCache3.0.0.0 - ok 17:42:15.0066 2244 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 17:42:15.0081 2244 FsDepends - ok 17:42:15.0097 2244 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys 17:42:15.0097 2244 Fs_Rec - ok 17:42:15.0113 2244 fvevol (b8b2a6e1558f8f5de5ce431c5b2c7b09) C:\Windows\system32\DRIVERS\fvevol.sys 17:42:15.0113 2244 fvevol - ok 17:42:15.0128 2244 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 17:42:15.0144 2244 gagp30kx - ok 17:42:15.0191 2244 gpsvc (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll 17:42:15.0206 2244 gpsvc - ok 17:42:15.0222 2244 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 17:42:15.0237 2244 hcw85cir - ok 17:42:15.0253 2244 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys 17:42:15.0269 2244 HDAudBus - ok 17:42:15.0284 2244 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 17:42:15.0300 2244 HidBatt - ok 17:42:15.0300 2244 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 17:42:15.0331 2244 HidBth - ok 17:42:15.0347 2244 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 17:42:15.0347 2244 HidIr - ok 17:42:15.0362 2244 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\System32\hidserv.dll 17:42:15.0393 2244 hidserv - ok 17:42:15.0409 2244 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys 17:42:15.0409 2244 HidUsb - ok 17:42:15.0425 2244 hkmsvc (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll 17:42:15.0456 2244 hkmsvc - ok 17:42:15.0487 2244 HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll 17:42:15.0487 2244 HomeGroupListener - ok 17:42:15.0518 2244 HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll 17:42:15.0534 2244 HomeGroupProvider - ok 17:42:15.0549 2244 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys 17:42:15.0549 2244 HpSAMD - ok 17:42:15.0581 2244 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys 17:42:15.0612 2244 HTTP - ok 17:42:15.0612 2244 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys 17:42:15.0627 2244 hwpolicy - ok 17:42:15.0627 2244 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 17:42:15.0643 2244 i8042prt - ok 17:42:15.0690 2244 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys 17:42:15.0690 2244 iaStor - ok 17:42:15.0737 2244 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys 17:42:15.0737 2244 iaStorV - ok 17:42:15.0846 2244 idsvc (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 17:42:15.0861 2244 idsvc - ok 17:42:15.0861 2244 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 17:42:15.0861 2244 iirsp - ok 17:42:15.0924 2244 IKEEXT (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll 17:42:15.0971 2244 IKEEXT - ok 17:42:16.0064 2244 IntcAzAudAddService (d42d651676883181400e22957a7e0b1e) C:\Windows\system32\drivers\RTKVHD64.sys 17:42:16.0095 2244 IntcAzAudAddService - ok 17:42:16.0220 2244 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys 17:42:16.0220 2244 intelide - ok 17:42:16.0236 2244 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 17:42:16.0251 2244 intelppm - ok 17:42:16.0267 2244 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll 17:42:16.0298 2244 IPBusEnum - ok 17:42:16.0298 2244 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys 17:42:16.0329 2244 IpFilterDriver - ok 17:42:16.0376 2244 iphlpsvc (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll 17:42:16.0423 2244 iphlpsvc - ok 17:42:16.0423 2244 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys 17:42:16.0439 2244 IPMIDRV - ok 17:42:16.0439 2244 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 17:42:16.0470 2244 IPNAT - ok 17:42:16.0470 2244 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 17:42:16.0485 2244 IRENUM - ok 17:42:16.0485 2244 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys 17:42:16.0485 2244 isapnp - ok 17:42:16.0517 2244 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys 17:42:16.0517 2244 iScsiPrt - ok 17:42:16.0563 2244 k57nd60a (249ee2d26cb1530f3bede0ac8b9e3099) C:\Windows\system32\DRIVERS\k57nd60a.sys 17:42:16.0579 2244 k57nd60a - ok 17:42:16.0595 2244 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys 17:42:16.0595 2244 kbdclass - ok 17:42:16.0595 2244 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys 17:42:16.0626 2244 kbdhid - ok 17:42:16.0626 2244 KeyIso (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 17:42:16.0641 2244 KeyIso - ok 17:42:16.0657 2244 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys 17:42:16.0657 2244 KSecDD - ok 17:42:16.0673 2244 KSecPkg (bbe1bf6d9b661c354d4857d5fadb943b) C:\Windows\system32\Drivers\ksecpkg.sys 17:42:16.0673 2244 KSecPkg - ok 17:42:16.0673 2244 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 17:42:16.0704 2244 ksthunk - ok 17:42:16.0735 2244 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll 17:42:16.0782 2244 KtmRm - ok 17:42:16.0813 2244 LanmanServer (c926920b8978de6acfe9e15c709e9b57) C:\Windows\System32\srvsvc.dll 17:42:16.0860 2244 LanmanServer - ok 17:42:16.0891 2244 LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll 17:42:16.0922 2244 LanmanWorkstation - ok 17:42:16.0922 2244 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 17:42:16.0938 2244 lltdio - ok 17:42:16.0985 2244 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll 17:42:17.0016 2244 lltdsvc - ok 17:42:17.0031 2244 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll 17:42:17.0063 2244 lmhosts - ok 17:42:17.0078 2244 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 17:42:17.0078 2244 LSI_FC - ok 17:42:17.0094 2244 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 17:42:17.0094 2244 LSI_SAS - ok 17:42:17.0094 2244 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 17:42:17.0109 2244 LSI_SAS2 - ok 17:42:17.0109 2244 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 17:42:17.0125 2244 LSI_SCSI - ok 17:42:17.0125 2244 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 17:42:17.0156 2244 luafv - ok 17:42:17.0187 2244 MBAMProtector (dbc08862a71459e74f7538b432c114cc) C:\Windows\system32\drivers\mbam.sys 17:42:17.0219 2244 MBAMProtector - ok 17:42:17.0281 2244 MBAMService (ba400ed640bca1eae5c727ae17c10207) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 17:42:17.0297 2244 MBAMService - ok 17:42:17.0375 2244 McAfee SiteAdvisor Service (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 17:42:17.0390 2244 McAfee SiteAdvisor Service - ok 17:42:17.0406 2244 McMPFSvc (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 17:42:17.0406 2244 McMPFSvc - ok 17:42:17.0406 2244 mcmscsvc (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 17:42:17.0406 2244 mcmscsvc - ok 17:42:17.0421 2244 McNaiAnn (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 17:42:17.0421 2244 McNaiAnn - ok 17:42:17.0421 2244 McNASvc (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 17:42:17.0421 2244 McNASvc - ok 17:42:17.0468 2244 McODS (dd01bf24dd6bf70a90549f9a7bb2d1eb) C:\Program Files\McAfee\VirusScan\mcods.exe 17:42:17.0484 2244 McODS - ok 17:42:17.0484 2244 McProxy (acb01bf1a905356ab7f978c7fe852209) C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe 17:42:17.0484 2244 McProxy - ok 17:42:17.0531 2244 McShield (e998e3b12101288d716558466cbf6ae1) C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe 17:42:17.0531 2244 McShield - ok 17:42:17.0671 2244 Mcx2Svc (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll 17:42:17.0687 2244 Mcx2Svc - ok 17:42:17.0718 2244 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 17:42:17.0733 2244 megasas - ok 17:42:17.0733 2244 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 17:42:17.0749 2244 MegaSR - ok 17:42:17.0796 2244 mfeapfk (01884cb7655c8908b43ff5e364fe6fd2) C:\Windows\system32\drivers\mfeapfk.sys 17:42:17.0796 2244 mfeapfk - ok 17:42:17.0811 2244 mfeavfk (dab9a9cdfb04e4d68924492aa043019d) C:\Windows\system32\drivers\mfeavfk.sys 17:42:17.0827 2244 mfeavfk - ok 17:42:17.0858 2244 mfefire (b26782c3d6045b4464017d7926877560) C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe 17:42:17.0858 2244 mfefire - ok 17:42:17.0905 2244 mfefirek (ce9a3680675c0907ade16404ca967b49) C:\Windows\system32\drivers\mfefirek.sys 17:42:17.0905 2244 mfefirek - ok 17:42:17.0952 2244 mfehidk (60cf67458dd29cd17e77f2327b1a9a54) C:\Windows\system32\drivers\mfehidk.sys 17:42:17.0952 2244 mfehidk - ok 17:42:17.0983 2244 mfenlfk (a8129cfb919347f8533c934b365e9202) C:\Windows\system32\DRIVERS\mfenlfk.sys 17:42:17.0983 2244 mfenlfk - ok 17:42:17.0999 2244 mferkdet (5041fa2bd2b3a2693b015771bfbf6dca) C:\Windows\system32\drivers\mferkdet.sys 17:42:17.0999 2244 mferkdet - ok 17:42:17.0999 2244 mfevtp (723a5eb6cef7f408c3d0f15a82a6bff8) C:\Windows\system32\mfevtps.exe 17:42:18.0014 2244 mfevtp - ok 17:42:18.0045 2244 mfewfpk (919c56db14a0e1e2ab6da5d2821dc26e) C:\Windows\system32\drivers\mfewfpk.sys 17:42:18.0061 2244 mfewfpk - ok 17:42:18.0077 2244 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 17:42:18.0108 2244 MMCSS - ok 17:42:18.0123 2244 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 17:42:18.0155 2244 Modem - ok 17:42:18.0186 2244 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 17:42:18.0201 2244 monitor - ok 17:42:18.0217 2244 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 17:42:18.0217 2244 mouclass - ok 17:42:18.0217 2244 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 17:42:18.0233 2244 mouhid - ok 17:42:18.0233 2244 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys 17:42:18.0233 2244 mountmgr - ok 17:42:18.0295 2244 MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 17:42:18.0295 2244 MozillaMaintenance - ok 17:42:18.0311 2244 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys 17:42:18.0311 2244 mpio - ok 17:42:18.0342 2244 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 17:42:18.0357 2244 mpsdrv - ok 17:42:18.0404 2244 MpsSvc (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll 17:42:18.0435 2244 MpsSvc - ok 17:42:18.0451 2244 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys 17:42:18.0467 2244 MRxDAV - ok 17:42:18.0482 2244 mrxsmb (cfdcd8ca87c2a657debc150ac35b5e08) C:\Windows\system32\DRIVERS\mrxsmb.sys 17:42:18.0513 2244 mrxsmb - ok 17:42:18.0529 2244 mrxsmb10 (1bee517b220b7f024f411aec1571dd5a) C:\Windows\system32\DRIVERS\mrxsmb10.sys 17:42:18.0560 2244 mrxsmb10 - ok 17:42:18.0560 2244 mrxsmb20 (6b2d5fef385828b6e485c1c90afb8195) C:\Windows\system32\DRIVERS\mrxsmb20.sys 17:42:18.0591 2244 mrxsmb20 - ok 17:42:18.0591 2244 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys 17:42:18.0607 2244 msahci - ok 17:42:18.0607 2244 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys 17:42:18.0623 2244 msdsm - ok 17:42:18.0669 2244 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe 17:42:18.0669 2244 MSDTC - ok 17:42:18.0669 2244 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 17:42:18.0701 2244 Msfs - ok 17:42:18.0716 2244 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 17:42:18.0732 2244 mshidkmdf - ok 17:42:18.0747 2244 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys 17:42:18.0747 2244 msisadrv - ok 17:42:18.0779 2244 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll 17:42:18.0810 2244 MSiSCSI - ok 17:42:18.0810 2244 msiserver - ok 17:42:18.0825 2244 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 17:42:18.0841 2244 MSKSSRV - ok 17:42:18.0841 2244 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 17:42:18.0872 2244 MSPCLOCK - ok 17:42:18.0872 2244 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 17:42:18.0903 2244 MSPQM - ok 17:42:18.0919 2244 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys 17:42:18.0919 2244 MsRPC - ok 17:42:18.0935 2244 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys 17:42:18.0935 2244 mssmbios - ok 17:42:18.0935 2244 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 17:42:18.0966 2244 MSTEE - ok 17:42:18.0966 2244 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 17:42:18.0966 2244 MTConfig - ok 17:42:18.0981 2244 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 17:42:18.0981 2244 Mup - ok 17:42:19.0013 2244 napagent (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll 17:42:19.0044 2244 napagent - ok 17:42:19.0059 2244 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 17:42:19.0091 2244 NativeWifiP - ok 17:42:19.0137 2244 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys 17:42:19.0137 2244 NDIS - ok 17:42:19.0153 2244 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 17:42:19.0184 2244 NdisCap - ok 17:42:19.0184 2244 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 17:42:19.0231 2244 NdisTapi - ok 17:42:19.0231 2244 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys 17:42:19.0278 2244 Ndisuio - ok 17:42:19.0293 2244 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys 17:42:19.0309 2244 NdisWan - ok 17:42:19.0325 2244 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys 17:42:19.0340 2244 NDProxy - ok 17:42:19.0340 2244 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 17:42:19.0371 2244 NetBIOS - ok 17:42:19.0387 2244 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys 17:42:19.0418 2244 NetBT - ok 17:42:19.0434 2244 Netlogon (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 17:42:19.0449 2244 Netlogon - ok 17:42:19.0481 2244 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll 17:42:19.0496 2244 Netman - ok 17:42:19.0543 2244 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll 17:42:19.0574 2244 netprofm - ok 17:42:19.0637 2244 netr7364 (81b8d0c1ce44a7fdbd596b693783950c) C:\Windows\system32\DRIVERS\netr7364.sys 17:42:19.0637 2244 netr7364 - ok 17:42:19.0715 2244 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 17:42:19.0715 2244 NetTcpPortSharing - ok 17:42:19.0730 2244 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 17:42:19.0746 2244 nfrd960 - ok 17:42:19.0761 2244 NlaSvc (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll 17:42:19.0808 2244 NlaSvc - ok 17:42:19.0808 2244 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 17:42:19.0824 2244 Npfs - ok 17:42:19.0839 2244 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll 17:42:19.0855 2244 nsi - ok 17:42:19.0855 2244 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 17:42:19.0886 2244 nsiproxy - ok 17:42:19.0980 2244 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys 17:42:19.0995 2244 Ntfs - ok 17:42:20.0136 2244 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 17:42:20.0167 2244 Null - ok 17:42:20.0666 2244 nvlddmkm (51bd7ef17f0b525994ad5b3748c8288b) C:\Windows\system32\DRIVERS\nvlddmkm.sys 17:42:20.0791 2244 nvlddmkm - ok 17:42:20.0853 2244 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys 17:42:20.0853 2244 nvraid - ok 17:42:20.0869 2244 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys 17:42:20.0869 2244 nvstor - ok 17:42:20.0916 2244 nvsvc (fce8537bf5d504680212d536a3bfe5e2) C:\Windows\system32\nvvsvc.exe 17:42:20.0931 2244 nvsvc - ok 17:42:20.0931 2244 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys 17:42:20.0947 2244 nv_agp - ok 17:42:20.0963 2244 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys 17:42:20.0963 2244 ohci1394 - ok 17:42:20.0994 2244 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 17:42:21.0025 2244 p2pimsvc - ok 17:42:21.0056 2244 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll 17:42:21.0072 2244 p2psvc - ok 17:42:21.0087 2244 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 17:42:21.0087 2244 Parport - ok 17:42:21.0103 2244 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys 17:42:21.0119 2244 partmgr - ok 17:42:21.0134 2244 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll 17:42:21.0150 2244 PcaSvc - ok 17:42:21.0165 2244 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys 17:42:21.0165 2244 pci - ok 17:42:21.0181 2244 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys 17:42:21.0181 2244 pciide - ok 17:42:21.0197 2244 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 17:42:21.0197 2244 pcmcia - ok 17:42:21.0212 2244 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 17:42:21.0212 2244 pcw - ok 17:42:21.0243 2244 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 17:42:21.0275 2244 PEAUTH - ok 17:42:21.0353 2244 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe 17:42:21.0368 2244 PerfHost - ok 17:42:21.0431 2244 pla (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll 17:42:21.0477 2244 pla - ok 17:42:21.0509 2244 PlugPlay (23157d583244400e1d7fbaee2e4b31b7) C:\Windows\system32\umpnpmgr.dll 17:42:21.0540 2244 PlugPlay - ok 17:42:21.0540 2244 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll 17:42:21.0555 2244 PNRPAutoReg - ok 17:42:21.0571 2244 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 17:42:21.0571 2244 PNRPsvc - ok 17:42:21.0618 2244 PolicyAgent (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll 17:42:21.0649 2244 PolicyAgent - ok 17:42:21.0665 2244 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll 17:42:21.0696 2244 Power - ok 17:42:21.0758 2244 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys 17:42:21.0789 2244 PptpMiniport - ok 17:42:21.0805 2244 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 17:42:21.0821 2244 Processor - ok 17:42:21.0852 2244 ProfSvc (f381975e1f4346de875cb07339ce8d3a) C:\Windows\system32\profsvc.dll 17:42:21.0867 2244 ProfSvc - ok 17:42:21.0899 2244 ProtectedStorage (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 17:42:21.0899 2244 ProtectedStorage - ok 17:42:21.0914 2244 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys 17:42:21.0930 2244 Psched - ok 17:42:21.0945 2244 PxHlpa64 (4712cc14e720ecccc0aa16949d18aaf1) C:\Windows\system32\Drivers\PxHlpa64.sys 17:42:21.0945 2244 PxHlpa64 - ok 17:42:22.0039 2244 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 17:42:22.0055 2244 ql2300 - ok 17:42:22.0164 2244 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 17:42:22.0164 2244 ql40xx - ok 17:42:22.0179 2244 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll 17:42:22.0195 2244 QWAVE - ok 17:42:22.0211 2244 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 17:42:22.0226 2244 QWAVEdrv - ok 17:42:22.0226 2244 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 17:42:22.0257 2244 RasAcd - ok 17:42:22.0289 2244 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 17:42:22.0320 2244 RasAgileVpn - ok 17:42:22.0335 2244 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll 17:42:22.0351 2244 RasAuto - ok 17:42:22.0367 2244 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys 17:42:22.0398 2244 Rasl2tp - ok 17:42:22.0429 2244 RasMan (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll 17:42:22.0460 2244 RasMan - ok 17:42:22.0460 2244 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 17:42:22.0491 2244 RasPppoe - ok 17:42:22.0491 2244 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 17:42:22.0523 2244 RasSstp - ok 17:42:22.0538 2244 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys 17:42:22.0569 2244 rdbss - ok 17:42:22.0585 2244 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 17:42:22.0601 2244 rdpbus - ok 17:42:22.0601 2244 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 17:42:22.0632 2244 RDPCDD - ok 17:42:22.0647 2244 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 17:42:22.0663 2244 RDPENCDD - ok 17:42:22.0663 2244 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 17:42:22.0694 2244 RDPREFMP - ok 17:42:22.0725 2244 RDPWD (074ac702d8b8b660b0e1371555995386) C:\Windows\system32\drivers\RDPWD.sys 17:42:22.0757 2244 RDPWD - ok 17:42:22.0772 2244 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys 17:42:22.0788 2244 rdyboost - ok 17:42:22.0803 2244 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll 17:42:22.0835 2244 RemoteAccess - ok 17:42:22.0850 2244 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll 17:42:22.0866 2244 RemoteRegistry - ok 17:42:23.0037 2244 RoxMediaDB10 (05fc44d32a144925eae45570029fd6e1) c:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe 17:42:23.0053 2244 RoxMediaDB10 - ok 17:42:23.0069 2244 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll 17:42:23.0100 2244 RpcEptMapper - ok 17:42:23.0115 2244 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe 17:42:23.0131 2244 RpcLocator - ok 17:42:23.0162 2244 RpcSs (7266972e86890e2b30c0c322e906b027) C:\Windows\System32\rpcss.dll 17:42:23.0193 2244 RpcSs - ok 17:42:23.0240 2244 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 17:42:23.0271 2244 rspndr - ok 17:42:23.0271 2244 RxFilter - ok 17:42:23.0287 2244 SamSs (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 17:42:23.0303 2244 SamSs - ok 17:42:23.0318 2244 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys 17:42:23.0318 2244 sbp2port - ok 17:42:23.0334 2244 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll 17:42:23.0365 2244 SCardSvr - ok 17:42:23.0365 2244 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys 17:42:23.0396 2244 scfilter - ok 17:42:23.0443 2244 Schedule (ec56b171f85c7e855e7b0588ac503eea) C:\Windows\system32\schedsvc.dll 17:42:23.0474 2244 Schedule - ok 17:42:23.0505 2244 SCPolicySvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 17:42:23.0537 2244 SCPolicySvc - ok 17:42:23.0537 2244 SDRSVC (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll 17:42:23.0568 2244 SDRSVC - ok 17:42:23.0661 2244 SeaPort (d358e077a0a05d9b12da22d137ee8464) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 17:42:23.0661 2244 SeaPort - ok 17:42:23.0677 2244 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 17:42:23.0708 2244 secdrv - ok 17:42:23.0724 2244 seclogon (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll 17:42:23.0739 2244 seclogon - ok 17:42:23.0755 2244 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\system32\sens.dll 17:42:23.0771 2244 SENS - ok 17:42:23.0786 2244 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll 17:42:23.0802 2244 SensrSvc - ok 17:42:23.0817 2244 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 17:42:23.0817 2244 Serenum - ok 17:42:23.0833 2244 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 17:42:23.0849 2244 Serial - ok 17:42:23.0849 2244 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 17:42:23.0864 2244 sermouse - ok 17:42:23.0880 2244 SessionEnv (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll 17:42:23.0911 2244 SessionEnv - ok 17:42:23.0927 2244 SessionLauncher - ok 17:42:23.0927 2244 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys 17:42:23.0958 2244 sffdisk - ok 17:42:23.0958 2244 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys 17:42:23.0973 2244 sffp_mmc - ok 17:42:23.0973 2244 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys 17:42:23.0973 2244 sffp_sd - ok 17:42:23.0973 2244 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 17:42:23.0989 2244 sfloppy - ok 17:42:24.0036 2244 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll 17:42:24.0051 2244 SharedAccess - ok 17:42:24.0098 2244 ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll 17:42:24.0129 2244 ShellHWDetection - ok 17:42:24.0145 2244 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 17:42:24.0145 2244 SiSRaid2 - ok 17:42:24.0145 2244 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 17:42:24.0161 2244 SiSRaid4 - ok 17:42:24.0161 2244 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 17:42:24.0192 2244 Smb - ok 17:42:24.0207 2244 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe 17:42:24.0207 2244 SNMPTRAP - ok 17:42:24.0207 2244 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 17:42:24.0223 2244 spldr - ok 17:42:24.0239 2244 Spooler (89e8550c5862999fcf482ea562b0e98e) C:\Windows\System32\spoolsv.exe 17:42:24.0254 2244 Spooler - ok 17:42:24.0410 2244 sppsvc (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe 17:42:24.0457 2244 sppsvc - ok 17:42:24.0582 2244 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll 17:42:24.0597 2244 sppuinotify - ok 17:42:24.0675 2244 sprtsvc_DellComms (d630b6f2e8379b6f10dc16e82a426552) C:\Program Files (x86)\Dell\DellComms\bin\sprtsvc.exe 17:42:24.0691 2244 sprtsvc_DellComms - ok 17:42:24.0738 2244 srv (ec8f67289105bf270498095f14963464) C:\Windows\system32\DRIVERS\srv.sys 17:42:24.0769 2244 srv - ok 17:42:24.0785 2244 srv2 (f773d2ed090b7baa1c1a034f3ca476c8) C:\Windows\system32\DRIVERS\srv2.sys 17:42:24.0816 2244 srv2 - ok 17:42:24.0831 2244 srvnet (26e84d3649019c3244622e654dfcd75b) C:\Windows\system32\DRIVERS\srvnet.sys 17:42:24.0878 2244 srvnet - ok 17:42:24.0909 2244 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll 17:42:24.0941 2244 SSDPSRV - ok 17:42:24.0956 2244 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll 17:42:24.0972 2244 SstpSvc - ok 17:42:25.0003 2244 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 17:42:25.0003 2244 stexstor - ok 17:42:25.0065 2244 stisvc (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll 17:42:25.0081 2244 stisvc - ok 17:42:25.0159 2244 stllssvr (ff5eb78af7dfb68c2fb363537aaf753e) c:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe 17:42:25.0159 2244 stllssvr - ok 17:42:25.0175 2244 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys 17:42:25.0190 2244 swenum - ok 17:42:25.0221 2244 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll 17:42:25.0253 2244 swprv - ok 17:42:25.0331 2244 SysMain (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll 17:42:25.0362 2244 SysMain - ok 17:42:25.0487 2244 TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll 17:42:25.0502 2244 TabletInputService - ok 17:42:25.0533 2244 TapiSrv (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll 17:42:25.0565 2244 TapiSrv - ok 17:42:25.0580 2244 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll 17:42:25.0611 2244 TBS - ok 17:42:25.0736 2244 Tcpip (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\drivers\tcpip.sys 17:42:25.0752 2244 Tcpip - ok 17:42:25.0845 2244 TCPIP6 (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\DRIVERS\tcpip.sys 17:42:25.0877 2244 TCPIP6 - ok 17:42:25.0908 2244 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys 17:42:25.0923 2244 tcpipreg - ok 17:42:25.0939 2244 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 17:42:25.0955 2244 TDPIPE - ok 17:42:25.0970 2244 TDTCP (7518f7bcfd4b308abc9192bacaf6c970) C:\Windows\system32\drivers\tdtcp.sys 17:42:26.0001 2244 TDTCP - ok 17:42:26.0017 2244 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys 17:42:26.0048 2244 tdx - ok 17:42:26.0048 2244 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys 17:42:26.0048 2244 TermDD - ok 17:42:26.0111 2244 TermService (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll 17:42:26.0142 2244 TermService - ok 17:42:26.0157 2244 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll 17:42:26.0173 2244 Themes - ok 17:42:26.0204 2244 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 17:42:26.0235 2244 THREADORDER - ok 17:42:26.0235 2244 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll 17:42:26.0267 2244 TrkWks - ok 17:42:26.0345 2244 TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe 17:42:26.0345 2244 TrustedInstaller - ok 17:42:26.0360 2244 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys 17:42:26.0376 2244 tssecsrv - ok 17:42:26.0391 2244 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys 17:42:26.0423 2244 tunnel - ok 17:42:26.0438 2244 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 17:42:26.0438 2244 uagp35 - ok 17:42:26.0454 2244 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys 17:42:26.0485 2244 udfs - ok 17:42:26.0501 2244 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe 17:42:26.0501 2244 UI0Detect - ok 17:42:26.0516 2244 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys 17:42:26.0516 2244 uliagpkx - ok 17:42:26.0516 2244 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys 17:42:26.0532 2244 umbus - ok 17:42:26.0532 2244 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 17:42:26.0532 2244 UmPass - ok 17:42:26.0563 2244 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll 17:42:26.0594 2244 upnphost - ok 17:42:26.0594 2244 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys 17:42:26.0610 2244 usbccgp - ok 17:42:26.0625 2244 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys 17:42:26.0625 2244 usbcir - ok 17:42:26.0641 2244 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys 17:42:26.0641 2244 usbehci - ok 17:42:26.0657 2244 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys 17:42:26.0688 2244 usbhub - ok 17:42:26.0703 2244 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys 17:42:26.0703 2244 usbohci - ok 17:42:26.0703 2244 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 17:42:26.0719 2244 usbprint - ok 17:42:26.0735 2244 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS 17:42:26.0735 2244 USBSTOR - ok 17:42:26.0735 2244 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys 17:42:26.0750 2244 usbuhci - ok 17:42:26.0766 2244 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll 17:42:26.0797 2244 UxSms - ok 17:42:26.0828 2244 VaultSvc (0793f40b9b8a1bdd266296409dbd91ea) C:\Windows\system32\lsass.exe 17:42:26.0844 2244 VaultSvc - ok 17:42:26.0844 2244 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys 17:42:26.0844 2244 vdrvroot - ok 17:42:26.0875 2244 vds (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe 17:42:26.0891 2244 vds - ok 17:42:26.0891 2244 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 17:42:26.0906 2244 vga - ok 17:42:26.0906 2244 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 17:42:26.0937 2244 VgaSave - ok 17:42:26.0953 2244 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys 17:42:26.0969 2244 vhdmp - ok 17:42:26.0969 2244 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys 17:42:26.0969 2244 viaide - ok 17:42:26.0969 2244 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys 17:42:26.0984 2244 volmgr - ok 17:42:27.0000 2244 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys 17:42:27.0000 2244 volmgrx - ok 17:42:27.0015 2244 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys 17:42:27.0031 2244 volsnap - ok 17:42:27.0047 2244 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 17:42:27.0047 2244 vsmraid - ok 17:42:27.0125 2244 VSS (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe 17:42:27.0156 2244 VSS - ok 17:42:27.0281 2244 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 17:42:27.0296 2244 vwifibus - ok 17:42:27.0296 2244 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 17:42:27.0327 2244 vwififlt - ok 17:42:27.0359 2244 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll 17:42:27.0374 2244 W32Time - ok 17:42:27.0390 2244 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 17:42:27.0390 2244 WacomPen - ok 17:42:27.0390 2244 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 17:42:27.0421 2244 WANARP - ok 17:42:27.0421 2244 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 17:42:27.0452 2244 Wanarpv6 - ok 17:42:27.0515 2244 wbengine (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe 17:42:27.0546 2244 wbengine - ok 17:42:27.0593 2244 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll 17:42:27.0608 2244 WbioSrvc - ok 17:42:27.0624 2244 wcncsvc (8321c2ca3b62b61b293cda3451984468) C:\Windows\System32\wcncsvc.dll 17:42:27.0639 2244 wcncsvc - ok 17:42:27.0639 2244 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll 17:42:27.0671 2244 WcsPlugInService - ok 17:42:27.0671 2244 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 17:42:27.0686 2244 Wd - ok 17:42:27.0717 2244 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 17:42:27.0733 2244 Wdf01000 - ok 17:42:27.0749 2244 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 17:42:27.0764 2244 WdiServiceHost - ok 17:42:27.0764 2244 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 17:42:27.0780 2244 WdiSystemHost - ok 17:42:27.0795 2244 WebClient (8a438cbb8c032a0c798b0c642ffbe572) C:\Windows\System32\webclnt.dll 17:42:27.0811 2244 WebClient - ok 17:42:27.0842 2244 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll 17:42:27.0873 2244 Wecsvc - ok 17:42:27.0889 2244 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll 17:42:27.0905 2244 wercplsupport - ok 17:42:27.0920 2244 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll 17:42:27.0951 2244 WerSvc - ok 17:42:27.0967 2244 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 17:42:27.0998 2244 WfpLwf - ok 17:42:28.0014 2244 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 17:42:28.0014 2244 WIMMount - ok 17:42:28.0045 2244 WinDefend - ok 17:42:28.0045 2244 WinHttpAutoProxySvc - ok 17:42:28.0107 2244 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll 17:42:28.0139 2244 Winmgmt - ok 17:42:28.0248 2244 WinRM (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll 17:42:28.0295 2244 WinRM - ok 17:42:28.0435 2244 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll 17:42:28.0451 2244 Wlansvc - ok 17:42:28.0544 2244 wltrysvc (13b0a570e1ae451c92da550085d72cf3) C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE 17:42:28.0560 2244 wltrysvc ( UnsignedFile.Multi.Generic ) - warning 17:42:28.0560 2244 wltrysvc - detected UnsignedFile.Multi.Generic (1) 17:42:28.0591 2244 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys 17:42:28.0607 2244 WmiAcpi - ok 17:42:28.0669 2244 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe 17:42:28.0685 2244 wmiApSrv - ok 17:42:28.0716 2244 WMPNetworkSvc - ok 17:42:28.0731 2244 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll 17:42:28.0747 2244 WPCSvc - ok 17:42:28.0763 2244 WPDBusEnum (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll 17:42:28.0794 2244 WPDBusEnum - ok 17:42:28.0794 2244 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 17:42:28.0825 2244 ws2ifsl - ok 17:42:28.0856 2244 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\system32\wscsvc.dll 17:42:28.0872 2244 wscsvc - ok 17:42:28.0887 2244 WSearch - ok 17:42:28.0997 2244 wuauserv (38340204a2d0228f1e87740fc5e554a7) C:\Windows\system32\wuaueng.dll 17:42:29.0043 2244 wuauserv - ok 17:42:29.0153 2244 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys 17:42:29.0184 2244 WudfPf - ok 17:42:29.0199 2244 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys 17:42:29.0231 2244 WUDFRd - ok 17:42:29.0246 2244 wudfsvc (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll 17:42:29.0262 2244 wudfsvc - ok 17:42:29.0293 2244 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll 17:42:29.0309 2244 WwanSvc - ok 17:42:29.0324 2244 MBR (0x1B8) (cdb4de4bbd714f152979da2dcbef57eb) \Device\Harddisk0\DR0 17:42:29.0433 2244 \Device\Harddisk0\DR0 ( TDSS File System ) - warning 17:42:29.0433 2244 \Device\Harddisk0\DR0 - detected TDSS File System (1) 17:42:29.0433 2244 Boot (0x1200) (a5c682221bb3be9ca89446427c662f59) \Device\Harddisk0\DR0\Partition0 17:42:29.0433 2244 \Device\Harddisk0\DR0\Partition0 - ok 17:42:29.0465 2244 Boot (0x1200) (2173d9f00b8f5ffc95b7fde2a9e0227f) \Device\Harddisk0\DR0\Partition1 17:42:29.0465 2244 \Device\Harddisk0\DR0\Partition1 - ok 17:42:29.0465 2244 ============================================================ 17:42:29.0465 2244 Scan finished 17:42:29.0465 2244 ============================================================ 17:42:29.0496 2016 Detected object count: 3 17:42:29.0496 2016 Actual detected object count: 3 17:42:46.0796 2016 DockLoginService ( UnsignedFile.Multi.Generic ) - skipped by user 17:42:46.0796 2016 DockLoginService ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:42:46.0796 2016 wltrysvc ( UnsignedFile.Multi.Generic ) - skipped by user 17:42:46.0796 2016 wltrysvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 17:42:46.0812 2016 \Device\Harddisk0\DR0\TDLFS\ph.dll - copied to quarantine 17:42:46.0812 2016 \Device\Harddisk0\DR0\TDLFS\phx.dll - copied to quarantine 17:42:46.0812 2016 \Device\Harddisk0\DR0\TDLFS\sub.dll - copied to quarantine 17:42:46.0812 2016 \Device\Harddisk0\DR0\TDLFS\subx.dll - copied to quarantine 17:42:46.0859 2016 \Device\Harddisk0\DR0\TDLFS\phd - copied to quarantine 17:42:46.0859 2016 \Device\Harddisk0\DR0\TDLFS\phdx - copied to quarantine 17:42:46.0859 2016 \Device\Harddisk0\DR0\TDLFS\phs - copied to quarantine 17:42:46.0859 2016 \Device\Harddisk0\DR0\TDLFS\phdata - copied to quarantine 17:42:46.0859 2016 \Device\Harddisk0\DR0\TDLFS\phld - copied to quarantine 17:42:46.0859 2016 \Device\Harddisk0\DR0\TDLFS\phln - copied to quarantine 17:42:46.0874 2016 \Device\Harddisk0\DR0\TDLFS\phlx - copied to quarantine 17:42:46.0874 2016 \Device\Harddisk0\DR0\TDLFS\phm - copied to quarantine 17:42:46.0874 2016 \Device\Harddisk0\DR0\TDLFS - deleted 17:42:46.0874 2016 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Delete 17:42:59.0042 2636 Deinitialize success now combofix ComboFix 12-04-28.01 - Jeffrey 04/28/2012 17:44:30.5.8 - x64 NETWORK Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.8183.7255 [GMT -4:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637} FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C} SP: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\SysWow64\bdaplgin.ax c:\windows\SysWow64\cero.rs c:\windows\SysWow64\csrr.rs c:\windows\SysWow64\esrb.rs c:\windows\SysWow64\g711codc.ax c:\windows\SysWow64\grb.rs c:\windows\SysWow64\iac25_32.ax c:\windows\SysWow64\ir41_32.ax c:\windows\SysWow64\ivfsrc.ax c:\windows\SysWow64\ksproxy.ax c:\windows\SysWow64\kstvtune.ax c:\windows\SysWow64\Kswdmcap.ax c:\windows\SysWow64\ksxbar.ax c:\windows\SysWow64\Mpeg2Data.ax c:\windows\SysWow64\mpg2splt.ax c:\windows\SysWow64\MSDvbNP.ax c:\windows\SysWow64\MSNP.ax c:\windows\SysWow64\oflc.rs c:\windows\SysWow64\pegi-fi.rs c:\windows\SysWow64\pegi-pt.rs c:\windows\SysWow64\pegi.rs c:\windows\SysWow64\pegibbfc.rs c:\windows\SysWow64\psisrndr.ax c:\windows\SysWow64\usk.rs c:\windows\SysWow64\VBICodec.ax c:\windows\SysWow64\vbisurf.ax c:\windows\SysWow64\vidcap.ax c:\windows\SysWow64\WEB.rs c:\windows\SysWow64\WSTPager.ax . . ((((((((((((((((((((((((( Files Created from 2012-03-28 to 2012-04-28 ))))))))))))))))))))))))))))))) . . 2012-04-28 21:46 . 2012-04-28 21:46 ——– d—–w- c:\users\Default\AppData\Local\temp 2012-04-27 11:58 . 2011-11-19 15:07 77312 —-a-w- c:\windows\system32\packager.dll 2012-04-27 11:58 . 2011-11-19 14:06 67072 —-a-w- c:\windows\SysWow64\packager.dll 2012-04-26 20:15 . 2012-04-26 20:15 ——– d—–w- c:\program files (x86)\ESET 2012-04-26 20:07 . 2012-04-26 20:07 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-04-26 20:07 . 2012-04-26 20:07 ——– d—–w- c:\programdata\Malwarebytes 2012-04-26 20:07 . 2012-04-04 19:56 24904 —-a-w- c:\windows\system32\drivers\mbam.sys 2012-04-26 18:36 . 2012-04-26 18:37 ——– d—–w- c:\program files (x86)\ERUNT 2012-04-26 16:24 . 2012-04-26 16:24 ——– d—–w- c:\windows\Sun 2012-04-26 15:53 . 2012-04-28 21:42 ——– d—–w- C:\TDSSKiller_Quarantine 2012-04-26 14:54 . 2008-07-31 14:41 68616 —-a-w- c:\windows\SysWow64\XAPOFX1_1.dll 2012-04-26 14:54 . 2008-07-31 14:40 509448 —-a-w- c:\windows\SysWow64\XAudio2_2.dll 2012-04-26 14:54 . 2008-07-12 12:18 467984 —-a-w- c:\windows\SysWow64\d3dx10_39.dll 2012-04-26 14:54 . 2008-07-12 12:18 3851784 —-a-w- c:\windows\SysWow64\D3DX9_39.dll 2012-04-26 14:54 . 2008-07-12 12:18 1493528 —-a-w- c:\windows\SysWow64\D3DCompiler_39.dll 2012-04-26 14:52 . 2012-04-26 14:52 ——– d—–w- C:\Riot Games 2012-04-26 10:43 . 2012-04-26 18:36 ——– d—–w- c:\programdata\PMB Files 2012-04-26 10:36 . 2012-04-26 10:36 ——– d—–w- c:\program files (x86)\Mozilla Maintenance Service 2012-04-26 10:29 . 2012-04-26 10:29 ——– d—–w- c:\program files (x86)\Common Files\McAfee 2012-04-26 10:29 . 2012-02-22 17:29 10248 —-a-w- c:\windows\system32\drivers\mfeclnk.sys 2012-04-26 10:29 . 2012-02-22 17:29 75936 —-a-w- c:\windows\system32\drivers\mfenlfk.sys 2012-04-26 10:29 . 2012-02-22 17:29 65264 —-a-w- c:\windows\system32\drivers\cfwids.sys 2012-04-26 10:29 . 2012-02-22 17:29 487296 —-a-w- c:\windows\system32\drivers\mfefirek.sys 2012-04-26 10:29 . 2012-02-22 17:29 289664 —-a-w- c:\windows\system32\drivers\mfewfpk.sys 2012-04-26 10:29 . 2012-02-22 17:29 229528 —-a-w- c:\windows\system32\drivers\mfeavfk.sys 2012-04-26 10:29 . 2012-02-22 17:29 100912 —-a-w- c:\windows\system32\drivers\mferkdet.sys 2012-04-26 10:29 . 2012-04-26 10:29 ——– d—–w- c:\program files\Common Files\McAfee 2012-04-26 10:29 . 2012-04-26 10:30 ——– d—–w- c:\program files\McAfee 2012-04-26 10:29 . 2012-04-26 15:54 ——– d—–w- c:\program files (x86)\McAfee 2012-04-26 10:13 . 2012-03-20 17:11 162192 —-a-w- c:\windows\system32\mfevtps.exe 2012-04-26 10:13 . 2012-04-26 13:29 ——– d—–w- c:\programdata\McAfee 2012-04-26 10:08 . 2012-04-26 10:08 ——– d—–w- c:\program files (x86)\Compact Wireless-G USB Adapter Wireless Network Monitor 2012-04-26 10:08 . 2001-09-05 08:18 77824 —-a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll 2012-04-26 10:08 . 2001-09-05 08:18 225280 ——w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll 2012-04-26 10:08 . 2001-09-05 08:14 176128 ——w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll 2012-04-26 10:08 . 2001-09-05 08:13 32768 ——w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll 2012-04-26 10:02 . 2012-04-26 10:04 ——– d—–w- c:\users\Jeffrey 2012-04-26 09:45 . 2012-04-18 08:03 8917360 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2E70F480-88C1-4FEF-A7D6-4A31B65AAC75}\mpengine.dll 2012-04-26 09:45 . 2012-02-23 15:18 279656 ——w- c:\windows\system32\MpSigStub.exe 2012-04-26 09:12 . 2012-02-15 06:27 1031680 —-a-w- c:\windows\system32\rdpcore.dll 2012-04-26 09:12 . 2012-02-15 05:44 826368 —-a-w- c:\windows\SysWow64\rdpcore.dll 2012-04-26 09:12 . 2012-02-15 04:47 204800 —-a-w- c:\windows\system32\drivers\rdpwd.sys 2012-04-26 09:12 . 2012-02-15 04:46 23552 —-a-w- c:\windows\system32\drivers\tdtcp.sys 2012-04-26 09:12 . 2012-01-25 06:27 76288 —-a-w- c:\windows\system32\rdpwsx.dll 2012-04-26 09:12 . 2012-01-25 06:27 149504 —-a-w- c:\windows\system32\rdpcorekmts.dll 2012-04-26 09:12 . 2012-01-25 06:20 9216 —-a-w- c:\windows\system32\rdrmemptylst.exe 2012-04-26 09:12 . 2010-01-09 07:19 139264 —-a-w- c:\windows\system32\cabview.dll 2012-04-26 09:12 . 2010-01-09 06:52 132608 —-a-w- c:\windows\SysWow64\cabview.dll . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-02-22 17:29 . 2012-02-22 17:29 647208 —-a-w- c:\windows\system32\drivers\mfehidk.sys 2012-02-22 17:29 . 2012-02-22 17:29 160792 —-a-w- c:\windows\system32\drivers\mfeapfk.sys . . ((((((((((((((((((((((((((((( SnapShot_2012-04-28_15.02.11 ))))))))))))))))))))))))))))))))))))))))) . - 2012-04-28 15:01 . 2012-04-28 15:01 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2012-04-28 21:47 . 2012-04-28 21:47 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2009-07-14 02:36 . 2012-04-28 15:06 615122 c:\windows\system32\perfh009.dat - 2009-07-14 02:36 . 2012-04-28 11:22 615122 c:\windows\system32\perfh009.dat + 2009-07-14 02:36 . 2012-04-28 15:06 103496 c:\windows\system32\perfc009.dat - 2009-07-14 02:36 . 2012-04-28 11:22 103496 c:\windows\system32\perfc009.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="c:\program files (x86)\Java\jre6\bin\jusched.exe" [2009-10-26 148888] "ShwiconXP9106"="c:\program files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe" [2009-07-17 237568] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "PDVDDXSrv"="c:\program files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe" [2009-06-25 140520] "DellComms"="c:\program files (x86)\Dell\DellComms\bin\sprtcmd.exe" [2009-05-05 206064] "mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2012-03-22 1675160] "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408] . c:\users\Jeffrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-6-30 1316192] ERUNT AutoBackup.lnk - c:\program files (x86)\ERUNT\AUTOBACK.EXE [2005-10-20 38912] . c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dell Dock First Run.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-6-30 1316192] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . R2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-03-31 92160] R2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe [2008-12-18 155648] R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408] R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 249936] R2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 249936] R2 SessionLauncher;SessionLauncher;c:\users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe [x] R2 sprtsvc_DellComms;SupportSoft Sprocket Service (DellComms);c:\program files (x86)\Dell\DellComms\bin\sprtsvc.exe [2009-05-05 206064] R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [x] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x] R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [x] R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-21 129976] R3 RoxMediaDB10;RoxMediaDB10;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-26 1124848] S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x] S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 249936] S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2012-03-20 210584] S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [x] S3 k57nd60a;Broadcom NetLink ™ Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x] S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [x] S3 netr7364;RT73 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr7364.sys [x] . . . ——— x86-64 ———– . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-05-23 7833120] "Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [BU] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-06-26 16327712] "Broadcom Wireless Manager UI"="c:\program files\Dell\Dell Wireless WLAN Card\WLTRAY.exe" [2009-07-17 4968960] . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm TCP: DhcpNameServer = 192.168.1.254 FF - ProfilePath - c:\users\Jeffrey\AppData\Roaming\Mozilla\Firefox\Profiles\olkt1xwk.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/ FF - prefs.js: network.proxy.type - 0 . - - - - ORPHANS REMOVED - - - - . Toolbar-Locked - (no file) . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10b.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10b.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}] @Denied: (A 2) (Everyone) @="IFlashBroker2" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2012-04-28 17:49:47 - machine was rebooted ComboFix-quarantined-files.txt 2012-04-28 21:49 ComboFix2.txt 2012-04-28 15:04 ComboFix3.txt 2012-04-27 02:47 ComboFix4.txt 2012-04-26 19:50 ComboFix5.txt 2012-04-28 21:44 . Pre-Run: 945,974,243,328 bytes free Post-Run: 945,927,835,648 bytes free . - - End Of File - - C2CF23EBA0FFF089C2ABC38284551528

jeffce

Post #65April 29, 2012, 12:16 AM UTC

Hi, How is your system running?

Pirus504

Post #66April 29, 2012, 12:20 AM UTC

so far so good. i don't have anything in my start menu but that could be because i'm in safe mode with networking right?

jeffce

Post #67April 29, 2012, 12:51 AM UTC

Boot back to Normal Mode and check things out.

Pirus504

Post #68April 29, 2012, 1:25 AM UTC last edited April 29, 2012, 1:38 AM UTC

ok i'm in normal mode now. my desktop background was still black but i was able to change it back to what it was however i still have nothing in my start menu.

jeffce

Post #69April 29, 2012, 3:15 AM UTC

Go ahead and run Unhide.exe again. That should clear it up. Let me know how it works and if the other malware seems to be removed.

Pirus504

Post #70April 29, 2012, 12:55 PM UTC

ok i've got stuff in my start menu now. should i run a scan on like malwarebytes or tdsskiller or something just to be sure of a clean sweep?

jeffce

Post #71April 29, 2012, 11:52 PM UTC

Go ahead and run Malwarebytes and give your system a good go 'round and see how it's running.

Pirus504

Post #72April 30, 2012, 12:20 AM UTC last edited April 30, 2012, 12:22 AM UTC

so far everything seems ok. i've played some league of legends and watched a little youtube and nothings gone wrong yet. i'm running malwarebytes now. so far its detected two things. i'll post when done

Pirus504

Post #73April 30, 2012, 12:35 AM UTC

ok here's the log Malwarebytes Anti-Malware (Trial) 1.61.0.1400 www.malwarebytes.org Database version: v2012.04.28.03 Windows 7 x64 NTFS Internet Explorer 8.0.7600.16385 Jeffrey :: JEFFREY-PC [administrator] Protection: Enabled 4/29/2012 8:18:46 PM mbam-log-2012-04-29 (20-18-46).txt Scan type: Full scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 303588 Time elapsed: 12 minute(s), 58 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 2 C:\Qoobox\Quarantine\C\ProgramData\aHelTFbukWq.exe.vir (Trojan.Agent.Gen) -> Quarantined and deleted successfully. C:\Qoobox\Quarantine\C\ProgramData\XkFcjVGVgWJhiQK.exe.vir (Trojan.Agent.Gen) -> Quarantined and deleted successfully. (end) should i run another scan?

jeffce

Post #74April 30, 2012, 11:38 AM UTC

No…I don't think so. Those two that Malwarebytes found are already quarantined by ComboFix so they aren't a problem.

Let's get some updates on your system while you are still working around with it.

You have an older version of Adobe Reader. You can download the current version HERE

You may want to consider Foxit Reader instead. It may be a bit lighter on resources.

Visit their support forum
Foxit Forum

In either case you should uninstall Adobe Reader 9.1.2 first. Be sure to move any PDF documents to another folder first though.
———-

Please download JavaRa to your desktop and unzip it to its own
folder

Run JavaRa.exe (double-click for XP/right-click and Run as Administrator for Vista), pick the language of your choice and click Select. Then
click Remove Older Versions.
Accept any prompts.
Open JavaRa.exe (double-click for XP/right-click and Run as Administrator for Vista) again and select Search For Updates.
Select Update Using Sun Java's Website then click Search and click on the Open Webpage button. Download and install the latest
Java Runtime Environment (JRE) version for your computer using the Offline version of either x86 (32bit operating system) or x64 (64bit operating system).

———-

In your next reply please let me know if you have any problems with the instructions and how your system is behaving.

Pirus504

Post #75April 30, 2012, 12:37 PM UTC last edited April 30, 2012, 12:44 PM UTC

do you want me to post javara's log? also i'm having some trouble updating from the sun java site. it keeps "The connection has timed out The server at java.sun.com is taking too long to respond. The site could be temporarily unavailable or too busy. Try again in a few moments. If you are unable to load any pages, check your computer's network connection. If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the Web.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

rootkit.boot.pihar.b won't go away [Solved]

✨ Ask AI

Ask AI