This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

im infected. i used hijack this [Closed]

26 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

whether it is firefox yahoo messenger or any program use for every day use, at some point or another it freezes up and the screen turn white. sometimes my screen will turn black and it looks the computer is resetting.


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:44:42 PM, on 4/26/2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Common Files\Apple\Internet Services\ubd.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Users\bucksnut\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files\Brother\Brmfcmon\BrMfimon.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\bucksnut\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…rio&pf=cnnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…rio&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…rio&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…rio&pf=cnnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\5.2.1.3\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\5.2.1.3\IPS\IPSBHO.DLL
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (file missing)
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\5.2.1.3\coIEPlg.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\MESSEN~1\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [MobileDocuments] C:\Program Files\Common Files\Apple\Internet Services\ubd.exe
O4 - Startup: Dropbox.lnk = C:\Users\bucksnut\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Users\bucksnut\AppData\Local\Temp\ONENOTEM.EXE
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Intuit Update Service (IntuitUpdateService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
O23 - Service: Intuit Update Service v4 (IntuitUpdateServiceV4) - Intuit Inc. - C:\Program Files\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\5.2.1.3\ccSvcHst.exe
O23 - Service: PTUML290 Connection Manager Service (ptumlcmsvc) - DEVGURU Co., LTD - C:\Windows\system32\ptumlcmsvc.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Unknown owner - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe (file missing)
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

–
End of file - 11176 bytes
Hello and Posted Image

My name is patndoris. I will be glad to take a look at your log and help you with solving any malware problems. It will be very helpful if you follow these guidelines:
  • Malware logs are often lengthy and can take a lot of time to research and interpret. Please be patient while I review your logs.
  • Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
  • Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  • Please follow my instructions carefully and in the order they are posted. You may also find it helpful to print out the instructions you receive.
  • Please do not run any scans or install/uninstall any applications or delete anything without being directed to do so.
  • Remember, absence of symptoms does not mean the infection is all gone. Please stick with me till you're given the "all clear".
  • Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
  • Please reply within 3 days. If I do not hear back from you in that time frame, I will post a reminder for you. Topics with no reply in 4 days are closed!








HijackThis has largely been replaced by other tools. Since being acquired by TrendMicro, HijackThis has not been regularly updated. Many infections are now able to hide partly, or completely from a HijackThis scan. DDS includes all the scan locations of HijackThis and more.


Download and Run DDS by sUBs

Please download DDS and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds.scr to run the tool.
  • When done, DDS.txt will open.
  • Save both reports to your desktop.
—————————————————

Please Please copy / paste the scan reults.

DDS.txt and Attach.txt






Please read carefully and follow these steps. There is a difference between what you see in one of the images below and what I need you to do.
We are only creating a log - I do NOT want you to "cure" or try to fix anything in this step. It is very important that you don't choose Cure when presented with that option.

  • Download TDSSKiller and save it to your Desktop.
  • Extract its contents to your desktop.
  • Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.


    🖼Click to load external image (Posted Image)

  • If an infected file is detected, the default action will be Cure but I want you to choose SKIP instead , click on Continue.


    🖼Click to load external image (Posted Image)

  • If a suspicious file is detected, the default action will be Skip, click on Continue.


    🖼Click to load external image (Posted Image)

  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.


    🖼Click to load external image (Posted Image)

  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
11:53:30.0003 5884 TDSS rootkit removing tool [removed] Apr 24 2012 18:43:43 11:53:32.0193 5884 ============================================================ 11:53:32.0193 5884 Current date / time: 2012/04/29 11:53:32.0193 11:53:32.0193 5884 SystemInfo: 11:53:32.0193 5884 11:53:32.0193 5884 OS Version: 6.0.6002 ServicePack: 2.0 11:53:32.0193 5884 Product type: Workstation 11:53:32.0193 5884 ComputerName: BUCKSNUT-PC 11:53:32.0194 5884 UserName: bucksnut 11:53:32.0194 5884 Windows directory: C:\Windows 11:53:32.0194 5884 System windows directory: C:\Windows 11:53:32.0194 5884 Processor architecture: Intel x86 11:53:32.0194 5884 Number of processors: 1 11:53:32.0194 5884 Page size: 0x1000 11:53:32.0194 5884 Boot type: Normal boot 11:53:32.0194 5884 ============================================================ 11:53:46.0428 5884 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050 11:53:46.0431 5884 ============================================================ 11:53:46.0431 5884 \Device\Harddisk0\DR0: 11:53:46.0431 5884 MBR partitions: 11:53:46.0431 5884 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x117697C1 11:53:46.0431 5884 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x11769800, BlocksNum 0x12AE800 11:53:46.0431 5884 ============================================================ 11:53:46.0505 5884 C: <-> \Device\Harddisk0\DR0\Partition0 11:53:46.0571 5884 D: <-> \Device\Harddisk0\DR0\Partition1 11:53:46.0571 5884 ============================================================ 11:53:46.0571 5884 Initialize success 11:53:46.0571 5884 ============================================================ 11:54:33.0119 1004 ============================================================ 11:54:33.0119 1004 Scan started 11:54:33.0119 1004 Mode: Manual; 11:54:33.0119 1004 ============================================================ 11:54:37.0686 1004 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys 11:54:37.0692 1004 ACPI - ok 11:54:37.0838 1004 AdobeFlashPlayerUpdateSvc (459ac130c6ab892b1cd5d7544626efc5) C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe 11:54:37.0988 1004 AdobeFlashPlayerUpdateSvc - ok 11:54:38.0114 1004 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys 11:54:38.0123 1004 adp94xx - ok 11:54:38.0171 1004 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys 11:54:38.0178 1004 adpahci - ok 11:54:38.0192 1004 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys 11:54:38.0195 1004 adpu160m - ok 11:54:38.0234 1004 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys 11:54:38.0238 1004 adpu320 - ok 11:54:38.0314 1004 AeLookupSvc (9d1fda9e086ba64e3c93c9de32461bcf) C:\Windows\System32\aelupsvc.dll 11:54:38.0315 1004 AeLookupSvc - ok 11:54:38.0528 1004 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys 11:54:38.0534 1004 AFD - ok 11:54:38.0678 1004 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys 11:54:38.0681 1004 agp440 - ok 11:54:38.0714 1004 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys 11:54:38.0717 1004 aic78xx - ok 11:54:38.0740 1004 ALG (a1545b731579895d8cc44fc0481c1192) C:\Windows\System32\alg.exe 11:54:38.0741 1004 ALG - ok 11:54:38.0764 1004 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys 11:54:38.0765 1004 aliide - ok 11:54:38.0855 1004 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys 11:54:38.0858 1004 amdagp - ok 11:54:38.0888 1004 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys 11:54:38.0890 1004 amdide - ok 11:54:38.0926 1004 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys 11:54:38.0930 1004 AmdK7 - ok 11:54:38.0952 1004 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\DRIVERS\amdk8.sys 11:54:38.0954 1004 AmdK8 - ok 11:54:39.0002 1004 Appinfo (c6d704c7f0434dc791aac37cac4b6e14) C:\Windows\System32\appinfo.dll 11:54:39.0003 1004 Appinfo - ok 11:54:39.0296 1004 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 11:54:39.0299 1004 Apple Mobile Device - ok 11:54:39.0386 1004 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys 11:54:39.0389 1004 arc - ok 11:54:39.0431 1004 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys 11:54:39.0490 1004 arcsas - ok 11:54:39.0533 1004 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys 11:54:39.0536 1004 AsyncMac - ok 11:54:39.0626 1004 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys 11:54:39.0627 1004 atapi - ok 11:54:39.0811 1004 athr (600efe56f37adbd65a0fb076b50d1b8d) C:\Windows\system32\DRIVERS\athr.sys 11:54:39.0829 1004 athr - ok 11:54:39.0946 1004 AudioEndpointBuilder (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll 11:54:39.0952 1004 AudioEndpointBuilder - ok 11:54:39.0958 1004 Audiosrv (68e2a1a0407a66cf50da0300852424ab) C:\Windows\System32\Audiosrv.dll 11:54:39.0961 1004 Audiosrv - ok 11:54:40.0096 1004 BCM43XV (cf6a67c90951e3e763d2135dede44b85) C:\Windows\system32\DRIVERS\bcmwl6.sys 11:54:40.0121 1004 BCM43XV - ok 11:54:40.0160 1004 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys 11:54:40.0161 1004 Beep - ok 11:54:40.0259 1004 BFE (c789af0f724fda5852fb9a7d3a432381) C:\Windows\System32\bfe.dll 11:54:40.0266 1004 BFE - ok 11:54:40.0706 1004 BHDrvx86 (a503d32ae26f77cb942aed530112edaa) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\BASHDefs\20120413.001\BHDrvx86.sys 11:54:40.0722 1004 BHDrvx86 - ok 11:54:40.0947 1004 BITS (93952506c6d67330367f7e7934b6a02f) C:\Windows\System32\qmgr.dll 11:54:40.0975 1004 BITS - ok 11:54:41.0116 1004 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys 11:54:41.0119 1004 blbdrive - ok 11:54:42.0168 1004 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe 11:54:42.0511 1004 Bonjour Service - ok 11:54:42.0729 1004 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys 11:54:42.0763 1004 bowser - ok 11:54:42.0908 1004 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys 11:54:42.0911 1004 BrFiltLo - ok 11:54:42.0968 1004 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys 11:54:42.0971 1004 BrFiltUp - ok 11:54:43.0283 1004 Browser (a3629a0c4226f9e9c72faaeebc3ad33c) C:\Windows\System32\browser.dll 11:54:43.0286 1004 Browser - ok 11:54:43.0653 1004 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys 11:54:43.0679 1004 Brserid - ok 11:54:43.0722 1004 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys 11:54:43.0763 1004 BrSerWdm - ok 11:54:43.0848 1004 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys 11:54:43.0870 1004 BrUsbMdm - ok 11:54:43.0909 1004 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys 11:54:43.0911 1004 BrUsbSer - ok 11:54:43.0983 1004 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys 11:54:43.0986 1004 BTHMODEM - ok 11:54:44.0153 1004 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys 11:54:44.0156 1004 cdfs - ok 11:54:44.0213 1004 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys 11:54:44.0277 1004 cdrom - ok 11:54:44.0812 1004 CertPropSvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll 11:54:44.0814 1004 CertPropSvc - ok 11:54:45.0158 1004 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys 11:54:45.0161 1004 circlass - ok 11:54:45.0555 1004 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys 11:54:45.0696 1004 CLFS - ok 11:54:46.0397 1004 clr_optimization_v2.0.50727_32 (8ee772032e2fe80a924f3b8dd5082194) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 11:54:46.0446 1004 clr_optimization_v2.0.50727_32 - ok 11:54:47.0027 1004 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 11:54:47.0649 1004 clr_optimization_v4.0.30319_32 - ok 11:54:47.0793 1004 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys 11:54:47.0804 1004 CmBatt - ok 11:54:47.0916 1004 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys 11:54:47.0918 1004 cmdide - ok 11:54:49.0044 1004 CnxtHdAudService (1adf6f4852e7d7e2e8ac481bdb970586) C:\Windows\system32\drivers\CHDRT32.sys 11:54:49.0106 1004 CnxtHdAudService - ok 11:54:49.0629 1004 Com4QLBEx (7795f8cebc284a426b53f541e538695f) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe 11:54:49.0637 1004 Com4QLBEx - ok 11:54:49.0798 1004 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys 11:54:49.0800 1004 Compbatt - ok 11:54:49.0807 1004 COMSysApp - ok 11:54:50.0922 1004 cpuz134 - ok 11:54:51.0048 1004 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys 11:54:51.0100 1004 crcdisk - ok 11:54:51.0267 1004 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys 11:54:51.0270 1004 Crusoe - ok 11:54:51.0601 1004 CryptSvc (fb27772beaf8e1d28ccd825c09da939b) C:\Windows\system32\cryptsvc.dll 11:54:51.0605 1004 CryptSvc - ok 11:54:51.0911 1004 DcomLaunch (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll 11:54:51.0922 1004 DcomLaunch - ok 11:54:52.0100 1004 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys 11:54:52.0103 1004 DfsC - ok 11:54:53.0207 1004 DFSR (2cc3dcfb533a1035b13dcab6160ab38b) C:\Windows\system32\DFSR.exe 11:54:53.0444 1004 DFSR - ok 11:54:53.0743 1004 Dhcp (9028559c132146fb75eb7acf384b086a) C:\Windows\System32\dhcpcsvc.dll 11:54:53.0746 1004 Dhcp - ok 11:54:53.0867 1004 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys 11:54:53.0870 1004 disk - ok 11:54:53.0949 1004 Dnscache (57d762f6f5974af0da2be88a3349baaa) C:\Windows\System32\dnsrslvr.dll 11:54:53.0969 1004 Dnscache - ok 11:54:54.0067 1004 dot3svc (324fd74686b1ef5e7c19a8af49e748f6) C:\Windows\System32\dot3svc.dll 11:54:54.0091 1004 dot3svc - ok 11:54:54.0143 1004 DPS (a622e888f8aa2f6b49e9bc466f0e5def) C:\Windows\system32\dps.dll 11:54:54.0147 1004 DPS - ok 11:54:54.0176 1004 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys 11:54:54.0178 1004 drmkaud - ok 11:54:54.0281 1004 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys 11:54:54.0293 1004 DXGKrnl - ok 11:54:54.0328 1004 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys 11:54:54.0332 1004 E1G60 - ok 11:54:54.0362 1004 EapHost (c0b95e40d85cd807d614e264248a45b9) C:\Windows\System32\eapsvc.dll 11:54:54.0365 1004 EapHost - ok 11:54:54.0428 1004 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys 11:54:54.0471 1004 Ecache - ok 11:54:54.0603 1004 eeCtrl (579a6b6135d32b857faf0e3a974535d8) C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys 11:54:54.0610 1004 eeCtrl - ok 11:54:54.0688 1004 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys 11:54:54.0695 1004 elxstor - ok 11:54:54.0841 1004 EMDMgmt (4e6b23dfc917ea39306b529b773950f4) C:\Windows\system32\emdmgmt.dll 11:54:54.0852 1004 EMDMgmt - ok 11:54:54.0970 1004 EraserUtilRebootDrv (028d50f059bd0d2ccb209e9011b9a9a4) C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 11:54:54.0972 1004 EraserUtilRebootDrv - ok 11:54:55.0020 1004 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys 11:54:55.0022 1004 ErrDev - ok 11:54:55.0082 1004 EventSystem (67058c46504bc12d821f38cf99b7b28f) C:\Windows\system32\es.dll 11:54:55.0088 1004 EventSystem - ok 11:54:55.0298 1004 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys 11:54:55.0303 1004 exfat - ok 11:54:55.0357 1004 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys 11:54:55.0362 1004 fastfat - ok 11:54:55.0425 1004 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys 11:54:55.0427 1004 fdc - ok 11:54:55.0449 1004 fdPHost (6629b5f0e98151f4afdd87567ea32ba3) C:\Windows\system32\fdPHost.dll 11:54:55.0450 1004 fdPHost - ok 11:54:55.0464 1004 FDResPub (89ed56dce8e47af40892778a5bd31fd2) C:\Windows\system32\fdrespub.dll 11:54:55.0466 1004 FDResPub - ok 11:54:55.0491 1004 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys 11:54:55.0493 1004 FileInfo - ok 11:54:55.0510 1004 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys 11:54:55.0513 1004 Filetrace - ok 11:54:55.0534 1004 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys 11:54:55.0537 1004 flpydisk - ok 11:54:55.0597 1004 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys 11:54:55.0601 1004 FltMgr - ok 11:54:55.0806 1004 FontCache (8ce364388c8eca59b14b539179276d44) C:\Windows\system32\FntCache.dll 11:54:55.0822 1004 FontCache - ok 11:54:55.0926 1004 FontCache3.0.0.0 (c7fbdd1ed42f82bfa35167a5c9803ea3) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 11:54:55.0930 1004 FontCache3.0.0.0 - ok 11:54:55.0963 1004 Fs_Rec (b972a66758577e0bfd1de0f91aaa27b5) C:\Windows\system32\drivers\Fs_Rec.sys 11:54:55.0964 1004 Fs_Rec - ok 11:54:56.0001 1004 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys 11:54:56.0004 1004 gagp30kx - ok 11:54:56.0126 1004 GameConsoleService (6139ae70e943b2a57ad04b70a316c0a0) C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe 11:54:56.0153 1004 GameConsoleService - ok 11:54:56.0185 1004 GEARAspiWDM (5ae3a887ece5bbb72cfab273c2fd1cfa) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 11:54:56.0243 1004 GEARAspiWDM - ok 11:54:56.0343 1004 GoogleDesktopManager-051210-111108 (9f5f2f0fb0a7f5aa9f16b9a7b6dad89f) C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 11:54:56.0346 1004 GoogleDesktopManager-051210-111108 - ok 11:54:56.0501 1004 gpsvc (cd5d0aeee35dfd4e986a5aa1500a6e66) C:\Windows\System32\gpsvc.dll 11:54:56.0514 1004 gpsvc - ok 11:54:56.0622 1004 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe 11:54:56.0626 1004 gupdate - ok 11:54:56.0631 1004 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe 11:54:56.0633 1004 gupdatem - ok 11:54:56.0752 1004 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys 11:54:56.0757 1004 HdAudAddService - ok 11:54:56.0856 1004 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys 11:54:56.0866 1004 HDAudBus - ok 11:54:56.0887 1004 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys 11:54:56.0889 1004 HidBth - ok 11:54:56.0907 1004 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys 11:54:56.0909 1004 HidIr - ok 11:54:56.0962 1004 hidserv (84067081f3318162797385e11a8f0582) C:\Windows\system32\hidserv.dll 11:54:56.0964 1004 hidserv - ok 11:54:57.0013 1004 HidUsb (854ca287ab7faf949617a788306d967e) C:\Windows\system32\DRIVERS\hidusb.sys 11:54:57.0016 1004 HidUsb - ok 11:54:57.0053 1004 hkmsvc (d8ad255b37da92434c26e4876db7d418) C:\Windows\system32\kmsvc.dll 11:54:57.0056 1004 hkmsvc - ok 11:54:57.0160 1004 HP Health Check Service (89f9e1984c1cd9e5f4fe39642d886e11) c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe 11:54:57.0163 1004 HP Health Check Service - ok 11:54:57.0179 1004 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys 11:54:57.0181 1004 HpCISSs - ok 11:54:57.0210 1004 HpqKbFiltr (35956140e686d53bf676cf0c778880fc) C:\Windows\system32\DRIVERS\HpqKbFiltr.sys 11:54:57.0237 1004 HpqKbFiltr - ok 11:54:57.0364 1004 hpqwmiex (1665c7121a026df10c903db9bc5e9d43) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe 11:54:57.0408 1004 hpqwmiex - ok 11:54:57.0507 1004 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS 11:54:57.0513 1004 HSFHWAZL - ok 11:54:57.0648 1004 HSF_DPV (cc267848cb3508e72762be65734e764d) C:\Windows\system32\DRIVERS\HSX_DPV.sys 11:54:57.0667 1004 HSF_DPV - ok 11:54:58.0047 1004 HSXHWAZL (a2882945cc4b6e3e4e9e825590438888) C:\Windows\system32\DRIVERS\HSXHWAZL.sys 11:54:58.0052 1004 HSXHWAZL - ok 11:54:58.0228 1004 HTTP (0eeeca26c8d4bde2a4664db058a81937) C:\Windows\system32\drivers\HTTP.sys 11:54:58.0256 1004 HTTP - ok 11:54:58.0323 1004 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys 11:54:58.0325 1004 i2omp - ok 11:54:58.0369 1004 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys 11:54:58.0371 1004 i8042prt - ok 11:54:58.0462 1004 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys 11:54:58.0468 1004 iaStorV - ok 11:54:58.0608 1004 IDriverT (6f95324909b502e2651442c1548ab12f) C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe 11:54:58.0714 1004 IDriverT - ok 11:54:59.0126 1004 idsvc (98477b08e61945f974ed9fdc4cb6bdab) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 11:54:59.0375 1004 idsvc - ok 11:55:00.0055 1004 IDSVix86 (b6662611e8fa3a71473c4a9bd0d23755) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\IPSDefs\20120427.001\IDSvix86.sys 11:55:00.0143 1004 IDSVix86 - ok 11:55:42.0620 1004 igfx (8266ae06df974e5ba047b3e9e9e70b3f) C:\Windows\system32\DRIVERS\igdkmd32.sys 11:55:49.0450 1004 igfx - ok 11:55:52.0681 1004 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys 11:55:52.0683 1004 iirsp - ok 11:55:53.0298 1004 IKEEXT (9908d8a397b76cd8d31d0d383c5773c9) C:\Windows\System32\ikeext.dll 11:55:53.0527 1004 IKEEXT - ok 11:55:53.0918 1004 IntcHdmiAddService (ab8b0206bcdff0ed03cec500fa03a32a) C:\Windows\system32\drivers\IntcHdmi.sys 11:55:53.0922 1004 IntcHdmiAddService - ok 11:55:54.0447 1004 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys 11:55:54.0471 1004 intelide - ok 11:55:54.0672 1004 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys 11:55:54.0674 1004 intelppm - ok 11:55:55.0377 1004 IntuitUpdateService (3dc635b66dd7412e1c9c3a77b8d78f25) C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe 11:55:55.0379 1004 IntuitUpdateService - ok 11:55:55.0781 1004 IntuitUpdateServiceV4 (1663a135865f0ba6e853353e98e67f2a) C:\Program Files\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe 11:55:55.0801 1004 IntuitUpdateServiceV4 - ok 11:55:56.0192 1004 IPBusEnum (9ac218c6e6105477484c6fdbe7d409a4) C:\Windows\system32\ipbusenum.dll 11:55:56.0196 1004 IPBusEnum - ok 11:55:56.0455 1004 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys 11:55:56.0458 1004 IpFilterDriver - ok 11:55:57.0092 1004 iphlpsvc (1998bd97f950680bb55f55a7244679c2) C:\Windows\System32\iphlpsvc.dll 11:55:57.0098 1004 iphlpsvc - ok 11:55:57.0115 1004 IpInIp - ok 11:55:57.0327 1004 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys 11:55:57.0330 1004 IPMIDRV - ok 11:55:57.0579 1004 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys 11:55:57.0583 1004 IPNAT - ok 11:56:00.0202 1004 iPod Service (ce004777b92dea56fe14ec900d20baa4) C:\Program Files\iPod\bin\iPodService.exe 11:56:00.0562 1004 iPod Service - ok 11:56:00.0776 1004 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys 11:56:00.0829 1004 IRENUM - ok 11:56:01.0341 1004 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys 11:56:01.0343 1004 isapnp - ok 11:56:03.0768 1004 iScsiPrt (f247eec28317f6c739c16de420097301) C:\Windows\system32\DRIVERS\msiscsi.sys 11:56:04.0041 1004 iScsiPrt - ok 11:56:04.0495 1004 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys 11:56:04.0506 1004 iteatapi - ok 11:56:04.0772 1004 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys 11:56:04.0805 1004 iteraid - ok 11:56:05.0231 1004 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys 11:56:05.0289 1004 kbdclass - ok 11:56:05.0450 1004 kbdhid (18247836959ba67e3511b62846b9c2e0) C:\Windows\system32\DRIVERS\kbdhid.sys 11:56:05.0482 1004 kbdhid - ok 11:56:05.0629 1004 KeyIso (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe 11:56:05.0632 1004 KeyIso - ok 11:56:10.0842 1004 KSecDD (2b2f1638466e8cb091400c9019cc730e) C:\Windows\system32\Drivers\ksecdd.sys 11:56:11.0445 1004 KSecDD - ok 11:56:13.0853 1004 KtmRm (8078f8f8f7a79e2e6b494523a828c585) C:\Windows\system32\msdtckrm.dll 11:56:14.0121 1004 KtmRm - ok 11:56:14.0299 1004 LanmanServer (1bf5eebfd518dd7298434d8c862f825d) C:\Windows\system32\srvsvc.dll 11:56:14.0304 1004 LanmanServer - ok 11:56:14.0987 1004 LanmanWorkstation (1db69705b695b987082c8baec0c6b34f) C:\Windows\System32\wkssvc.dll 11:56:15.0122 1004 LanmanWorkstation - ok 11:56:15.0470 1004 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys 11:56:15.0476 1004 lltdio - ok 11:56:15.0968 1004 lltdsvc (2d5a428872f1442631d0959a34abff63) C:\Windows\System32\lltdsvc.dll 11:56:16.0138 1004 lltdsvc - ok 11:56:16.0331 1004 lmhosts (35d40113e4a5b961b6ce5c5857702518) C:\Windows\System32\lmhsvc.dll 11:56:16.0360 1004 lmhosts - ok 11:56:17.0006 1004 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys 11:56:17.0069 1004 LSI_FC - ok 11:56:17.0230 1004 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys 11:56:17.0233 1004 LSI_SAS - ok 11:56:17.0652 1004 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys 11:56:17.0676 1004 LSI_SCSI - ok 11:56:17.0881 1004 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys 11:56:17.0940 1004 luafv - ok 11:56:18.0102 1004 MBAMProtector (fb097bbc1a18f044bd17bd2fccf97865) C:\Windows\system32\drivers\mbam.sys 11:56:18.0104 1004 MBAMProtector - ok 11:56:19.0794 1004 MBAMService (ba400ed640bca1eae5c727ae17c10207) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe 11:56:20.0263 1004 MBAMService - ok 11:56:20.0589 1004 McComponentHostService (f453d1e6d881e8f8717e20ccd4199e85) C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe 11:56:20.0646 1004 McComponentHostService - ok 11:56:20.0838 1004 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\Windows\system32\DRIVERS\mdmxsdk.sys 11:56:20.0839 1004 mdmxsdk - ok 11:56:21.0162 1004 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys 11:56:21.0166 1004 megasas - ok 11:56:22.0147 1004 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys 11:56:22.0296 1004 MegaSR - ok 11:56:22.0635 1004 MMCSS (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll 11:56:22.0688 1004 MMCSS - ok 11:56:22.0766 1004 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys 11:56:22.0769 1004 Modem - ok 11:56:23.0160 1004 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys 11:56:23.0225 1004 monitor - ok 11:56:23.0387 1004 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys 11:56:23.0445 1004 mouclass - ok 11:56:23.0543 1004 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys 11:56:23.0555 1004 mouhid - ok 11:56:23.0759 1004 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys 11:56:23.0762 1004 MountMgr - ok 11:56:24.0188 1004 MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe 11:56:24.0192 1004 MozillaMaintenance - ok 11:56:24.0533 1004 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys 11:56:24.0579 1004 mpio - ok 11:56:24.0848 1004 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys 11:56:24.0851 1004 mpsdrv - ok 11:56:25.0929 1004 MpsSvc (5de62c6e9108f14f6794060a9bdecaec) C:\Windows\system32\mpssvc.dll 11:56:25.0937 1004 MpsSvc - ok 11:56:26.0263 1004 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys 11:56:26.0301 1004 Mraid35x - ok 11:56:26.0498 1004 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys 11:56:26.0502 1004 MRxDAV - ok 11:56:26.0874 1004 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys 11:56:26.0878 1004 mrxsmb - ok 11:56:27.0153 1004 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys 11:56:27.0239 1004 mrxsmb10 - ok 11:56:27.0438 1004 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys 11:56:27.0442 1004 mrxsmb20 - ok 11:56:27.0723 1004 msahci (5457dcfa7c0da43522f4d9d4049c1472) C:\Windows\system32\drivers\msahci.sys 11:56:27.0742 1004 msahci - ok 11:56:27.0969 1004 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys 11:56:27.0974 1004 msdsm - ok 11:56:28.0274 1004 MSDTC (fd7520cc3a80c5fc8c48852bb24c6ded) C:\Windows\System32\msdtc.exe 11:56:28.0310 1004 MSDTC - ok 11:56:28.0565 1004 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys 11:56:28.0575 1004 Msfs - ok 11:56:28.0790 1004 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys 11:56:28.0889 1004 msisadrv - ok 11:56:29.0059 1004 MSiSCSI (85466c0757a23d9a9aecdc0755203cb2) C:\Windows\system32\iscsiexe.dll 11:56:29.0063 1004 MSiSCSI - ok 11:56:29.0133 1004 msiserver - ok 11:56:29.0225 1004 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys 11:56:29.0227 1004 MSKSSRV - ok 11:56:29.0356 1004 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys 11:56:29.0380 1004 MSPCLOCK - ok 11:56:29.0469 1004 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys 11:56:29.0488 1004 MSPQM - ok 11:56:30.0010 1004 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys 11:56:30.0104 1004 MsRPC - ok 11:56:30.0644 1004 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys 11:56:30.0723 1004 mssmbios - ok 11:56:30.0896 1004 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys 11:56:30.0899 1004 MSTEE - ok 11:56:31.0187 1004 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys 11:56:31.0189 1004 Mup - ok 11:56:31.0870 1004 N360 (e78a365cc3e0fbfc018a33dce01909f8) C:\Program Files\Norton 360\Engine\5.2.1.3\ccSvcHst.exe 11:56:31.0878 1004 N360 - ok 11:56:32.0430 1004 napagent (e4eaf0c5c1b41b5c83386cf212ca9584) C:\Windows\system32\qagentRT.dll 11:56:32.0631 1004 napagent - ok 11:56:32.0897 1004 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys 11:56:32.0905 1004 NativeWifiP - ok 11:56:33.0611 1004 NAVENG (862f55824ac81295837b0ab63f91071f) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20120427.018\NAVENG.SYS 11:56:33.0614 1004 NAVENG - ok 11:56:36.0046 1004 NAVEX15 (529d571b551cb9da44237389b936f1ae) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\Definitions\VirusDefs\20120427.018\NAVEX15.SYS 11:56:36.0924 1004 NAVEX15 - ok 11:56:38.0452 1004 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys 11:56:38.0720 1004 NDIS - ok 11:56:38.0944 1004 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys 11:56:38.0954 1004 NdisTapi - ok 11:56:39.0232 1004 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys 11:56:39.0234 1004 Ndisuio - ok 11:56:39.0997 1004 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys 11:56:40.0034 1004 NdisWan - ok 11:56:40.0541 1004 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys 11:56:40.0559 1004 NDProxy - ok 11:56:40.0849 1004 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys 11:56:40.0851 1004 NetBIOS - ok 11:56:41.0199 1004 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys 11:56:41.0204 1004 netbt - ok 11:56:41.0342 1004 Netlogon (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe 11:56:41.0343 1004 Netlogon - ok 11:56:43.0129 1004 Netman (c8052711daecc48b982434c5116ca401) C:\Windows\System32\netman.dll 11:56:43.0247 1004 Netman - ok 11:56:43.0594 1004 netprofm (2ef3bbe22e5a5acd1428ee387a0d0172) C:\Windows\System32\netprofm.dll 11:56:43.0671 1004 netprofm - ok 11:56:44.0078 1004 NetTcpPortSharing (d6c4e4a39a36029ac0813d476fbd0248) C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 11:56:44.0082 1004 NetTcpPortSharing - ok 11:56:44.0181 1004 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys 11:56:44.0183 1004 nfrd960 - ok 11:56:44.0495 1004 NlaSvc (2997b15415f9bbe05b5a4c1c85e0c6a2) C:\Windows\System32\nlasvc.dll 11:56:44.0535 1004 NlaSvc - ok 11:56:44.0734 1004 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys 11:56:44.0852 1004 Npfs - ok 11:56:44.0985 1004 nsi (8bb86f0c7eea2bded6fe095d0b4ca9bd) C:\Windows\system32\nsisvc.dll 11:56:45.0050 1004 nsi - ok 11:56:45.0209 1004 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys 11:56:45.0282 1004 nsiproxy - ok 11:56:46.0921 1004 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys 11:56:47.0714 1004 Ntfs - ok 11:56:47.0927 1004 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys 11:56:48.0003 1004 ntrigdigi - ok 11:56:48.0061 1004 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys 11:56:48.0081 1004 Null - ok 11:56:50.0813 1004 NVENETFD (1657f3fbd9061526c14ff37e79306f98) C:\Windows\system32\DRIVERS\nvm60x32.sys 11:56:51.0070 1004 NVENETFD - ok 11:56:51.0769 1004 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys 11:56:51.0824 1004 nvraid - ok 11:56:52.0171 1004 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys 11:56:52.0183 1004 nvstor - ok 11:56:52.0798 1004 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys 11:56:52.0838 1004 nv_agp - ok 11:56:52.0890 1004 NwlnkFlt - ok 11:56:52.0931 1004 NwlnkFwd - ok 11:56:54.0438 1004 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 11:56:54.0533 1004 odserv - ok 11:56:54.0845 1004 ohci1394 (be32da025a0be1878f0ee8d6d9386cd5) C:\Windows\system32\drivers\ohci1394.sys 11:56:54.0947 1004 ohci1394 - ok 11:56:55.0144 1004 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 11:56:55.0147 1004 ose - ok 11:56:56.0063 1004 p2pimsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 11:56:56.0241 1004 p2pimsvc - ok 11:56:56.0257 1004 p2psvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 11:56:56.0263 1004 p2psvc - ok 11:56:56.0705 1004 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys 11:56:56.0708 1004 Parport - ok 11:56:57.0122 1004 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys 11:56:57.0141 1004 partmgr - ok 11:56:57.0217 1004 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys 11:56:57.0219 1004 Parvdm - ok 11:56:57.0405 1004 PcaSvc (c6276ad11f4bb49b58aa1ed88537f14a) C:\Windows\System32\pcasvc.dll 11:56:57.0447 1004 PcaSvc - ok 11:56:57.0721 1004 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys 11:56:57.0725 1004 pci - ok 11:56:57.0912 1004 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys 11:56:57.0914 1004 pciide - ok 11:56:58.0008 1004 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys 11:56:58.0096 1004 pcmcia - ok 11:56:59.0029 1004 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys 11:56:59.0160 1004 PEAUTH - ok 11:57:00.0181 1004 pla (b1689df169143f57053f795390c99db3) C:\Windows\system32\pla.dll 11:57:00.0348 1004 pla - ok 11:57:01.0692 1004 PlugPlay (c5e7f8a996ec0a82d508fd9064a5569e) C:\Windows\system32\umpnpmgr.dll 11:57:01.0701 1004 PlugPlay - ok 11:57:02.0563 1004 PNRPAutoReg (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 11:57:02.0569 1004 PNRPAutoReg - ok 11:57:02.0606 1004 PNRPsvc (0c8e8e61ad1eb0b250b846712c917506) C:\Windows\system32\p2psvc.dll 11:57:02.0616 1004 PNRPsvc - ok 11:57:03.0133 1004 PolicyAgent (d0494460421a03cd5225cca0059aa146) C:\Windows\System32\ipsecsvc.dll 11:57:03.0164 1004 PolicyAgent - ok 11:57:04.0098 1004 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys 11:57:04.0101 1004 PptpMiniport - ok 11:57:04.0265 1004 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys 11:57:04.0268 1004 Processor - ok 11:57:04.0761 1004 ProfSvc (0508faa222d28835310b7bfca7a77346) C:\Windows\system32\profsvc.dll 11:57:04.0767 1004 ProfSvc - ok 11:57:04.0942 1004 ProtectedStorage (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe 11:57:04.0944 1004 ProtectedStorage - ok 11:57:05.0190 1004 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys 11:57:05.0194 1004 PSched - ok 11:57:05.0387 1004 PTUMLBUS (211ee0b7767e877eb25627a2b3721e77) C:\Windows\system32\DRIVERS\PTUMLBUS.sys 11:57:05.0427 1004 PTUMLBUS - ok 11:57:05.0616 1004 ptumlcmsvc (96b8d343794a5b9ce946f5c60b5c89ba) C:\Windows\system32\ptumlcmsvc.exe 11:57:05.0621 1004 ptumlcmsvc - ok 11:57:05.0775 1004 PTUMLCVsp (c316753c506df72b9c8fe45ba02b70c2) C:\Windows\system32\DRIVERS\PTUMLCVsp.sys 11:57:05.0867 1004 PTUMLCVsp - ok 11:57:06.0127 1004 PTUMLMdm (6d0a3cda26ddb71804202b620bba2be8) C:\Windows\system32\DRIVERS\PTUMLMdm.sys 11:57:06.0149 1004 PTUMLMdm - ok 11:57:06.0346 1004 PTUMLNET (319af7047e41e55578af8a943e8349c8) C:\Windows\system32\DRIVERS\PTUMLNET.sys 11:57:06.0434 1004 PTUMLNET - ok 11:57:06.0636 1004 PTUMLNVsp (7be6e346d2410ce3d367acbeedadae43) C:\Windows\system32\DRIVERS\PTUMLNVsp.sys 11:57:06.0641 1004 PTUMLNVsp - ok 11:57:06.0829 1004 PTUMLRMNET (b5be44271dff2fcd735ff128f9db7537) C:\Windows\system32\DRIVERS\PTUMLRMNET.sys 11:57:06.0833 1004 PTUMLRMNET - ok 11:57:07.0057 1004 PTUMLVsp (2921e65aee2b3e3ffdb7911a0c6c579f) C:\Windows\system32\DRIVERS\PTUMLVsp.sys 11:57:07.0098 1004 PTUMLVsp - ok 11:57:08.0547 1004 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys 11:57:08.0830 1004 ql2300 - ok 11:57:09.0014 1004 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys 11:57:09.0018 1004 ql40xx - ok 11:57:10.0135 1004 QWAVE (e9ecae663f47e6cb43962d18ab18890f) C:\Windows\system32\qwave.dll 11:57:10.0339 1004 QWAVE - ok 11:57:10.0560 1004 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys 11:57:10.0593 1004 QWAVEdrv - ok 11:57:10.0725 1004 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys 11:57:10.0745 1004 RasAcd - ok 11:57:11.0555 1004 RasAuto (f6a452eb4ceadbb51c9e0ee6b3ecef0f) C:\Windows\System32\rasauto.dll 11:57:11.0724 1004 RasAuto - ok 11:57:12.0395 1004 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys 11:57:12.0421 1004 Rasl2tp - ok 11:57:13.0566 1004 RasMan (75d47445d70ca6f9f894b032fbc64fcf) C:\Windows\System32\rasmans.dll 11:57:13.0751 1004 RasMan - ok 11:57:14.0214 1004 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys 11:57:14.0269 1004 RasPppoe - ok 11:57:15.0328 1004 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys 11:57:15.0434 1004 RasSstp - ok 11:57:18.0468 1004 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys 11:57:18.0558 1004 rdbss - ok 11:57:18.0790 1004 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys 11:57:18.0792 1004 RDPCDD - ok 11:57:19.0017 1004 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys 11:57:19.0023 1004 rdpdr - ok 11:57:19.0060 1004 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys 11:57:19.0148 1004 RDPENCDD - ok 11:57:19.0356 1004 RDPWD (79c6df8477250f5c54f7c5ae1d6b814e) C:\Windows\system32\drivers\RDPWD.sys 11:57:19.0365 1004 RDPWD - ok 11:57:19.0538 1004 Recovery Service for Windows (431723f23d0e065bef502389e8ffdc10) C:\Windows\SMINST\BLService.exe 11:57:19.0546 1004 Recovery Service for Windows - ok 11:57:19.0683 1004 RemoteAccess (bcdd6b4804d06b1f7ebf29e53a57ece9) C:\Windows\System32\mprdim.dll 11:57:19.0687 1004 RemoteAccess - ok 11:57:19.0899 1004 RemoteRegistry (9e6894ea18daff37b63e1005f83ae4ab) C:\Windows\system32\regsvc.dll 11:57:19.0904 1004 RemoteRegistry - ok 11:57:21.0128 1004 RichVideo (17e0bef5ca5c9ce52cc8082ac6ebc449) C:\Program Files\CyberLink\Shared Files\RichVideo.exe 11:57:21.0151 1004 RichVideo - ok 11:57:21.0213 1004 RimUsb - ok 11:57:21.0317 1004 RimVSerPort (2c4fb2e9f039287767c384e46ee91030) C:\Windows\system32\DRIVERS\RimSerial.sys 11:57:21.0320 1004 RimVSerPort - ok 11:57:21.0517 1004 ROOTMODEM (75e8a6bfa7374aba833ae92bf41ae4e6) C:\Windows\system32\Drivers\RootMdm.sys 11:57:21.0521 1004 ROOTMODEM - ok 11:57:21.0832 1004 RoxLiveShare9 - ok 11:57:21.0970 1004 RpcLocator (5123f83cbc4349d065534eeb6bbdc42b) C:\Windows\system32\locator.exe 11:57:21.0973 1004 RpcLocator - ok 11:57:22.0326 1004 RpcSs (3b5b4d53fec14f7476ca29a20cc31ac9) C:\Windows\system32\rpcss.dll 11:57:22.0340 1004 RpcSs - ok 11:57:22.0673 1004 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys 11:57:22.0675 1004 rspndr - ok 11:57:23.0002 1004 RTL8169 (125c504a34d0a2e152517e342e7e432c) C:\Windows\system32\DRIVERS\Rtlh86.sys 11:57:23.0021 1004 RTL8169 - ok 11:57:23.0153 1004 SamSs (a3e186b4b935905b829219502557314e) C:\Windows\system32\lsass.exe 11:57:23.0155 1004 SamSs - ok 11:57:23.0248 1004 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys 11:57:23.0251 1004 sbp2port - ok 11:57:23.0376 1004 SCardSvr (77b7a11a0c3d78d3386398fbbea1b632) C:\Windows\System32\SCardSvr.dll 11:57:23.0380 1004 SCardSvr - ok 11:57:23.0908 1004 Schedule (1a58069db21d05eb2ab58ee5753ebe8d) C:\Windows\system32\schedsvc.dll 11:57:24.0000 1004 Schedule - ok 11:57:24.0211 1004 SCPolicySvc (312ec3e37a0a1f2006534913e37b4423) C:\Windows\System32\certprop.dll 11:57:24.0253 1004 SCPolicySvc - ok 11:57:24.0898 1004 SDRSVC (716313d9f6b0529d03f726d5aaf6f191) C:\Windows\System32\SDRSVC.dll 11:57:24.0975 1004 SDRSVC - ok 11:57:25.0295 1004 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys 11:57:25.0297 1004 secdrv - ok 11:57:25.0444 1004 seclogon (fd5199d4d8a521005e4b5ee7fe00fa9b) C:\Windows\system32\seclogon.dll 11:57:25.0477 1004 seclogon - ok 11:57:25.0626 1004 SENS (a9bbab5759771e523f55563d6cbe140f) C:\Windows\System32\sens.dll 11:57:25.0629 1004 SENS - ok 11:57:25.0832 1004 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys 11:57:25.0849 1004 Serenum - ok 11:57:25.0972 1004 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys 11:57:26.0015 1004 Serial - ok 11:57:26.0184 1004 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys 11:57:26.0246 1004 sermouse - ok 11:57:26.0559 1004 SessionEnv (d2193326f729b163125610dbf3e17d57) C:\Windows\system32\sessenv.dll 11:57:26.0572 1004 SessionEnv - ok 11:57:26.0692 1004 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys 11:57:26.0736 1004 sffdisk - ok 11:57:26.0861 1004 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys 11:57:26.0865 1004 sffp_mmc - ok 11:57:26.0929 1004 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys 11:57:26.0962 1004 sffp_sd - ok 11:57:27.0271 1004 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys 11:57:27.0285 1004 sfloppy - ok 11:57:27.0857 1004 SharedAccess (e1499bd0ff76b1b2fbbf1af339d91165) C:\Windows\System32\ipnathlp.dll 11:57:28.0028 1004 SharedAccess - ok 11:57:28.0280 1004 ShellHWDetection (c7230fbee14437716701c15be02c27b8) C:\Windows\System32\shsvcs.dll 11:57:28.0349 1004 ShellHWDetection - ok 11:57:28.0527 1004 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys 11:57:28.0533 1004 sisagp - ok 11:57:28.0681 1004 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys 11:57:28.0683 1004 SiSRaid2 - ok 11:57:28.0756 1004 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys 11:57:28.0759 1004 SiSRaid4 - ok 11:57:33.0038 1004 slsvc (862bb4cbc05d80c5b45be430e5ef872f) C:\Windows\system32\SLsvc.exe 11:57:34.0213 1004 slsvc - ok 11:57:35.0599 1004 SLUINotify (6edc422215cd78aa8a9cde6b30abbd35) C:\Windows\system32\SLUINotify.dll 11:57:35.0622 1004 SLUINotify - ok 11:57:36.0093 1004 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys 11:57:36.0097 1004 Smb - ok 11:57:36.0287 1004 SNMPTRAP (2a146a055b4401c16ee62d18b8e2a032) C:\Windows\System32\snmptrap.exe 11:57:36.0291 1004 SNMPTRAP - ok 11:57:36.0616 1004 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys 11:57:36.0620 1004 spldr - ok 11:57:37.0210 1004 Spooler (8554097e5136c3bf9f69fe578a1b35f4) C:\Windows\System32\spoolsv.exe 11:57:37.0312 1004 Spooler - ok 11:57:38.0616 1004 SRTSP (83726cf02eced69138948083e06b6eac) C:\Windows\System32\Drivers\N360\0502010.003\SRTSP.SYS 11:57:38.0758 1004 SRTSP - ok 11:57:38.0922 1004 SRTSPX (4e7eab2e5615d39cf1f1df9c71e5e225) C:\Windows\system32\drivers\N360\0502010.003\SRTSPX.SYS 11:57:38.0925 1004 SRTSPX - ok 11:57:39.0706 1004 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys 11:57:39.0770 1004 srv - ok 11:57:40.0427 1004 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys 11:57:40.0511 1004 srv2 - ok 11:57:40.0789 1004 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys 11:57:40.0877 1004 srvnet - ok 11:57:41.0403 1004 SSDPSRV (03d50b37234967433a5ea5ba72bc0b62) C:\Windows\System32\ssdpsrv.dll 11:57:41.0412 1004 SSDPSRV - ok 11:57:41.0668 1004 SstpSvc (6f1a32e7b7b30f004d9a20afadb14944) C:\Windows\system32\sstpsvc.dll 11:57:41.0673 1004 SstpSvc - ok 11:57:41.0933 1004 StillCam (ef70b3d22b4bffda6ea851ecb063efaa) C:\Windows\system32\DRIVERS\serscan.sys 11:57:41.0937 1004 StillCam - ok 11:57:42.0108 1004 stisvc (5de7d67e49b88f5f07f3e53c4b92a352) C:\Windows\System32\wiaservc.dll 11:57:42.0124 1004 stisvc - ok 11:57:42.0255 1004 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys 11:57:42.0257 1004 swenum - ok 11:57:42.0617 1004 swprv (f21fd248040681cca1fb6c9a03aaa93d) C:\Windows\System32\swprv.dll 11:57:42.0712 1004 swprv - ok 11:57:42.0876 1004 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys 11:57:42.0939 1004 Symc8xx - ok 11:57:44.0947 1004 SymDS (9bbeb8c6258e72d62e7560e6667aad39) C:\Windows\system32\drivers\N360\0502010.003\SYMDS.SYS 11:57:44.0995 1004 SymDS - ok 11:57:51.0943 1004 SymEFA (d5c02629c02a820a7e71bca3d44294a3) C:\Windows\system32\drivers\N360\0502010.003\SYMEFA.SYS 11:57:52.0231 1004 SymEFA - ok 11:57:52.0842 1004 SymEvent (ab33c3b196197ca467cbdda717860dba) C:\Windows\system32\Drivers\SYMEVENT.SYS 11:57:52.0946 1004 SymEvent - ok 11:57:53.0762 1004 SymIRON (a73399804d5d4a8b20ba60fcf70c9f1f) C:\Windows\system32\drivers\N360\0502010.003\Ironx86.SYS 11:57:53.0887 1004 SymIRON - ok 11:57:54.0333 1004 SYMTDIv (d42a7229e333af725f1445f785e4658d) C:\Windows\System32\Drivers\N360\0502010.003\SYMTDIV.SYS 11:57:54.0343 1004 SYMTDIv - ok 11:57:54.0470 1004 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys 11:57:54.0472 1004 Sym_hi - ok 11:57:54.0558 1004 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys 11:57:54.0576 1004 Sym_u3 - ok 11:57:54.0724 1004 SynTP (00b19f27858f56181edb58b71a7c67a0) C:\Windows\system32\DRIVERS\SynTP.sys 11:57:54.0730 1004 SynTP - ok 11:57:55.0019 1004 SysMain (9a51b04e9886aa4ee90093586b0ba88d) C:\Windows\system32\sysmain.dll 11:57:55.0057 1004 SysMain - ok 11:57:55.0569 1004 TabletInputService (2dca225eae15f42c0933e998ee0231c3) C:\Windows\System32\TabSvc.dll 11:57:55.0628 1004 TabletInputService - ok 11:57:56.0034 1004 TapiSrv (d7673e4b38ce21ee54c59eeeb65e2483) C:\Windows\System32\tapisrv.dll 11:57:56.0040 1004 TapiSrv - ok 11:57:56.0266 1004 TBS (cb05822cd9cc6c688168e113c603dbe7) C:\Windows\System32\tbssvc.dll 11:57:56.0269 1004 TBS - ok 11:57:58.0722 1004 Tcpip (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys 11:57:59.0150 1004 Tcpip - ok 11:57:59.0168 1004 Tcpip6 (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys 11:57:59.0174 1004 Tcpip6 - ok 11:57:59.0224 1004 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys 11:57:59.0226 1004 tcpipreg - ok 11:57:59.0360 1004 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys 11:57:59.0400 1004 TDPIPE - ok 11:57:59.0622 1004 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys 11:57:59.0625 1004 TDTCP - ok 11:58:00.0194 1004 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys 11:58:00.0196 1004 tdx - ok 11:58:00.0555 1004 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys 11:58:00.0745 1004 TermDD - ok 11:58:03.0838 1004 TermService (bb95da09bef6e7a131bff3ba5032090d) C:\Windows\System32\termsrv.dll 11:58:04.0017 1004 TermService - ok 11:58:04.0877 1004 Themes (c7230fbee14437716701c15be02c27b8) C:\Windows\system32\shsvcs.dll 11:58:04.0882 1004 Themes - ok 11:58:05.0244 1004 THREADORDER (1076ffcffaae8385fd62dfcb25ac4708) C:\Windows\system32\mmcss.dll 11:58:05.0245 1004 THREADORDER - ok 11:58:05.0353 1004 TrkWks (ec74e77d0eb004bd3a809b5f8fb8c2ce) C:\Windows\System32\trkwks.dll 11:58:05.0357 1004 TrkWks - ok 11:58:05.0537 1004 TrustedInstaller (97d9d6a04e3ad9b6c626b9931db78dba) C:\Windows\servicing\TrustedInstaller.exe 11:58:05.0539 1004 TrustedInstaller - ok 11:58:05.0670 1004 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys 11:58:05.0671 1004 tssecsrv - ok 11:58:05.0817 1004 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys 11:58:05.0840 1004 tunmp - ok 11:58:06.0027 1004 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys 11:58:06.0029 1004 tunnel - ok 11:58:06.0256 1004 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys 11:58:06.0258 1004 uagp35 - ok 11:58:06.0534 1004 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys 11:58:06.0538 1004 udfs - ok 11:58:06.0759 1004 UI0Detect (ecef404f62863755951e09c802c94ad5) C:\Windows\system32\UI0Detect.exe 11:58:06.0763 1004 UI0Detect - ok 11:58:06.0933 1004 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys 11:58:06.0935 1004 uliagpkx - ok 11:58:07.0100 1004 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys 11:58:07.0104 1004 uliahci - ok 11:58:07.0218 1004 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys 11:58:07.0220 1004 UlSata - ok 11:58:07.0716 1004 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys 11:58:07.0736 1004 ulsata2 - ok 11:58:07.0930 1004 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys 11:58:07.0943 1004 umbus - ok 11:58:08.0428 1004 upnphost (68308183f4ae0be7bf8ecd07cb297999) C:\Windows\System32\upnphost.dll 11:58:08.0435 1004 upnphost - ok 11:58:08.0787 1004 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\Windows\system32\Drivers\usbaapl.sys 11:58:08.0789 1004 USBAAPL - ok 11:58:09.0172 1004 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys 11:58:09.0177 1004 usbccgp - ok 11:58:09.0404 1004 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys 11:58:09.0406 1004 usbcir - ok 11:58:09.0619 1004 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys 11:58:09.0623 1004 usbehci - ok 11:58:10.0343 1004 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys 11:58:10.0347 1004 usbhub - ok 11:58:10.0602 1004 usbohci (7bdb7b0e7d45ac0402d78b90789ef47c) C:\Windows\system32\DRIVERS\usbohci.sys 11:58:10.0607 1004 usbohci - ok 11:58:10.0829 1004 usbprint (b51e52acf758be00ef3a58ea452fe360) C:\Windows\system32\drivers\usbprint.sys 11:58:10.0940 1004 usbprint - ok 11:58:11.0137 1004 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS 11:58:11.0330 1004 USBSTOR - ok 11:58:11.0524 1004 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys 11:58:11.0533 1004 usbuhci - ok 11:58:11.0661 1004 UxSms (1509e705f3ac1d474c92454a5c2dd81f) C:\Windows\System32\uxsms.dll 11:58:11.0664 1004 UxSms - ok 11:58:12.0081 1004 vds (cd88d1b7776dc17a119049742ec07eb4) C:\Windows\System32\vds.exe 11:58:12.0091 1004 vds - ok 11:58:12.0182 1004 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys 11:58:12.0184 1004 vga - ok 11:58:12.0416 1004 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys 11:58:12.0479 1004 VgaSave - ok 11:58:12.0627 1004 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys 11:58:12.0629 1004 viaagp - ok 11:58:12.0862 1004 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys 11:58:12.0864 1004 ViaC7 - ok 11:58:13.0108 1004 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys 11:58:13.0109 1004 viaide - ok 11:58:13.0658 1004 Viewpoint Manager Service (5f974fde801c73952770736becde11e7) C:\Program Files\Viewpoint\Common\ViewpointService.exe 11:58:13.0659 1004 Viewpoint Manager Service - ok 11:58:14.0362 1004 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys 11:58:14.0364 1004 volmgr - ok 11:58:14.0912 1004 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys 11:58:15.0114 1004 volmgrx - ok 11:58:16.0065 1004 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys 11:58:16.0070 1004 volsnap - ok 11:58:16.0325 1004 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys 11:58:16.0328 1004 vsmraid - ok 11:58:17.0350 1004 VSS (db3d19f850c6eb32bdcb9bc0836acddb) C:\Windows\system32\vssvc.exe 11:58:17.0482 1004 VSS - ok 11:58:17.0824 1004 W32Time (96ea68b9eb310a69c25ebb0282b2b9de) C:\Windows\system32\w32time.dll 11:58:17.0916 1004 W32Time - ok 11:58:18.0478 1004 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys 11:58:18.0481 1004 WacomPen - ok 11:58:18.0600 1004 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 11:58:18.0602 1004 Wanarp - ok 11:58:18.0626 1004 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys 11:58:18.0627 1004 Wanarpv6 - ok 11:58:18.0771 1004 wcncsvc (a3cd60fd826381b49f03832590e069af) C:\Windows\System32\wcncsvc.dll 11:58:18.0782 1004 wcncsvc - ok 11:58:18.0980 1004 WcsPlugInService (11bcb7afcdd7aadacb5746f544d3a9c7) C:\Windows\System32\WcsPlugInService.dll 11:58:19.0225 1004 WcsPlugInService - ok 11:58:19.0464 1004 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys 11:58:19.0466 1004 Wd - ok 11:58:20.0349 1004 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\Windows\system32\drivers\Wdf01000.sys 11:58:20.0686 1004 Wdf01000 - ok 11:58:21.0157 1004 WdiServiceHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll 11:58:21.0161 1004 WdiServiceHost - ok 11:58:21.0214 1004 WdiSystemHost (abfc76b48bb6c96e3338d8943c5d93b5) C:\Windows\system32\wdi.dll 11:58:21.0217 1004 WdiSystemHost - ok 11:58:21.0422 1004 WebClient (04c37d8107320312fbae09926103d5e2) C:\Windows\System32\webclnt.dll 11:58:21.0430 1004 WebClient - ok 11:58:21.0656 1004 Wecsvc (ae3736e7e8892241c23e4ebbb7453b60) C:\Windows\system32\wecsvc.dll 11:58:21.0730 1004 Wecsvc - ok 11:58:22.0274 1004 wercplsupport (670ff720071ed741206d69bd995ea453) C:\Windows\System32\wercplsupport.dll 11:58:22.0294 1004 wercplsupport - ok 11:58:22.0484 1004 WerSvc (32b88481d3b326da6deb07b1d03481e7) C:\Windows\System32\WerSvc.dll 11:58:22.0489 1004 WerSvc - ok 11:58:22.0809 1004 winachsf (0acd399f5db3df1b58903cf4949ab5a8) C:\Windows\system32\DRIVERS\HSX_CNXT.sys 11:58:22.0822 1004 winachsf - ok 11:58:23.0452 1004 WinDefend (4575aa12561c5648483403541d0d7f2b) C:\Program Files\Windows Defender\mpsvc.dll 11:58:23.0485 1004 WinDefend - ok 11:58:23.0569 1004 WinHttpAutoProxySvc - ok 11:58:23.0738 1004 Winmgmt (6b2a1d0e80110e3d04e6863c6e62fd8a) C:\Windows\system32\wbem\WMIsvc.dll 11:58:23.0741 1004 Winmgmt - ok 11:58:24.0129 1004 WinRM (7cfe68bdc065e55aa5e8421607037511) C:\Windows\system32\WsmSvc.dll 11:58:24.0291 1004 WinRM - ok 11:58:24.0562 1004 Wlansvc (c008405e4feeb069e30da1d823910234) C:\Windows\System32\wlansvc.dll 11:58:24.0574 1004 Wlansvc - ok 11:58:25.0184 1004 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys 11:58:25.0185 1004 WmiAcpi - ok 11:58:25.0714 1004 wmiApSrv (43be3875207dcb62a85c8c49970b66cc) C:\Windows\system32\wbem\WmiApSrv.exe 11:58:25.0791 1004 wmiApSrv - ok 11:58:27.0098 1004 WMPNetworkSvc (3978704576a121a9204f8cc49a301a9b) C:\Program Files\Windows Media Player\wmpnetwk.exe 11:58:27.0516 1004 WMPNetworkSvc - ok 11:58:33.0122 1004 WPCSvc (cfc5a04558f5070cee3e3a7809f3ff52) C:\Windows\System32\wpcsvc.dll 11:58:33.0277 1004 WPCSvc - ok 11:58:34.0237 1004 WPDBusEnum (801fbdb89d472b3c467eb112a0fc9246) C:\Windows\system32\wpdbusenum.dll 11:58:34.0310 1004 WPDBusEnum - ok 11:58:35.0647 1004 WpdUsb (de9d36f91a4df3d911626643debf11ea) C:\Windows\system32\DRIVERS\wpdusb.sys 11:58:35.0730 1004 WpdUsb - ok 11:58:41.0790 1004 WPFFontCache_v0400 (dcf3e3edf5109ee8bc02fe6e1f045795) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe 11:58:41.0936 1004 WPFFontCache_v0400 - ok 11:58:42.0106 1004 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys 11:58:42.0107 1004 ws2ifsl - ok 11:58:42.0346 1004 wscsvc (1ca6c40261ddc0425987980d0cd2aaab) C:\Windows\System32\wscsvc.dll 11:58:42.0350 1004 wscsvc - ok 11:58:42.0580 1004 WSDPrintDevice (4422ac5ed8d4c2f0db63e71d4c069dd7) C:\Windows\system32\DRIVERS\WSDPrint.sys 11:58:42.0581 1004 WSDPrintDevice - ok 11:58:42.0700 1004 WSearch - ok 11:58:43.0134 1004 wuauserv (6298277b73c77fa99106b271a7525163) C:\Windows\system32\wuaueng.dll 11:58:43.0170 1004 wuauserv - ok 11:58:45.0322 1004 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys 11:58:45.0326 1004 WUDFRd - ok 11:58:45.0542 1004 wudfsvc (575a4190d989f64732119e4114045a4f) C:\Windows\System32\WUDFSvc.dll 11:58:45.0549 1004 wudfsvc - ok 11:58:45.0680 1004 XAudio (dab33cfa9dd24251aaa389ff36b64d4b) C:\Windows\system32\DRIVERS\xaudio.sys 11:58:45.0681 1004 XAudio - ok 11:58:45.0802 1004 XAudioService (cd5f291a1161f15896d1a4d63daff5df) C:\Windows\system32\DRIVERS\xaudio.exe 11:58:45.0926 1004 XAudioService - ok 11:58:46.0791 1004 YahooAUService (dd0042f0c3b606a6a8b92d49afb18ad6) C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe 11:58:46.0996 1004 YahooAUService - ok 11:58:47.0037 1004 MBR (0x1B8) (85d751f0e41b8e520aee8c07a8da777b) \Device\Harddisk0\DR0 11:58:47.0260 1004 \Device\Harddisk0\DR0 - ok 11:58:47.0300 1004 Boot (0x1200) (54cb154dfb7acbeb4e611a5d38cf3a01) \Device\Harddisk0\DR0\Partition0 11:58:47.0525 1004 \Device\Harddisk0\DR0\Partition0 - ok 11:58:47.0537 1004 Boot (0x1200) (94f023735298353bd163a6d0be4b3f76) \Device\Harddisk0\DR0\Partition1 11:58:47.0699 1004 \Device\Harddisk0\DR0\Partition1 - ok 11:58:47.0705 1004 ============================================================ 11:58:47.0705 1004 Scan finished 11:58:47.0705 1004 ============================================================ 11:58:47.0720 2292 Detected object count: 0 11:58:47.0720 2292 Actual detected object count: 0
. DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_31 Run by [removed] at 23:00:31 on 2012-04-29 Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1252.1.1033.18.1978.613 [GMT -4:00] . AV: Norton 360 *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: Norton 360 *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} FW: Norton 360 *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k rpcss C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\WLANExt.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Norton 360\Engine\5.2.1.3\ccSvcHst.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\ptumlcmsvc.exe C:\Windows\SMINST\BLService.exe C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\Viewpoint\Common\ViewpointService.exe C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\DRIVERS\xaudio.exe C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\Windows\system32\DllHost.exe C:\Program Files\Norton 360\Engine\5.2.1.3\ccSvcHst.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Google\Update\1.3.21.111\GoogleCrashHandler.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe C:\Windows\system32\wbem\wmiprvse.exe c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe C:\Program Files\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=83&bd=Presario&pf=cnnb uDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=83&bd=Presario&pf=cnnb mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=83&bd=Presario&pf=cnnb mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=83&bd=Presario&pf=cnnb uInternet Settings,ProxyOverride = ;*.local BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton 360\engine\5.2.1.3\coIEPlg.dll BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton 360\engine\5.2.1.3\ips\IPSBHO.DLL BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.2.4204.1700\swg.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn0\YTSingleInstance.dll TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton 360\engine\5.2.1.3\coIEPlg.dll uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun uRun: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe mRun: [SSBkgdUpdate] "c:\program files\common files\scansoft shared\ssbkgdupdate\SSBkgdupdate.exe" -Embedding -boot mRun: [PaperPort PTD] "c:\program files\scansoft\paperport\pptd40nt.exe" mRun: [IndexSearch] "c:\program files\scansoft\paperport\IndexSearch.exe" mRun: [PPort11reminder] "c:\program files\scansoft\paperport\ereg\ereg.exe" -r "c:\programdata\scansoft\paperport\11\config\ereg\Ereg.ini" mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Persistence] c:\windows\system32\igfxpers.exe mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll Trusted Zone: intuit.com\ttlc DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab TCP: DhcpNameServer = [removed] [removed] TCP: Interfaces\{59A3F057-56F5-489D-80AA-35AED98522D1} : DhcpNameServer = [removed] [removed] TCP: Interfaces\{918AD5C1-F99F-4458-8B58-81F08D990F0C} : DhcpNameServer = [removed] [removed] TCP: Interfaces\{A7D898A1-E72D-4220-B743-5E7E4CB2C068} : DhcpNameServer = [removed] [removed] Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: igfxcui - igfxdev.dll AppInit_DLLs: c:\progra~1\google\google~3\GOEC62~1.DLL . ================= FIREFOX =================== . FF - ProfilePath - c:\users\bucksnut\appdata\roaming\mozilla\firefox\profiles\uxcjiz2i.default\ FF - component: c:\program files\mozilla firefox\extensions\{ab2ce124-6272-4b12-94a9-7303c7397bd1}\components\SkypeFfComponent.dll FF - component: c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_5.1.0.29\coffplgn_2011_7_2_3\components\coFFPlgn.dll FF - component: c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_5.1.0.29\ipsffplgn\components\IPSFFPl.dll FF - component: c:\users\bucksnut\appdata\roaming\mozilla\firefox\profiles\uxcjiz2i.default\extensions\{b042753d-f57e-4e8e-a01b-7379a6d4cefb}\components\IBitCometExtension.dll FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll FF - plugin: c:\program files\google\google updater\2.4.1908.5032\npCIDetect14.dll FF - plugin: c:\program files\google\update\1.3.21.111\npGoogleUpdate3.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\java\jre6\bin\plugin2\npdeployJava1.dll FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll FF - plugin: c:\program files\microsoft silverlight\4.1.10111.0\npctrlui.dll FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll FF - plugin: c:\program files\viewpoint\viewpoint media player\npViewpoint.dll FF - plugin: c:\users\bucksnut\appdata\roaming\mozilla\plugins\npgoogletalk.dll FF - plugin: c:\users\bucksnut\appdata\roaming\mozilla\plugins\npgtpo3dautoplugin.dll FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_2_202_233.dll . —- FIREFOX POLICIES —- FF - user.js: yahoo.ytff.general.dontshowhpoffer - true ============= SERVICES / DRIVERS =============== . R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\n360\0502010.003\symds.sys [2012-4-3 340088] R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\n360\0502010.003\symefa.sys [2012-4-3 744568] R1 BHDrvx86;BHDrvx86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_5.1.0.29\definitions\bashdefs\20120413.001\BHDrvx86.sys [2012-4-19 821880] R1 IDSVix86;IDSVix86;c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_5.1.0.29\definitions\ipsdefs\20120427.001\IDSvix86.sys [2012-4-27 368248] R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\n360\0502010.003\ironx86.sys [2012-4-3 136312] R1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\system32\drivers\n360\0502010.003\symtdiv.sys [2012-4-3 331384] R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504] R2 IntuitUpdateServiceV4;Intuit Update Service v4;c:\program files\common files\intuit\update service v4\IntuitUpdateService.exe [2011-8-25 13672] R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-12-18 654408] R2 N360;Norton 360;c:\program files\norton 360\engine\5.2.1.3\ccsvchst.exe [2012-4-3 130008] R2 ptumlcmsvc;PTUML290 Connection Manager Service;c:\windows\system32\ptumlcmsvc.exe [2011-1-10 113168] R2 Recovery Service for Windows;Recovery Service for Windows;c:\windows\sminst\BLService.exe [2008-7-26 361808] R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\viewpoint\common\ViewpointService.exe [2008-11-24 24652] R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2012-2-3 106104] R3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2008-6-4 113664] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-12-18 22344] R3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\drivers\WSDPrint.sys [2008-1-20 16896] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-4-13 136176] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-14 253088] S3 Com4QLBEx;Com4QLBEx;c:\program files\hewlett-packard\hp quick launch buttons\Com4QLBEx.exe [2008-7-26 193840] S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\google\google desktop search\GoogleDesktop.exe [2010-4-13 30192] S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-4-13 136176] S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232] S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-4-25 129976] S3 PTUMLBUS;PTUML USB Composite Device Driver;c:\windows\system32\drivers\PTUMLBUS.sys [2011-1-10 59664] S3 PTUMLCVsp;PANTECH UML290 Connection Manager Port;c:\windows\system32\drivers\PTUMLCVsp.sys [2011-1-10 168208] S3 PTUMLMdm;PANTECH UML290;c:\windows\system32\drivers\PTUMLMdm.sys [2011-1-10 168208] S3 PTUMLNET;PANTECH UML290 WWAN;c:\windows\system32\drivers\PTUMLNET.sys [2011-1-10 74768] S3 PTUMLNVsp;PANTECH UML290 NMEA Port;c:\windows\system32\drivers\PTUMLNVsp.sys [2011-1-10 168848] S3 PTUMLRMNET;PANTECH UML290 RMNET Service;c:\windows\system32\drivers\PTUMLRMNET.sys [2011-1-10 60432] S3 PTUMLVsp;PANTECH UML290 Diagnostic Port;c:\windows\system32\drivers\PTUMLVsp.sys [2011-1-10 168208] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] . =============== Created Last 30 ================ . 2012-04-27 03:15:06 ——– d—–w- c:\users\bucksnut\appdata\local\ElevatedDiagnostics 2012-04-27 03:03:26 ——– d—–w- c:\windows\pss 2012-04-26 02:46:53 ——– d—–w- c:\program files\Mozilla Maintenance Service 2012-04-26 02:46:35 157352 —-a-w- c:\program files\mozilla firefox\maintenanceservice_installer.exe 2012-04-26 02:46:35 129976 —-a-w- c:\program files\mozilla firefox\maintenanceservice.exe 2012-04-14 04:43:44 418464 —-a-w- c:\windows\system32\FlashPlayerApp.exe 2012-04-11 22:19:38 5120 —-a-w- c:\windows\system32\wmi.dll 2012-04-11 22:19:37 172032 —-a-w- c:\windows\system32\wintrust.dll 2012-04-11 22:19:37 157696 —-a-w- c:\windows\system32\imagehlp.dll 2012-04-11 22:19:37 12800 —-a-w- c:\windows\system32\drivers\fs_rec.sys 2012-04-11 22:18:14 3602816 —-a-w- c:\windows\system32\ntkrnlpa.exe 2012-04-11 22:18:14 3550080 —-a-w- c:\windows\system32\ntoskrnl.exe 2012-04-11 02:25:51 2409784 —-a-w- c:\program files\windows mail\OESpamFilter.dat 2012-04-05 03:39:25 876032 —-a-w- c:\windows\system32\XpsPrint.dll 2012-04-05 03:39:22 683008 —-a-w- c:\windows\system32\d2d1.dll 2012-04-05 03:39:22 219648 —-a-w- c:\windows\system32\d3d10_1core.dll 2012-04-05 03:39:22 160768 —-a-w- c:\windows\system32\d3d10_1.dll 2012-04-05 03:39:22 1172480 —-a-w- c:\windows\system32\d3d10warp.dll 2012-04-05 03:39:22 1068544 —-a-w- c:\windows\system32\DWrite.dll 2012-04-04 16:29:59 ——– d—–w- c:\program files\Windows Portable Devices 2012-04-04 13:37:58 92672 —-a-w- c:\windows\system32\UIAnimation.dll 2012-04-04 13:37:58 1164800 —-a-w- c:\windows\system32\UIRibbonRes.dll 2012-04-04 13:37:57 3023360 —-a-w- c:\windows\system32\UIRibbon.dll 2012-04-04 13:26:42 86528 —-a-w- c:\windows\system32\iesysprep.dll 2012-04-04 13:25:13 979456 —-a-w- c:\windows\system32\MFH264Dec.dll 2012-04-04 13:24:19 519680 —-a-w- c:\windows\system32\d3d11.dll 2012-04-04 13:24:19 369664 —-a-w- c:\windows\system32\WMPhoto.dll 2012-04-04 13:24:19 252928 —-a-w- c:\windows\system32\dxdiag.exe 2012-04-04 13:24:19 195584 —-a-w- c:\windows\system32\dxdiagn.dll 2012-04-04 13:24:18 974848 —-a-w- c:\windows\system32\WindowsCodecs.dll 2012-04-04 13:24:18 321024 —-a-w- c:\windows\system32\PhotoMetadataHandler.dll 2012-04-04 13:24:18 189440 —-a-w- c:\windows\system32\WindowsCodecsExt.dll 2012-04-04 07:51:06 69632 —-a-w- c:\windows\system32\Mpeg2Data.ax 2012-04-04 07:51:06 57856 —-a-w- c:\windows\system32\MSDvbNP.ax 2012-04-04 07:51:06 293376 —-a-w- c:\windows\system32\psisdecd.dll 2012-04-04 07:51:06 217088 —-a-w- c:\windows\system32\psisrndr.ax 2012-04-04 07:51:04 23552 —-a-w- c:\windows\system32\mciseq.dll 2012-04-04 07:51:04 189952 —-a-w- c:\windows\system32\winmm.dll 2012-04-04 07:51:02 2044416 —-a-w- c:\windows\system32\win32k.sys 2012-04-04 07:51:00 1205064 —-a-w- c:\windows\system32\ntdll.dll 2012-04-04 07:50:42 429056 —-a-w- c:\windows\system32\EncDec.dll 2012-04-04 07:50:15 797696 —-a-w- c:\windows\system32\FntCache.dll 2012-04-04 07:50:14 288768 —-a-w- c:\windows\system32\XpsGdiConverter.dll 2012-04-04 07:50:05 66560 —-a-w- c:\windows\system32\packager.dll 2012-04-04 07:50:04 376320 —-a-w- c:\windows\system32\winsrv.dll 2012-04-04 07:50:03 680448 —-a-w- c:\windows\system32\msvcrt.dll 2012-04-04 07:48:53 707584 —-a-w- c:\program files\common files\system\wab32.dll 2012-04-04 07:48:01 231424 —-a-w- c:\windows\system32\msshsq.dll 2012-04-04 07:31:17 613376 —-a-w- c:\windows\system32\rdpencom.dll 2012-04-04 07:31:16 180736 —-a-w- c:\windows\system32\drivers\rdpwd.sys 2012-04-04 03:28:32 ——– d—–w- c:\windows\system32\eu-ES 2012-04-04 03:28:32 ——– d—–w- c:\windows\system32\ca-ES 2012-04-04 03:28:24 ——– d—–w- c:\windows\system32\vi-VN 2012-04-04 00:37:36 744568 —-a-r- c:\windows\system32\drivers\n360\0502010.003\symefa.sys 2012-04-04 00:37:36 331384 —-a-w- c:\windows\system32\drivers\n360\0502010.003\symtdiv.sys 2012-04-04 00:37:36 299640 —-a-w- c:\windows\system32\drivers\n360\0502010.003\symnets.sys 2012-04-04 00:37:35 516216 —-a-r- c:\windows\system32\drivers\n360\0502010.003\srtsp.sys 2012-04-04 00:37:35 50168 —-a-r- c:\windows\system32\drivers\n360\0502010.003\srtspx.sys 2012-04-04 00:37:35 340088 —-a-r- c:\windows\system32\drivers\n360\0502010.003\symds.sys 2012-04-04 00:37:34 136312 —-a-r- c:\windows\system32\drivers\n360\0502010.003\ironx86.sys 2012-04-04 00:34:57 ——– d—–w- c:\windows\system32\drivers\n360\0502010.003 . ==================== Find3M ==================== . 2012-04-27 13:58:22 70304 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-04-27 02:42:23 472808 —-a-w- c:\windows\system32\deployJava1.dll 2012-04-04 19:56:40 22344 —-a-w- c:\windows\system32\drivers\mbam.sys 2012-04-04 13:25:13 357376 —-a-w- c:\windows\system32\MFHEAACdec.dll 2012-04-04 13:24:24 4096 —-a-w- c:\windows\system32\drivers\en-us\dxgkrnl.sys.mui 2012-02-28 01:18:55 1799168 —-a-w- c:\windows\system32\jscript9.dll 2012-02-28 01:11:21 1427456 —-a-w- c:\windows\system32\inetcpl.cpl 2012-02-28 01:11:07 1127424 —-a-w- c:\windows\system32\wininet.dll 2012-02-28 01:03:16 2382848 —-a-w- c:\windows\system32\mshtml.tlb . ============= FINISH: 23:02:40.31 ===============
It would appear that you have more than one anti-virus solution on your machine. I can see both Norton 360 and McAfee Security Scan Plus installed.
Having more than one anti-virus program on your machine, even if only one is running, can cause conflicts and slowdowns in the performance of the machine.
Before continuing on, please completely uninstall one of the programs. Since Norton 360 appears to be your primary antivirus and firewall, please go to your control panel and completely uninstall McAfee Security Scan Plus. After doing so, please reboot your computer.


I see you have Malwarebytes already on your machine. Please run it by right-clicking and choosing Run as Administrator on the icon on the desktop.
  • Click on the tab labeled Update and then click on the button Check for updates.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
    [external image: Posted Image]
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected .
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.


Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.
  • Download the latest version of Java Runtime Environment (JRE) 7 update 4 and Save it to your Desktop.
  • Scroll down to where it says Java SE 7
  • Click the Download JRE button to the right.
  • Read the License Agreement then select Accept License Agreement
  • Click on the link to download Windows x86 Offline and save the file to your desktop.
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel, double-click on Add or Remove Programs and remove all older versions of Java.
  • Check (highlight) any item with Java Runtime Environment (JRE or J2SE or Java™ 6) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-7u4-windows-i586.exe to install the newest version.
  • After the install is complete, go into the Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)
    • On the General tab, under Temporary Internet Files, click the Settings button.
    • Next, click on the Delete Files button
    • There are three options in the window to clear the cache - check them ALL
      Applications and Applets
      Trace and Log Files
  • Click OK on Delete Temporary Files Window
    Note: This deletes ALL the Downloaded Applications and Applets from the CACHE. If you have any objection to doing this please omit this step
  • Click OK to leave the Temporary Files Window
  • Click OK to leave the Java Control Panel.


Update Adobe Reader
There have been updates to Adobe Reader to address security vulnerabilities. You should download the latest version from the Adobe website.



This scan make take awhile depending on how many items are on the computer. You may want to run it at a time you won't be needing the machine. It should be run from IE and I'd recommend not doing anything else while it's running.


Go here to run an online scannner from ESET.
  • Note: For browsers other than Internet Explorer, you will need to download and install esetsmartinstaller_enu.exe. Click on it and save the file to a convenient location. Double click on it to install and a new window will open.
  • Turn off the real time scanner of any existing antivirus program while performing the online scan
  • Tick the box next to YES, I accept the Terms of Use.
  • Click Start
  • When asked, allow the activex control to install
  • Click Start
  • Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.
  • Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
  • Click Scan
  • Wait for the scan to finish
  • Use notepad to open the logfile located at C:\Program Files\Eset\Eset Online Scanner\log.txt
  • Copy and paste that log as a reply to this topic and also let me know how things are now.


Please spend some time on the computer and let me know if the freezing is continuing to occur when you post the logs for Malwarebytes and ESET in your next post.
Malwarebytes Anti-Malware (PRO) 1.61.0.1400 www.malwarebytes.org Database version: v2012.04.30.08 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 bucksnut :: BUCKSNUT-PC [administrator] Protection: Enabled 4/30/2012 10:58:45 PM mbam-log-2012-04-30 (22-58-45).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 247242 Time elapsed: 25 minute(s), 9 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end)
That looks good. Did you have any trouble removing the McAfee Security Scan? Please post the ESET log when you've completed it and remember to let me know how the freezing issue is doing at this point please.
ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6583 # api_version=3.0.2 # EOSSerial=e15ab1bbc4a0974da39be0eba811c9ac # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2012-05-01 11:23:33 # local_time=2012-05-01 07:23:33 (-0500, Eastern Daylight Time) # country="United States" # lang=1033 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=3589 16777213 100 84 0 86421485 0 0 # compatibility_mode=5892 16776574 100 100 1413460 172452961 0 0 # compatibility_mode=8192 67108863 100 0 0 0 0 0 # scanned=231734 # found=0 # cleaned=0 # scan_time=26025
Given that you are still having the issues I'd like to run another tool, while we are not seeing any malware in the logs, that does not mean that something is not hiding that we cannot see:




Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
  • Double click on ComboFix.exe & follow the prompts.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Notes:
1. 1. Do not mouse-click anywhere on the screen while it is running. That may cause it to stall. In fact, I suggest you do not do anything else on the computer while Combofix is running as it can cause it to stall. It may appear at times that it isn't doing anything but it is. Just let it run. It may also reboot the machine as a part of what it is doing and that is not unusual. (If your computer requires a login then you WILL need to fill in the login/password for it to continue. If your computer does not have a login then it will continue on it's own..) Then, just sit tight until it finishes. Sometimes it takes 10 minutes, sometimes it takes an hour. Just be patient until the log pops up. If it takes more than an hour and doesn't appear to be doing anything, you can stop it and come back and let me know.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI