Spyware / Malware / Virus Removal

S.M.A.R.T repair [Solved]

36 min read

Looking for the outcome? Ask AI

liaml Topic Starter

Post #1May 20, 2012, 2:56 PM UTC last edited May 20, 2012, 3:12 PM UTC

Icons on my desktop started disappearing, as well as all the icons in the start menu except for downloads. Then heaps of error boxes popped up on the screen then the computer shut itself down. I then turned it back on, the wallpaper was and still is solid black, and can't be changed. Then a program called smart repair appeared on my computer and 'analyzed the harddisk' and said it was in critical condition and that I had to buy a licence for it to fix it. I googed the program and found out it was a fake antivirus program. I then restarted the computer in safemode with networking and downloaded the trendmicro fake antivirus removal software (svchost.exe). I then took the computer out of safemode and ran the program. It scanned for around 30 mins and cleaned up some processes and files. Now I am not seeing all the warning boxes, or the gui for smart repair and all my desktop icons are back. But, the wallpaper is still black and cannot be changed and the icons on the start menu are still missing. And now my antivirus program (trend micro) pops up a small window in the bottom right hand side of the screen saying file removed… has been deleted for your protecton… File name: 80000032.@ This appears every few minutes or so. And the taskbar is wider than it usually is. But apart from all this, svchost.exe from trend micro (recommended by a member of the trendmicro staff from tend micro forums) has worked well.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:41:09 AM, on 21/05/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:windowssystem32taskhost.exe
C:windowssystem32Dwm.exe
C:windowsExplorer.EXE
C:WindowsSystem32igfxtray.exe
C:WindowsSystem32hkcmd.exe
C:WindowsSystem32igfxpers.exe
C:Program FilesTOSHIBAPower SaverTPwrMain.exe
C:Program FilesTOSHIBAFlashCardsTCrdMain.exe
C:windowssystem32igfxsrvc.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesTOSHIBABluetooth Toshiba StackItSecMng.exe
C:Program FilesSynapticsSynTPSynTPHelper.exe
C:Program FilesTOSHIBABulletinBoardTosNcCore.exe
C:Program FilesTOSHIBAReelTimeTosReelTimeMonitor.exe
C:Program FilesAsk.comUpdaterUpdater.exe
C:Program FilesCommon FilesJavaJava Updatejusched.exe
C:Program FilesCommon FilesBSDAppUpdaterBSDChecker.exe
C:Program FilesiTunesiTunesHelper.exe
C:windowssystem32igfxext.exe
C:Program FilesDYMODYMO Label SoftwareDLSService.exe
C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe
C:Program FilesDivXDivX UpdateDivXUpdate.exe
C:Program FilesTrend MicroUniClientUiFrmWrkuiSeAgnt.exe
C:Program FilesBOINCboinctray.exe
C:Program FilesSteamSteam.exe
C:Program FilesManyCamBinManyCam.exe
C:WindowsSystem32StikyNot.exe
C:windowssystem32taskeng.exe
C:Program FilesTOSHIBAConfigFreeNDSTray.exe
C:UsersLiamAppDataLocalGoogleChromeApplication19.0.1084.46chrome_frame_
helper.exe
C:Program FilesTOSHIBAConfigFreeCFSwMgr.exe
C:Program FilesNorton PC CheckupEngine2.0.3.202ccSvcHst.exe
C:Program FilesTOSHIBATOSHIBA HDD SSD AlertTosSENotify.exe
C:Program FilesCommon FilesJavaJava Updatejucheck.exe
C:windowssystem32wuauclt.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesAnt.comIE add-onantmaintainer.exe
C:Program FilesAlexa ToolbarAlexaToolbarSSB.10.0.dll
C:Program FilesInternet Exploreriexplore.exe
C:UsersLiamDesktopHiJackThis.exe
C:windowssystem32SearchFilterHost.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://toshiba.msn.com
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:Program FilesAsk.comGenericAskToolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:Program FilesTrend MicroAMSPModule200042.0.13136.8.1078TmIEPlg.dll
O2 - BHO: Increase performance and video formats for your HTML5 - {326E768D-4182-46FD-9C16-1449A49795F4} - C:Program FilesDivXDivX Plus Web PlayerieDivXHTML5DivXHTML5.dll
O2 - BHO: Ant.com browser helper (video detector) - {346FDE31-DFF9-418A-90C8-BA31DC9FF2EF} - C:Program FilesAnt.comIE add-ondownload.dll
O2 - BHO: Trend Micro Toolbar BHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:Program FilesTrend MicroTitaniumUIFrameworkToolbarIE.dll
O2 - BHO: StartNow Toolbar Helper - {6E13D095-45C3-4271-9475-F3B48227DD9F} - C:Program FilesStartNow ToolbarToolbar32.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:Program FilesWindows LiveCompanioncompanioncore.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:PROGRA~1MIF5BA~1Office14URLREDIR.DLL
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:Program FilesTrend MicroAMSPModule200027.1.11027.1.1102TmBpIe32.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:Program FilesAsk.comGenericAskToolbar.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6binjp2ssv.dll
O2 - BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:Program FilesTOSHIBATOSHIBA Media Controller Plug-inTOSHIBAMediaControllerIE.dll
O2 - BHO: Yontoo Layer (Drop Down Deals)s - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:Program FilesYontoo Layers Runtime (Drop Down Deals)YontooIEClient.dll
O3 - Toolbar: Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:Program FilesTrend MicroTitaniumUIFrameworkToolbarIE.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:Program FilesAsk.comGenericAskToolbar.dll
O3 - Toolbar: StartNow Toolbar - {5911488E-9D1E-40ec-8CBB-06B231CC153F} - C:Program FilesStartNow ToolbarToolbar32.dll
O3 - Toolbar: Ant.com Video Downloader toolbar - {2E924F4F-67F0-4BD8-9560-49F468E843D2} - C:Program FilesAnt.comIE add-onanttoolbar.dll
O3 - Toolbar: Alexa Toolbar - {EA582743-9076-4178-9AA6-7393FDF4D5CE} - C:Program FilesAlexa ToolbarAlexaToolbar.10.0.dll
O4 - HKLM..Run: [IgfxTray] C:windowssystem32igfxtray.exe
O4 - HKLM..Run: [HotKeysCmds] C:windowssystem32hkcmd.exe
O4 - HKLM..Run: [Persistence] C:windowssystem32igfxpers.exe
O4 - HKLM..Run: [TPwrMain] %ProgramFiles%TOSHIBAPower SaverTPwrMain.EXE
O4 - HKLM..Run: [TCrdMain] %ProgramFiles%TOSHIBAFlashCardsTCrdMain.exe
O4 - HKLM..Run: [SmartAudio] C:Program FilesCONEXANTSAIISAIICpl.exe /t
O4 - HKLM..Run: [SynTPEnh] %ProgramFiles%SynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [ITSecMng] %ProgramFiles%TOSHIBABluetooth Toshiba StackItSecMng.exe /START
O4 - HKLM..Run: [TosSENotify] C:Program FilesTOSHIBATOSHIBA HDD SSD AlertTosWaitSrv.exe
O4 - HKLM..Run: [NortonOnlineBackup] C:Program FilesSymantecNorton Online BackupNOBuClient.exe
O4 - HKLM..Run: [TosVolRegulator] C:Program FilesTOSHIBATosVolRegulatorTosVolRegulator.exe
O4 - HKLM..Run: [TosNC] %ProgramFiles%ToshibaBulletinBoardTosNcCore.exe
O4 - HKLM..Run: [TosReelTimeMonitor] %ProgramFiles%TOSHIBAReelTimeTosReelTimeMonitor.exe
O4 - HKLM..Run: [Trend Micro Titanium] "C:Program FilesTrend MicroTitaniumUIFrameworkuiWinMgr.exe" -set Silent "1" SplashURL ""
O4 - HKLM..Run: [ApnUpdater] "C:Program FilesAsk.comUpdaterUpdater.exe"
O4 - HKLM..Run: [APSDaemon] "C:Program FilesCommon FilesAppleApple Application SupportAPSDaemon.exe"
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesCommon FilesJavaJava Updatejusched.exe"
O4 - HKLM..Run: [BSDAppUpdater] C:Program FilesCommon FilesBSDAppUpdaterBSDChecker.exe
O4 - HKLM..Run: [iTunesHelper] "C:Program FilesiTunesiTunesHelper.exe"
O4 - HKLM..Run: [DLSService] "C:Program FilesDYMODYMO Label SoftwareDLSService.exe"
O4 - HKLM..Run: [Talk] "C:Program FilesNCH SoftwareTalktalk.exe" -logon
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 9.0ReaderReader_sl.exe"
O4 - HKLM..Run: [Adobe ARM] "C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe"
O4 - HKLM..Run: [Trend Micro Client Framework] "C:Program FilesTrend MicroUniClientUiFrmWrkUIWatchDog.exe"
O4 - HKLM..Run: [DivXUpdate] "C:Program FilesDivXDivX UpdateDivXUpdate.exe" /CHECKNOW
O4 - HKLM..Run: [boincmgr] "C:Program FilesBOINCboincmgr.exe" /a /s
O4 - HKLM..Run: [boinctray] "C:Program FilesBOINCboinctray.exe"
O4 - HKCU..Run: [Steam] "C:Program FilesSteamSteam.exe" -silent
O4 - HKCU..Run: [Facebook Update] "C:UsersLiamAppDataLocalFacebookUpdateFacebookUpdate.exe" /c /nocrashserver
O4 - HKCU..Run: [Google Update] "C:UsersLiamAppDataLocalGoogleUpdateGoogleUpdate.exe" /c
O4 - HKCU..Run: [ManyCam] "C:Program FilesManyCamBinManyCam.exe" /silent
O4 - HKCU..Run: [Optimizer Pro] C:Program FilesOptimizer ProOptProLauncher.exe
O4 - HKCU..Run: [RESTART_STICKY_NOTES] C:WindowsSystem32StikyNot.exe
O4 - HKCU..Run: [ChromeFrameHelper] "C:UsersLiamAppDataLocalGoogleChromeApplication19.0.1084.46chrome_f
rame_helper.exe" –startup
O4 - HKCU..Run: [cecaeadcaffcdct] "C:ProgramDatacecaeadcaffcdct.exe"
O4 - HKCU..Run: [lWJuExPgDuPCqd.exe] C:ProgramDatalWJuExPgDuPCqd.exe
O4 - HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-19..RunOnce: [mctadmin] C:WindowsSystem32mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUSS-1-5-20..RunOnce: [mctadmin] C:WindowsSystem32mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: DesktopVideoPlayer.lnk = C:UsersLiamAppDataLocalvghdbinvghd.exe
O4 - Startup: Dropbox.lnk = C:UsersLiamAppDataRoamingDropboxbinDropbox.exe
O4 - Startup: Facebook Messenger.lnk = C:UsersLiamAppDataLocalFacebookMessenger2.1.4520.0FacebookMessenger.exe
O4 - Startup: OneNote 2010 Screen Clipper and Launcher.lnk = C:Program FilesMicrosoft OfficeOffice14ONENOTEM.EXE
O8 - Extra context menu item: Add to TOSHIBA Bulletin Board - res://C:Program FilesTOSHIBABulletinBoardTosBBCom.dll/1000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MIF5BA~1Office14EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:PROGRA~1MIF5BA~1Office14ONBttnIE.dll/105
O9 - Extra button: @C:Program FilesWindows LiveCompanioncompanionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:Program FilesWindows LiveCompanioncompanioncore.dll
O9 - Extra button: @C:Program FilesWindows LiveWriterWindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:Program FilesWindows LiveWriterWindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:Program FilesMicrosoft OfficeOffice14ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:Program FilesMicrosoft OfficeOffice14ONBttnIE.dll
O9 - Extra button: Download videos by Ant.com - {70AF6C9F-0818-4cf7-924A-BBDBB24211D3} - C:Program FilesAnt.comIE add-ondownload.dll
O9 - Extra button: Add to Wish List - {76c5fb99-dd0a-4186-9e75-65d1bf3da283} - C:Program FilesAmazonAdd to Wish List IE Extensionrun.htm
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:Program FilesMicrosoft OfficeOffice14ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:Program FilesMicrosoft OfficeOffice14ONBttnIELinkedNotes.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O9 - Extra button: @C:Program FilesTOSHIBABulletinBoardTosNcUi.dll,-229 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:Program FilesTOSHIBABulletinBoardTosBBCom.dll
O9 - Extra 'Tools' menuitem: @C:Program FilesTOSHIBABulletinBoardTosNcUi.dll,-228 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:Program FilesTOSHIBABulletinBoardTosBBCom.dll
O10 - Unknown file in Winsock LSP: c:program filescommon filesmicrosoft sharedwindows livewlidnsp.dll
O10 - Unknown file in Winsock LSP: c:program filescommon filesmicrosoft sharedwindows livewlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O18 - Protocol: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:UsersLiamAppDataLocalGoogleChromeApplication19.0.1084.46npchrome_fram
e.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:Program FilesTrend MicroAMSPModule200027.1.11027.1.1102TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:Program FilesTrend MicroAMSPModule200042.0.13136.8.1078TmIEPlg.dll
O18 - Protocol: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:Program FilesTrend MicroTitaniumUIFrameworkToolbarIE.dll
O18 - Protocol: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:Program FilesTrend MicroTitaniumUIFrameworkProToolbarIMRatingActiveX.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:Program FilesWindows LivePhoto GalleryAlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:Program FilesCommon FilesMicrosoft SharedOFFICE14MSOXMLMF.DLL
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:Program FilesTrend MicroAMSPcoreServiceShell.exe
O23 - Service: Ant Toolbar updater service (AntUpdaterService) - Ant.com - C:Program FilesAnt.comIE add-onAntUpdaterService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) - TOSHIBA CORPORATION - C:Program FilesTOSHIBAConfigFreeCFIWmxSvcs.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:Program FilesTOSHIBAConfigFreeCFSvcs.exe
O23 - Service: DYMO PnP Service (DymoPnpService) - Unknown owner - C:Program FilesDYMODYMO Label SoftwareDymoPnpService.exe (file missing)
O23 - Service: Express Accounts (ExpressAccountsService) - Unknown owner - C:Program FilesNCH SoftwareExpressAccountsexpressaccounts.exe
O23 - Service: Express Invoice (ExpressInvoiceService) - Unknown owner - C:Program FilesNCH SoftwareExpressInvoiceexpressinvoice.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:Program FilesTOSHIBA GamesTOSHIBA Game ConsoleGameConsoleService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1150Intel 32IDriverT.exe
O23 - Service: Inventoria Stock Manager (InventoriaService) - Unknown owner - C:Program FilesNCH SoftwareInventoriainventoria.exe
O23 - Service: iPod Service - Apple Inc. - C:Program FilesiPodbiniPodService.exe
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:Program FilesIntelIntel® Management Engine ComponentsLMSLMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:Program FilesMcAfee Security Scan2.0.181McCHSvc.exe
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:Program FilesSymantecNorton Online BackupNOBuAgent.exe
O23 - Service: Norton PC Checkup Application Launcher - Symantec Corporation - C:Program FilesNorton PC CheckupEngine2.0.3.202SymcPCCULaunchSvc.exe
O23 - Service: Common Client Job Manager Service (PCCUJobMgr) - Symantec Corporation - C:Program FilesNorton PC CheckupEngine2.0.3.202ccSvcHst.exe
O23 - Service: Steam Client Service - Valve Corporation - C:Program FilesCommon FilesSteamSteamService.exe
O23 - Service: TMachInfo - TOSHIBA Corporation - C:Program FilesTOSHIBATOSHIBA Service StationTMachInfo.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:windowssystem32TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:Program FilesTOSHIBAPower SaverTosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:Program FilesToshibaBluetooth Toshiba StackTosBtSrv.exe
O23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:Program FilesTOSHIBATOSHIBA HDD SSD AlertTosSmartSrv.exe
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:Program FilesIntelIntel® Management Engine ComponentsUNSUNS.exe
O23 - Service: Updater Service for StartNow Toolbar - Unknown owner - C:Program FilesStartNow ToolbarToolbarUpdaterService.exe
O23 - Service: WSWNA3100 - Unknown owner - C:Program FilesNETGEARWNA3100WifiSvc.exe

–
End of file - 18258 bytes

Oh, and if a virus called optimizer pro appears in there as well, that is an unrelated problem, so any help with that would be appreciated as well.

Satchfan

Post #2May 20, 2012, 4:34 PM UTC

Hello liaml and welcome to the WTT forum.

My name is Satchfan and I would be glad to help you with your computer problem.

Please DO NOT RUN ANY TEMPORARY FILE CLEANERS or you will not get your files/folders back as they have been hidden in a temporary folder.

Please read the following guidelines which will help to make cleaning your machine easier:

please follow all instructions in the order posted
please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear
all logs/reports, etc. must be posted in Notepad. Please ensure that word wrap is unchecked. In Notepad click Format, uncheck Word wrap if it is checked
if you don't understand something, please don't hesitate to ask for clarification before proceeding
the fixes are specific to your problem and should only be used for this issue on this machine.
please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!

IMPORTANT:

Please DO NOT install/uninstall any programs unless asked to.
Please DO NOT run any scans other than those requested

I am looking at your log now and will reply shortly with instructions.

Satchfan

Satchfan

Post #3May 20, 2012, 4:41 PM UTC

Hello again liaml

Run HijackThis

Open HijackThis and click Do a system scan only.

Place a check mark next to:

O4 - HKCU\..\Run: [cecaeadcaffcdct] "C:\ProgramData\cecaeadcaffcdct.exe"
O4 - HKCU\..\Run: [lWJuExPgDuPCqd.exe] C:\ProgramData\lWJuExPgDuPCqd.exe

Close all windows except for HijackThis and click Fix checked.

===================================================

Run Unhide

Download Unhide.exe

Once the program has been downloaded, double-click on the Unhide.exe icon on your desktop and allow the program to run. This program will remove the +H, or hidden, attribute from all the files on your hard drives. If there are any files that were purposely hidden by you, you will need to hide them again after this tool is run.

===================================================

Download and run OTL

download OTL to your desktop.
double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
click Scan all users.
under Custom Scan paste this in

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
consrv.dll
/md5stop
%systemroot%\*. /rp /s
DRIVES
CREATERESTOREPOINT
click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan won’t take long.
when the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
you may need two posts to fit them both in.

===================================================

Run aswMBR

download aswMBR.exe to your desktop.
double click the aswMBR.exe to run it
if asked, accept the AVAST virus definition download
click the "Scan" button to start scan
on completion of the scan click Save log, save it to your desktop and post in your next reply

Logs to include with next post:

OTL.txt
Extras.txt
aswMBR log

Thanks

Satchfan

liaml

Post #4May 21, 2012, 2:19 AM UTC

Thanks for your help! How long should Unhide run for, it has been going for over 30 minutes. Is this normal?

liaml

Post #5May 21, 2012, 2:22 AM UTC

Nevermind, as soon as I posted that it finished. I will now continue with the rest of your instructions. Thanks again!

liaml

Post #6May 21, 2012, 2:36 AM UTC last edited May 21, 2012, 4:29 AM UTC

OTL files:

OTL logfile created on: 5/21/2012 12:25:32 PM - Run 1
OTL by OldTimer - Version 3.2.43.1 Folder = C:\Users\Liam\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

2.70 Gb Total Physical Memory | 1.37 Gb Available Physical Memory | 50.81% Memory free
5.40 Gb Paging File | 3.94 Gb Available in Paging File | 72.98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 455.03 Gb Total Space | 199.08 Gb Free Space | 43.75% Space Free | Partition Type: NTFS

Computer Name: LIAM-PC | User Name: Liam | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/05/21 12:22:37 | 000,595,968 | —- | M] (OldTimer Tools) – C:\Users\Liam\Desktop\OTL.exe
PRC - [2012/05/09 13:03:31 | 000,096,752 | —- | M] (Google Inc.) – C:\Users\Liam\AppData\Local\Google\Chrome\Application\19.0.1084.46\chrome_frame_helper.exe
PRC - [2012/04/04 12:05:50 | 000,070,832 | —- | M] (Space Sciences Laboratory) – C:\Program Files\BOINC\boinctray.exe
PRC - [2012/02/27 23:44:06 | 000,133,424 | —- | M] (Trend Micro Inc.) – C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe
PRC - [2012/01/03 15:31:34 | 001,391,272 | —- | M] (Ask) – C:\Program Files\Ask.com\Updater\Updater.exe
PRC - [2011/12/12 14:33:46 | 001,760,328 | —- | M] (ManyCam LLC) – C:\Program Files\ManyCam\Bin\ManyCam.exe
PRC - [2011/11/15 18:05:38 | 001,660,232 | —- | M] (Bootstrap Software Development) – C:\Program Files\Common Files\BSD\AppUpdater\BSDChecker.exe
PRC - [2011/10/26 00:59:16 | 000,244,960 | —- | M] () – C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe
PRC - [2011/10/21 23:54:32 | 001,242,448 | —- | M] (Valve Corporation) – C:\Program Files\Steam\Steam.exe
PRC - [2011/07/29 09:08:12 | 001,259,376 | —- | M] () – C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2011/06/29 12:25:00 | 003,179,544 | —- | M] (Ant.com) – C:\Program Files\Ant.com\IE add-on\AntMaintainer.exe
PRC - [2011/06/24 14:22:20 | 000,271,360 | —- | M] (Microsoft Corporation) – C:\Windows\System32\conhost.exe
PRC - [2011/06/09 12:06:06 | 000,507,624 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\Common Files\Java\Java Update\jucheck.exe
PRC - [2011/04/07 06:48:56 | 000,156,888 | —- | M] () – C:\Program Files\Alexa Toolbar\AlexaToolbarSSB.10.0.dll
PRC - [2011/03/03 08:39:06 | 000,468,904 | —- | M] (TOSHIBA Corporation) – C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
PRC - [2011/03/03 03:28:40 | 000,521,640 | —- | M] (TOSHIBA Corporation) – C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
PRC - [2011/02/25 15:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) – C:\Windows\explorer.exe
PRC - [2011/02/02 06:20:48 | 002,656,280 | —- | M] (Intel Corporation) – C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2011/02/02 06:20:46 | 000,326,168 | —- | M] (Intel Corporation) – C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2010/12/16 08:21:44 | 000,844,152 | —- | M] (TOSHIBA Corporation) – C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
PRC - [2010/12/15 10:53:34 | 000,031,648 | —- | M] (TOSHIBA Corporation) – C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
PRC - [2010/12/10 10:43:20 | 000,468,392 | —- | M] (TOSHIBA Corporation) – C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
PRC - [2010/12/09 08:36:08 | 000,112,032 | —- | M] (TOSHIBA Corporation) – C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
PRC - [2010/12/09 08:35:36 | 001,021,344 | —- | M] (TOSHIBA Corporation) – C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
PRC - [2010/12/04 07:57:16 | 000,304,560 | —- | M] (TOSHIBA CORPORATION) – C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
PRC - [2010/11/21 07:29:19 | 000,049,152 | —- | M] (Microsoft Corporation) – C:\Windows\System32\taskhost.exe
PRC - [2010/10/21 07:40:00 | 000,128,416 | —- | M] (TOSHIBA Corporation) – C:\Windows\System32\TODDSrv.exe
PRC - [2010/08/26 16:48:00 | 000,285,152 | —- | M] () – C:\Program Files\NETGEAR\WNA3100\WifiSvc.exe
PRC - [2010/05/11 13:53:16 | 000,055,808 | —- | M] (Sanford, L.P.) – C:\Program Files\DYMO\DYMO Label Software\DLSService.exe
PRC - [2010/05/04 15:47:18 | 002,044,248 | —- | M] (Symantec Corporation) – C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe
PRC - [2010/02/03 09:35:21 | 000,103,792 | R— | M] (Symantec Corporation) – C:\Program Files\Norton PC Checkup\Engine\2.0.3.202\SymcPCCULaunchSvc.exe
PRC - [2010/01/29 09:44:24 | 000,185,712 | —- | M] (TOSHIBA CORPORATION) – C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe
PRC - [2009/08/25 08:49:41 | 000,126,392 | R— | M] (Symantec Corporation) – C:\Program Files\Norton PC Checkup\Engine\2.0.3.202\ccSvcHst.exe
PRC - [2009/07/29 13:26:42 | 000,062,848 | —- | M] (TOSHIBA CORPORATION) – C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
PRC - [2009/07/23 06:40:00 | 000,083,336 | —- | M] (TOSHIBA CORPORATION) – C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe
PRC - [2009/07/14 11:14:28 | 000,015,360 | —- | M] (Microsoft Corporation) – C:\Windows\System32\PING.EXE
PRC - [2009/03/11 11:51:20 | 000,046,448 | —- | M] (TOSHIBA CORPORATION) – C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

========== Modules (No Company Name) ==========

MOD - [2012/05/19 21:12:24 | 020,313,384 | —- | M] () – C:\Program Files\Steam\bin\libcef.dll
MOD - [2012/05/19 21:12:23 | 001,099,576 | —- | M] () – C:\Program Files\Steam\bin\avcodec-53.dll
MOD - [2012/05/19 21:12:23 | 000,895,312 | —- | M] () – C:\Program Files\Steam\bin\chromehtml.dll
MOD - [2012/05/19 21:12:23 | 000,190,776 | —- | M] () – C:\Program Files\Steam\bin\avformat-53.dll
MOD - [2012/05/19 21:12:23 | 000,123,192 | —- | M] () – C:\Program Files\Steam\bin\avutil-51.dll
MOD - [2012/05/12 20:13:14 | 011,492,864 | —- | M] () – C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2011/12/12 14:33:52 | 000,498,760 | —- | M] () – C:\Program Files\ManyCam\Bin\cximagecrt.dll
MOD - [2011/12/12 14:33:48 | 000,123,976 | —- | M] () – C:\Program Files\ManyCam\Bin\CrashRpt.dll
MOD - [2011/11/25 11:59:01 | 000,166,912 | —- | M] () – C:\Program Files\WinRAR\RarExt.dll
MOD - [2011/09/27 06:23:00 | 000,087,912 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/09/27 06:22:40 | 001,242,472 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/07/29 09:09:42 | 000,096,112 | —- | M] () – C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011/07/29 09:08:12 | 001,259,376 | —- | M] () – C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2011/04/07 06:48:56 | 000,156,888 | —- | M] () – C:\Program Files\Alexa Toolbar\AlexaToolbarSSB.10.0.dll
MOD - [2011/04/07 06:48:56 | 000,048,856 | —- | M] () – C:\Program Files\Alexa Toolbar\AlxSSBPS.dll
MOD - [2011/04/05 12:18:54 | 000,094,208 | —- | M] () – C:\Windows\System32\IccLibDll.dll
MOD - [2010/12/09 08:35:12 | 000,079,264 | —- | M] () – C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll
MOD - [2010/11/21 07:29:12 | 000,232,448 | —- | M] () – \\?\globalroot\systemroot\system32\mswsock.DLL
MOD - [2010/11/21 07:29:12 | 000,232,448 | —- | M] () – \\.\globalroot\systemroot\system32\mswsock.dll
MOD - [2010/11/19 10:18:34 | 011,205,120 | —- | M] () – C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] – C:\Program Files\DYMO\DYMO Label Software\DymoPnpService.exe – (DymoPnpService)
SRV - File not found [Auto | Stopped] – C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe – (Amsp)
SRV - [2012/05/19 21:12:24 | 000,529,232 | —- | M] (Valve Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Steam\SteamService.exe – (Steam Client Service)
SRV - [2012/02/04 15:18:04 | 001,987,588 | —- | M] (NCH Software) [On_Demand | Stopped] – C:\Program Files\NCH Software\ExpressInvoice\expressinvoice.exe – (ExpressInvoiceService)
SRV - [2012/02/04 15:17:51 | 002,985,988 | —- | M] (NCH Software) [On_Demand | Stopped] – C:\Program Files\NCH Software\ExpressAccounts\expressaccounts.exe – (ExpressAccountsService)
SRV - [2012/02/04 15:17:12 | 001,511,428 | —- | M] (NCH Software) [On_Demand | Stopped] – C:\Program Files\NCH Software\Inventoria\inventoria.exe – (InventoriaService)
SRV - [2011/10/26 00:59:16 | 000,244,960 | —- | M] () [Auto | Running] – C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe – (Updater Service for StartNow Toolbar)
SRV - [2011/10/10 01:23:23 | 001,343,400 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\Wat\WatAdminSvc.exe – (WatAdminSvc)
SRV - [2011/06/29 12:26:06 | 000,520,216 | —- | M] (Ant.com) [Auto | Stopped] – C:\Program Files\Ant.com\IE add-on\AntUpdaterService.exe – (AntUpdaterService)
SRV - [2011/02/02 06:20:48 | 002,656,280 | —- | M] (Intel Corporation) [Auto | Running] – C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe – (UNS) Intel®
SRV - [2011/02/02 06:20:46 | 000,326,168 | —- | M] (Intel Corporation) [Auto | Running] – C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe – (LMS) Intel®
SRV - [2010/12/10 10:43:20 | 000,468,392 | —- | M] (TOSHIBA Corporation) [Auto | Running] – C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe – (TosCoSrv)
SRV - [2010/12/09 08:36:08 | 000,112,032 | —- | M] (TOSHIBA Corporation) [On_Demand | Running] – C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe – (TOSHIBA HDD SSD Alert Service)
SRV - [2010/11/30 07:58:30 | 000,054,136 | —- | M] (TOSHIBA Corporation) [On_Demand | Stopped] – C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe – (TMachInfo)
SRV - [2010/10/21 07:40:00 | 000,128,416 | —- | M] (TOSHIBA Corporation) [Auto | Running] – C:\Windows\System32\TODDSrv.exe – (TODDSrv)
SRV - [2010/08/26 16:48:00 | 000,285,152 | —- | M] () [Auto | Running] – C:\Program Files\NETGEAR\WNA3100\WifiSvc.exe – (WSWNA3100)
SRV - [2010/05/04 15:47:18 | 002,044,248 | —- | M] (Symantec Corporation) [Auto | Running] – C:\Program Files\Symantec\Norton Online Backup\NOBuAgent.exe – (NOBU)
SRV - [2010/04/13 03:46:00 | 000,152,944 | —- | M] (TOSHIBA CORPORATION) [On_Demand | Stopped] – C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe – (TOSHIBA Bluetooth Service)
SRV - [2010/04/04 09:01:24 | 000,246,520 | —- | M] (WildTangent, Inc.) [On_Demand | Stopped] – C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe – (GameConsoleService)
SRV - [2010/02/03 09:35:21 | 000,103,792 | R— | M] (Symantec Corporation) [Auto | Running] – C:\Program Files\Norton PC Checkup\Engine\2.0.3.202\SymcPCCULaunchSvc.exe – (Norton PC Checkup Application Launcher)
SRV - [2010/01/29 09:44:24 | 000,185,712 | —- | M] (TOSHIBA CORPORATION) [Auto | Running] – C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe – (cfWiMAXService)
SRV - [2010/01/15 22:49:20 | 000,227,232 | —- | M] (McAfee, Inc.) [On_Demand | Stopped] – C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe – (McComponentHostService)
SRV - [2009/08/25 08:49:41 | 000,126,392 | R— | M] (Symantec Corporation) [Auto | Running] – C:\Program Files\Norton PC Checkup\Engine\2.0.3.202\ccSvcHst.exe – (PCCUJobMgr)
SRV - [2009/07/14 11:16:13 | 000,025,088 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\sensrsvc.dll – (SensrSvc)
SRV - [2009/03/11 11:51:20 | 000,046,448 | —- | M] (TOSHIBA CORPORATION) [Auto | Running] – C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe – (ConfigFree Service)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] – C:\windows\system32\drivers\EagleXNt.sys – (EagleXNt)
DRV - [2011/10/08 18:20:56 | 000,205,072 | —- | M] (Trend Micro Inc.) [Kernel | System | Running] – C:\Windows\System32\drivers\tmcomm.sys – (tmcomm)
DRV - [2011/10/08 18:20:56 | 000,092,432 | —- | M] (Trend Micro Inc.) [Kernel | System | Running] – C:\Windows\System32\drivers\tmtdi.sys – (tmtdi)
DRV - [2011/10/08 18:20:56 | 000,081,168 | —- | M] (Trend Micro Inc.) [Kernel | System | Running] – C:\Windows\System32\drivers\tmactmon.sys – (tmactmon)
DRV - [2011/10/08 18:20:56 | 000,068,368 | —- | M] (Trend Micro Inc.) [Kernel | System | Running] – C:\Windows\System32\drivers\tmevtmgr.sys – (tmevtmgr)
DRV - [2011/08/02 16:38:44 | 000,018,432 | —- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\netaapl.sys – (Netaapl)
DRV - [2011/03/11 10:02:28 | 001,282,688 | —- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\CHDRT32.sys – (CnxtHdAudService)
DRV - [2011/02/24 04:03:04 | 000,235,824 | —- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\tosrfbd.sys – (tosrfbd)
DRV - [2011/02/10 04:28:12 | 000,068,720 | —- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\L1C62x86.sys – (L1C)
DRV - [2011/02/09 12:08:00 | 000,033,616 | —- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\PGEffect.sys – (PGEffect)
DRV - [2011/01/28 08:26:16 | 000,056,888 | —- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\tosrfusb.sys – (Tosrfusb)
DRV - [2010/12/18 12:44:24 | 002,129,408 | —- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\athr.sys – (athr)
DRV - [2010/11/30 04:47:00 | 000,070,448 | —- | M] (TOSHIBA Corporation) [Kernel | System | Running] – C:\Windows\System32\drivers\tosrfcom.sys – (Tosrfcom)
DRV - [2010/11/21 07:29:24 | 000,052,224 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\TsUsbFlt.sys – (TsUsbFlt)
DRV - [2010/11/21 07:29:03 | 000,035,968 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\winusb.sys – (WinUsb)
DRV - [2010/11/21 07:29:03 | 000,027,264 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\TsUsbGD.sys – (TsUsbGD)
DRV - [2010/11/12 03:26:00 | 000,042,672 | —- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\tosrfbnp.sys – (tosrfbnp)
DRV - [2010/10/20 09:33:40 | 000,041,088 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\HECI.sys – (MEI) Intel®
DRV - [2010/10/19 07:13:58 | 000,033,640 | R— | M] (Atheros) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\btfilter.sys – (BtFilter)
DRV - [2010/10/09 04:49:06 | 000,190,464 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\RtsUStor.sys – (RSUSBSTOR)
DRV - [2010/08/31 03:48:00 | 000,080,064 | —- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\Tosrfhid.sys – (Tosrfhid)
DRV - [2010/06/19 09:44:00 | 000,015,160 | —- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\tosrfec.sys – (tosrfec)
DRV - [2010/04/27 04:48:00 | 000,053,760 | —- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\TosRfSnd.sys – (TosRfSnd)
DRV - [2010/02/03 10:21:56 | 000,050,704 | —- | M] (CACE Technologies, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\npf.sys – (NPF)
DRV - [2009/07/31 10:45:56 | 000,022,912 | —- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\tdcmdpst.sys – (tdcmdpst)
DRV - [2009/07/25 04:31:00 | 000,021,608 | —- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\tosrfnds.sys – (tosrfnds)
DRV - [2009/07/15 08:28:42 | 000,023,512 | —- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] – C:\Windows\System32\drivers\TVALZ_O.SYS – (TVALZ)
DRV - [2009/07/14 09:52:10 | 000,014,336 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\vwifimp.sys – (vwifimp)
DRV - [2009/07/08 01:53:06 | 000,007,680 | —- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\FwLnk.sys – (FwLnk)
DRV - [2009/06/25 08:08:30 | 000,275,536 | —- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] – C:\Windows\System32\drivers\tos_sps32.sys – (tos_sps32)
DRV - [2009/06/18 04:59:00 | 000,046,984 | —- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\tosporte.sys – (tosporte)
DRV - [2008/05/06 15:06:00 | 000,011,520 | —- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\wdcsam.sys – (WDC_SAM)
DRV - [2008/01/14 20:06:32 | 000,021,632 | —- | M] (ManyCam LLC.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\ManyCam.sys – (ManyCam)
DRV - [2007/01/19 17:20:54 | 000,021,728 | —- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | Boot | Running] – C:\Windows\System32\drivers\SCMNdisP.sys – (SCMNdisP)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {F4ED0519-C584-4DDA-BE93-FA0B93D040F6}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{F4ED0519-C584-4DDA-BE93-FA0B93D040F6}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {F4ED0519-C584-4DDA-BE93-FA0B93D040F6}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {F4ED0519-C584-4DDA-BE93-FA0B93D040F6}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba.msn.com
IE - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.com.au/
IE - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000\..\SearchScopes,DefaultScope = {F4ED0519-C584-4DDA-BE93-FA0B93D040F6}
IE - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000\..\SearchScopes\{31C96125-66CD-4F67-A8F1-447ABE8AA385}: "URL" = http://www.ant.com/search?s=browser&q={searchTerms}
IE - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000\..\SearchScopes\{66D659B8-AAE0-4492-9988-1C89F128CE1B}: "URL" = http://websearch.ask.com/redirect?client=i…B4-9648105A1267
IE - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000\..\SearchScopes\{F4ED0519-C584-4DDA-BE93-FA0B93D040F6}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.msn.com/?pc=Z190&ocid=zdhp&install_date=20111126"
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=MYC-ST&o=102869&locale=en_US&apn_uid=8294fd91-7c7a-4f31-99a7-6dc5d89c4e08&apn_ptnrs=5J&apn_sauid=6C8B94A6-A482-4109-B9B4-9648105A1267&apn_dtid=YYYYYYYYAU&&q="

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@dymo.com/DymoLabelFramework: C:\Program Files\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll ( Sanford L.P.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@TrendMicro.com/FFExtension: C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension\components\npToolbarChrome.dll (Trend Micro Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Liam\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Liam\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Liam\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\facebook.com/fbDesktopPlugin: C:\Users\Liam\AppData\Local\Facebook\Messenger\2.1.4520.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{38783831-6098-4faa-A9C9-1EE1E343F4D2}: C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1102\7.1.1102\firefoxextension [2012/05/21 11:47:35 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{22181a4d-af90-4ca3-a569-faed9118d6bc}: C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2011/10/08 18:26:46 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\module\20004\FxExt\firefoxextension\ [2012/05/21 11:48:04 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012/05/11 22:17:25 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/04/18 14:16:31 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/05/11 22:17:22 | 000,000,000 | —D | M]

[2011/10/08 22:49:30 | 000,000,000 | —D | M] (No name found) – C:\Users\Liam\AppData\Roaming\Mozilla\Extensions
[2012/05/05 15:15:56 | 000,000,000 | —D | M] (No name found) – C:\Users\Liam\AppData\Roaming\Mozilla\Firefox\Profiles\9uxzcp68.default\extensions
[2011/11/26 21:02:56 | 000,000,000 | —D | M] (StartNow Toolbar) – C:\Users\Liam\AppData\Roaming\Mozilla\Firefox\Profiles\9uxzcp68.default\extensions\{5911488E-9D1E-40ec-8CBB-06B231CC153F}
[2012/04/04 13:51:49 | 000,000,000 | —D | M] (Codecv) – C:\Users\Liam\AppData\Roaming\Mozilla\Firefox\Profiles\9uxzcp68.default\extensions\[removed]
[2011/12/14 23:27:51 | 000,000,000 | —D | M] (Yontoo Layers (Drop Down Deals)) – C:\Users\Liam\AppData\Roaming\Mozilla\Firefox\Profiles\9uxzcp68.default\extensions\[removed]
[2012/02/14 21:31:15 | 000,000,000 | —D | M] ("Ask Toolbar") – C:\Users\Liam\AppData\Roaming\Mozilla\Firefox\Profiles\9uxzcp68.default\extensions\[removed]
[2012/02/27 15:41:52 | 000,002,577 | —- | M] () – C:\Users\Liam\AppData\Roaming\Mozilla\Firefox\Profiles\9uxzcp68.default\searchplugins\askcom.xml
[2011/11/26 21:02:51 | 000,001,945 | —- | M] () – C:\Users\Liam\AppData\Roaming\Mozilla\Firefox\Profiles\9uxzcp68.default\searchplugins\bing-zugo.xml
[2012/04/18 14:16:31 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2012/03/13 14:39:39 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/03/13 14:38:32 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/09/29 11:16:42 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml.old
[2012/03/13 14:38:32 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - default_search_provider: Ask (Enabled)
CHR - default_search_provider: search_url = http://websearch.ask.com/redirect?client=c…q={searchTerms}
CHR - default_search_provider: suggest_url = http://ss.websearch.ask.com/query?qsrc=292…q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\18.0.1025.168\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\18.0.1025.168\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\18.0.1025.168\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: registryAccess (Enabled) = C:\Users\Liam\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaodnbkkemkkaekocofmphoadofkdh\7.14.1.0_0\background/registryAccess.dll
CHR - plugin: Trend Micro Titanium (Enabled) = C:\Users\Liam\AppData\Local\Google\Chrome\User Data\Default\Extensions\heoldelcflnigdllmlopiefhkkobendj\5.2.0.1035_0\npToolbarChrome.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U29 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL
CHR - plugin: DYMO Label Framework (Enabled) = C:\Program Files\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Facebook Desktop (Enabled) = C:\Users\Liam\AppData\Local\Facebook\Messenger\2.0.4478.0\npFbDesktopPlugin.dll
CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\Liam\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll
CHR - Extension: Ask Toolbar = C:\Users\Liam\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaodnbkkemkkaekocofmphoadofkdh\7.14.1.0_0\
CHR - Extension: YouTube = C:\Users\Liam\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\
CHR - Extension: Google Search = C:\Users\Liam\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
CHR - Extension: TrendMicro Toolbar = C:\Users\Liam\AppData\Local\Google\Chrome\User Data\Default\Extensions\heoldelcflnigdllmlopiefhkkobendj\5.2.0.1035_0\
CHR - Extension: Codecv = C:\Users\Liam\AppData\Local\Google\Chrome\User Data\Default\Extensions\joifgdlkhokekeaenpkaehbnjhncglbh\1.0_0\
CHR - Extension: DivX Plus Web Player HTML5 \u003Cvideo\u003E = C:\Users\Liam\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
CHR - Extension: Gmail = C:\Users\Liam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\

O1 HOSTS File: ([2009/06/11 07:39:37 | 000,000,824 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\2.0.1313\6.8.1078\TmIEPlg.dll (Trend Micro Inc.)
O2 - BHO: (DivX Plus Web Player HTML5 ) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Ant.com browser helper (video detector)) - {346FDE31-DFF9-418A-90C8-BA31DC9FF2EF} - C:\Program Files\Ant.com\IE add-on\Download.dll (Ant.com)
O2 - BHO: (TSToolbarBHO) - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
O2 - BHO: (StartNow Toolbar Helper) - {6E13D095-45C3-4271-9475-F3B48227DD9F} - C:\Program Files\StartNow Toolbar\Toolbar32.dll ()
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\7.1.1102\7.1.1102\TmBpIe32.dll (Trend Micro Inc.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (TOSHIBA Media Controller Plug-in) - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll ()
O2 - BHO: (Yontoo Layers (Drop Down Deals)) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo Layers Runtime (Drop Down Deals)\YontooIEClient.dll (Yontoo LLC)
O3 - HKLM\..\Toolbar: (Ant.com Video Downloader toolbar) - {2E924F4F-67F0-4BD8-9560-49F468E843D2} - C:\Program Files\Ant.com\IE add-on\AntToolbar.dll (Ant.com)
O3 - HKLM\..\Toolbar: (StartNow Toolbar) - {5911488E-9D1E-40ec-8CBB-06B231CC153F} - C:\Program Files\StartNow Toolbar\Toolbar32.dll ()
O3 - HKLM\..\Toolbar: (Trend Micro Toolbar) - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Alexa Toolbar) - {EA582743-9076-4178-9AA6-7393FDF4D5CE} - C:\Program Files\Alexa Toolbar\AlexaToolbar.10.0.dll (Alexa.com)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000\..\Toolbar\WebBrowser: (Ant.com Video Downloader toolbar) - {2E924F4F-67F0-4BD8-9560-49F468E843D2} - C:\Program Files\Ant.com\IE add-on\AntToolbar.dll (Ant.com)
O3 - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [boincmgr] C:\Program Files\BOINC\boincmgr.exe (Space Sciences Laboratory)
O4 - HKLM..\Run: [boinctray] C:\Program Files\BOINC\boinctray.exe (Space Sciences Laboratory)
O4 - HKLM..\Run: [BSDAppUpdater] C:\Program Files\Common Files\BSD\AppUpdater\BSDChecker.exe (Bootstrap Software Development)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [DLSService] C:\Program Files\DYMO\DYMO Label Software\DLSService.exe (Sanford, L.P.)
O4 - HKLM..\Run: [ITSecMng] C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [NortonOnlineBackup] C:\Program Files\Symantec\Norton Online Backup\NOBuClient.exe (Symantec Corporation)
O4 - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe (Conexant systems, Inc.)
O4 - HKLM..\Run: [Talk] C:\Program Files\NCH Software\Talk\talk.exe (NCH Software)
O4 - HKLM..\Run: [TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosNC] C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosReelTimeMonitor] C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosVolRegulator] C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Trend Micro Client Framework] C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe (Trend Micro Inc.)
O4 - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000..\Run: [ChromeFrameHelper] C:\Users\Liam\AppData\Local\Google\Chrome\Application\19.0.1084.46\chrome_frame_helper.exe (Google Inc.)
O4 - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000..\Run: [Facebook Update] C:\Users\Liam\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000..\Run: [ManyCam] C:\Program Files\ManyCam\Bin\ManyCam.exe (ManyCam LLC)
O4 - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000..\Run: [Optimizer Pro] C:\Program Files\Optimizer Pro\OptProLauncher.exe (PC Utilities Pro)
O4 - HKU\S-1-5-21-3529970971-4163437698-1443127188-1000..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Liam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DesktopVideoPlayer.lnk = C:\Users\Liam\AppData\Local\vghd\bin\vghd.exe (Totem Entertainment)
O4 - Startup: C:\Users\Liam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Liam\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Liam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk = C:\Users\Liam\AppData\Local\Facebook\Messenger\2.1.4520.0\FacebookMessenger.exe (Facebook)
O4 - Startup: C:\Users\Liam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Main present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8 - Extra context menu item: Add to TOSHIBA Bulletin Board - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll (TODO: <会社名>)
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Download videos by Ant.com - {70AF6C9F-0818-4cf7-924A-BBDBB24211D3} - C:\Program Files\Ant.com\IE add-on\Download.dll (Ant.com)
O9 - Extra Button: Add to Wish List - {76c5fb99-dd0a-4186-9e75-65d1bf3da283} - C:\Program Files\Amazon\Add to Wish List IE Extension\run.htm ()
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll,-229 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll (TODO: <会社名>)
O9 - Extra 'Tools' menuitem : @C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll,-228 - {97F922BD-8563-4184-87EE-8C4ACA438823} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll (TODO: <会社名>)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000031 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000032 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000033 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000034 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000035 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000036 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O13 - gopher Prefix: missing
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0157329A-30D5-472A-A22A-FBEC916FD376}: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0EF42FF1-5F08-4E45-A150-7F0F8E641BA0}: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2C5719F9-2429-4ADE-B29D-843F67C9A841}: DhcpNameServer = [removed] [removed]
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.1.1102\7.1.1102\TmBpIe32.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\2.0.1313\6.8.1078\TmIEPlg.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmtb {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmtbim {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/11 07:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: Sharedaccess - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/05/21 12:22:36 | 000,595,968 | —- | C] (OldTimer Tools) – C:\Users\Liam\Desktop\OTL.exe
[2012/05/21 11:33:47 | 000,399,264 | —- | C] (Bleeping Computer, LLC) – C:\Users\Liam\Desktop\unhide.exe
[2012/05/21 11:33:18 | 000,000,000 | —D | C] – C:\Users\Liam\Desktop\backups
[2012/05/21 01:17:04 | 002,002,320 | —- | C] (Trend Micro Inc.) – C:\Users\Liam\Desktop\HousecallLauncher.exe
[2012/05/21 00:39:48 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Users\Liam\Desktop\HiJackThis.exe
[2012/05/20 23:22:40 | 000,000,000 | —D | C] – C:\Users\Liam\Desktop\FakeAVRemover
[2012/05/20 22:58:10 | 000,000,000 | —D | C] – C:\Users\Liam\AppData\Local\ElevatedDiagnostics
[2012/05/20 22:39:24 | 000,000,000 | —D | C] – C:\Users\Liam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Data Recovery
[2012/05/20 21:26:10 | 000,000,000 | —D | C] – C:\Users\Liam\Desktop\Cert II Retail
[2012/05/20 18:43:17 | 000,000,000 | —D | C] – C:\Users\Liam\Desktop\Tor Browser
[2012/05/20 18:41:42 | 021,209,731 | —- | C] (Igor Pavlov) – C:\Users\Liam\Desktop\tor-browser-2.2.35-12_en-US.exe
[2012/05/18 22:20:21 | 000,000,000 | —D | C] – C:\Users\Liam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Facebook
[2012/05/16 21:56:55 | 000,000,000 | —D | C] – C:\Users\Liam\Desktop\Ao no exorcist
[2012/05/14 21:00:45 | 000,000,000 | —D | C] – C:\Users\Liam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BOINC
[2012/05/14 21:00:43 | 000,000,000 | —D | C] – C:\Program Files\BOINC
[2012/05/12 18:41:31 | 001,077,248 | —- | C] (Microsoft Corporation) – C:\windows\System32\DWrite.dll
[2012/05/12 18:31:38 | 003,968,368 | —- | C] (Microsoft Corporation) – C:\windows\System32\ntkrnlpa.exe
[2012/05/12 18:31:37 | 003,913,072 | —- | C] (Microsoft Corporation) – C:\windows\System32\ntoskrnl.exe
[2012/05/12 18:31:37 | 002,343,424 | —- | C] (Microsoft Corporation) – C:\windows\System32\win32k.sys
[2012/05/11 22:17:01 | 000,000,000 | —D | C] – C:\Users\Liam\AppData\Roaming\DivX
[2012/05/11 22:16:23 | 000,000,000 | —D | C] – C:\Program Files\Common Files\PX Storage Engine
[2012/05/11 22:15:24 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus
[2012/05/11 22:14:53 | 000,000,000 | —D | C] – C:\Program Files\Common Files\DivX Shared
[2012/05/11 21:59:11 | 000,000,000 | —D | C] – C:\Program Files\DivX
[2012/05/11 21:56:49 | 000,000,000 | —D | C] – C:\ProgramData\DivX
[2012/05/07 18:59:11 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2012/05/07 18:57:16 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012/04/25 21:44:30 | 000,000,000 | —D | C] – C:\Users\Liam\Desktop\Bukkit
[2012/04/23 15:43:14 | 000,000,000 | —D | C] – C:\Users\Liam\Desktop\Desktop1
[2012/04/21 20:53:02 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
[2011/11/19 14:29:13 | 000,047,360 | —- | C] (VSO Software) – C:\Users\Liam\AppData\Roaming\pcouffin.sys

========== Files - Modified Within 30 Days ==========

[2012/05/21 12:22:37 | 000,595,968 | —- | M] (OldTimer Tools) – C:\Users\Liam\Desktop\OTL.exe
[2012/05/21 12:22:01 | 000,000,904 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3529970971-4163437698-1443127188-1000UA.job
[2012/05/21 11:47:43 | 000,000,882 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/05/21 11:34:51 | 000,025,120 | —- | M] () – C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/05/21 11:34:51 | 000,025,120 | —- | M] () – C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/05/21 11:33:47 | 000,399,264 | —- | M] (Bleeping Computer, LLC) – C:\Users\Liam\Desktop\unhide.exe
[2012/05/21 11:26:03 | 000,000,878 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/05/21 11:25:52 | 000,067,584 | –S- | M] () – C:\windows\bootstat.dat
[2012/05/21 11:25:33 | 2175,160,320 | -HS- | M] () – C:\hiberfil.sys
[2012/05/21 01:27:27 | 000,288,771 | —- | M] () – C:\Users\Liam\AppData\Local\census.cache
[2012/05/21 01:27:13 | 000,129,958 | —- | M] () – C:\Users\Liam\AppData\Local\ars.cache
[2012/05/21 01:19:06 | 000,000,924 | —- | M] () – C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3529970971-4163437698-1443127188-1000UA.job
[2012/05/21 01:18:49 | 000,000,036 | —- | M] () – C:\Users\Liam\AppData\Local\housecall.guid.cache
[2012/05/21 01:17:06 | 002,002,320 | —- | M] (Trend Micro Inc.) – C:\Users\Liam\Desktop\HousecallLauncher.exe
[2012/05/21 00:39:48 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\Liam\Desktop\HiJackThis.exe
[2012/05/20 23:28:16 | 000,000,152 | —- | M] () – C:\ProgramData\-GO9APCOFkP3bgmr
[2012/05/20 23:28:16 | 000,000,000 | —- | M] () – C:\ProgramData\-GO9APCOFkP3bgm
[2012/05/20 23:22:37 | 001,688,352 | —- | M] () – C:\Users\Liam\Desktop\svchost.exe
[2012/05/20 22:49:45 | 000,086,016 | —- | M] () – C:\ProgramData\cecaeadcaffcdct.exe
[2012/05/20 22:38:30 | 000,000,258 | RHS- | M] () – C:\ProgramData\ntuser.pol
[2012/05/20 22:22:01 | 000,108,048 | —- | M] () – C:\windows\RegBootClean.exe
[2012/05/20 21:22:00 | 000,000,852 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3529970971-4163437698-1443127188-1000Core.job
[2012/05/20 20:33:30 | 000,000,000 | —- | M] () – C:\Users\Liam\Desktop\Alien Planet.flv.ansvtqs.partial
[2012/05/20 19:19:00 | 000,000,902 | —- | M] () – C:\windows\tasks\FacebookUpdateTaskUserS-1-5-21-3529970971-4163437698-1443127188-1000Core.job
[2012/05/20 18:43:08 | 021,209,731 | —- | M] (Igor Pavlov) – C:\Users\Liam\Desktop\tor-browser-2.2.35-12_en-US.exe
[2012/05/18 22:20:21 | 000,001,292 | —- | M] () – C:\Users\Liam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
[2012/05/18 21:52:07 | 000,002,261 | —- | M] () – C:\Users\Public\Desktop\Google Chrome.lnk
[2012/05/16 11:26:53 | 000,723,530 | —- | M] () – C:\windows\System32\perfh009.dat
[2012/05/16 11:26:53 | 000,147,448 | —- | M] () – C:\windows\System32\perfc009.dat
[2012/05/12 20:12:10 | 000,378,840 | —- | M] () – C:\windows\System32\FNTCACHE.DAT
[2012/05/12 18:57:32 | 000,419,488 | —- | M] (Adobe Systems Incorporated) – C:\windows\System32\FlashPlayerApp.exe
[2012/05/12 18:57:32 | 000,070,304 | —- | M] (Adobe Systems Incorporated) – C:\windows\System32\FlashPlayerCPLApp.cpl
[2012/05/11 22:17:40 | 000,002,037 | —- | M] () – C:\Users\Public\Desktop\DivX Plus Converter.lnk
[2012/05/11 22:17:37 | 000,001,561 | —- | M] () – C:\Users\Liam\Desktop\DivX Movies.lnk
[2012/05/11 22:16:56 | 000,001,057 | —- | M] () – C:\Users\Public\Desktop\DivX Plus Player.lnk
[2012/05/07 18:59:11 | 000,002,141 | —- | M] () – C:\Users\Public\Desktop\Google Earth.lnk
[2012/05/05 00:12:53 | 000,097,146 | —- | M] () – C:\Users\Liam\Desktop\1.png
[2012/04/29 20:28:57 | 000,000,442 | -HS- | M] () – C:\windows\System32\signed_DOCLERW.lic
[2012/04/29 20:28:57 | 000,000,272 | -HS- | M] () – C:\windows\System32\DOCLERW_license_public_key.pem
[2012/04/29 20:28:52 | 000,000,021 | —- | M] () – C:\windows\System32\dllresult
[2012/04/29 20:20:05 | 000,323,688 | —- | M] () – C:\Users\Liam\Desktop\Image (10).jpg
[2012/04/29 19:54:18 | 000,112,065 | —- | M] () – C:\Users\Liam\Desktop\licence back.jpg
[2012/04/29 19:52:25 | 000,129,393 | —- | M] () – C:\Users\Liam\Desktop\licence front.jpg
[2012/04/29 19:48:52 | 000,110,401 | —- | M] () – C:\Users\Liam\Desktop\Image (9).jpg
[2012/04/29 19:48:23 | 000,122,525 | —- | M] () – C:\Users\Liam\Desktop\Image (8).jpg
[2012/04/24 17:09:29 | 000,126,428 | —- | M] () – C:\Users\Liam\Desktop\g3kmc.jpg
[2012/04/21 20:53:02 | 000,001,810 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk

========== Files Created - No Company Name ==========

[2012/05/21 12:20:49 | 000,002,443 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
[2012/05/21 12:20:49 | 000,002,261 | —- | C] () – C:\Users\Public\Desktop\Google Chrome.lnk
[2012/05/21 12:20:49 | 000,002,141 | —- | C] () – C:\Users\Public\Desktop\Google Earth.lnk
[2012/05/21 12:20:49 | 000,002,037 | —- | C] () – C:\Users\Public\Desktop\DivX Plus Converter.lnk
[2012/05/21 12:20:49 | 000,001,515 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2012/05/21 12:20:49 | 000,001,415 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
[2012/05/21 12:20:49 | 000,001,352 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
[2012/05/21 12:20:49 | 000,001,331 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
[2012/05/21 12:20:49 | 000,001,326 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2012/05/21 12:20:49 | 000,001,262 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
[2012/05/21 12:20:49 | 000,001,246 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
[2012/05/21 12:20:49 | 000,001,210 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
[2012/05/21 12:20:49 | 000,001,057 | —- | C] () – C:\Users\Public\Desktop\DivX Plus Player.lnk
[2012/05/21 12:20:46 | 000,002,225 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recovery Media Creator Help.lnk
[2012/05/21 12:20:46 | 000,002,189 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recovery Media Creator.lnk
[2012/05/21 12:20:46 | 000,001,810 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
[2012/05/21 12:20:46 | 000,001,330 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
[2012/05/21 12:20:46 | 000,000,914 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth Manager.lnk
[2012/05/21 12:20:45 | 000,002,435 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk
[2012/05/21 12:20:45 | 000,001,838 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
[2012/05/21 12:20:45 | 000,001,345 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2012/05/21 12:20:45 | 000,001,117 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inventoria Stock Manager.lnk
[2012/05/21 12:20:45 | 000,000,994 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012/05/21 12:20:44 | 000,001,151 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Accounts.lnk
[2012/05/21 12:20:44 | 000,001,139 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Invoice.lnk
[2012/05/21 12:20:44 | 000,001,025 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Talk.lnk
[2012/05/21 12:20:43 | 000,002,519 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2012/05/21 12:20:43 | 000,002,441 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2012/05/21 12:20:43 | 000,001,563 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABC Inventory.lnk
[2012/05/21 12:20:43 | 000,001,067 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Video Capture Software.lnk
[2012/05/21 01:27:27 | 000,288,771 | —- | C] () – C:\Users\Liam\AppData\Local\census.cache
[2012/05/21 01:27:13 | 000,129,958 | —- | C] () – C:\Users\Liam\AppData\Local\ars.cache
[2012/05/21 01:17:16 | 000,000,036 | —- | C] () – C:\Users\Liam\AppData\Local\housecall.guid.cache
[2012/05/20 23:22:31 | 001,688,352 | —- | C] () – C:\Users\Liam\Desktop\svchost.exe
[2012/05/20 22:39:29 | 000,000,152 | —- | C] () – C:\ProgramData\-GO9APCOFkP3bgmr
[2012/05/20 22:39:28 | 000,000,000 | —- | C] () – C:\ProgramData\-GO9APCOFkP3bgm
[2012/05/20 22:13:27 | 000,108,048 | —- | C] () – C:\windows\RegBootClean.exe
[2012/05/20 22:11:03 | 000,086,016 | —- | C] () – C:\ProgramData\cecaeadcaffcdct.exe
[2012/05/20 20:33:30 | 000,000,000 | —- | C] () – C:\Users\Liam\Desktop\Alien Planet.flv.ansvtqs.partial
[2012/05/11 22:17:37 | 000,001,561 | —- | C] () – C:\Users\Liam\Desktop\DivX Movies.lnk
[2012/05/05 00:13:07 | 000,097,146 | —- | C] () – C:\Users\Liam\Desktop\1.png
[2012/04/29 20:28:57 | 000,000,442 | -HS- | C] () – C:\windows\System32\signed_DOCLERW.lic
[2012/04/29 20:28:57 | 000,000,272 | -HS- | C] () – C:\windows\System32\DOCLERW_license_public_key.pem
[2012/04/29 20:28:52 | 000,000,021 | —- | C] () – C:\windows\System32\dllresult
[2012/04/29 20:21:18 | 000,323,688 | —- | C] () – C:\Users\Liam\Desktop\Image (10).jpg
[2012/04/29 19:54:18 | 000,112,065 | —- | C] () – C:\Users\Liam\Desktop\licence back.jpg
[2012/04/29 19:52:25 | 000,129,393 | —- | C] () – C:\Users\Liam\Desktop\licence front.jpg
[2012/04/29 19:50:34 | 000,110,401 | —- | C] () – C:\Users\Liam\Desktop\Image (9).jpg
[2012/04/29 19:50:18 | 000,122,525 | —- | C] () – C:\Users\Liam\Desktop\Image (8).jpg
[2012/04/24 17:14:05 | 000,126,428 | —- | C] () – C:\Users\Liam\Desktop\g3kmc.jpg
[2012/04/18 00:24:11 | 000,103,031 | —- | C] () – C:\Users\Liam\AppData\Roaming\Talk.dmp
[2011/12/07 11:42:09 | 000,000,262 | —- | C] () – C:\windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2011/11/26 20:32:47 | 000,057,344 | —- | C] () – C:\windows\System32\ff_vfw.dll
[2011/11/25 21:54:26 | 000,007,602 | —- | C] () – C:\Users\Liam\AppData\Local\Resmon.ResmonCfg
[2011/11/19 14:29:13 | 000,087,608 | —- | C] () – C:\Users\Liam\AppData\Roaming\inst.exe
[2011/11/19 14:29:13 | 000,007,887 | —- | C] () – C:\Users\Liam\AppData\Roaming\pcouffin.cat
[2011/11/19 14:29:13 | 000,001,144 | —- | C] () – C:\Users\Liam\AppData\Roaming\pcouffin.inf
[2011/11/04 18:47:04 | 000,053,299 | —- | C] () – C:\windows\System32\pthreadVC.dll
[2011/10/12 19:13:17 | 000,000,410 | —- | C] () – C:\windows\BRWMARK.INI
[2011/10/12 19:13:17 | 000,000,034 | —- | C] () – C:\windows\System32\BD7040.DAT
[2011/10/08 19:08:36 | 000,000,048 | —- | C] () – C:\ProgramData\ezsidmv.dat
[2011/10/08 18:26:03 | 000,000,056 | —- | C] () – C:\windows\System32\SupportTool.exe.bat
[2011/10/08 18:26:02 | 000,000,258 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2011/09/28 16:44:14 | 000,179,271 | —- | C] () – C:\windows\System32\xlive.dll.cat
[2011/09/19 17:07:46 | 000,015,360 | —- | C] () – C:\windows\System32\bdmjpeg.dll
[2011/09/19 17:07:32 | 000,058,368 | —- | C] () – C:\windows\System32\bdmpegv.dll
[2011/07/23 00:22:57 | 000,000,000 | —- | C] () – C:\windows\NDSTray.INI
[2011/07/22 23:51:04 | 000,008,192 | —- | C] () – C:\windows\System32\drivers\IntelMEFWVer.dll
[2011/04/05 12:58:26 | 000,963,116 | —- | C] () – C:\windows\System32\igkrng600.bin
[2011/04/05 12:58:26 | 000,216,876 | —- | C] () – C:\windows\System32\igfcg600m.bin
[2011/04/05 12:58:26 | 000,145,804 | —- | C] () – C:\windows\System32\igcompkrng600.bin
[2011/04/05 12:23:46 | 000,004,096 | —- | C] ( ) – C:\windows\System32\IGFXDEVLib.dll
[2011/04/05 12:22:00 | 000,000,151 | —- | C] () – C:\windows\System32\GfxUI.exe.config
[2011/04/05 12:18:54 | 000,094,208 | —- | C] () – C:\windows\System32\IccLibDll.dll
[2011/02/19 23:39:46 | 000,246,804 | R— | C] () – C:\windows\System32\drivers\AtherosBT.bin
[2010/10/29 05:22:18 | 000,030,895 | —- | C] () – C:\windows\System32\drivers\Mixer.ini

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >

< MD5 for: EXPLORER.EXE >
[2011/02/26 15:19:21 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2010/11/21 07:29:20 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 15:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\explorer.exe
[2011/02/25 15:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe

< MD5 for: SVCHOST.EXE >
[2009/07/14 11:14:41 | 000,020,992 | —- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 – C:\Windows\System32\svchost.exe
[2009/07/14 11:14:41 | 000,020,992 | —- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 – C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2011/05/16 11:15:46 | 002,433,672 | —- | M] (Trend Micro Inc.) MD5=8CE74882D72E552A5219A9D8E461B7C3 – C:\Users\Liam\Desktop\FakeAVRemover\svchost.exe
[2012/05/20 23:22:37 | 001,688,352 | —- | M] () MD5=C05FACAAB9C0707AC1A3B0EE7B128820 – C:\Users\Liam\Desktop\svchost.exe

< MD5 for: USERINIT.EXE >
[2010/11/21 07:29:06 | 000,026,624 | —- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 – C:\Windows\System32\userinit.exe
[2010/11/21 07:29:06 | 000,026,624 | —- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 – C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010/11/21 07:29:06 | 000,286,720 | —- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 – C:\Windows\System32\winlogon.exe
[2010/11/21 07:29:06 | 000,286,720 | —- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe

< %systemroot%\*. /rp /s >

========== Drive Information ==========

Physical Drives
—————

Drive: \\\\.\\PHYSICALDRIVE0 - Fixed hard disk media
Interface type: IDE
Media Type: Fixed hard disk media
Model: TOSHIBA MK5075GSX
Partitions: 3
Status: OK
Status Info: 0

Partitions
—————

DeviceID: Disk #0, Partition #0
PartitionType: Unknown
Bootable: True
BootPartition: True
PrimaryPartition: True
Size: 1.00GB
Starting Offset: 1048576
Hidden sectors: 0

DeviceID: Disk #0, Partition #1
PartitionType: Installable File System
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 455.00GB
Starting Offset: 1573912576
Hidden sectors: 0

DeviceID: Disk #0, Partition #2
PartitionType: Unknown
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 9.00GB
Starting Offset: 490156851200
Hidden sectors: 0

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\windows\System32\config\systemprofile\AppData\Local\Application Data] -> C:\windows\system32\config\systemprofile\AppData\Local -> Junction
[C:\windows\System32\config\systemprofile\AppData\Local\History] -> C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History -> Junction
[C:\windows\System32\config\systemprofile\AppData\Local\Temporary Internet Files] -> C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files -> Junction
[C:\windows\System32\config\systemprofile\Application Data] -> C:\windows\system32\config\systemprofile\AppData\Roaming -> Junction
[C:\windows\System32\config\systemprofile\Cookies] -> C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies -> Junction
[C:\windows\System32\config\systemprofile\Documents\My Music] -> C:\windows\system32\config\systemprofile\Music -> Junction
[C:\windows\System32\config\systemprofile\Documents\My Pictures] -> C:\windows\system32\config\systemprofile\Pictures -> Junction
[C:\windows\System32\config\systemprofile\Documents\My Videos] -> C:\windows\system32\config\systemprofile\Videos -> Junction
[C:\windows\System32\config\systemprofile\Local Settings] -> C:\windows\system32\config\systemprofile\AppData\Local -> Junction
[C:\windows\System32\config\systemprofile\My Documents] -> C:\windows\system32\config\systemprofile\Documents -> Junction
[C:\windows\System32\config\systemprofile\NetHood] -> C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Network Shortcuts -> Junction
[C:\windows\System32\config\systemprofile\PrintHood] -> C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Printer Shortcuts -> Junction
[C:\windows\System32\config\systemprofile\Recent] -> C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Recent -> Junction
[C:\windows\System32\config\systemprofile\SendTo] -> C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\SendTo -> Junction
[C:\windows\System32\config\systemprofile\Start Menu] -> C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu -> Junction
[C:\windows\System32\config\systemprofile\Templates] -> C:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Templates -> Junction

========== Alternate Data Streams ==========

@Alternate Data Stream - 164 bytes -> C:\Users\Liam\Desktop\licence front.jpg:3or4kl4x13tuuug3Byamue2s4b
@Alternate Data Stream - 164 bytes -> C:\Users\Liam\Desktop\licence back.jpg:3or4kl4x13tuuug3Byamue2s4b
@Alternate Data Stream - 164 bytes -> C:\Users\Liam\Desktop\Image (9).jpg:3or4kl4x13tuuug3Byamue2s4b
@Alternate Data Stream - 164 bytes -> C:\Users\Liam\Desktop\Image (8).jpg:3or4kl4x13tuuug3Byamue2s4b
@Alternate Data Stream - 164 bytes -> C:\Users\Liam\Desktop\Image (10).jpg:3or4kl4x13tuuug3Byamue2s4b

< End of report >

liaml

Post #7May 21, 2012, 2:37 AM UTC last edited May 21, 2012, 4:34 AM UTC

Other OTL file:

OTL Extras logfile created on: 5/21/2012 12:25:32 PM - Run 1
OTL by OldTimer - Version 3.2.43.1 Folder = C:\Users\Liam\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

2.70 Gb Total Physical Memory | 1.37 Gb Available Physical Memory | 50.81% Memory free
5.40 Gb Paging File | 3.94 Gb Available in Paging File | 72.98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 455.03 Gb Total Space | 199.08 Gb Free Space | 43.75% Space Free | Partition Type: NTFS

Computer Name: LIAM-PC | User Name: Liam | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = hlpfile] – C:\Program Files\Common Files\WinHelp\Winhlp32.exe (Microsoft Corporation)
.html [@ = ChromeHTML] – C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)

[HKEY_USERS\S-1-5-21-3529970971-4163437698-1443127188-1000\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – C:\Program Files\Common Files\WinHelp\Winhlp32.exe %1 (Microsoft Corporation)
http [open] – "C:\Program Files\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
https [open] – "C:\Program Files\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

========== Firewall Settings ==========

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{008D69EB-70FF-46AB-9C75-924620DF191A}" = TOSHIBA Speech System SR Engine(U.S.) Version1.0
"{00F86A98-0D76-4850-8C04-E35935F160CB}" = Eureka's Languages of the World (Including Arabic…)
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0AF17224-CF88-40B8-BB1A-D179369847B4}" = TOSHIBA Supervisor Password
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{14FA6DD9-92ED-493D-A937-81A78870E08A}_is1" = Free Video Joiner 1.1
"{17504ED4-DB08-40A8-81C2-27D8C01581DA}" = Windows Live Remote Service Resources
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1C4C5C53-D960-4E1C-96A6-F6B52EA43A45}" = ACID Xpress 7.0
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{24D5B594-33DB-4D72-9215-01FFAAEB4E1B}" = Eureka's Languages of the World
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 29
"{28E82311-8616-11E1-BEB0-B8AC6F97B88E}" = Google Earth
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{294BF709-D758-4363-8D75-01479AD20927}" = Windows Live Family Safety
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (INFLOWSQL)
"{2B78F6F9-5C63-45AB-ABFD-DDB7946E4C39}" = Ant.com IE add-on
"{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}" = Microsoft XNA Framework Redistributable 4.0
"{2C303EE0-A595-3543-A71A-931C7AC40EDE}" = Microsoft Primary Interoperability Assemblies 2005
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{2EF17083-57D4-4D64-AE4F-55F32A2C4571}" = Codecv
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{343666E2-A059-48AC-AD67-230BF74E2DB2}" = Apple Application Support
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX
"{3FBF6F99-8EC6-41B4-8527-0A32241B5496}" = TOSHIBA Speech System TTS Engine(U.S.) Version1.0
"{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}" = Norton Online Backup
"{42C402C3-F95B-4BA2-BC90-99816AAF8159}" = Space Colony
"{433A39B0-380C-4634-93FE-12A812954F5B}" = BigPond Broadband ADSL
"{464B3406-A4D0-4914-910F-7CA4380DCC13}" = Windows Live Remote Client Resources
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4D530FA3-9B89-4186-98B7-F51000008100}" = Age of Empires Online
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{52EFF266-98B7-4094-BD24-65490ED8E45D}" = Facebook Messenger 2.1.4520.0
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{5494B59E-6E82-499E-91AC-C53199955EC5}" = Atheros Bluetooth Filter Driver Package
"{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
"{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}" = TOSHIBA Resolution+ Plug-in for Windows Media Player
"{6CEFBCFC-602C-492B-A9AE-DFCA56A58FFE}" = ABC Inventory Software
"{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}" = TOSHIBA Web Camera Application
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{752BC45F-A71E-4C1C-A571-9814CE456047}" = Microsoft SQL Server Management Objects Collection
"{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}" = Microsoft SQL Server Native Client
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77246313-183a-43f7-afab-e7c9fb070271}" = inFlow Inventory
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7CAC6A44-C3DE-4153-ACA6-7524602C789E}" = Facebook Video Calling 1.2.0.159
"{7CD17545-765B-4AE9-BF87-DEF49429EB65}" = Degei4
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{8153ED9A-C94A-426E-9880-5E6775C08B62}" = Apple Mobile Device Support
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{838F71EC-02F0-46A4-B9CF-2DB4E8C3D1BA}" = Eureka's Languages of the World (Including Chinese…)
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{870F1750-BA89-11DA-A94D-0800200C9A66}_is1" = VSO CopyToDVD 4
"{889DF117-14D1-44EE-9F31-C5FB5D47F68B}" = Yontoo Layers Runtime (Drop Down Deals) 1.10.01
"{8927E07C-97F7-4A54-88FB-D976F50DD46E}" = Turbo Lister 2
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A9A8FF2-8B7F-442F-91E0-6223E6F559B0}" = Eureka's Languages of the World (Including Greek…)
"{8C3727F2-8E37-49E4-820C-03B1677F53B6}" = Stronghold Crusader Extreme
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8CD0B97D-46E9-4293-B467-A24DB96DB6DB}" = TOSHIBA ReelTime
"{8D62E6C4-DA0C-45E9-972A-AB7C7B637522}" = Eureka's Languages of the World (Including French…)
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8FB53850-246A-3507-8ADE-0060093FFEA6}" = Visual Studio Tools for the Office system 3.0 Runtime
"{90120000-001C-0409-0000-0000000FF1CE}" = Microsoft Office Access Runtime (English) 2007
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.SingleImage_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.SingleImage_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{905D6095-7F38-43F3-82A4-8A36E5A00FAD}" = BOINC
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{97965331-BC5D-4D9F-B6DF-5C0A123E4AE0}" = TOSHIBA Hardware Setup
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{98FA0A89-358D-4D39-A666-D4D321A44971}" = iRip
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9D6B265F-02E2-4D99-82B6-59A040722061}" = Eureka's Languages of the World (Including German…)
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A6C71119-582A-4BC8-B3E9-D98EE395C3B7}" = Eureka's Languages of the World (Including Spanish…)
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{ABBD4BA8-6703-40D2-AB1E-5BB1F7DB49A4}" = Titanium Maximum Security
"{ABBD4BA9-6703-40D2-AB1E-5BB1F7DB49A4}" = Trend Micro Titanium
"{AC6569FA-6919-442A-8552-073BE69E247A}" = TOSHIBA Service Station
"{AC76BA86-7AD7-1033-7B44-A95000000001}" = Adobe Reader 9.5.0
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}" = TOSHIBA Recovery Media Creator
"{B7DBF6E8-0D17-4BE4-853B-ACD6EFBD4A1F}" = iTunes
"{B8A65126-E256-49A9-8B67-3A075B6A0527}" = TOSHIBA Bulletin Board
"{C2425F91-1F7B-4037-9A05-9F290184798D}" = NETGEAR WNA3100 wireless USB 2.0 adapter
"{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}" = TOSHIBA Assist
"{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C730E42C-935A-45BB-A0C5-37E5234D111B}" = TOSHIBA Face Recognition
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{CDADE9BC-612C-42B8-B929-5C6A823E7FF9}" = TOSHIBA Wireless LAN Indicator
"{CE26F10F-C80F-4377-908B-1B7882AE2CE3}" = Crystal Reports Basic Runtime for Visual Studio 2008
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{D3D1D696-84A8-465A-BC61-CDAC852B24CD}_is1" = Phone to PC 4.1.3.5
"{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = TOSHIBA HDD/SSD Alert
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D5AEEAA2-184E-4A2A-BAA3-6225EA4B9516}" = TOSHIBA ConfigFree
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DE675AE9-E81C-47CD-82E1-D974D2CC5F1B}" = Eureka's Languages of the World (Including Russian…)
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E7084B89-69E0-46B3-A118-8F99D06988CD}" = Microsoft SQL Server VSS Writer
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EE033C1F-443E-41EC-A0E2-559B539A4E4D}" = TOSHIBA Speech System Applications
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel® Processor Graphics
"{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}" = TOSHIBA Media Controller Plug-in
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F5EDB2D7-9F88-46AB-A6A6-86839C9618CE}" = inFlow Inventory
"{FD9E03B5-AEEA-4D59-B512-6CE4AA0281D4}" = Byki
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"3B7076EB3C51070DE9D6902E9696507D9B471345" = Windows Driver Package - NETGEAR Inc. (RTLWUSB) Net (03/27/2006 5.1213.06.0327)
"94703D1C50646DF5FB8D0FB50EB2216330EB89C9" = Windows Driver Package - Atheros Communications Inc. (arusb_lh) Net (09/25/2008 3.1.0.101)
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Alexa Toolbar" = Alexa Toolbar
"Alien Horde" = Alien Horde
"Amazon Add to Wish List IE Extension" = Amazon Add to Wish List IE Extension 1.2
"Amazon Kindle For PC" = Amazon Kindle For PC v1.1
"Ant.com IE add-on" = Ant.com IE add-on
"BandiMPEG1" = Bandisoft MPEG-1 Decoder
"Byki Express" = Byki Express
"CNXT_AUDIO_HDA" = Conexant HD Audio
"Control Professional V3" = Control Professional V3
"Cucusoft iPad/iPhone/iPod to Computer Transfer_is1" = iPad/iPhone/iPod to Computer Transfer 7.6.0
"Debut" = Debut Video Capture Software
"DiskAid_is1" = DiskAid 5.06
"DivX Setup" = DivX Setup
"DVD Shrink_is1" = DVD Shrink 3.2
"DYMO Label v.8" = DYMO Label v.8
"ExpressAccounts" = Express Accounts
"ExpressInvoice" = Express Invoice
"FLV Player2.0.25" = FLV Player
"GFWL_{4D530FA3-9B89-4186-98B7-F51000008100}" = Age of Empires Online
"Google Chrome" = Google Chrome
"iCopyBot for Windows" = iCopyBot for Windows 7.2.8
"ImgBurn" = ImgBurn
"InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}" = TOSHIBA Web Camera Application
"InstallShield_{8CD0B97D-46E9-4293-B467-A24DB96DB6DB}" = TOSHIBA ReelTime
"InstallShield_{B8A65126-E256-49A9-8B67-3A075B6A0527}" = TOSHIBA Bulletin Board
"InstallShield_{C730E42C-935A-45BB-A0C5-37E5234D111B}" = TOSHIBA Face Recognition
"InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = TOSHIBA HDD/SSD Alert
"InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"Inventoria" = Inventoria Stock Manager
"iPhone PC Transfer_is1" = iPhone PC Transfer
"Lizard Safeguard - PDF Viewer_is1" = Lizard Safeguard - PDF Viewer 2.5.151
"ManyCam" = ManyCam 2.6.65 (remove only)
"McAfee Security Scan" = McAfee Security Scan Plus
"MediaWidget - Easy iPod Transfer_is1" = MediaWidget 6.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Mozilla Firefox 11.0 (x86 en-US)" = Mozilla Firefox 11.0 (x86 en-US)
"NortonPCCheckup" = Norton PC Checkup
"Office14.SingleImage" = Microsoft Office Home and Student 2010
"Optimizer Pro_is1" = Optimizer Pro v3.0
"Project Blackout" = Project Blackout
"StartNow Toolbar" = StartNow Toolbar
"Steam App 102600" = Orcs Must Die!
"Steam App 105600" = Terraria
"Steam App 107300" = Breath of Death VII
"Steam App 107310" = Cthulhu Saves the World
"Steam App 24010" = Train Simulator 2012
"Steam App 3390" = Feeding Frenzy 2: Shipwreck Showdown Deluxe
"Steam App 35480" = Dwarfs!?
"Steam App 420" = Half-Life 2: Episode Two
"Steam App 440" = Team Fortress 2
"Steam App 520" = Team Fortress 2 Beta
"Steam App 57690" = Tropico 4
"Steam App 620" = Portal 2
"Steam App 73060" = Defenders of Ardania
"Steam App 90100" = Hegemony: Philip of Macedon
"Steam App 91600" = Sanctum
"Talk" = Express Talk
"Theme Park World" = Theme Park World
"TOSHIBA Game Console" = WildTangent ORB Game Console
"Visual Studio Tools for the Office system 3.0 Runtime" = Visual Studio Tools for the Office system 3.0 Runtime
"Webcam Video Capture_is1" = Webcam Video Capture 4.8.0
"WildTangent toshiba Master Uninstall" = WildTangent Games
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.10 beta 4 (32-bit)
"World of Warcraft" = World of Warcraft
"WT088682" = Bejeweled 2 Deluxe
"WT088696" = Chuzzle Deluxe
"WT088702" = Plants vs. Zombies
"WT088703" = Build-a-lot 2
"WT088710" = Zuma's Revenge
"WT088739" = FATE
"WT088750" = Jewel Quest - Heritage
"WT088759" = Polar Bowler
"WT088760" = Virtual Villagers 4 - The Tree of Life
"WT088761" = Wheel of Fortune 2
"WVCSetup7.0.0_is1" = Webcam Video Capture 7.0
"Xilisoft iPhone Transfer" = Xilisoft iPhone Transfer

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3529970971-4163437698-1443127188-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{79A765E1-C399-405B-85AF-466F52E918B0}" = Ask Toolbar Updater
"Dropbox" = Dropbox
"Google Chrome Frame" = Google Chrome Frame

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 3/27/2012 3:49:25 AM | Computer Name = Liam-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 3/27/2012 3:49:25 AM | Computer Name = Liam-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 15507

Error - 3/27/2012 3:49:25 AM | Computer Name = Liam-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 15507

Error - 3/27/2012 3:51:42 AM | Computer Name = Liam-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 3/27/2012 3:51:42 AM | Computer Name = Liam-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 153568

Error - 3/27/2012 3:51:42 AM | Computer Name = Liam-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 153568

Error - 3/27/2012 5:30:56 AM | Computer Name = Liam-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 9.0.8112.16421 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: d8c Start
Time: 01cd0bfa80faec5f Termination Time: 30 Application Path: C:\Program Files\Internet
Explorer\iexplore.exe Report Id:

Error - 3/27/2012 9:57:05 AM | Computer Name = Liam-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 9.0.8112.16421 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 8c4 Start
Time: 01cd0c2118f0bf62 Termination Time: 16 Application Path: C:\Program Files\Internet
Explorer\iexplore.exe Report Id:

Error - 3/28/2012 2:28:29 AM | Computer Name = Liam-PC | Source = WinMgmt | ID = 10
Description =

Error - 3/28/2012 3:30:01 AM | Computer Name = Liam-PC | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 5/20/2012 9:49:18 PM | Computer Name = Liam-PC | Source = Service Control Manager | ID = 7000
Description = The Security Center service failed to start due to the following error:
%%1079

Error - 5/20/2012 9:51:20 PM | Computer Name = Liam-PC | Source = Service Control Manager | ID = 7000
Description = The Security Center service failed to start due to the following error:
%%1079

Error - 5/20/2012 9:59:27 PM | Computer Name = Liam-PC | Source = Service Control Manager | ID = 7000
Description = The Security Center service failed to start due to the following error:
%%1079

Error - 5/20/2012 10:01:47 PM | Computer Name = Liam-PC | Source = Service Control Manager | ID = 7000
Description = The Security Center service failed to start due to the following error:
%%1079

Error - 5/20/2012 10:01:50 PM | Computer Name = Liam-PC | Source = Service Control Manager | ID = 7000
Description = The Security Center service failed to start due to the following error:
%%1079

Error - 5/20/2012 10:02:04 PM | Computer Name = Liam-PC | Source = Service Control Manager | ID = 7000
Description = The Security Center service failed to start due to the following error:
%%1079

Error - 5/20/2012 10:02:34 PM | Computer Name = Liam-PC | Source = Service Control Manager | ID = 7000
Description = The Security Center service failed to start due to the following error:
%%1079

Error - 5/20/2012 10:03:51 PM | Computer Name = Liam-PC | Source = Service Control Manager | ID = 7000
Description = The Security Center service failed to start due to the following error:
%%1079

Error - 5/20/2012 10:21:08 PM | Computer Name = Liam-PC | Source = Service Control Manager | ID = 7023
Description = The Function Discovery Resource Publication service terminated with
the following error: %%-2147024891

Error - 5/20/2012 10:21:08 PM | Computer Name = Liam-PC | Source = Service Control Manager | ID = 7001
Description = The HomeGroup Provider service depends on the Function Discovery Resource
Publication service which failed to start because of the following error: %%-2147024891

< End of report >

liaml

Post #8May 21, 2012, 2:51 AM UTC

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software Run date: 2012-05-21 12:41:31 —————————– 12:41:31.479 OS Version: Windows 6.1.7601 Service Pack 1 12:41:31.479 Number of processors: 4 586 0x2A07 12:41:31.479 ComputerName: LIAM-PC UserName: Liam 12:41:40.001 Initialize success 12:43:11.781 AVAST engine defs: 12052001 12:43:18.447 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 12:43:18.447 Disk 0 Vendor: TOSHIBA_ GT00 Size: 476940MB BusType: 3 12:43:18.478 Disk 0 MBR read successfully 12:43:18.478 Disk 0 MBR scan 12:43:18.494 Disk 0 Windows VISTA default MBR code 12:43:18.525 Disk 0 Partition 1 80 (A) 27 Hidden NTFS WinRE NTFS 1500 MB offset 2048 12:43:18.556 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 465949 MB offset 3074048 12:43:18.587 Disk 0 Partition 3 00 17 Hidd HPFS/NTFS NTFS 9490 MB offset 957337600 12:43:18.587 Disk 0 scanning sectors +976773120 12:43:18.665 Disk 0 scanning C:\windows\system32\drivers 12:43:28.509 Service scanning 12:43:59.879 Modules scanning 12:44:18.575 Disk 0 trace - called modules: 12:44:18.606 ntkrnlpa.exe CLASSPNP.SYS disk.sys iaStor.sys halmacpi.dll 12:44:18.606 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x87818030] 12:44:18.622 3 CLASSPNP.SYS[8abc059e] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0x85cba028] 12:44:23.146 AVAST engine scan C:\windows 12:44:26.110 AVAST engine scan C:\windows\system32 12:46:04.997 File: C:\windows\assembly\GAC\Desktop.ini **INFECTED** Win32:Sirefef-PL [Rtk] 12:47:14.373 AVAST engine scan C:\windows\system32\drivers 12:47:26.276 AVAST engine scan C:\Users\Liam 12:51:24.505 Disk 0 MBR has been saved successfully to "C:\Users\Liam\Desktop\MBR.dat" 12:51:24.505 The log file has been saved successfully to "C:\Users\Liam\Desktop\aswMBR.txt"

Satchfan

Post #9May 21, 2012, 7:37 AM UTC

Have your desktop/start menu items returned?

liaml

Post #10May 21, 2012, 8:28 AM UTC last edited May 21, 2012, 8:29 AM UTC

They have. But the taskbar is still abnormal and whenever I am playing a game I get kicked out for excessive pinging. And the trend micro file delete thing is still happening. There is also a new program in my start menu called Degei3to4Migration.exe

Satchfan

Post #11May 21, 2012, 9:17 AM UTC

At least your start menu is back.

The taskbar will be sorted out in due course.

Ask Toolbar

Uninstall Ask Toolbar if it was not installed on purpose.

See here for more info.

If you choose to follow my recommendation then please uninstall the following programs if present:

Ask Toolbar or anything related to Ask

======================================================

Run TDSSKiller

Please download TDSSKiller.zip

extract it to your desktop
double click TDSSKiller.exe
press Start Scan
- only if Malicious objects are found then ensure Cure is selected. Do not change it to Delete or Quarantine as it may delete infected files that are required for Windows to operate properly.
- then click Continue > Reboot now
copy and paste the log in your next reply
- A copy of the log will be saved automatically to the root of the drive (typically C:\) called TDSSKiller_*** (*** denotes version & date)

======================================================

Download and run ComboFix

Download ComboFix from the following location:

Link

* IMPORTANT !!! Save ComboFix.exe to your Desktop

disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
see this Link for programs that need to be disabled and instruction on how to disable them.
remember to re-enable them when we're done.
double click on ComboFix.exe & follow the prompts.
as part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue its malware removal procedures.

[external image: Posted Image]

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

Click on Yes, to continue scanning for malware.

Note: Do not mouse-click combofix's window while it is running. That may cause it to stall.

When finished, it will produce a log. Please include the ComboFix.txt in your next reply. It can be found at C:\ComboFix.txt

Please also remember to include the TDSSKiller log

Thanks

Satchfan

liaml

Post #12May 21, 2012, 9:51 AM UTC

Here is the log: 19:48:11.0634 4248 TDSS rootkit removing tool [removed] May 16 2012 07:37:57 19:48:12.0476 4248 ============================================================ 19:48:12.0476 4248 Current date / time: 2012/05/21 19:48:12.0476 19:48:12.0476 4248 SystemInfo: 19:48:12.0476 4248 19:48:12.0476 4248 OS Version: 6.1.7601 ServicePack: 1.0 19:48:12.0476 4248 Product type: Workstation 19:48:12.0476 4248 ComputerName: LIAM-PC 19:48:12.0476 4248 UserName: Liam 19:48:12.0476 4248 Windows directory: C:\windows 19:48:12.0476 4248 System windows directory: C:\windows 19:48:12.0476 4248 Processor architecture: Intel x86 19:48:12.0476 4248 Number of processors: 4 19:48:12.0476 4248 Page size: 0x1000 19:48:12.0476 4248 Boot type: Normal boot 19:48:12.0476 4248 ============================================================ 19:48:13.0553 4248 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050 19:48:13.0553 4248 ============================================================ 19:48:13.0553 4248 \Device\Harddisk0\DR0: 19:48:13.0553 4248 MBR partitions: 19:48:13.0553 4248 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0x38E0E800 19:48:13.0553 4248 ============================================================ 19:48:13.0568 4248 C: <-> \Device\Harddisk0\DR0\Partition0 19:48:13.0599 4248 ============================================================ 19:48:13.0599 4248 Initialize success 19:48:13.0599 4248 ============================================================ 19:48:20.0760 6964 ============================================================ 19:48:20.0760 6964 Scan started 19:48:20.0760 6964 Mode: Manual; 19:48:20.0760 6964 ============================================================ 19:48:24.0909 6964 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\windows\system32\drivers\1394ohci.sys 19:48:24.0909 6964 1394ohci - ok 19:48:24.0941 6964 ACPI (cea80c80bed809aa0da6febc04733349) C:\windows\system32\drivers\ACPI.sys 19:48:24.0972 6964 ACPI - ok 19:48:24.0987 6964 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\windows\system32\drivers\acpipmi.sys 19:48:25.0003 6964 AcpiPmi - ok 19:48:25.0065 6964 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\drivers\adp94xx.sys 19:48:25.0097 6964 adp94xx - ok 19:48:25.0175 6964 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\drivers\adpahci.sys 19:48:25.0190 6964 adpahci - ok 19:48:25.0206 6964 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\drivers\adpu320.sys 19:48:25.0206 6964 adpu320 - ok 19:48:25.0253 6964 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\windows\System32\aelupsvc.dll 19:48:25.0253 6964 AeLookupSvc - ok 19:48:25.0377 6964 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\windows\system32\drivers\afd.sys 19:48:25.0409 6964 AFD - ok 19:48:25.0455 6964 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\drivers\agp440.sys 19:48:25.0455 6964 agp440 - ok 19:48:25.0502 6964 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\drivers\djsvs.sys 19:48:25.0518 6964 aic78xx - ok 19:48:25.0565 6964 ALG (18a54e132947cd98fea9accc57f98f13) C:\windows\System32\alg.exe 19:48:25.0580 6964 ALG - ok 19:48:25.0643 6964 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\drivers\aliide.sys 19:48:25.0643 6964 aliide - ok 19:48:25.0658 6964 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\drivers\amdagp.sys 19:48:25.0674 6964 amdagp - ok 19:48:25.0705 6964 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\drivers\amdide.sys 19:48:25.0705 6964 amdide - ok 19:48:25.0736 6964 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\drivers\amdk8.sys 19:48:25.0736 6964 AmdK8 - ok 19:48:25.0752 6964 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\drivers\amdppm.sys 19:48:25.0752 6964 AmdPPM - ok 19:48:25.0799 6964 amdsata (d320bf87125326f996d4904fe24300fc) C:\windows\system32\drivers\amdsata.sys 19:48:25.0814 6964 amdsata - ok 19:48:25.0939 6964 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\drivers\amdsbs.sys 19:48:25.0986 6964 amdsbs - ok 19:48:26.0033 6964 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\windows\system32\drivers\amdxata.sys 19:48:26.0033 6964 amdxata - ok 19:48:26.0251 6964 Amsp (feb0b5022c012a4a68dabcb711faff03) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe 19:48:26.0267 6964 Amsp - ok 19:48:26.0563 6964 AntUpdaterService (c710b5d634dccf966661939193175de4) C:\Program Files\Ant.com\IE add-on\AntUpdaterService.exe 19:48:26.0625 6964 AntUpdaterService - ok 19:48:26.0672 6964 AppID (aea177f783e20150ace5383ee368da19) C:\windows\system32\drivers\appid.sys 19:48:26.0688 6964 AppID - ok 19:48:26.0719 6964 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\windows\System32\appidsvc.dll 19:48:26.0735 6964 AppIDSvc - ok 19:48:26.0750 6964 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\windows\System32\appinfo.dll 19:48:26.0766 6964 Appinfo - ok 19:48:27.0047 6964 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 19:48:27.0062 6964 Apple Mobile Device - ok 19:48:27.0109 6964 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\drivers\arc.sys 19:48:27.0125 6964 arc - ok 19:48:27.0156 6964 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\drivers\arcsas.sys 19:48:27.0171 6964 arcsas - ok 19:48:27.0561 6964 aspnet_state (776acefa0ca9df0faa51a5fb2f435705) C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe 19:48:27.0624 6964 aspnet_state - ok 19:48:27.0639 6964 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys 19:48:27.0655 6964 AsyncMac - ok 19:48:27.0686 6964 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\drivers\atapi.sys 19:48:27.0686 6964 atapi - ok 19:48:27.0873 6964 athr (3dd5636164ba137089af39e55f00fd2e) C:\windows\system32\DRIVERS\athr.sys 19:48:27.0967 6964 athr - ok 19:48:28.0123 6964 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll 19:48:28.0139 6964 AudioEndpointBuilder - ok 19:48:28.0139 6964 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll 19:48:28.0139 6964 Audiosrv - ok 19:48:28.0170 6964 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\windows\System32\AxInstSV.dll 19:48:28.0185 6964 AxInstSV - ok 19:48:28.0248 6964 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\drivers\bxvbdx.sys 19:48:28.0263 6964 b06bdrv - ok 19:48:28.0295 6964 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys 19:48:28.0310 6964 b57nd60x - ok 19:48:28.0373 6964 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\windows\System32\bdesvc.dll 19:48:28.0373 6964 BDESVC - ok 19:48:28.0388 6964 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys 19:48:28.0404 6964 Beep - ok 19:48:28.0451 6964 BFE (1e2bac209d184bb851e1a187d8a29136) C:\windows\System32\bfe.dll 19:48:28.0466 6964 BFE - ok 19:48:28.0529 6964 BITS (e585445d5021971fae10393f0f1c3961) C:\windows\System32\qmgr.dll 19:48:28.0560 6964 BITS - ok 19:48:28.0607 6964 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys 19:48:28.0622 6964 blbdrive - ok 19:48:28.0825 6964 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe 19:48:28.0841 6964 Bonjour Service - ok 19:48:28.0887 6964 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\windows\system32\DRIVERS\bowser.sys 19:48:28.0887 6964 bowser - ok 19:48:28.0903 6964 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\drivers\BrFiltLo.sys 19:48:28.0919 6964 BrFiltLo - ok 19:48:28.0934 6964 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\drivers\BrFiltUp.sys 19:48:28.0934 6964 BrFiltUp - ok 19:48:28.0981 6964 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\windows\System32\browser.dll 19:48:28.0997 6964 Browser - ok 19:48:29.0059 6964 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys 19:48:29.0075 6964 Brserid - ok 19:48:29.0090 6964 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys 19:48:29.0090 6964 BrSerWdm - ok 19:48:29.0090 6964 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys 19:48:29.0106 6964 BrUsbMdm - ok 19:48:29.0106 6964 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys 19:48:29.0121 6964 BrUsbSer - ok 19:48:29.0184 6964 BtFilter (a65e0c67612ed2de58dc80e7cdd8cb14) C:\windows\system32\DRIVERS\btfilter.sys 19:48:29.0199 6964 BtFilter - ok 19:48:29.0215 6964 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\drivers\bthmodem.sys 19:48:29.0231 6964 BTHMODEM - ok 19:48:29.0277 6964 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\windows\system32\bthserv.dll 19:48:29.0277 6964 bthserv - ok 19:48:29.0309 6964 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys 19:48:29.0324 6964 cdfs - ok 19:48:29.0355 6964 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\windows\system32\DRIVERS\cdrom.sys 19:48:29.0371 6964 cdrom - ok 19:48:29.0387 6964 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll 19:48:29.0402 6964 CertPropSvc - ok 19:48:29.0652 6964 cfWiMAXService (3653fd7871e8b5b92e9c3e2945bd293d) C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe 19:48:29.0667 6964 cfWiMAXService - ok 19:48:29.0714 6964 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\drivers\circlass.sys 19:48:29.0730 6964 circlass - ok 19:48:29.0777 6964 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys 19:48:29.0792 6964 CLFS - ok 19:48:29.0917 6964 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 19:48:29.0933 6964 clr_optimization_v2.0.50727_32 - ok 19:48:30.0354 6964 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 19:48:30.0557 6964 clr_optimization_v4.0.30319_32 - ok 19:48:30.0588 6964 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys 19:48:30.0603 6964 CmBatt - ok 19:48:30.0603 6964 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\drivers\cmdide.sys 19:48:30.0619 6964 cmdide - ok 19:48:30.0681 6964 CNG (6427525d76f61d0c519b008d3680e8e7) C:\windows\system32\Drivers\cng.sys 19:48:30.0697 6964 CNG - ok 19:48:30.0853 6964 CnxtHdAudService (87fe2fde42249a69c010ccbb6757704c) C:\windows\system32\drivers\CHDRT32.sys 19:48:30.0900 6964 CnxtHdAudService - ok 19:48:31.0056 6964 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\drivers\compbatt.sys 19:48:31.0071 6964 Compbatt - ok 19:48:31.0103 6964 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\windows\system32\DRIVERS\CompositeBus.sys 19:48:31.0103 6964 CompositeBus - ok 19:48:31.0118 6964 COMSysApp - ok 19:48:31.0274 6964 ConfigFree Service (cab0eeaf5295fc96ddd3e19dce27e131) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe 19:48:31.0290 6964 ConfigFree Service - ok 19:48:31.0352 6964 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\drivers\crcdisk.sys 19:48:31.0368 6964 crcdisk - ok 19:48:31.0430 6964 CryptSvc (a585bebf7d054bd9618eda0922d5484a) C:\windows\system32\cryptsvc.dll 19:48:31.0430 6964 CryptSvc - ok 19:48:31.0555 6964 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll 19:48:31.0586 6964 DcomLaunch - ok 19:48:31.0633 6964 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\windows\System32\defragsvc.dll 19:48:31.0649 6964 defragsvc - ok 19:48:31.0711 6964 DfsC (f024449c97ec1e464aaffda18593db88) C:\windows\system32\Drivers\dfsc.sys 19:48:31.0727 6964 DfsC - ok 19:48:31.0867 6964 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\windows\system32\dhcpcore.dll 19:48:31.0898 6964 Dhcp - ok 19:48:31.0929 6964 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys 19:48:31.0945 6964 discache - ok 19:48:32.0054 6964 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\drivers\disk.sys 19:48:32.0070 6964 Disk - ok 19:48:32.0117 6964 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\windows\System32\dnsrslvr.dll 19:48:32.0117 6964 Dnscache - ok 19:48:32.0163 6964 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\windows\System32\dot3svc.dll 19:48:32.0179 6964 dot3svc - ok 19:48:32.0319 6964 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\windows\system32\dps.dll 19:48:32.0335 6964 DPS - ok 19:48:32.0382 6964 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys 19:48:32.0397 6964 drmkaud - ok 19:48:32.0460 6964 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\windows\System32\drivers\dxgkrnl.sys 19:48:32.0507 6964 DXGKrnl - ok 19:48:32.0959 6964 DymoPnpService - ok 19:48:33.0006 6964 EagleXNt - ok 19:48:33.0053 6964 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\windows\System32\eapsvc.dll 19:48:33.0068 6964 EapHost - ok 19:48:33.0380 6964 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\drivers\evbdx.sys 19:48:33.0599 6964 ebdrv - ok 19:48:33.0864 6964 EFS (81951f51e318aecc2d68559e47485cc4) C:\windows\System32\lsass.exe 19:48:33.0879 6964 EFS - ok 19:48:33.0973 6964 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\windows\ehome\ehRecvr.exe 19:48:34.0004 6964 ehRecvr - ok 19:48:34.0035 6964 ehSched (d389bff34f80caede417bf9d1507996a) C:\windows\ehome\ehsched.exe 19:48:34.0051 6964 ehSched - ok 19:48:34.0176 6964 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\drivers\elxstor.sys 19:48:34.0191 6964 elxstor - ok 19:48:34.0191 6964 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\drivers\errdev.sys 19:48:34.0207 6964 ErrDev - ok 19:48:34.0301 6964 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\windows\system32\es.dll 19:48:34.0316 6964 EventSystem - ok 19:48:34.0394 6964 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys 19:48:34.0410 6964 exfat - ok 19:48:35.0954 6964 ExpressAccountsService (ca6290cc00787b0c68bf20f6750f0497) C:\Program Files\NCH Software\ExpressAccounts\expressaccounts.exe 19:48:36.0765 6964 ExpressAccountsService - ok 19:48:37.0608 6964 ExpressInvoiceService (a8f85688ff64b62635fffca1c6624ea1) C:\Program Files\NCH Software\ExpressInvoice\expressinvoice.exe 19:48:38.0247 6964 ExpressInvoiceService - ok 19:48:38.0497 6964 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys 19:48:38.0513 6964 fastfat - ok 19:48:38.0700 6964 Fax (967ea5b213e9984cbe270205df37755b) C:\windows\system32\fxssvc.exe 19:48:38.0747 6964 Fax - ok 19:48:38.0793 6964 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\drivers\fdc.sys 19:48:38.0809 6964 fdc - ok 19:48:38.0840 6964 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\windows\system32\fdPHost.dll 19:48:38.0856 6964 fdPHost - ok 19:48:38.0903 6964 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\windows\system32\fdrespub.dll 19:48:38.0918 6964 FDResPub - ok 19:48:38.0949 6964 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys 19:48:38.0949 6964 FileInfo - ok 19:48:38.0965 6964 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys 19:48:38.0981 6964 Filetrace - ok 19:48:39.0027 6964 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\drivers\flpydisk.sys 19:48:39.0043 6964 flpydisk - ok 19:48:39.0059 6964 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys 19:48:39.0090 6964 FltMgr - ok 19:48:39.0261 6964 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\windows\system32\FntCache.dll 19:48:39.0339 6964 FontCache - ok 19:48:39.0417 6964 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 19:48:39.0433 6964 FontCache3.0.0.0 - ok 19:48:39.0464 6964 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys 19:48:39.0464 6964 FsDepends - ok 19:48:39.0573 6964 fssfltr (d909075fa72c090f27aa926c32cb4612) C:\windows\system32\DRIVERS\fssfltr.sys 19:48:39.0620 6964 fssfltr - ok 19:48:39.0932 6964 fsssvc (4ce9dac1518ff7e77bd213e6394b9d77) C:\Program Files\Windows Live\Family Safety\fsssvc.exe 19:48:39.0948 6964 fsssvc - ok 19:48:40.0182 6964 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\windows\system32\drivers\Fs_Rec.sys 19:48:40.0182 6964 Fs_Rec - ok 19:48:40.0260 6964 fvevol (8a73e79089b282100b9393b644cb853b) C:\windows\system32\DRIVERS\fvevol.sys 19:48:40.0275 6964 fvevol - ok 19:48:40.0353 6964 FwLnk (0f76e205bdc60364f08a5949082771ca) C:\windows\system32\DRIVERS\FwLnk.sys 19:48:40.0369 6964 FwLnk - ok 19:48:40.0431 6964 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\drivers\gagp30kx.sys 19:48:40.0431 6964 gagp30kx - ok 19:48:40.0619 6964 GameConsoleService (ce16683cfd11fe70bde435dda5ea1fca) C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe 19:48:40.0634 6964 GameConsoleService - ok 19:48:40.0743 6964 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\windows\system32\DRIVERS\GEARAspiWDM.sys 19:48:40.0759 6964 GEARAspiWDM - ok 19:48:40.0868 6964 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\windows\System32\gpsvc.dll 19:48:40.0915 6964 gpsvc - ok 19:48:41.0087 6964 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe 19:48:41.0102 6964 gupdate - ok 19:48:41.0133 6964 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files\Google\Update\GoogleUpdate.exe 19:48:41.0133 6964 gupdatem - ok 19:48:41.0196 6964 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys 19:48:41.0227 6964 hcw85cir - ok 19:48:41.0305 6964 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\windows\system32\drivers\HdAudio.sys 19:48:41.0321 6964 HdAudAddService - ok 19:48:41.0352 6964 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\windows\system32\DRIVERS\HDAudBus.sys 19:48:41.0367 6964 HDAudBus - ok 19:48:41.0367 6964 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\drivers\HidBatt.sys 19:48:41.0383 6964 HidBatt - ok 19:48:41.0430 6964 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\drivers\hidbth.sys 19:48:41.0445 6964 HidBth - ok 19:48:41.0461 6964 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\drivers\hidir.sys 19:48:41.0477 6964 HidIr - ok 19:48:41.0523 6964 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\windows\system32\hidserv.dll 19:48:41.0523 6964 hidserv - ok 19:48:41.0601 6964 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\windows\system32\drivers\hidusb.sys 19:48:41.0617 6964 HidUsb - ok 19:48:41.0679 6964 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\windows\system32\kmsvc.dll 19:48:41.0695 6964 hkmsvc - ok 19:48:41.0757 6964 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\windows\system32\ListSvc.dll 19:48:41.0789 6964 HomeGroupListener - ok 19:48:41.0851 6964 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\windows\system32\provsvc.dll 19:48:41.0867 6964 HomeGroupProvider - ok 19:48:41.0913 6964 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\drivers\HpSAMD.sys 19:48:41.0929 6964 HpSAMD - ok 19:48:41.0960 6964 HTTP (871917b07a141bff43d76d8844d48106) C:\windows\system32\drivers\HTTP.sys 19:48:42.0007 6964 HTTP - ok 19:48:42.0007 6964 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\windows\system32\drivers\hwpolicy.sys 19:48:42.0023 6964 hwpolicy - ok 19:48:42.0194 6964 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\DRIVERS\i8042prt.sys 19:48:42.0194 6964 i8042prt - ok 19:48:42.0272 6964 iaStor (f4037a3fedb92dd97c95f320766ea5c9) C:\windows\system32\DRIVERS\iaStor.sys 19:48:42.0272 6964 iaStor - ok 19:48:42.0381 6964 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\windows\system32\drivers\iaStorV.sys 19:48:42.0413 6964 iaStorV - ok 19:48:42.0569 6964 IDriverT (daf66902f08796f9c694901660e5a64a) C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe 19:48:42.0615 6964 IDriverT - ok 19:48:42.0834 6964 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 19:48:42.0959 6964 idsvc - ok 19:48:44.0051 6964 igfx (ca7a6dfe9b6f2686b68c4d97cb42f63a) C:\windows\system32\DRIVERS\igdkmd32.sys 19:48:44.0550 6964 igfx - ok 19:48:44.0737 6964 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\drivers\iirsp.sys 19:48:44.0753 6964 iirsp - ok 19:48:44.0862 6964 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\windows\System32\ikeext.dll 19:48:44.0893 6964 IKEEXT - ok 19:48:44.0924 6964 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\drivers\intelide.sys 19:48:44.0940 6964 intelide - ok 19:48:45.0002 6964 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys 19:48:45.0002 6964 intelppm - ok 19:48:46.0250 6964 InventoriaService (bf24e93837d3e0bff615dbe508ad42aa) C:\Program Files\NCH Software\Inventoria\inventoria.exe 19:48:46.0937 6964 InventoriaService - ok 19:48:47.0139 6964 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\windows\system32\ipbusenum.dll 19:48:47.0155 6964 IPBusEnum - ok 19:48:47.0202 6964 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys 19:48:47.0217 6964 IpFilterDriver - ok 19:48:47.0217 6964 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\windows\system32\drivers\IPMIDrv.sys 19:48:47.0233 6964 IPMIDRV - ok 19:48:47.0264 6964 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys 19:48:47.0264 6964 IPNAT - ok 19:48:47.0514 6964 iPod Service (178fe38b7740f598391eb2f51ae4ccac) C:\Program Files\iPod\bin\iPodService.exe 19:48:47.0576 6964 iPod Service - ok 19:48:47.0607 6964 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys 19:48:47.0623 6964 IRENUM - ok 19:48:47.0654 6964 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\drivers\isapnp.sys 19:48:47.0654 6964 isapnp - ok 19:48:47.0748 6964 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\windows\system32\drivers\msiscsi.sys 19:48:47.0763 6964 iScsiPrt - ok 19:48:47.0810 6964 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\DRIVERS\kbdclass.sys 19:48:47.0810 6964 kbdclass - ok 19:48:47.0873 6964 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\windows\system32\drivers\kbdhid.sys 19:48:47.0888 6964 kbdhid - ok 19:48:47.0935 6964 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe 19:48:47.0935 6964 KeyIso - ok 19:48:47.0951 6964 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\windows\system32\Drivers\ksecdd.sys 19:48:47.0966 6964 KSecDD - ok 19:48:48.0029 6964 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\windows\system32\Drivers\ksecpkg.sys 19:48:48.0044 6964 KSecPkg - ok 19:48:48.0122 6964 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\windows\system32\msdtckrm.dll 19:48:48.0138 6964 KtmRm - ok 19:48:48.0216 6964 L1C (f7420de6a3d7ec577094418711c13dea) C:\windows\system32\DRIVERS\L1C62x86.sys 19:48:48.0231 6964 L1C - ok 19:48:48.0294 6964 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\windows\system32\srvsvc.dll 19:48:48.0309 6964 LanmanServer - ok 19:48:48.0356 6964 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\windows\System32\wkssvc.dll 19:48:48.0372 6964 LanmanWorkstation - ok 19:48:48.0450 6964 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys 19:48:48.0465 6964 lltdio - ok 19:48:48.0512 6964 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\windows\System32\lltdsvc.dll 19:48:48.0528 6964 lltdsvc - ok 19:48:48.0528 6964 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\windows\System32\lmhsvc.dll 19:48:48.0543 6964 lmhosts - ok 19:48:48.0762 6964 LMS (98b16e756243bea9410e32025b19c06f) C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe 19:48:48.0777 6964 LMS - ok 19:48:48.0840 6964 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\drivers\lsi_fc.sys 19:48:48.0855 6964 LSI_FC - ok 19:48:48.0918 6964 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\drivers\lsi_sas.sys 19:48:48.0933 6964 LSI_SAS - ok 19:48:48.0949 6964 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\drivers\lsi_sas2.sys 19:48:48.0965 6964 LSI_SAS2 - ok 19:48:48.0980 6964 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\drivers\lsi_scsi.sys 19:48:48.0996 6964 LSI_SCSI - ok 19:48:48.0996 6964 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys 19:48:49.0011 6964 luafv - ok 19:48:49.0058 6964 ManyCam (c6d085c7045200143528136a43a65fde) C:\windows\system32\DRIVERS\ManyCam.sys 19:48:49.0058 6964 ManyCam - ok 19:48:49.0355 6964 McComponentHostService (f453d1e6d881e8f8717e20ccd4199e85) C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe 19:48:49.0433 6964 McComponentHostService - ok 19:48:49.0479 6964 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\windows\system32\Mcx2Svc.dll 19:48:49.0479 6964 Mcx2Svc - ok 19:48:49.0511 6964 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\drivers\megasas.sys 19:48:49.0526 6964 megasas - ok 19:48:49.0635 6964 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\drivers\MegaSR.sys 19:48:49.0651 6964 MegaSR - ok 19:48:49.0682 6964 MEI (d86ac00883b9c98b570e7643aaf8e554) C:\windows\system32\DRIVERS\HECI.sys 19:48:49.0698 6964 MEI - ok 19:48:49.0760 6964 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll 19:48:49.0760 6964 MMCSS - ok 19:48:49.0807 6964 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys 19:48:49.0807 6964 Modem - ok 19:48:49.0838 6964 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys 19:48:49.0854 6964 monitor - ok 19:48:49.0854 6964 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\DRIVERS\mouclass.sys 19:48:49.0869 6964 mouclass - ok 19:48:49.0916 6964 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\drivers\mouhid.sys 19:48:49.0932 6964 mouhid - ok 19:48:49.0963 6964 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\windows\system32\drivers\mountmgr.sys 19:48:49.0979 6964 mountmgr - ok 19:48:50.0010 6964 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\windows\system32\drivers\mpio.sys 19:48:50.0025 6964 mpio - ok 19:48:50.0041 6964 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys 19:48:50.0041 6964 mpsdrv - ok 19:48:50.0057 6964 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\windows\system32\drivers\mrxdav.sys 19:48:50.0072 6964 MRxDAV - ok 19:48:50.0150 6964 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\windows\system32\DRIVERS\mrxsmb.sys 19:48:50.0166 6964 mrxsmb - ok 19:48:50.0181 6964 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\windows\system32\DRIVERS\mrxsmb10.sys 19:48:50.0197 6964 mrxsmb10 - ok 19:48:50.0213 6964 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\windows\system32\DRIVERS\mrxsmb20.sys 19:48:50.0213 6964 mrxsmb20 - ok 19:48:50.0275 6964 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\windows\system32\DRIVERS\msahci.sys 19:48:50.0291 6964 msahci - ok 19:48:50.0353 6964 msdsm (55055f8ad8be27a64c831322a780a228) C:\windows\system32\drivers\msdsm.sys 19:48:50.0369 6964 msdsm - ok 19:48:50.0400 6964 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\windows\System32\msdtc.exe 19:48:50.0415 6964 MSDTC - ok 19:48:50.0462 6964 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys 19:48:50.0462 6964 Msfs - ok 19:48:50.0493 6964 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys 19:48:50.0493 6964 mshidkmdf - ok 19:48:50.0509 6964 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\drivers\msisadrv.sys 19:48:50.0525 6964 msisadrv - ok 19:48:50.0571 6964 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\windows\system32\iscsiexe.dll 19:48:50.0587 6964 MSiSCSI - ok 19:48:50.0587 6964 msiserver - ok 19:48:50.0618 6964 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys 19:48:50.0634 6964 MSKSSRV - ok 19:48:50.0665 6964 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys 19:48:50.0665 6964 MSPCLOCK - ok 19:48:50.0665 6964 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys 19:48:50.0681 6964 MSPQM - ok 19:48:50.0696 6964 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys 19:48:50.0712 6964 MsRPC - ok 19:48:50.0712 6964 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\DRIVERS\mssmbios.sys 19:48:50.0727 6964 mssmbios - ok 19:48:50.0946 6964 MSSQL$INFLOWSQL - ok 19:48:51.0071 6964 MSSQLServerADHelper (1d89eb4e2a99cabd4e81225f4f4c4b25) c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe 19:48:51.0086 6964 MSSQLServerADHelper - ok 19:48:51.0149 6964 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys 19:48:51.0149 6964 MSTEE - ok 19:48:51.0180 6964 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\drivers\MTConfig.sys 19:48:51.0195 6964 MTConfig - ok 19:48:51.0195 6964 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys 19:48:51.0211 6964 Mup - ok 19:48:51.0289 6964 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\windows\system32\qagentRT.dll 19:48:51.0305 6964 napagent - ok 19:48:51.0398 6964 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys 19:48:51.0445 6964 NativeWifiP - ok 19:48:51.0539 6964 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\windows\system32\drivers\ndis.sys 19:48:51.0601 6964 NDIS - ok 19:48:51.0632 6964 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys 19:48:51.0648 6964 NdisCap - ok 19:48:51.0741 6964 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys 19:48:51.0757 6964 NdisTapi - ok 19:48:51.0788 6964 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\windows\system32\DRIVERS\ndisuio.sys 19:48:51.0804 6964 Ndisuio - ok 19:48:51.0804 6964 NdisWan (38fbe267e7e6983311179230facb1017) C:\windows\system32\DRIVERS\ndiswan.sys 19:48:51.0819 6964 NdisWan - ok 19:48:51.0882 6964 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\windows\system32\drivers\NDProxy.sys 19:48:51.0882 6964 NDProxy - ok 19:48:51.0975 6964 Netaapl (1352e1648213551923a0a822e441553c) C:\windows\system32\DRIVERS\netaapl.sys 19:48:51.0975 6964 Netaapl - ok 19:48:52.0053 6964 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys 19:48:52.0069 6964 NetBIOS - ok 19:48:52.0085 6964 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\windows\system32\DRIVERS\netbt.sys 19:48:52.0085 6964 NetBT - ok 19:48:52.0178 6964 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe 19:48:52.0178 6964 Netlogon - ok 19:48:52.0256 6964 Netman (7cccfca7510684768da22092d1fa4db2) C:\windows\System32\netman.dll 19:48:52.0272 6964 Netman - ok 19:48:52.0755 6964 NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe 19:48:53.0036 6964 NetMsmqActivator - ok 19:48:53.0067 6964 NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe 19:48:53.0067 6964 NetPipeActivator - ok 19:48:53.0099 6964 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\windows\System32\netprofm.dll 19:48:53.0114 6964 netprofm - ok 19:48:53.0114 6964 NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe 19:48:53.0114 6964 NetTcpActivator - ok 19:48:53.0114 6964 NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe 19:48:53.0114 6964 NetTcpPortSharing - ok 19:48:53.0208 6964 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\drivers\nfrd960.sys 19:48:53.0223 6964 nfrd960 - ok 19:48:53.0286 6964 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\windows\System32\nlasvc.dll 19:48:53.0301 6964 NlaSvc - ok 19:48:53.0473 6964 NOBU - ok 19:48:53.0535 6964 Norton PC Checkup Application Launcher - ok 19:48:53.0738 6964 NPF (b9730495e0cf674680121e34bd95a73b) C:\windows\system32\DRIVERS\npf.sys 19:48:54.0081 6964 NPF - ok 19:48:54.0113 6964 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys 19:48:54.0113 6964 Npfs - ok 19:48:54.0159 6964 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\windows\system32\nsisvc.dll 19:48:54.0175 6964 nsi - ok 19:48:54.0175 6964 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys 19:48:54.0191 6964 nsiproxy - ok 19:48:54.0393 6964 Ntfs (81189c3d7763838e55c397759d49007a) C:\windows\system32\drivers\Ntfs.sys 19:48:54.0440 6964 Ntfs - ok 19:48:54.0612 6964 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys 19:48:54.0612 6964 Null - ok 19:48:54.0721 6964 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\windows\system32\drivers\nvraid.sys 19:48:54.0737 6964 nvraid - ok 19:48:54.0783 6964 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\windows\system32\drivers\nvstor.sys 19:48:54.0799 6964 nvstor - ok 19:48:54.0877 6964 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\drivers\nv_agp.sys 19:48:54.0893 6964 nv_agp - ok 19:48:54.0908 6964 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\drivers\ohci1394.sys 19:48:54.0924 6964 ohci1394 - ok 19:48:55.0049 6964 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 19:48:55.0080 6964 ose - ok 19:48:55.0969 6964 osppsvc (358a9cca612c68eb2f07ddad4ce1d8d7) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 19:48:56.0172 6964 osppsvc - ok 19:48:56.0265 6964 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll 19:48:56.0297 6964 p2pimsvc - ok 19:48:56.0312 6964 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\windows\system32\p2psvc.dll 19:48:56.0343 6964 p2psvc - ok 19:48:56.0375 6964 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\drivers\parport.sys 19:48:56.0390 6964 Parport - ok 19:48:56.0437 6964 partmgr (3f34a1b4c5f6475f320c275e63afce9b) C:\windows\system32\drivers\partmgr.sys 19:48:56.0453 6964 partmgr - ok 19:48:56.0453 6964 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\drivers\parvdm.sys 19:48:56.0453 6964 Parvdm - ok 19:48:56.0499 6964 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\windows\System32\pcasvc.dll 19:48:56.0515 6964 PcaSvc - ok 19:48:56.0655 6964 PCCUJobMgr (2f86be1818c2d7ac90478e3323ee7fcb) C:\Program Files\Norton PC Checkup\Engine\2.0.3.202\ccSvcHst.exe 19:48:56.0671 6964 PCCUJobMgr - ok 19:48:56.0687 6964 pci (673e55c3498eb970088e812ea820aa8f) C:\windows\system32\drivers\pci.sys 19:48:56.0702 6964 pci - ok 19:48:56.0718 6964 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\DRIVERS\pciide.sys 19:48:56.0733 6964 pciide - ok 19:48:56.0733 6964 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\drivers\pcmcia.sys 19:48:56.0749 6964 pcmcia - ok 19:48:56.0874 6964 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\windows\system32\Drivers\pcouffin.sys 19:48:56.0874 6964 pcouffin - ok 19:48:56.0905 6964 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys 19:48:56.0905 6964 pcw - ok 19:48:56.0967 6964 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys 19:48:57.0030 6964 PEAUTH - ok 19:48:57.0108 6964 PGEffect (b4948e692aab9091b45105706ec3f3ee) C:\windows\system32\DRIVERS\pgeffect.sys 19:48:57.0108 6964 PGEffect - ok 19:48:57.0295 6964 pla (414bba67a3ded1d28437eb66aeb8a720) C:\windows\system32\pla.dll 19:48:57.0389 6964 pla - ok 19:48:57.0576 6964 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\windows\system32\umpnpmgr.dll 19:48:57.0591 6964 PlugPlay - ok 19:48:57.0623 6964 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\windows\system32\pnrpauto.dll 19:48:57.0638 6964 PNRPAutoReg - ok 19:48:57.0669 6964 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll 19:48:57.0685 6964 PNRPsvc - ok 19:48:57.0732 6964 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\windows\System32\ipsecsvc.dll 19:48:57.0747 6964 PolicyAgent - ok 19:48:57.0794 6964 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\windows\system32\umpo.dll 19:48:57.0810 6964 Power - ok 19:48:57.0888 6964 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys 19:48:57.0888 6964 PptpMiniport - ok 19:48:57.0919 6964 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\drivers\processr.sys 19:48:57.0935 6964 Processor - ok 19:48:58.0028 6964 ProfSvc (43ca4ccc22d52fb58e8988f0198851d0) C:\windows\system32\profsvc.dll 19:48:58.0044 6964 ProfSvc - ok 19:48:58.0122 6964 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe 19:48:58.0122 6964 ProtectedStorage - ok 19:48:58.0200 6964 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys 19:48:58.0215 6964 Psched - ok 19:48:58.0309 6964 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\drivers\ql2300.sys 19:48:58.0371 6964 ql2300 - ok 19:48:58.0590 6964 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\drivers\ql40xx.sys 19:48:58.0605 6964 ql40xx - ok 19:48:58.0668 6964 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\windows\system32\qwave.dll 19:48:58.0683 6964 QWAVE - ok 19:48:58.0683 6964 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys 19:48:58.0699 6964 QWAVEdrv - ok 19:48:58.0699 6964 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys 19:48:58.0715 6964 RasAcd - ok 19:48:58.0761 6964 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys 19:48:58.0777 6964 RasAgileVpn - ok 19:48:58.0808 6964 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\windows\System32\rasauto.dll 19:48:58.0808 6964 RasAuto - ok 19:48:58.0839 6964 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys 19:48:58.0855 6964 Rasl2tp - ok 19:48:58.0933 6964 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\windows\System32\rasmans.dll 19:48:58.0933 6964 RasMan - ok 19:48:58.0980 6964 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys 19:48:58.0995 6964 RasPppoe - ok 19:48:59.0042 6964 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys 19:48:59.0058 6964 RasSstp - ok 19:48:59.0058 6964 rdbss (d528bc58a489409ba40334ebf96a311b) C:\windows\system32\DRIVERS\rdbss.sys 19:48:59.0073 6964 rdbss - ok 19:48:59.0105 6964 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\drivers\rdpbus.sys 19:48:59.0105 6964 rdpbus - ok 19:48:59.0105 6964 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\windows\system32\DRIVERS\RDPCDD.sys 19:48:59.0120 6964 RDPCDD - ok 19:48:59.0151 6964 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys 19:48:59.0151 6964 RDPENCDD - ok 19:48:59.0167 6964 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys 19:48:59.0183 6964 RDPREFMP - ok 19:48:59.0229 6964 RDPWD (244c83332f44589ae98fc347f11b2693) C:\windows\system32\drivers\RDPWD.sys 19:48:59.0245 6964 RDPWD - ok 19:48:59.0261 6964 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\windows\system32\drivers\rdyboost.sys 19:48:59.0292 6964 rdyboost - ok 19:48:59.0370 6964 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\windows\System32\mprdim.dll 19:48:59.0370 6964 RemoteAccess - ok 19:48:59.0417 6964 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\windows\system32\regsvc.dll 19:48:59.0432 6964 RemoteRegistry - ok 19:48:59.0463 6964 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\windows\System32\RpcEpMap.dll 19:48:59.0479 6964 RpcEptMapper - ok 19:48:59.0526 6964 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\windows\system32\locator.exe 19:48:59.0541 6964 RpcLocator - ok 19:48:59.0573 6964 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll 19:48:59.0588 6964 RpcSs - ok 19:48:59.0619 6964 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys 19:48:59.0635 6964 rspndr - ok 19:48:59.0682 6964 RSUSBSTOR (7788441c05a941c184e73ca371affcec) C:\windows\system32\Drivers\RtsUStor.sys 19:48:59.0697 6964 RSUSBSTOR - ok 19:48:59.0775 6964 SamSs (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe 19:48:59.0775 6964 SamSs - ok 19:48:59.0791 6964 sbp2port (05d860da1040f111503ac416ccef2bca) C:\windows\system32\drivers\sbp2port.sys 19:48:59.0822 6964 sbp2port - ok 19:48:59.0916 6964 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\windows\System32\SCardSvr.dll 19:48:59.0931 6964 SCardSvr - ok 19:48:59.0963 6964 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\windows\system32\DRIVERS\scfilter.sys 19:48:59.0978 6964 scfilter - ok 19:49:00.0009 6964 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\windows\system32\schedsvc.dll 19:49:00.0041 6964 Schedule - ok 19:49:00.0134 6964 SCMNdisP (3b68015683c27cb00c7a6b60a37cbcfd) C:\windows\system32\DRIVERS\scmndisp.sys 19:49:00.0150 6964 SCMNdisP - ok 19:49:00.0212 6964 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll 19:49:00.0212 6964 SCPolicySvc - ok 19:49:00.0306 6964 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\windows\System32\SDRSVC.dll 19:49:00.0321 6964 SDRSVC - ok 19:49:00.0353 6964 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys 19:49:00.0368 6964 secdrv - ok 19:49:00.0399 6964 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\windows\system32\seclogon.dll 19:49:00.0399 6964 seclogon - ok 19:49:00.0446 6964 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\windows\System32\sens.dll 19:49:00.0462 6964 SENS - ok 19:49:00.0493 6964 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\windows\system32\sensrsvc.dll 19:49:00.0509 6964 SensrSvc - ok 19:49:00.0509 6964 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\drivers\serenum.sys 19:49:00.0524 6964 Serenum - ok 19:49:00.0555 6964 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\drivers\serial.sys 19:49:00.0571 6964 Serial - ok 19:49:00.0680 6964 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\drivers\sermouse.sys 19:49:00.0680 6964 sermouse - ok 19:49:00.0711 6964 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\windows\system32\sessenv.dll 19:49:00.0727 6964 SessionEnv - ok 19:49:00.0743 6964 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\drivers\sffdisk.sys 19:49:00.0743 6964 sffdisk - ok 19:49:00.0758 6964 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\drivers\sffp_mmc.sys 19:49:00.0758 6964 sffp_mmc - ok 19:49:00.0774 6964 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\windows\system32\drivers\sffp_sd.sys 19:49:00.0774 6964 sffp_sd - ok 19:49:00.0805 6964 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\drivers\sfloppy.sys 19:49:00.0821 6964 sfloppy - ok 19:49:00.0899 6964 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\windows\System32\shsvcs.dll 19:49:00.0930 6964 ShellHWDetection - ok 19:49:00.0945 6964 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\drivers\sisagp.sys 19:49:00.0961 6964 sisagp - ok 19:49:00.0992 6964 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\drivers\SiSRaid2.sys 19:49:01.0008 6964 SiSRaid2 - ok 19:49:01.0039 6964 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\drivers\sisraid4.sys 19:49:01.0039 6964 SiSRaid4 - ok 19:49:01.0070 6964 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys 19:49:01.0086 6964 Smb - ok 19:49:01.0148 6964 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\windows\System32\snmptrap.exe 19:49:01.0164 6964 SNMPTRAP - ok 19:49:01.0164 6964 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys 19:49:01.0179 6964 spldr - ok 19:49:01.0242 6964 Spooler (866a43013535dc8587c258e43579c764) C:\windows\System32\spoolsv.exe 19:49:01.0273 6964 Spooler - ok 19:49:01.0491 6964 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\windows\system32\sppsvc.exe 19:49:01.0601 6964 sppsvc - ok 19:49:01.0710 6964 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\windows\system32\sppuinotify.dll 19:49:01.0725 6964 sppuinotify - ok 19:49:01.0881 6964 SQLBrowser (86ebd8b1f23e743aad21f4d5b4d40985) c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe 19:49:01.0897 6964 SQLBrowser - ok 19:49:01.0928 6964 SQLWriter (d89083c4eb02daca8f944b0e05e57f9d) c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 19:49:01.0944 6964 SQLWriter - ok 19:49:02.0022 6964 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\windows\system32\DRIVERS\srv.sys 19:49:02.0053 6964 srv - ok 19:49:02.0084 6964 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\windows\system32\DRIVERS\srv2.sys 19:49:02.0100 6964 srv2 - ok 19:49:02.0115 6964 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\windows\system32\DRIVERS\srvnet.sys 19:49:02.0115 6964 srvnet - ok 19:49:02.0162 6964 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\windows\System32\ssdpsrv.dll 19:49:02.0162 6964 SSDPSRV - ok 19:49:02.0193 6964 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\windows\system32\sstpsvc.dll 19:49:02.0209 6964 SstpSvc - ok 19:49:02.0271 6964 Steam Client Service - ok 19:49:02.0303 6964 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\drivers\stexstor.sys 19:49:02.0318 6964 stexstor - ok 19:49:02.0381 6964 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\windows\System32\wiaservc.dll 19:49:02.0396 6964 StiSvc - ok 19:49:02.0396 6964 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\DRIVERS\swenum.sys 19:49:02.0412 6964 swenum - ok 19:49:02.0459 6964 swprv (a28bd92df340e57b024ba433165d34d7) C:\windows\System32\swprv.dll 19:49:02.0474 6964 swprv - ok 19:49:02.0521 6964 SynTP (9a28f1c47ce0c8bbc02aaf5941ab44cd) C:\windows\system32\DRIVERS\SynTP.sys 19:49:02.0537 6964 SynTP - ok 19:49:02.0646 6964 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\windows\system32\sysmain.dll 19:49:02.0708 6964 SysMain - ok 19:49:02.0755 6964 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\windows\System32\TabSvc.dll 19:49:02.0771 6964 TabletInputService - ok 19:49:02.0864 6964 TapiSrv (613bf4820361543956909043a265c6ac) C:\windows\System32\tapisrv.dll 19:49:02.0880 6964 TapiSrv - ok 19:49:02.0973 6964 TBS (b799d9fdb26111737f58288d8dc172d9) C:\windows\System32\tbssvc.dll 19:49:02.0989 6964 TBS - ok 19:49:03.0317 6964 Tcpip (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\drivers\tcpip.sys 19:49:03.0363 6964 Tcpip - ok 19:49:03.0691 6964 TCPIP6 (7fa2e0f8b072bd04b77b421480b6cc22) C:\windows\system32\DRIVERS\tcpip.sys 19:49:03.0691 6964 TCPIP6 - ok 19:49:03.0956 6964 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\windows\system32\drivers\tcpipreg.sys 19:49:03.0972 6964 tcpipreg - ok 19:49:04.0019 6964 tdcmdpst (4084ea00d50c858d6f9038f86ae2e2d0) C:\windows\system32\DRIVERS\tdcmdpst.sys 19:49:04.0034 6964 tdcmdpst - ok 19:49:04.0034 6964 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\windows\system32\drivers\tdpipe.sys 19:49:04.0050 6964 TDPIPE - ok 19:49:04.0128 6964 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\windows\system32\drivers\tdtcp.sys 19:49:04.0128 6964 TDTCP - ok 19:49:04.0159 6964 tdx (b459575348c20e8121d6039da063c704) C:\windows\system32\DRIVERS\tdx.sys 19:49:04.0175 6964 tdx - ok 19:49:04.0206 6964 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\windows\system32\DRIVERS\termdd.sys 19:49:04.0221 6964 TermDD - ok 19:49:04.0268 6964 TermService (382c804c92811be57829d8e550a900e2) C:\windows\System32\termsrv.dll 19:49:04.0299 6964 TermService - ok 19:49:04.0299 6964 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\windows\system32\themeservice.dll 19:49:04.0315 6964 Themes - ok 19:49:04.0362 6964 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll 19:49:04.0362 6964 THREADORDER - ok 19:49:04.0611 6964 TMachInfo (83e91963c4452be6899503cf9ebfd3ed) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe 19:49:04.0627 6964 TMachInfo - ok 19:49:04.0721 6964 tmactmon (e8e528896ff2595cfada88749cd72ef8) C:\windows\system32\DRIVERS\tmactmon.sys 19:49:04.0736 6964 tmactmon - ok 19:49:04.0799 6964 tmcomm (1837512d4aab862bd297a2ef035fba14) C:\windows\system32\DRIVERS\tmcomm.sys 19:49:04.0814 6964 tmcomm - ok 19:49:04.0845 6964 tmevtmgr (dbac510d1c7cc66b7a78eb2264f3072e) C:\windows\system32\DRIVERS\tmevtmgr.sys 19:49:04.0861 6964 tmevtmgr - ok 19:49:04.0892 6964 tmtdi (a6e20b094a8d3e3f46d10bbe7e1ebb82) C:\windows\system32\DRIVERS\tmtdi.sys 19:49:04.0908 6964 tmtdi - ok 19:49:04.0955 6964 TODDSrv (6f0257ee066b689350f6b0aa9861bf95) C:\windows\system32\TODDSrv.exe 19:49:04.0970 6964 TODDSrv - ok 19:49:05.0095 6964 TosCoSrv (0ff4c65e18d884955d76d90cdf2ed6a9) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe 19:49:05.0142 6964 TosCoSrv - ok 19:49:05.0423 6964 TOSHIBA Bluetooth Service (3c47a2841bb479201cb356285bc2b18e) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe 19:49:05.0438 6964 TOSHIBA Bluetooth Service - ok 19:49:05.0501 6964 TOSHIBA HDD SSD Alert Service (c704d592a965235e4012a8dae99167e8) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe 19:49:05.0516 6964 TOSHIBA HDD SSD Alert Service - ok 19:49:05.0594 6964 tosporte (90afa1a4451bbbee87c9f18a665d8121) C:\windows\system32\DRIVERS\tosporte.sys 19:49:05.0610 6964 tosporte - ok 19:49:05.0641 6964 tosrfbd (bfacd4bf71261dbb36135d91aaca98ab) C:\windows\system32\DRIVERS\tosrfbd.sys 19:49:05.0657 6964 tosrfbd - ok 19:49:05.0688 6964 tosrfbnp (75cd3c238a0ffc66c4581c3870c09314) C:\windows\system32\Drivers\tosrfbnp.sys 19:49:05.0688 6964 tosrfbnp - ok 19:49:05.0703 6964 Tosrfcom (b551d3f266dda311256f963e8cfd1e9b) C:\windows\system32\Drivers\tosrfcom.sys 19:49:05.0719 6964 Tosrfcom - ok 19:49:05.0750 6964 tosrfec (8a555dcf3ddad3965da11550491408f8) C:\windows\system32\DRIVERS\tosrfec.sys 19:49:05.0750 6964 tosrfec - ok 19:49:05.0781 6964 Tosrfhid (f3e8762163ee87f3ac95537584cf5b4f) C:\windows\system32\DRIVERS\Tosrfhid.sys 19:49:05.0797 6964 Tosrfhid - ok 19:49:05.0828 6964 tosrfnds (b2a1a6538245fd69578224bbf2fd4677) C:\windows\system32\DRIVERS\tosrfnds.sys 19:49:05.0828 6964 tosrfnds - ok 19:49:05.0844 6964 TosRfSnd (3de5cbb4f8eb64563ce08e8ec7458d03) C:\windows\system32\drivers\tosrfsnd.sys 19:49:05.0859 6964 TosRfSnd - ok 19:49:05.0906 6964 Tosrfusb (af5126fb6e9ed41c99ab7a10e98729cd) C:\windows\system32\DRIVERS\tosrfusb.sys 19:49:05.0922 6964 Tosrfusb - ok 19:49:05.0953 6964 tos_sps32 (969377943fe7284609babbab4e06b93c) C:\windows\system32\DRIVERS\tos_sps32.sys 19:49:05.0969 6964 tos_sps32 - ok 19:49:06.0015 6964 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\windows\System32\trkwks.dll 19:49:06.0015 6964 TrkWks - ok 19:49:06.0093 6964 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\windows\servicing\TrustedInstaller.exe 19:49:06.0125 6964 TrustedInstaller - ok 19:49:06.0156 6964 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\windows\system32\DRIVERS\tssecsrv.sys 19:49:06.0171 6964 tssecsrv - ok 19:49:06.0171 6964 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\windows\system32\drivers\tsusbflt.sys 19:49:06.0187 6964 TsUsbFlt - ok 19:49:06.0187 6964 TsUsbGD (01246f0baad7b68ec0f472aa41e33282) C:\windows\system32\drivers\TsUsbGD.sys 19:49:06.0203 6964 TsUsbGD - ok 19:49:06.0218 6964 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\windows\system32\DRIVERS\tunnel.sys 19:49:06.0218 6964 tunnel - ok 19:49:06.0281 6964 TVALZ (fc24015b4052600c324c43e3a79c0664) C:\windows\system32\DRIVERS\TVALZ_O.SYS 19:49:06.0281 6964 TVALZ - ok 19:49:06.0281 6964 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\drivers\uagp35.sys 19:49:06.0296 6964 uagp35 - ok 19:49:06.0327 6964 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\windows\system32\DRIVERS\udfs.sys 19:49:06.0343 6964 udfs - ok 19:49:06.0359 6964 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\windows\system32\UI0Detect.exe 19:49:06.0359 6964 UI0Detect - ok 19:49:06.0405 6964 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\drivers\uliagpkx.sys 19:49:06.0405 6964 uliagpkx - ok 19:49:06.0421 6964 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\windows\system32\DRIVERS\umbus.sys 19:49:06.0421 6964 umbus - ok 19:49:06.0437 6964 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\drivers\umpass.sys 19:49:06.0452 6964 UmPass - ok 19:49:06.0889 6964 UNS (7a78ed1088890114dfde2c4ab038d6b6) C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe 19:49:06.0983 6964 UNS - ok 19:49:07.0201 6964 Updater Service for StartNow Toolbar (70eb41a4417ba0aa36ae12bf2b4d98f6) C:\Program Files\StartNow Toolbar\ToolbarUpdaterService.exe 19:49:07.0232 6964 Updater Service for StartNow Toolbar - ok 19:49:07.0404 6964 upnphost (833fbb672460efce8011d262175fad33) C:\windows\System32\upnphost.dll 19:49:07.0419 6964 upnphost - ok 19:49:07.0513 6964 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\windows\system32\Drivers\usbaapl.sys 19:49:07.0513 6964 USBAAPL - ok 19:49:07.0575 6964 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\windows\system32\DRIVERS\usbccgp.sys 19:49:07.0575 6964 usbccgp - ok 19:49:07.0622 6964 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\drivers\usbcir.sys 19:49:07.0638 6964 usbcir - ok 19:49:07.0669 6964 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\windows\system32\drivers\usbehci.sys 19:49:07.0669 6964 usbehci - ok 19:49:07.0747 6964 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\windows\system32\DRIVERS\usbhub.sys 19:49:07.0763 6964 usbhub - ok 19:49:07.0809 6964 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\windows\system32\drivers\usbohci.sys 19:49:07.0825 6964 usbohci - ok 19:49:07.0856 6964 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys 19:49:07.0856 6964 usbprint - ok 19:49:07.0887 6964 usbscan (576096ccbc07e7c4ea4f5e6686d6888f) C:\windows\system32\DRIVERS\usbscan.sys 19:49:07.0903 6964 usbscan - ok 19:49:07.0934 6964 USBSTOR (f991ab9cc6b908db552166768176896a) C:\windows\system32\DRIVERS\USBSTOR.SYS 19:49:07.0950 6964 USBSTOR - ok 19:49:07.0981 6964 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\windows\system32\drivers\usbuhci.sys 19:49:07.0997 6964 usbuhci - ok 19:49:08.0043 6964 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\windows\system32\Drivers\usbvideo.sys 19:49:08.0043 6964 usbvideo - ok 19:49:08.0075 6964 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\windows\System32\uxsms.dll 19:49:08.0090 6964 UxSms - ok 19:49:08.0137 6964 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe 19:49:08.0137 6964 VaultSvc - ok 19:49:08.0184 6964 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\drivers\vdrvroot.sys 19:49:08.0184 6964 vdrvroot - ok 19:49:08.0324 6964 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\windows\System32\vds.exe 19:49:08.0355 6964 vds - ok 19:49:08.0449 6964 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys 19:49:08.0449 6964 vga - ok 19:49:08.0465 6964 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys 19:49:08.0465 6964 VgaSave - ok 19:49:08.0480 6964 vhdmp (5461686cca2fda57b024547733ab42e3) C:\windows\system32\drivers\vhdmp.sys 19:49:08.0496 6964 vhdmp - ok 19:49:08.0527 6964 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\drivers\viaagp.sys 19:49:08.0543 6964 viaagp - ok 19:49:08.0574 6964 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\drivers\viac7.sys 19:49:08.0574 6964 ViaC7 - ok 19:49:08.0636 6964 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\drivers\viaide.sys 19:49:08.0652 6964 viaide - ok 19:49:08.0652 6964 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\windows\system32\drivers\volmgr.sys 19:49:08.0667 6964 volmgr - ok 19:49:08.0699 6964 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys 19:49:08.0730 6964 volmgrx - ok 19:49:08.0777 6964 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\windows\system32\drivers\volsnap.sys 19:49:08.0792 6964 volsnap - ok 19:49:08.0823 6964 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\drivers\vsmraid.sys 19:49:08.0839 6964 vsmraid - ok 19:49:08.0964 6964 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\windows\system32\vssvc.exe 19:49:08.0995 6964 VSS - ok 19:49:09.0057 6964 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys 19:49:09.0073 6964 vwifibus - ok 19:49:09.0073 6964 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys 19:49:09.0089 6964 vwififlt - ok 19:49:09.0167 6964 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys 19:49:09.0182 6964 vwifimp - ok 19:49:09.0307 6964 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\windows\system32\w32time.dll 19:49:09.0323 6964 W32Time - ok 19:49:09.0369 6964 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\drivers\wacompen.sys 19:49:09.0369 6964 WacomPen - ok 19:49:09.0401 6964 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys 19:49:09.0416 6964 WANARP - ok 19:49:09.0416 6964 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys 19:49:09.0416 6964 Wanarpv6 - ok 19:49:09.0650 6964 WatAdminSvc (353a04c273ec58475d8633e75ccd5604) C:\windows\system32\Wat\WatAdminSvc.exe 19:49:09.0744 6964 WatAdminSvc - ok 19:49:10.0071 6964 wbengine (691e3285e53dca558e1a84667f13e15a) C:\windows\system32\wbengine.exe 19:49:10.0196 6964 wbengine - ok 19:49:10.0212 6964 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\windows\System32\wbiosrvc.dll 19:49:10.0227 6964 WbioSrvc - ok 19:49:10.0274 6964 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\windows\System32\wcncsvc.dll 19:49:10.0290 6964 wcncsvc - ok 19:49:10.0399 6964 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\windows\System32\WcsPlugInService.dll 19:49:10.0399 6964 WcsPlugInService - ok 19:49:10.0461 6964 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\drivers\wd.sys 19:49:10.0477 6964 Wd - ok 19:49:10.0524 6964 WDC_SAM (d6efaf429fd30c5df613d220e344cce7) C:\windows\system32\DRIVERS\wdcsam.sys 19:49:10.0539 6964 WDC_SAM - ok 19:49:10.0680 6964 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys 19:49:10.0742 6964 Wdf01000 - ok 19:49:10.0789 6964 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll 19:49:10.0789 6964 WdiServiceHost - ok 19:49:10.0789 6964 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll 19:49:10.0805 6964 WdiSystemHost - ok 19:49:10.0820 6964 WebClient (a9d880f97530d5b8fee278923349929d) C:\windows\System32\webclnt.dll 19:49:10.0836 6964 WebClient - ok 19:49:10.0851 6964 Wecsvc (760f0afe937a77cff27153206534f275) C:\windows\system32\wecsvc.dll 19:49:10.0867 6964 Wecsvc - ok 19:49:10.0883 6964 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\windows\System32\wercplsupport.dll 19:49:10.0898 6964 wercplsupport - ok 19:49:10.0929 6964 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\windows\System32\WerSvc.dll 19:49:10.0929 6964 WerSvc - ok 19:49:10.0976 6964 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys 19:49:10.0992 6964 WfpLwf - ok 19:49:10.0992 6964 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys 19:49:10.0992 6964 WIMMount - ok 19:49:11.0007 6964 WinHttpAutoProxySvc - ok 19:49:11.0085 6964 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\windows\system32\wbem\WMIsvc.dll 19:49:11.0101 6964 Winmgmt - ok 19:49:11.0288 6964 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\windows\system32\WsmSvc.dll 19:49:11.0522 6964 WinRM - ok 19:49:11.0647 6964 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\windows\system32\DRIVERS\WinUsb.sys 19:49:11.0647 6964 WinUsb - ok 19:49:11.0741 6964 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\windows\System32\wlansvc.dll 19:49:11.0772 6964 Wlansvc - ok 19:49:12.0037 6964 wlcrasvc (6067acef367e79914af628fa1e9b5330) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 19:49:12.0037 6964 wlcrasvc - ok 19:49:12.0177 6964 wlidsvc (0a70f4022ec2e14c159efc4f69aa2477) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 19:49:12.0224 6964 wlidsvc - ok 19:49:12.0365 6964 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\drivers\wmiacpi.sys 19:49:12.0380 6964 WmiAcpi - ok 19:49:12.0427 6964 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\windows\system32\wbem\WmiApSrv.exe 19:49:12.0443 6964 wmiApSrv - ok 19:49:12.0614 6964 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe 19:49:12.0645 6964 WMPNetworkSvc - ok 19:49:12.0739 6964 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\windows\System32\wpcsvc.dll 19:49:12.0755 6964 WPCSvc - ok 19:49:12.0755 6964 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\windows\system32\wpdbusenum.dll 19:49:12.0770 6964 WPDBusEnum - ok 19:49:12.0817 6964 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys 19:49:12.0817 6964 ws2ifsl - ok 19:49:12.0833 6964 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\windows\system32\wscsvc.dll 19:49:12.0848 6964 wscsvc - ok 19:49:12.0848 6964 WSearch - ok 19:49:13.0176 6964 WSWNA3100 (d0697918519a4cf059c2c7e3b9e93a53) C:\Program Files\NETGEAR\WNA3100\WifiSvc.exe 19:49:13.0207 6964 WSWNA3100 - ok 19:49:13.0363 6964 wuauserv (3026418a50c5b4761befa632cedb7406) C:\windows\system32\wuaueng.dll 19:49:13.0488 6964 wuauserv - ok 19:49:13.0707 6964 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\windows\system32\drivers\WudfPf.sys 19:49:13.0707 6964 WudfPf - ok 19:49:13.0738 6964 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\windows\system32\DRIVERS\WUDFRd.sys 19:49:13.0738 6964 WUDFRd - ok 19:49:13.0801 6964 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\windows\System32\WUDFSvc.dll 19:49:13.0816 6964 wudfsvc - ok 19:49:13.0832 6964 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\windows\System32\wwansvc.dll 19:49:13.0863 6964 WwanSvc - ok 19:49:13.0941 6964 MBR (0x1B8) (5b5e648d12fcadc244c1ec30318e1eb9) \Device\Harddisk0\DR0 19:49:14.0175 6964 \Device\Harddisk0\DR0 - ok 19:49:14.0300 6964 Boot (0x1200) (473a38065260dc76a71e4426c40cbd6b) \Device\Harddisk0\DR0\Partition0 19:49:14.0300 6964 \Device\Harddisk0\DR0\Partition0 - ok 19:49:14.0300 6964 ============================================================ 19:49:14.0300 6964 Scan finished 19:49:14.0300 6964 ============================================================ 19:49:14.0316 5796 Detected object count: 0 19:49:14.0316 5796 Actual detected object count: 0

liaml

Post #13May 21, 2012, 10:15 AM UTC

ComboFix runs for about 10 seconds and then it closes itself. How do I fix this? I have disabled my antivirus.

Satchfan

Post #14May 21, 2012, 10:19 AM UTC

Try running it in safe mode.

liaml

Post #15May 21, 2012, 10:59 AM UTC

It ran for longer, but then shut itself down. And now the wallpaper is black again and the icons on the desktop have no picture, just the words.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

S.M.A.R.T repair [Solved]

✨ Ask AI

Ask AI