Some of my google searches has been getting redirected (both firefox AND google chrome), so it'd be great if I can get some help with this issue. Here's the hijackthis log
Hi,
My name is
NoodleTech . I would be glad to assist you with solving any malware problems. Logs can take a while to research, so please be patient and I'd be grateful if you would note the following:
I will be working on your Malware issues, this may or may not, solve other issues you have with your machine. Please be aware that removing malware is not without risk and while unrecoverable damage to systems is rare, it can happen and may require a re-format and re-install of your operating system. Because of this it is a good idea to back-up anything important saved on your computer. The fixes are specific to your problem and should only be used for the issues on this machine. Do not delete anything unless instructed to. DO NOT use tools such as ComboFix without supervision. Please continue to review my answers until I tell you your machine appears to be clean. Absence of symptoms does not mean that everything is clean. It's often worth reading through these instructions and printing them for ease of reference. If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry. Please reply to this thread. Do not start a new topic. Failure to respond within 3 days will result in this topic being closed - If you need more time to complete the steps required, please let me know.===================================================
Please download DDS by sUBs from one of the following links and save it to your desktop.
Disable any script blocking protection (How to Disable your Security Programs ) Double click DDS icon to run the tool (may take up to 3 minutes to run) When done, DDS.txt will open. After a few moments, attach.txt will open in a second window. Save both reports to your desktop. —————————————————
Post DDS.txt report in your next replyAttach Attach.txt Attachments area and then clicking Browse . Browse to where you saved the file, and click Open and then click UPLOAD .===================================================
Please download aswMBR.exe and save it to your desktop.
Double click aswMBR.exe to start the tool. (Vista/Windows 7 users - right click to run as administrator)
Click
Scan
Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet. You will also notice another file created on the desktop named MBR.dat . Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well. ===================================================
Please download
TDSSKiller.zip Extract it to your desktop Double click TDSSKiller.exe Press Start Scan .If Malicious DO NOT cure them. Choose Skip then click on Continue. Copy and paste the log in your next replyA copy of the log will be saved automatically to the root of the drive (typically C:\)
Hi NoodleTech,
Thanks for the help. Here are the scan results you requested.
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_32
Run by [removed] at 17:45:03 on 2012-05-28
Microsoft Windows 7 Home Premium 6.1.7601.1.949.82.1033.18.8140.6310 [GMT -7:00]
.
AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files\IDT\WDM\STacSV64.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\IDT\WDM\AESTSr64.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\IDT\WDM\sttray64.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe
C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar2.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Users\Abe\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Abe\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Abe\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Abe\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Abe\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Windows\system32\sppsvc.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Abe\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uSearch Page =
uSearch Bar =
mWinlogon: Userinit=userinit.exe,
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO: TrueSuite Website Log On: {8590886e-ec8c-43c1-a32c-e4c2b0b6395b} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
mRun: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
mRun: []
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\AMLDEV~1.LNK - C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab
TCP: DhcpNameServer = [removed] [removed]
TCP: Interfaces\{53E2970D-E51C-4FB8-B0DA-6E9EA0FA62C9} : DhcpNameServer = [removed] [removed]
TCP: Interfaces\{53E2970D-E51C-4FB8-B0DA-6E9EA0FA62C9}\25967686470234865656B6 : DhcpNameServer = 75.75.75.75 75.75.76.76
TCP: Interfaces\{53E2970D-E51C-4FB8-B0DA-6E9EA0FA62C9}\77962756C6563737 : DhcpNameServer = 192.168.1.1
TCP: Interfaces\{DD11FE50-3DC5-4603-B2F2-C2C02443B977} : DhcpNameServer = [removed] [removed]
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO-X64: TrueSuite Website Log On: {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll
BHO-X64: TSBHO Class - No File
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun-x64: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun-x64: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
mRun-x64: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
mRun-x64: [(Default)]
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Abe\AppData\Roaming\Mozilla\Firefox\Profiles\fmtb8c3t.default\
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrlui.dll
FF - plugin: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll
FF - plugin: C:\Users\Abe\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll
FF - plugin: C:\Windows\SysWOW64\npmproxy.dll
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\system32\DRIVERS\MpFilter.sys –> C:\Windows\system32\DRIVERS\MpFilter.sys [?]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\system32\DRIVERS\dtsoftbus01.sys –> C:\Windows\system32\DRIVERS\dtsoftbus01.sys [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys –> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-1-3 63928]
R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2012-3-9 89600]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe –> C:\Windows\system32\atiesrxx.exe [?]
R2 cpuz135;cpuz135;\??\C:\Windows\system32\drivers\cpuz135_x64.sys –> C:\Windows\system32\drivers\cpuz135_x64.sys [?]
R2 FPLService;TrueSuiteService;C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-5-6 263496]
R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2011-6-21 85560]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-5-21 103992]
R2 hpsrv;HP Service;C:\Windows\system32\Hpservice.exe –> C:\Windows\system32\Hpservice.exe [?]
R2 HPWMISVC;HPWMISVC;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2011-4-8 26680]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-3-9 13336]
R2 jhi_service;Intel® Identity Protection Technology Host Interface Service;C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe [2011-2-24 212944]
R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-3-9 2656280]
R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys –> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys –> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
R3 clwvd;CyberLink WebCam Virtual Driver;C:\Windows\system32\DRIVERS\clwvd.sys –> C:\Windows\system32\DRIVERS\clwvd.sys [?]
R3 IntcDAud;Intel® Display Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys –> C:\Windows\system32\DRIVERS\IntcDAud.sys [?]
R3 intelkmd;intelkmd;C:\Windows\system32\DRIVERS\igdpmd64.sys –> C:\Windows\system32\DRIVERS\igdpmd64.sys [?]
R3 MEIx64;Intel® Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys –> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\system32\DRIVERS\NETwNs64.sys –> C:\Windows\system32\DRIVERS\NETwNs64.sys [?]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys –> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys –> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]
R3 RSPCIESTOR;Realtek PCIE CardReader Driver;C:\Windows\system32\DRIVERS\RtsPStor.sys –> C:\Windows\system32\DRIVERS\RtsPStor.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys –> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys –> C:\Windows\system32\DRIVERS\vwifimp.sys [?]
R3 wdkmd;Intel WiDi KMD;C:\Windows\system32\DRIVERS\WDKMD.sys –> C:\Windows\system32\DRIVERS\WDKMD.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-4-24 129976]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-1-5 340240]
S3 NisDrv;Microsoft Network Inspection System;C:\Windows\system32\DRIVERS\NisDrvWFP.sys –> C:\Windows\system32\DRIVERS\NisDrvWFP.sys [?]
S3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2012-3-26 291696]
S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\system32\DRIVERS\VSTAZL6.SYS –> C:\Windows\system32\DRIVERS\VSTAZL6.SYS [?]
S3 SrvHsfV92;SrvHsfV92;C:\Windows\system32\DRIVERS\VSTDPV6.SYS –> C:\Windows\system32\DRIVERS\VSTDPV6.SYS [?]
S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\system32\DRIVERS\VSTCNXT6.SYS –> C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys –> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys –> C:\Windows\system32\drivers\TsUsbGD.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe –> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S3 xsherlock;xsherlock;C:\Windows\System32\xsherlock.xem [2012-5-5 670816]
.
=============== Created Last 30 ================
.
2012-05-28 12:28:08 ——– d—–w- C:\ProgramData\Socusoft
2012-05-28 12:28:02 ——– d—–w- C:\Users\Abe\AppData\Roaming\Any Flv Converter
2012-05-28 11:05:51 ——– d—–w- C:\ProgramData\Spybot - Search & Destroy
2012-05-28 01:37:46 8955792 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{93F19E8C-03BF-43F2-A16B-18FFFC1D58FB}\mpengine.dll
2012-05-27 00:57:24 8955792 ——w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-05-25 22:14:01 ——– d—–w- C:\Program Files (x86)\SP55068
2012-05-24 00:35:02 ——– d—–w- C:\Users\Abe\AppData\Local\{349DD66C-A72D-4F98-84E1-C5EB34E6689B}
2012-05-24 00:34:52 ——– d—–w- C:\Users\Abe\AppData\Local\{DD79D6DE-634F-45AB-8B0C-5D37F02282B5}
2012-05-23 05:07:13 ——– d—–w- C:\Users\Abe\AppData\Local\ATI
2012-05-23 05:04:50 ——– d—–w- C:\Program Files (x86)\AMD AVT
2012-05-23 05:04:49 ——– d—–w- C:\Program Files (x86)\AMD APP
2012-05-23 05:04:43 ——– d—–w- C:\Program Files\Common Files\ATI Technologies
2012-05-23 05:04:43 ——– d—–w- C:\Program Files (x86)\Common Files\ATI Technologies
2012-05-23 05:03:24 ——– d—–w- C:\Program Files (x86)\ATI Technologies
2012-05-23 05:03:22 ——– d—–w- C:\Program Files\ATI
2012-05-23 05:03:07 ——– d—–w- C:\Program Files\ATI Technologies
2012-05-23 05:00:34 ——– d—–w- C:\Program Files\CCleaner
2012-05-23 04:55:35 ——– d—–w- C:\AMD
2012-05-23 03:27:13 21992 —-a-w- C:\Windows\System32\drivers\cpuz135_x64.sys
2012-05-23 03:27:12 ——– d—–w- C:\Program Files\CPUID
2012-05-22 01:43:38 ——– d—–w- C:\Users\Abe\AppData\Local\{8954FF74-CD49-42CE-A2C8-73A513F0692A}
2012-05-22 01:43:28 ——– d—–w- C:\Users\Abe\AppData\Local\{883C3B96-FD66-4415-9303-6A7991E96367}
2012-05-21 05:44:29 ——– d—–w- C:\Users\Abe\AppData\Local\{A7734335-EE78-44BF-8613-0DEB1F39D99D}
2012-05-21 05:44:19 ——– d—–w- C:\Users\Abe\AppData\Local\{672D7E45-F333-419A-960C-5FA86281FE0F}
2012-05-20 21:56:03 ——– d—–w- C:\Program Files (x86)\Phyxion.net
2012-05-20 04:05:49 ——– d—–w- C:\Users\Abe\AppData\Local\{C19E4B02-A854-4938-9DFB-D17549BB72D4}
2012-05-20 04:05:38 ——– d—–w- C:\Users\Abe\AppData\Local\{C8E74AF5-FE7A-4B93-AD5C-41973D4BCCD0}
2012-05-20 00:56:03 ——– d—–w- C:\Drivers
2012-05-19 00:31:48 ——– d—–w- C:\Users\Abe\AppData\Local\{292678C4-2D2C-4726-9731-D29A15314D40}
2012-05-19 00:31:38 ——– d—–w- C:\Users\Abe\AppData\Local\{FC1B81D5-7A36-4A28-A615-06232B5EC49C}
2012-05-18 22:09:38 ——– d—–w- C:\ProgramData\Blizzard Entertainment
2012-05-18 22:09:38 ——– d—–w- C:\Program Files (x86)\Diablo III
2012-05-18 22:09:38 ——– d—–w- C:\Program Files (x86)\Common Files\Blizzard Entertainment
2012-05-18 22:07:25 ——– d—–w- C:\ProgramData\Battle.net
2012-05-18 07:13:06 ——– d—–w- C:\Users\Abe\AppData\Local\{C33F6AF9-9A62-471A-8114-0317A8C5E5AE}
2012-05-18 07:12:55 ——– d—–w- C:\Users\Abe\AppData\Local\{A4A4EE1E-9B82-4016-B514-49706CDC7D7E}
2012-05-17 04:26:03 ——– d—–w- C:\Users\Abe\AppData\Local\{24AD5EFD-DCA2-4536-BBD3-7BA1E7F3761F}
2012-05-17 04:25:53 ——– d—–w- C:\Users\Abe\AppData\Local\{669565CA-6E2A-4D4B-A345-21D67BB2A504}
2012-05-16 03:06:46 ——– d—–w- C:\Users\Abe\AppData\Local\{AB84D867-F3C4-410C-B4EC-6DC68BC18959}
2012-05-16 03:06:36 ——– d—–w- C:\Users\Abe\AppData\Local\{A5475321-A1FE-460F-8D80-60786CD58DAA}
2012-05-16 01:28:00 ——– d—–w- C:\Windows\PCHEALTH
2012-05-16 01:24:13 ——– d—–w- C:\Windows\SHELLNEW
2012-05-16 00:32:45 5559664 —-a-w- C:\Windows\System32\ntoskrnl.exe
2012-05-16 00:32:44 3146240 —-a-w- C:\Windows\System32\win32k.sys
2012-05-16 00:32:43 3968368 —-a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-05-16 00:32:43 3913072 —-a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-05-16 00:32:42 1544704 —-a-w- C:\Windows\System32\DWrite.dll
2012-05-16 00:32:41 1077248 —-a-w- C:\Windows\SysWow64\DWrite.dll
2012-05-16 00:32:36 1367552 —-a-w- C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll
2012-05-16 00:32:35 936960 —-a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2012-05-16 00:32:32 1918320 —-a-w- C:\Windows\System32\drivers\tcpip.sys
2012-05-16 00:32:29 75120 —-a-w- C:\Windows\System32\drivers\partmgr.sys
2012-05-15 17:44:21 476960 —-a-w- C:\Windows\SysWow64\npdeployJava1.dll
2012-05-13 11:05:11 ——– d—–w- C:\ProgramData\Electronic Arts
2012-05-13 11:05:11 ——– d—–w- C:\ProgramData\EA Core
2012-05-13 10:53:40 ——– d—–w- C:\ProgramData\Solidshield
2012-05-12 23:36:08 ——– d—–w- C:\Users\Abe\AppData\Roaming\Malwarebytes
2012-05-12 23:35:37 ——– d—–w- C:\ProgramData\Malwarebytes
2012-05-11 03:14:58 ——– d—–w- C:\Users\Abe\AppData\Local\{FEE160CC-1FF2-40B2-A7D0-60AB6105F0E6}
2012-05-11 03:14:42 ——– d—–w- C:\Users\Abe\AppData\Local\{B3316B8A-7DFD-479E-A38D-FDFBB5669572}
2012-05-11 03:10:49 ——– d—–w- C:\Users\Abe\AppData\Local\{E6DB2FDC-9B16-11E1-826E-B8AC6F996F26}
2012-05-11 03:10:49 ——– d—–w- C:\Users\Abe\AppData\Local\{E6DAFAE9-9B16-11E1-826E-B8AC6F996F26}
2012-05-09 21:09:58 ——– d—–w- C:\Users\Abe\AppData\Local\{F7A61671-3EB9-4848-8A11-1104F12BFA67}
2012-05-09 21:09:47 ——– d—–w- C:\Users\Abe\AppData\Local\{806469D2-022C-4B08-BD13-AC468F2D0875}
2012-05-09 08:35:56 ——– d—–w- C:\Users\Abe\AppData\Local\Diagnostics
2012-05-07 01:00:44 ——– d—–w- C:\Users\Abe\AppData\Local\{292A8D64-4846-41B5-8131-D1A3B8A62750}
2012-05-07 01:00:33 ——– d—–w- C:\Users\Abe\AppData\Local\{DA2AE69C-F6E8-405A-AE9E-9E07F36046DD}
2012-05-06 02:51:52 ——– d—–w- C:\ProgramData\Nexon
2012-05-06 02:51:16 670816 —-a-w- C:\Windows\SysWow64\xsherlock.xem
2012-05-06 02:48:39 ——– d—–w- C:\Nexon
2012-05-06 02:47:49 ——– d—–w- C:\ProgramData\NexonUS
2012-05-02 23:03:25 ——– d—–w- C:\Users\Abe\AppData\Local\Chromium
2012-05-02 21:10:18 ——– d—–w- C:\Users\Abe\AppData\Local\{4B95BCB3-0DA7-4796-B2F3-DA3B93D22189}
2012-05-02 21:10:00 ——– d—–w- C:\Users\Abe\AppData\Local\{1A140578-EE8C-48A3-B161-620A0BDA6963}
2012-05-02 20:28:34 ——– d—–w- C:\Users\Abe\AppData\Local\assembly
2012-05-02 20:28:21 ——– d—–w- C:\Program Files (x86)\NCSoft
2012-04-30 00:52:18 ——– d—–w- C:\Users\Abe\AppData\Local\Spotify
2012-04-30 00:51:46 ——– d—–w- C:\Users\Abe\AppData\Roaming\Spotify
2012-04-30 00:10:55 ——– d—–w- C:\Users\Abe\AppData\Local\{952DD626-2C17-4A32-8BA0-5F6E4B563ACA}
2012-04-30 00:10:44 ——– d—–w- C:\Users\Abe\AppData\Local\{F4A771C0-D431-4034-BF33-4579F257BB1C}
.
==================== Find3M ====================
.
2012-05-15 17:44:08 472864 —-a-w- C:\Windows\SysWow64\deployJava1.dll
2012-05-15 17:22:34 70304 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-05-15 17:22:34 419488 —-a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-03-24 23:11:57 283200 —-a-w- C:\Windows\System32\drivers\dtsoftbus01.sys
2012-03-21 03:44:12 98688 —-a-w- C:\Windows\System32\drivers\NisDrvWFP.sys
2012-03-21 03:44:12 203888 —-a-w- C:\Windows\System32\drivers\MpFilter.sys
2012-03-10 03:22:03 0 —-a-w- C:\Windows\ativpsrm.bin
2012-03-09 01:50:28 49016 —-a-w- C:\Windows\SysWow64\sirenacm.dll
2012-03-01 06:46:16 23408 —-a-w- C:\Windows\System32\drivers\fs_rec.sys
2012-03-01 06:38:27 220672 —-a-w- C:\Windows\System32\wintrust.dll
2012-03-01 06:33:50 81408 —-a-w- C:\Windows\System32\imagehlp.dll
2012-03-01 06:28:47 5120 —-a-w- C:\Windows\System32\wmi.dll
2012-03-01 05:37:41 172544 —-a-w- C:\Windows\SysWow64\wintrust.dll
2012-03-01 05:33:23 159232 —-a-w- C:\Windows\SysWow64\imagehlp.dll
2012-03-01 05:29:16 5120 —-a-w- C:\Windows\SysWow64\wmi.dll
.
============= FINISH: 17:45:52.74 ===============
————————-
aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-05-28 17:48:34
—————————–
17:48:34.578 OS Version: Windows x64 6.1.7601 Service Pack 1
17:48:34.578 Number of processors: 8 586 0x2A07
17:48:34.578 ComputerName: ABE-HP UserName: Abe
17:48:37.339 Initialize success
17:49:05.375 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
17:49:05.391 Disk 0 Vendor: TOSHIBA_ GL00 Size: 953869MB BusType: 3
17:49:05.407 Disk 0 MBR read successfully
17:49:05.407 Disk 0 MBR scan
17:49:05.422 Disk 0 Windows 7 default MBR code
17:49:05.422 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 199 MB offset 2048
17:49:05.438 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 933001 MB offset 409600
17:49:05.469 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 20565 MB offset 1911195648
17:49:05.485 Disk 0 Partition 4 00 0C FAT32 LBA MSDOS5.0 102 MB offset 1953312768
17:49:05.547 Disk 0 scanning C:\Windows\system32\drivers
17:49:11.491 Service scanning
17:49:40.973 Modules scanning
17:49:40.989 Disk 0 trace - called modules:
17:49:41.035 ntoskrnl.exe CLASSPNP.SYS disk.sys hpdskflt.sys iaStor.sys hal.dll
17:49:41.550 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8008384790]
17:49:41.550 3 CLASSPNP.SYS[fffff88001b6143f] -> nt!IofCallDriver -> [0xfffffa8008289b10]
17:49:41.566 5 hpdskflt.sys[fffff88001b08189] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa800815f050]
17:49:41.581 Scan finished successfully
17:49:53.562 Disk 0 MBR has been saved successfully to "C:\Users\Abe\Desktop\MBR.dat"
17:49:53.562 The log file has been saved successfully to "C:\Users\Abe\Desktop\aswMBR.txt"
—————————————————
17:50:07.0857 5008 TDSS rootkit removing tool 2.7.38.0 May 25 2012 17:35:31
17:50:08.0216 5008 ============================================================
17:50:08.0216 5008 Current date / time: 2012/05/28 17:50:08.0216
17:50:08.0216 5008 SystemInfo:
17:50:08.0216 5008
17:50:08.0216 5008 OS Version: 6.1.7601 ServicePack: 1.0
17:50:08.0216 5008 Product type: Workstation
17:50:08.0216 5008 ComputerName: ABE-HP
17:50:08.0216 5008 UserName: Abe
17:50:08.0216 5008 Windows directory: C:\Windows
17:50:08.0216 5008 System windows directory: C:\Windows
17:50:08.0216 5008 Running under WOW64
17:50:08.0216 5008 Processor architecture: Intel x64
17:50:08.0216 5008 Number of processors: 8
17:50:08.0216 5008 Page size: 0x1000
17:50:08.0216 5008 Boot type: Normal boot
17:50:08.0216 5008 ============================================================
17:50:08.0559 5008 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
17:50:08.0559 5008 ============================================================
17:50:08.0559 5008 \Device\Harddisk0\DR0:
17:50:08.0559 5008 MBR partitions:
17:50:08.0559 5008 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800
17:50:08.0559 5008 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x71E44800
17:50:08.0559 5008 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x71EA8800, BlocksNum 0x282A800
17:50:08.0559 5008 \Device\Harddisk0\DR0\Partition3: MBR, Type 0xC, StartLBA 0x746D3000, BlocksNum 0x335B0
17:50:08.0559 5008 ============================================================
17:50:08.0591 5008 C: <-> \Device\Harddisk0\DR0\Partition1
17:50:08.0637 5008 D: <-> \Device\Harddisk0\DR0\Partition2
17:50:08.0637 5008 ============================================================
17:50:08.0637 5008 Initialize success
17:50:08.0637 5008 ============================================================
17:50:10.0182 2384 ============================================================
17:50:10.0182 2384 Scan started
17:50:10.0182 2384 Mode: Manual;
17:50:10.0182 2384 ============================================================
17:50:10.0587 2384 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
17:50:10.0587 2384 1394ohci - ok
17:50:10.0634 2384 Accelerometer (5c368f4b04ed2a923e6afca2d37baff5) C:\Windows\system32\DRIVERS\Accelerometer.sys
17:50:10.0634 2384 Accelerometer - ok
17:50:10.0697 2384 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
17:50:10.0712 2384 ACPI - ok
17:50:10.0743 2384 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
17:50:10.0743 2384 AcpiPmi - ok
17:50:10.0868 2384 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
17:50:10.0868 2384 AdobeARMservice - ok
17:50:10.0962 2384 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\drivers\adp94xx.sys
17:50:10.0962 2384 adp94xx - ok
17:50:11.0024 2384 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\drivers\adpahci.sys
17:50:11.0040 2384 adpahci - ok
17:50:11.0118 2384 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\drivers\adpu320.sys
17:50:11.0118 2384 adpu320 - ok
17:50:11.0165 2384 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll
17:50:11.0165 2384 AeLookupSvc - ok
17:50:11.0274 2384 AESTFilters (a6fb9db8f1a86861d955fd6975977ae0) C:\Program Files\IDT\WDM\AESTSr64.exe
17:50:11.0274 2384 AESTFilters - ok
17:50:11.0352 2384 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys
17:50:11.0367 2384 AFD - ok
17:50:11.0461 2384 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
17:50:11.0461 2384 agp440 - ok
17:50:11.0508 2384 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe
17:50:11.0508 2384 ALG - ok
17:50:11.0555 2384 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
17:50:11.0555 2384 aliide - ok
17:50:11.0601 2384 AMD External Events Utility (962227630779043b5c1d4cd157abb912) C:\Windows\system32\atiesrxx.exe
17:50:11.0617 2384 AMD External Events Utility - ok
17:50:11.0664 2384 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
17:50:11.0664 2384 amdide - ok
17:50:11.0726 2384 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\drivers\amdk8.sys
17:50:11.0726 2384 AmdK8 - ok
17:50:12.0163 2384 amdkmdag (56d6631761ec37745f0df16bcdc4caf4) C:\Windows\system32\DRIVERS\atikmdag.sys
17:50:12.0350 2384 amdkmdag - ok
17:50:12.0491 2384 amdkmdap (2d9005ea0bfd25c740e53c8dd3c069e0) C:\Windows\system32\DRIVERS\atikmpag.sys
17:50:12.0491 2384 amdkmdap - ok
17:50:12.0553 2384 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\drivers\amdppm.sys
17:50:12.0553 2384 AmdPPM - ok
17:50:12.0584 2384 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
17:50:12.0600 2384 amdsata - ok
17:50:12.0647 2384 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\drivers\amdsbs.sys
17:50:12.0647 2384 amdsbs - ok
17:50:12.0678 2384 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
17:50:12.0678 2384 amdxata - ok
17:50:12.0709 2384 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
17:50:12.0709 2384 AppID - ok
17:50:12.0740 2384 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll
17:50:12.0740 2384 AppIDSvc - ok
17:50:12.0771 2384 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll
17:50:12.0771 2384 Appinfo - ok
17:50:12.0834 2384 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\drivers\arc.sys
17:50:12.0834 2384 arc - ok
17:50:12.0849 2384 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\drivers\arcsas.sys
17:50:12.0849 2384 arcsas - ok
17:50:12.0865 2384 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
17:50:12.0865 2384 AsyncMac - ok
17:50:12.0905 2384 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
17:50:12.0906 2384 atapi - ok
17:50:12.0978 2384 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
17:50:12.0991 2384 AudioEndpointBuilder - ok
17:50:13.0002 2384 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll
17:50:13.0007 2384 AudioSrv - ok
17:50:13.0057 2384 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll
17:50:13.0061 2384 AxInstSV - ok
17:50:13.0143 2384 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\drivers\bxvbda.sys
17:50:13.0152 2384 b06bdrv - ok
17:50:13.0208 2384 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
17:50:13.0212 2384 b57nd60a - ok
17:50:13.0317 2384 BCM43XX (9e84a931dbee0292e38ed672f6293a99) C:\Windows\system32\DRIVERS\bcmwl664.sys
17:50:13.0333 2384 BCM43XX - ok
17:50:13.0366 2384 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll
17:50:13.0368 2384 BDESVC - ok
17:50:13.0423 2384 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
17:50:13.0424 2384 Beep - ok
17:50:13.0492 2384 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll
17:50:13.0506 2384 BFE - ok
17:50:13.0558 2384 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll
17:50:13.0572 2384 BITS - ok
17:50:13.0627 2384 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
17:50:13.0627 2384 blbdrive - ok
17:50:13.0665 2384 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
17:50:13.0666 2384 bowser - ok
17:50:13.0707 2384 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\BrFiltLo.sys
17:50:13.0708 2384 BrFiltLo - ok
17:50:13.0713 2384 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\BrFiltUp.sys
17:50:13.0714 2384 BrFiltUp - ok
17:50:13.0760 2384 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll
17:50:13.0763 2384 Browser - ok
17:50:13.0812 2384 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
17:50:13.0818 2384 Brserid - ok
17:50:13.0838 2384 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
17:50:13.0839 2384 BrSerWdm - ok
17:50:13.0859 2384 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
17:50:13.0860 2384 BrUsbMdm - ok
17:50:13.0894 2384 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
17:50:13.0894 2384 BrUsbSer - ok
17:50:13.0903 2384 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\drivers\bthmodem.sys
17:50:13.0905 2384 BTHMODEM - ok
17:50:13.0938 2384 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll
17:50:13.0940 2384 bthserv - ok
17:50:13.0984 2384 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
17:50:13.0987 2384 cdfs - ok
17:50:14.0022 2384 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys
17:50:14.0025 2384 cdrom - ok
17:50:14.0049 2384 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
17:50:14.0052 2384 CertPropSvc - ok
17:50:14.0078 2384 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\drivers\circlass.sys
17:50:14.0078 2384 circlass - ok
17:50:14.0109 2384 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
17:50:14.0109 2384 CLFS - ok
17:50:14.0171 2384 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:50:14.0171 2384 clr_optimization_v2.0.50727_32 - ok
17:50:14.0249 2384 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
17:50:14.0265 2384 clr_optimization_v2.0.50727_64 - ok
17:50:14.0327 2384 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:50:14.0327 2384 clr_optimization_v4.0.30319_32 - ok
17:50:14.0359 2384 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
17:50:14.0359 2384 clr_optimization_v4.0.30319_64 - ok
17:50:14.0405 2384 clwvd (50f92c943f18b070f166d019dfab3d9a) C:\Windows\system32\DRIVERS\clwvd.sys
17:50:14.0405 2384 clwvd - ok
17:50:14.0437 2384 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
17:50:14.0437 2384 CmBatt - ok
17:50:14.0437 2384 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
17:50:14.0437 2384 cmdide - ok
17:50:14.0499 2384 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
17:50:14.0515 2384 CNG - ok
17:50:14.0561 2384 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\drivers\compbatt.sys
17:50:14.0561 2384 Compbatt - ok
17:50:14.0608 2384 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\DRIVERS\CompositeBus.sys
17:50:14.0608 2384 CompositeBus - ok
17:50:14.0624 2384 COMSysApp - ok
17:50:14.0686 2384 cpuz135 (c08063f052308b6f5882482615387f30) C:\Windows\system32\drivers\cpuz135_x64.sys
17:50:14.0686 2384 cpuz135 - ok
17:50:14.0749 2384 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\drivers\crcdisk.sys
17:50:14.0749 2384 crcdisk - ok
17:50:14.0780 2384 CryptSvc (15597883fbe9b056f276ada3ad87d9af) C:\Windows\system32\cryptsvc.dll
17:50:14.0795 2384 CryptSvc - ok
17:50:14.0858 2384 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
17:50:14.0858 2384 DcomLaunch - ok
17:50:14.0905 2384 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll
17:50:14.0905 2384 defragsvc - ok
17:50:14.0936 2384 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
17:50:14.0936 2384 DfsC - ok
17:50:14.0983 2384 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll
17:50:14.0998 2384 Dhcp - ok
17:50:15.0014 2384 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
17:50:15.0014 2384 discache - ok
17:50:15.0061 2384 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\drivers\disk.sys
17:50:15.0061 2384 Disk - ok
17:50:15.0092 2384 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll
17:50:15.0092 2384 Dnscache - ok
17:50:15.0123 2384 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll
17:50:15.0139 2384 dot3svc - ok
17:50:15.0185 2384 Dot4 (b42ed0320c6e41102fde0005154849bb) C:\Windows\system32\DRIVERS\Dot4.sys
17:50:15.0185 2384 Dot4 - ok
17:50:15.0201 2384 Dot4Print (e9f5969233c5d89f3c35e3a66a52a361) C:\Windows\system32\DRIVERS\Dot4Prt.sys
17:50:15.0201 2384 Dot4Print - ok
17:50:15.0232 2384 dot4usb (fd05a02b0370bc3000f402e543ca5814) C:\Windows\system32\DRIVERS\dot4usb.sys
17:50:15.0232 2384 dot4usb - ok
17:50:15.0248 2384 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll
17:50:15.0263 2384 DPS - ok
17:50:15.0295 2384 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
17:50:15.0295 2384 drmkaud - ok
17:50:15.0341 2384 dtsoftbus01 (46571ed73ae84469dca53081d33cf3c8) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
17:50:15.0341 2384 dtsoftbus01 - ok
17:50:15.0388 2384 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
17:50:15.0388 2384 DXGKrnl - ok
17:50:15.0435 2384 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll
17:50:15.0435 2384 EapHost - ok
17:50:15.0638 2384 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\drivers\evbda.sys
17:50:15.0700 2384 ebdrv - ok
17:50:15.0794 2384 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe
17:50:15.0794 2384 EFS - ok
17:50:15.0856 2384 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe
17:50:15.0872 2384 ehRecvr - ok
17:50:15.0903 2384 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe
17:50:15.0903 2384 ehSched - ok
17:50:15.0981 2384 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\drivers\elxstor.sys
17:50:15.0997 2384 elxstor - ok
17:50:16.0012 2384 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
17:50:16.0012 2384 ErrDev - ok
17:50:16.0075 2384 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll
17:50:16.0075 2384 EventSystem - ok
17:50:16.0246 2384 EvtEng (7ee9f35bc1dd0ce1a4976032f9ac5162) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
17:50:16.0262 2384 EvtEng - ok
17:50:16.0387 2384 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
17:50:16.0387 2384 exfat - ok
17:50:16.0418 2384 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
17:50:16.0433 2384 fastfat - ok
17:50:16.0496 2384 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe
17:50:16.0511 2384 Fax - ok
17:50:16.0543 2384 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\drivers\fdc.sys
17:50:16.0543 2384 fdc - ok
17:50:16.0574 2384 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll
17:50:16.0574 2384 fdPHost - ok
17:50:16.0574 2384 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll
17:50:16.0589 2384 FDResPub - ok
17:50:16.0605 2384 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
17:50:16.0605 2384 FileInfo - ok
17:50:16.0621 2384 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
17:50:16.0621 2384 Filetrace - ok
17:50:16.0681 2384 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\drivers\flpydisk.sys
17:50:16.0682 2384 flpydisk - ok
17:50:16.0702 2384 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
17:50:16.0705 2384 FltMgr - ok
17:50:16.0775 2384 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll
17:50:16.0789 2384 FontCache - ok
17:50:16.0850 2384 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
17:50:16.0851 2384 FontCache3.0.0.0 - ok
17:50:16.0950 2384 FPLService (26065327bb2aa358140381fc76520908) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
17:50:16.0956 2384 FPLService - ok
17:50:17.0034 2384 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
17:50:17.0036 2384 FsDepends - ok
17:50:17.0063 2384 Fs_Rec (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys
17:50:17.0064 2384 Fs_Rec - ok
17:50:17.0119 2384 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
17:50:17.0123 2384 fvevol - ok
17:50:17.0170 2384 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\drivers\gagp30kx.sys
17:50:17.0172 2384 gagp30kx - ok
17:50:17.0231 2384 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll
17:50:17.0247 2384 gpsvc - ok
17:50:17.0295 2384 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
17:50:17.0296 2384 hcw85cir - ok
17:50:17.0340 2384 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
17:50:17.0345 2384 HdAudAddService - ok
17:50:17.0381 2384 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\DRIVERS\HDAudBus.sys
17:50:17.0383 2384 HDAudBus - ok
17:50:17.0415 2384 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\drivers\HidBatt.sys
17:50:17.0416 2384 HidBatt - ok
17:50:17.0433 2384 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\drivers\hidbth.sys
17:50:17.0434 2384 HidBth - ok
17:50:17.0483 2384 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\drivers\hidir.sys
17:50:17.0484 2384 HidIr - ok
17:50:17.0507 2384 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll
17:50:17.0510 2384 hidserv - ok
17:50:17.0556 2384 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys
17:50:17.0557 2384 HidUsb - ok
17:50:17.0588 2384 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll
17:50:17.0591 2384 hkmsvc - ok
17:50:17.0628 2384 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll
17:50:17.0633 2384 HomeGroupListener - ok
17:50:17.0663 2384 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll
17:50:17.0663 2384 HomeGroupProvider - ok
17:50:17.0772 2384 HP Support Assistant Service (170233b8d743efe35f462a5d516b93e3) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
17:50:17.0772 2384 HP Support Assistant Service - ok
17:50:17.0850 2384 HPDrvMntSvc.exe (c958976c7daaf47084a33ebbc6e28b84) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
17:50:17.0850 2384 HPDrvMntSvc.exe - ok
17:50:17.0881 2384 hpdskflt (4e0bec0f78096ffd6d3314b497fc49d3) C:\Windows\system32\DRIVERS\hpdskflt.sys
17:50:17.0881 2384 hpdskflt - ok
17:50:17.0975 2384 hpqwmiex (09fbd4c4db2fd84b9ab1c5bfdcc95559) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
17:50:17.0990 2384 hpqwmiex - ok
17:50:18.0021 2384 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
17:50:18.0021 2384 HpSAMD - ok
17:50:18.0053 2384 hpsrv (fc7c13b5a9e9be23b7ae72bbc7fdb278) C:\Windows\system32\Hpservice.exe
17:50:18.0053 2384 hpsrv - ok
17:50:18.0115 2384 HPWMISVC (28e15c3d39dcd27a79251ba0bf216a11) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
17:50:18.0115 2384 HPWMISVC - ok
17:50:18.0177 2384 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
17:50:18.0193 2384 HTTP - ok
17:50:18.0209 2384 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
17:50:18.0209 2384 hwpolicy - ok
17:50:18.0271 2384 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys
17:50:18.0271 2384 i8042prt - ok
17:50:18.0333 2384 iaStor (d469b77687e12fe43e344806740b624d) C:\Windows\system32\DRIVERS\iaStor.sys
17:50:18.0333 2384 iaStor - ok
17:50:18.0443 2384 IAStorDataMgrSvc (983fc69644ddf0486c8dfea262948d1a) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
17:50:18.0458 2384 IAStorDataMgrSvc - ok
17:50:18.0505 2384 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
17:50:18.0521 2384 iaStorV - ok
17:50:18.0630 2384 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
17:50:18.0645 2384 idsvc - ok
17:50:18.0692 2384 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\drivers\iirsp.sys
17:50:18.0708 2384 iirsp - ok
17:50:18.0770 2384 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll
17:50:18.0786 2384 IKEEXT - ok
17:50:18.0833 2384 IntcDAud (fc727061c0f47c8059e88e05d5c8e381) C:\Windows\system32\DRIVERS\IntcDAud.sys
17:50:18.0833 2384 IntcDAud - ok
17:50:18.0860 2384 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
17:50:18.0860 2384 intelide - ok
17:50:19.0337 2384 intelkmd (efe5a0af39a8e179624117c521f1e012) C:\Windows\system32\DRIVERS\igdpmd64.sys
17:50:19.0538 2384 intelkmd - ok
17:50:19.0650 2384 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
17:50:19.0652 2384 intelppm - ok
17:50:19.0688 2384 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll
17:50:19.0692 2384 IPBusEnum - ok
17:50:19.0709 2384 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:50:19.0712 2384 IpFilterDriver - ok
17:50:19.0768 2384 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll
17:50:19.0781 2384 iphlpsvc - ok
17:50:19.0801 2384 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
17:50:19.0802 2384 IPMIDRV - ok
17:50:19.0821 2384 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
17:50:19.0823 2384 IPNAT - ok
17:50:19.0853 2384 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
17:50:19.0854 2384 IRENUM - ok
17:50:19.0893 2384 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
17:50:19.0893 2384 isapnp - ok
17:50:19.0925 2384 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
17:50:19.0940 2384 iScsiPrt - ok
17:50:20.0034 2384 jhi_service (6c85719a21b3f62c2c76280f4bd36c7b) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
17:50:20.0034 2384 jhi_service - ok
17:50:20.0081 2384 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys
17:50:20.0081 2384 kbdclass - ok
17:50:20.0127 2384 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
17:50:20.0127 2384 kbdhid - ok
17:50:20.0174 2384 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
17:50:20.0174 2384 KeyIso - ok
17:50:20.0190 2384 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
17:50:20.0190 2384 KSecDD - ok
17:50:20.0205 2384 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
17:50:20.0221 2384 KSecPkg - ok
17:50:20.0252 2384 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
17:50:20.0252 2384 ksthunk - ok
17:50:20.0299 2384 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll
17:50:20.0315 2384 KtmRm - ok
17:50:20.0361 2384 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll
17:50:20.0361 2384 LanmanServer - ok
17:50:20.0408 2384 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll
17:50:20.0408 2384 LanmanWorkstation - ok
17:50:20.0471 2384 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
17:50:20.0471 2384 lltdio - ok
17:50:20.0502 2384 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll
17:50:20.0517 2384 lltdsvc - ok
17:50:20.0549 2384 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll
17:50:20.0549 2384 lmhosts - ok
17:50:20.0658 2384 LMS (d7e0bed3ea21d7bddd410ade51708d90) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
17:50:20.0658 2384 LMS - ok
17:50:20.0705 2384 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\drivers\lsi_fc.sys
17:50:20.0705 2384 LSI_FC - ok
17:50:20.0720 2384 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\drivers\lsi_sas.sys
17:50:20.0736 2384 LSI_SAS - ok
17:50:20.0736 2384 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\drivers\lsi_sas2.sys
17:50:20.0736 2384 LSI_SAS2 - ok
17:50:20.0751 2384 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\drivers\lsi_scsi.sys
17:50:20.0751 2384 LSI_SCSI - ok
17:50:20.0783 2384 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
17:50:20.0783 2384 luafv - ok
17:50:20.0814 2384 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll
17:50:20.0829 2384 Mcx2Svc - ok
17:50:20.0861 2384 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\drivers\megasas.sys
17:50:20.0861 2384 megasas - ok
17:50:20.0892 2384 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\drivers\MegaSR.sys
17:50:20.0907 2384 MegaSR - ok
17:50:20.0954 2384 MEIx64 (a6518dcc42f7a6e999bb3bea8fd87567) C:\Windows\system32\DRIVERS\HECIx64.sys
17:50:20.0970 2384 MEIx64 - ok
17:50:21.0001 2384 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
17:50:21.0001 2384 MMCSS - ok
17:50:21.0035 2384 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
17:50:21.0037 2384 Modem - ok
17:50:21.0071 2384 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
17:50:21.0072 2384 monitor - ok
17:50:21.0107 2384 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys
17:50:21.0109 2384 mouclass - ok
17:50:21.0158 2384 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
17:50:21.0159 2384 mouhid - ok
17:50:21.0186 2384 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
17:50:21.0187 2384 mountmgr - ok
17:50:21.0302 2384 MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
17:50:21.0305 2384 MozillaMaintenance - ok
17:50:21.0378 2384 MpFilter (94c66ededcdb6a126880472f9a704d8e) C:\Windows\system32\DRIVERS\MpFilter.sys
17:50:21.0382 2384 MpFilter - ok
17:50:21.0423 2384 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
17:50:21.0425 2384 mpio - ok
17:50:21.0446 2384 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
17:50:21.0447 2384 mpsdrv - ok
17:50:21.0495 2384 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll
17:50:21.0509 2384 MpsSvc - ok
17:50:21.0527 2384 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
17:50:21.0528 2384 MRxDAV - ok
17:50:21.0556 2384 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
17:50:21.0557 2384 mrxsmb - ok
17:50:21.0597 2384 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:50:21.0599 2384 mrxsmb10 - ok
17:50:21.0631 2384 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:50:21.0633 2384 mrxsmb20 - ok
17:50:21.0666 2384 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
17:50:21.0668 2384 msahci - ok
17:50:21.0693 2384 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
17:50:21.0696 2384 msdsm - ok
17:50:21.0733 2384 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe
17:50:21.0737 2384 MSDTC - ok
17:50:21.0789 2384 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
17:50:21.0791 2384 Msfs - ok
17:50:21.0804 2384 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
17:50:21.0805 2384 mshidkmdf - ok
17:50:21.0824 2384 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
17:50:21.0825 2384 msisadrv - ok
17:50:21.0871 2384 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll
17:50:21.0875 2384 MSiSCSI - ok
17:50:21.0879 2384 msiserver - ok
17:50:21.0926 2384 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
17:50:21.0926 2384 MSKSSRV - ok
17:50:22.0002 2384 MsMpSvc (59faaf2c83c8169ea20f9e335e418907) c:\Program Files\Microsoft Security Client\MsMpEng.exe
17:50:22.0003 2384 MsMpSvc - ok
17:50:22.0026 2384 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
17:50:22.0026 2384 MSPCLOCK - ok
17:50:22.0050 2384 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
17:50:22.0051 2384 MSPQM - ok
17:50:22.0078 2384 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
17:50:22.0083 2384 MsRPC - ok
17:50:22.0100 2384 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys
17:50:22.0101 2384 mssmbios - ok
17:50:22.0124 2384 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
17:50:22.0124 2384 MSTEE - ok
17:50:22.0151 2384 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\drivers\MTConfig.sys
17:50:22.0152 2384 MTConfig - ok
17:50:22.0174 2384 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
17:50:22.0176 2384 Mup - ok
17:50:22.0278 2384 MyWiFiDHCPDNS (0cf5580f27918ffd2e165ecafa734103) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
17:50:22.0285 2384 MyWiFiDHCPDNS - ok
17:50:22.0340 2384 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll
17:50:22.0353 2384 napagent - ok
17:50:22.0425 2384 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
17:50:22.0431 2384 NativeWifiP - ok
17:50:22.0498 2384 NDIS (c38b8ae57f78915905064a9a24dc1586) C:\Windows\system32\drivers\ndis.sys
17:50:22.0512 2384 NDIS - ok
17:50:22.0559 2384 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
17:50:22.0560 2384 NdisCap - ok
17:50:22.0589 2384 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
17:50:22.0590 2384 NdisTapi - ok
17:50:22.0611 2384 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
17:50:22.0613 2384 Ndisuio - ok
17:50:22.0650 2384 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
17:50:22.0652 2384 NdisWan - ok
17:50:22.0668 2384 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
17:50:22.0669 2384 NDProxy - ok
17:50:22.0733 2384 Net Driver HPZ12 (d5ac41ae382738483faffbd7e373d49a) C:\Windows\system32\HPZinw12.dll
17:50:22.0737 2384 Net Driver HPZ12 - ok
17:50:22.0780 2384 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
17:50:22.0782 2384 NetBIOS - ok
17:50:22.0816 2384 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
17:50:22.0821 2384 NetBT - ok
17:50:22.0864 2384 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
17:50:22.0866 2384 Netlogon - ok
17:50:22.0913 2384 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll
17:50:22.0928 2384 Netman - ok
17:50:22.0959 2384 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll
17:50:22.0959 2384 netprofm - ok
17:50:23.0037 2384 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
17:50:23.0037 2384 NetTcpPortSharing - ok
17:50:23.0321 2384 NETwNs64 (b9c587bdaa61a689883439d5ae6fe7f3) C:\Windows\system32\DRIVERS\NETwNs64.sys
17:50:23.0463 2384 NETwNs64 - ok
17:50:23.0582 2384 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\drivers\nfrd960.sys
17:50:23.0583 2384 nfrd960 - ok
17:50:23.0632 2384 NisDrv (91b4e0273d2f6c24ef845f2b41311289) C:\Windows\system32\DRIVERS\NisDrvWFP.sys
17:50:23.0635 2384 NisDrv - ok
17:50:23.0700 2384 NisSrv (10a43829a9e606af3eef25a1c1665923) c:\Program Files\Microsoft Security Client\NisSrv.exe
17:50:23.0704 2384 NisSrv - ok
17:50:23.0744 2384 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll
17:50:23.0747 2384 NlaSvc - ok
17:50:23.0769 2384 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
17:50:23.0770 2384 Npfs - ok
17:50:23.0831 2384 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll
17:50:23.0832 2384 nsi - ok
17:50:23.0848 2384 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
17:50:23.0849 2384 nsiproxy - ok
17:50:23.0974 2384 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
17:50:24.0000 2384 Ntfs - ok
17:50:24.0137 2384 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
17:50:24.0138 2384 Null - ok
17:50:24.0184 2384 nusb3hub (158ad24745bd85ba9be3c51c38f48c32) C:\Windows\system32\DRIVERS\nusb3hub.sys
17:50:24.0185 2384 nusb3hub - ok
17:50:24.0226 2384 nusb3xhc (d40a13b2c0891e218f9523b376955db6) C:\Windows\system32\DRIVERS\nusb3xhc.sys
17:50:24.0228 2384 nusb3xhc - ok
17:50:24.0319 2384 NVENETFD (a85b4f2ef3a7304a5399ef0526423040) C:\Windows\system32\DRIVERS\nvm62x64.sys
17:50:24.0322 2384 NVENETFD - ok
17:50:24.0368 2384 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
17:50:24.0368 2384 nvraid - ok
17:50:24.0368 2384 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
17:50:24.0368 2384 nvstor - ok
17:50:24.0415 2384 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
17:50:24.0415 2384 nv_agp - ok
17:50:24.0568 2384 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
17:50:24.0574 2384 odserv - ok
17:50:24.0597 2384 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
17:50:24.0598 2384 ohci1394 - ok
17:50:24.0666 2384 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:50:24.0669 2384 ose - ok
17:50:24.0706 2384 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
17:50:24.0713 2384 p2pimsvc - ok
17:50:24.0747 2384 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll
17:50:24.0756 2384 p2psvc - ok
17:50:24.0793 2384 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\drivers\parport.sys
17:50:24.0794 2384 Parport - ok
17:50:24.0827 2384 partmgr (e9766131eeade40a27dc27d2d68fba9c) C:\Windows\system32\drivers\partmgr.sys
17:50:24.0829 2384 partmgr - ok
17:50:24.0862 2384 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll
17:50:24.0868 2384 PcaSvc - ok
17:50:24.0909 2384 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
17:50:24.0910 2384 pci - ok
17:50:24.0927 2384 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
17:50:24.0927 2384 pciide - ok
17:50:24.0961 2384 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\drivers\pcmcia.sys
17:50:24.0963 2384 pcmcia - ok
17:50:24.0976 2384 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
17:50:24.0977 2384 pcw - ok
17:50:25.0027 2384 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
17:50:25.0036 2384 PEAUTH - ok
17:50:25.0104 2384 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe
17:50:25.0107 2384 PerfHost - ok
17:50:25.0206 2384 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll
17:50:25.0223 2384 pla - ok
17:50:25.0284 2384 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll
17:50:25.0296 2384 PlugPlay - ok
17:50:25.0362 2384 Pml Driver HPZ12 (37f6046cdc630442d7dc087501ff6fc6) C:\Windows\system32\HPZipm12.dll
17:50:25.0366 2384 Pml Driver HPZ12 - ok
17:50:25.0399 2384 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll
17:50:25.0403 2384 PNRPAutoReg - ok
17:50:25.0434 2384 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll
17:50:25.0434 2384 PNRPsvc - ok
17:50:25.0496 2384 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll
17:50:25.0496 2384 PolicyAgent - ok
17:50:25.0527 2384 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll
17:50:25.0543 2384 Power - ok
17:50:25.0605 2384 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
17:50:25.0605 2384 PptpMiniport - ok
17:50:25.0621 2384 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\drivers\processr.sys
17:50:25.0621 2384 Processor - ok
17:50:25.0668 2384 ProfSvc (5c78838b4d166d1a27db3a8a820c799a) C:\Windows\system32\profsvc.dll
17:50:25.0668 2384 ProfSvc - ok
17:50:25.0699 2384 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
17:50:25.0699 2384 ProtectedStorage - ok
17:50:25.0761 2384 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
17:50:25.0761 2384 Psched - ok
17:50:25.0839 2384 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\drivers\ql2300.sys
17:50:25.0870 2384 ql2300 - ok
17:50:25.0980 2384 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\drivers\ql40xx.sys
17:50:25.0980 2384 ql40xx - ok
17:50:26.0026 2384 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll
17:50:26.0026 2384 QWAVE - ok
17:50:26.0042 2384 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
17:50:26.0042 2384 QWAVEdrv - ok
17:50:26.0058 2384 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
17:50:26.0073 2384 RasAcd - ok
17:50:26.0104 2384 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
17:50:26.0104 2384 RasAgileVpn - ok
17:50:26.0136 2384 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll
17:50:26.0151 2384 RasAuto - ok
17:50:26.0198 2384 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
17:50:26.0198 2384 Rasl2tp - ok
17:50:26.0260 2384 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll
17:50:26.0260 2384 RasMan - ok
17:50:26.0292 2384 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
17:50:26.0307 2384 RasPppoe - ok
17:50:26.0338 2384 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
17:50:26.0338 2384 RasSstp - ok
17:50:26.0370 2384 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
17:50:26.0385 2384 rdbss - ok
17:50:26.0401 2384 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\drivers\rdpbus.sys
17:50:26.0401 2384 rdpbus - ok
17:50:26.0432 2384 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
17:50:26.0432 2384 RDPCDD - ok
17:50:26.0463 2384 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
17:50:26.0463 2384 RDPENCDD - ok
17:50:26.0494 2384 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
17:50:26.0494 2384 RDPREFMP - ok
17:50:26.0541 2384 RDPWD (6d76e6433574b058adcb0c50df834492) C:\Windows\system32\drivers\RDPWD.sys
17:50:26.0541 2384 RDPWD - ok
17:50:26.0591 2384 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
17:50:26.0595 2384 rdyboost - ok
17:50:26.0712 2384 RegSrvc (aa9fd849c028ccb441a78061b57db734) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
17:50:26.0728 2384 RegSrvc - ok
17:50:26.0759 2384 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll
17:50:26.0762 2384 RemoteAccess - ok
17:50:26.0788 2384 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll
17:50:26.0792 2384 RemoteRegistry - ok
17:50:26.0807 2384 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll
17:50:26.0810 2384 RpcEptMapper - ok
17:50:26.0827 2384 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe
17:50:26.0829 2384 RpcLocator - ok
17:50:26.0866 2384 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll
17:50:26.0871 2384 RpcSs - ok
17:50:26.0948 2384 RSPCIESTOR (d5c3e1629a3f7f0857d27949252b94ce) C:\Windows\system32\DRIVERS\RtsPStor.sys
17:50:26.0951 2384 RSPCIESTOR - ok
17:50:26.0983 2384 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
17:50:26.0984 2384 rspndr - ok
17:50:27.0038 2384 RTL8167 (ed5873f7dfb2f96d37f13322211b6bdc) C:\Windows\system32\DRIVERS\Rt64win7.sys
17:50:27.0042 2384 RTL8167 - ok
17:50:27.0075 2384 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
17:50:27.0077 2384 SamSs - ok
17:50:27.0101 2384 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
17:50:27.0103 2384 sbp2port - ok
17:50:27.0137 2384 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll
17:50:27.0141 2384 SCardSvr - ok
17:50:27.0167 2384 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
17:50:27.0168 2384 scfilter - ok
17:50:27.0235 2384 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll
17:50:27.0252 2384 Schedule - ok
17:50:27.0273 2384 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll
17:50:27.0274 2384 SCPolicySvc - ok
17:50:27.0308 2384 sdbus (111e0ebc0ad79cb0fa014b907b231cf0) C:\Windows\system32\DRIVERS\sdbus.sys
17:50:27.0310 2384 sdbus - ok
17:50:27.0349 2384 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll
17:50:27.0353 2384 SDRSVC - ok
17:50:27.0376 2384 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
17:50:27.0377 2384 secdrv - ok
17:50:27.0405 2384 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll
17:50:27.0408 2384 seclogon - ok
17:50:27.0426 2384 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll
17:50:27.0429 2384 SENS - ok
17:50:27.0481 2384 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll
17:50:27.0484 2384 SensrSvc - ok
17:50:27.0527 2384 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\drivers\serenum.sys
17:50:27.0528 2384 Serenum - ok
17:50:27.0536 2384 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\drivers\serial.sys
17:50:27.0537 2384 Serial - ok
17:50:27.0543 2384 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\drivers\sermouse.sys
17:50:27.0544 2384 sermouse - ok
17:50:27.0574 2384 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll
17:50:27.0576 2384 SessionEnv - ok
17:50:27.0579 2384 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
17:50:27.0579 2384 sffdisk - ok
17:50:27.0608 2384 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
17:50:27.0608 2384 sffp_mmc - ok
17:50:27.0616 2384 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
17:50:27.0617 2384 sffp_sd - ok
17:50:27.0624 2384 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\drivers\sfloppy.sys
17:50:27.0624 2384 sfloppy - ok
17:50:27.0668 2384 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll
17:50:27.0677 2384 SharedAccess - ok
17:50:27.0722 2384 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll
17:50:27.0730 2384 ShellHWDetection - ok
17:50:27.0755 2384 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\drivers\SiSRaid2.sys
17:50:27.0756 2384 SiSRaid2 - ok
17:50:27.0765 2384 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\drivers\sisraid4.sys
17:50:27.0766 2384 SiSRaid4 - ok
17:50:27.0786 2384 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
17:50:27.0787 2384 Smb - ok
17:50:27.0833 2384 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe
17:50:27.0835 2384 SNMPTRAP - ok
17:50:27.0866 2384 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
17:50:27.0866 2384 spldr - ok
17:50:27.0909 2384 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe
17:50:27.0918 2384 Spooler - ok
17:50:28.0051 2384 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe
17:50:28.0125 2384 sppsvc - ok
17:50:28.0224 2384 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll
17:50:28.0230 2384 sppuinotify - ok
17:50:28.0310 2384 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
17:50:28.0319 2384 srv - ok
17:50:28.0352 2384 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
17:50:28.0357 2384 srv2 - ok
17:50:28.0406 2384 SrvHsfHDA (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS
17:50:28.0411 2384 SrvHsfHDA - ok
17:50:28.0479 2384 SrvHsfV92 (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS
17:50:28.0500 2384 SrvHsfV92 - ok
17:50:28.0632 2384 SrvHsfWinac (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
17:50:28.0643 2384 SrvHsfWinac - ok
17:50:28.0670 2384 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
17:50:28.0674 2384 srvnet - ok
17:50:28.0724 2384 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll
17:50:28.0732 2384 SSDPSRV - ok
17:50:28.0754 2384 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll
17:50:28.0760 2384 SstpSvc - ok
17:50:28.0847 2384 STacSV (86678c2f5081fea3517d78e92230b5ff) C:\Program Files\IDT\WDM\STacSV64.exe
17:50:28.0853 2384 STacSV - ok
17:50:28.0890 2384 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\drivers\stexstor.sys
17:50:28.0891 2384 stexstor - ok
17:50:28.0958 2384 STHDA (74387b34b43f94e380608888c56a5ccd) C:\Windows\system32\DRIVERS\stwrt64.sys
17:50:28.0967 2384 STHDA - ok
17:50:29.0069 2384 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll
17:50:29.0082 2384 stisvc - ok
17:50:29.0119 2384 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys
17:50:29.0120 2384 swenum - ok
17:50:29.0168 2384 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll
17:50:29.0180 2384 swprv - ok
17:50:29.0238 2384 SynTP (ac3cc98b1bdb6540021d3ffb105ac2b9) C:\Windows\system32\DRIVERS\SynTP.sys
17:50:29.0244 2384 SynTP - ok
17:50:29.0344 2384 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll
17:50:29.0364 2384 SysMain - ok
17:50:29.0453 2384 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll
17:50:29.0459 2384 TabletInputService - ok
17:50:29.0494 2384 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll
17:50:29.0502 2384 TapiSrv - ok
17:50:29.0541 2384 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll
17:50:29.0546 2384 TBS - ok
17:50:29.0689 2384 Tcpip (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\drivers\tcpip.sys
17:50:29.0713 2384 Tcpip - ok
17:50:29.0868 2384 TCPIP6 (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\DRIVERS\tcpip.sys
17:50:29.0899 2384 TCPIP6 - ok
17:50:30.0008 2384 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
17:50:30.0008 2384 tcpipreg - ok
17:50:30.0024 2384 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
17:50:30.0024 2384 TDPIPE - ok
17:50:30.0055 2384 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys
17:50:30.0055 2384 TDTCP - ok
17:50:30.0086 2384 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
17:50:30.0086 2384 tdx - ok
17:50:30.0117 2384 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\DRIVERS\termdd.sys
17:50:30.0117 2384 TermDD - ok
17:50:30.0195 2384 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll
17:50:30.0211 2384 TermService - ok
17:50:30.0227 2384 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll
17:50:30.0227 2384 Themes - ok
17:50:30.0258 2384 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll
17:50:30.0273 2384 THREADORDER - ok
17:50:30.0305 2384 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll
17:50:30.0305 2384 TrkWks - ok
17:50:30.0367 2384 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe
17:50:30.0367 2384 TrustedInstaller - ok
17:50:30.0398 2384 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
17:50:30.0398 2384 tssecsrv - ok
17:50:30.0429 2384 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
17:50:30.0429 2384 TsUsbFlt - ok
17:50:30.0461 2384 TsUsbGD (9cc2ccae8a84820eaecb886d477cbcb8) C:\Windows\system32\drivers\TsUsbGD.sys
17:50:30.0461 2384 TsUsbGD - ok
17:50:30.0507 2384 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
17:50:30.0507 2384 tunnel - ok
17:50:30.0523 2384 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\drivers\uagp35.sys
17:50:30.0523 2384 uagp35 - ok
17:50:30.0554 2384 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
17:50:30.0570 2384 udfs - ok
17:50:30.0617 2384 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe
17:50:30.0617 2384 UI0Detect - ok
17:50:30.0663 2384 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
17:50:30.0663 2384 uliagpkx - ok
17:50:30.0679 2384 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys
17:50:30.0679 2384 umbus - ok
17:50:30.0710 2384 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\drivers\umpass.sys
17:50:30.0710 2384 UmPass - ok
17:50:30.0913 2384 UNS (a678e5ddd974903dd71f503bdcaca218) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
17:50:30.0944 2384 UNS - ok
17:50:31.0053 2384 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll
17:50:31.0053 2384 upnphost - ok
17:50:31.0116 2384 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
17:50:31.0116 2384 usbccgp - ok
17:50:31.0163 2384 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
17:50:31.0163 2384 usbcir - ok
17:50:31.0178 2384 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\DRIVERS\usbehci.sys
17:50:31.0178 2384 usbehci - ok
17:50:31.0225 2384 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
17:50:31.0225 2384 usbhub - ok
17:50:31.0256 2384 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
17:50:31.0256 2384 usbohci - ok
17:50:31.0272 2384 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
17:50:31.0272 2384 usbprint - ok
17:50:31.0303 2384 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:50:31.0303 2384 USBSTOR - ok
17:50:31.0319 2384 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
17:50:31.0319 2384 usbuhci - ok
17:50:31.0381 2384 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\system32\Drivers\usbvideo.sys
17:50:31.0381 2384 usbvideo - ok
17:50:31.0412 2384 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll
17:50:31.0412 2384 UxSms - ok
17:50:31.0443 2384 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe
17:50:31.0443 2384 VaultSvc - ok
17:50:31.0490 2384 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
17:50:31.0490 2384 vdrvroot - ok
17:50:31.0521 2384 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe
17:50:31.0537 2384 vds - ok
17:50:31.0568 2384 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
17:50:31.0568 2384 vga - ok
17:50:31.0584 2384 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
17:50:31.0584 2384 VgaSave - ok
17:50:31.0599 2384 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
17:50:31.0599 2384 vhdmp - ok
17:50:31.0631 2384 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
17:50:31.0631 2384 viaide - ok
17:50:31.0646 2384 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
17:50:31.0646 2384 volmgr - ok
17:50:31.0677 2384 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
17:50:31.0693 2384 volmgrx - ok
17:50:31.0724 2384 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
17:50:31.0724 2384 volsnap - ok
17:50:31.0755 2384 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\drivers\vsmraid.sys
17:50:31.0755 2384 vsmraid - ok
17:50:31.0818 2384 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe
17:50:31.0833 2384 VSS - ok
17:50:31.0880 2384 vtany - ok
17:50:31.0958 2384 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
17:50:31.0958 2384 vwifibus - ok
17:50:31.0989 2384 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
17:50:31.0989 2384 vwififlt - ok
17:50:32.0021 2384 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys
17:50:32.0021 2384 vwifimp - ok
17:50:32.0067 2384 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll
17:50:32.0067 2384 W32Time - ok
17:50:32.0099 2384 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\drivers\wacompen.sys
17:50:32.0099 2384 WacomPen - ok
17:50:32.0114 2384 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
17:50:32.0114 2384 WANARP - ok
17:50:32.0130 2384 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
17:50:32.0130 2384 Wanarpv6 - ok
17:50:32.0239 2384 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe
17:50:32.0255 2384 WatAdminSvc - ok
17:50:32.0333 2384 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe
17:50:32.0348 2384 wbengine - ok
17:50:32.0457 2384 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll
17:50:32.0457 2384 WbioSrvc - ok
17:50:32.0489 2384 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll
17:50:32.0504 2384 wcncsvc - ok
17:50:32.0535 2384 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll
17:50:32.0535 2384 WcsPlugInService - ok
17:50:32.0582 2384 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\drivers\wd.sys
17:50:32.0582 2384 Wd - ok
17:50:32.0645 2384 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
17:50:32.0645 2384 Wdf01000 - ok
17:50:32.0676 2384 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
17:50:32.0676 2384 WdiServiceHost - ok
17:50:32.0676 2384 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll
17:50:32.0691 2384 WdiSystemHost - ok
17:50:32.0738 2384 wdkmd (5e1640435dd54d00451156ca5340b109) C:\Windows\system32\DRIVERS\WDKMD.sys
17:50:32.0738 2384 wdkmd - ok
17:50:32.0769 2384 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll
17:50:32.0785 2384 WebClient - ok
17:50:32.0816 2384 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll
17:50:32.0816 2384 Wecsvc - ok
17:50:32.0847 2384 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll
17:50:32.0847 2384 wercplsupport - ok
17:50:32.0894 2384 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll
17:50:32.0894 2384 WerSvc - ok
17:50:32.0925 2384 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
17:50:32.0925 2384 WfpLwf - ok
17:50:32.0941 2384 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
17:50:32.0957 2384 WIMMount - ok
17:50:32.0972 2384 WinDefend - ok
17:50:32.0988 2384 WinHttpAutoProxySvc - ok
17:50:33.0066 2384 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll
17:50:33.0066 2384 Winmgmt - ok
17:50:33.0191 2384 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll
17:50:33.0206 2384 WinRM - ok
17:50:33.0331 2384 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUSB.sys
17:50:33.0331 2384 WinUsb - ok
17:50:33.0393 2384 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll
17:50:33.0409 2384 Wlansvc - ok
17:50:33.0581 2384 wlidsvc (2bacd71123f42cea603f4e205e1ae337) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
17:50:33.0612 2384 wlidsvc - ok
17:50:33.0737 2384 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys
17:50:33.0737 2384 WmiAcpi - ok
17:50:33.0783 2384 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe
17:50:33.0799 2384 wmiApSrv - ok
17:50:33.0830 2384 WMPNetworkSvc - ok
17:50:33.0877 2384 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll
17:50:33.0893 2384 WPCSvc - ok
17:50:33.0924 2384 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll
17:50:33.0924 2384 WPDBusEnum - ok
17:50:33.0955 2384 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
17:50:33.0955 2384 ws2ifsl - ok
17:50:34.0002 2384 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll
17:50:34.0002 2384 wscsvc - ok
17:50:34.0002 2384 WSearch - ok
17:50:34.0173 2384 wuauserv (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll
17:50:34.0205 2384 wuauserv - ok
17:50:34.0329 2384 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
17:50:34.0345 2384 WudfPf - ok
17:50:34.0376 2384 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
17:50:34.0376 2384 WUDFRd - ok
17:50:34.0423 2384 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll
17:50:34.0423 2384 wudfsvc - ok
17:50:34.0470 2384 WwanSvc (ce8cf9de9cbfdaa318bd04d8be3fcada) C:\Windows\System32\wwansvc.dll
17:50:34.0470 2384 WwanSvc - ok
17:50:34.0548 2384 xnacc (4a5ce13408945e525503b5f73d29b9c5) C:\Windows\system32\DRIVERS\xnacc.sys
17:50:34.0563 2384 xnacc - ok
17:50:34.0579 2384 xsherlock - ok
17:50:34.0595 2384 xspirit - ok
17:50:34.0626 2384 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0
17:50:34.0797 2384 \Device\Harddisk0\DR0 - ok
17:50:34.0813 2384 Boot (0x1200) (63b60bb27b720412964a953e2c51e58b) \Device\Harddisk0\DR0\Partition0
17:50:34.0813 2384 \Device\Harddisk0\DR0\Partition0 - ok
17:50:34.0829 2384 Boot (0x1200) (8cf591a19d8e7ce35b1ab97186aa60a1) \Device\Harddisk0\DR0\Partition1
17:50:34.0829 2384 \Device\Harddisk0\DR0\Partition1 - ok
17:50:34.0860 2384 Boot (0x1200) (1eddc16388d04e308ea80a8531d08d56) \Device\Harddisk0\DR0\Partition2
17:50:34.0860 2384 \Device\Harddisk0\DR0\Partition2 - ok
17:50:34.0891 2384 Boot (0x1200) (bb8437216bbcd6e9e06550cf8c67b3da) \Device\Harddisk0\DR0\Partition3
17:50:34.0891 2384 \Device\Harddisk0\DR0\Partition3 - ok
17:50:34.0891 2384 ============================================================
17:50:34.0891 2384 Scan finished
17:50:34.0891 2384 ============================================================
17:50:34.0922 2060 Detected object count: 0
17:50:34.0922 2060 Actual detected object count: 0
17:51:05.0202 1760 Deinitialize success
Thanks
Hi, I wasn't sure if you wanted the scan result with Avast virus definition update–I'll post the results with the update done here. The one I posted before is without the update.
aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-05-28 20:25:48
—————————–
20:25:48.003 OS Version: Windows x64 6.1.7601 Service Pack 1
20:25:48.003 Number of processors: 8 586 0x2A07
20:25:48.003 ComputerName: ABE-HP UserName: Abe
20:25:49.641 Initialize success
20:27:37.088 AVAST engine defs: 12052800
20:30:15.184 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
20:30:15.199 Disk 0 Vendor: TOSHIBA_ GL00 Size: 953869MB BusType: 3
20:30:15.215 Disk 0 MBR read successfully
20:30:15.215 Disk 0 MBR scan
20:30:15.230 Disk 0 Windows 7 default MBR code
20:30:15.230 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 199 MB offset 2048
20:30:15.246 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 933001 MB offset 409600
20:30:15.277 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 20565 MB offset 1911195648
20:30:15.324 Disk 0 Partition 4 00 0C FAT32 LBA MSDOS5.0 102 MB offset 1953312768
20:30:15.371 Disk 0 scanning C:\Windows\system32\drivers
20:30:24.372 Service scanning
20:31:02.920 Modules scanning
20:31:02.935 Disk 0 trace - called modules:
20:31:02.967 ntoskrnl.exe CLASSPNP.SYS disk.sys hpdskflt.sys iaStor.sys hal.dll
20:31:02.982 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8008384790]
20:31:02.998 3 CLASSPNP.SYS[fffff88001b6143f] -> nt!IofCallDriver -> [0xfffffa8008289b10]
20:31:02.998 5 hpdskflt.sys[fffff88001b08189] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa800815f050]
20:31:04.371 AVAST engine scan C:\Windows
20:31:07.054 AVAST engine scan C:\Windows\system32
20:33:32.633 AVAST engine scan C:\Windows\system32\drivers
20:33:44.897 AVAST engine scan C:\Users\Abe
20:37:33.859 AVAST engine scan C:\ProgramData
20:38:10.531 Scan finished successfully
20:38:16.896 Disk 0 MBR has been saved successfully to "C:\Users\Abe\Desktop\MBR.dat"
20:38:16.896 The log file has been saved successfully to "C:\Users\Abe\Desktop\aswMBR.txt"
Thank you.
Hi Warmwin,
Either one would have been fine
Please do the following
Refer to the
ComboFix User's Guide Download ComboFix from one of these locations:Link 1 Link 2 * IMPORTANT !!! Place ComboFix.exe on your Desktop Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with ComboFix.here Double click on ComboFix.exe & follow the prompts. Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal. When finished, it shall produce a log for you. Post that log in your next replyNote: Ensure your AntiVirus and AntiSpyware applications are re-enabled. NOTE: If you encounter a message
"illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.
Thanks for such a fast response! Here's the ComboFix Log:
ComboFix 12-05-28.05 - Abe 8/2012 Mon 20:57:55.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.949.82.1033.18.8140.6175 [GMT -7:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
c:\users\Abe\AppData\Local\assembly\tmp
.
.
((((((((((((((((((((((((( Files Created from 2012-04-28 to 2012-05-29 )))))))))))))))))))))))))))))))
.
.
2012-05-29 04:01 . 2012-05-29 04:01 ——– d—–w- c:\users\Default\AppData\Local\temp
2012-05-29 03:38 . 2012-05-08 17:02 8955792 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{45A9A777-550B-43E6-B18E-AE7162A7DF72}\mpengine.dll
2012-05-28 12:28 . 2012-05-28 12:28 ——– d—–w- c:\programdata\Socusoft
2012-05-28 12:28 . 2012-05-28 12:29 ——– d—–w- c:\users\Abe\AppData\Roaming\Any Flv Converter
2012-05-28 11:05 . 2012-05-28 11:45 ——– d—–w- c:\programdata\Spybot - Search & Destroy
2012-05-27 00:57 . 2012-05-08 17:02 8955792 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2012-05-25 22:14 . 2012-05-25 22:14 ——– d—–w- c:\program files (x86)\SP55068
2012-05-23 05:07 . 2012-05-23 05:07 ——– d—–w- c:\users\Abe\AppData\Local\ATI
2012-05-23 05:07 . 2012-05-23 05:07 ——– d—–w- c:\programdata\ATI
2012-05-23 05:04 . 2012-05-23 05:04 ——– d—–w- c:\program files (x86)\AMD AVT
2012-05-23 05:04 . 2012-05-23 05:04 ——– d—–w- c:\program files (x86)\AMD APP
2012-05-23 05:04 . 2012-05-23 05:04 ——– d—–w- c:\program files\Common Files\ATI Technologies
2012-05-23 05:04 . 2012-05-23 05:04 ——– d—–w- c:\program files (x86)\Common Files\ATI Technologies
2012-05-23 05:03 . 2012-05-23 05:03 ——– d—–w- c:\program files (x86)\ATI Technologies
2012-05-23 05:03 . 2012-05-23 05:03 ——– d—–w- c:\program files\ATI
2012-05-23 05:03 . 2012-05-23 05:04 ——– d—–w- c:\program files\ATI Technologies
2012-05-23 05:00 . 2012-05-23 05:00 ——– d—–w- c:\program files\CCleaner
2012-05-23 04:55 . 2012-05-23 05:00 ——– d—–w- C:\AMD
2012-05-23 03:27 . 2011-09-21 17:25 21992 —-a-w- c:\windows\system32\drivers\cpuz135_x64.sys
2012-05-23 03:27 . 2012-05-23 03:27 ——– d—–w- c:\program files\CPUID
2012-05-21 18:46 . 2012-05-21 18:46 ——– d—–w- c:\users\Default\AppData\Local\Microsoft Help
2012-05-21 18:40 . 2012-05-21 18:40 ——– d—–w- c:\program files\Microsoft Silverlight
2012-05-21 18:40 . 2012-05-21 18:40 ——– d—–w- c:\program files (x86)\Microsoft Silverlight
2012-05-20 21:56 . 2012-05-20 21:56 ——– d—–w- c:\program files (x86)\Phyxion.net
2012-05-20 00:56 . 2012-05-23 04:54 ——– d—–w- C:\Drivers
2012-05-18 22:09 . 2012-05-18 22:23 ——– d—–w- c:\program files (x86)\Diablo III
2012-05-18 22:09 . 2012-05-18 22:10 ——– d—–w- c:\programdata\Blizzard Entertainment
2012-05-18 22:09 . 2012-05-18 22:10 ——– d—–w- c:\program files (x86)\Common Files\Blizzard Entertainment
2012-05-18 22:07 . 2012-05-18 22:07 ——– d—–w- c:\programdata\Battle.net
2012-05-16 01:28 . 2012-05-21 18:45 ——– d—–w- c:\program files (x86)\Microsoft Works
2012-05-16 01:28 . 2012-05-16 01:28 ——– d—–w- c:\windows\PCHEALTH
2012-05-16 01:24 . 2012-05-16 01:24 ——– d—–w- c:\windows\SHELLNEW
2012-05-16 01:23 . 2012-05-16 01:23 ——– d—–r- C:\MSOCache
2012-05-16 00:32 . 2012-03-31 06:05 5559664 —-a-w- c:\windows\system32\ntoskrnl.exe
2012-05-16 00:32 . 2012-03-31 03:10 3146240 —-a-w- c:\windows\system32\win32k.sys
2012-05-16 00:32 . 2012-03-31 04:39 3968368 —-a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-05-16 00:32 . 2012-03-31 04:39 3913072 —-a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-05-16 00:32 . 2012-03-03 06:35 1544704 —-a-w- c:\windows\system32\DWrite.dll
2012-05-16 00:32 . 2012-03-03 05:31 1077248 —-a-w- c:\windows\SysWow64\DWrite.dll
2012-05-16 00:32 . 2012-03-31 05:40 1367552 —-a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
2012-05-16 00:32 . 2012-03-31 04:29 936960 —-a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2012-05-16 00:32 . 2012-03-30 11:35 1918320 —-a-w- c:\windows\system32\drivers\tcpip.sys
2012-05-16 00:32 . 2012-03-17 07:58 75120 —-a-w- c:\windows\system32\drivers\partmgr.sys
2012-05-15 17:44 . 2012-05-15 17:44 ——– d—–w- c:\program files (x86)\Common Files\Java
2012-05-15 17:44 . 2012-05-15 17:44 476960 —-a-w- c:\windows\SysWow64\npdeployJava1.dll
2012-05-15 17:44 . 2012-05-15 17:44 ——– d—–w- c:\program files (x86)\Java
2012-05-13 11:05 . 2012-05-13 11:05 ——– d—–w- c:\programdata\Electronic Arts
2012-05-13 11:05 . 2012-05-13 11:05 ——– d—–w- c:\programdata\EA Core
2012-05-13 10:53 . 2012-05-13 11:04 ——– d—–w- c:\programdata\Solidshield
2012-05-12 23:36 . 2012-05-12 23:36 ——– d—–w- c:\users\Abe\AppData\Roaming\Malwarebytes
2012-05-12 23:35 . 2012-05-12 23:35 ——– d—–w- c:\programdata\Malwarebytes
2012-05-11 03:10 . 2012-05-11 03:10 ——– d—–w- c:\users\Abe\AppData\Local\{E6DB2FDC-9B16-11E1-826E-B8AC6F996F26}
2012-05-11 03:10 . 2012-05-11 03:10 ——– d—–w- c:\users\Abe\AppData\Local\{E6DAFAE9-9B16-11E1-826E-B8AC6F996F26}
2012-05-09 08:35 . 2012-05-09 08:35 ——– d—–w- c:\users\Abe\AppData\Local\Diagnostics
2012-05-06 02:51 . 2012-05-06 02:51 ——– d—–w- c:\programdata\Nexon
2012-05-06 02:51 . 2012-05-06 02:51 670816 —-a-w- c:\windows\SysWow64\xsherlock.xem
2012-05-06 02:48 . 2012-05-06 02:48 ——– d—–w- C:\Nexon
2012-05-02 23:03 . 2012-05-02 23:03 ——– d—–w- c:\users\Abe\AppData\Local\Chromium
2012-05-02 20:28 . 2012-05-29 04:00 ——– d—–w- c:\users\Abe\AppData\Local\assembly
2012-05-02 20:28 . 2012-05-28 05:55 ——– d—–w- c:\program files (x86)\NCSoft
2012-04-30 00:52 . 2012-05-29 03:48 ——– d—–w- c:\users\Abe\AppData\Local\Spotify
2012-04-30 00:51 . 2012-05-29 03:48 ——– d—–w- c:\users\Abe\AppData\Roaming\Spotify
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-15 17:44 . 2012-03-26 02:36 472864 —-a-w- c:\windows\SysWow64\deployJava1.dll
2012-05-15 17:22 . 2012-04-01 23:57 419488 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-05-15 17:22 . 2012-03-10 03:26 70304 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-03-24 23:11 . 2012-03-24 23:11 283200 —-a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-03-21 03:44 . 2011-04-27 23:25 98688 —-a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2012-03-21 03:44 . 2011-04-18 21:18 203888 —-a-w- c:\windows\system32\drivers\MpFilter.sys
2012-03-10 23:51 . 2012-03-10 23:51 86528 —-a-w- c:\windows\SysWow64\iesysprep.dll
2012-03-10 23:51 . 2012-03-10 23:51 76800 —-a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2012-03-10 23:51 . 2012-03-10 23:51 74752 —-a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2012-03-10 23:51 . 2012-03-10 23:51 48640 —-a-w- c:\windows\SysWow64\mshtmler.dll
2012-03-10 23:51 . 2012-03-10 23:51 161792 —-a-w- c:\windows\SysWow64\msls31.dll
2012-03-10 23:51 . 2012-03-10 23:51 110592 —-a-w- c:\windows\SysWow64\IEAdvpack.dll
2012-03-10 23:51 . 2012-03-10 23:51 74752 —-a-w- c:\windows\SysWow64\iesetup.dll
2012-03-10 23:51 . 2012-03-10 23:51 63488 —-a-w- c:\windows\SysWow64\tdc.ocx
2012-03-10 23:51 . 2012-03-10 23:51 420864 —-a-w- c:\windows\SysWow64\vbscript.dll
2012-03-10 23:51 . 2012-03-10 23:51 367104 —-a-w- c:\windows\SysWow64\html.iec
2012-03-10 23:51 . 2012-03-10 23:51 35840 —-a-w- c:\windows\SysWow64\imgutil.dll
2012-03-10 23:51 . 2012-03-10 23:51 23552 —-a-w- c:\windows\SysWow64\licmgr10.dll
2012-03-10 23:51 . 2012-03-10 23:51 152064 —-a-w- c:\windows\SysWow64\wextract.exe
2012-03-10 23:51 . 2012-03-10 23:51 150528 —-a-w- c:\windows\SysWow64\iexpress.exe
2012-03-10 23:51 . 2012-03-10 23:51 142848 —-a-w- c:\windows\SysWow64\ieUnatt.exe
2012-03-10 23:51 . 2012-03-10 23:51 11776 —-a-w- c:\windows\SysWow64\mshta.exe
2012-03-10 23:51 . 2012-03-10 23:51 101888 —-a-w- c:\windows\SysWow64\admparse.dll
2012-03-10 23:51 . 2012-03-10 23:51 91648 —-a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-03-10 23:51 . 2012-03-10 23:51 89088 —-a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-03-10 23:51 . 2012-03-10 23:51 85504 —-a-w- c:\windows\system32\iesetup.dll
2012-03-10 23:51 . 2012-03-10 23:51 76800 —-a-w- c:\windows\system32\tdc.ocx
2012-03-10 23:51 . 2012-03-10 23:51 49664 —-a-w- c:\windows\system32\imgutil.dll
2012-03-10 23:51 . 2012-03-10 23:51 48640 —-a-w- c:\windows\system32\mshtmler.dll
2012-03-10 23:51 . 2012-03-10 23:51 448512 —-a-w- c:\windows\system32\html.iec
2012-03-10 23:51 . 2012-03-10 23:51 30720 —-a-w- c:\windows\system32\licmgr10.dll
2012-03-10 23:51 . 2012-03-10 23:51 222208 —-a-w- c:\windows\system32\msls31.dll
2012-03-10 23:51 . 2012-03-10 23:51 173056 —-a-w- c:\windows\system32\ieUnatt.exe
2012-03-10 23:51 . 2012-03-10 23:51 135168 —-a-w- c:\windows\system32\IEAdvpack.dll
2012-03-10 23:51 . 2012-03-10 23:51 12288 —-a-w- c:\windows\system32\mshta.exe
2012-03-10 23:51 . 2012-03-10 23:51 114176 —-a-w- c:\windows\system32\admparse.dll
2012-03-10 23:51 . 2012-03-10 23:51 111616 —-a-w- c:\windows\system32\iesysprep.dll
2012-03-10 23:51 . 2012-03-10 23:51 603648 —-a-w- c:\windows\system32\vbscript.dll
2012-03-10 23:51 . 2012-03-10 23:51 165888 —-a-w- c:\windows\system32\iexpress.exe
2012-03-10 23:51 . 2012-03-10 23:51 160256 —-a-w- c:\windows\system32\wextract.exe
2012-03-10 04:08 . 2012-03-10 04:08 927800 ——w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{FDE18289-677B-48D4-89C7-36F592E76222}\gapaengine.dll
2012-03-10 04:00 . 2011-03-29 02:36 18328 —-a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2012-03-09 01:50 . 2012-03-09 01:50 49016 —-a-w- c:\windows\SysWow64\sirenacm.dll
2012-03-01 06:46 . 2012-04-18 18:20 23408 —-a-w- c:\windows\system32\drivers\fs_rec.sys
2012-03-01 06:38 . 2012-04-18 18:19 220672 —-a-w- c:\windows\system32\wintrust.dll
2012-03-01 06:33 . 2012-04-18 18:20 81408 —-a-w- c:\windows\system32\imagehlp.dll
2012-03-01 06:28 . 2012-04-18 18:19 5120 —-a-w- c:\windows\system32\wmi.dll
2012-03-01 05:37 . 2012-04-18 18:19 172544 —-a-w- c:\windows\SysWow64\wintrust.dll
2012-03-01 05:33 . 2012-04-18 18:20 159232 —-a-w- c:\windows\SysWow64\imagehlp.dll
2012-03-01 05:29 . 2012-04-18 18:19 5120 —-a-w- c:\windows\SysWow64\wmi.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2011-01-13 283160]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]
"HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2011-04-08 586808]
"HPOSD"="c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" [2011-06-14 336440]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-02-15 636032]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AML Device Install.lnk - c:\program files (x86)\AMD AVT\bin\kdbsync.exe [2012-1-31 10752]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-06-21 85560]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-25 129976]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-01-05 340240]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2012-03-27 291696]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 vtany;vtany;c:\windows\vtany.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 xspirit;xspirit;c:\windows\xspirit.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [x]
S2 FPLService;TrueSuiteService;c:\program files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-05-06 263496]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-05-22 103992]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [x]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2011-04-08 26680]
S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-13 13336]
S2 jhi_service;Intel® Identity Protection Technology Host Interface Service;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe [2011-02-24 212944]
S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-12-22 2656280]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [x]
S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [x]
S3 MEIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
S3 wdkmd;Intel WiDi KMD;c:\windows\system32\DRIVERS\WDKMD.sys [x]
.
.
— Other Services/Drivers In Memory —
.
*NewlyCreated* - WS2IFSL
.
Contents of the 'Scheduled Tasks' folder
.
2012-05-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1669691541-3271593822-2735288582-1000Core.job
- c:\users\Abe\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-18 07:01]
.
2012-05-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1669691541-3271593822-2735288582-1000UA.job
- c:\users\Abe\AppData\Local\Google\Update\GoogleUpdate.exe [2012-03-18 07:01]
.
.
——— x86-64 ———–
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-03-11 1128448]
"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-01-05 1933584]
"SetDefault"="c:\program files\Hewlett-Packard\HP LaunchBox\SetDefault.exe" [2011-06-28 42808]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-27 1271168]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-01-27 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-01-27 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-01-27 418328]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
——- Supplementary Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = [removed] [removed]
FF - ProfilePath - c:\users\Abe\AppData\Roaming\Mozilla\Firefox\Profiles\fmtb8c3t.default\
.
- - - - ORPHANS REMOVED - - - -
.
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226} - c:\program files (x86)\InstallShield Installation Information\{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\xsherlock]
"ImagePath"="c:\windows\system32\xsherlock.xem"
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10q_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10q.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
———————— Other Running Processes ————————
.
c:\program files (x86)\CyberLink\YouCam\YCMMirage.exe
c:\program files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Completion time: 2012-05-28 21:05:23 - machine was rebooted
ComboFix-quarantined-files.txt 2012-05-29 04:05
.
Pre-Run: 823,682,584,576 bytes free
Post-Run: 823,403,626,496 bytes free
.
- - End Of File - - 887E1E0B07FBE07229C88AC16A85DAA4
Thanks!
Hey Warmwin,
My pleasure
Please run
Malwarebytes' Anti-Malware .
Click the Update tab, then click Check for Updates . If an update is found, it will download and install the latest version. Next, click Scanner , select Perform quick scan , then click Scan . When the scan is complete, click OK , then Show Results to view the results. Be sure that everything is checked, and click Remove Selected . When completed, a log will open in Notepad. Please save it to a convenient location and post the results. =================================================== Flash Player is out of date
Outdated versions of Flash are vulnerable to malware infections. Please uninstall old versions of Flash Player by following the instructions here . Next, click here to download the latest version of Flash Player. Uncheck "Yes, install Google Toolbar - optional" if you do not want to install Google Toolbar. Click Download Now then double click on the setup file to start the installation. =================================================== Update Adobe Reader
Earlier versions of Adobe Reader have known security flaws so it is recommended that you update your copy
Go to Start > Control Panel > Add/Remove Programs Remove ALL instances of Adobe Reader Re-boot your computer if required. Once ALL versions of Adobe Reader have been uninstalled, visit: <> Make sure you uncheck Yes, install McAfee Security Scan Plus - optional if prompted. Alternative Option: after uninstalling Adobe Reader, you could try downloading and installing SlimPDF Reader from
>here< SlimPDF Reader comes with no bloatware and loads extremely quickly.
=================================================== Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version Java components and update.
Updating Java: Download the latest version of Java Runtime Environment (JRE) 7 Update 4. After the download completes, close any programs you may have running - especially your web browser. Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java. Check any item with Java Runtime Environment (JRE or J2SE) in the name. Click the Remove or Change/Remove button. Repeat as many times as necessary to remove each Java versions. Reboot your computer once all Java components are removed. Double click the Java setup file you just downloaded and follow the prompts to begin the installation.
Now to
Clean out the Java cache:
Go into the Control Panel and double-click the Java Icon.
[external image: Posted Image]
Under Temporary Internet Files, click the Settings… button click the Delete Files button. There are three options in the window to clear the cache - Leave all 3 Checked Downloaded Applets Click OK on Delete Temporary Files Window Note: This deletes ALL the Downloaded Applications and Applets from the CACHE. Click OK to leave the Temporary Files Settings Click OK to leave the Java Control Panel.
Hi NoodleTech,Second Edit: I disabled Chrome Update Manager from the Extensions tab, and the problem seems to have disappeared. Edit: Malwarebytes Anti-Malware blocked something as I googled "chicken."
Hey Warmwin,
I'm sorry for the late reply, I've been out all day. Are you behind a router? Does Malwarebytes always block that IP when you search?
I need you to make a batch file.
Open a new Notepad session
Click the Start button, click Run In the run box type notepad Click OK In the notepad, Click "Format " and be certain that Word Wrap is not checked. Copy and paste all the text in the code box below into the Notepad. Do Not copy the word CODE@Echo on
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0
In the notepad
Click File,
Save as… , and set the Save in to your Desktop
In the filename box, type (including quotation marks) as the filename:
"flush.bat"
Click
Save
You should now have a file on your desktop with an icon like this
[external image: Posted Image]
Double click on
flush.bat & allow it to run. A small black screen may briefly flash on and off, that normal.
Hi NoodleTech, I used the hp recovery manager to reformat–does that mean my laptop is clean of malware/virus? I was afraid that I was being key-logged or something of that sort, so I did a clean install and changed my passwords (I use my laptop for college and everything else! didn't want to risk anything else at that point). Recently my account was compromised (Diablo III), which lead to this panic-induced reformat.
Hi warmwin,
Yes, if you used HP recovery manager to restore your computer to factory state, it should be clean. No need to apologize, I'm glad you were able to solve the problem :).
Here are some tips to reduce the potential for spyware infection in the future Updates It is very important that you keep your Operating System and applications up to date so that you will be less susceptible to malware. It's a good idea to have Windows Update automatically download and install updates as they become available. Secunia Online Software Inspector Run Anti-Virus Software For an excellent list of free anti virus software, free online virus scanners, free spyware detection/removal and free firewalls, click here . IMPORTANT! ONE firewall and ONE real-time antivirus installed on your system. When using "on demand" scanners, first update the detection signature files, then disconnect from the internet and disable your resident security program before running the scan. Once complete, remember to re-engage your resident security before going online. Passwords It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection. Refer to this Microsoft articleStrong passwords: How to create and use them password keeper , to keep all your passwords safe. Spyware Protection This is a good time to set up protection against further attacks. In light of your recent problem, I'm sure you'd like to avoid any future infections. Please read these well written articles: How to Prevent Malware by miekiemoesPC Safety and Security–What Do I Need? Additional Software To help protect your computer in the future I recommend that you get the following free programs if you do not already have them: SpywareBlaster prevents the installation of ActiveX-based malware, blocks cookies, and restricts the actions of "bad" sites. See tutorial here MVPS HOSTS FILE replaces your current HOSTS file with one that will restrict known ad sites from serving you unsolicited advertisements.Google Chrome
Follow these steps, keep your antivirus program and antispyware programs updated, and scan with them on a regular basis. By doing so, your potential for being infected again will reduce dramatically.
Hopefully this should take care of your problems! Good luck.
Do you have any further questions?
**Please respond one more time to confirm your problem is resolved so I can close this thread.
Thanks for the advice! "Hopefully" I won't be back here again asking for help
I'm glad that the problem has been solved, and yes, please close this thread.
Thank you NoodleTech, I really appreciate it.
Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.
Everyone else please follow the instructions here
http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.
