OTL logfile created on: 6/4/2012 8:13:16 PM - Run 4
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Users\Ray\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
4.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 34.00% Memory free
8.00 Gb Paging File | 5.00 Gb Available in Paging File | 63.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 455.61 Gb Total Space | 308.15 Gb Free Space | 67.63% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 2.70 Gb Free Space | 27.01% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: RAYS
Current User Name: Ray
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_2_202_235_ActiveX.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.EXE (Microsoft Corporation.)
PRC - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Inc.)
PRC - c:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe (Intuit)
PRC - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\ytbb.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Garmin\Lifetime Updater\GarminLifetime.exe (Garmin)
PRC - C:\Users\Ray\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Yahoo!\Common\YMailAdvisor.exe (Yahoo! Inc.)
PRC - c:\Program Files (x86)\Common Files\Dell\Advanced Networking Service\hnm_svc.exe (Dell Inc.)
PRC - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hpqtra08.exe (Hewlett-Packard Co.)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - C:\Program Files (x86)\Dell\MediaDirect\PCMService.exe (CyberLink Corp.)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe (Broadcom Corporation.)
========== Modules (SafeList) ==========
MOD - C:\Users\Ray\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV:
64bit: - (Amsp) – C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe (Trend Micro Inc.)
SRV:
64bit: - (wlidsvc) – c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
SRV:
64bit: - (STacSV) – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_cce24a4c\STacSV64.exe (IDT, Inc.)
SRV:
64bit: - (AESTFilters) – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_cce24a4c\AESTSr64.exe (Andrea Electronics Corporation)
SRV:
64bit: - (Ati External Event Utility) – C:\Windows\SysNative\Ati2evxx.exe (ATI Technologies Inc.)
SRV:
64bit: - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV:
64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (Apple Mobile Device) – C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (BBUpdate) – C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.EXE (Microsoft Corporation.)
SRV - (BBSvc) – C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.EXE (Microsoft Corporation.)
SRV - (QBCFMonitorService) – c:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe (Intuit)
SRV - (AdobeARMservice) – C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (HPSLPSVC) – C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (WPFFontCache_v0400) – C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_64) – C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (QBFCService) – c:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe (Intuit Inc.)
SRV - (hnmsvc) – c:\Program Files (x86)\Common Files\Dell\Advanced Networking Service\hnm_svc.exe (Dell Inc.)
SRV - (YahooAUService) – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
========== Driver Services (SafeList) ==========
DRV:
64bit: - (NwlnkFwd) – C:\Windows\SysNative\DRIVERS\nwlnkfwd.sys File not found
DRV:
64bit: - (NwlnkFlt) – C:\Windows\SysNative\DRIVERS\nwlnkflt.sys File not found
DRV:
64bit: - (IpInIp) – C:\Windows\SysNative\DRIVERS\ipinip.sys File not found
DRV:
64bit: - (USBAAPL64) – C:\Windows\SysNative\Drivers\usbaapl64.sys (Apple, Inc.)
DRV:
64bit: - (tmnciesc) – C:\Windows\SysNative\DRIVERS\tmnciesc.sys (Trend Micro Inc.)
DRV:
64bit: - (tmcomm) – C:\Windows\SysNative\DRIVERS\tmcomm.sys (Trend Micro Inc.)
DRV:
64bit: - (tmtdi) – C:\Windows\SysNative\DRIVERS\tmtdi.sys (Trend Micro Inc.)
DRV:
64bit: - (tmactmon) – C:\Windows\SysNative\DRIVERS\tmactmon.sys (Trend Micro Inc.)
DRV:
64bit: - (tmevtmgr) – C:\Windows\SysNative\DRIVERS\tmevtmgr.sys (Trend Micro Inc.)
DRV:
64bit: - (tmeevw) – C:\Windows\SysNative\DRIVERS\tmeevw.sys (Trend Micro Inc.)
DRV:
64bit: - (itecir) – C:\Windows\SysNative\DRIVERS\itecir.sys (ITE Tech. Inc. )
DRV:
64bit: - (WpdUsb) – C:\Windows\SysNative\DRIVERS\wpdusb.sys (Microsoft Corporation)
DRV:
64bit: - (GEARAspiWDM) – C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:
64bit: - (sdbus) – C:\Windows\SysNative\DRIVERS\sdbus.sys (Microsoft Corporation)
DRV:
64bit: - (OA001Vid) – C:\Windows\SysNative\DRIVERS\OA001Vid.sys (Creative Technology Ltd.)
DRV:
64bit: - (OA001Ufd) – C:\Windows\SysNative\DRIVERS\OA001Ufd.sys (Creative Technology Ltd.)
DRV:
64bit: - (STHDA) – C:\Windows\SysNative\DRIVERS\stwrt64.sys (IDT, Inc.)
DRV:
64bit: - (R300) – C:\Windows\SysNative\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV:
64bit: - (atikmdag) – C:\Windows\SysNative\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV:
64bit: - (NETw5v64) Intel® – C:\Windows\SysNative\DRIVERS\NETw5v64.sys (Intel Corporation)
DRV:
64bit: - (ApfiltrService) – C:\Windows\SysNative\DRIVERS\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV:
64bit: - (rismxdp) – C:\Windows\SysNative\DRIVERS\rixdpx64.sys (REDC)
DRV:
64bit: - (rimmptsk) – C:\Windows\SysNative\DRIVERS\rimmpx64.sys (REDC)
DRV:
64bit: - (rimsptsk) – C:\Windows\SysNative\DRIVERS\rimspx64.sys (REDC)
DRV:
64bit: - (k57nd60a) Broadcom NetLink ™ – C:\Windows\SysNative\DRIVERS\k57nd60a.sys (Broadcom Corporation)
DRV:
64bit: - (Packet) – C:\Windows\SysNative\DRIVERS\packet.sys (SingleClick Systems)
DRV:
64bit: - (btwrchid) – C:\Windows\SysNative\DRIVERS\btwrchid.sys (Broadcom Corporation.)
DRV:
64bit: - (btwl2cap) – C:\Windows\SysNative\DRIVERS\btwl2cap.sys (Broadcom Corporation.)
DRV:
64bit: - (btwavdt) – C:\Windows\SysNative\drivers\btwavdt.sys (Broadcom Corporation.)
DRV:
64bit: - (btwaudio) – C:\Windows\SysNative\drivers\btwaudio.sys (Broadcom Corporation.)
DRV:
64bit: - (StillCam) – C:\Windows\SysNative\DRIVERS\serscan.sys (Microsoft Corporation)
DRV:
64bit: - (WSDPrintDevice) – C:\Windows\SysNative\DRIVERS\WSDPrint.sys (Microsoft Corporation)
DRV:
64bit: - (e1express) Intel® – C:\Windows\SysNative\DRIVERS\e1e6032e.sys (Intel Corporation)
DRV:
64bit: - (PxHlpa64) – C:\Windows\SysNative\Drivers\PxHlpa64.sys (Sonic Solutions)
DRV:
64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/03/15 06:50:14 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{22181a4d-af90-4ca3-a569-faed9118d6bc}: C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2012/01/10 23:30:42 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{38783831-6098-4faa-A9C9-1EE1E343F4D2}: C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1102\7.1.1102\firefoxextension [2012/03/28 18:20:01 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\module\20004\FxExt\firefoxextension\ [2012/03/28 18:20:46 | 000,000,000 | —D | M]
[2011/01/02 22:30:16 | 000,000,000 | —D | M] – C:\Users\Ray\AppData\Roaming\Mozilla\Extensions
O1 HOSTS File: ([2010/09/03 15:10:43 | 000,000,635 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2:
64bit: - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\2.0.1313\6.8.1078\TmIEPlg.dll (Trend Micro Inc.)
O2:
64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2:
64bit: - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\7.1.1102\7.1.1102\TmBpIe64.dll (Trend Micro Inc.)
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\2.0.1313\6.8.1078\TmIEPlg32.dll (Trend Micro Inc.)
O2 - BHO: (TSToolbarBHO) - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\7.1.1102\7.1.1102\TmBpIe32.dll (Trend Micro Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Trend Micro Toolbar) - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4:
64bit: - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4:
64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4:
64bit: - HKLM..\Run: [Trend Micro Client Framework] C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe (Trend Micro Inc.)
O4:
64bit: - HKLM..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [Intuit SyncManager] C:\Program Files (x86)\Common Files\Intuit\Sync\IntuitSyncManager.exe (Intuit Inc. All rights reserved.)
O4 - HKLM..\Run: [PCMService] C:\Program Files (x86)\Dell\MediaDirect\PCMService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [YMailAdvisor] C:\Program Files (x86)\Yahoo!\Common\YMailAdvisor.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [Garmin Lifetime Updater] C:\Program Files (x86)\Garmin\Lifetime Updater\GarminLifetime.exe (Garmin)
O4 - HKCU..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe (Apple Inc.)
O4 - Startup: C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hpqtra08.exe (Hewlett-Packard Co.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O8:
64bit: - Extra context menu item: Send image to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:
64bit: - Extra context menu item: Send page to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Send image to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:
64bit: - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:
64bit: - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O10:
64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files (x86)\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} http://cdn.scan.onecare.live.com/resource/…s/wlscctrl2.cab (Windows Live OneCare safety scanner control)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203}
http://h20270.www2.hp.com/ediags/gmn2/inst…tDetection2.cab (GMNRev Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5}
http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.0…oUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: Garmin Communicator Plug-In
https://static.garmincdn.com/gcp/ie/3.0.1.0…inAxControl.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed] [removed]
O18:
64bit: - Protocol\Handler\intu-help-qb3 {c5e479ea-0a65-4b05-8c6c-2fc8cc682eb4} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\qbwc {FC598A64-626C-4447-85B8-53150405FD57} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.1.1102\7.1.1102\TmBpIe64.dll (Trend Micro Inc.)
O18:
64bit: - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\2.0.1313\6.8.1078\TmIEPlg.dll (Trend Micro Inc.)
O18:
64bit: - Protocol\Handler\tmtb {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\tmtbim {0B37915C-8B98-4B9E-80D4-464D2C830D10} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\intu-help-qb3 {c5e479ea-0a65-4b05-8c6c-2fc8cc682eb4} - C:\Program Files (x86)\Intuit\QuickBooks 2010\HelpAsyncPluggableProtocol.dll (Intuit, Inc.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.1.1102\7.1.1102\TmBpIe32.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\2.0.1313\6.8.1078\TmIEPlg32.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmtb {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmtbim {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
O20:
64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Ray\AppData\Roaming\Microsoft\Windows Live Photo Gallery\Windows Live Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Ray\AppData\Roaming\Microsoft\Windows Live Photo Gallery\Windows Live Photo Gallery Wallpaper.jpg
O28:
64bit: - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:
64bit: - HKLM\..comfile [open] – "%1" %*
O35:
64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:
64bit: - HKLM\…com [@ = ComFile] – "%1" %*
O37:
64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2012/05/21 16:40:50 | 002,127,960 | —- | C] (Kaspersky Lab ZAO) – C:\Users\Ray\Desktop\TDSSKiller.exe
[2012/05/14 20:49:17 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jnwmon.dll
[2012/05/14 20:49:10 | 001,556,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2012/05/14 20:49:10 | 001,069,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2012/05/14 20:49:09 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10warp.dll
[2012/05/14 20:49:09 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1core.dll
[2012/05/14 20:49:08 | 002,002,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2012/05/14 20:49:08 | 000,683,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll
[2012/05/14 20:49:08 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2012/05/14 20:49:07 | 000,834,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2012/05/14 20:49:07 | 000,196,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2012/05/14 20:49:07 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1.dll
[2012/05/14 20:49:00 | 004,699,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2009/07/29 16:14:00 | 008,270,752 | —- | C] (Dell, Inc. ) – C:\Users\Ray\AppData\Roaming\DataSafeDotNet.exe
========== Files - Modified Within 30 Days ==========
[2012/06/04 20:19:20 | 000,003,616 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/06/04 20:19:20 | 000,003,616 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/06/04 20:10:12 | 003,670,016 | -HS- | M] () – C:\Users\Ray\ntuser.dat
[2012/06/04 20:09:58 | 000,000,370 | —- | M] () – C:\Users\Ray\Desktop\Ray's Lawn Care LLC - 2011 12-31-11 final 1.QBW.ND
[2012/06/04 20:09:57 | 012,005,376 | R— | M] () – C:\Users\Ray\Desktop\Ray's Lawn Care LLC - 2011 12-31-11 final 1.QBW
[2012/06/04 20:09:57 | 001,114,112 | R— | M] () – C:\Users\Ray\Desktop\Ray's Lawn Care LLC - 2011 12-31-11 final 1.QBW.TLG
[2012/06/04 20:01:00 | 000,000,898 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/06/04 19:59:03 | 002,127,960 | —- | M] (Kaspersky Lab ZAO) – C:\Users\Ray\Desktop\TDSSKiller.exe
[2012/06/04 19:47:00 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/06/04 19:07:58 | 000,012,468 | —- | M] () – C:\Users\Ray\Documents\whites comparisson.xlsx
[2012/06/04 18:19:20 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/06/03 22:01:03 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/06/02 23:09:26 | 000,011,067 | —- | M] () – C:\Users\Ray\Documents\Customer work 2012.xlsx
[2012/06/02 17:55:15 | 000,616,164 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2012/06/02 17:55:15 | 000,108,172 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2012/06/02 17:55:14 | 000,719,100 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2012/06/02 17:28:57 | 000,006,944 | —- | M] () – C:\Users\Ray\AppData\Local\d3d9caps.dat
[2012/06/02 13:15:58 | 000,009,560 | —- | M] () – C:\Users\Ray\Documents\tebo 2012.xlsx
[2012/06/02 13:15:26 | 000,009,598 | —- | M] () – C:\Users\Ray\Documents\Kevin 2012.xlsx
[2012/06/02 12:20:22 | 000,009,054 | —- | M] () – C:\Users\Ray\Documents\bitticks garden.xlsx
[2012/05/31 22:49:16 | 000,009,133 | —- | M] () – C:\Users\Ray\Documents\Fert 2012.xlsx
[2012/05/30 21:31:31 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2012/05/30 21:31:21 | 4258,156,544 | -HS- | M] () – C:\hiberfil.sys
[2012/05/28 14:39:06 | 000,000,732 | —- | M] () – C:\Users\Ray\AppData\Local\d3d9caps64.dat
[2012/05/28 12:13:53 | 000,012,288 | —- | M] () – C:\Users\Ray\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/05/24 21:02:46 | 000,002,027 | —- | M] () – C:\Users\Public\Desktop\Google Chrome.lnk
[2012/05/21 21:11:22 | 000,000,165 | -H– | M] () – C:\Users\Ray\Documents\~$Customer work 2012.xlsx
[2012/05/15 20:57:24 | 000,386,312 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2012/05/15 03:51:41 | 000,003,204 | —- | M] () – C:\Windows\bthservsdp.dat
[2012/05/15 03:51:04 | 000,524,288 | -HS- | M] () – C:\Users\Ray\ntuser.dat{3cf853e1-c3b3-11e0-a22d-002219e53c2f}.TMContainer00000000000000000001.regtrans-ms
[2012/05/15 03:51:04 | 000,065,536 | -HS- | M] () – C:\Users\Ray\ntuser.dat{3cf853e1-c3b3-11e0-a22d-002219e53c2f}.TM.blf
[2012/05/15 03:51:01 | 001,850,322 | -H– | M] () – C:\Users\Ray\AppData\Local\IconCache.db
[2012/05/06 21:12:03 | 000,008,451 | —- | M] () – C:\Users\Ray\Documents\to be billed.xlsx
========== Files Created - No Company Name ==========
[2012/05/28 14:39:06 | 000,000,732 | —- | C] () – C:\Users\Ray\AppData\Local\d3d9caps64.dat
[2012/05/21 21:11:22 | 000,000,165 | -H– | C] () – C:\Users\Ray\Documents\~$Customer work 2012.xlsx
[2012/05/06 21:12:02 | 000,008,451 | —- | C] () – C:\Users\Ray\Documents\to be billed.xlsx
[2012/01/28 10:02:22 | 000,000,000 | —- | C] () – C:\Users\Ray\AppData\Local\{D5246771-0132-44E1-982C-A1D56D13BF08}
[2010/02/06 11:19:43 | 000,006,944 | —- | C] () – C:\Users\Ray\AppData\Local\d3d9caps.dat
[2010/02/01 21:21:36 | 000,000,090 | —- | C] () – C:\Windows\QBChanUtil_Trigger.ini
[2009/12/03 20:07:59 | 000,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2009/12/03 20:06:30 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/08/19 18:16:27 | 000,013,399 | —- | C] () – C:\ProgramData\hpzinstall.log
[2009/06/15 21:13:23 | 000,012,288 | —- | C] () – C:\Users\Ray\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/01/20 22:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini
========== LOP Check ==========
[2011/08/29 16:06:39 | 000,000,000 | —D | M] – C:\Users\Ray\AppData\Roaming\Garmin
[2009/04/21 19:56:02 | 000,000,000 | —D | M] – C:\Users\Ray\AppData\Roaming\GetRightToGo
[2012/05/15 03:51:41 | 000,032,574 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2010/12/15 04:23:58 | 000,000,414 | -H– | M] () – C:\Windows\Tasks\User_Feed_Synchronization-{D0A7C542-586A-4AD7-9B1C-3402F0889F2A}.job
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.exe >
< MD5 for: EXPLORER.EXE >
[2009/04/08 22:59:32 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_b5f700fe698beb14\explorer.exe
[2009/04/08 22:59:31 | 002,927,104 | —- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_b7eb106e66a7ac19\explorer.exe
[2009/04/08 22:59:32 | 003,087,360 | —- | M] (Microsoft Corporation) MD5=50514057C28A74BAC2BD04B7B990D615 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_aba256ac352b2919\explorer.exe
[2009/04/08 22:59:31 | 002,927,616 | —- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_b8583e9d7fda0512\explorer.exe
[2009/04/11 03:10:17 | 003,079,168 | —- | M] (Microsoft Corporation) MD5=6B08E54A451B3F95E4109DBA7E594270 – C:\Windows\ERDNT\cache86\explorer.exe
[2009/04/11 03:10:17 | 003,079,168 | —- | M] (Microsoft Corporation) MD5=6B08E54A451B3F95E4109DBA7E594270 – C:\Windows\explorer.exe
[2009/04/11 03:10:17 | 003,079,168 | —- | M] (Microsoft Corporation) MD5=6B08E54A451B3F95E4109DBA7E594270 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_afbebba22f3bab41\explorer.exe
[2009/04/08 22:59:31 | 003,086,848 | —- | M] (Microsoft Corporation) MD5=72B9990E45C25AA3C75C4FB50A9D6CE0 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_ac5266dd4e2b0a41\explorer.exe
[2009/04/08 22:59:31 | 003,080,704 | —- | M] (Microsoft Corporation) MD5=BBD8E74F23D7605CB0CDB57A1B25D826 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_ad96661c3246ea1e\explorer.exe
[2009/04/11 02:27:36 | 002,926,592 | —- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 – C:\Windows\SysWOW64\explorer.exe
[2009/04/11 02:27:36 | 002,926,592 | —- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 – C:\Windows\SysWOW64\explorer.exe
[2009/04/11 02:27:36 | 002,926,592 | —- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_ba1365f4639c6d3c\explorer.exe
[2009/04/08 22:59:31 | 003,081,216 | —- | M] (Microsoft Corporation) MD5=E404A65EF890140410E9F3D405841C95 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_ae03944b4b794317\explorer.exe
[2009/04/08 22:59:31 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_b6a7112f828bcc3c\explorer.exe
[2008/01/20 22:48:44 | 003,080,704 | —- | M] (Microsoft Corporation) MD5=F6D765FB6B457542D954682F50C26E4F – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_add342963219dff5\explorer.exe
[2008/01/20 22:49:23 | 002,927,104 | —- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_b827ece8667aa1f0\explorer.exe
< MD5 for: SVCHOST.EXE >
[2008/01/20 22:48:05 | 000,021,504 | —- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF – C:\Windows\ERDNT\cache86\svchost.exe
[2008/01/20 22:48:05 | 000,021,504 | —- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF – C:\Windows\SysWOW64\svchost.exe
[2008/01/20 22:48:05 | 000,021,504 | —- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF – C:\Windows\SysWOW64\svchost.exe
[2008/01/20 22:48:05 | 000,021,504 | —- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF – C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.0.6001.18000_none_b5bb59a1054dbde5\svchost.exe
[2008/01/20 22:50:24 | 000,027,648 | —- | M] (Microsoft Corporation) MD5=CDA9F1373805AF88F6FA4F2064BBA24D – C:\Windows\ERDNT\cache64\svchost.exe
[2008/01/20 22:50:24 | 000,027,648 | —- | M] (Microsoft Corporation) MD5=CDA9F1373805AF88F6FA4F2064BBA24D – C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.0.6001.18000_none_11d9f524bdab2f1b\svchost.exe
< MD5 for: USERINIT.EXE >
[2008/01/20 22:50:36 | 000,025,088 | —- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 – C:\Windows\ERDNT\cache86\userinit.exe
[2008/01/20 22:50:36 | 000,025,088 | —- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 – C:\Windows\SysWOW64\userinit.exe
[2008/01/20 22:50:36 | 000,025,088 | —- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 – C:\Windows\SysWOW64\userinit.exe
[2008/01/20 22:50:36 | 000,025,088 | —- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 – C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
[2008/01/20 22:49:46 | 000,028,160 | —- | M] (Microsoft Corporation) MD5=A0AB2BB9A92293D9CE66E252719AB5FE – C:\Windows\ERDNT\cache64\userinit.exe
[2008/01/20 22:49:46 | 000,028,160 | —- | M] (Microsoft Corporation) MD5=A0AB2BB9A92293D9CE66E252719AB5FE – C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_384755998a0d6941\userinit.exe
< MD5 for: WINLOGON.EXE >
[2009/04/11 03:11:08 | 000,405,504 | —- | M] (Microsoft Corporation) MD5=6D0773A3A65D28B663F334C90441D01A – C:\Windows\ERDNT\cache64\winlogon.exe
[2009/04/11 03:11:08 | 000,405,504 | —- | M] (Microsoft Corporation) MD5=6D0773A3A65D28B663F334C90441D01A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_cdcd15a68a70b877\winlogon.exe
[2008/01/20 22:49:47 | 000,406,016 | —- | M] (Microsoft Corporation) MD5=856491FCED98093D824B9EB2892F564A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_cbe19c9a8d4eed2b\winlogon.exe
[2009/04/11 02:28:13 | 000,314,368 | —- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 – C:\Windows\SysWOW64\winlogon.exe
[2009/04/11 02:28:13 | 000,314,368 | —- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 – C:\Windows\SysWOW64\winlogon.exe
[2009/04/11 02:28:13 | 000,314,368 | —- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2008/01/20 22:50:38 | 000,314,880 | —- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
< C:\Windows\assembly\tmp\U\*.* /s >
========== Alternate Data Streams ==========
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:5D432CE3
< End of report >
19:59:20.0516 0956 TDSS rootkit removing tool 2.7.36.0 May 21 2012 16:40:16
19:59:20.0931 0956 ============================================================
19:59:20.0931 0956 Current date / time: 2012/06/04 19:59:20.0931
19:59:20.0931 0956 SystemInfo:
19:59:20.0931 0956
19:59:20.0932 0956 OS Version: 6.0.6002 ServicePack: 2.0
19:59:20.0932 0956 Product type: Workstation
19:59:20.0932 0956 ComputerName: RAYS
19:59:20.0932 0956 UserName: Ray
19:59:20.0932 0956 Windows directory: C:\Windows
19:59:20.0932 0956 System windows directory: C:\Windows
19:59:20.0932 0956 Running under WOW64
19:59:20.0932 0956 Processor architecture: Intel x64
19:59:20.0932 0956 Number of processors: 2
19:59:20.0932 0956 Page size: 0x1000
19:59:20.0932 0956 Boot type: Normal boot
19:59:20.0932 0956 ============================================================
19:59:24.0017 0956 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:59:24.0031 0956 ============================================================
19:59:24.0031 0956 \Device\Harddisk0\DR0:
19:59:24.0061 0956 MBR partitions:
19:59:24.0061 0956 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x4B000, BlocksNum 0x1400000
19:59:24.0061 0956 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x144B000, BlocksNum 0x38F3A800
19:59:24.0061 0956 ============================================================
19:59:24.0116 0956 C: <-> \Device\Harddisk0\DR0\Partition1
19:59:24.0197 0956 D: <-> \Device\Harddisk0\DR0\Partition0
19:59:24.0197 0956 ============================================================
19:59:24.0197 0956 Initialize success
19:59:24.0197 0956 ============================================================
19:59:27.0197 6248 ============================================================
19:59:27.0197 6248 Scan started
19:59:27.0197 6248 Mode: Manual;
19:59:27.0197 6248 ============================================================
19:59:32.0279 6248 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys
19:59:32.0290 6248 ACPI - ok
19:59:32.0771 6248 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:59:32.0775 6248 AdobeARMservice - ok
19:59:33.0190 6248 AdobeFlashPlayerUpdateSvc (76d5a3d2a50402a0b9b6ed13c4371e79) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
19:59:33.0194 6248 AdobeFlashPlayerUpdateSvc - ok
19:59:33.0392 6248 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys
19:59:33.0408 6248 adp94xx - ok
19:59:33.0546 6248 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys
19:59:33.0558 6248 adpahci - ok
19:59:33.0618 6248 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys
19:59:33.0623 6248 adpu160m - ok
19:59:33.0696 6248 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys
19:59:33.0703 6248 adpu320 - ok
19:59:33.0752 6248 AeLookupSvc (0f421175574bfe0bf2f4d8e910a253bb) C:\Windows\System32\aelupsvc.dll
19:59:33.0755 6248 AeLookupSvc - ok
19:59:33.0984 6248 AESTFilters (9cac9e19d71e4af99920fcc3eca0e3f1) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_cce24a4c\AESTSr64.exe
19:59:34.0030 6248 AESTFilters - ok
19:59:34.0458 6248 AFD (c4f6ce6087760ad70960c9eb130e7943) C:\Windows\system32\drivers\afd.sys
19:59:34.0472 6248 AFD - ok
19:59:34.0697 6248 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys
19:59:34.0701 6248 agp440 - ok
19:59:34.0789 6248 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys
19:59:34.0794 6248 aic78xx - ok
19:59:34.0849 6248 ALG (5922f4f59b7868f3d74bbbbeb7b825a3) C:\Windows\System32\alg.exe
19:59:34.0854 6248 ALG - ok
19:59:34.0895 6248 aliide (9544c2c55541c0c6bfd7b489d0e7d430) C:\Windows\system32\drivers\aliide.sys
19:59:34.0898 6248 aliide - ok
19:59:34.0920 6248 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys
19:59:34.0923 6248 amdide - ok
19:59:34.0960 6248 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys
19:59:34.0965 6248 AmdK8 - ok
19:59:35.0204 6248 Amsp (1b7d1f0a0dfadbc797c16364792a7aa5) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
19:59:35.0215 6248 Amsp - ok
19:59:35.0309 6248 ApfiltrService (8c85c812569df851e7a2159147323dfa) C:\Windows\system32\DRIVERS\Apfiltr.sys
19:59:35.0318 6248 ApfiltrService - ok
19:59:35.0402 6248 Appinfo (9c37b3fd5615477cb9a0cd116cf43f5c) C:\Windows\System32\appinfo.dll
19:59:35.0405 6248 Appinfo - ok
19:59:35.0562 6248 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
19:59:35.0567 6248 Apple Mobile Device - ok
19:59:35.0647 6248 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys
19:59:35.0652 6248 arc - ok
19:59:35.0732 6248 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys
19:59:35.0737 6248 arcsas - ok
19:59:35.0778 6248 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys
19:59:35.0781 6248 AsyncMac - ok
19:59:35.0860 6248 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys
19:59:35.0862 6248 atapi - ok
19:59:36.0202 6248 Ati External Event Utility (a903d05966489f14673e8e5475081cd5) C:\Windows\system32\Ati2evxx.exe
19:59:36.0229 6248 Ati External Event Utility - ok
19:59:38.0188 6248 atikmdag (0adc170bcac8260539df29032a2e9d8d) C:\Windows\system32\DRIVERS\atikmdag.sys
19:59:38.0358 6248 atikmdag - ok
19:59:38.0741 6248 AudioEndpointBuilder (79318c744693ec983d20e9337a2f8196) C:\Windows\System32\Audiosrv.dll
19:59:38.0756 6248 AudioEndpointBuilder - ok
19:59:38.0764 6248 AudioSrv (79318c744693ec983d20e9337a2f8196) C:\Windows\System32\Audiosrv.dll
19:59:38.0770 6248 AudioSrv - ok
19:59:39.0034 6248 BBSvc (a2494901e7226b356b8c1005c45f1c5f) C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.exe
19:59:39.0041 6248 BBSvc - ok
19:59:39.0129 6248 BBUpdate (63b1cbbae4790b5bac98f01bf9449722) C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe
19:59:39.0138 6248 BBUpdate - ok
19:59:39.0206 6248 Beep - ok
19:59:39.0406 6248 BFE (ffb96c2589ffa60473ead78b39fbde29) C:\Windows\System32\bfe.dll
19:59:39.0426 6248 BFE - ok
19:59:39.0792 6248 BITS (6d316f4859634071cc25c4fd4589ad2c) C:\Windows\system32\qmgr.dll
19:59:39.0829 6248 BITS - ok
19:59:39.0911 6248 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys
19:59:39.0915 6248 blbdrive - ok
19:59:40.0149 6248 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe
19:59:40.0166 6248 Bonjour Service - ok
19:59:40.0224 6248 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys
19:59:40.0231 6248 bowser - ok
19:59:40.0287 6248 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys
19:59:40.0309 6248 BrFiltLo - ok
19:59:40.0326 6248 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys
19:59:40.0329 6248 BrFiltUp - ok
19:59:40.0397 6248 Browser (a1b39de453433b115b4ea69ee0343816) C:\Windows\System32\browser.dll
19:59:40.0403 6248 Browser - ok
19:59:40.0466 6248 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys
19:59:40.0471 6248 Brserid - ok
19:59:40.0506 6248 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys
19:59:40.0509 6248 BrSerWdm - ok
19:59:40.0539 6248 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys
19:59:40.0542 6248 BrUsbMdm - ok
19:59:40.0569 6248 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys
19:59:40.0572 6248 BrUsbSer - ok
19:59:40.0647 6248 BthEnum (09f926a0d9c0bafd8417a4307d2ed13c) C:\Windows\system32\DRIVERS\BthEnum.sys
19:59:40.0650 6248 BthEnum - ok
19:59:40.0697 6248 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys
19:59:40.0701 6248 BTHMODEM - ok
19:59:40.0879 6248 BthPan (befc5311736b475ac5b60c14ff7c775a) C:\Windows\system32\DRIVERS\bthpan.sys
19:59:40.0885 6248 BthPan - ok
19:59:41.0256 6248 BthPort (e1466882252ff51edde48c3f7eda2591) C:\Windows\system32\Drivers\BTHport.sys
19:59:41.0283 6248 BthPort - ok
19:59:41.0358 6248 BthServ (22e65ffd640f16968f855f5b3528d366) C:\Windows\System32\bthserv.dll
19:59:41.0362 6248 BthServ - ok
19:59:41.0419 6248 BTHUSB (970192cded77a128e7e30722e5ee6b9c) C:\Windows\system32\Drivers\BTHUSB.sys
19:59:41.0423 6248 BTHUSB - ok
19:59:41.0635 6248 btwaudio (319c67f7d157eaac519dcc5f29e929d0) C:\Windows\system32\drivers\btwaudio.sys
19:59:41.0640 6248 btwaudio - ok
19:59:41.0713 6248 btwavdt (0b79273c8c2846d28aab936e7a2dbaad) C:\Windows\system32\drivers\btwavdt.sys
19:59:41.0718 6248 btwavdt - ok
19:59:42.0344 6248 btwdins (6c32a638ee80fd832418ce78e516ffa1) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
19:59:42.0369 6248 btwdins - ok
19:59:42.0448 6248 btwl2cap (fda1b5124e07003c3d0d279e5050485e) C:\Windows\system32\DRIVERS\btwl2cap.sys
19:59:42.0451 6248 btwl2cap - ok
19:59:42.0655 6248 btwrchid (47216d8b5f4042e6d0736bfa2e57b5df) C:\Windows\system32\DRIVERS\btwrchid.sys
19:59:42.0659 6248 btwrchid - ok
19:59:42.0708 6248 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys
19:59:42.0713 6248 cdfs - ok
19:59:43.0166 6248 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys
19:59:43.0171 6248 cdrom - ok
19:59:43.0260 6248 CertPropSvc (5a268127633c7ee2a7fb87f39d748d56) C:\Windows\System32\certprop.dll
19:59:43.0263 6248 CertPropSvc - ok
19:59:43.0476 6248 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\DRIVERS\circlass.sys
19:59:43.0572 6248 circlass - ok
19:59:44.0130 6248 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys
19:59:44.0167 6248 CLFS - ok
19:59:44.0340 6248 clr_optimization_v2.0.50727_32 (8ee772032e2fe80a924f3b8dd5082194) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:59:44.0342 6248 clr_optimization_v2.0.50727_32 - ok
19:59:44.0457 6248 clr_optimization_v2.0.50727_64 (ce07a466201096f021cd09d631b21540) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:59:44.0460 6248 clr_optimization_v2.0.50727_64 - ok
19:59:44.0620 6248 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:59:44.0625 6248 clr_optimization_v4.0.30319_32 - ok
19:59:44.0774 6248 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:59:44.0781 6248 clr_optimization_v4.0.30319_64 - ok
19:59:44.0842 6248 CmBatt (b52d9a14ce4101577900a364ba86f3df) C:\Windows\system32\DRIVERS\CmBatt.sys
19:59:44.0845 6248 CmBatt - ok
19:59:44.0886 6248 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys
19:59:44.0889 6248 cmdide - ok
19:59:44.0917 6248 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\DRIVERS\compbatt.sys
19:59:44.0920 6248 Compbatt - ok
19:59:44.0925 6248 COMSysApp - ok
19:59:44.0942 6248 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys
19:59:44.0945 6248 crcdisk - ok
19:59:45.0051 6248 CryptSvc (18918613e63f387cde4d95ca7d49dcf7) C:\Windows\system32\cryptsvc.dll
19:59:45.0059 6248 CryptSvc - ok
19:59:45.0321 6248 DcomLaunch (cf8b9a3a5e7dc57724a89d0c3e8cf9ef) C:\Windows\system32\rpcss.dll
19:59:45.0346 6248 DcomLaunch - ok
19:59:45.0397 6248 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys
19:59:45.0402 6248 DfsC - ok
19:59:46.0416 6248 DFSR (c647f468f7de343df8c143655c5557d4) C:\Windows\system32\DFSR.exe
19:59:46.0523 6248 DFSR - ok
19:59:46.0899 6248 Dhcp (3ed0321127ce70acdaabbf77e157c2a7) C:\Windows\System32\dhcpcsvc.dll
19:59:46.0910 6248 Dhcp - ok
19:59:46.0999 6248 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys
19:59:47.0004 6248 disk - ok
19:59:47.0224 6248 Dnscache (06230f1b721494a6df8d47fd395bb1b0) C:\Windows\System32\dnsrslvr.dll
19:59:47.0230 6248 Dnscache - ok
19:59:47.0405 6248 DockLoginService (db29915209770d8b59654345ec2d943a) C:\Program Files\Dell\DellDock\DockLogin.exe
19:59:47.0407 6248 DockLoginService - ok
19:59:47.0517 6248 dot3svc (1a7156dd1e850e9914e5e991e3225b94) C:\Windows\System32\dot3svc.dll
19:59:47.0526 6248 dot3svc - ok
19:59:47.0621 6248 Dot4 (74c02b1717740c3b8039539e23e4b53f) C:\Windows\system32\DRIVERS\Dot4.sys
19:59:47.0627 6248 Dot4 - ok
19:59:47.0713 6248 Dot4Print (08321d1860235bf42cf2854234337aea) C:\Windows\system32\DRIVERS\Dot4Prt.sys
19:59:47.0716 6248 Dot4Print - ok
19:59:47.0786 6248 dot4usb (4adccf0124f2b6911d3786a5d0e779e5) C:\Windows\system32\DRIVERS\dot4usb.sys
19:59:47.0790 6248 dot4usb - ok
19:59:47.0877 6248 DPS (1583b39790db3eaec7edb0cb0140c708) C:\Windows\system32\dps.dll
19:59:47.0884 6248 DPS - ok
19:59:47.0952 6248 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys
19:59:47.0955 6248 drmkaud - ok
19:59:48.0248 6248 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys
19:59:48.0277 6248 DXGKrnl - ok
19:59:48.0407 6248 e1express (17d40652ef3e55eeae187a89df40965a) C:\Windows\system32\DRIVERS\e1e6032e.sys
19:59:48.0418 6248 e1express - ok
19:59:48.0499 6248 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys
19:59:48.0506 6248 E1G60 - ok
19:59:48.0568 6248 EapHost (c2303883fd9be49dc36a6400643002ea) C:\Windows\System32\eapsvc.dll
19:59:48.0573 6248 EapHost - ok
19:59:48.0661 6248 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys
19:59:48.0669 6248 Ecache - ok
19:59:48.0824 6248 ehRecvr (14ce384d2e27b64c256bda4dc39c312d) C:\Windows\ehome\ehRecvr.exe
19:59:48.0835 6248 ehRecvr - ok
19:59:48.0885 6248 ehSched (b93159c1313d66fdfbbe876f5189cd52) C:\Windows\ehome\ehsched.exe
19:59:48.0892 6248 ehSched - ok
19:59:48.0901 6248 ehstart (f5ee2527d74449868e3c3227a59bcd28) C:\Windows\ehome\ehstart.dll
19:59:48.0904 6248 ehstart - ok
19:59:49.0067 6248 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys
19:59:49.0082 6248 elxstor - ok
19:59:49.0348 6248 EMDMgmt (a9b18b63a4fd6baab83326706d857fab) C:\Windows\system32\emdmgmt.dll
19:59:49.0363 6248 EMDMgmt - ok
19:59:49.0383 6248 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys
19:59:49.0386 6248 ErrDev - ok
19:59:49.0563 6248 EventSystem (e12f22b73f153dece721cd45ec05b4af) C:\Windows\system32\es.dll
19:59:49.0574 6248 EventSystem - ok
19:59:49.0675 6248 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys
19:59:49.0683 6248 exfat - ok
19:59:49.0774 6248 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys
19:59:49.0783 6248 fastfat - ok
19:59:49.0867 6248 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys
19:59:49.0871 6248 fdc - ok
19:59:49.0912 6248 fdPHost (bb9267acacd8b7533dd936c34a0cba5e) C:\Windows\system32\fdPHost.dll
19:59:49.0915 6248 fdPHost - ok
19:59:49.0939 6248 FDResPub (300c80931eabbe1db7591c516efe8d0f) C:\Windows\system32\fdrespub.dll
19:59:49.0943 6248 FDResPub - ok
19:59:49.0972 6248 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys
19:59:49.0977 6248 FileInfo - ok
19:59:50.0002 6248 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys
19:59:50.0006 6248 Filetrace - ok
19:59:50.0040 6248 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
19:59:50.0043 6248 flpydisk - ok
19:59:50.0178 6248 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys
19:59:50.0188 6248 FltMgr - ok
19:59:50.0662 6248 FontCache (be1c5bd1ca7ed015bc6fa1ae67e592c8) C:\Windows\system32\FntCache.dll
19:59:50.0699 6248 FontCache - ok
19:59:50.0829 6248 FontCache3.0.0.0 (bc5b0be5af3510b0fd8c140ee42c6d3e) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:59:50.0832 6248 FontCache3.0.0.0 - ok
19:59:50.0900 6248 Fs_Rec (5779b86cd8b32519fbecb136394d946a) C:\Windows\system32\drivers\Fs_Rec.sys
19:59:50.0903 6248 Fs_Rec - ok
19:59:50.0965 6248 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys
19:59:50.0970 6248 gagp30kx - ok
19:59:51.0073 6248 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
19:59:51.0078 6248 GEARAspiWDM - ok
19:59:51.0322 6248 gpsvc (a0e1b575ba8f504968cd40c0faeb2384) C:\Windows\System32\gpsvc.dll
19:59:51.0349 6248 gpsvc - ok
19:59:51.0564 6248 gupdate1caacc5ca15edd0 (626a24ed1228580b9518c01930936df9) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:59:51.0567 6248 gupdate1caacc5ca15edd0 - ok
19:59:51.0588 6248 gupdatem (626a24ed1228580b9518c01930936df9) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
19:59:51.0591 6248 gupdatem - ok
19:59:51.0796 6248 HdAudAddService (68e732382b32417ff61fd663259b4b09) C:\Windows\system32\drivers\HdAudio.sys
19:59:51.0806 6248 HdAudAddService - ok
19:59:52.0154 6248 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys
19:59:52.0297 6248 HDAudBus - ok
19:59:52.0361 6248 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys
19:59:52.0365 6248 HidBth - ok
19:59:52.0414 6248 HidIr (5f47839455d01ff6403b008d481a6f5b) C:\Windows\system32\DRIVERS\hidir.sys
19:59:52.0417 6248 HidIr - ok
19:59:52.0469 6248 hidserv (59361d38a297755d46a540e450202b2a) C:\Windows\System32\hidserv.dll
19:59:52.0473 6248 hidserv - ok
19:59:52.0544 6248 HidUsb (443bdd2d30bb4f00795c797e2cf99edf) C:\Windows\system32\DRIVERS\hidusb.sys
19:59:52.0547 6248 HidUsb - ok
19:59:52.0611 6248 hkmsvc (b12f367ea39c0795fd57e31242ce1a5a) C:\Windows\system32\kmsvc.dll
19:59:52.0618 6248 hkmsvc - ok
19:59:53.0159 6248 hnmsvc (26018afa49f03032ccd3c26eaa384a4c) c:\Program Files (x86)\Common Files\Dell\Advanced Networking Service\hnm_svc.exe
19:59:53.0185 6248 hnmsvc - ok
19:59:53.0250 6248 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys
19:59:53.0254 6248 HpCISSs - ok
19:59:53.0585 6248 hpqcxs08 (97aac45a375168c6a2297beeb9692e31) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
19:59:53.0594 6248 hpqcxs08 - ok
19:59:53.0830 6248 hpqddsvc (19a4fb67b1c97ea18edff44340973cd9) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll
19:59:53.0837 6248 hpqddsvc - ok
19:59:54.0379 6248 HPSLPSVC (1be48b0542c91487bb8a94bf2278f55d) C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
19:59:54.0555 6248 HPSLPSVC - ok
19:59:56.0045 6248 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys
19:59:56.0068 6248 HTTP - ok
19:59:56.0133 6248 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys
19:59:56.0136 6248 i2omp - ok
19:59:56.0258 6248 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys
19:59:56.0263 6248 i8042prt - ok
19:59:56.0393 6248 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys
19:59:56.0404 6248 iaStorV - ok
19:59:56.0888 6248 idsvc (749f5f8cedca70f2a512945325fc489d) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:59:56.0915 6248 idsvc - ok
19:59:56.0948 6248 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys
19:59:56.0952 6248 iirsp - ok
19:59:57.0281 6248 IKEEXT (0c9ea6e654e7b0471741e343a6c671af) C:\Windows\System32\ikeext.dll
19:59:57.0297 6248 IKEEXT - ok
19:59:57.0353 6248 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys
19:59:57.0356 6248 intelide - ok
19:59:57.0384 6248 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys
19:59:57.0388 6248 intelppm - ok
19:59:57.0480 6248 IPBusEnum (5624bc1bc5eeb49c0ab76a8114f05ea3) C:\Windows\system32\ipbusenum.dll
19:59:57.0485 6248 IPBusEnum - ok
19:59:57.0566 6248 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys
19:59:57.0570 6248 IpFilterDriver - ok
19:59:57.0675 6248 iphlpsvc (bf0dbfa9792c5c14fa00f61c75116c1b) C:\Windows\System32\iphlpsvc.dll
19:59:57.0685 6248 iphlpsvc - ok
19:59:57.0690 6248 IpInIp - ok
19:59:57.0758 6248 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys
19:59:57.0763 6248 IPMIDRV - ok
19:59:57.0825 6248 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys
19:59:57.0831 6248 IPNAT - ok
19:59:58.0174 6248 iPod Service (50d6ccc6ff5561f9f56946b3e6164fb8) C:\Program Files\iPod\bin\iPodService.exe
19:59:58.0204 6248 iPod Service - ok
19:59:58.0233 6248 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys
19:59:58.0236 6248 IRENUM - ok
19:59:58.0288 6248 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys
19:59:58.0291 6248 isapnp - ok
19:59:58.0426 6248 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys
19:59:58.0434 6248 iScsiPrt - ok
19:59:58.0460 6248 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys
19:59:58.0464 6248 iteatapi - ok
19:59:58.0511 6248 itecir (e157d6b89d87a1b467ecdd66d280a1c2) C:\Windows\system32\DRIVERS\itecir.sys
19:59:58.0517 6248 itecir - ok
19:59:58.0557 6248 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys
19:59:58.0561 6248 iteraid - ok
19:59:58.0681 6248 k57nd60a (2798447996feb5a58b584c8443acad02) C:\Windows\system32\DRIVERS\k57nd60a.sys
19:59:58.0690 6248 k57nd60a - ok
19:59:58.0712 6248 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys
19:59:58.0715 6248 kbdclass - ok
19:59:58.0780 6248 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys
19:59:58.0783 6248 kbdhid - ok
19:59:58.0815 6248 KeyIso (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe
19:59:58.0835 6248 KeyIso - ok
19:59:59.0057 6248 KSecDD (2758d174604f597bbc8a217ff667913d) C:\Windows\system32\Drivers\ksecdd.sys
19:59:59.0074 6248 KSecDD - ok
19:59:59.0095 6248 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys
19:59:59.0100 6248 ksthunk - ok
19:59:59.0237 6248 KtmRm (1faf6926f3416d3da05c5b265491bdae) C:\Windows\system32\msdtckrm.dll
19:59:59.0251 6248 KtmRm - ok
19:59:59.0355 6248 LanmanServer (50c7a3cb427e9bb5ed0708a669956ab5) C:\Windows\System32\srvsvc.dll
19:59:59.0364 6248 LanmanServer - ok
19:59:59.0470 6248 LanmanWorkstation (caf86fc1388be1e470f1a7b43e348adb) C:\Windows\System32\wkssvc.dll
19:59:59.0480 6248 LanmanWorkstation - ok
19:59:59.0516 6248 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys
19:59:59.0519 6248 lltdio - ok
19:59:59.0754 6248 lltdsvc (961ccbd0b1ccb5675d64976fae37d092) C:\Windows\System32\lltdsvc.dll
19:59:59.0766 6248 lltdsvc - ok
19:59:59.0806 6248 lmhosts (a47f8080cacc23c91fe823ad19aa5612) C:\Windows\System32\lmhsvc.dll
19:59:59.0811 6248 lmhosts - ok
19:59:59.0861 6248 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys
19:59:59.0867 6248 LSI_FC - ok
19:59:59.0922 6248 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys
19:59:59.0928 6248 LSI_SAS - ok
20:00:00.0020 6248 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys
20:00:00.0025 6248 LSI_SCSI - ok
20:00:00.0088 6248 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys
20:00:00.0094 6248 luafv - ok
20:00:00.0153 6248 Mcx2Svc (76a58df02bd4ea29f189b82d0bef17f8) C:\Windows\system32\Mcx2Svc.dll
20:00:00.0159 6248 Mcx2Svc - ok
20:00:00.0185 6248 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys
20:00:00.0189 6248 megasas - ok
20:00:00.0337 6248 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys
20:00:00.0353 6248 MegaSR - ok
20:00:00.0382 6248 MMCSS (3cbe4995e80e13ccfbc42e5dcf3ac81a) C:\Windows\system32\mmcss.dll
20:00:00.0387 6248 MMCSS - ok
20:00:00.0420 6248 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys
20:00:00.0424 6248 Modem - ok
20:00:00.0459 6248 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys
20:00:00.0463 6248 monitor - ok
20:00:00.0488 6248 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys
20:00:00.0492 6248 mouclass - ok
20:00:00.0509 6248 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys
20:00:00.0512 6248 mouhid - ok
20:00:00.0547 6248 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys
20:00:00.0552 6248 MountMgr - ok
20:00:00.0626 6248 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys
20:00:00.0632 6248 mpio - ok
20:00:00.0740 6248 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys
20:00:00.0746 6248 mpsdrv - ok
20:00:00.0964 6248 MpsSvc (897e3baf68ba406a61682ae39c83900c) C:\Windows\system32\mpssvc.dll
20:00:00.0986 6248 MpsSvc - ok
20:00:01.0019 6248 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys
20:00:01.0023 6248 Mraid35x - ok
20:00:01.0123 6248 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys
20:00:01.0130 6248 MRxDAV - ok
20:00:01.0200 6248 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys
20:00:01.0207 6248 mrxsmb - ok
20:00:01.0310 6248 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:00:01.0321 6248 mrxsmb10 - ok
20:00:01.0377 6248 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:00:01.0383 6248 mrxsmb20 - ok
20:00:01.0447 6248 msahci (aa459f2ab3ab603c357ff117cae3d818) C:\Windows\system32\drivers\msahci.sys
20:00:01.0451 6248 msahci - ok
20:00:01.0517 6248 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys
20:00:01.0523 6248 msdsm - ok
20:00:01.0596 6248 MSDTC (7ec02ce772f068ed0beafa3da341a9bc) C:\Windows\System32\msdtc.exe
20:00:01.0603 6248 MSDTC - ok
20:00:01.0647 6248 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys
20:00:01.0650 6248 Msfs - ok
20:00:01.0685 6248 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys
20:00:01.0688 6248 msisadrv - ok
20:00:01.0763 6248 MSiSCSI (366b0c1f4478b519c181e37d43dcda32) C:\Windows\system32\iscsiexe.dll
20:00:01.0771 6248 MSiSCSI - ok
20:00:01.0777 6248 msiserver - ok
20:00:01.0814 6248 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys
20:00:01.0818 6248 MSKSSRV - ok
20:00:01.0842 6248 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys
20:00:01.0845 6248 MSPCLOCK - ok
20:00:01.0869 6248 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys
20:00:01.0872 6248 MSPQM - ok
20:00:02.0010 6248 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys
20:00:02.0021 6248 MsRPC - ok
20:00:02.0045 6248 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys
20:00:02.0049 6248 mssmbios - ok
20:00:02.0066 6248 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys
20:00:02.0069 6248 MSTEE - ok
20:00:02.0097 6248 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys
20:00:02.0101 6248 Mup - ok
20:00:02.0282 6248 napagent (a5b10c845e7538c60c0f5d87a57cb3f5) C:\Windows\system32\qagentRT.dll
20:00:02.0297 6248 napagent - ok
20:00:02.0412 6248 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS\nwifi.sys
20:00:02.0420 6248 NativeWifiP - ok
20:00:02.0800 6248 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers\ndis.sys
20:00:02.0823 6248 NDIS - ok
20:00:02.0862 6248 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS\ndistapi.sys
20:00:02.0865 6248 NdisTapi - ok
20:00:02.0888 6248 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS\ndisuio.sys
20:00:02.0891 6248 Ndisuio - ok
20:00:02.0996 6248 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS\ndiswan.sys
20:00:03.0003 6248 NdisWan - ok
20:00:03.0031 6248 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys
20:00:03.0035 6248 NDProxy - ok
20:00:03.0120 6248 Net Driver HPZ12 (2334dc48997ba203b794df3ee70521db) C:\Windows\system32\HPZinw12.dll
20:00:03.0391 6248 Net Driver HPZ12 - ok
20:00:03.0424 6248 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS\netbios.sys
20:00:03.0428 6248 NetBIOS - ok
20:00:03.0541 6248 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS\netbt.sys
20:00:03.0550 6248 netbt - ok
20:00:03.0609 6248 Netlogon (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe
20:00:03.0612 6248 Netlogon - ok
20:00:03.0741 6248 Netman (9b63b29defc0f3115a559d2597bf5d75) C:\Windows\System32\netman.dll
20:00:03.0755 6248 Netman - ok
20:00:03.0861 6248 netprofm (7846d0136cc2b264926a73047ba7688a) C:\Windows\System32\netprofm.dll
20:00:03.0874 6248 netprofm - ok
20:00:03.0986 6248 NetTcpPortSharing (74751dda198165947fd7454d83f49825) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe
20:00:03.0988 6248 NetTcpPortSharing - ok
20:00:05.0356 6248 NETw5v64 (6d27b976934afc67f09a9553c2ce1309) C:\Windows\system32\DRIVERS\NETw5v64.sys
20:00:05.0521 6248 NETw5v64 - ok
20:00:05.0794 6248 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers\nfrd960.sys
20:00:05.0886 6248 nfrd960 - ok
20:00:05.0973 6248 NlaSvc (f145bf4c4668e7e312069f81ef847cfc) C:\Windows\System32\nlasvc.dll
20:00:05.0984 6248 NlaSvc - ok
20:00:06.0045 6248 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys
20:00:06.0049 6248 Npfs - ok
20:00:06.0065 6248 nsi (acb62baa1c319b17752553df3026eeeb) C:\Windows\system32\nsisvc.dll
20:00:06.0070 6248 nsi - ok
20:00:06.0082 6248 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers\nsiproxy.sys
20:00:06.0086 6248 nsiproxy - ok
20:00:06.0563 6248 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys
20:00:06.0612 6248 Ntfs - ok
20:00:06.0870 6248 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys
20:00:06.0874 6248 Null - ok
20:00:06.0941 6248 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers\nvraid.sys
20:00:06.0946 6248 nvraid - ok
20:00:06.0994 6248 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers\nvstor.sys
20:00:06.0998 6248 nvstor - ok
20:00:07.0054 6248 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers\nv_agp.sys
20:00:07.0060 6248 nv_agp - ok
20:00:07.0064 6248 NwlnkFlt - ok
20:00:07.0076 6248 NwlnkFwd - ok
20:00:07.0171 6248 OA001Ufd (404b0121ae1a75d9a63b6934eb07c258) C:\Windows\system32\DRIVERS\OA001Ufd.sys
20:00:07.0179 6248 OA001Ufd - ok
20:00:07.0276 6248 OA001Vid (4b69d156db42b26425ab3b172fa50d92) C:\Windows\system32\DRIVERS\OA001Vid.sys
20:00:07.0288 6248 OA001Vid - ok
20:00:07.0547 6248 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
20:00:07.0563 6248 odserv - ok
20:00:07.0642 6248 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys
20:00:07.0647 6248 ohci1394 - ok
20:00:07.0741 6248 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:00:07.0748 6248 ose - ok
20:00:08.0019 6248 p2pimsvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll
20:00:08.0047 6248 p2pimsvc - ok
20:00:08.0062 6248 p2psvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll
20:00:08.0072 6248 p2psvc - ok
20:00:08.0132 6248 Packet (43e24699a18126f11e3d9bf6db85518b) C:\Windows\system32\DRIVERS\packet.sys
20:00:08.0135 6248 Packet - ok
20:00:08.0204 6248 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys
20:00:08.0209 6248 Parport - ok
20:00:08.0272 6248 partmgr (b43751085e2abe389da466bc62a4b987) C:\Windows\system32\drivers\partmgr.sys
20:00:08.0277 6248 partmgr - ok
20:00:08.0330 6248 PcaSvc (9ab157b374192ff276c1628fbdba2b0e) C:\Windows\System32\pcasvc.dll
20:00:08.0336 6248 PcaSvc - ok
20:00:08.0434 6248 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys
20:00:08.0440 6248 pci - ok
20:00:08.0481 6248 pciide (8d618c829034479985a9ed56106cc732) C:\Windows\system32\drivers\pciide.sys
20:00:08.0484 6248 pciide - ok
20:00:08.0566 6248 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys
20:00:08.0574 6248 pcmcia - ok
20:00:08.0800 6248 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys
20:00:08.0823 6248 PEAUTH - ok
20:00:09.0175 6248 PerfHost (0ed8727ea0172860f47258456c06caea) C:\Windows\SysWow64\perfhost.exe
20:00:09.0179 6248 PerfHost - ok
20:00:09.0657 6248 pla (e9e68c1a0f25cf4a7ac966eea74ee89e) C:\Windows\system32\pla.dll
20:00:09.0700 6248 pla - ok
20:00:09.0839 6248 PlugPlay (fe6b0f59215c9fd9f9d26539c58c8b82) C:\Windows\system32\umpnpmgr.dll
20:00:09.0853 6248 PlugPlay - ok
20:00:09.0946 6248 Pml Driver HPZ12 (ac78df349f0e4cfb8b667c0cfff83cce) C:\Windows\system32\HPZipm12.dll
20:00:09.0949 6248 Pml Driver HPZ12 - ok
20:00:10.0235 6248 PNRPAutoReg (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll
20:00:10.0246 6248 PNRPAutoReg - ok
20:00:10.0259 6248 PNRPsvc (9ae31d2e1d15c10d91318e0ec149ceac) C:\Windows\system32\p2psvc.dll
20:00:10.0270 6248 PNRPsvc - ok
20:00:10.0496 6248 PolicyAgent (89a5560671c2d8b4a4b51f3e1aa069d8) C:\Windows\System32\ipsecsvc.dll
20:00:10.0515 6248 PolicyAgent - ok
20:00:10.0636 6248 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys
20:00:10.0642 6248 PptpMiniport - ok
20:00:10.0690 6248 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys
20:00:10.0694 6248 Processor - ok
20:00:10.0794 6248 ProfSvc (e058ce4fc2449d8bfa14739c83b7ff2a) C:\Windows\system32\profsvc.dll
20:00:10.0803 6248 ProfSvc - ok
20:00:10.0864 6248 ProtectedStorage (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe
20:00:10.0867 6248 ProtectedStorage - ok
20:00:10.0962 6248 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys
20:00:10.0967 6248 PSched - ok
20:00:11.0015 6248 PxHlpa64 (46851bc18322da70f3f2299a1007c479) C:\Windows\system32\Drivers\PxHlpa64.sys
20:00:11.0019 6248 PxHlpa64 - ok
20:00:11.0212 6248 QBCFMonitorService (ee46f431b25c14778d2e89d6f10f1d65) c:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
20:00:11.0214 6248 QBCFMonitorService - ok
20:00:11.0293 6248 QBFCService (6bee1814470dc12fa20c53dfc3c97ebb) c:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
20:00:11.0295 6248 QBFCService - ok
20:00:11.0682 6248 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys
20:00:11.0722 6248 ql2300 - ok
20:00:11.0789 6248 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys
20:00:11.0795 6248 ql40xx - ok
20:00:11.0915 6248 QWAVE (90574842c3da781e279061a3eff91f07) C:\Windows\system32\qwave.dll
20:00:11.0928 6248 QWAVE - ok
20:00:11.0954 6248 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys
20:00:11.0958 6248 QWAVEdrv - ok
20:00:13.0675 6248 R300 (0adc170bcac8260539df29032a2e9d8d) C:\Windows\system32\DRIVERS\atikmdag.sys
20:00:13.0718 6248 R300 - ok
20:00:13.0985 6248 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys
20:00:13.0989 6248 RasAcd - ok
20:00:14.0080 6248 RasAuto (b2ae18f847d07f0044404ddf7cb04497) C:\Windows\System32\rasauto.dll
20:00:14.0087 6248 RasAuto - ok
20:00:14.0220 6248 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys
20:00:14.0226 6248 Rasl2tp - ok
20:00:14.0325 6248 RasMan (3ad83e4046c43be510de681588acb8af) C:\Windows\System32\rasmans.dll
20:00:14.0338 6248 RasMan - ok
20:00:14.0399 6248 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys
20:00:14.0403 6248 RasPppoe - ok
20:00:14.0501 6248 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys
20:00:14.0507 6248 RasSstp - ok
20:00:14.0653 6248 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys
20:00:14.0663 6248 rdbss - ok
20:00:14.0692 6248 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys
20:00:14.0695 6248 RDPCDD - ok
20:00:14.0808 6248 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys
20:00:14.0820 6248 rdpdr - ok
20:00:14.0829 6248 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys
20:00:14.0833 6248 RDPENCDD - ok
20:00:14.0944 6248 RDPWD (5c141fc457f1ac833664789235aca673) C:\Windows\system32\drivers\RDPWD.sys
20:00:14.0952 6248 RDPWD - ok
20:00:15.0019 6248 RemoteAccess (c612b9557da73f70d41f8a6fbc8e5344) C:\Windows\System32\mprdim.dll
20:00:15.0025 6248 RemoteAccess - ok
20:00:15.0136 6248 RemoteRegistry (44b9d8ec2f3ef3a0efb00857af70d861) C:\Windows\system32\regsvc.dll
20:00:15.0146 6248 RemoteRegistry - ok
20:00:15.0340 6248 RFCOMM (cd71e053d7260e4102d99a28f9196070) C:\Windows\system32\DRIVERS\rfcomm.sys
20:00:15.0348 6248 RFCOMM - ok
20:00:15.0405 6248 rimmptsk (d13d70fac45fc1df69f88559b1f72f0a) C:\Windows\system32\DRIVERS\rimmpx64.sys
20:00:15.0409 6248 rimmptsk - ok
20:00:15.0468 6248 rimsptsk (bb9edc55b0b8cb4fcd713428820e0776) C:\Windows\system32\DRIVERS\rimspx64.sys
20:00:15.0473 6248 rimsptsk - ok
20:00:15.0503 6248 rismxdp (481c3fdeacaae04b74c58288dbc91df9) C:\Windows\system32\DRIVERS\rixdpx64.sys
20:00:15.0507 6248 rismxdp - ok
20:00:15.0540 6248 RpcLocator (f46c457840d4b7a4daafee739ce04102) C:\Windows\system32\locator.exe
20:00:15.0544 6248 RpcLocator - ok
20:00:15.0811 6248 RpcSs (cf8b9a3a5e7dc57724a89d0c3e8cf9ef) C:\Windows\System32\rpcss.dll
20:00:15.0821 6248 RpcSs - ok
20:00:15.0882 6248 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys
20:00:15.0887 6248 rspndr - ok
20:00:15.0938 6248 SamSs (260bf9c43ee12c6898a9f5aab0fb0e5d) C:\Windows\system32\lsass.exe
20:00:15.0940 6248 SamSs - ok
20:00:15.0997 6248 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys
20:00:16.0003 6248 sbp2port - ok
20:00:16.0099 6248 SCardSvr (fd1cdcf108d5ef3366f00d18b70fb89b) C:\Windows\System32\SCardSvr.dll
20:00:16.0108 6248 SCardSvr - ok
20:00:16.0397 6248 Schedule (0f838c811ad295d2a4489b9993096c63) C:\Windows\system32\schedsvc.dll
20:00:16.0427 6248 Schedule - ok
20:00:16.0554 6248 SCPolicySvc (5a268127633c7ee2a7fb87f39d748d56) C:\Windows\System32\certprop.dll
20:00:16.0556 6248 SCPolicySvc - ok
20:00:16.0660 6248 sdbus (be100bc2be2513314c717bb2c4cfff10) C:\Windows\system32\DRIVERS\sdbus.sys
20:00:16.0665 6248 sdbus - ok
20:00:16.0732 6248 SDRSVC (4ff71b076a7760fe75ea5ae2d0ee0018) C:\Windows\System32\SDRSVC.dll
20:00:16.0739 6248 SDRSVC - ok
20:00:16.0781 6248 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
20:00:16.0784 6248 secdrv - ok
20:00:16.0806 6248 seclogon (5acdcbc67fcf894a1815b9f96d704490) C:\Windows\system32\seclogon.dll
20:00:16.0811 6248 seclogon - ok
20:00:16.0840 6248 SENS (90973a64b96cd647ff81c79443618eed) C:\Windows\system32\sens.dll
20:00:16.0845 6248 SENS - ok
20:00:16.0880 6248 Serenum (f71bfe7ac6c52273b7c82cbf1bb2a222) C:\Windows\system32\drivers\serenum.sys
20:00:16.0883 6248 Serenum - ok
20:00:16.0938 6248 Serial (e62fac91ee288db29a9696a9d279929c) C:\Windows\system32\drivers\serial.sys
20:00:16.0943 6248 Serial - ok
20:00:16.0977 6248 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys
20:00:16.0981 6248 sermouse - ok
20:00:17.0046 6248 SessionEnv (a8e4a4407a09f35dccc3771af590b0c4) C:\Windows\system32\sessenv.dll
20:00:17.0053 6248 SessionEnv - ok
20:00:17.0110 6248 sffdisk (3a19c899bcf0ea24cfec2038e6a489db) C:\Windows\system32\DRIVERS\sffdisk.sys
20:00:17.0113 6248 sffdisk - ok
20:00:17.0140 6248 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys
20:00:17.0143 6248 sffp_mmc - ok
20:00:17.0167 6248 sffp_sd (fdca63a2eee528585eb66ceac183ec22) C:\Windows\system32\DRIVERS\sffp_sd.sys
20:00:17.0170 6248 sffp_sd - ok
20:00:17.0194 6248 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys
20:00:17.0197 6248 sfloppy - ok
20:00:17.0334 6248 SharedAccess (4c5aee179da7e1ee9a9ccb9da289af34) C:\Windows\System32\ipnathlp.dll
20:00:17.0347 6248 SharedAccess - ok
20:00:17.0495 6248 ShellHWDetection (56793271ecdedd350c5add305603e963) C:\Windows\System32\shsvcs.dll
20:00:17.0507 6248 ShellHWDetection - ok
20:00:17.0545 6248 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys
20:00:17.0549 6248 SiSRaid2 - ok
20:00:17.0594 6248 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys
20:00:17.0600 6248 SiSRaid4 - ok
20:00:18.0471 6248 slsvc (a9a27a8e257b45a604fdad4f26fe7241) C:\Windows\system32\SLsvc.exe
20:00:18.0565 6248 slsvc - ok
20:00:18.0833 6248 SLUINotify (fd74b4b7c2088e390a30c85a896fc3af) C:\Windows\system32\SLUINotify.dll
20:00:18.0840 6248 SLUINotify - ok
20:00:18.0943 6248 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys
20:00:18.0948 6248 Smb - ok
20:00:18.0996 6248 SNMPTRAP (f8f47f38909823b1af28d60b96340cff) C:\Windows\System32\snmptrap.exe
20:00:19.0002 6248 SNMPTRAP - ok
20:00:19.0049 6248 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys
20:00:19.0052 6248 spldr - ok
20:00:19.0167 6248 Spooler (f66ff751e7efc816d266977939ef5dc3) C:\Windows\System32\spoolsv.exe
20:00:19.0181 6248 Spooler - ok
20:00:19.0363 6248 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys
20:00:19.0378 6248 srv - ok
20:00:19.0445 6248 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys
20:00:19.0452 6248 srv2 - ok
20:00:19.0496 6248 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys
20:00:19.0503 6248 srvnet - ok
20:00:19.0573 6248 SSDPSRV (192c74646ec5725aef3f80d19ff75f6a) C:\Windows\System32\ssdpsrv.dll
20:00:19.0582 6248 SSDPSRV - ok
20:00:19.0638 6248 SstpSvc (2ee3fa0308e6185ba64a9a7f2e74332b) C:\Windows\system32\sstpsvc.dll
20:00:19.0647 6248 SstpSvc - ok
20:00:19.0898 6248 STacSV (2080477f89f82fbd12436bf9770e29a1) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_cce24a4c\STacSV64.exe
20:00:19.0908 6248 STacSV - ok
20:00:20.0076 6248 STHDA (3281204b2e6049100d0ff04270c2aea5) C:\Windows\system32\DRIVERS\stwrt64.sys
20:00:20.0093 6248 STHDA - ok
20:00:20.0192 6248 StillCam (14b4db4381e4a55f570d8bb699b791d6) C:\Windows\system32\DRIVERS\serscan.sys
20:00:20.0195 6248 StillCam - ok
20:00:20.0400 6248 stisvc (15825c1fbfb8779992cb65087f316af5) C:\Windows\System32\wiaservc.dll
20:00:20.0421 6248 stisvc - ok
20:00:20.0550 6248 stllssvr (1d0063597c3666404fcf97698abeb019) C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
20:00:20.0552 6248 stllssvr - ok
20:00:20.0592 6248 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys
20:00:20.0595 6248 swenum - ok
20:00:20.0793 6248 swprv (6de37f4de19d4efd9c48c43addbc949a) C:\Windows\System32\swprv.dll
20:00:20.0811 6248 swprv - ok
20:00:20.0848 6248 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys
20:00:20.0852 6248 Symc8xx - ok
20:00:20.0879 6248 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys
20:00:20.0883 6248 Sym_hi - ok
20:00:20.0924 6248 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys
20:00:20.0928 6248 Sym_u3 - ok
20:00:21.0219 6248 SysMain (92d7a8b0f87b036f17d25885937897a6) C:\Windows\system32\sysmain.dll
20:00:21.0250 6248 SysMain - ok
20:00:21.0307 6248 TabletInputService (005ce42567f9113a3bccb3b20073b029) C:\Windows\System32\TabSvc.dll
20:00:21.0314 6248 TabletInputService - ok
20:00:21.0560 6248 TapiSrv (cc2562b4d55e0b6a4758c65407f63b79) C:\Windows\System32\tapisrv.dll
20:00:21.0574 6248 TapiSrv - ok
20:00:21.0606 6248 TBS (cdbe8d7c1e201b911cdc346d06617fb5) C:\Windows\System32\tbssvc.dll
20:00:21.0612 6248 TBS - ok
20:00:22.0056 6248 Tcpip (46d448e9117464e4d3bbf36d7e3fa48e) C:\Windows\system32\drivers\tcpip.sys
20:00:22.0102 6248 Tcpip - ok
20:00:22.0125 6248 Tcpip6 (46d448e9117464e4d3bbf36d7e3fa48e) C:\Windows\system32\DRIVERS\tcpip.sys
20:00:22.0142 6248 Tcpip6 - ok
20:00:22.0208 6248 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys
20:00:22.0211 6248 tcpipreg - ok
20:00:22.0248 6248 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys
20:00:22.0251 6248 TDPIPE - ok
20:00:22.0275 6248 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys
20:00:22.0279 6248 TDTCP - ok
20:00:22.0320 6248 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys
20:00:22.0325 6248 tdx - ok
20:00:22.0389 6248 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys
20:00:22.0394 6248 TermDD - ok
20:00:22.0595 6248 TermService (5cdd30bc217082dac71a9878d9bfd566) C:\Windows\System32\termsrv.dll
20:00:22.0621 6248 TermService - ok
20:00:22.0749 6248 Themes (56793271ecdedd350c5add305603e963) C:\Windows\system32\shsvcs.dll
20:00:22.0755 6248 Themes - ok
20:00:22.0799 6248 THREADORDER (3cbe4995e80e13ccfbc42e5dcf3ac81a) C:\Windows\system32\mmcss.dll
20:00:22.0802 6248 THREADORDER - ok
20:00:22.0886 6248 tmactmon (e386dd8ec68c67ca3e2a3abdc1df5c56) C:\Windows\system32\DRIVERS\tmactmon.sys
20:00:22.0892 6248 tmactmon - ok
20:00:22.0968 6248 tmcomm (ab011c569487fd65c8944ddf8cbb2572) C:\Windows\system32\DRIVERS\tmcomm.sys
20:00:22.0975 6248 tmcomm - ok
20:00:23.0007 6248 tmeevw (1161f882b3cfa8076870a09924e0adc2) C:\Windows\system32\DRIVERS\tmeevw.sys
20:00:23.0012 6248 tmeevw - ok
20:00:23.0044 6248 tmevtmgr (8870a3d7305455b47adccd226f8e51bc) C:\Windows\system32\DRIVERS\tmevtmgr.sys
20:00:23.0049 6248 tmevtmgr - ok
20:00:23.0127 6248 tmnciesc (f0ae672ee91e7f1ef24644621b57ca7f) C:\Windows\system32\DRIVERS\tmnciesc.sys
20:00:23.0136 6248 tmnciesc - ok
20:00:23.0169 6248 tmtdi (065cb7d9278d778fb9ef62cead01433f) C:\Windows\system32\DRIVERS\tmtdi.sys
20:00:23.0174 6248 tmtdi - ok
20:00:23.0241 6248 TrkWks (f4689f05af472a651a7b1b7b02d200e7) C:\Windows\System32\trkwks.dll
20:00:23.0249 6248 TrkWks - ok
20:00:23.0363 6248 TrustedInstaller (66328b08ef5a9305d8ede36b93930369) C:\Windows\servicing\TrustedInstaller.exe
20:00:23.0365 6248 TrustedInstaller - ok
20:00:23.0407 6248 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys
20:00:23.0410 6248 tssecsrv - ok
20:00:23.0452 6248 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys
20:00:23.0456 6248 tunmp - ok
20:00:23.0517 6248 tunnel (30a9b3f45ad081bffc3bcaa9c812b609) C:\Windows\system32\DRIVERS\tunnel.sys
20:00:23.0521 6248 tunnel - ok
20:00:23.0576 6248 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys
20:00:23.0582 6248 uagp35 - ok
20:00:23.0690 6248 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys
20:00:23.0700 6248 udfs - ok
20:00:23.0755 6248 UI0Detect (060507c4113391394478f6953a79eedc) C:\Windows\system32\UI0Detect.exe
20:00:23.0760 6248 UI0Detect - ok
20:00:23.0797 6248 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys
20:00:23.0802 6248 uliagpkx - ok
20:00:23.0914 6248 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys
20:00:23.0925 6248 uliahci - ok
20:00:23.0993 6248 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys
20:00:24.0000 6248 UlSata - ok
20:00:24.0075 6248 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys
20:00:24.0084 6248 ulsata2 - ok
20:00:24.0126 6248 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys
20:00:24.0130 6248 umbus - ok
20:00:24.0251 6248 upnphost (7093799ff80e9deca0680d2e3535be60) C:\Windows\System32\upnphost.dll
20:00:24.0266 6248 upnphost - ok
20:00:24.0347 6248 USBAAPL64 (fb251567f41bc61988b26731dec19e4b) C:\Windows\system32\Drivers\usbaapl64.sys
20:00:24.0350 6248 USBAAPL64 - ok
20:00:24.0428 6248 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys
20:00:24.0433 6248 usbccgp - ok
20:00:24.0486 6248 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys
20:00:24.0492 6248 usbcir - ok
20:00:24.0684 6248 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys
20:00:24.0689 6248 usbehci - ok
20:00:24.0777 6248 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys
20:00:24.0788 6248 usbhub - ok
20:00:24.0813 6248 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys
20:00:24.0817 6248 usbohci - ok
20:00:24.0872 6248 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys
20:00:24.0875 6248 usbprint - ok
20:00:24.0949 6248 usbscan (ea0bf666868964fbe8cb10e50c97b9f1) C:\Windows\system32\DRIVERS\usbscan.sys
20:00:24.0952 6248 usbscan - ok
20:00:25.0025 6248 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:00:25.0030 6248 USBSTOR - ok
20:00:25.0093 6248 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys
20:00:25.0096 6248 usbuhci - ok
20:00:25.0167 6248 UxSms (d76e231e4850bb3f88a3d9a78df191e3) C:\Windows\System32\uxsms.dll
20:00:25.0173 6248 UxSms - ok
20:00:25.0356 6248 vds (294945381dfa7ce58cecf0a9896af327) C:\Windows\System32\vds.exe
20:00:25.0373 6248 vds - ok
20:00:25.0411 6248 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys
20:00:25.0415 6248 vga - ok
20:00:25.0439 6248 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys
20:00:25.0442 6248 VgaSave - ok
20:00:25.0559 6248 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys
20:00:25.0562 6248 viaide - ok
20:00:25.0623 6248 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys
20:00:25.0628 6248 volmgr - ok
20:00:25.0831 6248 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys
20:00:25.0845 6248 volmgrx - ok
20:00:25.0945 6248 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys
20:00:25.0956 6248 volsnap - ok
20:00:26.0026 6248 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys
20:00:26.0033 6248 vsmraid - ok
20:00:26.0474 6248 VSS (b75232dad33bfd95bf6f0a3e6bff51e1) C:\Windows\system32\vssvc.exe
20:00:26.0492 6248 VSS - ok
20:00:26.0649 6248 W32Time (f14a7de2ea41883e250892e1e5230a9a) C:\Windows\system32\w32time.dll
20:00:26.0664 6248 W32Time - ok
20:00:26.0755 6248 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys
20:00:26.0759 6248 WacomPen - ok
20:00:26.0849 6248 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
20:00:26.0854 6248 Wanarp - ok
20:00:26.0859 6248 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
20:00:26.0862 6248 Wanarpv6 - ok
20:00:27.0044 6248 wcncsvc (b4e4c37d0aa6100090a53213ee2bf1c1) C:\Windows\System32\wcncsvc.dll
20:00:27.0065 6248 wcncsvc - ok
20:00:27.0111 6248 WcsPlugInService (ea4b369560e986f19d93f45a881484ac) C:\Windows\System32\WcsPlugInService.dll
20:00:27.0116 6248 WcsPlugInService - ok
20:00:27.0146 6248 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys
20:00:27.0149 6248 Wd - ok
20:00:27.0402 6248 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys
20:00:27.0432 6248 Wdf01000 - ok
20:00:27.0470 6248 WdiServiceHost (c5efda73ebfca8b02a094898de0a9276) C:\Windows\system32\wdi.dll
20:00:27.0477 6248 WdiServiceHost - ok
20:00:27.0482 6248 WdiSystemHost (c5efda73ebfca8b02a094898de0a9276) C:\Windows\system32\wdi.dll
20:00:27.0488 6248 WdiSystemHost - ok
20:00:27.0567 6248 WebClient (3e6d05381cf35f75ebb055544a8ed9ac) C:\Windows\System32\webclnt.dll
20:00:27.0578 6248 WebClient - ok
20:00:27.0834 6248 Wecsvc (8d40bc587993f876658bf9fb0f7d3462) C:\Windows\system32\wecsvc.dll
20:00:27.0845 6248 Wecsvc - ok
20:00:27.0883 6248 wercplsupport (9c980351d7e96288ea0c23ae232bd065) C:\Windows\System32\wercplsupport.dll
20:00:27.0891 6248 wercplsupport - ok
20:00:27.0940 6248 WerSvc (66b9ecebc46683f47edc06333c075fef) C:\Windows\System32\WerSvc.dll
20:00:27.0948 6248 WerSvc - ok
20:00:27.0988 6248 WinDefend - ok
20:00:28.0001 6248 WinHttpAutoProxySvc - ok
20:00:28.0190 6248 Winmgmt (d2e7296ed1bd26d8db2799770c077a02) C:\Windows\system32\wbem\WMIsvc.dll
20:00:28.0200 6248 Winmgmt - ok
20:00:28.0954 6248 WinRM (6cbb0c68f13b9c2ec1b16f5fa5e7c869) C:\Windows\system32\WsmSvc.dll
20:00:29.0065 6248 WinRM - ok
20:00:29.0494 6248 Wlansvc (ec339c8115e91baed835957e9a677f16) C:\Windows\System32\wlansvc.dll
20:00:29.0516 6248 Wlansvc - ok
20:00:30.0252 6248 wlidsvc (98f138897ef4246381d197cb81846d62) c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
20:00:30.0322 6248 wlidsvc - ok
20:00:30.0569 6248 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\DRIVERS\wmiacpi.sys
20:00:30.0600 6248 WmiAcpi - ok
20:00:30.0770 6248 wmiApSrv (21fa389e65a852698b6a1341f36ee02d) C:\Windows\system32\wbem\WmiApSrv.exe
20:00:30.0780 6248 wmiApSrv - ok
20:00:30.0945 6248 WMPNetworkSvc - ok
20:00:31.0042 6248 WPCSvc (cbc156c913f099e6680d1df9307db7a8) C:\Windows\System32\wpcsvc.dll
20:00:31.0052 6248 WPCSvc - ok
20:00:31.0134 6248 WPDBusEnum (490a18b4e4d53dc10879deaa8e8b70d9) C:\Windows\system32\wpdbusenum.dll
20:00:31.0142 6248 WPDBusEnum - ok
20:00:31.0215 6248 WpdUsb (5e2401b3fc1089c90e081291357371a9) C:\Windows\system32\DRIVERS\wpdusb.sys
20:00:31.0218 6248 WpdUsb - ok
20:00:31.0715 6248 WPFFontCache_v0400 (991e2c2cf3bc204c2bb2ee1476149e4e) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe
20:00:31.0747 6248 WPFFontCache_v0400 - ok
20:00:31.0791 6248 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys
20:00:31.0794 6248 ws2ifsl - ok
20:00:31.0877 6248 wscsvc (9ea3e6d0ef7a5c2b9181961052a4b01a) C:\Windows\system32\wscsvc.dll
20:00:31.0899 6248 wscsvc - ok
20:00:31.0975 6248 WSDPrintDevice (de5f5212ab34221dd1618b5fefe8db6c) C:\Windows\system32\DRIVERS\WSDPrint.sys
20:00:31.0978 6248 WSDPrintDevice - ok
20:00:31.0984 6248 WSearch - ok
20:00:32.0732 6248 wuauserv (fb3796754fe00f0bdc87a36f164a5f4d) C:\Windows\system32\wuaueng.dll
20:00:32.0843 6248 wuauserv - ok
20:00:33.0160 6248 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys
20:00:33.0165 6248 WUDFRd - ok
20:00:33.0220 6248 wudfsvc (6cbd51ff913c851d56ed9dc7f2a27dde) C:\Windows\System32\WUDFSvc.dll
20:00:33.0227 6248 wudfsvc - ok
20:00:33.0505 6248 YahooAUService (dd0042f0c3b606a6a8b92d49afb18ad6) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
20:00:33.0527 6248 YahooAUService - ok
20:00:33.0610 6248 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
20:00:34.0622 6248 \Device\Harddisk0\DR0 - ok
20:00:34.0638 6248 Boot (0x1200) (cc9276645425ad2928be89ba2fd4fb67) \Device\Harddisk0\DR0\Partition0
20:00:34.0642 6248 \Device\Harddisk0\DR0\Partition0 - ok
20:00:34.0653 6248 Boot (0x1200) (01ccc0a114ea02381f1913ceaf21c032) \Device\Harddisk0\DR0\Partition1
20:00:34.0657 6248 \Device\Harddisk0\DR0\Partition1 - ok
20:00:34.0658 6248 ============================================================
20:00:34.0659 6248 Scan finished
20:00:34.0659 6248 ============================================================
20:00:34.0680 6680 Detected object count: 0
20:00:34.0680 6680 Actual detected object count: 0
There was no extras.txt
