What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

suspected infection [Closed]

51 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1 last edited
Hi Shucky, I'll move this Topic over to our Malware Removal Forum where our Specialists can give it some attention.
Doug

G'day guys

For a while now my Mrs has been complaining about the pc being slow freezing, not wanting to shut down properly ( ie I've had to remove the battery a few times). The screen will just go black, the task manager will either take forever to show up or in some cases it wont show up.

I've just gotten the time to set down and look at processes and services via task manager as I came across the info regarding csrss.exe it's saying this is some sort of trojan targeted to steal password,internet banking and personal data the information is here http://www.liutilities.com/products/wintas…slibrary/csrss/. I've just installed HJT and the following file has came up can you please have a look. You may notice a bit of java which is required for my mrs online games ( pogo)
cheers

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:36:58 AM, on 16/06/2012
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\CyberLink\Shared files\brs.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_3_300_257_ActiveX.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.jp.msn.com/HPALL/14
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ninemsn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.jp.msn.com/HPALL/14
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.jp.msn.com/HPALL/14
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1313\6.8.1078\TmIEPlg32.dll
O2 - BHO: TSBHO Class - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1102\7.1.1102\TmBpIe32.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [FUFAXSTM] "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe
O4 - HKCU\..\Run: [EPSON TX510FN Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFHP.EXE /FU "C:\Windows\TEMP\E_S8930.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ares] "C:\Program Files (x86)\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [MyTomTomSA.exe] C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Snapfish PictureMover.lnk = C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe
O8 - Extra context menu item: Send image to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1102\7.1.1102\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1313\6.8.1078\TmIEPlg32.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel® Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: CyberLink Product - 2012/01/30 07:11:53 (CLKMSVC10_38F51D56) - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: TrueSuiteService (FPLService) - HP - C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 14725 bytes
Post #2
Hi shucky,

:welcome:

My name is NoodleTech. I would be glad to assist you with solving any malware problems. Logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • Please be aware that removing malware is not without risk and while unrecoverable damage to systems is rare, it can happen and may require a re-format and re-install of your operating system. Because of this it is a good idea to back-up anything important saved on your computer.
  • The fixes are specific to your problem and should only be used for the issues on this machine.
  • Do not delete anything unless instructed to.
  • DO NOT use tools such as ComboFix without supervision.
  • Please continue to review my answers until I tell you your machine appears to be clean. Absence of symptoms does not mean that everything is clean.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.
  • Failure to respond within 3 days will result in this topic being closed - If you need more time to complete the steps required, please let me know.
===================================================

csrss.exe is a legitimate Windows process, however it can be hijacked by malware. I would be more than happy to take a look at your computer for you to check for the presence of malware.

===================================================

Please download DDS by sUBs from one of the following links and save it to your desktop.
    • DDS.scr
    • DDS.pif
  • Disable any script blocking protection (How to Disable your Security Programs)
  • Double click DDS icon to run the tool (may take up to 3 minutes to run)
  • When done, DDS.txt will open.
  • After a few moments,  attach.txt will open in a second window.
  • Save both reports to your desktop.
—————————————————
  • Post the contents of the DDS.txt report in your next reply
  • Attach the Attach.txt report to your post by scrolling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and then click UPLOAD.
===================================================

Please download aswMBR.exe and save it to your desktop. 

Double click aswMBR.exe to start the tool. (Vista/Windows 7 users - right click to run as administrator)

Click Scan
  • Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review.
  • Note - do NOT attempt any Fix yet.
  • You will also notice another file created on the desktop named MBR.dat.
  • Right click that file and select Send To>Compressed (zipped) file.
  • Attach that zipped file in your next reply as well.
Post #3
G'day Noodle Here is the contents of the DDS log, . DDS (Ver_2011-08-26.01) - NTFSAMD64 Internet Explorer: 9.0.8112.16421 Run by [removed] at 11:56:21 on 2012-06-17 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.61.1033.18.8140.6366 [GMT 9.5:30] . AV: Trend Micro Titanium Internet Security 2012 *Disabled/Updated* {7193B549-236F-55EE-9AEC-F65279E59A92} SP: Trend Micro Titanium Internet Security 2012 *Disabled/Updated* {CAF254AD-0555-5A60-A05C-CD200262D02F} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Program Files\IDT\WDM\STacSV64.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\Hpservice.exe C:\Windows\system32\WUDFHost.exe C:\Windows\system32\atieclxx.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\WLANExt.exe C:\Windows\system32\conhost.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k WbioSvcGroup C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiWatchDog.exe C:\Program Files\IDT\WDM\AESTSr64.exe C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe <<< HIGH DEF settop box for Television C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE C:\Program Files\Intel\WiFi\bin\EvtEng.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE C:\Windows\system32\svchost.exe -k bthsvcs C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\wbem\unsecapp.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe C:\Program Files\IDT\WDM\sttray64.exe C:\Program Files\Microsoft IntelliPoint\ipoint.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe C:\Program Files (x86)\CyberLink\Shared files\brs.exe C:\Windows\SysWOW64\RunDll32.exe C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe C:\Program Files\iPod\bin\iPodService.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\system32\taskeng.exe C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe C:\Windows\system32\DllHost.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\conhost.exe C:\Windows\SysWOW64\cscript.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://ninemsn.com/ uInternet Settings,ProxyOverride = *.local mWinlogon: Userinit=userinit.exe BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: TmIEPlugInBHO Class: {1ca1377b-dc1d-4a52-9585-6e06050fac53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1313\6.8.1078\TmIEPlg32.dll BHO: TrueSuite Website Log On: {8590886e-ec8c-43c1-a32c-e4c2b0b6395b} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: TmBpIeBHO Class: {bbacbafd-fa5e-4079-8b33-00eb9f13d4ac} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1102\7.1.1102\TmBpIe32.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File uRun: [EPSON TX510FN Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFHP.EXE /FU "C:\Windows\TEMP\E_S8930.tmp" /EF "HKCU" uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background uRun: [ares] "C:\Program Files (x86)\Ares\Ares.exe" -h uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" uRun: [MyTomTomSA.exe] C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime mRun: [FUFAXSTM] "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe" mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe mRun: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" mRun: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files (x86)\WIDCOMM\Bluetooth Software\BTTray.exe StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\SNAPFI~1.LNK - C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: Send image to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab TCP: DhcpNameServer = 10.0.0.138 TCP: Interfaces\{4AEA3992-DE28-4E98-88D2-6AA7555D3278} : DhcpNameServer = 10.0.0.138 TCP: Interfaces\{4AEA3992-DE28-4E98-88D2-6AA7555D3278}\24967605F6E646632423736313 : DhcpNameServer = 10.0.0.138 TCP: Interfaces\{4E56E2EF-B9E5-4FB0-BA70-C2552A1192C8} : DhcpNameServer = 10.0.0.138 TCP: Interfaces\{CD200EF5-78C7-4A3D-A079-9F3095B7021A} : DhcpNameServer = [removed] [removed] Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\7.1.1102\7.1.1102\TmBpIe32.dll Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\2.0.1313\6.8.1078\TmIEPlg32.dll Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO-X64: AcroIEHelperStub - No File BHO-X64: TmIEPlugInBHO Class: {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\2.0.1313\6.8.1078\TmIEPlg32.dll BHO-X64: Trend Micro NSC BHO - No File BHO-X64: TrueSuite Website Log On: {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll BHO-X64: TSBHO Class - No File BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO-X64: TmBpIeBHO Class: {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\7.1.1102\7.1.1102\TmBpIe32.dll BHO-X64: TmBpIeBHO - No File BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File TB-X64: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun mRun-x64: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun-x64: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime mRun-x64: [FUFAXSTM] "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe" mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun-x64: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe mRun-x64: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" mRun-x64: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe IE-X64: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm . ============= SERVICES / DRIVERS =============== . R1 tmevtmgr;tmevtmgr;C:\Windows\system32\DRIVERS\tmevtmgr.sys –> C:\Windows\system32\DRIVERS\tmevtmgr.sys [?] R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys –> C:\Windows\system32\DRIVERS\vwififlt.sys [?] R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2011-12-3 89600] R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe –> C:\Windows\system32\atiesrxx.exe [?] R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-8-31 1166848] R2 BTHSSecurityMgr;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Security Service;C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-6-3 134928] R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2012-1-4 822624] R2 FPLService;TrueSuiteService;C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2010-12-7 249672] R2 HP Support Assistant Service;HP Support Assistant Service;C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe [2011-9-9 86072] R2 HP Wireless Assistant Service;HP Wireless Assistant Service;C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-7-22 103992] R2 HPClientSvc;HP Client Services;C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-8-6 291896] R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-9-1 227896] R2 hpsrv;HP Service;C:\Windows\system32\Hpservice.exe –> C:\Windows\system32\Hpservice.exe [?] R2 HPWMISVC;HPWMISVC;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2011-7-11 26680] R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-5-19 13592] R2 IconMan_R;IconMan_R;C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-12-3 2413056] R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-1 508776] R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-5-19 2656280] R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys –> C:\Windows\system32\DRIVERS\atikmdag.sys [?] R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys –> C:\Windows\system32\DRIVERS\atikmpag.sys [?] R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Virtual Adapter;C:\Windows\system32\DRIVERS\AMPPAL.sys –> C:\Windows\system32\DRIVERS\AMPPAL.sys [?] R3 btwampfl;Bluetooth AMP USB Filter;C:\Windows\system32\drivers\btwampfl.sys –> C:\Windows\system32\drivers\btwampfl.sys [?] R3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\system32\DRIVERS\btwl2cap.sys –> C:\Windows\system32\DRIVERS\btwl2cap.sys [?] R3 clwvd;CyberLink WebCam Virtual Driver;C:\Windows\system32\DRIVERS\clwvd.sys –> C:\Windows\system32\DRIVERS\clwvd.sys [?] R3 IntcDAud;Intel® Display Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys –> C:\Windows\system32\DRIVERS\IntcDAud.sys [?] R3 intelkmd;intelkmd;C:\Windows\system32\DRIVERS\igdpmd64.sys –> C:\Windows\system32\DRIVERS\igdpmd64.sys [?] R3 MEIx64;Intel® Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys –> C:\Windows\system32\DRIVERS\HECIx64.sys [?] R3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\system32\DRIVERS\NETwNs64.sys –> C:\Windows\system32\DRIVERS\NETwNs64.sys [?] R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys –> C:\Windows\system32\DRIVERS\nusb3hub.sys [?] R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys –> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?] R3 RSPCIESTOR;Realtek PCIE CardReader Driver;C:\Windows\system32\DRIVERS\RtsPStor.sys –> C:\Windows\system32\DRIVERS\RtsPStor.sys [?] R3 Sftfs;Sftfs;C:\Windows\system32\DRIVERS\Sftfslh.sys –> C:\Windows\system32\DRIVERS\Sftfslh.sys [?] R3 Sftplay;Sftplay;C:\Windows\system32\DRIVERS\Sftplaylh.sys –> C:\Windows\system32\DRIVERS\Sftplaylh.sys [?] R3 Sftredir;Sftredir;C:\Windows\system32\DRIVERS\Sftredirlh.sys –> C:\Windows\system32\DRIVERS\Sftredirlh.sys [?] R3 Sftvol;Sftvol;C:\Windows\system32\DRIVERS\Sftvollh.sys –> C:\Windows\system32\DRIVERS\Sftvollh.sys [?] R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-1 219496] R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys –> C:\Windows\system32\DRIVERS\vwifimp.sys [?] R3 wdkmd;Intel WiDi KMD;C:\Windows\system32\DRIVERS\WDKMD.sys –> C:\Windows\system32\DRIVERS\WDKMD.sys [?] S2 Amsp;Trend Micro Solution Platform;C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2011-9-21 275912] S2 CLKMSVC10_38F51D56;CyberLink Product - 2012/01/30 07:11:53;C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2011-2-24 241648] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-6-13 257224] S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protocol;C:\Windows\system32\DRIVERS\amppal.sys –> C:\Windows\system32\DRIVERS\amppal.sys [?] S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-7-27 340240] S3 Netaapl;Apple Mobile Device Ethernet Service;C:\Windows\system32\DRIVERS\netaapl64.sys –> C:\Windows\system32\DRIVERS\netaapl64.sys [?] S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\system32\DRIVERS\netw5v64.sys –> C:\Windows\system32\DRIVERS\netw5v64.sys [?] S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184] S3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys –> C:\Windows\system32\DRIVERS\Rt64win7.sys [?] S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\system32\DRIVERS\VSTAZL6.SYS –> C:\Windows\system32\DRIVERS\VSTAZL6.SYS [?] S3 SrvHsfV92;SrvHsfV92;C:\Windows\system32\DRIVERS\VSTDPV6.SYS –> C:\Windows\system32\DRIVERS\VSTDPV6.SYS [?] S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\system32\DRIVERS\VSTCNXT6.SYS –> C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [?] S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys –> C:\Windows\system32\drivers\tsusbflt.sys [?] S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\system32\Drivers\usbaapl64.sys –> C:\Windows\system32\Drivers\usbaapl64.sys [?] S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe –> C:\Windows\system32\Wat\WatAdminSvc.exe [?] S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk62x64.sys –> C:\Windows\system32\DRIVERS\yk62x64.sys [?] S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-23 57184] . =============== Created Last 30 ================ . 2012-06-16 08:31:56 ——– d—–w- C:\Users\Marion\AppData\Local\{CCCE1F27-C41A-45C8-AB4D-33326AA12687} 2012-06-15 21:58:48 ——– d—–w- C:\Program Files\Microsoft IntelliPoint 2012-06-15 21:51:47 514560 —-a-w- C:\Windows\SysWow64\qdvd.dll 2012-06-15 21:51:47 366592 —-a-w- C:\Windows\System32\qdvd.dll 2012-06-15 21:06:20 ——– d—–w- C:\Program Files (x86)\Trend Micro 2012-06-15 20:06:43 ——– d—–w- C:\Users\Marion\AppData\Local\{D7B60370-F1D0-405A-9C69-2C9278B71E1E} 2012-06-15 19:09:08 ——– d—–w- C:\Users\Marion\AppData\Local\{73646E7D-7FF0-415F-8A37-E752B85DB3D7} 2012-06-14 20:33:48 ——– d—–w- C:\Users\Marion\AppData\Local\{5E0D4F55-85EC-4C0C-869F-40071A8E926C} 2012-06-14 20:33:34 ——– d—–w- C:\Users\Marion\AppData\Local\{27259EF7-6CF7-4445-A988-B56B085E3B8E} 2012-06-14 20:15:18 ——– d—–w- C:\Users\Marion\AppData\Local\{29EA227A-6FD7-4142-9190-83C2374460FA} 2012-06-13 19:14:39 9216 —-a-w- C:\Windows\System32\rdrmemptylst.exe 2012-06-13 19:10:29 ——– d—–w- C:\Users\Marion\AppData\Local\{4FDA7A02-40B6-48CB-B5F0-3E7A95FEC065} 2012-06-12 19:26:27 426184 —-a-w- C:\Windows\SysWow64\FlashPlayerApp.exe 2012-06-12 19:26:23 ——– d—–w- C:\Users\Marion\AppData\Local\{85285BDF-26A8-4873-8AE9-6195CD4C9E07} 2012-06-12 19:26:12 ——– d—–w- C:\Users\Marion\AppData\Local\{8181E8A3-D44F-4205-BCB6-DCD29D1A88AC} 2012-06-11 22:59:13 ——– d—–w- C:\Users\Marion\AppData\Local\{5C0AB91D-E8A2-47E8-A34C-A038789D1673} 2012-06-11 08:17:32 ——– d—–w- C:\Users\Marion\AppData\Local\{1EC663A9-165D-4A96-A0A9-FFA6A044F9E5} 2012-06-10 20:17:10 ——– d—–w- C:\Users\Marion\AppData\Local\{0DA21E30-DB98-4370-829A-77FBDEA067EC} 2012-06-09 17:41:41 ——– d—–w- C:\Users\Marion\AppData\Local\{21F18554-D4EE-4BE2-8A7B-A16E1E5928CE} 2012-06-09 05:02:06 ——– d—–w- C:\Users\Marion\AppData\Local\{E7373058-6575-4B86-B9F6-6826A493FD26} 2012-06-08 16:48:43 ——– d—–w- C:\Users\Marion\AppData\Local\{621AA2A8-026A-4021-BCE8-0A71AA3B407B} 2012-06-05 06:42:27 ——– d—–w- C:\Users\Marion\AppData\Local\{B01E2DF9-78AA-4E3D-819C-807534BB4799} 2012-06-04 01:55:12 ——– d—–w- C:\Users\Marion\AppData\Local\{600C3287-0E8A-4323-BCE1-5E13B5456E76} 2012-06-04 01:55:02 ——– d—–w- C:\Users\Marion\AppData\Local\{FE11D530-4950-490F-8E46-7B198D7BB1F9} 2012-06-02 19:01:10 ——– d—–w- C:\Users\Marion\AppData\Local\{24E05A18-0F6B-4327-AF8B-A82E28B62B94} 2012-06-02 19:01:00 ——– d—–w- C:\Users\Marion\AppData\Local\{7DC047A3-BBEF-4C84-8140-908FAAF1D769} 2012-06-01 18:20:56 ——– d—–w- C:\Users\Marion\AppData\Local\{11BD3B94-383D-40E2-9866-B1F5B24F81C0} 2012-06-01 18:20:46 ——– d—–w- C:\Users\Marion\AppData\Local\{9E67D2F6-6380-48AE-8272-E62BC2D66DF6} 2012-05-31 19:17:18 ——– d—–w- C:\Users\Marion\AppData\Local\{5E74885A-B16E-4788-9DF1-A3D66DE7283D} 2012-05-31 19:17:08 ——– d—–w- C:\Users\Marion\AppData\Local\{1CEEDBBB-2365-4409-9F0A-8766D1FE9F66} 2012-05-28 19:42:45 ——– d—–w- C:\Users\Marion\AppData\Local\{13816E6D-13F8-4FE0-BE9B-AFF70876D37D} 2012-05-28 19:42:34 ——– d—–w- C:\Users\Marion\AppData\Local\{5BAF6ED7-F27C-4D5B-85EC-2D5236A23C58} 2012-05-27 09:06:53 ——– d—–w- C:\Users\Marion\AppData\Local\{4170C04A-CE07-41E9-9356-370D58A62FD4} 2012-05-27 09:05:46 ——– d—–w- C:\Users\Marion\AppData\Local\{49211E08-76D1-4BEE-8987-411668802062} 2012-05-27 09:00:03 ——– d—–w- C:\Users\Marion\AppData\Local\{B7B15D3F-7E55-4C17-AF3D-4B1CAF51772F} 2012-05-27 08:59:24 ——– d—–w- C:\Users\Marion\AppData\Local\{309BF2F5-D6DF-40D6-85D4-5E9A07CDAC60} 2012-05-26 19:29:12 ——– d—–w- C:\Users\Marion\AppData\Local\{D206198E-1E7A-44EE-ADED-5B481B813121} 2012-05-26 19:29:01 ——– d—–w- C:\Users\Marion\AppData\Local\{AF474E11-C1BE-4AB5-98C3-9406B4448E86} 2012-05-26 02:05:22 ——– d—–w- C:\Users\Marion\AppData\Local\{5D712F62-C5F5-4000-99ED-C6DFF9BE9090} 2012-05-26 02:05:12 ——– d—–w- C:\Users\Marion\AppData\Local\{F8442140-18CE-4DC1-9CE7-5DEED2609C60} 2012-05-25 10:10:23 ——– d—–w- C:\Users\Marion\AppData\Local\{429262E7-7DCD-4EE9-AAA2-57BF3A5EB55D} 2012-05-24 19:21:51 ——– d—–w- C:\Users\Marion\AppData\Local\{0145B42B-3B90-453D-A34C-9426F3B4D33B} 2012-05-23 20:11:07 ——– d—–w- C:\Users\Marion\AppData\Local\{DD4C976F-89E9-498D-A20B-AB90CA4BF953} 2012-05-23 08:10:45 ——– d—–w- C:\Users\Marion\AppData\Local\{CE410772-5DE3-4260-912B-8E872CD17C41} 2012-05-22 20:10:22 ——– d—–w- C:\Users\Marion\AppData\Local\{5E294EC3-70D7-4D0A-8089-192276290BFA} 2012-05-22 00:03:19 ——– d—–w- C:\Users\Marion\AppData\Local\{3962D902-AD64-4E9B-A0C7-CE398D31FA57} 2012-05-21 12:02:53 ——– d—–w- C:\Users\Marion\AppData\Local\{EC206BBC-A230-4D56-9E63-121BECD2FF3A} 2012-05-21 12:02:42 ——– d—–w- C:\Users\Marion\AppData\Local\{F75EAEF3-7AAE-4F9E-B2BE-9170DE17E74C} 2012-05-20 20:52:24 ——– d—–w- C:\Users\Marion\AppData\Local\{6EF32FBA-D466-4072-9106-1513B3387523} 2012-05-20 03:50:30 ——– d—–w- C:\Users\Marion\AppData\Local\{860786AC-78B1-444A-ABF1-015ACB4C48B3} 2012-05-20 03:50:18 ——– d—–w- C:\Users\Marion\AppData\Local\{74D2D0D1-1FA0-468A-90B5-ED70E051CCF4} 2012-05-19 00:10:22 ——– d—–w- C:\Users\Marion\AppData\Local\{F744D608-3F06-4A8C-9F14-9AA30097228E} 2012-05-19 00:09:23 ——– d—–w- C:\Users\Marion\AppData\Local\{85E803DA-D5F9-4DC1-BF85-E0B4B0D35D52} . ==================== Find3M ==================== . 2012-06-12 19:26:27 70344 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2012-05-18 02:06:48 2311680 —-a-w- C:\Windows\System32\jscript9.dll 2012-05-18 01:59:14 1392128 —-a-w- C:\Windows\System32\wininet.dll 2012-05-18 01:58:39 1494528 —-a-w- C:\Windows\System32\inetcpl.cpl 2012-05-18 01:55:22 173056 —-a-w- C:\Windows\System32\ieUnatt.exe 2012-05-18 01:51:30 2382848 —-a-w- C:\Windows\System32\mshtml.tlb 2012-05-17 22:45:37 1800192 —-a-w- C:\Windows\SysWow64\jscript9.dll 2012-05-17 22:35:47 1129472 —-a-w- C:\Windows\SysWow64\wininet.dll 2012-05-17 22:35:39 1427968 —-a-w- C:\Windows\SysWow64\inetcpl.cpl 2012-05-17 22:29:45 142848 —-a-w- C:\Windows\SysWow64\ieUnatt.exe 2012-05-17 22:24:45 2382848 —-a-w- C:\Windows\SysWow64\mshtml.tlb 2012-05-15 01:32:33 3146752 —-a-w- C:\Windows\System32\win32k.sys 2012-05-04 11:06:22 5559664 —-a-w- C:\Windows\System32\ntoskrnl.exe 2012-05-04 10:03:53 3968368 —-a-w- C:\Windows\SysWow64\ntkrnlpa.exe 2012-05-04 10:03:50 3913072 —-a-w- C:\Windows\SysWow64\ntoskrnl.exe 2012-05-01 05:40:20 209920 —-a-w- C:\Windows\System32\profsvc.dll 2012-04-28 03:55:21 210944 —-a-w- C:\Windows\System32\drivers\rdpwd.sys 2012-04-26 05:41:56 77312 —-a-w- C:\Windows\System32\rdpwsx.dll 2012-04-26 05:41:55 149504 —-a-w- C:\Windows\System32\rdpcorekmts.dll 2012-04-24 05:37:37 184320 —-a-w- C:\Windows\System32\cryptsvc.dll 2012-04-24 05:37:37 140288 —-a-w- C:\Windows\System32\cryptnet.dll 2012-04-24 05:37:36 1462272 —-a-w- C:\Windows\System32\crypt32.dll 2012-04-24 04:36:42 140288 —-a-w- C:\Windows\SysWow64\cryptsvc.dll 2012-04-24 04:36:42 1158656 —-a-w- C:\Windows\SysWow64\crypt32.dll 2012-04-24 04:36:42 103936 —-a-w- C:\Windows\SysWow64\cryptnet.dll 2012-04-07 12:31:40 3216384 —-a-w- C:\Windows\System32\msi.dll 2012-04-07 11:26:29 2342400 —-a-w- C:\Windows\SysWow64\msi.dll 2012-03-30 11:35:47 1918320 —-a-w- C:\Windows\System32\drivers\tcpip.sys . ============= FINISH: 11:56:49.23 =============== I have attached the 2nd file however when I downloaded the aswMBR.exe and tried to run it as admin I get a message saying its not compatible with win 32 system it dont give the option to go with 64 bit system if this makes sence. I did have malwarebytes anti malware but can no longer get it to run on the pc in question.

Attachments:

Post #4 last edited
Hi shucky,

That's odd. Your system is 64 bit for sure. Can you delete aswMBR, redownload it, then run it again?

I also need you to do the following:

Please download TDSSKiller.zip
  • Extract it to your desktop
  • Double click TDSSKiller.exe
  • Press Start Scan.
    • If Malicious objects are found, DO NOT cure them.
    • Choose Skip then click on Continue.
  • Copy and paste the log in your next reply
    • A copy of the log will be saved automatically to the root of the drive (typically C:\)
Post #5
Hello Noodle here is the TDSS report. I'll attach the awsMBR log as well 20:41:16.0048 4580 TDSS rootkit removing tool [removed] Jun 15 2012 15:13:31 20:41:17.0172 4580 ============================================================ 20:41:17.0172 4580 Current date / time: 2012/06/18 20:41:17.0172 20:41:17.0172 4580 SystemInfo: 20:41:17.0172 4580 20:41:17.0172 4580 OS Version: 6.1.7601 ServicePack: 1.0 20:41:17.0172 4580 Product type: Workstation 20:41:17.0172 4580 ComputerName: CARL-HP 20:41:17.0172 4580 UserName: Marion 20:41:17.0172 4580 Windows directory: C:\Windows 20:41:17.0172 4580 System windows directory: C:\Windows 20:41:17.0172 4580 Running under WOW64 20:41:17.0172 4580 Processor architecture: Intel x64 20:41:17.0172 4580 Number of processors: 8 20:41:17.0172 4580 Page size: 0x1000 20:41:17.0172 4580 Boot type: Normal boot 20:41:17.0172 4580 ============================================================ 20:41:20.0089 4580 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 20:41:20.0120 4580 Drive \Device\Harddisk1\DR1 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 20:41:20.0136 4580 ============================================================ 20:41:20.0136 4580 \Device\Harddisk0\DR0: 20:41:20.0136 4580 MBR partitions: 20:41:20.0136 4580 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800 20:41:20.0136 4580 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x554C0000 20:41:20.0136 4580 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x55524000, BlocksNum 0x1FEE800 20:41:20.0136 4580 \Device\Harddisk0\DR0\Partition3: MBR, Type 0xC, StartLBA 0x57512800, BlocksNum 0x336F0 20:41:20.0136 4580 \Device\Harddisk1\DR1: 20:41:20.0136 4580 MBR partitions: 20:41:20.0136 4580 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x57545000 20:41:20.0136 4580 ============================================================ 20:41:20.0167 4580 C: <-> \Device\Harddisk0\DR0\Partition1 20:41:20.0182 4580 D: <-> \Device\Harddisk1\DR1\Partition0 20:41:20.0214 4580 E: <-> \Device\Harddisk0\DR0\Partition2 20:41:20.0229 4580 G: <-> \Device\Harddisk0\DR0\Partition3 20:41:20.0229 4580 ============================================================ 20:41:20.0229 4580 Initialize success 20:41:20.0229 4580 ============================================================ 20:41:24.0270 6812 ============================================================ 20:41:24.0270 6812 Scan started 20:41:24.0270 6812 Mode: Manual; 20:41:24.0270 6812 ============================================================ 20:41:24.0847 6812 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys 20:41:24.0862 6812 1394ohci - ok 20:41:24.0909 6812 Accelerometer (5c368f4b04ed2a923e6afca2d37baff5) C:\Windows\system32\DRIVERS\Accelerometer.sys 20:41:24.0909 6812 Accelerometer - ok 20:41:24.0972 6812 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys 20:41:24.0972 6812 ACPI - ok 20:41:25.0034 6812 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys 20:41:25.0050 6812 AcpiPmi - ok 20:41:25.0221 6812 AdobeFlashPlayerUpdateSvc (f3cd7b20b27d1772c946df993ff3635c) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 20:41:25.0221 6812 AdobeFlashPlayerUpdateSvc - ok 20:41:25.0299 6812 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 20:41:25.0315 6812 adp94xx - ok 20:41:25.0362 6812 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 20:41:25.0377 6812 adpahci - ok 20:41:25.0408 6812 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 20:41:25.0424 6812 adpu320 - ok 20:41:25.0455 6812 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll 20:41:25.0455 6812 AeLookupSvc - ok 20:41:25.0533 6812 AESTFilters (a6fb9db8f1a86861d955fd6975977ae0) C:\Program Files\IDT\WDM\AESTSr64.exe 20:41:25.0533 6812 AESTFilters - ok 20:41:25.0596 6812 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys 20:41:25.0611 6812 AFD - ok 20:41:25.0658 6812 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys 20:41:25.0658 6812 agp440 - ok 20:41:25.0705 6812 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe 20:41:25.0705 6812 ALG - ok 20:41:25.0736 6812 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys 20:41:25.0736 6812 aliide - ok 20:41:25.0783 6812 AMD External Events Utility (263570714ac4cf41208e647c77bd2a63) C:\Windows\system32\atiesrxx.exe 20:41:25.0798 6812 AMD External Events Utility - ok 20:41:25.0830 6812 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys 20:41:25.0830 6812 amdide - ok 20:41:25.0861 6812 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 20:41:25.0861 6812 AmdK8 - ok 20:41:26.0173 6812 amdkmdag (0eeafb005d334910bb0aee1941351b1e) C:\Windows\system32\DRIVERS\atikmdag.sys 20:41:26.0360 6812 amdkmdag - ok 20:41:26.0469 6812 amdkmdap (65f58cfb0bfdcebeae0164bb037545a8) C:\Windows\system32\DRIVERS\atikmpag.sys 20:41:26.0469 6812 amdkmdap - ok 20:41:26.0516 6812 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 20:41:26.0516 6812 AmdPPM - ok 20:41:26.0563 6812 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys 20:41:26.0563 6812 amdsata - ok 20:41:26.0610 6812 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 20:41:26.0610 6812 amdsbs - ok 20:41:26.0625 6812 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys 20:41:26.0641 6812 amdxata - ok 20:41:26.0688 6812 AMPPAL (7d9e301ab3247765702d0b65e2e47e50) C:\Windows\system32\DRIVERS\AMPPAL.sys 20:41:26.0703 6812 AMPPAL - ok 20:41:26.0703 6812 AMPPALP (7d9e301ab3247765702d0b65e2e47e50) C:\Windows\system32\DRIVERS\amppal.sys 20:41:26.0703 6812 AMPPALP - ok 20:41:26.0875 6812 AMPPALR3 (576134e43169810b560f0bb6fdee13f5) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe 20:41:26.0890 6812 AMPPALR3 - ok 20:41:27.0000 6812 Amsp (1b7d1f0a0dfadbc797c16364792a7aa5) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe 20:41:27.0000 6812 Amsp - ok 20:41:27.0124 6812 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys 20:41:27.0124 6812 AppID - ok 20:41:27.0171 6812 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll 20:41:27.0171 6812 AppIDSvc - ok 20:41:27.0234 6812 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll 20:41:27.0234 6812 Appinfo - ok 20:41:27.0327 6812 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 20:41:27.0327 6812 Apple Mobile Device - ok 20:41:27.0390 6812 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 20:41:27.0390 6812 arc - ok 20:41:27.0421 6812 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 20:41:27.0421 6812 arcsas - ok 20:41:27.0452 6812 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 20:41:27.0468 6812 AsyncMac - ok 20:41:27.0514 6812 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys 20:41:27.0514 6812 atapi - ok 20:41:27.0608 6812 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll 20:41:27.0624 6812 AudioEndpointBuilder - ok 20:41:27.0624 6812 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll 20:41:27.0624 6812 AudioSrv - ok 20:41:27.0686 6812 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll 20:41:27.0686 6812 AxInstSV - ok 20:41:27.0748 6812 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 20:41:27.0764 6812 b06bdrv - ok 20:41:27.0826 6812 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 20:41:27.0826 6812 b57nd60a - ok 20:41:27.0873 6812 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll 20:41:27.0889 6812 BDESVC - ok 20:41:27.0904 6812 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 20:41:27.0904 6812 Beep - ok 20:41:28.0029 6812 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll 20:41:28.0029 6812 BFE - ok 20:41:28.0107 6812 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll 20:41:28.0123 6812 BITS - ok 20:41:28.0185 6812 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 20:41:28.0185 6812 blbdrive - ok 20:41:28.0294 6812 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe 20:41:28.0294 6812 Bonjour Service - ok 20:41:28.0341 6812 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys 20:41:28.0357 6812 bowser - ok 20:41:28.0388 6812 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 20:41:28.0388 6812 BrFiltLo - ok 20:41:28.0404 6812 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 20:41:28.0404 6812 BrFiltUp - ok 20:41:28.0466 6812 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll 20:41:28.0466 6812 Browser - ok 20:41:28.0497 6812 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 20:41:28.0497 6812 Brserid - ok 20:41:28.0528 6812 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 20:41:28.0528 6812 BrSerWdm - ok 20:41:28.0544 6812 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 20:41:28.0544 6812 BrUsbMdm - ok 20:41:28.0591 6812 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 20:41:28.0591 6812 BrUsbSer - ok 20:41:28.0638 6812 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys 20:41:28.0638 6812 BthEnum - ok 20:41:28.0669 6812 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 20:41:28.0669 6812 BTHMODEM - ok 20:41:28.0700 6812 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys 20:41:28.0700 6812 BthPan - ok 20:41:28.0778 6812 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\Windows\System32\Drivers\BTHport.sys 20:41:28.0778 6812 BTHPORT - ok 20:41:28.0840 6812 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll 20:41:28.0840 6812 bthserv - ok 20:41:28.0934 6812 BTHSSecurityMgr (9e2af97302b9f4bf97e952a865eb31ae) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe 20:41:28.0934 6812 BTHSSecurityMgr - ok 20:41:28.0981 6812 BTHUSB (f188b7394d81010767b6df3178519a37) C:\Windows\System32\Drivers\BTHUSB.sys 20:41:28.0981 6812 BTHUSB - ok 20:41:29.0028 6812 btwampfl (7a2ce8c1bf4daa1f2766e21e9ca11078) C:\Windows\system32\drivers\btwampfl.sys 20:41:29.0043 6812 btwampfl - ok 20:41:29.0059 6812 btwaudio (a75bf6802a967f5aacecc3c67febdf55) C:\Windows\system32\drivers\btwaudio.sys 20:41:29.0074 6812 btwaudio - ok 20:41:29.0106 6812 btwavdt (d895dc213edbda5fcc53aad1f1e0e63b) C:\Windows\system32\drivers\btwavdt.sys 20:41:29.0106 6812 btwavdt - ok 20:41:29.0215 6812 btwdins (692f8648d7686d91e34a65ac698019d8) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe 20:41:29.0230 6812 btwdins - ok 20:41:29.0262 6812 btwl2cap (07096d2bc22ccb6cea5a532df0be8a75) C:\Windows\system32\DRIVERS\btwl2cap.sys 20:41:29.0262 6812 btwl2cap - ok 20:41:29.0277 6812 btwrchid (6d7aa2bde0135599c5f230d69db3b420) C:\Windows\system32\DRIVERS\btwrchid.sys 20:41:29.0277 6812 btwrchid - ok 20:41:29.0324 6812 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 20:41:29.0324 6812 cdfs - ok 20:41:29.0371 6812 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys 20:41:29.0371 6812 cdrom - ok 20:41:29.0418 6812 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll 20:41:29.0418 6812 CertPropSvc - ok 20:41:29.0464 6812 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 20:41:29.0464 6812 circlass - ok 20:41:29.0511 6812 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 20:41:29.0527 6812 CLFS - ok 20:41:29.0652 6812 CLKMSVC10_38F51D56 (524dc3807cb1746225f9d26add19c319) C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe 20:41:29.0652 6812 CLKMSVC10_38F51D56 - ok 20:41:29.0730 6812 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 20:41:29.0730 6812 clr_optimization_v2.0.50727_32 - ok 20:41:29.0792 6812 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 20:41:29.0792 6812 clr_optimization_v2.0.50727_64 - ok 20:41:29.0870 6812 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 20:41:29.0886 6812 clr_optimization_v4.0.30319_32 - ok 20:41:29.0932 6812 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 20:41:29.0932 6812 clr_optimization_v4.0.30319_64 - ok 20:41:30.0026 6812 clwvd (50f92c943f18b070f166d019dfab3d9a) C:\Windows\system32\DRIVERS\clwvd.sys 20:41:30.0026 6812 clwvd - ok 20:41:30.0073 6812 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 20:41:30.0073 6812 CmBatt - ok 20:41:30.0104 6812 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys 20:41:30.0104 6812 cmdide - ok 20:41:30.0198 6812 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys 20:41:30.0198 6812 CNG - ok 20:41:30.0244 6812 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 20:41:30.0244 6812 Compbatt - ok 20:41:30.0291 6812 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys 20:41:30.0307 6812 CompositeBus - ok 20:41:30.0322 6812 COMSysApp - ok 20:41:30.0354 6812 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 20:41:30.0354 6812 crcdisk - ok 20:41:30.0416 6812 CryptSvc (4f5414602e2544a4554d95517948b705) C:\Windows\system32\cryptsvc.dll 20:41:30.0416 6812 CryptSvc - ok 20:41:30.0572 6812 cvhsvc (72794d112cbaff3bc0c29bf7350d4741) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE 20:41:30.0572 6812 cvhsvc - ok 20:41:30.0634 6812 dc3d (7af9dac504fbd047cbc3e64ae52c92bf) C:\Windows\system32\DRIVERS\dc3d.sys 20:41:30.0634 6812 dc3d - ok 20:41:30.0712 6812 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll 20:41:30.0728 6812 DcomLaunch - ok 20:41:30.0775 6812 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll 20:41:30.0790 6812 defragsvc - ok 20:41:30.0853 6812 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys 20:41:30.0853 6812 DfsC - ok 20:41:30.0900 6812 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll 20:41:30.0900 6812 Dhcp - ok 20:41:30.0931 6812 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 20:41:30.0931 6812 discache - ok 20:41:30.0978 6812 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 20:41:30.0978 6812 Disk - ok 20:41:31.0024 6812 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll 20:41:31.0024 6812 Dnscache - ok 20:41:31.0071 6812 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll 20:41:31.0087 6812 dot3svc - ok 20:41:31.0102 6812 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll 20:41:31.0102 6812 DPS - ok 20:41:31.0165 6812 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 20:41:31.0165 6812 drmkaud - ok 20:41:31.0274 6812 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys 20:41:31.0290 6812 DXGKrnl - ok 20:41:31.0336 6812 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll 20:41:31.0336 6812 EapHost - ok 20:41:31.0492 6812 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 20:41:31.0524 6812 ebdrv - ok 20:41:31.0633 6812 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe 20:41:31.0633 6812 EFS - ok 20:41:31.0711 6812 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe 20:41:31.0726 6812 ehRecvr - ok 20:41:31.0773 6812 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe 20:41:31.0773 6812 ehSched - ok 20:41:31.0851 6812 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 20:41:31.0867 6812 elxstor - ok 20:41:31.0945 6812 EPSON_EB_RPCV4_01 (b5581646636759d0dafa8b008881c079) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE 20:41:31.0945 6812 EPSON_EB_RPCV4_01 - ok 20:41:31.0976 6812 EPSON_PM_RPCV4_01 (1e345f2a2d95da3190596e691cde9342) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE 20:41:31.0976 6812 EPSON_PM_RPCV4_01 - ok 20:41:32.0023 6812 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys 20:41:32.0023 6812 ErrDev - ok 20:41:32.0085 6812 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll 20:41:32.0101 6812 EventSystem - ok 20:41:32.0226 6812 EvtEng (e3a96d5ae6e5c7b5472011ba77353368) C:\Program Files\Intel\WiFi\bin\EvtEng.exe 20:41:32.0241 6812 EvtEng - ok 20:41:32.0366 6812 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 20:41:32.0382 6812 exfat - ok 20:41:32.0397 6812 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 20:41:32.0413 6812 fastfat - ok 20:41:32.0491 6812 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe 20:41:32.0506 6812 Fax - ok 20:41:32.0538 6812 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 20:41:32.0538 6812 fdc - ok 20:41:32.0569 6812 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll 20:41:32.0569 6812 fdPHost - ok 20:41:32.0584 6812 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll 20:41:32.0584 6812 FDResPub - ok 20:41:32.0616 6812 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 20:41:32.0616 6812 FileInfo - ok 20:41:32.0631 6812 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 20:41:32.0631 6812 Filetrace - ok 20:41:32.0647 6812 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 20:41:32.0662 6812 flpydisk - ok 20:41:32.0709 6812 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys 20:41:32.0709 6812 FltMgr - ok 20:41:32.0787 6812 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll 20:41:32.0803 6812 FontCache - ok 20:41:32.0881 6812 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 20:41:32.0881 6812 FontCache3.0.0.0 - ok 20:41:32.0974 6812 FPLService (cdc54db949d1e2bbf86b0c7ab86b912e) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe 20:41:32.0974 6812 FPLService - ok 20:41:33.0099 6812 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 20:41:33.0099 6812 FsDepends - ok 20:41:33.0162 6812 Fs_Rec (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys 20:41:33.0162 6812 Fs_Rec - ok 20:41:33.0240 6812 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys 20:41:33.0240 6812 fvevol - ok 20:41:33.0333 6812 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 20:41:33.0333 6812 gagp30kx - ok 20:41:33.0427 6812 GameConsoleService (d154305de6090e6e84e525f84bb08a06) C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe 20:41:33.0427 6812 GameConsoleService - ok 20:41:33.0489 6812 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 20:41:33.0489 6812 GEARAspiWDM - ok 20:41:33.0567 6812 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll 20:41:33.0583 6812 gpsvc - ok 20:41:33.0614 6812 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 20:41:33.0614 6812 hcw85cir - ok 20:41:33.0692 6812 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys 20:41:33.0692 6812 HdAudAddService - ok 20:41:33.0754 6812 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys 20:41:33.0754 6812 HDAudBus - ok 20:41:33.0786 6812 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 20:41:33.0786 6812 HidBatt - ok 20:41:33.0817 6812 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 20:41:33.0817 6812 HidBth - ok 20:41:33.0848 6812 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 20:41:33.0848 6812 HidIr - ok 20:41:33.0879 6812 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll 20:41:33.0895 6812 hidserv - ok 20:41:33.0942 6812 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys 20:41:33.0942 6812 HidUsb - ok 20:41:34.0004 6812 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll 20:41:34.0004 6812 hkmsvc - ok 20:41:34.0051 6812 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll 20:41:34.0051 6812 HomeGroupListener - ok 20:41:34.0098 6812 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll 20:41:34.0098 6812 HomeGroupProvider - ok 20:41:34.0238 6812 HP Support Assistant Service (13bb1114451c63bfb41ba7daa4d70a29) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe 20:41:34.0238 6812 HP Support Assistant Service - ok 20:41:34.0316 6812 HP Wireless Assistant Service (c930128c8f8ff03d8f8c42b570920d56) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe 20:41:34.0332 6812 HP Wireless Assistant Service - ok 20:41:34.0378 6812 HPClientSvc (3dc11a802353401332d49c3cbfbbe5fc) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe 20:41:34.0378 6812 HPClientSvc - ok 20:41:34.0456 6812 HPDrvMntSvc.exe (b19ff523b533a3f198b9239e1749c940) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe 20:41:34.0456 6812 HPDrvMntSvc.exe - ok 20:41:34.0534 6812 hpdskflt (4e0bec0f78096ffd6d3314b497fc49d3) C:\Windows\system32\DRIVERS\hpdskflt.sys 20:41:34.0534 6812 hpdskflt - ok 20:41:34.0612 6812 hpqwmiex (01091b900e15878b4434f9c726c4541d) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe 20:41:34.0628 6812 hpqwmiex - ok 20:41:34.0675 6812 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys 20:41:34.0675 6812 HpSAMD - ok 20:41:34.0706 6812 hpsrv (fc7c13b5a9e9be23b7ae72bbc7fdb278) C:\Windows\system32\Hpservice.exe 20:41:34.0706 6812 hpsrv - ok 20:41:34.0753 6812 HPWMISVC (491ce9b6321fb74e4b37af2c47f98434) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe 20:41:34.0753 6812 HPWMISVC - ok 20:41:34.0815 6812 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys 20:41:34.0831 6812 HTTP - ok 20:41:34.0878 6812 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys 20:41:34.0878 6812 hwpolicy - ok 20:41:34.0924 6812 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 20:41:34.0940 6812 i8042prt - ok 20:41:35.0002 6812 iaStor (2fdaec4b02729c48c0fd1b0b4695995b) C:\Windows\system32\DRIVERS\iaStor.sys 20:41:35.0002 6812 iaStor - ok 20:41:35.0112 6812 IAStorDataMgrSvc (d41861e56e7552c13674d7f147a02464) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe 20:41:35.0112 6812 IAStorDataMgrSvc - ok 20:41:35.0174 6812 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys 20:41:35.0174 6812 iaStorV - ok 20:41:35.0377 6812 IconMan_R (d72bf0ae484f88399e8343e821c10d6a) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe 20:41:35.0392 6812 IconMan_R - ok 20:41:35.0517 6812 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 20:41:35.0533 6812 idsvc - ok 20:41:36.0048 6812 igfx (8cb8667f5a3b5515f2585f3254f3aaf7) C:\Windows\system32\DRIVERS\igdkmd64.sys 20:41:36.0266 6812 igfx - ok 20:41:36.0375 6812 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 20:41:36.0391 6812 iirsp - ok 20:41:36.0453 6812 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll 20:41:36.0469 6812 IKEEXT - ok 20:41:36.0531 6812 IntcDAud (fc727061c0f47c8059e88e05d5c8e381) C:\Windows\system32\DRIVERS\IntcDAud.sys 20:41:36.0547 6812 IntcDAud - ok 20:41:36.0594 6812 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys 20:41:36.0594 6812 intelide - ok 20:41:37.0046 6812 intelkmd (8cb8667f5a3b5515f2585f3254f3aaf7) C:\Windows\system32\DRIVERS\igdpmd64.sys 20:41:37.0264 6812 intelkmd - ok 20:41:37.0389 6812 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 20:41:37.0389 6812 intelppm - ok 20:41:37.0436 6812 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll 20:41:37.0436 6812 IPBusEnum - ok 20:41:37.0498 6812 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys 20:41:37.0498 6812 IpFilterDriver - ok 20:41:37.0545 6812 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll 20:41:37.0561 6812 iphlpsvc - ok 20:41:37.0592 6812 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys 20:41:37.0592 6812 IPMIDRV - ok 20:41:37.0623 6812 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 20:41:37.0623 6812 IPNAT - ok 20:41:37.0748 6812 iPod Service (46d249f9db7844cc01050a9345f0f61b) C:\Program Files\iPod\bin\iPodService.exe 20:41:37.0748 6812 iPod Service - ok 20:41:37.0795 6812 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 20:41:37.0795 6812 IRENUM - ok 20:41:37.0842 6812 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys 20:41:37.0842 6812 isapnp - ok 20:41:37.0873 6812 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys 20:41:37.0888 6812 iScsiPrt - ok 20:41:37.0920 6812 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys 20:41:37.0920 6812 kbdclass - ok 20:41:37.0951 6812 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys 20:41:37.0951 6812 kbdhid - ok 20:41:38.0013 6812 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 20:41:38.0013 6812 KeyIso - ok 20:41:38.0029 6812 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys 20:41:38.0029 6812 KSecDD - ok 20:41:38.0060 6812 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys 20:41:38.0060 6812 KSecPkg - ok 20:41:38.0091 6812 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 20:41:38.0091 6812 ksthunk - ok 20:41:38.0122 6812 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll 20:41:38.0138 6812 KtmRm - ok 20:41:38.0200 6812 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll 20:41:38.0216 6812 LanmanServer - ok 20:41:38.0263 6812 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll 20:41:38.0263 6812 LanmanWorkstation - ok 20:41:38.0310 6812 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 20:41:38.0310 6812 lltdio - ok 20:41:38.0356 6812 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll 20:41:38.0356 6812 lltdsvc - ok 20:41:38.0388 6812 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll 20:41:38.0388 6812 lmhosts - ok 20:41:38.0481 6812 LMS (c463a25f01c6237295917417c5e9e344) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe 20:41:38.0481 6812 LMS - ok 20:41:38.0528 6812 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 20:41:38.0528 6812 LSI_FC - ok 20:41:38.0559 6812 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 20:41:38.0559 6812 LSI_SAS - ok 20:41:38.0575 6812 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 20:41:38.0575 6812 LSI_SAS2 - ok 20:41:38.0606 6812 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 20:41:38.0622 6812 LSI_SCSI - ok 20:41:38.0637 6812 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 20:41:38.0637 6812 luafv - ok 20:41:38.0700 6812 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll 20:41:38.0700 6812 Mcx2Svc - ok 20:41:38.0746 6812 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 20:41:38.0746 6812 megasas - ok 20:41:38.0793 6812 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 20:41:38.0793 6812 MegaSR - ok 20:41:38.0824 6812 MEIx64 (a6518dcc42f7a6e999bb3bea8fd87567) C:\Windows\system32\DRIVERS\HECIx64.sys 20:41:38.0824 6812 MEIx64 - ok 20:41:38.0871 6812 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 20:41:38.0871 6812 MMCSS - ok 20:41:38.0902 6812 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 20:41:38.0902 6812 Modem - ok 20:41:38.0918 6812 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 20:41:38.0918 6812 monitor - ok 20:41:38.0965 6812 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 20:41:38.0980 6812 mouclass - ok 20:41:39.0012 6812 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 20:41:39.0012 6812 mouhid - ok 20:41:39.0058 6812 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys 20:41:39.0058 6812 mountmgr - ok 20:41:39.0105 6812 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys 20:41:39.0105 6812 mpio - ok 20:41:39.0183 6812 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 20:41:39.0183 6812 mpsdrv - ok 20:41:39.0261 6812 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll 20:41:39.0277 6812 MpsSvc - ok 20:41:39.0308 6812 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys 20:41:39.0324 6812 MRxDAV - ok 20:41:39.0355 6812 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys 20:41:39.0355 6812 mrxsmb - ok 20:41:39.0417 6812 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys 20:41:39.0417 6812 mrxsmb10 - ok 20:41:39.0448 6812 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys 20:41:39.0448 6812 mrxsmb20 - ok 20:41:39.0480 6812 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys 20:41:39.0495 6812 msahci - ok 20:41:39.0542 6812 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys 20:41:39.0542 6812 msdsm - ok 20:41:39.0573 6812 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe 20:41:39.0573 6812 MSDTC - ok 20:41:39.0604 6812 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 20:41:39.0620 6812 Msfs - ok 20:41:39.0636 6812 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 20:41:39.0636 6812 mshidkmdf - ok 20:41:39.0667 6812 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys 20:41:39.0667 6812 msisadrv - ok 20:41:39.0714 6812 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll 20:41:39.0714 6812 MSiSCSI - ok 20:41:39.0729 6812 msiserver - ok 20:41:39.0776 6812 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 20:41:39.0776 6812 MSKSSRV - ok 20:41:39.0792 6812 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 20:41:39.0792 6812 MSPCLOCK - ok 20:41:39.0807 6812 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 20:41:39.0807 6812 MSPQM - ok 20:41:39.0854 6812 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys 20:41:39.0870 6812 MsRPC - ok 20:41:39.0916 6812 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys 20:41:39.0916 6812 mssmbios - ok 20:41:39.0963 6812 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 20:41:39.0963 6812 MSTEE - ok 20:41:39.0979 6812 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 20:41:39.0979 6812 MTConfig - ok 20:41:39.0994 6812 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 20:41:39.0994 6812 Mup - ok 20:41:40.0119 6812 MyWiFiDHCPDNS (8f57db74bf5407a4cda6c8b005dc8dd0) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe 20:41:40.0119 6812 MyWiFiDHCPDNS - ok 20:41:40.0182 6812 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll 20:41:40.0197 6812 napagent - ok 20:41:40.0244 6812 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 20:41:40.0260 6812 NativeWifiP - ok 20:41:40.0338 6812 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys 20:41:40.0369 6812 NDIS - ok 20:41:40.0400 6812 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 20:41:40.0400 6812 NdisCap - ok 20:41:40.0431 6812 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 20:41:40.0431 6812 NdisTapi - ok 20:41:40.0494 6812 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys 20:41:40.0494 6812 Ndisuio - ok 20:41:40.0540 6812 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys 20:41:40.0540 6812 NdisWan - ok 20:41:40.0587 6812 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys 20:41:40.0587 6812 NDProxy - ok 20:41:40.0634 6812 Netaapl (6f4607e2333fe21e9e3ff8133a88b35b) C:\Windows\system32\DRIVERS\netaapl64.sys 20:41:40.0634 6812 Netaapl - ok 20:41:40.0665 6812 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 20:41:40.0665 6812 NetBIOS - ok 20:41:40.0712 6812 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys 20:41:40.0728 6812 NetBT - ok 20:41:40.0790 6812 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 20:41:40.0790 6812 Netlogon - ok 20:41:40.0821 6812 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll 20:41:40.0837 6812 Netman - ok 20:41:40.0868 6812 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll 20:41:40.0884 6812 netprofm - ok 20:41:40.0962 6812 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 20:41:40.0962 6812 NetTcpPortSharing - ok 20:41:41.0211 6812 netw5v64 (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys 20:41:41.0320 6812 netw5v64 - ok 20:41:41.0742 6812 NETwNs64 (50ad7f7040c22bb7caa59a0880875a21) C:\Windows\system32\DRIVERS\NETwNs64.sys 20:41:41.0882 6812 NETwNs64 - ok 20:41:41.0991 6812 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 20:41:41.0991 6812 nfrd960 - ok 20:41:42.0054 6812 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll 20:41:42.0069 6812 NlaSvc - ok 20:41:42.0100 6812 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 20:41:42.0100 6812 Npfs - ok 20:41:42.0132 6812 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll 20:41:42.0147 6812 nsi - ok 20:41:42.0163 6812 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 20:41:42.0163 6812 nsiproxy - ok 20:41:42.0272 6812 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys 20:41:42.0303 6812 Ntfs - ok 20:41:42.0397 6812 NuidFltr (317020d31f1696334679b9d0416eb62e) C:\Windows\system32\DRIVERS\NuidFltr.sys 20:41:42.0397 6812 NuidFltr - ok 20:41:42.0428 6812 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 20:41:42.0428 6812 Null - ok 20:41:42.0459 6812 nusb3hub (9a33100ac62a0463c49e47ee8e77083a) C:\Windows\system32\DRIVERS\nusb3hub.sys 20:41:42.0459 6812 nusb3hub - ok 20:41:42.0506 6812 nusb3xhc (87c321f7bee646b7ec6eedd6eb725741) C:\Windows\system32\DRIVERS\nusb3xhc.sys 20:41:42.0506 6812 nusb3xhc - ok 20:41:42.0553 6812 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys 20:41:42.0553 6812 nvraid - ok 20:41:42.0584 6812 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys 20:41:42.0584 6812 nvstor - ok 20:41:42.0631 6812 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys 20:41:42.0631 6812 nv_agp - ok 20:41:42.0678 6812 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys 20:41:42.0678 6812 ohci1394 - ok 20:41:42.0740 6812 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 20:41:42.0740 6812 ose - ok 20:41:43.0036 6812 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 20:41:43.0130 6812 osppsvc - ok 20:41:43.0224 6812 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 20:41:43.0224 6812 p2pimsvc - ok 20:41:43.0270 6812 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll 20:41:43.0286 6812 p2psvc - ok 20:41:43.0333 6812 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 20:41:43.0333 6812 Parport - ok 20:41:43.0364 6812 partmgr (e9766131eeade40a27dc27d2d68fba9c) C:\Windows\system32\drivers\partmgr.sys 20:41:43.0364 6812 partmgr - ok 20:41:43.0411 6812 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll 20:41:43.0426 6812 PcaSvc - ok 20:41:43.0458 6812 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys 20:41:43.0473 6812 pci - ok 20:41:43.0489 6812 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys 20:41:43.0489 6812 pciide - ok 20:41:43.0536 6812 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 20:41:43.0536 6812 pcmcia - ok 20:41:43.0567 6812 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 20:41:43.0567 6812 pcw - ok 20:41:43.0614 6812 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 20:41:43.0614 6812 PEAUTH - ok 20:41:43.0707 6812 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe 20:41:43.0707 6812 PerfHost - ok 20:41:43.0816 6812 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll 20:41:43.0848 6812 pla - ok 20:41:43.0910 6812 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll 20:41:43.0910 6812 PlugPlay - ok 20:41:43.0926 6812 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll 20:41:43.0941 6812 PNRPAutoReg - ok 20:41:43.0972 6812 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 20:41:43.0972 6812 PNRPsvc - ok 20:41:44.0050 6812 Point64 (4f0878fd62d5f7444c5f1c4c66d9d293) C:\Windows\system32\DRIVERS\point64.sys 20:41:44.0050 6812 Point64 - ok 20:41:44.0097 6812 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll 20:41:44.0113 6812 PolicyAgent - ok 20:41:44.0160 6812 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll 20:41:44.0160 6812 Power - ok 20:41:44.0206 6812 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys 20:41:44.0222 6812 PptpMiniport - ok 20:41:44.0238 6812 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 20:41:44.0238 6812 Processor - ok 20:41:44.0284 6812 ProfSvc (53e83f1f6cf9d62f32801cf66d8352a8) C:\Windows\system32\profsvc.dll 20:41:44.0300 6812 ProfSvc - ok 20:41:44.0347 6812 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 20:41:44.0347 6812 ProtectedStorage - ok 20:41:44.0394 6812 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys 20:41:44.0394 6812 Psched - ok 20:41:44.0612 6812 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 20:41:44.0643 6812 ql2300 - ok 20:41:44.0737 6812 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 20:41:44.0737 6812 ql40xx - ok 20:41:44.0784 6812 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll 20:41:44.0784 6812 QWAVE - ok 20:41:44.0799 6812 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 20:41:44.0815 6812 QWAVEdrv - ok 20:41:44.0830 6812 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 20:41:44.0830 6812 RasAcd - ok 20:41:44.0862 6812 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 20:41:44.0862 6812 RasAgileVpn - ok 20:41:44.0908 6812 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll 20:41:44.0924 6812 RasAuto - ok 20:41:44.0955 6812 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys 20:41:44.0971 6812 Rasl2tp - ok 20:41:45.0018 6812 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll 20:41:45.0018 6812 RasMan - ok 20:41:45.0049 6812 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 20:41:45.0064 6812 RasPppoe - ok 20:41:45.0080 6812 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 20:41:45.0080 6812 RasSstp - ok 20:41:45.0127 6812 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys 20:41:45.0127 6812 rdbss - ok 20:41:45.0158 6812 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 20:41:45.0158 6812 rdpbus - ok 20:41:45.0189 6812 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 20:41:45.0189 6812 RDPCDD - ok 20:41:45.0220 6812 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 20:41:45.0220 6812 RDPENCDD - ok 20:41:45.0236 6812 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 20:41:45.0236 6812 RDPREFMP - ok 20:41:45.0267 6812 RDPWD (e61608aa35e98999af9aaeeea6114b0a) C:\Windows\system32\drivers\RDPWD.sys 20:41:45.0267 6812 RDPWD - ok 20:41:45.0314 6812 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys 20:41:45.0330 6812 rdyboost - ok 20:41:45.0470 6812 RegSrvc (fd11c1287d38a46fb72353e14d50089c) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe 20:41:45.0486 6812 RegSrvc - ok 20:41:45.0517 6812 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll 20:41:45.0517 6812 RemoteAccess - ok 20:41:45.0579 6812 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll 20:41:45.0579 6812 RemoteRegistry - ok 20:41:45.0657 6812 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys 20:41:45.0657 6812 RFCOMM - ok 20:41:45.0704 6812 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll 20:41:45.0704 6812 RpcEptMapper - ok 20:41:45.0735 6812 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe 20:41:45.0735 6812 RpcLocator - ok 20:41:45.0798 6812 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll 20:41:45.0813 6812 RpcSs - ok 20:41:45.0860 6812 RSPCIESTOR (1f5e7af59b390261a85f5bedb1bb88b3) C:\Windows\system32\DRIVERS\RtsPStor.sys 20:41:45.0876 6812 RSPCIESTOR - ok 20:41:45.0907 6812 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 20:41:45.0907 6812 rspndr - ok 20:41:45.0954 6812 RTL8167 (ed5873f7dfb2f96d37f13322211b6bdc) C:\Windows\system32\DRIVERS\Rt64win7.sys 20:41:45.0969 6812 RTL8167 - ok 20:41:46.0000 6812 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 20:41:46.0016 6812 SamSs - ok 20:41:46.0047 6812 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys 20:41:46.0047 6812 sbp2port - ok 20:41:46.0078 6812 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll 20:41:46.0094 6812 SCardSvr - ok 20:41:46.0125 6812 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys 20:41:46.0125 6812 scfilter - ok 20:41:46.0203 6812 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll 20:41:46.0219 6812 Schedule - ok 20:41:46.0266 6812 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll 20:41:46.0266 6812 SCPolicySvc - ok 20:41:46.0312 6812 sdbus (111e0ebc0ad79cb0fa014b907b231cf0) C:\Windows\system32\drivers\sdbus.sys 20:41:46.0312 6812 sdbus - ok 20:41:46.0344 6812 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll 20:41:46.0359 6812 SDRSVC - ok 20:41:46.0390 6812 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 20:41:46.0390 6812 secdrv - ok 20:41:46.0422 6812 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll 20:41:46.0422 6812 seclogon - ok 20:41:46.0453 6812 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll 20:41:46.0468 6812 SENS - ok 20:41:46.0484 6812 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll 20:41:46.0500 6812 SensrSvc - ok 20:41:46.0531 6812 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 20:41:46.0531 6812 Serenum - ok 20:41:46.0578 6812 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 20:41:46.0593 6812 Serial - ok 20:41:46.0640 6812 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 20:41:46.0640 6812 sermouse - ok 20:41:46.0702 6812 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll 20:41:46.0702 6812 SessionEnv - ok 20:41:46.0734 6812 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys 20:41:46.0734 6812 sffdisk - ok 20:41:46.0765 6812 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys 20:41:46.0765 6812 sffp_mmc - ok 20:41:46.0780 6812 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys 20:41:46.0780 6812 sffp_sd - ok 20:41:46.0827 6812 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 20:41:46.0827 6812 sfloppy - ok 20:41:46.0905 6812 Sftfs (c6cc9297bd53e5229653303e556aa539) C:\Windows\system32\DRIVERS\Sftfslh.sys 20:41:46.0921 6812 Sftfs - ok 20:41:47.0030 6812 sftlist (13693b6354dd6e72dc5131da7d764b90) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe 20:41:47.0046 6812 sftlist - ok 20:41:47.0092 6812 Sftplay (390aa7bc52cee43f6790cdea1e776703) C:\Windows\system32\DRIVERS\Sftplaylh.sys 20:41:47.0092 6812 Sftplay - ok 20:41:47.0108 6812 Sftredir (617e29a0b0a2807466560d4c4e338d3e) C:\Windows\system32\DRIVERS\Sftredirlh.sys 20:41:47.0108 6812 Sftredir - ok 20:41:47.0155 6812 Sftvol (8f571f016fa1976f445147e9e6c8ae9b) C:\Windows\system32\DRIVERS\Sftvollh.sys 20:41:47.0155 6812 Sftvol - ok 20:41:47.0202 6812 sftvsa (c3cddd18f43d44ab713cf8c4916f7696) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe 20:41:47.0217 6812 sftvsa - ok 20:41:47.0248 6812 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll 20:41:47.0264 6812 SharedAccess - ok 20:41:47.0311 6812 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll 20:41:47.0326 6812 ShellHWDetection - ok 20:41:47.0358 6812 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 20:41:47.0358 6812 SiSRaid2 - ok 20:41:47.0389 6812 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 20:41:47.0389 6812 SiSRaid4 - ok 20:41:47.0404 6812 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 20:41:47.0420 6812 Smb - ok 20:41:47.0467 6812 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe 20:41:47.0467 6812 SNMPTRAP - ok 20:41:47.0482 6812 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 20:41:47.0482 6812 spldr - ok 20:41:47.0561 6812 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe 20:41:47.0561 6812 Spooler - ok 20:41:47.0732 6812 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe 20:41:47.0748 6812 sppsvc - ok 20:41:47.0826 6812 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll 20:41:47.0841 6812 sppuinotify - ok 20:41:47.0888 6812 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys 20:41:47.0904 6812 srv - ok 20:41:47.0935 6812 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys 20:41:47.0935 6812 srv2 - ok 20:41:47.0982 6812 SrvHsfHDA (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS 20:41:47.0982 6812 SrvHsfHDA - ok 20:41:48.0060 6812 SrvHsfV92 (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS 20:41:48.0091 6812 SrvHsfV92 - ok 20:41:48.0216 6812 SrvHsfWinac (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS 20:41:48.0231 6812 SrvHsfWinac - ok 20:41:48.0278 6812 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys 20:41:48.0278 6812 srvnet - ok 20:41:48.0325 6812 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll 20:41:48.0325 6812 SSDPSRV - ok 20:41:48.0356 6812 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll 20:41:48.0356 6812 SstpSvc - ok 20:41:48.0465 6812 STacSV (20e27aa5bcc01c2149830c05fe22f675) C:\Program Files\IDT\WDM\STacSV64.exe 20:41:48.0465 6812 STacSV - ok 20:41:48.0497 6812 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 20:41:48.0497 6812 stexstor - ok 20:41:48.0575 6812 STHDA (beb37ce4e7456f5efa52d783d1e06d8c) C:\Windows\system32\DRIVERS\stwrt64.sys 20:41:48.0575 6812 STHDA - ok 20:41:48.0653 6812 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll 20:41:48.0668 6812 stisvc - ok 20:41:48.0699 6812 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys 20:41:48.0699 6812 swenum - ok 20:41:48.0746 6812 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll 20:41:48.0762 6812 swprv - ok 20:41:48.0887 6812 SynTP (c447977ed2a4ae9346fe3a0579a34d7c) C:\Windows\system32\DRIVERS\SynTP.sys 20:41:48.0902 6812 SynTP - ok 20:41:49.0058 6812 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll 20:41:49.0074 6812 SysMain - ok 20:41:49.0199 6812 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll 20:41:49.0199 6812 TabletInputService - ok 20:41:49.0230 6812 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll 20:41:49.0245 6812 TapiSrv - ok 20:41:49.0261 6812 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll 20:41:49.0277 6812 TBS - ok 20:41:49.0433 6812 Tcpip (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\drivers\tcpip.sys 20:41:49.0448 6812 Tcpip - ok 20:41:49.0635 6812 TCPIP6 (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\DRIVERS\tcpip.sys 20:41:49.0651 6812 TCPIP6 - ok 20:41:49.0760 6812 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys 20:41:49.0760 6812 tcpipreg - ok 20:41:49.0791 6812 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 20:41:49.0791 6812 TDPIPE - ok 20:41:49.0838 6812 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys 20:41:49.0838 6812 TDTCP - ok 20:41:49.0885 6812 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys 20:41:49.0885 6812 tdx - ok 20:41:49.0932 6812 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys 20:41:49.0932 6812 TermDD - ok 20:41:49.0979 6812 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll 20:41:49.0994 6812 TermService - ok 20:41:50.0025 6812 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll 20:41:50.0025 6812 Themes - ok 20:41:50.0041 6812 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 20:41:50.0041 6812 THREADORDER - ok 20:41:50.0135 6812 tmactmon (e386dd8ec68c67ca3e2a3abdc1df5c56) C:\Windows\system32\DRIVERS\tmactmon.sys 20:41:50.0135 6812 tmactmon - ok 20:41:50.0197 6812 tmcomm (ab011c569487fd65c8944ddf8cbb2572) C:\Windows\system32\DRIVERS\tmcomm.sys 20:41:50.0197 6812 tmcomm - ok 20:41:50.0244 6812 tmevtmgr (8870a3d7305455b47adccd226f8e51bc) C:\Windows\system32\DRIVERS\tmevtmgr.sys 20:41:50.0244 6812 tmevtmgr - ok 20:41:50.0306 6812 tmtdi (065cb7d9278d778fb9ef62cead01433f) C:\Windows\system32\DRIVERS\tmtdi.sys 20:41:50.0306 6812 tmtdi - ok 20:41:50.0337 6812 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll 20:41:50.0337 6812 TrkWks - ok 20:41:50.0415 6812 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe 20:41:50.0415 6812 TrustedInstaller - ok 20:41:50.0462 6812 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys 20:41:50.0462 6812 tssecsrv - ok 20:41:50.0493 6812 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys 20:41:50.0509 6812 TsUsbFlt - ok 20:41:50.0571 6812 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys 20:41:50.0587 6812 tunnel - ok 20:41:50.0618 6812 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 20:41:50.0618 6812 uagp35 - ok 20:41:50.0665 6812 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys 20:41:50.0681 6812 udfs - ok 20:41:50.0712 6812 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe 20:41:50.0712 6812 UI0Detect - ok 20:41:50.0774 6812 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys 20:41:50.0774 6812 uliagpkx - ok 20:41:50.0805 6812 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys 20:41:50.0805 6812 umbus - ok 20:41:50.0852 6812 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 20:41:50.0852 6812 UmPass - ok 20:41:51.0024 6812 UNS (3a1ecef8d49fc1a786a6ccd5a86a8878) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe 20:41:51.0039 6812 UNS - ok 20:41:51.0149 6812 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll 20:41:51.0149 6812 upnphost - ok 20:41:51.0211 6812 USBAAPL64 (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys 20:41:51.0211 6812 USBAAPL64 - ok 20:41:51.0242 6812 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys 20:41:51.0258 6812 usbccgp - ok 20:41:51.0320 6812 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys 20:41:51.0320 6812 usbcir - ok 20:41:51.0336 6812 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys 20:41:51.0336 6812 usbehci - ok 20:41:51.0383 6812 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys 20:41:51.0398 6812 usbhub - ok 20:41:51.0429 6812 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys 20:41:51.0429 6812 usbohci - ok 20:41:51.0476 6812 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 20:41:51.0476 6812 usbprint - ok 20:41:51.0523 6812 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys 20:41:51.0523 6812 usbscan - ok 20:41:51.0554 6812 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS 20:41:51.0570 6812 USBSTOR - ok 20:41:51.0601 6812 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys 20:41:51.0601 6812 usbuhci - ok 20:41:51.0648 6812 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys 20:41:51.0648 6812 usbvideo - ok 20:41:51.0695 6812 usb_rndisx (70d05ee263568a742d14e1876df80532) C:\Windows\system32\DRIVERS\usb8023x.sys 20:41:51.0710 6812 usb_rndisx - ok 20:41:51.0726 6812 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll 20:41:51.0741 6812 UxSms - ok 20:41:51.0773 6812 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 20:41:51.0773 6812 VaultSvc - ok 20:41:51.0819 6812 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys 20:41:51.0819 6812 vdrvroot - ok 20:41:51.0882 6812 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe 20:41:51.0897 6812 vds - ok 20:41:51.0929 6812 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 20:41:51.0929 6812 vga - ok 20:41:51.0944 6812 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 20:41:51.0944 6812 VgaSave - ok 20:41:51.0991 6812 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys 20:41:51.0991 6812 vhdmp - ok 20:41:52.0022 6812 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys 20:41:52.0022 6812 viaide - ok 20:41:52.0038 6812 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys 20:41:52.0038 6812 volmgr - ok 20:41:52.0085 6812 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys 20:41:52.0100 6812 volmgrx - ok 20:41:52.0131 6812 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys 20:41:52.0131 6812 volsnap - ok 20:41:52.0178 6812 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 20:41:52.0178 6812 vsmraid - ok 20:41:52.0272 6812 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe 20:41:52.0287 6812 VSS - ok 20:41:52.0381 6812 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 20:41:52.0381 6812 vwifibus - ok 20:41:52.0412 6812 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 20:41:52.0412 6812 vwififlt - ok 20:41:52.0428 6812 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys 20:41:52.0428 6812 vwifimp - ok 20:41:52.0475 6812 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll 20:41:52.0490 6812 W32Time - ok 20:41:52.0506 6812 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 20:41:52.0506 6812 WacomPen - ok 20:41:52.0553 6812 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 20:41:52.0568 6812 WANARP - ok 20:41:52.0584 6812 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 20:41:52.0584 6812 Wanarpv6 - ok 20:41:52.0662 6812 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe 20:41:52.0693 6812 WatAdminSvc - ok 20:41:52.0787 6812 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe 20:41:52.0802 6812 wbengine - ok 20:41:52.0880 6812 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll 20:41:52.0896 6812 WbioSrvc - ok 20:41:52.0958 6812 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll 20:41:52.0958 6812 wcncsvc - ok 20:41:52.0974 6812 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll 20:41:52.0974 6812 WcsPlugInService - ok 20:41:53.0036 6812 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 20:41:53.0036 6812 Wd - ok 20:41:53.0083 6812 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 20:41:53.0099 6812 Wdf01000 - ok 20:41:53.0161 6812 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 20:41:53.0161 6812 WdiServiceHost - ok 20:41:53.0161 6812 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 20:41:53.0161 6812 WdiSystemHost - ok 20:41:53.0208 6812 wdkmd (94dc2bf6cbaaa95e369c3756d3115a76) C:\Windows\system32\DRIVERS\WDKMD.sys 20:41:53.0208 6812 wdkmd - ok 20:41:53.0255 6812 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll 20:41:53.0270 6812 WebClient - ok 20:41:53.0301 6812 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll 20:41:53.0317 6812 Wecsvc - ok 20:41:53.0333 6812 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll 20:41:53.0333 6812 wercplsupport - ok 20:41:53.0364 6812 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll 20:41:53.0379 6812 WerSvc - ok 20:41:53.0411 6812 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 20:41:53.0411 6812 WfpLwf - ok 20:41:53.0442 6812 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 20:41:53.0442 6812 WIMMount - ok 20:41:53.0457 6812 WinDefend - ok 20:41:53.0473 6812 WinHttpAutoProxySvc - ok 20:41:53.0535 6812 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll 20:41:53.0535 6812 Winmgmt - ok 20:41:53.0660 6812 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll 20:41:53.0691 6812 WinRM - ok 20:41:53.0801 6812 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUSB.sys 20:41:53.0801 6812 WinUsb - ok 20:41:53.0863 6812 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll 20:41:53.0879 6812 Wlansvc - ok 20:41:53.0972 6812 wlcrasvc (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 20:41:53.0972 6812 wlcrasvc - ok 20:41:54.0128 6812 wlidsvc (2bacd71123f42cea603f4e205e1ae337) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 20:41:54.0144 6812 wlidsvc - ok 20:41:54.0269 6812 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys 20:41:54.0269 6812 WmiAcpi - ok 20:41:54.0331 6812 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe 20:41:54.0331 6812 wmiApSrv - ok 20:41:54.0378 6812 WMPNetworkSvc - ok 20:41:54.0425 6812 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll 20:41:54.0425 6812 WPCSvc - ok 20:41:54.0471 6812 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll 20:41:54.0471 6812 WPDBusEnum - ok 20:41:54.0518 6812 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 20:41:54.0518 6812 ws2ifsl - ok 20:41:54.0534 6812 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll 20:41:54.0549 6812 wscsvc - ok 20:41:54.0549 6812 WSearch - ok 20:41:54.0690 6812 wuauserv (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll 20:41:54.0705 6812 wuauserv - ok 20:41:54.0815 6812 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys 20:41:54.0815 6812 WudfPf - ok 20:41:54.0846 6812 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys 20:41:54.0846 6812 WUDFRd - ok 20:41:54.0908 6812 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll 20:41:54.0908 6812 wudfsvc - ok 20:41:54.0939 6812 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll 20:41:54.0955 6812 WwanSvc - ok 20:41:55.0017 6812 yukonw7 (b3eeacf62445e24fbb2cd4b0fb4db026) C:\Windows\system32\DRIVERS\yk62x64.sys 20:41:55.0033 6812 yukonw7 - ok 20:41:55.0080 6812 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0 20:41:55.0298 6812 \Device\Harddisk0\DR0 - ok 20:41:55.0314 6812 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk1\DR1 20:41:55.0314 6812 \Device\Harddisk1\DR1 - ok 20:41:55.0314 6812 Boot (0x1200) (a102e52450ecbbaf30db10c3d91285df) \Device\Harddisk0\DR0\Partition0 20:41:55.0314 6812 \Device\Harddisk0\DR0\Partition0 - ok 20:41:55.0329 6812 Boot (0x1200) (1b2b148ebaa4c9957575eeb7ea547c25) \Device\Harddisk0\DR0\Partition1 20:41:55.0329 6812 \Device\Harddisk0\DR0\Partition1 - ok 20:41:55.0361 6812 Boot (0x1200) (a950c54b01aca0fc5e8e07f0b98500d0) \Device\Harddisk0\DR0\Partition2 20:41:55.0361 6812 \Device\Harddisk0\DR0\Partition2 - ok 20:41:55.0376 6812 Boot (0x1200) (56b31c37246c5418e4668d84f4090a3c) \Device\Harddisk0\DR0\Partition3 20:41:55.0376 6812 \Device\Harddisk0\DR0\Partition3 - ok 20:41:55.0376 6812 Boot (0x1200) (fe6cc591a432e6bc918cc38d32e124aa) \Device\Harddisk1\DR1\Partition0 20:41:55.0392 6812 \Device\Harddisk1\DR1\Partition0 - ok 20:41:55.0392 6812 ============================================================ 20:41:55.0392 6812 Scan finished 20:41:55.0392 6812 ============================================================ 20:41:55.0407 8564 Detected object count: 0 20:41:55.0407 8564 Actual detected object count: 0 20:42:33.0769 5412 ============================================================ 20:42:33.0769 5412 Scan started 20:42:33.0769 5412 Mode: Manual; 20:42:33.0769 5412 ============================================================ 20:42:34.0035 5412 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys 20:42:34.0035 5412 1394ohci - ok 20:42:34.0050 5412 Accelerometer (5c368f4b04ed2a923e6afca2d37baff5) C:\Windows\system32\DRIVERS\Accelerometer.sys 20:42:34.0050 5412 Accelerometer - ok 20:42:34.0113 5412 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys 20:42:34.0113 5412 ACPI - ok 20:42:34.0128 5412 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys 20:42:34.0144 5412 AcpiPmi - ok 20:42:34.0237 5412 AdobeFlashPlayerUpdateSvc (f3cd7b20b27d1772c946df993ff3635c) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 20:42:34.0237 5412 AdobeFlashPlayerUpdateSvc - ok 20:42:34.0284 5412 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 20:42:34.0300 5412 adp94xx - ok 20:42:34.0331 5412 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 20:42:34.0331 5412 adpahci - ok 20:42:34.0362 5412 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 20:42:34.0362 5412 adpu320 - ok 20:42:34.0393 5412 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll 20:42:34.0393 5412 AeLookupSvc - ok 20:42:34.0471 5412 AESTFilters (a6fb9db8f1a86861d955fd6975977ae0) C:\Program Files\IDT\WDM\AESTSr64.exe 20:42:34.0471 5412 AESTFilters - ok 20:42:34.0534 5412 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys 20:42:34.0534 5412 AFD - ok 20:42:34.0565 5412 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys 20:42:34.0565 5412 agp440 - ok 20:42:34.0612 5412 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe 20:42:34.0612 5412 ALG - ok 20:42:34.0627 5412 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys 20:42:34.0627 5412 aliide - ok 20:42:34.0674 5412 AMD External Events Utility (263570714ac4cf41208e647c77bd2a63) C:\Windows\system32\atiesrxx.exe 20:42:34.0674 5412 AMD External Events Utility - ok 20:42:34.0721 5412 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys 20:42:34.0721 5412 amdide - ok 20:42:34.0752 5412 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 20:42:34.0752 5412 AmdK8 - ok 20:42:35.0080 5412 amdkmdag (0eeafb005d334910bb0aee1941351b1e) C:\Windows\system32\DRIVERS\atikmdag.sys 20:42:35.0111 5412 amdkmdag - ok 20:42:35.0236 5412 amdkmdap (65f58cfb0bfdcebeae0164bb037545a8) C:\Windows\system32\DRIVERS\atikmpag.sys 20:42:35.0236 5412 amdkmdap - ok 20:42:35.0267 5412 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 20:42:35.0267 5412 AmdPPM - ok 20:42:35.0298 5412 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys 20:42:35.0298 5412 amdsata - ok 20:42:35.0329 5412 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 20:42:35.0329 5412 amdsbs - ok 20:42:35.0345 5412 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys 20:42:35.0345 5412 amdxata - ok 20:42:35.0392 5412 AMPPAL (7d9e301ab3247765702d0b65e2e47e50) C:\Windows\system32\DRIVERS\AMPPAL.sys 20:42:35.0392 5412 AMPPAL - ok 20:42:35.0407 5412 AMPPALP (7d9e301ab3247765702d0b65e2e47e50) C:\Windows\system32\DRIVERS\amppal.sys 20:42:35.0407 5412 AMPPALP - ok 20:42:35.0532 5412 AMPPALR3 (576134e43169810b560f0bb6fdee13f5) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe 20:42:35.0548 5412 AMPPALR3 - ok 20:42:35.0626 5412 Amsp (1b7d1f0a0dfadbc797c16364792a7aa5) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe 20:42:35.0626 5412 Amsp - ok 20:42:35.0735 5412 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys 20:42:35.0735 5412 AppID - ok 20:42:35.0766 5412 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll 20:42:35.0766 5412 AppIDSvc - ok 20:42:35.0797 5412 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll 20:42:35.0797 5412 Appinfo - ok 20:42:35.0875 5412 Apple Mobile Device (3debbecf665dcdde3a95d9b902010817) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 20:42:35.0875 5412 Apple Mobile Device - ok 20:42:35.0907 5412 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 20:42:35.0907 5412 arc - ok 20:42:35.0953 5412 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 20:42:35.0953 5412 arcsas - ok 20:42:35.0969 5412 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 20:42:35.0969 5412 AsyncMac - ok 20:42:36.0000 5412 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys 20:42:36.0000 5412 atapi - ok 20:42:36.0063 5412 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll 20:42:36.0078 5412 AudioEndpointBuilder - ok 20:42:36.0094 5412 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll 20:42:36.0094 5412 AudioSrv - ok 20:42:36.0141 5412 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll 20:42:36.0141 5412 AxInstSV - ok 20:42:36.0187 5412 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 20:42:36.0203 5412 b06bdrv - ok 20:42:36.0234 5412 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 20:42:36.0250 5412 b57nd60a - ok 20:42:36.0281 5412 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll 20:42:36.0281 5412 BDESVC - ok 20:42:36.0297 5412 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 20:42:36.0297 5412 Beep - ok 20:42:36.0359 5412 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll 20:42:36.0359 5412 BFE - ok 20:42:36.0406 5412 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll 20:42:36.0421 5412 BITS - ok 20:42:36.0468 5412 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 20:42:36.0468 5412 blbdrive - ok 20:42:36.0546 5412 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe 20:42:36.0546 5412 Bonjour Service - ok 20:42:36.0577 5412 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys 20:42:36.0577 5412 bowser - ok 20:42:36.0609 5412 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 20:42:36.0609 5412 BrFiltLo - ok 20:42:36.0624 5412 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 20:42:36.0624 5412 BrFiltUp - ok 20:42:36.0671 5412 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll 20:42:36.0671 5412 Browser - ok 20:42:36.0702 5412 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 20:42:36.0702 5412 Brserid - ok 20:42:36.0733 5412 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 20:42:36.0733 5412 BrSerWdm - ok 20:42:36.0749 5412 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 20:42:36.0749 5412 BrUsbMdm - ok 20:42:36.0780 5412 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 20:42:36.0780 5412 BrUsbSer - ok 20:42:36.0811 5412 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys 20:42:36.0811 5412 BthEnum - ok 20:42:36.0827 5412 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 20:42:36.0827 5412 BTHMODEM - ok 20:42:36.0858 5412 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys 20:42:36.0858 5412 BthPan - ok 20:42:36.0889 5412 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\Windows\System32\Drivers\BTHport.sys 20:42:36.0905 5412 BTHPORT - ok 20:42:36.0936 5412 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll 20:42:36.0952 5412 bthserv - ok 20:42:37.0030 5412 BTHSSecurityMgr (9e2af97302b9f4bf97e952a865eb31ae) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe 20:42:37.0045 5412 BTHSSecurityMgr - ok 20:42:37.0061 5412 BTHUSB (f188b7394d81010767b6df3178519a37) C:\Windows\System32\Drivers\BTHUSB.sys 20:42:37.0077 5412 BTHUSB - ok 20:42:37.0092 5412 btwampfl (7a2ce8c1bf4daa1f2766e21e9ca11078) C:\Windows\system32\drivers\btwampfl.sys 20:42:37.0092 5412 btwampfl - ok 20:42:37.0139 5412 btwaudio (a75bf6802a967f5aacecc3c67febdf55) C:\Windows\system32\drivers\btwaudio.sys 20:42:37.0139 5412 btwaudio - ok 20:42:37.0170 5412 btwavdt (d895dc213edbda5fcc53aad1f1e0e63b) C:\Windows\system32\drivers\btwavdt.sys 20:42:37.0170 5412 btwavdt - ok 20:42:37.0264 5412 btwdins (692f8648d7686d91e34a65ac698019d8) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe 20:42:37.0279 5412 btwdins - ok 20:42:37.0311 5412 btwl2cap (07096d2bc22ccb6cea5a532df0be8a75) C:\Windows\system32\DRIVERS\btwl2cap.sys 20:42:37.0311 5412 btwl2cap - ok 20:42:37.0326 5412 btwrchid (6d7aa2bde0135599c5f230d69db3b420) C:\Windows\system32\DRIVERS\btwrchid.sys 20:42:37.0326 5412 btwrchid - ok 20:42:37.0342 5412 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 20:42:37.0342 5412 cdfs - ok 20:42:37.0389 5412 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys 20:42:37.0389 5412 cdrom - ok 20:42:37.0420 5412 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll 20:42:37.0420 5412 CertPropSvc - ok 20:42:37.0435 5412 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 20:42:37.0435 5412 circlass - ok 20:42:37.0467 5412 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 20:42:37.0482 5412 CLFS - ok 20:42:37.0576 5412 CLKMSVC10_38F51D56 (524dc3807cb1746225f9d26add19c319) C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe 20:42:37.0591 5412 CLKMSVC10_38F51D56 - ok 20:42:37.0654 5412 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 20:42:37.0669 5412 clr_optimization_v2.0.50727_32 - ok 20:42:37.0747 5412 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 20:42:37.0747 5412 clr_optimization_v2.0.50727_64 - ok 20:42:37.0825 5412 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 20:42:37.0825 5412 clr_optimization_v4.0.30319_32 - ok 20:42:37.0888 5412 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 20:42:37.0888 5412 clr_optimization_v4.0.30319_64 - ok 20:42:37.0981 5412 clwvd (50f92c943f18b070f166d019dfab3d9a) C:\Windows\system32\DRIVERS\clwvd.sys 20:42:37.0981 5412 clwvd - ok 20:42:38.0013 5412 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 20:42:38.0013 5412 CmBatt - ok 20:42:38.0044 5412 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys 20:42:38.0044 5412 cmdide - ok 20:42:38.0106 5412 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys 20:42:38.0122 5412 CNG - ok 20:42:38.0137 5412 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 20:42:38.0137 5412 Compbatt - ok 20:42:38.0184 5412 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys 20:42:38.0184 5412 CompositeBus - ok 20:42:38.0184 5412 COMSysApp - ok 20:42:38.0215 5412 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 20:42:38.0231 5412 crcdisk - ok 20:42:38.0278 5412 CryptSvc (4f5414602e2544a4554d95517948b705) C:\Windows\system32\cryptsvc.dll 20:42:38.0278 5412 CryptSvc - ok 20:42:38.0403 5412 cvhsvc (72794d112cbaff3bc0c29bf7350d4741) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE 20:42:38.0418 5412 cvhsvc - ok 20:42:38.0434 5412 dc3d (7af9dac504fbd047cbc3e64ae52c92bf) C:\Windows\system32\DRIVERS\dc3d.sys 20:42:38.0434 5412 dc3d - ok 20:42:38.0496 5412 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll 20:42:38.0512 5412 DcomLaunch - ok 20:42:38.0559 5412 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll 20:42:38.0559 5412 defragsvc - ok 20:42:38.0605 5412 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys 20:42:38.0605 5412 DfsC - ok 20:42:38.0652 5412 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll 20:42:38.0652 5412 Dhcp - ok 20:42:38.0683 5412 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 20:42:38.0683 5412 discache - ok 20:42:38.0699 5412 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 20:42:38.0715 5412 Disk - ok 20:42:38.0746 5412 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll 20:42:38.0746 5412 Dnscache - ok 20:42:38.0793 5412 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll 20:42:38.0793 5412 dot3svc - ok 20:42:38.0824 5412 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll 20:42:38.0824 5412 DPS - ok 20:42:38.0855 5412 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 20:42:38.0855 5412 drmkaud - ok 20:42:38.0917 5412 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys 20:42:38.0933 5412 DXGKrnl - ok 20:42:38.0964 5412 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll 20:42:38.0964 5412 EapHost - ok 20:42:39.0105 5412 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 20:42:39.0120 5412 ebdrv - ok 20:42:39.0214 5412 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe 20:42:39.0214 5412 EFS - ok 20:42:39.0292 5412 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe 20:42:39.0307 5412 ehRecvr - ok 20:42:39.0339 5412 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe 20:42:39.0339 5412 ehSched - ok 20:42:39.0417 5412 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 20:42:39.0417 5412 elxstor - ok 20:42:39.0495 5412 EPSON_EB_RPCV4_01 (b5581646636759d0dafa8b008881c079) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE 20:42:39.0510 5412 EPSON_EB_RPCV4_01 - ok 20:42:39.0526 5412 EPSON_PM_RPCV4_01 (1e345f2a2d95da3190596e691cde9342) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE 20:42:39.0526 5412 EPSON_PM_RPCV4_01 - ok 20:42:39.0573 5412 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys 20:42:39.0573 5412 ErrDev - ok 20:42:39.0619 5412 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll 20:42:39.0635 5412 EventSystem - ok 20:42:39.0760 5412 EvtEng (e3a96d5ae6e5c7b5472011ba77353368) C:\Program Files\Intel\WiFi\bin\EvtEng.exe 20:42:39.0775 5412 EvtEng - ok 20:42:39.0885 5412 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 20:42:39.0885 5412 exfat - ok 20:42:39.0916 5412 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 20:42:39.0916 5412 fastfat - ok 20:42:39.0978 5412 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe 20:42:39.0994 5412 Fax - ok 20:42:40.0009 5412 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 20:42:40.0009 5412 fdc - ok 20:42:40.0025 5412 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll 20:42:40.0041 5412 fdPHost - ok 20:42:40.0041 5412 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll 20:42:40.0041 5412 FDResPub - ok 20:42:40.0056 5412 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 20:42:40.0056 5412 FileInfo - ok 20:42:40.0072 5412 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 20:42:40.0072 5412 Filetrace - ok 20:42:40.0087 5412 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 20:42:40.0087 5412 flpydisk - ok 20:42:40.0134 5412 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys 20:42:40.0150 5412 FltMgr - ok 20:42:40.0228 5412 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll 20:42:40.0228 5412 FontCache - ok 20:42:40.0306 5412 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 20:42:40.0321 5412 FontCache3.0.0.0 - ok 20:42:40.0384 5412 FPLService (cdc54db949d1e2bbf86b0c7ab86b912e) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe 20:42:40.0384 5412 FPLService - ok 20:42:40.0477 5412 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 20:42:40.0477 5412 FsDepends - ok 20:42:40.0509 5412 Fs_Rec (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys 20:42:40.0509 5412 Fs_Rec - ok 20:42:40.0555 5412 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys 20:42:40.0571 5412 fvevol - ok 20:42:40.0587 5412 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 20:42:40.0587 5412 gagp30kx - ok 20:42:40.0633 5412 GameConsoleService (d154305de6090e6e84e525f84bb08a06) C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe 20:42:40.0649 5412 GameConsoleService - ok 20:42:40.0680 5412 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 20:42:40.0680 5412 GEARAspiWDM - ok 20:42:40.0743 5412 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll 20:42:40.0758 5412 gpsvc - ok 20:42:40.0774 5412 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 20:42:40.0774 5412 hcw85cir - ok 20:42:40.0821 5412 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys 20:42:40.0836 5412 HdAudAddService - ok 20:42:40.0883 5412 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys 20:42:40.0883 5412 HDAudBus - ok 20:42:40.0899 5412 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 20:42:40.0899 5412 HidBatt - ok 20:42:40.0930 5412 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 20:42:40.0930 5412 HidBth - ok 20:42:40.0945 5412 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 20:42:40.0961 5412 HidIr - ok 20:42:40.0977 5412 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll 20:42:40.0977 5412 hidserv - ok 20:42:41.0008 5412 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys 20:42:41.0023 5412 HidUsb - ok 20:42:41.0055 5412 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll 20:42:41.0055 5412 hkmsvc - ok 20:42:41.0117 5412 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll 20:42:41.0117 5412 HomeGroupListener - ok 20:42:41.0164 5412 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll 20:42:41.0179 5412 HomeGroupProvider - ok 20:42:41.0273 5412 HP Support Assistant Service (13bb1114451c63bfb41ba7daa4d70a29) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe 20:42:41.0273 5412 HP Support Assistant Service - ok 20:42:41.0335 5412 HP Wireless Assistant Service (c930128c8f8ff03d8f8c42b570920d56) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe 20:42:41.0335 5412 HP Wireless Assistant Service - ok 20:42:41.0382 5412 HPClientSvc (3dc11a802353401332d49c3cbfbbe5fc) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe 20:42:41.0382 5412 HPClientSvc - ok 20:42:41.0445 5412 HPDrvMntSvc.exe (b19ff523b533a3f198b9239e1749c940) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe 20:42:41.0445 5412 HPDrvMntSvc.exe - ok 20:42:41.0507 5412 hpdskflt (4e0bec0f78096ffd6d3314b497fc49d3) C:\Windows\system32\DRIVERS\hpdskflt.sys 20:42:41.0507 5412 hpdskflt - ok 20:42:41.0585 5412 hpqwmiex (01091b900e15878b4434f9c726c4541d) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe 20:42:41.0601 5412 hpqwmiex - ok 20:42:41.0647 5412 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys 20:42:41.0647 5412 HpSAMD - ok 20:42:41.0663 5412 hpsrv (fc7c13b5a9e9be23b7ae72bbc7fdb278) C:\Windows\system32\Hpservice.exe 20:42:41.0679 5412 hpsrv - ok 20:42:41.0694 5412 HPWMISVC (491ce9b6321fb74e4b37af2c47f98434) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe 20:42:41.0694 5412 HPWMISVC - ok 20:42:41.0757 5412 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys 20:42:41.0772 5412 HTTP - ok 20:42:41.0803 5412 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys 20:42:41.0803 5412 hwpolicy - ok 20:42:41.0835 5412 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 20:42:41.0835 5412 i8042prt - ok 20:42:41.0897 5412 iaStor (2fdaec4b02729c48c0fd1b0b4695995b) C:\Windows\system32\DRIVERS\iaStor.sys 20:42:41.0913 5412 iaStor - ok 20:42:41.0975 5412 IAStorDataMgrSvc (d41861e56e7552c13674d7f147a02464) C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe 20:42:41.0975 5412 IAStorDataMgrSvc - ok 20:42:42.0022 5412 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys 20:42:42.0037 5412 iaStorV - ok 20:42:42.0178 5412 IconMan_R (d72bf0ae484f88399e8343e821c10d6a) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe 20:42:42.0193 5412 IconMan_R - ok 20:42:42.0303 5412 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 20:42:42.0318 5412 idsvc - ok 20:42:42.0880 5412 igfx (8cb8667f5a3b5515f2585f3254f3aaf7) C:\Windows\system32\DRIVERS\igdkmd64.sys 20:42:42.0927 5412 igfx - ok 20:42:43.0020 5412 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 20:42:43.0020 5412 iirsp - ok 20:42:43.0098 5412 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll 20:42:43.0114 5412 IKEEXT - ok 20:42:43.0145 5412 IntcDAud (fc727061c0f47c8059e88e05d5c8e381) C:\Windows\system32\DRIVERS\IntcDAud.sys 20:42:43.0145 5412 IntcDAud - ok 20:42:43.0176 5412 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys 20:42:43.0176 5412 intelide - ok 20:42:43.0691 5412 intelkmd (8cb8667f5a3b5515f2585f3254f3aaf7) C:\Windows\system32\DRIVERS\igdpmd64.sys 20:42:43.0753 5412 intelkmd - ok 20:42:43.0847 5412 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 20:42:43.0863 5412 intelppm - ok 20:42:43.0894 5412 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll 20:42:43.0894 5412 IPBusEnum - ok 20:42:43.0941 5412 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys 20:42:43.0941 5412 IpFilterDriver - ok 20:42:43.0987 5412 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll 20:42:43.0987 5412 iphlpsvc - ok 20:42:44.0019 5412 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys 20:42:44.0019 5412 IPMIDRV - ok 20:42:44.0065 5412 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 20:42:44.0065 5412 IPNAT - ok 20:42:44.0159 5412 iPod Service (46d249f9db7844cc01050a9345f0f61b) C:\Program Files\iPod\bin\iPodService.exe 20:42:44.0175 5412 iPod Service - ok 20:42:44.0190 5412 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 20:42:44.0190 5412 IRENUM - ok 20:42:44.0237 5412 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys 20:42:44.0237 5412 isapnp - ok 20:42:44.0268 5412 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys 20:42:44.0284 5412 iScsiPrt - ok 20:42:44.0284 5412 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys 20:42:44.0284 5412 kbdclass - ok 20:42:44.0315 5412 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys 20:42:44.0315 5412 kbdhid - ok 20:42:44.0362 5412 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 20:42:44.0362 5412 KeyIso - ok 20:42:44.0393 5412 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys 20:42:44.0393 5412 KSecDD - ok 20:42:44.0409 5412 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys 20:42:44.0409 5412 KSecPkg - ok 20:42:44.0440 5412 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 20:42:44.0440 5412 ksthunk - ok 20:42:44.0487 5412 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll 20:42:44.0487 5412 KtmRm - ok 20:42:44.0549 5412 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll 20:42:44.0549 5412 LanmanServer - ok 20:42:44.0596 5412 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll 20:42:44.0596 5412 LanmanWorkstation - ok 20:42:44.0643 5412 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 20:42:44.0643 5412 lltdio - ok 20:42:44.0674 5412 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll 20:42:44.0689 5412 lltdsvc - ok 20:42:44.0705 5412 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll 20:42:44.0705 5412 lmhosts - ok 20:42:44.0783 5412 LMS (c463a25f01c6237295917417c5e9e344) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe 20:42:44.0783 5412 LMS - ok 20:42:44.0830 5412 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 20:42:44.0830 5412 LSI_FC - ok 20:42:44.0861 5412 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 20:42:44.0861 5412 LSI_SAS - ok 20:42:44.0877 5412 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 20:42:44.0877 5412 LSI_SAS2 - ok 20:42:44.0892 5412 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 20:42:44.0892 5412 LSI_SCSI - ok 20:42:44.0923 5412 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 20:42:44.0923 5412 luafv - ok 20:42:44.0970 5412 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll 20:42:44.0970 5412 Mcx2Svc - ok 20:42:45.0001 5412 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 20:42:45.0001 5412 megasas - ok 20:42:45.0048 5412 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 20:42:45.0048 5412 MegaSR - ok 20:42:45.0079 5412 MEIx64 (a6518dcc42f7a6e999bb3bea8fd87567) C:\Windows\system32\DRIVERS\HECIx64.sys 20:42:45.0079 5412 MEIx64 - ok 20:42:45.0111 5412 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 20:42:45.0111 5412 MMCSS - ok 20:42:45.0126 5412 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 20:42:45.0126 5412 Modem - ok 20:42:45.0157 5412 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 20:42:45.0157 5412 monitor - ok 20:42:45.0189 5412 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 20:42:45.0189 5412 mouclass - ok 20:42:45.0204 5412 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 20:42:45.0204 5412 mouhid - ok 20:42:45.0251 5412 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys 20:42:45.0251 5412 mountmgr - ok 20:42:45.0298 5412 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys 20:42:45.0298 5412 mpio - ok 20:42:45.0329 5412 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 20:42:45.0329 5412 mpsdrv - ok 20:42:45.0407 5412 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll 20:42:45.0407 5412 MpsSvc - ok 20:42:45.0454 5412 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys 20:42:45.0454 5412 MRxDAV - ok 20:42:45.0501 5412 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys 20:42:45.0501 5412 mrxsmb - ok 20:42:45.0547 5412 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys 20:42:45.0563 5412 mrxsmb10 - ok 20:42:45.0579 5412 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys 20:42:45.0579 5412 mrxsmb20 - ok 20:42:45.0610 5412 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys 20:42:45.0610 5412 msahci - ok 20:42:45.0672 5412 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys 20:42:45.0672 5412 msdsm - ok 20:42:45.0703 5412 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe 20:42:45.0703 5412 MSDTC - ok 20:42:45.0735 5412 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 20:42:45.0735 5412 Msfs - ok 20:42:45.0750 5412 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 20:42:45.0750 5412 mshidkmdf - ok 20:42:45.0797 5412 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys 20:42:45.0797 5412 msisadrv - ok 20:42:45.0828 5412 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll 20:42:45.0828 5412 MSiSCSI - ok 20:42:45.0844 5412 msiserver - ok 20:42:45.0859 5412 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 20:42:45.0875 5412 MSKSSRV - ok 20:42:45.0891 5412 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 20:42:45.0891 5412 MSPCLOCK - ok 20:42:45.0906 5412 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 20:42:45.0906 5412 MSPQM - ok 20:42:45.0953 5412 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys 20:42:45.0953 5412 MsRPC - ok 20:42:46.0000 5412 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys 20:42:46.0000 5412 mssmbios - ok 20:42:46.0047 5412 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 20:42:46.0047 5412 MSTEE - ok 20:42:46.0062 5412 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 20:42:46.0062 5412 MTConfig - ok 20:42:46.0078 5412 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 20:42:46.0078 5412 Mup - ok 20:42:46.0171 5412 MyWiFiDHCPDNS (8f57db74bf5407a4cda6c8b005dc8dd0) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe 20:42:46.0187 5412 MyWiFiDHCPDNS - ok 20:42:46.0249 5412 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll 20:42:46.0249 5412 napagent - ok 20:42:46.0281 5412 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 20:42:46.0281 5412 NativeWifiP - ok 20:42:46.0327 5412 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys 20:42:46.0343 5412 NDIS - ok 20:42:46.0359 5412 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 20:42:46.0359 5412 NdisCap - ok 20:42:46.0359 5412 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 20:42:46.0359 5412 NdisTapi - ok 20:42:46.0405 5412 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys 20:42:46.0405 5412 Ndisuio - ok 20:42:46.0437 5412 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys 20:42:46.0452 5412 NdisWan - ok 20:42:46.0468 5412 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys 20:42:46.0483 5412 NDProxy - ok 20:42:46.0515 5412 Netaapl (6f4607e2333fe21e9e3ff8133a88b35b) C:\Windows\system32\DRIVERS\netaapl64.sys 20:42:46.0515 5412 Netaapl - ok 20:42:46.0546 5412 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 20:42:46.0561 5412 NetBIOS - ok 20:42:46.0593 5412 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys 20:42:46.0608 5412 NetBT - ok 20:42:46.0639 5412 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 20:42:46.0655 5412 Netlogon - ok 20:42:46.0686 5412 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll 20:42:46.0686 5412 Netman - ok 20:42:46.0717 5412 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll 20:42:46.0733 5412 netprofm - ok 20:42:46.0811 5412 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 20:42:46.0811 5412 NetTcpPortSharing - ok 20:42:47.0014 5412 netw5v64 (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys 20:42:47.0045 5412 netw5v64 - ok 20:42:47.0544 5412 NETwNs64 (50ad7f7040c22bb7caa59a0880875a21) C:\Windows\system32\DRIVERS\NETwNs64.sys 20:42:47.0575 5412 NETwNs64 - ok 20:42:47.0669 5412 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 20:42:47.0685 5412 nfrd960 - ok 20:42:47.0716 5412 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll 20:42:47.0731 5412 NlaSvc - ok 20:42:47.0763 5412 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 20:42:47.0763 5412 Npfs - ok 20:42:47.0794 5412 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll 20:42:47.0809 5412 nsi - ok 20:42:47.0825 5412 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 20:42:47.0825 5412 nsiproxy - ok 20:42:47.0934 5412 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys 20:42:47.0934 5412 Ntfs - ok 20:42:48.0028 5412 NuidFltr (317020d31f1696334679b9d0416eb62e) C:\Windows\system32\DRIVERS\NuidFltr.sys 20:42:48.0028 5412 NuidFltr - ok 20:42:48.0059 5412 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 20:42:48.0059 5412 Null - ok 20:42:48.0090 5412 nusb3hub (9a33100ac62a0463c49e47ee8e77083a) C:\Windows\system32\DRIVERS\nusb3hub.sys 20:42:48.0090 5412 nusb3hub - ok 20:42:48.0137 5412 nusb3xhc (87c321f7bee646b7ec6eedd6eb725741) C:\Windows\system32\DRIVERS\nusb3xhc.sys 20:42:48.0137 5412 nusb3xhc - ok 20:42:48.0168 5412 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys 20:42:48.0168 5412 nvraid - ok 20:42:48.0199 5412 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys 20:42:48.0199 5412 nvstor - ok 20:42:48.0246 5412 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys 20:42:48.0246 5412 nv_agp - ok 20:42:48.0277 5412 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys 20:42:48.0277 5412 ohci1394 - ok 20:42:48.0340 5412 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 20:42:48.0355 5412 ose - ok 20:42:48.0636 5412 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 20:42:48.0667 5412 osppsvc - ok 20:42:48.0761 5412 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 20:42:48.0761 5412 p2pimsvc - ok 20:42:48.0792 5412 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll 20:42:48.0808 5412 p2psvc - ok 20:42:48.0870 5412 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 20:42:48.0870 5412 Parport - ok 20:42:48.0901 5412 partmgr (e9766131eeade40a27dc27d2d68fba9c) C:\Windows\system32\drivers\partmgr.sys 20:42:48.0901 5412 partmgr - ok 20:42:48.0933 5412 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll 20:42:48.0933 5412 PcaSvc - ok 20:42:48.0979 5412 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys 20:42:48.0979 5412 pci - ok 20:42:48.0995 5412 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys 20:42:48.0995 5412 pciide - ok 20:42:49.0026 5412 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 20:42:49.0042 5412 pcmcia - ok 20:42:49.0073 5412 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 20:42:49.0073 5412 pcw - ok 20:42:49.0120 5412 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 20:42:49.0120 5412 PEAUTH - ok 20:42:49.0198 5412 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe 20:42:49.0198 5412 PerfHost - ok 20:42:49.0323 5412 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll 20:42:49.0323 5412 pla - ok 20:42:49.0369 5412 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll 20:42:49.0369 5412 PlugPlay - ok 20:42:49.0385 5412 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll 20:42:49.0401 5412 PNRPAutoReg - ok 20:42:49.0416 5412 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 20:42:49.0432 5412 PNRPsvc - ok 20:42:49.0479 5412 Point64 (4f0878fd62d5f7444c5f1c4c66d9d293) C:\Windows\system32\DRIVERS\point64.sys 20:42:49.0479 5412 Point64 - ok 20:42:49.0541 5412 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll 20:42:49.0541 5412 PolicyAgent - ok 20:42:49.0572 5412 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll 20:42:49.0572 5412 Power - ok 20:42:49.0619 5412 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys 20:42:49.0619 5412 PptpMiniport - ok 20:42:49.0650 5412 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 20:42:49.0650 5412 Processor - ok 20:42:49.0697 5412 ProfSvc (53e83f1f6cf9d62f32801cf66d8352a8) C:\Windows\system32\profsvc.dll 20:42:49.0697 5412 ProfSvc - ok 20:42:49.0728 5412 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 20:42:49.0744 5412 ProtectedStorage - ok 20:42:49.0775 5412 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys 20:42:49.0775 5412 Psched - ok 20:42:49.0869 5412 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 20:42:49.0884 5412 ql2300 - ok 20:42:49.0978 5412 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 20:42:49.0993 5412 ql40xx - ok 20:42:50.0025 5412 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll 20:42:50.0025 5412 QWAVE - ok 20:42:50.0040 5412 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 20:42:50.0040 5412 QWAVEdrv - ok 20:42:50.0071 5412 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 20:42:50.0071 5412 RasAcd - ok 20:42:50.0087 5412 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 20:42:50.0087 5412 RasAgileVpn - ok 20:42:50.0103 5412 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll 20:42:50.0118 5412 RasAuto - ok 20:42:50.0149 5412 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys 20:42:50.0149 5412 Rasl2tp - ok 20:42:50.0212 5412 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll 20:42:50.0212 5412 RasMan - ok 20:42:50.0243 5412 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 20:42:50.0243 5412 RasPppoe - ok 20:42:50.0259 5412 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 20:42:50.0259 5412 RasSstp - ok 20:42:50.0290 5412 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys 20:42:50.0305 5412 rdbss - ok 20:42:50.0321 5412 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 20:42:50.0321 5412 rdpbus - ok 20:42:50.0337 5412 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 20:42:50.0337 5412 RDPCDD - ok 20:42:50.0352 5412 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 20:42:50.0352 5412 RDPENCDD - ok 20:42:50.0368 5412 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 20:42:50.0368 5412 RDPREFMP - ok 20:42:50.0399 5412 RDPWD (e61608aa35e98999af9aaeeea6114b0a) C:\Windows\system32\drivers\RDPWD.sys 20:42:50.0415 5412 RDPWD - ok 20:42:50.0446 5412 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys 20:42:50.0446 5412 rdyboost - ok 20:42:50.0571 5412 RegSrvc (fd11c1287d38a46fb72353e14d50089c) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe 20:42:50.0586 5412 RegSrvc - ok 20:42:50.0617 5412 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll 20:42:50.0617 5412 RemoteAccess - ok 20:42:50.0649 5412 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll 20:42:50.0664 5412 RemoteRegistry - ok 20:42:50.0711 5412 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys 20:42:50.0727 5412 RFCOMM - ok 20:42:50.0758 5412 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll 20:42:50.0773 5412 RpcEptMapper - ok 20:42:50.0789 5412 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe 20:42:50.0789 5412 RpcLocator - ok 20:42:50.0851 5412 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll 20:42:50.0867 5412 RpcSs - ok 20:42:50.0898 5412 RSPCIESTOR (1f5e7af59b390261a85f5bedb1bb88b3) C:\Windows\system32\DRIVERS\RtsPStor.sys 20:42:50.0898 5412 RSPCIESTOR - ok 20:42:50.0929 5412 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 20:42:50.0929 5412 rspndr - ok 20:42:50.0976 5412 RTL8167 (ed5873f7dfb2f96d37f13322211b6bdc) C:\Windows\system32\DRIVERS\Rt64win7.sys 20:42:50.0976 5412 RTL8167 - ok 20:42:51.0039 5412 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 20:42:51.0039 5412 SamSs - ok 20:42:51.0070 5412 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys 20:42:51.0070 5412 sbp2port - ok 20:42:51.0101 5412 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll 20:42:51.0117 5412 SCardSvr - ok 20:42:51.0163 5412 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys 20:42:51.0163 5412 scfilter - ok 20:42:51.0241 5412 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll 20:42:51.0257 5412 Schedule - ok 20:42:51.0304 5412 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll 20:42:51.0304 5412 SCPolicySvc - ok 20:42:51.0351 5412 sdbus (111e0ebc0ad79cb0fa014b907b231cf0) C:\Windows\system32\drivers\sdbus.sys 20:42:51.0351 5412 sdbus - ok 20:42:51.0382 5412 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll 20:42:51.0382 5412 SDRSVC - ok 20:42:51.0397 5412 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 20:42:51.0397 5412 secdrv - ok 20:42:51.0444 5412 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll 20:42:51.0444 5412 seclogon - ok 20:42:51.0475 5412 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll 20:42:51.0475 5412 SENS - ok 20:42:51.0491 5412 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll 20:42:51.0507 5412 SensrSvc - ok 20:42:51.0538 5412 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 20:42:51.0538 5412 Serenum - ok 20:42:51.0569 5412 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 20:42:51.0569 5412 Serial - ok 20:42:51.0600 5412 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 20:42:51.0600 5412 sermouse - ok 20:42:51.0663 5412 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll 20:42:51.0663 5412 SessionEnv - ok 20:42:51.0694 5412 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys 20:42:51.0709 5412 sffdisk - ok 20:42:51.0725 5412 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys 20:42:51.0725 5412 sffp_mmc - ok 20:42:51.0741 5412 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys 20:42:51.0741 5412 sffp_sd - ok 20:42:51.0772 5412 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 20:42:51.0772 5412 sfloppy - ok 20:42:51.0850 5412 Sftfs (c6cc9297bd53e5229653303e556aa539) C:\Windows\system32\DRIVERS\Sftfslh.sys 20:42:51.0865 5412 Sftfs - ok 20:42:51.0959 5412 sftlist (13693b6354dd6e72dc5131da7d764b90) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe 20:42:51.0975 5412 sftlist - ok 20:42:51.0990 5412 Sftplay (390aa7bc52cee43f6790cdea1e776703) C:\Windows\system32\DRIVERS\Sftplaylh.sys 20:42:52.0006 5412 Sftplay - ok 20:42:52.0021 5412 Sftredir (617e29a0b0a2807466560d4c4e338d3e) C:\Windows\system32\DRIVERS\Sftredirlh.sys 20:42:52.0021 5412 Sftredir - ok 20:42:52.0053 5412 Sftvol (8f571f016fa1976f445147e9e6c8ae9b) C:\Windows\system32\DRIVERS\Sftvollh.sys 20:42:52.0053 5412 Sftvol - ok 20:42:52.0099 5412 sftvsa (c3cddd18f43d44ab713cf8c4916f7696) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe 20:42:52.0099 5412 sftvsa - ok 20:42:52.0146 5412 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll 20:42:52.0162 5412 SharedAccess - ok 20:42:52.0209 5412 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll 20:42:52.0209 5412 ShellHWDetection - ok 20:42:52.0240 5412 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 20:42:52.0240 5412 SiSRaid2 - ok 20:42:52.0271 5412 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 20:42:52.0271 5412 SiSRaid4 - ok 20:42:52.0302 5412 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 20:42:52.0302 5412 Smb - ok 20:42:52.0349 5412 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe 20:42:52.0349 5412 SNMPTRAP - ok 20:42:52.0365 5412 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 20:42:52.0365 5412 spldr - ok 20:42:52.0443 5412 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe 20:42:52.0443 5412 Spooler - ok 20:42:52.0614 5412 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe 20:42:52.0645 5412 sppsvc - ok 20:42:52.0708 5412 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll 20:42:52.0723 5412 sppuinotify - ok 20:42:52.0770 5412 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys 20:42:52.0786 5412 srv - ok 20:42:52.0801 5412 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys 20:42:52.0817 5412 srv2 - ok 20:42:52.0848 5412 SrvHsfHDA (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS 20:42:52.0848 5412 SrvHsfHDA - ok 20:42:52.0926 5412 SrvHsfV92 (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS 20:42:52.0942 5412 SrvHsfV92 - ok 20:42:53.0067 5412 SrvHsfWinac (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS 20:42:53.0082 5412 SrvHsfWinac - ok 20:42:53.0113 5412 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys 20:42:53.0113 5412 srvnet - ok 20:42:53.0145 5412 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll 20:42:53.0145 5412 SSDPSRV - ok 20:42:53.0160 5412 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll 20:42:53.0176 5412 SstpSvc - ok 20:42:53.0269 5412 STacSV (20e27aa5bcc01c2149830c05fe22f675) C:\Program Files\IDT\WDM\STacSV64.exe 20:42:53.0269 5412 STacSV - ok 20:42:53.0316 5412 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 20:42:53.0316 5412 stexstor - ok 20:42:53.0363 5412 STHDA (beb37ce4e7456f5efa52d783d1e06d8c) C:\Windows\system32\DRIVERS\stwrt64.sys 20:42:53.0379 5412 STHDA - ok 20:42:53.0425 5412 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll 20:42:53.0441 5412 stisvc - ok 20:42:53.0472 5412 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys 20:42:53.0472 5412 swenum - ok 20:42:53.0519 5412 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll 20:42:53.0535 5412 swprv - ok 20:42:53.0613 5412 SynTP (c447977ed2a4ae9346fe3a0579a34d7c) C:\Windows\system32\DRIVERS\SynTP.sys 20:42:53.0644 5412 SynTP - ok 20:42:53.0784 5412 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll 20:42:53.0800 5412 SysMain - ok 20:42:53.0893 5412 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll 20:42:53.0909 5412 TabletInputService - ok 20:42:53.0940 5412 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll 20:42:53.0940 5412 TapiSrv - ok 20:42:53.0971 5412 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll 20:42:53.0971 5412 TBS - ok 20:42:54.0112 5412 Tcpip (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\drivers\tcpip.sys 20:42:54.0127 5412 Tcpip - ok 20:42:54.0299 5412 TCPIP6 (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\DRIVERS\tcpip.sys 20:42:54.0315 5412 TCPIP6 - ok 20:42:54.0408 5412 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys 20:42:54.0408 5412 tcpipreg - ok 20:42:54.0439 5412 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 20:42:54.0439 5412 TDPIPE - ok 20:42:54.0471 5412 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys 20:42:54.0471 5412 TDTCP - ok 20:42:54.0517 5412 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys 20:42:54.0517 5412 tdx - ok 20:42:54.0549 5412 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys 20:42:54.0549 5412 TermDD - ok 20:42:54.0595 5412 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll 20:42:54.0611 5412 TermService - ok 20:42:54.0642 5412 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll 20:42:54.0642 5412 Themes - ok 20:42:54.0658 5412 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 20:42:54.0658 5412 THREADORDER - ok 20:42:54.0705 5412 tmactmon (e386dd8ec68c67ca3e2a3abdc1df5c56) C:\Windows\system32\DRIVERS\tmactmon.sys 20:42:54.0705 5412 tmactmon - ok 20:42:54.0736 5412 tmcomm (ab011c569487fd65c8944ddf8cbb2572) C:\Windows\system32\DRIVERS\tmcomm.sys 20:42:54.0736 5412 tmcomm - ok 20:42:54.0751 5412 tmevtmgr (8870a3d7305455b47adccd226f8e51bc) C:\Windows\system32\DRIVERS\tmevtmgr.sys 20:42:54.0751 5412 tmevtmgr - ok 20:42:54.0767 5412 tmtdi (065cb7d9278d778fb9ef62cead01433f) C:\Windows\system32\DRIVERS\tmtdi.sys 20:42:54.0767 5412 tmtdi - ok 20:42:54.0798 5412 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll 20:42:54.0814 5412 TrkWks - ok 20:42:54.0876 5412 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe 20:42:54.0876 5412 TrustedInstaller - ok 20:42:54.0939 5412 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys 20:42:54.0939 5412 tssecsrv - ok 20:42:54.0970 5412 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys 20:42:54.0970 5412 TsUsbFlt - ok 20:42:55.0017 5412 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys 20:42:55.0017 5412 tunnel - ok 20:42:55.0048 5412 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 20:42:55.0063 5412 uagp35 - ok 20:42:55.0110 5412 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys 20:42:55.0110 5412 udfs - ok 20:42:55.0157 5412 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe 20:42:55.0157 5412 UI0Detect - ok 20:42:55.0204 5412 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys 20:42:55.0204 5412 uliagpkx - ok 20:42:55.0219 5412 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys 20:42:55.0219 5412 umbus - ok 20:42:55.0251 5412 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 20:42:55.0251 5412 UmPass - ok 20:42:55.0438 5412 UNS (3a1ecef8d49fc1a786a6ccd5a86a8878) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe 20:42:55.0453 5412 UNS - ok 20:42:55.0547 5412 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll 20:42:55.0547 5412 upnphost - ok 20:42:55.0609 5412 USBAAPL64 (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys 20:42:55.0609 5412 USBAAPL64 - ok 20:42:55.0641 5412 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys 20:42:55.0641 5412 usbccgp - ok 20:42:55.0672 5412 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys 20:42:55.0672 5412 usbcir - ok 20:42:55.0703 5412 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys 20:42:55.0703 5412 usbehci - ok 20:42:55.0734 5412 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys 20:42:55.0734 5412 usbhub - ok 20:42:55.0765 5412 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys 20:42:55.0765 5412 usbohci - ok 20:42:55.0797 5412 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 20:42:55.0797 5412 usbprint - ok 20:42:55.0843 5412 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys 20:42:55.0843 5412 usbscan - ok 20:42:55.0859 5412 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS 20:42:55.0875 5412 USBSTOR - ok 20:42:55.0906 5412 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys 20:42:55.0906 5412 usbuhci - ok 20:42:55.0937 5412 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys 20:42:55.0953 5412 usbvideo - ok 20:42:55.0984 5412 usb_rndisx (70d05ee263568a742d14e1876df80532) C:\Windows\system32\DRIVERS\usb8023x.sys 20:42:55.0984 5412 usb_rndisx - ok 20:42:56.0015 5412 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll 20:42:56.0015 5412 UxSms - ok 20:42:56.0062 5412 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 20:42:56.0062 5412 VaultSvc - ok 20:42:56.0093 5412 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys 20:42:56.0093 5412 vdrvroot - ok 20:42:56.0155 5412 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe 20:42:56.0155 5412 vds - ok 20:42:56.0202 5412 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 20:42:56.0202 5412 vga - ok 20:42:56.0218 5412 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 20:42:56.0218 5412 VgaSave - ok 20:42:56.0265 5412 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys 20:42:56.0265 5412 vhdmp - ok 20:42:56.0280 5412 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys 20:42:56.0280 5412 viaide - ok 20:42:56.0296 5412 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys 20:42:56.0296 5412 volmgr - ok 20:42:56.0343 5412 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys 20:42:56.0358 5412 volmgrx - ok 20:42:56.0405 5412 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys 20:42:56.0405 5412 volsnap - ok 20:42:56.0436 5412 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 20:42:56.0436 5412 vsmraid - ok 20:42:56.0530 5412 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe 20:42:56.0545 5412 VSS - ok 20:42:56.0639 5412 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 20:42:56.0639 5412 vwifibus - ok 20:42:56.0670 5412 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 20:42:56.0670 5412 vwififlt - ok 20:42:56.0686 5412 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys 20:42:56.0686 5412 vwifimp - ok 20:42:56.0733 5412 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll 20:42:56.0733 5412 W32Time - ok 20:42:56.0764 5412 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 20:42:56.0764 5412 WacomPen - ok 20:42:56.0795 5412 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 20:42:56.0795 5412 WANARP - ok 20:42:56.0795 5412 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 20:42:56.0811 5412 Wanarpv6 - ok 20:42:56.0904 5412 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe 20:42:56.0904 5412 WatAdminSvc - ok 20:42:57.0013 5412 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe 20:42:57.0029 5412 wbengine - ok 20:42:57.0107 5412 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll 20:42:57.0123 5412 WbioSrvc - ok 20:42:57.0185 5412 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll 20:42:57.0185 5412 wcncsvc - ok 20:42:57.0216 5412 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll 20:42:57.0216 5412 WcsPlugInService - ok 20:42:57.0263 5412 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 20:42:57.0263 5412 Wd - ok 20:42:57.0310 5412 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 20:42:57.0325 5412 Wdf01000 - ok 20:42:57.0357 5412 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 20:42:57.0357 5412 WdiServiceHost - ok 20:42:57.0357 5412 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 20:42:57.0372 5412 WdiSystemHost - ok 20:42:57.0388 5412 wdkmd (94dc2bf6cbaaa95e369c3756d3115a76) C:\Windows\system32\DRIVERS\WDKMD.sys 20:42:57.0388 5412 wdkmd - ok 20:42:57.0435 5412 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll 20:42:57.0435 5412 WebClient - ok 20:42:57.0466 5412 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll 20:42:57.0466 5412 Wecsvc - ok 20:42:57.0497 5412 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll 20:42:57.0497 5412 wercplsupport - ok 20:42:57.0513 5412 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll 20:42:57.0513 5412 WerSvc - ok 20:42:57.0559 5412 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 20:42:57.0559 5412 WfpLwf - ok 20:42:57.0575 5412 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 20:42:57.0575 5412 WIMMount - ok 20:42:57.0606 5412 WinDefend - ok 20:42:57.0606 5412 WinHttpAutoProxySvc - ok 20:42:57.0669 5412 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll 20:42:57.0669 5412 Winmgmt - ok 20:42:57.0778 5412 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll 20:42:57.0793 5412 WinRM - ok 20:42:57.0903 5412 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUSB.sys 20:42:57.0903 5412 WinUsb - ok 20:42:57.0965 5412 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll 20:42:57.0981 5412 Wlansvc - ok 20:42:58.0043 5412 wlcrasvc (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 20:42:58.0043 5412 wlcrasvc - ok 20:42:58.0199 5412 wlidsvc (2bacd71123f42cea603f4e205e1ae337) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 20:42:58.0215 5412 wlidsvc - ok 20:42:58.0308 5412 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys 20:42:58.0324 5412 WmiAcpi - ok 20:42:58.0386 5412 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe 20:42:58.0386 5412 wmiApSrv - ok 20:42:58.0417 5412 WMPNetworkSvc - ok 20:42:58.0449 5412 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll 20:42:58.0464 5412 WPCSvc - ok 20:42:58.0495 5412 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll 20:42:58.0511 5412 WPDBusEnum - ok 20:42:58.0527 5412 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 20:42:58.0527 5412 ws2ifsl - ok 20:42:58.0558 5412 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll 20:42:58.0558 5412 wscsvc - ok 20:42:58.0573 5412 WSearch - ok 20:42:58.0698 5412 wuauserv (9df12edbc698b0bc353b3ef84861e430) C:\Windows\system32\wuaueng.dll 20:42:58.0714 5412 wuauserv - ok 20:42:58.0823 5412 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys 20:42:58.0823 5412 WudfPf - ok 20:42:58.0854 5412 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys 20:42:58.0854 5412 WUDFRd - ok 20:42:58.0901 5412 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll 20:42:58.0901 5412 wudfsvc - ok 20:42:58.0932 5412 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll 20:42:58.0948 5412 WwanSvc - ok 20:42:58.0995 5412 yukonw7 (b3eeacf62445e24fbb2cd4b0fb4db026) C:\Windows\system32\DRIVERS\yk62x64.sys 20:42:58.0995 5412 yukonw7 - ok 20:42:59.0026 5412 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0 20:42:59.0229 5412 \Device\Harddisk0\DR0 - ok 20:42:59.0229 5412 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk1\DR1 20:42:59.0244 5412 \Device\Harddisk1\DR1 - ok 20:42:59.0244 5412 Boot (0x1200) (a102e52450ecbbaf30db10c3d91285df) \Device\Harddisk0\DR0\Partition0 20:42:59.0244 5412 \Device\Harddisk0\DR0\Partition0 - ok 20:42:59.0260 5412 Boot (0x1200) (1b2b148ebaa4c9957575eeb7ea547c25) \Device\Harddisk0\DR0\Partition1 20:42:59.0260 5412 \Device\Harddisk0\DR0\Partition1 - ok 20:42:59.0291 5412 Boot (0x1200) (a950c54b01aca0fc5e8e07f0b98500d0) \Device\Harddisk0\DR0\Partition2 20:42:59.0291 5412 \Device\Harddisk0\DR0\Partition2 - ok 20:42:59.0307 5412 Boot (0x1200) (56b31c37246c5418e4668d84f4090a3c) \Device\Harddisk0\DR0\Partition3 20:42:59.0307 5412 \Device\Harddisk0\DR0\Partition3 - ok 20:42:59.0307 5412 Boot (0x1200) (fe6cc591a432e6bc918cc38d32e124aa) \Device\Harddisk1\DR1\Partition0 20:42:59.0307 5412 \Device\Harddisk1\DR1\Partition0 - ok 20:42:59.0322 5412 ============================================================ 20:42:59.0322 5412 Scan finished 20:42:59.0322 5412 ============================================================ 20:42:59.0322 5016 Detected object count: 0 20:42:59.0322 5016 Actual detected object count: 0 20:44:06.0476 6172 Deinitialize success

Attachments:

Post #6
Hi shucky,

Please do the following

Refer to the ComboFix User's Guide

  • Download ComboFix from one of these locations:

    Link 1
    Link 2

    * IMPORTANT !!! Place ComboFix.exe on your Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with ComboFix.
    You can get help on disabling your protection programs here
  • Double click on ComboFix.exe & follow the prompts.
  • Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.
  • When finished, it shall produce a log for you. Post that log in your next reply

    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

    ———————————————————————————————
  • Ensure your AntiVirus and AntiSpyware applications are re-enabled.

    ———————————————————————————————

NOTE: If you encounter a message "illegal operation attempted on registry key that has been marked for deletion" and no programs will run - please just reboot and that will resolve that error.
Post #7
G'day Noodle I'm not having any luck with the combofix, it'll run its scan then I've waited for over an hour for it to produce a log which never happens I've tried a couple times now with same results. I disabled my av both times before running it as well. Cheers
Post #8
Hi shucky,

Does your computer freeze in the middle of running ComboFix? Do you know what stage ComboFix gets up to? Can you check your C:\ drive for the presence of ComboFix.txt or QooBox?
Post #9
G'day Noodle Combofix got up to the part where it produces the log report however as I have stated twice I waited for over an hour and no report showed up as far as the pc freezing I dont think so cause the mouse will move and I opened the IE just to see if it had froze.. I'll try again with it this evening, for the QooBox the search dont show/find anything, Combofix is on my desktop. Cheers
Post #10
Hi shucky,

Thanks for the information. Don't search for it. Open My Computer then double click on your C drive. Look for a folder called QooBox or a file called ComboFix.txt. Let me know if either exist. Thanks!
Post #11
Morning Noodle Here is the combofix log, ComboFix 12-06-19.03 - Marion 20/06/2012 19:19:00.2.8 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.61.1033.18.8140.6115 [GMT 9.5:30] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: Trend Micro Titanium Internet Security 2012 *Disabled/Updated* {7193B549-236F-55EE-9AEC-F65279E59A92} SP: Trend Micro Titanium Internet Security 2012 *Disabled/Updated* {CAF254AD-0555-5A60-A05C-CD200262D02F} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . —- Previous Run ——- . c:\windows\SwSys1.bmp c:\windows\SwSys2.bmp . . ((((((((((((((((((((((((( Files Created from 2012-05-20 to 2012-06-20 ))))))))))))))))))))))))))))))) . . 2012-06-20 09:54 . 2012-06-20 09:54 ——– d—–w- c:\users\Default\AppData\Local\temp 2012-06-20 09:54 . 2012-06-20 09:54 ——– d—–w- c:\users\carl\AppData\Local\temp 2012-06-17 07:57 . 2012-06-17 08:08 ——– d—–w- c:\users\carl\AppData\Roaming\Windows Live Writer 2012-06-17 07:57 . 2012-06-17 07:57 ——– d—–w- c:\users\carl\AppData\Local\Windows Live Writer 2012-06-17 07:05 . 2012-06-17 07:05 ——– d—–w- c:\users\carl\AppData\Roaming\ZumoDrive 2012-06-15 21:58 . 2012-06-15 21:58 ——– d—–w- c:\program files\Microsoft IntelliPoint 2012-06-15 21:51 . 2012-05-04 11:00 366592 —-a-w- c:\windows\system32\qdvd.dll 2012-06-15 21:51 . 2012-05-04 09:59 514560 —-a-w- c:\windows\SysWow64\qdvd.dll 2012-06-15 21:06 . 2012-06-15 21:06 ——– d—–w- c:\program files (x86)\Trend Micro 2012-06-14 19:07 . 2012-05-18 01:59 1392128 —-a-w- c:\windows\system32\wininet.dll 2012-06-13 19:14 . 2012-04-26 05:41 77312 —-a-w- c:\windows\system32\rdpwsx.dll 2012-06-12 19:26 . 2012-06-12 19:26 426184 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-06-12 19:26 . 2011-06-27 00:18 70344 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-03-30 11:35 . 2012-05-11 02:46 1918320 —-a-w- c:\windows\system32\drivers\tcpip.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2011-05-19 284440] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-12-31 336384] "NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2011-12-03 113288] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696] "HPOSD"="c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" [2011-01-27 318520] "FUFAXSTM"="c:\program files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe" [2009-06-04 843776] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-12-07 421736] "HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2011-07-11 574008] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-7-30 1132320] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . R2 Amsp;Trend Micro Solution Platform;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe [x] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-12 257224] R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protocol;c:\windows\system32\DRIVERS\amppal.sys [x] R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-07-27 340240] R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys [x] R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x] R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x] R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x] R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x] R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x] R4 CLKMSVC10_38F51D56;CyberLink Product - 2012/01/30 07:11;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2011-02-24 241648] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184] S1 tmevtmgr;tmevtmgr;c:\windows\system32\DRIVERS\tmevtmgr.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2011-12-03 89600] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-08-31 1166848] S2 BTHSSecurityMgr;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-06-03 134928] S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624] S2 FPLService;TrueSuiteService;c:\program files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2010-12-07 249672] S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-09-09 86072] S2 HP Wireless Assistant Service;HP Wireless Assistant Service;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-07-21 103992] S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-08-06 291896] S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-09-01 227896] S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [x] S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2011-07-11 26680] S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-05-19 13592] S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-12-03 2413056] S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-09-30 508776] S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-11-23 2656280] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x] S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Virtual Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys [x] S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [x] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x] S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [x] S3 dc3d;MS Hardware Device Detection Driver;c:\windows\system32\DRIVERS\dc3d.sys [x] S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x] S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [x] S3 MEIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x] S3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys [x] S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [x] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [x] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [x] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [x] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [x] S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-09-30 219496] S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x] S3 wdkmd;Intel WiDi KMD;c:\windows\system32\DRIVERS\WDKMD.sys [x] . . Contents of the 'Scheduled Tasks' folder . 2012-06-20 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-12 19:26] . 2012-06-12 c:\windows\Tasks\HPCeeScheduleForCARL-HP$.job - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 06:15] . 2012-06-01 c:\windows\Tasks\HPCeeScheduleForMarion.job - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 06:15] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-12-17 167960] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-12-17 391704] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-12-17 418328] "HPWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe" [2010-07-21 8192] "Trend Micro Titanium"="c:\program files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe" [2012-02-27 1304792] "IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-07-27 1935120] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2011-12-03 1128448] "Trend Micro Client Framework"="c:\program files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [2012-02-27 213824] "IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 2417032] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 . ——- Supplementary Scan ——- . uStart Page = hxxp://ninemsn.com/ uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: Send image to &Bluetooth Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm TCP: DhcpNameServer = 10.0.0.138 . - - - - ORPHANS REMOVED - - - - . WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-{6F44AF95-3CDE-4513-AD3F-6D45F17BF324} - c:\program files (x86)\InstallShield Installation Information\{6F44AF95-3CDE-4513-AD3F-6D45F17BF324}\setup.exe . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2012-06-20 19:25:45 ComboFix-quarantined-files.txt 2012-06-20 09:55 . Pre-Run: 587,989,434,368 bytes free Post-Run: 587,845,595,136 bytes free . - - End Of File - - 2108A7CF8A3D12FE3AC8603650FDFDC4
Post #12
Hi shucky,

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.

Updating Java:
  • Download the latest version of Java Runtime Environment (JRE) 7 Update 5.
  • After the download completes, close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
  • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Double click the Java setup file you just downloaded and follow the prompts to begin the installation.
Now to Clean out the Java cache:

Go into the Control Panel and double-click the Java Icon. [external image: Posted Image]
  • Under Temporary Internet Files, click the Settings… button
  • click the Delete Files button.
  • There are three options in the window to clear the cache - Leave all 3 Checked
    • Downloaded Applets
      Downloaded Applications
      Other Files
  • Click OK on Delete Temporary Files Window
    Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
  • Click OK to leave the Temporary Files Settings
  • Click OK to leave the Java Control Panel.
===================================================

ESET Online Scanner
I'd like us to scan your machine with ESET OnlineScan

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.


  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the [external image: Posted Image] button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the [external image: Posted Image] icon on your desktop.
  • Check [external image: Posted Image]
  • Click the [external image: Posted Image] button.
  • Accept any security warnings from your browser.
  • Check [external image: Posted Image]
  • Make sure that the option "Remove found threats" is Unchecked
  • Push the Start button.
  • ESET will then download updates for itself, install itself, and begin
    scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push [external image: Posted Image]
  • Push [external image: Posted Image], and save the file to your desktop using a unique name, such as
    ESETScan. Include the contents of this report in your next reply.
  • Push the [external image: Posted Image] button.
  • Push [external image: Posted Image]
Post #13
G'day Noodle After starting the eset scan it did run for awhile found 1 problem I had left the pc to let it do its thing, woke up this morning ad found that something had happened and I had to revert back to a restor point. via the hp recovery manager. I'll try running another scan with MBAM.
Post #14
I've gotten MBAM to run afull scan it was hanging up and stopped responding when it came to a bluetooth program which I have now uninstalled, here is the report from MBAM Malwarebytes Anti-Malware 1.61.0.1400 www.malwarebytes.org Database version: v2012.06.22.10 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Marion :: CARL-HP [administrator] 23/06/2012 7:09:25 AM mbam-log-2012-06-23 (07-09-25).txt Scan type: Full scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 460697 Time elapsed: 55 minute(s), 21 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end).

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI