What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Had Smart Check Virus now something else [Solved]

28 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
23:03:19.0317 1260 TDSS rootkit removing tool [removed] Jul 16 2012 22:10:11 23:03:19.0907 1260 ============================================================ 23:03:19.0907 1260 Current date / time: 2012/07/20 23:03:19.0907 23:03:19.0907 1260 SystemInfo: 23:03:19.0907 1260 23:03:19.0907 1260 OS Version: 6.1.7601 ServicePack: 1.0 23:03:19.0907 1260 Product type: Workstation 23:03:19.0907 1260 ComputerName: DAVID-PC 23:03:19.0907 1260 UserName: David 23:03:19.0907 1260 Windows directory: C:\Windows 23:03:19.0907 1260 System windows directory: C:\Windows 23:03:19.0907 1260 Running under WOW64 23:03:19.0907 1260 Processor architecture: Intel x64 23:03:19.0907 1260 Number of processors: 2 23:03:19.0907 1260 Page size: 0x1000 23:03:19.0907 1260 Boot type: Normal boot 23:03:19.0907 1260 ============================================================ 23:03:20.0758 1260 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 23:03:20.0768 1260 ============================================================ 23:03:20.0768 1260 \Device\Harddisk0\DR0: 23:03:20.0768 1260 MBR partitions: 23:03:20.0768 1260 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x33000, BlocksNum 0x1D4C000 23:03:20.0768 1260 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1D7F000, BlocksNum 0x236AAAB0 23:03:20.0768 1260 ============================================================ 23:03:20.0798 1260 C: <-> \Device\Harddisk0\DR0\Partition1 23:03:20.0798 1260 ============================================================ 23:03:20.0798 1260 Initialize success 23:03:20.0798 1260 ============================================================ 23:03:23.0912 3900 ============================================================ 23:03:23.0912 3900 Scan started 23:03:23.0912 3900 Mode: Manual; 23:03:23.0912 3900 ============================================================ 23:03:24.0402 3900 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys 23:03:24.0402 3900 1394ohci - ok 23:03:24.0492 3900 AbsoluteNotifier (28d79aaa4e1c15577a86f930e8da5e50) C:\Program Files (x86)\Absolute Software\Absolute Notifier\AbsoluteNotifierService.exe 23:03:24.0492 3900 AbsoluteNotifier - ok 23:03:24.0532 3900 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys 23:03:24.0552 3900 ACPI - ok 23:03:24.0572 3900 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys 23:03:24.0582 3900 AcpiPmi - ok 23:03:24.0682 3900 AdobeActiveFileMonitor9.0 (c004f38974f4d321b4c20a240e1175c0) C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe 23:03:24.0682 3900 AdobeActiveFileMonitor9.0 - ok 23:03:24.0792 3900 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 23:03:24.0802 3900 AdobeARMservice - ok 23:03:24.0902 3900 AdobeFlashPlayerUpdateSvc (5e1a953c6472e7bb644892a4d0df5e72) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 23:03:24.0902 3900 AdobeFlashPlayerUpdateSvc - ok 23:03:24.0952 3900 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 23:03:24.0992 3900 adp94xx - ok 23:03:25.0032 3900 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 23:03:25.0052 3900 adpahci - ok 23:03:25.0082 3900 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 23:03:25.0092 3900 adpu320 - ok 23:03:25.0132 3900 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll 23:03:25.0142 3900 AeLookupSvc - ok 23:03:25.0202 3900 AERTFilters (d1e343bc00136ce03c4d403194d06a80) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe 23:03:25.0202 3900 AERTFilters - ok 23:03:25.0272 3900 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys 23:03:25.0292 3900 AFD - ok 23:03:25.0322 3900 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys 23:03:25.0332 3900 agp440 - ok 23:03:25.0362 3900 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe 23:03:25.0372 3900 ALG - ok 23:03:25.0382 3900 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys 23:03:25.0392 3900 aliide - ok 23:03:25.0402 3900 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys 23:03:25.0402 3900 amdide - ok 23:03:25.0472 3900 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 23:03:25.0472 3900 AmdK8 - ok 23:03:25.0502 3900 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 23:03:25.0502 3900 AmdPPM - ok 23:03:25.0552 3900 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys 23:03:25.0552 3900 amdsata - ok 23:03:25.0592 3900 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 23:03:25.0602 3900 amdsbs - ok 23:03:25.0632 3900 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys 23:03:25.0632 3900 amdxata - ok 23:03:25.0672 3900 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys 23:03:25.0692 3900 AppID - ok 23:03:25.0722 3900 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll 23:03:25.0722 3900 AppIDSvc - ok 23:03:25.0792 3900 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll 23:03:25.0792 3900 Appinfo - ok 23:03:25.0942 3900 Apple Mobile Device (f401929ee0cc92bfe7f15161ca535383) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 23:03:25.0942 3900 Apple Mobile Device - ok 23:03:25.0972 3900 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 23:03:25.0982 3900 arc - ok 23:03:26.0012 3900 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 23:03:26.0012 3900 arcsas - ok 23:03:26.0112 3900 aswFsBlk (df59b8e8df0bd2e0e303778a3806a17d) C:\Windows\system32\drivers\aswFsBlk.sys 23:03:26.0112 3900 aswFsBlk - ok 23:03:26.0152 3900 aswMonFlt (f8e6ab4f876feff69250f2e0c29ef004) C:\Windows\system32\drivers\aswMonFlt.sys 23:03:26.0152 3900 aswMonFlt - ok 23:03:26.0192 3900 aswRdr (aa92bc4bcba40ca3aa3ffd1be24f0c09) C:\Windows\System32\Drivers\aswrdr2.sys 23:03:26.0192 3900 aswRdr - ok 23:03:26.0312 3900 aswSnx (f06e230e1e8ca9437a6474b7b551cd37) C:\Windows\system32\drivers\aswSnx.sys 23:03:26.0342 3900 aswSnx - ok 23:03:26.0392 3900 aswSP (3610ca74a69e380424f0452dec5c1317) C:\Windows\system32\drivers\aswSP.sys 23:03:26.0412 3900 aswSP - ok 23:03:26.0452 3900 aswTdi (87de3e31cb0091d22351349869324065) C:\Windows\system32\drivers\aswTdi.sys 23:03:26.0462 3900 aswTdi - ok 23:03:26.0502 3900 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 23:03:26.0502 3900 AsyncMac - ok 23:03:26.0532 3900 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys 23:03:26.0542 3900 atapi - ok 23:03:26.0672 3900 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll 23:03:26.0712 3900 AudioEndpointBuilder - ok 23:03:26.0722 3900 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll 23:03:26.0732 3900 AudioSrv - ok 23:03:26.0822 3900 avast! Antivirus (2f7c0f3e39c45e0127fb78b2f18a41f3) C:\Program Files\AVAST Software\Avast\AvastSvc.exe 23:03:26.0822 3900 avast! Antivirus - ok 23:03:26.0872 3900 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll 23:03:26.0882 3900 AxInstSV - ok 23:03:26.0932 3900 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 23:03:26.0952 3900 b06bdrv - ok 23:03:26.0992 3900 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 23:03:27.0012 3900 b57nd60a - ok 23:03:27.0052 3900 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll 23:03:27.0052 3900 BDESVC - ok 23:03:27.0072 3900 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 23:03:27.0072 3900 Beep - ok 23:03:27.0162 3900 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll 23:03:27.0202 3900 BFE - ok 23:03:27.0292 3900 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\system32\qmgr.dll 23:03:27.0352 3900 BITS - ok 23:03:27.0403 3900 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 23:03:27.0413 3900 blbdrive - ok 23:03:27.0493 3900 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe 23:03:27.0503 3900 Bonjour Service - ok 23:03:27.0553 3900 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys 23:03:27.0553 3900 bowser - ok 23:03:27.0563 3900 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 23:03:27.0573 3900 BrFiltLo - ok 23:03:27.0573 3900 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 23:03:27.0573 3900 BrFiltUp - ok 23:03:27.0603 3900 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys 23:03:27.0623 3900 BridgeMP - ok 23:03:27.0663 3900 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll 23:03:27.0673 3900 Browser - ok 23:03:27.0713 3900 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 23:03:27.0733 3900 Brserid - ok 23:03:27.0733 3900 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 23:03:27.0743 3900 BrSerWdm - ok 23:03:27.0743 3900 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 23:03:27.0753 3900 BrUsbMdm - ok 23:03:27.0753 3900 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 23:03:27.0753 3900 BrUsbSer - ok 23:03:27.0813 3900 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\drivers\BthEnum.sys 23:03:27.0813 3900 BthEnum - ok 23:03:27.0823 3900 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 23:03:27.0823 3900 BTHMODEM - ok 23:03:27.0843 3900 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys 23:03:27.0843 3900 BthPan - ok 23:03:27.0893 3900 BTHPORT (64c198198501f7560ee41d8d1efa7952) C:\Windows\system32\Drivers\BTHport.sys 23:03:27.0923 3900 BTHPORT - ok 23:03:27.0943 3900 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll 23:03:27.0953 3900 bthserv - ok 23:03:27.0973 3900 BTHUSB (f188b7394d81010767b6df3178519a37) C:\Windows\system32\Drivers\BTHUSB.sys 23:03:27.0983 3900 BTHUSB - ok 23:03:28.0013 3900 btusbflt (d3466f77c2c49c6e393ba5fba963a33e) C:\Windows\system32\drivers\btusbflt.sys 23:03:28.0013 3900 btusbflt - ok 23:03:28.0028 3900 btwaudio - ok 23:03:28.0028 3900 btwavdt - ok 23:03:28.0044 3900 btwl2cap - ok 23:03:28.0044 3900 btwrchid - ok 23:03:28.0075 3900 catchme - ok 23:03:28.0122 3900 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 23:03:28.0122 3900 cdfs - ok 23:03:28.0184 3900 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys 23:03:28.0184 3900 cdrom - ok 23:03:28.0231 3900 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll 23:03:28.0247 3900 CertPropSvc - ok 23:03:28.0262 3900 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 23:03:28.0262 3900 circlass - ok 23:03:28.0325 3900 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 23:03:28.0356 3900 CLFS - ok 23:03:28.0449 3900 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 23:03:28.0449 3900 clr_optimization_v2.0.50727_32 - ok 23:03:28.0496 3900 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 23:03:28.0512 3900 clr_optimization_v2.0.50727_64 - ok 23:03:28.0574 3900 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 23:03:28.0574 3900 clr_optimization_v4.0.30319_32 - ok 23:03:28.0621 3900 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 23:03:28.0621 3900 clr_optimization_v4.0.30319_64 - ok 23:03:28.0683 3900 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 23:03:28.0683 3900 CmBatt - ok 23:03:28.0715 3900 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys 23:03:28.0715 3900 cmdide - ok 23:03:28.0793 3900 CNG (9ac4f97c2d3e93367e2148ea940cd2cd) C:\Windows\system32\Drivers\cng.sys 23:03:28.0808 3900 CNG - ok 23:03:28.0824 3900 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 23:03:28.0839 3900 Compbatt - ok 23:03:28.0871 3900 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys 23:03:28.0871 3900 CompositeBus - ok 23:03:28.0871 3900 COMSysApp - ok 23:03:28.0902 3900 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 23:03:28.0902 3900 crcdisk - ok 23:03:28.0964 3900 CryptSvc (4f5414602e2544a4554d95517948b705) C:\Windows\system32\cryptsvc.dll 23:03:28.0964 3900 CryptSvc - ok 23:03:29.0011 3900 CtClsFlt (fbe228abeab2be13b9c3a3a112d4d8dc) C:\Windows\system32\DRIVERS\CtClsFlt.sys 23:03:29.0011 3900 CtClsFlt - ok 23:03:29.0073 3900 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll 23:03:29.0089 3900 DcomLaunch - ok 23:03:29.0151 3900 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll 23:03:29.0167 3900 defragsvc - ok 23:03:29.0214 3900 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys 23:03:29.0229 3900 DfsC - ok 23:03:29.0276 3900 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll 23:03:29.0307 3900 Dhcp - ok 23:03:29.0323 3900 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 23:03:29.0339 3900 discache - ok 23:03:29.0339 3900 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 23:03:29.0354 3900 Disk - ok 23:03:29.0401 3900 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll 23:03:29.0401 3900 Dnscache - ok 23:03:29.0448 3900 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll 23:03:29.0463 3900 dot3svc - ok 23:03:29.0510 3900 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll 23:03:29.0510 3900 DPS - ok 23:03:29.0557 3900 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 23:03:29.0557 3900 drmkaud - ok 23:03:29.0651 3900 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys 23:03:29.0682 3900 DXGKrnl - ok 23:03:29.0729 3900 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll 23:03:29.0729 3900 EapHost - ok 23:03:29.0971 3900 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 23:03:30.0071 3900 ebdrv - ok 23:03:30.0201 3900 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe 23:03:30.0211 3900 EFS - ok 23:03:30.0321 3900 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe 23:03:30.0361 3900 ehRecvr - ok 23:03:30.0391 3900 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe 23:03:30.0391 3900 ehSched - ok 23:03:30.0451 3900 ElRawDisk (f21a07780bbd64adef872f50e8ce2e75) C:\Windows\system32\drivers\ElRawDsk.sys 23:03:30.0461 3900 ElRawDisk - ok 23:03:30.0521 3900 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 23:03:30.0571 3900 elxstor - ok 23:03:30.0631 3900 EPSON_EB_RPCV4_01 (b5581646636759d0dafa8b008881c079) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE 23:03:30.0641 3900 EPSON_EB_RPCV4_01 - ok 23:03:30.0661 3900 EPSON_PM_RPCV4_01 (1e345f2a2d95da3190596e691cde9342) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE 23:03:30.0661 3900 EPSON_PM_RPCV4_01 - ok 23:03:30.0691 3900 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys 23:03:30.0691 3900 ErrDev - ok 23:03:30.0751 3900 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll 23:03:30.0771 3900 EventSystem - ok 23:03:30.0931 3900 EvtEng (b56d9602db5fe1c116b1ca5efd8e2e50) C:\Program Files\Intel\WiFi\bin\EvtEng.exe 23:03:31.0001 3900 EvtEng - ok 23:03:31.0111 3900 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 23:03:31.0111 3900 exfat - ok 23:03:31.0141 3900 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 23:03:31.0151 3900 fastfat - ok 23:03:31.0241 3900 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe 23:03:31.0281 3900 Fax - ok 23:03:31.0301 3900 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 23:03:31.0301 3900 fdc - ok 23:03:31.0331 3900 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll 23:03:31.0341 3900 fdPHost - ok 23:03:31.0351 3900 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll 23:03:31.0361 3900 FDResPub - ok 23:03:31.0391 3900 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 23:03:31.0391 3900 FileInfo - ok 23:03:31.0401 3900 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 23:03:31.0401 3900 Filetrace - ok 23:03:31.0521 3900 FlipShare Service (b8602c90d3c427d8a86ce60437615cf5) C:\Program Files (x86)\Flip Video\FlipShare\FlipShareService.exe 23:03:31.0541 3900 FlipShare Service - ok 23:03:31.0621 3900 FlipShareServer (ac5fb7094f31534594cae48306972cbd) C:\Program Files (x86)\Flip Video\FlipShareServer\FlipShareServer.exe 23:03:31.0661 3900 FlipShareServer - ok 23:03:31.0781 3900 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 23:03:31.0791 3900 flpydisk - ok 23:03:31.0851 3900 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys 23:03:31.0871 3900 FltMgr - ok 23:03:31.0951 3900 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll 23:03:32.0014 3900 FontCache - ok 23:03:32.0092 3900 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 23:03:32.0092 3900 FontCache3.0.0.0 - ok 23:03:32.0149 3900 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 23:03:32.0159 3900 FsDepends - ok 23:03:32.0199 3900 Fs_Rec (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys 23:03:32.0209 3900 Fs_Rec - ok 23:03:32.0259 3900 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys 23:03:32.0269 3900 fvevol - ok 23:03:32.0299 3900 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 23:03:32.0309 3900 gagp30kx - ok 23:03:32.0379 3900 GamesAppService (c403c5db49a0f9aaf4f2128edc0106d8) C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe 23:03:32.0379 3900 GamesAppService - ok 23:03:32.0419 3900 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 23:03:32.0419 3900 GEARAspiWDM - ok 23:03:32.0479 3900 GoToAssist (d3316f6e3c011435f36e3d6e49b3196c) C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe 23:03:32.0479 3900 GoToAssist - ok 23:03:32.0559 3900 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll 23:03:32.0619 3900 gpsvc - ok 23:03:32.0669 3900 gusvc (c1b577b2169900f4cf7190c39f085794) C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 23:03:32.0669 3900 gusvc - ok 23:03:32.0699 3900 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 23:03:32.0699 3900 hcw85cir - ok 23:03:32.0749 3900 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys 23:03:32.0749 3900 HDAudBus - ok 23:03:32.0769 3900 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys 23:03:32.0779 3900 HECIx64 - ok 23:03:32.0789 3900 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 23:03:32.0809 3900 HidBatt - ok 23:03:32.0819 3900 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 23:03:32.0829 3900 HidBth - ok 23:03:32.0839 3900 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 23:03:32.0839 3900 HidIr - ok 23:03:32.0869 3900 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\System32\hidserv.dll 23:03:32.0869 3900 hidserv - ok 23:03:32.0889 3900 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\drivers\hidusb.sys 23:03:32.0889 3900 HidUsb - ok 23:03:32.0929 3900 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll 23:03:32.0929 3900 hkmsvc - ok 23:03:32.0999 3900 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll 23:03:33.0019 3900 HomeGroupListener - ok 23:03:33.0059 3900 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll 23:03:33.0089 3900 HomeGroupProvider - ok 23:03:33.0129 3900 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys 23:03:33.0129 3900 HpSAMD - ok 23:03:33.0209 3900 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys 23:03:33.0249 3900 HTTP - ok 23:03:33.0269 3900 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys 23:03:33.0279 3900 hwpolicy - ok 23:03:33.0299 3900 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys 23:03:33.0299 3900 i8042prt - ok 23:03:33.0369 3900 iaStor (abbf174cb394f5c437410a788b7e404a) C:\Windows\system32\DRIVERS\iaStor.sys 23:03:33.0379 3900 iaStor - ok 23:03:33.0439 3900 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys 23:03:33.0459 3900 iaStorV - ok 23:03:33.0599 3900 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 23:03:33.0659 3900 idsvc - ok 23:03:34.0305 3900 igfx (31569a2e836c12014148bf7342716946) C:\Windows\system32\DRIVERS\igdkmd64.sys 23:03:34.0601 3900 igfx - ok 23:03:34.0741 3900 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 23:03:34.0741 3900 iirsp - ok 23:03:34.0835 3900 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll 23:03:34.0882 3900 IKEEXT - ok 23:03:34.0929 3900 Impcd (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\DRIVERS\Impcd.sys 23:03:34.0929 3900 Impcd - ok 23:03:35.0100 3900 IntcAzAudAddService (6e4ccb3aff07e2b9f2a937385c84b573) C:\Windows\system32\drivers\RTKVHD64.sys 23:03:35.0116 3900 IntcAzAudAddService - ok 23:03:35.0241 3900 IntcDAud (03c74719d48056a1078f3a51ceb76baa) C:\Windows\system32\DRIVERS\IntcDAud.sys 23:03:35.0272 3900 IntcDAud - ok 23:03:35.0303 3900 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys 23:03:35.0303 3900 intelide - ok 23:03:35.0350 3900 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 23:03:35.0350 3900 intelppm - ok 23:03:35.0490 3900 IntuitUpdateServiceV4 (1663a135865f0ba6e853353e98e67f2a) C:\Program Files (x86)\Common Files\Intuit\Update Service v4\IntuitUpdateService.exe 23:03:35.0490 3900 IntuitUpdateServiceV4 - ok 23:03:35.0627 3900 ioloSystemService (440a02fa25be8dccd2103d820036eda1) C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe 23:03:35.0637 3900 ioloSystemService - ok 23:03:35.0687 3900 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll 23:03:35.0697 3900 IPBusEnum - ok 23:03:35.0737 3900 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys 23:03:35.0737 3900 IpFilterDriver - ok 23:03:35.0807 3900 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll 23:03:35.0847 3900 iphlpsvc - ok 23:03:35.0877 3900 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys 23:03:35.0877 3900 IPMIDRV - ok 23:03:35.0927 3900 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 23:03:35.0937 3900 IPNAT - ok 23:03:36.0057 3900 iPod Service (a9ab99ee7d39725eafec82732d2b3271) C:\Program Files\iPod\bin\iPodService.exe 23:03:36.0097 3900 iPod Service - ok 23:03:36.0117 3900 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 23:03:36.0117 3900 IRENUM - ok 23:03:36.0157 3900 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys 23:03:36.0157 3900 isapnp - ok 23:03:36.0197 3900 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys 23:03:36.0217 3900 iScsiPrt - ok 23:03:36.0237 3900 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys 23:03:36.0247 3900 kbdclass - ok 23:03:36.0287 3900 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys 23:03:36.0297 3900 kbdhid - ok 23:03:36.0327 3900 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 23:03:36.0327 3900 KeyIso - ok 23:03:36.0367 3900 KSecDD (97a7070aea4c058b6418519e869a63b4) C:\Windows\system32\Drivers\ksecdd.sys 23:03:36.0377 3900 KSecDD - ok 23:03:36.0417 3900 KSecPkg (26c43a7c2862447ec59deda188d1da07) C:\Windows\system32\Drivers\ksecpkg.sys 23:03:36.0427 3900 KSecPkg - ok 23:03:36.0457 3900 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 23:03:36.0457 3900 ksthunk - ok 23:03:36.0507 3900 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll 23:03:36.0527 3900 KtmRm - ok 23:03:36.0557 3900 L1C (39918db0efcf045a1ce6fabbf339f975) C:\Windows\system32\DRIVERS\L1C62x64.sys 23:03:36.0567 3900 L1C - ok 23:03:36.0607 3900 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\System32\srvsvc.dll 23:03:36.0637 3900 LanmanServer - ok 23:03:36.0677 3900 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll 23:03:36.0687 3900 LanmanWorkstation - ok 23:03:36.0707 3900 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 23:03:36.0707 3900 lltdio - ok 23:03:36.0757 3900 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll 23:03:36.0777 3900 lltdsvc - ok 23:03:36.0807 3900 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll 23:03:36.0817 3900 lmhosts - ok 23:03:36.0897 3900 LMS (23d990150d56b670a62b21b9abdd45ee) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe 23:03:36.0907 3900 LMS - ok 23:03:36.0937 3900 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 23:03:36.0947 3900 LSI_FC - ok 23:03:36.0967 3900 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 23:03:36.0977 3900 LSI_SAS - ok 23:03:36.0987 3900 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 23:03:36.0987 3900 LSI_SAS2 - ok 23:03:37.0037 3900 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 23:03:37.0057 3900 LSI_SCSI - ok 23:03:37.0077 3900 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 23:03:37.0077 3900 luafv - ok 23:03:37.0137 3900 MBAMProtector (dc8490812a3b72811ae534f423b4c206) C:\Windows\system32\drivers\mbam.sys 23:03:37.0137 3900 MBAMProtector - ok 23:03:37.0257 3900 MBAMService (43683e970f008c93c9429ef428147a54) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 23:03:37.0327 3900 MBAMService - ok 23:03:37.0367 3900 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll 23:03:37.0377 3900 Mcx2Svc - ok 23:03:37.0397 3900 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 23:03:37.0407 3900 megasas - ok 23:03:37.0427 3900 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 23:03:37.0447 3900 MegaSR - ok 23:03:37.0517 3900 Microsoft SharePoint Workspace Audit Service - ok 23:03:37.0547 3900 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 23:03:37.0563 3900 MMCSS - ok 23:03:37.0563 3900 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 23:03:37.0563 3900 Modem - ok 23:03:37.0578 3900 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 23:03:37.0594 3900 monitor - ok 23:03:37.0625 3900 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\drivers\mouclass.sys 23:03:37.0625 3900 mouclass - ok 23:03:37.0641 3900 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 23:03:37.0641 3900 mouhid - ok 23:03:37.0672 3900 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys 23:03:37.0687 3900 mountmgr - ok 23:03:37.0703 3900 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys 23:03:37.0719 3900 mpio - ok 23:03:37.0734 3900 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 23:03:37.0734 3900 mpsdrv - ok 23:03:37.0828 3900 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll 23:03:37.0843 3900 MpsSvc - ok 23:03:37.0890 3900 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys 23:03:37.0890 3900 MRxDAV - ok 23:03:37.0937 3900 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys 23:03:37.0953 3900 mrxsmb - ok 23:03:37.0968 3900 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys 23:03:37.0999 3900 mrxsmb10 - ok 23:03:38.0015 3900 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys 23:03:38.0015 3900 mrxsmb20 - ok 23:03:38.0046 3900 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys 23:03:38.0046 3900 msahci - ok 23:03:38.0093 3900 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys 23:03:38.0093 3900 msdsm - ok 23:03:38.0140 3900 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe 23:03:38.0155 3900 MSDTC - ok 23:03:38.0201 3900 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 23:03:38.0201 3900 Msfs - ok 23:03:38.0211 3900 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 23:03:38.0221 3900 mshidkmdf - ok 23:03:38.0231 3900 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys 23:03:38.0231 3900 msisadrv - ok 23:03:38.0281 3900 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll 23:03:38.0301 3900 MSiSCSI - ok 23:03:38.0311 3900 msiserver - ok 23:03:38.0331 3900 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 23:03:38.0331 3900 MSKSSRV - ok 23:03:38.0341 3900 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 23:03:38.0341 3900 MSPCLOCK - ok 23:03:38.0361 3900 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 23:03:38.0361 3900 MSPQM - ok 23:03:38.0441 3900 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys 23:03:38.0461 3900 MsRPC - ok 23:03:38.0501 3900 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys 23:03:38.0501 3900 mssmbios - ok 23:03:38.0531 3900 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 23:03:38.0531 3900 MSTEE - ok 23:03:38.0541 3900 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 23:03:38.0541 3900 MTConfig - ok 23:03:38.0571 3900 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 23:03:38.0571 3900 Mup - ok 23:03:38.0661 3900 MyWiFiDHCPDNS (a9bc2302fbdf52c8af4e2fc966288d21) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe 23:03:38.0681 3900 MyWiFiDHCPDNS - ok 23:03:38.0741 3900 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll 23:03:38.0751 3900 napagent - ok 23:03:38.0791 3900 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 23:03:38.0811 3900 NativeWifiP - ok 23:03:38.0901 3900 NDIS (c38b8ae57f78915905064a9a24dc1586) C:\Windows\system32\drivers\ndis.sys 23:03:38.0941 3900 NDIS - ok 23:03:38.0971 3900 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 23:03:38.0971 3900 NdisCap - ok 23:03:38.0991 3900 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 23:03:38.0991 3900 NdisTapi - ok 23:03:39.0041 3900 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys 23:03:39.0051 3900 Ndisuio - ok 23:03:39.0091 3900 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys 23:03:39.0101 3900 NdisWan - ok 23:03:39.0131 3900 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys 23:03:39.0131 3900 NDProxy - ok 23:03:39.0151 3900 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 23:03:39.0151 3900 NetBIOS - ok 23:03:39.0211 3900 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys 23:03:39.0221 3900 NetBT - ok 23:03:39.0271 3900 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 23:03:39.0281 3900 Netlogon - ok 23:03:39.0331 3900 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll 23:03:39.0351 3900 Netman - ok 23:03:39.0391 3900 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll 23:03:39.0421 3900 netprofm - ok 23:03:39.0502 3900 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 23:03:39.0502 3900 NetTcpPortSharing - ok 23:03:39.0962 3900 NETw5s64 (24f64343f14a119308456e1ca7507b26) C:\Windows\system32\DRIVERS\NETw5s64.sys 23:03:40.0172 3900 NETw5s64 - ok 23:03:40.0276 3900 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 23:03:40.0276 3900 nfrd960 - ok 23:03:40.0338 3900 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll 23:03:40.0369 3900 NlaSvc - ok 23:03:40.0385 3900 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 23:03:40.0385 3900 Npfs - ok 23:03:40.0416 3900 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll 23:03:40.0416 3900 nsi - ok 23:03:40.0447 3900 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 23:03:40.0447 3900 nsiproxy - ok 23:03:40.0588 3900 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys 23:03:40.0681 3900 Ntfs - ok 23:03:40.0790 3900 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 23:03:40.0790 3900 Null - ok 23:03:40.0837 3900 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys 23:03:40.0853 3900 nvraid - ok 23:03:40.0884 3900 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys 23:03:40.0900 3900 nvstor - ok 23:03:40.0915 3900 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys 23:03:40.0931 3900 nv_agp - ok 23:03:40.0946 3900 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys 23:03:40.0946 3900 ohci1394 - ok 23:03:41.0040 3900 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 23:03:41.0040 3900 ose - ok 23:03:41.0399 3900 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 23:03:41.0539 3900 osppsvc - ok 23:03:41.0664 3900 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 23:03:41.0695 3900 p2pimsvc - ok 23:03:41.0726 3900 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll 23:03:41.0758 3900 p2psvc - ok 23:03:41.0820 3900 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 23:03:41.0820 3900 Parport - ok 23:03:41.0851 3900 partmgr (e9766131eeade40a27dc27d2d68fba9c) C:\Windows\system32\drivers\partmgr.sys 23:03:41.0851 3900 partmgr - ok 23:03:41.0898 3900 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll 23:03:41.0914 3900 PcaSvc - ok 23:03:41.0945 3900 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys 23:03:41.0945 3900 pci - ok 23:03:41.0976 3900 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys 23:03:41.0976 3900 pciide - ok 23:03:42.0023 3900 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 23:03:42.0038 3900 pcmcia - ok 23:03:42.0054 3900 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 23:03:42.0054 3900 pcw - ok 23:03:42.0101 3900 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 23:03:42.0179 3900 PEAUTH - ok 23:03:42.0257 3900 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe 23:03:42.0272 3900 PerfHost - ok 23:03:42.0428 3900 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll 23:03:42.0506 3900 pla - ok 23:03:42.0569 3900 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll 23:03:42.0600 3900 PlugPlay - ok 23:03:42.0631 3900 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll 23:03:42.0647 3900 PNRPAutoReg - ok 23:03:42.0678 3900 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 23:03:42.0678 3900 PNRPsvc - ok 23:03:42.0740 3900 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll 23:03:42.0772 3900 PolicyAgent - ok 23:03:42.0818 3900 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll 23:03:42.0834 3900 Power - ok 23:03:42.0896 3900 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys 23:03:42.0912 3900 PptpMiniport - ok 23:03:42.0943 3900 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 23:03:42.0943 3900 Processor - ok 23:03:42.0990 3900 ProfSvc (53e83f1f6cf9d62f32801cf66d8352a8) C:\Windows\system32\profsvc.dll 23:03:43.0021 3900 ProfSvc - ok 23:03:43.0052 3900 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 23:03:43.0052 3900 ProtectedStorage - ok 23:03:43.0099 3900 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys 23:03:43.0099 3900 Psched - ok 23:03:43.0162 3900 PSI_SVC_2 (543a4ef0923bf70d126625b034ef25af) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe 23:03:43.0177 3900 PSI_SVC_2 - ok 23:03:43.0193 3900 PxHlpa64 (87b04878a6d59d6c79251dc960c674c1) C:\Windows\system32\Drivers\PxHlpa64.sys 23:03:43.0208 3900 PxHlpa64 - ok 23:03:43.0302 3900 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 23:03:43.0380 3900 ql2300 - ok 23:03:43.0505 3900 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 23:03:43.0505 3900 ql40xx - ok 23:03:43.0552 3900 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll 23:03:43.0583 3900 QWAVE - ok 23:03:43.0598 3900 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 23:03:43.0598 3900 QWAVEdrv - ok 23:03:43.0598 3900 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 23:03:43.0614 3900 RasAcd - ok 23:03:43.0630 3900 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 23:03:43.0630 3900 RasAgileVpn - ok 23:03:43.0661 3900 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll 23:03:43.0661 3900 RasAuto - ok 23:03:43.0708 3900 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys 23:03:43.0723 3900 Rasl2tp - ok 23:03:43.0786 3900 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll 23:03:43.0801 3900 RasMan - ok 23:03:43.0832 3900 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 23:03:43.0832 3900 RasPppoe - ok 23:03:43.0848 3900 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 23:03:43.0848 3900 RasSstp - ok 23:03:43.0879 3900 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys 23:03:43.0910 3900 rdbss - ok 23:03:43.0926 3900 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 23:03:43.0926 3900 rdpbus - ok 23:03:43.0957 3900 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 23:03:43.0957 3900 RDPCDD - ok 23:03:43.0973 3900 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 23:03:43.0973 3900 RDPENCDD - ok 23:03:43.0988 3900 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 23:03:43.0988 3900 RDPREFMP - ok 23:03:44.0044 3900 RDPWD (e61608aa35e98999af9aaeeea6114b0a) C:\Windows\system32\drivers\RDPWD.sys 23:03:44.0064 3900 RDPWD - ok 23:03:44.0104 3900 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys 23:03:44.0114 3900 rdyboost - ok 23:03:44.0234 3900 RegSrvc (0aa473966357c4a41b5eb19649eb6e5e) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe 23:03:44.0274 3900 RegSrvc - ok 23:03:44.0314 3900 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll 23:03:44.0324 3900 RemoteAccess - ok 23:03:44.0364 3900 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll 23:03:44.0384 3900 RemoteRegistry - ok 23:03:44.0434 3900 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys 23:03:44.0444 3900 RFCOMM - ok 23:03:44.0574 3900 RoxMediaDB12OEM (3c957189b31c34d3ad21967b12b6aed7) C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe 23:03:44.0644 3900 RoxMediaDB12OEM - ok 23:03:44.0674 3900 RoxWatch12 (2b73088cc2ca757a172b425c9398e5bc) C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe 23:03:44.0684 3900 RoxWatch12 - ok 23:03:44.0784 3900 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll 23:03:44.0794 3900 RpcEptMapper - ok 23:03:44.0884 3900 rpcld (b1574dcb4ae3efacc24aa87b4ae6fc55) C:\ProgramData\Rpcnet\Bin\rpcld.exe 23:03:44.0884 3900 Suspicious file (NoAccess): C:\ProgramData\Rpcnet\Bin\rpcld.exe. md5: b1574dcb4ae3efacc24aa87b4ae6fc55 23:03:44.0884 3900 rpcld ( LockedFile.Multi.Generic ) - warning 23:03:44.0884 3900 rpcld - detected LockedFile.Multi.Generic (1) 23:03:44.0924 3900 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe 23:03:44.0924 3900 RpcLocator - ok 23:03:45.0024 3900 rpcnet (6684437f3628ef237c354f77d33426d1) C:\WINDOWS\SysWOW64\rpcnet.exe 23:03:45.0024 3900 rpcnet - ok 23:03:45.0084 3900 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\System32\rpcss.dll 23:03:45.0094 3900 RpcSs - ok 23:03:45.0154 3900 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 23:03:45.0154 3900 rspndr - ok 23:03:45.0204 3900 RSUSBSTOR (22d6b47d004a6568c500680be2972854) C:\Windows\system32\Drivers\RtsUStor.sys 23:03:45.0204 3900 RSUSBSTOR - ok 23:03:45.0234 3900 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 23:03:45.0244 3900 SamSs - ok 23:03:45.0284 3900 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys 23:03:45.0284 3900 sbp2port - ok 23:03:45.0464 3900 SBSDWSCService (794d4b48dfb6e999537c7c3947863463) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe 23:03:45.0524 3900 SBSDWSCService - ok 23:03:45.0554 3900 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll 23:03:45.0584 3900 SCardSvr - ok 23:03:45.0644 3900 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys 23:03:45.0644 3900 scfilter - ok 23:03:45.0764 3900 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll 23:03:45.0834 3900 Schedule - ok 23:03:45.0864 3900 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll 23:03:45.0874 3900 SCPolicySvc - ok 23:03:45.0894 3900 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll 23:03:45.0904 3900 SDRSVC - ok 23:03:45.0964 3900 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 23:03:45.0964 3900 secdrv - ok 23:03:46.0014 3900 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll 23:03:46.0024 3900 seclogon - ok 23:03:46.0054 3900 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\system32\sens.dll 23:03:46.0070 3900 SENS - ok 23:03:46.0070 3900 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll 23:03:46.0085 3900 SensrSvc - ok 23:03:46.0101 3900 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 23:03:46.0101 3900 Serenum - ok 23:03:46.0116 3900 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 23:03:46.0116 3900 Serial - ok 23:03:46.0148 3900 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 23:03:46.0163 3900 sermouse - ok 23:03:46.0210 3900 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll 23:03:46.0226 3900 SessionEnv - ok 23:03:46.0257 3900 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys 23:03:46.0272 3900 sffdisk - ok 23:03:46.0272 3900 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys 23:03:46.0288 3900 sffp_mmc - ok 23:03:46.0304 3900 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys 23:03:46.0304 3900 sffp_sd - ok 23:03:46.0319 3900 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 23:03:46.0335 3900 sfloppy - ok 23:03:46.0506 3900 SftService (74ec60e20516aaa573be74f31175270f) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE 23:03:46.0522 3900 SftService - ok 23:03:46.0647 3900 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll 23:03:46.0662 3900 SharedAccess - ok 23:03:46.0756 3900 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll 23:03:46.0772 3900 ShellHWDetection - ok 23:03:46.0834 3900 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 23:03:46.0834 3900 SiSRaid2 - ok 23:03:46.0850 3900 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 23:03:46.0850 3900 SiSRaid4 - ok 23:03:46.0896 3900 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 23:03:46.0912 3900 Smb - ok 23:03:46.0959 3900 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe 23:03:46.0959 3900 SNMPTRAP - ok 23:03:46.0974 3900 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 23:03:46.0990 3900 spldr - ok 23:03:47.0068 3900 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe 23:03:47.0115 3900 Spooler - ok 23:03:47.0364 3900 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe 23:03:47.0505 3900 sppsvc - ok 23:03:47.0645 3900 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll 23:03:47.0661 3900 sppuinotify - ok 23:03:47.0723 3900 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys 23:03:47.0739 3900 srv - ok 23:03:47.0786 3900 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys 23:03:47.0801 3900 srv2 - ok 23:03:47.0832 3900 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys 23:03:47.0848 3900 srvnet - ok 23:03:47.0879 3900 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll 23:03:47.0910 3900 SSDPSRV - ok 23:03:47.0926 3900 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll 23:03:47.0926 3900 SstpSvc - ok 23:03:47.0973 3900 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 23:03:47.0973 3900 stexstor - ok 23:03:48.0035 3900 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll 23:03:48.0082 3900 stisvc - ok 23:03:48.0160 3900 stllssvr (7731f46ec0d687a931cba063e8f90ef0) C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe 23:03:48.0160 3900 stllssvr - ok 23:03:48.0207 3900 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys 23:03:48.0207 3900 swenum - ok 23:03:48.0269 3900 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll 23:03:48.0300 3900 swprv - ok 23:03:48.0347 3900 SynTP (c25866bdf0e818e02bb8e76845d26e54) C:\Windows\system32\DRIVERS\SynTP.sys 23:03:48.0363 3900 SynTP - ok 23:03:48.0503 3900 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll 23:03:48.0566 3900 SysMain - ok 23:03:48.0675 3900 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll 23:03:48.0675 3900 TabletInputService - ok 23:03:48.0706 3900 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll 23:03:48.0737 3900 TapiSrv - ok 23:03:48.0753 3900 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll 23:03:48.0768 3900 TBS - ok 23:03:48.0909 3900 Tcpip (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\drivers\tcpip.sys 23:03:48.0971 3900 Tcpip - ok 23:03:49.0174 3900 TCPIP6 (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\DRIVERS\tcpip.sys 23:03:49.0190 3900 TCPIP6 - ok 23:03:49.0283 3900 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys 23:03:49.0299 3900 tcpipreg - ok 23:03:49.0330 3900 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 23:03:49.0330 3900 TDPIPE - ok 23:03:49.0346 3900 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys 23:03:49.0361 3900 TDTCP - ok 23:03:49.0408 3900 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys 23:03:49.0408 3900 tdx - ok 23:03:49.0455 3900 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys 23:03:49.0455 3900 TermDD - ok 23:03:49.0502 3900 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll 23:03:49.0533 3900 TermService - ok 23:03:49.0564 3900 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll 23:03:49.0580 3900 Themes - ok 23:03:49.0595 3900 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 23:03:49.0611 3900 THREADORDER - ok 23:03:49.0642 3900 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll 23:03:49.0642 3900 TrkWks - ok 23:03:49.0720 3900 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe 23:03:49.0720 3900 TrustedInstaller - ok 23:03:49.0782 3900 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys 23:03:49.0782 3900 tssecsrv - ok 23:03:49.0829 3900 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys 23:03:49.0829 3900 TsUsbFlt - ok 23:03:49.0876 3900 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys 23:03:49.0876 3900 tunnel - ok 23:03:49.0907 3900 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 23:03:49.0907 3900 uagp35 - ok 23:03:49.0954 3900 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys 23:03:49.0964 3900 udfs - ok 23:03:50.0014 3900 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe 23:03:50.0024 3900 UI0Detect - ok 23:03:50.0064 3900 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys 23:03:50.0074 3900 uliagpkx - ok 23:03:50.0094 3900 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys 23:03:50.0094 3900 umbus - ok 23:03:50.0124 3900 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 23:03:50.0124 3900 UmPass - ok 23:03:50.0354 3900 UNS (cbdee152d73200ee49031a26310b9d3e) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe 23:03:50.0414 3900 UNS - ok 23:03:50.0534 3900 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll 23:03:50.0554 3900 upnphost - ok 23:03:50.0604 3900 USBAAPL64 (fb251567f41bc61988b26731dec19e4b) C:\Windows\system32\Drivers\usbaapl64.sys 23:03:50.0614 3900 USBAAPL64 - ok 23:03:50.0644 3900 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys 23:03:50.0654 3900 usbccgp - ok 23:03:50.0694 3900 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys 23:03:50.0704 3900 usbcir - ok 23:03:50.0724 3900 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys 23:03:50.0724 3900 usbehci - ok 23:03:50.0754 3900 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys 23:03:50.0764 3900 usbhub - ok 23:03:50.0784 3900 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys 23:03:50.0784 3900 usbohci - ok 23:03:50.0814 3900 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 23:03:50.0814 3900 usbprint - ok 23:03:50.0874 3900 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys 23:03:50.0884 3900 usbscan - ok 23:03:50.0904 3900 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS 23:03:50.0904 3900 USBSTOR - ok 23:03:50.0924 3900 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys 23:03:50.0924 3900 usbuhci - ok 23:03:50.0954 3900 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys 23:03:50.0964 3900 usbvideo - ok 23:03:51.0004 3900 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll 23:03:51.0014 3900 UxSms - ok 23:03:51.0044 3900 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe 23:03:51.0054 3900 VaultSvc - ok 23:03:51.0074 3900 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys 23:03:51.0074 3900 vdrvroot - ok 23:03:51.0144 3900 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe 23:03:51.0184 3900 vds - ok 23:03:51.0214 3900 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 23:03:51.0214 3900 vga - ok 23:03:51.0234 3900 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 23:03:51.0234 3900 VgaSave - ok 23:03:51.0264 3900 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys 23:03:51.0284 3900 vhdmp - ok 23:03:51.0304 3900 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys 23:03:51.0304 3900 viaide - ok 23:03:51.0324 3900 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys 23:03:51.0334 3900 volmgr - ok 23:03:51.0404 3900 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys 23:03:51.0424 3900 volmgrx - ok 23:03:51.0454 3900 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys 23:03:51.0474 3900 volsnap - ok 23:03:51.0514 3900 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 23:03:51.0524 3900 vsmraid - ok 23:03:51.0654 3900 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe 23:03:51.0714 3900 VSS - ok 23:03:51.0834 3900 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 23:03:51.0834 3900 vwifibus - ok 23:03:51.0854 3900 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 23:03:51.0854 3900 vwififlt - ok 23:03:51.0874 3900 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys 23:03:51.0874 3900 vwifimp - ok 23:03:51.0924 3900 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll 23:03:51.0944 3900 W32Time - ok 23:03:51.0980 3900 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 23:03:51.0980 3900 WacomPen - ok 23:03:52.0026 3900 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 23:03:52.0026 3900 WANARP - ok 23:03:52.0042 3900 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 23:03:52.0042 3900 Wanarpv6 - ok 23:03:52.0151 3900 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe 23:03:52.0214 3900 WatAdminSvc - ok 23:03:52.0338 3900 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe 23:03:52.0416 3900 wbengine - ok 23:03:52.0541 3900 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll 23:03:52.0557 3900 WbioSrvc - ok 23:03:52.0619 3900 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll 23:03:52.0635 3900 wcncsvc - ok 23:03:52.0666 3900 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll 23:03:52.0682 3900 WcsPlugInService - ok 23:03:52.0728 3900 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 23:03:52.0728 3900 Wd - ok 23:03:52.0806 3900 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 23:03:52.0853 3900 Wdf01000 - ok 23:03:52.0884 3900 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 23:03:52.0884 3900 WdiServiceHost - ok 23:03:52.0900 3900 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 23:03:52.0900 3900 WdiSystemHost - ok 23:03:52.0931 3900 wdkmd (fe31110e39a0b11abae1ba43a2dc94f9) C:\Windows\system32\DRIVERS\WDKMD.sys 23:03:52.0931 3900 wdkmd - ok 23:03:52.0978 3900 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll 23:03:53.0009 3900 WebClient - ok 23:03:53.0087 3900 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll 23:03:53.0118 3900 Wecsvc - ok 23:03:53.0134 3900 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll 23:03:53.0150 3900 wercplsupport - ok 23:03:53.0165 3900 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll 23:03:53.0165 3900 WerSvc - ok 23:03:53.0196 3900 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 23:03:53.0212 3900 WfpLwf - ok 23:03:53.0243 3900 WimFltr (b14ef15bd757fa488f9c970eee9c0d35) C:\Windows\system32\DRIVERS\wimfltr.sys 23:03:53.0259 3900 WimFltr - ok 23:03:53.0274 3900 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 23:03:53.0274 3900 WIMMount - ok 23:03:53.0321 3900 WinDefend - ok 23:03:53.0337 3900 WinHttpAutoProxySvc - ok 23:03:53.0399 3900 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll 23:03:53.0415 3900 Winmgmt - ok 23:03:53.0571 3900 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll 23:03:53.0649 3900 WinRM - ok 23:03:53.0805 3900 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll 23:03:53.0883 3900 Wlansvc - ok 23:03:53.0945 3900 wlcrasvc (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 23:03:53.0945 3900 wlcrasvc - ok 23:03:54.0117 3900 wlidsvc (7e47c328fc4768cb8beafbcfafa70362) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 23:03:54.0226 3900 wlidsvc - ok 23:03:54.0335 3900 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys 23:03:54.0335 3900 WmiAcpi - ok 23:03:54.0398 3900 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe 23:03:54.0413 3900 wmiApSrv - ok 23:03:54.0460 3900 WMPNetworkSvc - ok 23:03:54.0491 3900 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll 23:03:54.0507 3900 WPCSvc - ok 23:03:54.0554 3900 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll 23:03:54.0569 3900 WPDBusEnum - ok 23:03:54.0600 3900 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 23:03:54.0616 3900 ws2ifsl - ok 23:03:54.0632 3900 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\system32\wscsvc.dll 23:03:54.0663 3900 wscsvc - ok 23:03:54.0663 3900 WSearch - ok 23:03:54.0850 3900 wuauserv (d9ef901dca379cfe914e9fa13b73b4c4) C:\Windows\system32\wuaueng.dll 23:03:54.0959 3900 wuauserv - ok 23:03:55.0084 3900 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys 23:03:55.0100 3900 WudfPf - ok 23:03:55.0115 3900 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys 23:03:55.0115 3900 WUDFRd - ok 23:03:55.0162 3900 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll 23:03:55.0162 3900 wudfsvc - ok 23:03:55.0209 3900 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll 23:03:55.0240 3900 WwanSvc - ok 23:03:55.0271 3900 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0 23:03:55.0599 3900 \Device\Harddisk0\DR0 - ok 23:03:55.0599 3900 Boot (0x1200) (90efacf7af98715d6cdaf1e4ce93c7a4) \Device\Harddisk0\DR0\Partition0 23:03:55.0599 3900 \Device\Harddisk0\DR0\Partition0 - ok 23:03:55.0630 3900 Boot (0x1200) (86ed70d43eb6920b610d70f62117a83a) \Device\Harddisk0\DR0\Partition1 23:03:55.0630 3900 \Device\Harddisk0\DR0\Partition1 - ok 23:03:55.0630 3900 ============================================================ 23:03:55.0630 3900 Scan finished 23:03:55.0630 3900 ============================================================ 23:03:55.0646 5928 Detected object count: 1 23:03:55.0646 5928 Actual detected object count: 1 23:04:11.0870 5928 rpcld ( LockedFile.Multi.Generic ) - skipped by user 23:04:11.0870 5928 rpcld ( LockedFile.Multi.Generic ) - User select action: Skip 23:04:15.0598 3524 Deinitialize success
Post #19
Great!

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.

Updating Java:
  • Download the latest version of Java Runtime Environment (JRE) 7 Update 5.
  • After the download completes, close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
  • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Double click the Java setup file you just downloaded and follow the prompts to begin the installation.
Now to Clean out the Java cache:

Go into the Control Panel and double-click the Java Icon. [external image: Posted Image]
  • Under Temporary Internet Files, click the Settings… button
  • click the Delete Files button.
  • There are three options in the window to clear the cache - Leave all 3 Checked
    • Downloaded Applets
      Downloaded Applications
      Other Files
  • Click OK on Delete Temporary Files Window
    Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
  • Click OK to leave the Temporary Files Settings
  • Click OK to leave the Java Control Panel.
===================================================

Please delete DDS, aswMBR, TDSSKiller, and getPartitions.

===================================================

Follow these steps to uninstall Combofix

* Click START
* Now type ComboFix /Uninstall in the searchbox and hit ENTER. Note the space between the X and the /, it needs to be there.
(Note: There is a space between the ..X and the /U that needs to be there.)

[external image: Posted Image]

===================================================

Clean up with OTL:
  • Double-click OTL.exe to start the program.
  • Close all other programs apart from OTL as this step will require a reboot
  • On the OTL main screen, press the CLEANUP button
  • Say Yes to the prompt and then allow the program to reboot your computer.
===================================================

Here are some tips to reduce the potential for spyware infection in the future:

Updates
  • It is very important that you keep your Operating System and applications up to date so that you will be less susceptible to malware.
  • It's a good idea to have Windows Update automatically download and install updates as they become available.
  • Secunia Online Software Inspector is a great tool that will tell you which of your applications are outdated and vulnerable to attack.
Run Anti-Virus Software
  • For an excellent list of free anti virus software, free online virus scanners, free spyware detection/removal and free firewalls, click here.
  • IMPORTANT! Please make sure you only have ONE firewall and ONE real-time antivirus installed on your system.
  • When using "on demand" scanners, first update the detection signature files, then disconnect from the internet and disable your resident security program before running the scan.
  • Once complete, remember to re-engage your resident security before going online.
Passwords
  • It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection.
  • Refer to this Microsoft article
    Strong passwords: How to create and use them and consider a password keeper, to keep all your passwords safe.
Spyware Protection
  • This is a good time to set up protection against further attacks. In light of your recent problem, I'm sure you'd like to avoid any future infections. Please read these well written articles:
  • How to Prevent Malware by miekiemoes
  • PC Safety and Security–What Do I Need?
Additional Software
  • To help protect your computer in the future I recommend that you get the following free programs if you do not already have them:
  • SpywareBlaster prevents the installation of ActiveX-based malware, blocks cookies, and restricts the actions of "bad" sites. See tutorial here
  • MVPS HOSTS FILE replaces your current HOSTS file with one that will restrict known ad sites from serving you unsolicited advertisements.
  • Google Chrome is a great alternative to Internet Explorer and Firefox.
Follow these steps, keep your antivirus program and antispyware programs updated, and scan with them on a regular basis. By doing so, your potential for being infected again will reduce dramatically. 

Hopefully this should take care of your problems! Good luck.

Do you have any further questions? 

**Please respond one more time to confirm your problem is resolved so I can close this thread.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI