Spyware / Malware / Virus Removal

Ads keep playing on my computer [Closed]

66 min read

Looking for the outcome? Ask AI

donhughesmusic Topic Starter

Post #1July 18, 2012, 4:17 AM UTC

Commercial ads keep playing on my computer. I have run a Norton scan, as well as a Malware scan, and neither have gotten rid of the problem. Any suggestions? Don

donhughesmusic

Post #2July 18, 2012, 4:18 AM UTC

I forgot to say that they were audio ads and not video ads

Conspire

Post #3July 18, 2012, 3:17 PM UTC

**In any case where you happen to be busy or unable to give us a reply, we would be grateful if you keep us informed in advance and we will be more than happy to wait. Failure to do so we will have your thread closed in THREE(3) days.

Hello there, donhughesmusic

I'm Conspire, I'll be glad to help you with your computer problems.

Please observe these rules while we work:

Read the entire procedure
It is important to perform ALL actions in sequence.
If you don't know, stop and ask! Don't keep going on.
Please reply to this thread. Do not start a new topic.
Stick with me till you're given the all clear.
Remember, absence of symptoms does not mean the infection is all gone.
Don't attempt to clean your computer with any tools other than the ones I ask you to use during the cleanup process.

IMPORTANT NOTE : Please do not delete anything unless instructed to. Remember to backup all your important data(if possible) before moving on.

Conspire

Post #4July 18, 2012, 3:18 PM UTC

Hello there,

Download OTL to your Desktop

Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
Click on Minimal Output at the top
Download the following file scan.txt to your Desktop. Click here to download it. You may need to right click on it and select "Save"
Double click inside the Custom Scan box at the bottom
A window will appear saying "Click OK to load a custom scan from a file or Cancel to cancel"
Click the OK button and navigate to the file scan.txt which we just saved to your desktop
Select scan.txt and click Open. Writing will now appear under the Custom Scan box
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan won't take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic

===================================================

Download Security Check by screen317 from here or here.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

===================================================

On your next reply please post :
OTL log
Checkup log

Please STOP and let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

donhughesmusic

Post #5July 18, 2012, 3:41 PM UTC

I'm being told that OTL is not a safe file by Norton.

Conspire

Post #6July 18, 2012, 4:00 PM UTC

It is safe and false positive. Do turn off all of your security programs to avoid interference.

donhughesmusic

Post #7July 18, 2012, 4:30 PM UTC

AFter running the programs, the ads are still playing. I did run the programs with the Internet Explorer up to see the directions.

OTL Text:

OTL logfile created on: 7/18/2012 11:51:59 AM - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\LizDon13\Desktop\Don
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.75 Gb Total Physical Memory | 1.90 Gb Available Physical Memory | 50.78% Memory free
7.50 Gb Paging File | 5.59 Gb Available in Paging File | 74.56% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451.66 Gb Total Space | 339.24 Gb Free Space | 75.11% Space Free | Partition Type: NTFS
Drive D: | 5.54 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Drive F: | 3.69 Gb Total Space | 0.03 Gb Free Space | 0.77% Space Free | Partition Type: FAT32

Computer Name: LIZDON13-PC | User Name: LizDon13 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\LizDon13\Desktop\Don\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Windows\Runservice.exe ()
PRC - C:\Program Files (x86)\Norton AntiVirus\Engine\19.7.1.5\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.EXE (Microsoft Corporation.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\eMachines\Hotkey Utility\HotkeyUtility.exe ()
PRC - C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe (Acer Group)
PRC - C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe (Acer Incorporated)
PRC - \\.\globalroot\systemroot\svchost.exe ()
PRC - \\.\globalroot\systemroot\svchost.exe ()

========== Modules (No Company Name) ==========

MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files (x86)\eMachines\Hotkey Utility\HotkeyUtility.exe ()
MOD - C:\Program Files (x86)\eMachines\Hotkey Utility\HotkeyHook.dll ()

========== Win32 Services (SafeList) ==========

SRV:64bit: - (wlcrasvc) – C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV:64bit: - (Updater Service) – C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe (Acer Group)
SRV:64bit: - (nSvcIp) – C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe ()
SRV:64bit: - (ForceWare Intelligent Application Manager (IAM)) ForceWare Intelligent Application Manager (IAM) – C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe ()
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (lxdn_device) – C:\Windows\SysNative\lxdncoms.exe ( )
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MBAMService) – C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (LicCtrlService) – C:\Windows\Runservice.exe ()
SRV - (NAV) – C:\Program Files (x86)\Norton AntiVirus\Engine\19.7.1.5\ccSvcHst.exe (Symantec Corporation)
SRV - (BBUpdate) – C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.EXE (Microsoft Corporation.)
SRV - (BBSvc) – C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.EXE (Microsoft Corporation.)
SRV - (AdobeARMservice) – C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (sftvsa) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
SRV - (sftlist) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
SRV - (NOBU) – C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Symantec Corporation)
SRV - (GameConsoleService) – C:\Program Files (x86)\eMachines Games\eMachines Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (Nero BackItUp Scheduler 4.0) – C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
SRV - (GREGService) – C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe (Acer Incorporated)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV:64bit: - (SymEvent) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (MBAMProtector) – C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (SymNetS) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\symnets.sys (Symantec Corporation)
DRV:64bit: - (SymEFA) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\SymEFA64.sys (Symantec Corporation)
DRV:64bit: - (SymDS) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\SymDS64.sys (Symantec Corporation)
DRV:64bit: - (SymIRON) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\Ironx64.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\srtsp64.sys (Symantec Corporation)
DRV:64bit: - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\srtspx64.sys (Symantec Corporation)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (ccSet_NAV) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\ccSetx64.sys (Symantec Corporation)
DRV:64bit: - (Sftvol) – C:\Windows\SysNative\drivers\Sftvollh.sys (Microsoft Corporation)
DRV:64bit: - (Sftplay) – C:\Windows\SysNative\drivers\Sftplaylh.sys (Microsoft Corporation)
DRV:64bit: - (Sftredir) – C:\Windows\SysNative\drivers\Sftredirlh.sys (Microsoft Corporation)
DRV:64bit: - (Sftfs) – C:\Windows\SysNative\drivers\Sftfslh.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (NVNET) – C:\Windows\SysNative\drivers\nvmf6264.sys (NVIDIA Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (NVENETFD) – C:\Windows\SysNative\drivers\nvm62x64.sys (NVIDIA Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\VirusDefs\20120717.018\ex64.sys (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\VirusDefs\20120717.018\eng64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (IDSVia64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\IPSDefs\20120717.003\IDSviA64.sys (Symantec Corporation)
DRV - (BHDrvx64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\BASHDefs\20120711.002\BHDrvx64.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://emachines.msn.com
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://emachines.msn.com
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm…mp;sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://emachines.msn.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://emachines.msn.com
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm…mp;sourceid=ie7

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://emachines.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?PC=msnHomeST&OCID=msnHomepage
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm…1I7ADFA_enUS478
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\LizDon13\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\IPSFFPlgn\ [2012/07/12 11:22:10 | 000,000,000 | —D | M]

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro
me&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.google.com
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\18.0.1025.162\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\18.0.1025.162\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\18.0.1025.162\gcswf32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Bing Bar (Enabled) = C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll

O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton AntiVirus\Engine\19.7.1.5\IPS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [Hotkey Utility] C:\Program Files (x86)\eMachines\Hotkey Utility\HotkeyUtility.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (Symantec Corporation)
O4 - HKCU..\Run: [EA Core] C:\Program Files (x86)\Electronic Arts\EADM\Core.exe (Electronic Arts)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {1D082E71-DF20-4AAF-863B-596428C49874} http://www.worldwinner.com/games/v50/tpir/tpir.cab (TPIR Control)
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} http://www.worldwinner.com/games/shared/wwlaunch.cab (Wwlaunch Control)
O16 - DPF: {8F6E7FB2-E56B-4F66-A4E1-9765D2565280} http://www.worldwinner.com/games/launcher/….0/iewwload.cab (WorldWinner ActiveX Launcher Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{068BA458-B45C-47FE-A520-7FA3691B0CDC}: DhcpNameServer = 192.168.1.1 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/04/29 22:57:16 | 000,054,544 | R— | M] (Electronic Arts) - D:\Autorun.exe – [ UDF ]
O32 - AutoRun File - [2008/10/21 18:22:16 | 000,000,045 | R— | M] () - D:\Autorun.inf – [ UDF ]
O33 - MountPoints2\{8f2f7c0b-7b66-11e1-bb54-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{8f2f7c0b-7b66-11e1-bb54-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Autorun.exe – [2009/04/29 22:57:16 | 000,054,544 | R— | M] (Electronic Arts)
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.VP60 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/07/18 11:29:07 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\Windows\svchost.exe
[2012/07/18 00:41:59 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2012/07/18 00:41:59 | 000,000,000 | —D | C] – C:\Program Files (x86)\Spybot - Search & Destroy
[2012/07/17 23:07:47 | 000,000,000 | —D | C] – C:\Users\LizDon13\AppData\Roaming\Ad-Aware Antivirus
[2012/07/13 12:38:10 | 000,000,000 | —D | C] – C:\Users\LizDon13\AppData\Roaming\Malwarebytes
[2012/07/13 12:37:43 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/07/13 12:37:43 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2012/07/13 12:37:42 | 000,024,904 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2012/07/13 12:37:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/07/12 11:48:01 | 000,000,000 | —D | C] – C:\Users\LizDon13\Documents\Symantec
[2012/07/12 11:20:43 | 000,175,736 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2012/07/12 11:20:43 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Symantec Shared
[2012/07/12 11:20:43 | 000,000,000 | —D | C] – C:\Program Files\Symantec
[2012/07/12 11:20:08 | 001,092,728 | R— | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\SymEFA64.sys
[2012/07/12 11:20:08 | 000,737,912 | R— | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\srtsp64.sys
[2012/07/12 11:20:08 | 000,451,192 | R— | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\SymDS64.sys
[2012/07/12 11:20:08 | 000,405,624 | R— | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\symnets.sys
[2012/07/12 11:20:08 | 000,190,072 | R— | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\Ironx64.sys
[2012/07/12 11:20:08 | 000,167,048 | R— | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\ccSetx64.sys
[2012/07/12 11:20:08 | 000,037,496 | R— | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\NAVx64\1307010.005\srtspx64.sys
[2012/07/12 11:20:04 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\NAVx64
[2012/07/12 11:20:04 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\NAVx64\1307010.005
[2012/07/12 11:20:03 | 000,000,000 | R–D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton AntiVirus
[2012/07/12 11:20:03 | 000,000,000 | —D | C] – C:\Program Files (x86)\Norton AntiVirus
[2012/07/12 11:06:12 | 000,000,000 | —D | C] – C:\ProgramData\PCSettings
[2012/07/12 08:01:14 | 000,000,000 | —D | C] – C:\Users\LizDon13\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
[2012/07/11 21:11:24 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2012/07/11 21:11:24 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2012/07/11 21:11:23 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2012/07/11 21:11:23 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2012/07/11 21:11:23 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2012/07/11 21:11:23 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2012/07/11 21:11:22 | 000,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2012/07/11 21:11:22 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2012/07/11 21:11:21 | 002,311,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2012/07/11 21:11:21 | 001,494,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2012/07/11 21:11:21 | 001,427,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2012/07/11 21:11:21 | 000,818,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2012/07/11 21:11:21 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2012/07/11 11:02:44 | 000,307,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncrypt.dll
[2012/07/04 21:09:21 | 000,000,000 | —D | C] – C:\Users\LizDon13\AppData\Local\{402BF6B9-B999-4D69-BCF0-D129B744E982}
[2012/07/04 21:05:47 | 000,000,000 | R–D | C] – C:\Users\LizDon13\Documents\Scanned Documents
[2012/07/04 21:05:47 | 000,000,000 | —D | C] – C:\Users\LizDon13\Documents\Fax
[2012/06/28 14:03:30 | 000,000,000 | —D | C] – C:\Windows\Sun
[2012/06/27 14:55:04 | 000,000,000 | —D | C] – C:\ProgramData\Sun
[2012/06/27 14:55:02 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2012/06/27 14:54:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\Oracle
[2012/06/27 14:52:56 | 000,687,504 | —- | C] (Oracle Corporation) – C:\Windows\SysWow64\deployJava1.dll
[2012/06/27 14:52:55 | 000,772,504 | —- | C] (Oracle Corporation) – C:\Windows\SysWow64\npDeployJava1.dll
[2012/06/27 14:52:55 | 000,227,720 | —- | C] (Oracle Corporation) – C:\Windows\SysWow64\javaws.exe
[2012/06/27 14:52:20 | 000,174,064 | —- | C] (Oracle Corporation) – C:\Windows\SysWow64\javaw.exe
[2012/06/27 14:52:20 | 000,174,064 | —- | C] (Oracle Corporation) – C:\Windows\SysWow64\java.exe
[2012/06/27 14:52:04 | 000,000,000 | —D | C] – C:\Program Files (x86)\Java
[2012/06/27 14:51:19 | 000,000,000 | —D | C] – C:\ProgramData\McAfee
[2012/06/27 14:49:22 | 000,000,000 | -H-D | C] – C:\jexepackres
[2012/06/22 17:32:42 | 002,622,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2012/06/22 17:32:42 | 000,057,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2012/06/22 17:32:42 | 000,044,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2012/06/22 17:32:30 | 000,701,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapi.dll
[2012/06/22 17:32:30 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wudriver.dll
[2012/06/22 17:32:30 | 000,038,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups.dll
[2012/06/22 17:32:19 | 000,186,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2012/06/22 17:32:19 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe

========== Files - Modified Within 30 Days ==========

[2012/07/18 11:35:58 | 000,009,920 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/07/18 11:35:58 | 000,009,920 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/07/18 11:30:02 | 000,000,412 | —- | M] () – C:\Windows\tasks\eMachines Registration - Reminder Recall task.job
[2012/07/18 11:28:26 | 000,000,898 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/07/18 11:28:10 | 000,001,713 | -HS- | M] () – C:\Windows\SysWow64\mmf.sys
[2012/07/18 11:28:05 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/07/18 11:28:01 | 3019,399,168 | -HS- | M] () – C:\hiberfil.sys
[2012/07/18 02:15:00 | 000,000,902 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/07/18 02:10:00 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/07/18 00:58:32 | 000,000,405 | —- | M] () – C:\Windows\wininit.ini
[2012/07/17 20:56:39 | 000,003,288 | —- | M] () – C:\bootsqm.dat
[2012/07/13 12:55:58 | 406,944,098 | —- | M] () – C:\Windows\MEMORY.DMP
[2012/07/13 12:37:47 | 000,001,118 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/07/12 17:28:28 | 000,008,942 | —- | M] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\VT20120410.034
[2012/07/12 13:17:06 | 000,002,349 | —- | M] () – C:\Users\Public\Desktop\Google Chrome.lnk
[2012/07/12 11:22:14 | 001,974,627 | —- | M] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\Cat.DB
[2012/07/12 11:20:43 | 000,175,736 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2012/07/12 11:20:43 | 000,007,488 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2012/07/12 11:20:43 | 000,000,855 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2012/07/12 11:20:36 | 000,002,469 | —- | M] () – C:\Users\Public\Desktop\Norton AntiVirus.lnk
[2012/07/12 11:19:41 | 000,001,265 | —- | M] () – C:\Users\LizDon13\Desktop\Norton Installation Files.lnk
[2012/07/12 05:47:55 | 000,274,320 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2012/07/11 19:10:42 | 000,426,184 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/07/11 19:10:42 | 000,070,344 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/07/03 13:46:44 | 000,024,904 | —- | M] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2012/06/27 14:52:06 | 000,174,064 | —- | M] (Oracle Corporation) – C:\Windows\SysWow64\javaw.exe
[2012/06/27 14:52:06 | 000,174,064 | —- | M] (Oracle Corporation) – C:\Windows\SysWow64\java.exe

========== Files Created - No Company Name ==========

[2012/07/17 20:56:39 | 000,003,288 | —- | C] () – C:\bootsqm.dat
[2012/07/13 12:48:52 | 406,944,098 | —- | C] () – C:\Windows\MEMORY.DMP
[2012/07/13 12:37:46 | 000,001,118 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/07/12 17:28:42 | 000,008,942 | —- | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\VT20120410.034
[2012/07/12 11:20:46 | 001,974,627 | —- | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\Cat.DB
[2012/07/12 11:20:43 | 000,007,488 | —- | C] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2012/07/12 11:20:43 | 000,000,855 | —- | C] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2012/07/12 11:20:36 | 000,002,469 | —- | C] () – C:\Users\Public\Desktop\Norton AntiVirus.lnk
[2012/07/12 11:20:04 | 000,007,496 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\SymDS64.cat
[2012/07/12 11:20:04 | 000,007,468 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\ccsetx64.cat
[2012/07/12 11:20:04 | 000,007,462 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\srtspx64.cat
[2012/07/12 11:20:04 | 000,007,460 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\SymEFA64.cat
[2012/07/12 11:20:04 | 000,007,458 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\symnet64.cat
[2012/07/12 11:20:04 | 000,007,458 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\srtsp64.cat
[2012/07/12 11:20:04 | 000,007,450 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\iron.cat
[2012/07/12 11:20:04 | 000,004,782 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\SymVTcer.dat
[2012/07/12 11:20:04 | 000,003,434 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\SymEFA.inf
[2012/07/12 11:20:04 | 000,002,852 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\SymDS.inf
[2012/07/12 11:20:04 | 000,001,441 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\SymNet.inf
[2012/07/12 11:20:04 | 000,001,437 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\srtsp64.inf
[2012/07/12 11:20:04 | 000,001,419 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\srtspx64.inf
[2012/07/12 11:20:04 | 000,000,853 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\ccSetx64.inf
[2012/07/12 11:20:04 | 000,000,772 | R— | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\Iron.inf
[2012/07/12 11:20:04 | 000,000,172 | —- | C] () – C:\Windows\SysNative\drivers\NAVx64\1307010.005\isolate.ini
[2012/07/12 08:01:14 | 000,001,265 | —- | C] () – C:\Users\LizDon13\Desktop\Norton Installation Files.lnk
[2012/06/06 12:25:27 | 000,000,405 | —- | C] () – C:\Windows\wininit.ini
[2012/04/02 17:25:12 | 000,743,066 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2012/04/01 07:45:45 | 000,001,713 | -HS- | C] () – C:\Windows\SysWow64\mmf.sys
[2012/04/01 07:45:43 | 000,048,640 | —- | C] () – C:\Windows\mmfs.dll
[2012/04/01 07:45:43 | 000,002,560 | —- | C] () – C:\Windows\Runservice.exe

========== Custom Scans ==========

< >

< %SYSTEMDRIVE%\*.* >
[2010/08/30 07:51:36 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2012/07/17 20:56:39 | 000,003,288 | —- | M] () – C:\bootsqm.dat
[2012/07/18 11:28:01 | 3019,399,168 | -HS- | M] () – C:\hiberfil.sys
[2012/07/18 11:28:03 | 4025,868,288 | -HS- | M] () – C:\pagefile.sys

< %systemroot%\Fonts\*.com >
[2009/07/14 01:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 01:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 01:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 01:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 16:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/09/23 03:32:56 | 000,301,936 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 00:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2012/04/03 12:25:03 | 000,000,221 | -HS- | M] () – C:\Users\LizDon13\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >

CHECKUP LOG

Results of screen317's Security Check version 0.99.43
Windows 7 x64 (UAC is enabled)
Out of date service pack!!
Internet Explorer 9
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Norton AntiVirus
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.62.0.1300
JavaFX 2.1.1
Java™ 7 Update 5
Adobe Reader X (10.1.2)
Google Chrome 20.0.1132.47
Google Chrome 20.0.1132.57
````````Process Check: objlist.exe by Laurent````````
Norton ccSvcHst.exe
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
Norton AntiVirus Engine 19.7.1.5 ccSvcHst.exe
Symantec Norton Online Backup NOBuAgent.exe
Symantec Norton Online Backup NOBuClient.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 7%
````````````````````End of Log``````````````````````

donhughesmusic

Post #8July 18, 2012, 4:41 PM UTC

I did notice that if I am not connected to the Internet, they don't seem to play.

Conspire

Post #9July 19, 2012, 4:24 AM UTC

Thanks for the feedback. Before moving on further, I'd like to get a bit more information.

Download TDSSKiller.exe and save it to your desktop

Execute TDSSKiller.exe by doubleclicking on it.
Press Start Scan
If Malicious objects are found, do NOT select Cure. Change the action to Skip, and save the log.
Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.log.txt

===================================================

Please download aswMBR.exe and save it to your desktop.

Double click aswMBR.exe to start the tool. (Vista/Windows 7 users - right click to run as administrator)
Allow it to update where necessary
Click Scan
Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet.
You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well.

===================================================

On your next reply please post :
TDSS Killer log
aswMBR log

Please STOP and let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

donhughesmusic

Post #10July 19, 2012, 10:30 AM UTC

The TDSS Killer did find something, but as requested, I did not do a fix. TDSS Killer log 06:05:56.0711 2136 TDSS rootkit removing tool [removed] Jul 16 2012 22:10:11 06:05:57.0359 2136 ============================================================ 06:05:57.0359 2136 Current date / time: 2012/07/19 06:05:57.0359 06:05:57.0359 2136 SystemInfo: 06:05:57.0359 2136 06:05:57.0359 2136 OS Version: 6.1.7600 ServicePack: 0.0 06:05:57.0359 2136 Product type: Workstation 06:05:57.0360 2136 ComputerName: LIZDON13-PC 06:05:57.0360 2136 UserName: LizDon13 06:05:57.0360 2136 Windows directory: C:\Windows 06:05:57.0360 2136 System windows directory: C:\Windows 06:05:57.0360 2136 Running under WOW64 06:05:57.0360 2136 Processor architecture: Intel x64 06:05:57.0360 2136 Number of processors: 2 06:05:57.0360 2136 Page size: 0x1000 06:05:57.0360 2136 Boot type: Normal boot 06:05:57.0360 2136 ============================================================ 06:05:59.0187 2136 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 06:05:59.0193 2136 Drive \Device\Harddisk2\DR2 - Size: 0xEC580000 (3.69 Gb), SectorSize: 0x200, Cylinders: 0x1E2, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 06:05:59.0196 2136 ============================================================ 06:05:59.0196 2136 \Device\Harddisk0\DR0: 06:05:59.0196 2136 MBR partitions: 06:05:59.0196 2136 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1C00800, BlocksNum 0x32000 06:05:59.0196 2136 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1C32800, BlocksNum 0x38753030 06:05:59.0196 2136 \Device\Harddisk2\DR2: 06:05:59.0198 2136 MBR partitions: 06:05:59.0198 2136 \Device\Harddisk2\DR2\Partition0: MBR, Type 0xB, StartLBA 0x2000, BlocksNum 0x760C00 06:05:59.0198 2136 ============================================================ 06:05:59.0213 2136 C: <-> \Device\Harddisk0\DR0\Partition1 06:05:59.0213 2136 ============================================================ 06:05:59.0213 2136 Initialize success 06:05:59.0213 2136 ============================================================ 06:06:01.0454 3344 ============================================================ 06:06:01.0454 3344 Scan started 06:06:01.0454 3344 Mode: Manual; 06:06:01.0454 3344 ============================================================ 06:06:04.0831 3344 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys 06:06:04.0834 3344 1394ohci - ok 06:06:04.0893 3344 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys 06:06:04.0897 3344 ACPI - ok 06:06:04.0916 3344 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys 06:06:04.0918 3344 AcpiPmi - ok 06:06:05.0368 3344 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 06:06:05.0369 3344 AdobeARMservice - ok 06:06:06.0193 3344 AdobeFlashPlayerUpdateSvc (5e1a953c6472e7bb644892a4d0df5e72) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 06:06:06.0195 3344 AdobeFlashPlayerUpdateSvc - ok 06:06:06.0438 3344 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 06:06:06.0456 3344 adp94xx - ok 06:06:07.0236 3344 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 06:06:07.0272 3344 adpahci - ok 06:06:07.0742 3344 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 06:06:07.0755 3344 adpu320 - ok 06:06:07.0894 3344 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll 06:06:07.0896 3344 AeLookupSvc - ok 06:06:08.0887 3344 AFD (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys 06:06:08.0911 3344 AFD - ok 06:06:08.0995 3344 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys 06:06:08.0996 3344 agp440 - ok 06:06:09.0082 3344 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe 06:06:09.0085 3344 ALG - ok 06:06:09.0142 3344 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys 06:06:09.0144 3344 aliide - ok 06:06:09.0172 3344 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys 06:06:09.0178 3344 amdide - ok 06:06:09.0227 3344 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 06:06:09.0229 3344 AmdK8 - ok 06:06:09.0319 3344 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 06:06:09.0319 3344 AmdPPM - ok 06:06:09.0363 3344 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys 06:06:09.0394 3344 amdsata - ok 06:06:09.0458 3344 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 06:06:09.0472 3344 amdsbs - ok 06:06:09.0555 3344 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys 06:06:09.0556 3344 amdxata - ok 06:06:09.0573 3344 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys 06:06:09.0575 3344 AppID - ok 06:06:09.0586 3344 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll 06:06:09.0610 3344 AppIDSvc - ok 06:06:09.0918 3344 Appinfo (d065be66822847b7f127d1f90158376e) C:\Windows\System32\appinfo.dll 06:06:09.0919 3344 Appinfo - ok 06:06:10.0668 3344 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 06:06:10.0669 3344 Apple Mobile Device - ok 06:06:10.0872 3344 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 06:06:10.0875 3344 arc - ok 06:06:10.0938 3344 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 06:06:10.0940 3344 arcsas - ok 06:06:11.0021 3344 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 06:06:11.0022 3344 AsyncMac - ok 06:06:11.0093 3344 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys 06:06:11.0095 3344 atapi - ok 06:06:11.0354 3344 AudioEndpointBuilder (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 06:06:11.0372 3344 AudioEndpointBuilder - ok 06:06:11.0378 3344 AudioSrv (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 06:06:11.0382 3344 AudioSrv - ok 06:06:11.0578 3344 AxInstSV (b20b5fa5ca050e9926e4d1db81501b32) C:\Windows\System32\AxInstSV.dll 06:06:11.0588 3344 AxInstSV - ok 06:06:11.0735 3344 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 06:06:11.0748 3344 b06bdrv - ok 06:06:11.0895 3344 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 06:06:11.0904 3344 b57nd60a - ok 06:06:12.0193 3344 BBSvc (a2494901e7226b356b8c1005c45f1c5f) C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.exe 06:06:12.0195 3344 BBSvc - ok 06:06:12.0300 3344 BBUpdate (63b1cbbae4790b5bac98f01bf9449722) C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe 06:06:12.0301 3344 BBUpdate - ok 06:06:12.0328 3344 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll 06:06:12.0329 3344 BDESVC - ok 06:06:12.0336 3344 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 06:06:12.0337 3344 Beep - ok 06:06:12.0551 3344 BFE (4992c609a6315671463e30f6512bc022) C:\Windows\System32\bfe.dll 06:06:12.0557 3344 BFE - ok 06:06:13.0348 3344 BHDrvx64 (c8ab71a5102d0fc103f6dfc750005137) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\BASHDefs\20120711.002\BHDrvx64.sys 06:06:13.0375 3344 BHDrvx64 - ok 06:06:13.0920 3344 BITS (7f0c323fe3da28aa4aa1bda3f575707f) C:\Windows\System32\qmgr.dll 06:06:13.0930 3344 BITS - ok 06:06:13.0966 3344 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 06:06:13.0968 3344 blbdrive - ok 06:06:14.0050 3344 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe 06:06:14.0053 3344 Bonjour Service - ok 06:06:14.0095 3344 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys 06:06:14.0097 3344 bowser - ok 06:06:14.0110 3344 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 06:06:14.0115 3344 BrFiltLo - ok 06:06:14.0129 3344 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 06:06:14.0129 3344 BrFiltUp - ok 06:06:14.0168 3344 Browser (94fbc06f294d58d02361918418f996e3) C:\Windows\System32\browser.dll 06:06:14.0171 3344 Browser - ok 06:06:14.0206 3344 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 06:06:14.0209 3344 Brserid - ok 06:06:14.0215 3344 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 06:06:14.0217 3344 BrSerWdm - ok 06:06:14.0235 3344 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 06:06:14.0236 3344 BrUsbMdm - ok 06:06:14.0240 3344 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 06:06:14.0241 3344 BrUsbSer - ok 06:06:14.0258 3344 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 06:06:14.0259 3344 BTHMODEM - ok 06:06:14.0280 3344 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll 06:06:14.0282 3344 bthserv - ok 06:06:14.0352 3344 ccSet_NAV (0e1737a63aec0f6de231bb59836c0a11) C:\Windows\system32\drivers\NAVx64\1307010.005\ccSetx64.sys 06:06:14.0355 3344 ccSet_NAV - ok 06:06:14.0380 3344 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 06:06:14.0381 3344 cdfs - ok 06:06:14.0401 3344 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys 06:06:14.0403 3344 cdrom - ok 06:06:14.0425 3344 CertPropSvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 06:06:14.0427 3344 CertPropSvc - ok 06:06:14.0434 3344 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 06:06:14.0436 3344 circlass - ok 06:06:14.0472 3344 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 06:06:14.0478 3344 CLFS - ok 06:06:14.0550 3344 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 06:06:14.0566 3344 clr_optimization_v2.0.50727_32 - ok 06:06:14.0613 3344 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 06:06:14.0615 3344 clr_optimization_v2.0.50727_64 - ok 06:06:14.0691 3344 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 06:06:14.0693 3344 clr_optimization_v4.0.30319_32 - ok 06:06:14.0722 3344 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 06:06:14.0724 3344 clr_optimization_v4.0.30319_64 - ok 06:06:14.0751 3344 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 06:06:14.0753 3344 CmBatt - ok 06:06:14.0757 3344 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys 06:06:14.0765 3344 cmdide - ok 06:06:14.0830 3344 CNG (ca7720b73446fddec5c69519c1174c98) C:\Windows\system32\Drivers\cng.sys 06:06:14.0837 3344 CNG - ok 06:06:14.0877 3344 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 06:06:14.0879 3344 Compbatt - ok 06:06:14.0890 3344 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys 06:06:14.0891 3344 CompositeBus - ok 06:06:14.0906 3344 COMSysApp - ok 06:06:14.0917 3344 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 06:06:14.0927 3344 crcdisk - ok 06:06:14.0966 3344 CryptSvc (f02786b66375292e58c8777082d4396d) C:\Windows\system32\cryptsvc.dll 06:06:14.0967 3344 CryptSvc - ok 06:06:15.0114 3344 cvhsvc (72794d112cbaff3bc0c29bf7350d4741) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE 06:06:15.0119 3344 cvhsvc - ok 06:06:15.0194 3344 DcomLaunch (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll 06:06:15.0200 3344 DcomLaunch - ok 06:06:15.0248 3344 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll 06:06:15.0281 3344 defragsvc - ok 06:06:15.0340 3344 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys 06:06:15.0342 3344 DfsC - ok 06:06:15.0381 3344 Dhcp (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll 06:06:15.0387 3344 Dhcp - ok 06:06:15.0424 3344 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 06:06:15.0425 3344 discache - ok 06:06:15.0455 3344 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 06:06:15.0456 3344 Disk - ok 06:06:15.0499 3344 Dnscache (85cf424c74a1d5ec33533e1dbff9920a) C:\Windows\System32\dnsrslvr.dll 06:06:15.0501 3344 Dnscache - ok 06:06:15.0528 3344 dot3svc (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll 06:06:15.0531 3344 dot3svc - ok 06:06:15.0565 3344 DPS (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll 06:06:15.0566 3344 DPS - ok 06:06:15.0584 3344 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 06:06:15.0585 3344 drmkaud - ok 06:06:15.0675 3344 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys 06:06:15.0714 3344 DXGKrnl - ok 06:06:15.0731 3344 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll 06:06:15.0733 3344 EapHost - ok 06:06:15.0990 3344 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 06:06:16.0046 3344 ebdrv - ok 06:06:16.0125 3344 eeCtrl (ba6420c1f7070ed8f1ba372844f3e1ec) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys 06:06:16.0131 3344 eeCtrl - ok 06:06:16.0313 3344 EFS (156f6159457d0aa7e59b62681b56eb90) C:\Windows\System32\lsass.exe 06:06:16.0315 3344 EFS - ok 06:06:16.0397 3344 ehRecvr (47c071994c3f649f23d9cd075ac9304a) C:\Windows\ehome\ehRecvr.exe 06:06:16.0410 3344 ehRecvr - ok 06:06:16.0446 3344 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe 06:06:16.0462 3344 ehSched - ok 06:06:16.0682 3344 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 06:06:16.0689 3344 elxstor - ok 06:06:16.0782 3344 EraserUtilRebootDrv (1343df3451bc0c442dc69837c6fba21b) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 06:06:16.0784 3344 EraserUtilRebootDrv - ok 06:06:16.0801 3344 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys 06:06:16.0802 3344 ErrDev - ok 06:06:16.0855 3344 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll 06:06:16.0859 3344 EventSystem - ok 06:06:16.0888 3344 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 06:06:16.0890 3344 exfat - ok 06:06:16.0912 3344 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 06:06:16.0915 3344 fastfat - ok 06:06:16.0989 3344 Fax (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe 06:06:16.0997 3344 Fax - ok 06:06:17.0002 3344 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 06:06:17.0024 3344 fdc - ok 06:06:17.0041 3344 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll 06:06:17.0042 3344 fdPHost - ok 06:06:17.0051 3344 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll 06:06:17.0052 3344 FDResPub - ok 06:06:17.0077 3344 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 06:06:17.0078 3344 FileInfo - ok 06:06:17.0087 3344 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 06:06:17.0088 3344 Filetrace - ok 06:06:17.0096 3344 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 06:06:17.0098 3344 flpydisk - ok 06:06:17.0132 3344 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys 06:06:17.0142 3344 FltMgr - ok 06:06:17.0403 3344 FontCache (cb5e4b9c319e3c6bb363eb7e58a4a051) C:\Windows\system32\FntCache.dll 06:06:17.0415 3344 FontCache - ok 06:06:17.0467 3344 FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 06:06:17.0469 3344 FontCache3.0.0.0 - ok 06:06:17.0584 3344 ForceWare Intelligent Application Manager (IAM) (52b58a46beefb238c580b69fd051cb5b) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe 06:06:17.0588 3344 ForceWare Intelligent Application Manager (IAM) - ok 06:06:17.0677 3344 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 06:06:17.0679 3344 FsDepends - ok 06:06:17.0712 3344 Fs_Rec (d3e3f93d67821a2db2b3d9fac2dc2064) C:\Windows\system32\drivers\Fs_Rec.sys 06:06:17.0713 3344 Fs_Rec - ok 06:06:17.0751 3344 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys 06:06:17.0760 3344 fvevol - ok 06:06:17.0787 3344 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 06:06:17.0789 3344 gagp30kx - ok 06:06:17.0881 3344 GameConsoleService (ce16683cfd11fe70bde435dda5ea1fca) C:\Program Files (x86)\eMachines Games\eMachines Game Console\GameConsoleService.exe 06:06:17.0903 3344 GameConsoleService - ok 06:06:17.0929 3344 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 06:06:17.0930 3344 GEARAspiWDM - ok 06:06:18.0002 3344 gpsvc (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll 06:06:18.0009 3344 gpsvc - ok 06:06:18.0032 3344 GREGService (0191dee9b9eb7902af2cf4f67301095d) C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe 06:06:18.0033 3344 GREGService - ok 06:06:18.0121 3344 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 06:06:18.0122 3344 gupdate - ok 06:06:18.0125 3344 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 06:06:18.0126 3344 gupdatem - ok 06:06:18.0162 3344 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 06:06:18.0163 3344 gusvc - ok 06:06:18.0168 3344 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 06:06:18.0169 3344 hcw85cir - ok 06:06:18.0208 3344 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys 06:06:18.0212 3344 HdAudAddService - ok 06:06:18.0233 3344 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys 06:06:18.0235 3344 HDAudBus - ok 06:06:18.0245 3344 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 06:06:18.0246 3344 HidBatt - ok 06:06:18.0265 3344 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 06:06:18.0267 3344 HidBth - ok 06:06:18.0287 3344 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 06:06:18.0288 3344 HidIr - ok 06:06:18.0303 3344 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll 06:06:18.0306 3344 hidserv - ok 06:06:18.0332 3344 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys 06:06:18.0333 3344 HidUsb - ok 06:06:18.0359 3344 hkmsvc (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll 06:06:18.0361 3344 hkmsvc - ok 06:06:18.0387 3344 HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll 06:06:18.0390 3344 HomeGroupListener - ok 06:06:18.0417 3344 HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll 06:06:18.0420 3344 HomeGroupProvider - ok 06:06:18.0439 3344 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys 06:06:18.0440 3344 HpSAMD - ok 06:06:18.0532 3344 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys 06:06:18.0557 3344 HTTP - ok 06:06:18.0604 3344 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys 06:06:18.0605 3344 hwpolicy - ok 06:06:18.0636 3344 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 06:06:18.0637 3344 i8042prt - ok 06:06:18.0682 3344 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys 06:06:18.0691 3344 iaStorV - ok 06:06:18.0783 3344 idsvc (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 06:06:18.0788 3344 idsvc - ok 06:06:18.0969 3344 IDSVia64 (ce0bf35c79e03bb89da6b14fac838605) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\IPSDefs\20120718.001\IDSvia64.sys 06:06:18.0977 3344 IDSVia64 - ok 06:06:19.0078 3344 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 06:06:19.0081 3344 iirsp - ok 06:06:19.0170 3344 IKEEXT (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll 06:06:19.0181 3344 IKEEXT - ok 06:06:19.0398 3344 IntcAzAudAddService (2e3b99e8c23be2bf32ebe1db5261f275) C:\Windows\system32\drivers\RTKVHD64.sys 06:06:19.0435 3344 IntcAzAudAddService - ok 06:06:19.0527 3344 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys 06:06:19.0528 3344 intelide - ok 06:06:19.0548 3344 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 06:06:19.0549 3344 intelppm - ok 06:06:19.0564 3344 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll 06:06:19.0567 3344 IPBusEnum - ok 06:06:19.0586 3344 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys 06:06:19.0588 3344 IpFilterDriver - ok 06:06:19.0629 3344 iphlpsvc (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll 06:06:19.0635 3344 iphlpsvc - ok 06:06:19.0646 3344 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys 06:06:19.0665 3344 IPMIDRV - ok 06:06:19.0691 3344 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 06:06:19.0695 3344 IPNAT - ok 06:06:19.0804 3344 iPod Service (50d6ccc6ff5561f9f56946b3e6164fb8) C:\Program Files\iPod\bin\iPodService.exe 06:06:19.0809 3344 iPod Service - ok 06:06:19.0837 3344 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 06:06:19.0838 3344 IRENUM - ok 06:06:19.0852 3344 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys 06:06:19.0864 3344 isapnp - ok 06:06:19.0898 3344 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys 06:06:19.0901 3344 iScsiPrt - ok 06:06:19.0916 3344 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys 06:06:19.0917 3344 kbdclass - ok 06:06:19.0942 3344 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys 06:06:19.0944 3344 kbdhid - ok 06:06:19.0971 3344 KeyIso (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 06:06:19.0972 3344 KeyIso - ok 06:06:19.0990 3344 KSecDD (4f4b5fde429416877de7143044582eb5) C:\Windows\system32\Drivers\ksecdd.sys 06:06:19.0992 3344 KSecDD - ok 06:06:20.0021 3344 KSecPkg (6f40465a44ecdc1731befafec5bdd03c) C:\Windows\system32\Drivers\ksecpkg.sys 06:06:20.0023 3344 KSecPkg - ok 06:06:20.0033 3344 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 06:06:20.0033 3344 ksthunk - ok 06:06:20.0076 3344 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll 06:06:20.0108 3344 KtmRm - ok 06:06:20.0165 3344 LanmanServer (81f1d04d4d0e433099365127375fd501) C:\Windows\system32\srvsvc.dll 06:06:20.0168 3344 LanmanServer - ok 06:06:20.0195 3344 LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll 06:06:20.0196 3344 LanmanWorkstation - ok 06:06:20.0243 3344 LicCtrlService (29fab5363138f6e322f4cd780ed9d337) C:\Windows\runservice.exe 06:06:20.0243 3344 LicCtrlService - ok 06:06:20.0268 3344 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 06:06:20.0269 3344 lltdio - ok 06:06:20.0307 3344 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll 06:06:20.0317 3344 lltdsvc - ok 06:06:20.0336 3344 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll 06:06:20.0337 3344 lmhosts - ok 06:06:20.0370 3344 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 06:06:20.0371 3344 LSI_FC - ok 06:06:20.0384 3344 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 06:06:20.0386 3344 LSI_SAS - ok 06:06:20.0394 3344 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 06:06:20.0396 3344 LSI_SAS2 - ok 06:06:20.0410 3344 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 06:06:20.0411 3344 LSI_SCSI - ok 06:06:20.0518 3344 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 06:06:20.0520 3344 luafv - ok 06:06:20.0549 3344 lxdn_device - ok 06:06:20.0597 3344 MBAMProtector (dc8490812a3b72811ae534f423b4c206) C:\Windows\system32\drivers\mbam.sys 06:06:20.0597 3344 MBAMProtector - ok 06:06:20.0685 3344 MBAMService (43683e970f008c93c9429ef428147a54) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 06:06:20.0691 3344 MBAMService - ok 06:06:20.0715 3344 Mcx2Svc (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll 06:06:20.0717 3344 Mcx2Svc - ok 06:06:20.0727 3344 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 06:06:20.0728 3344 megasas - ok 06:06:20.0749 3344 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 06:06:20.0753 3344 MegaSR - ok 06:06:20.0781 3344 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 06:06:20.0782 3344 MMCSS - ok 06:06:20.0786 3344 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 06:06:20.0787 3344 Modem - ok 06:06:20.0818 3344 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 06:06:20.0819 3344 monitor - ok 06:06:20.0852 3344 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 06:06:20.0853 3344 mouclass - ok 06:06:20.0871 3344 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 06:06:20.0872 3344 mouhid - ok 06:06:20.0900 3344 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys 06:06:20.0901 3344 mountmgr - ok 06:06:20.0912 3344 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys 06:06:20.0915 3344 mpio - ok 06:06:20.0937 3344 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 06:06:20.0939 3344 mpsdrv - ok 06:06:20.0988 3344 MpsSvc (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll 06:06:20.0996 3344 MpsSvc - ok 06:06:21.0018 3344 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys 06:06:21.0020 3344 MRxDAV - ok 06:06:21.0055 3344 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys 06:06:21.0058 3344 mrxsmb - ok 06:06:21.0092 3344 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys 06:06:21.0095 3344 mrxsmb10 - ok 06:06:21.0280 3344 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys 06:06:21.0282 3344 mrxsmb20 - ok 06:06:21.0301 3344 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys 06:06:21.0354 3344 msahci - ok 06:06:21.0376 3344 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys 06:06:21.0378 3344 msdsm - ok 06:06:21.0416 3344 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe 06:06:21.0418 3344 MSDTC - ok 06:06:21.0455 3344 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 06:06:21.0456 3344 Msfs - ok 06:06:21.0472 3344 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 06:06:21.0473 3344 mshidkmdf - ok 06:06:21.0479 3344 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys 06:06:21.0480 3344 msisadrv - ok 06:06:21.0518 3344 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll 06:06:21.0521 3344 MSiSCSI - ok 06:06:21.0524 3344 msiserver - ok 06:06:21.0547 3344 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 06:06:21.0548 3344 MSKSSRV - ok 06:06:21.0567 3344 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 06:06:21.0569 3344 MSPCLOCK - ok 06:06:21.0572 3344 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 06:06:21.0573 3344 MSPQM - ok 06:06:21.0608 3344 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys 06:06:21.0612 3344 MsRPC - ok 06:06:21.0637 3344 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys 06:06:21.0638 3344 mssmbios - ok 06:06:21.0646 3344 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 06:06:21.0647 3344 MSTEE - ok 06:06:21.0668 3344 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 06:06:21.0750 3344 MTConfig - ok 06:06:21.0825 3344 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 06:06:21.0826 3344 Mup - ok 06:06:21.0898 3344 napagent (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll 06:06:21.0912 3344 napagent - ok 06:06:21.0949 3344 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 06:06:21.0953 3344 NativeWifiP - ok 06:06:22.0047 3344 NAV (c6948f034d7edabcfa2234d399fc78bc) C:\Program Files (x86)\Norton AntiVirus\Engine\19.7.1.5\ccSvcHst.exe 06:06:22.0048 3344 NAV - ok 06:06:22.0175 3344 NAVENG (8043d41f881d6ace40b854ad6e32217f) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\VirusDefs\20120718.002\ENG64.SYS 06:06:22.0177 3344 NAVENG - ok 06:06:22.0302 3344 NAVEX15 (9a9ab2fc45d701daed465d14980f1305) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\VirusDefs\20120718.002\EX64.SYS 06:06:22.0333 3344 NAVEX15 - ok 06:06:22.0821 3344 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys 06:06:22.0830 3344 NDIS - ok 06:06:22.0868 3344 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 06:06:22.0870 3344 NdisCap - ok 06:06:22.0911 3344 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 06:06:22.0912 3344 NdisTapi - ok 06:06:22.0923 3344 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys 06:06:22.0926 3344 Ndisuio - ok 06:06:22.0956 3344 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys 06:06:22.0958 3344 NdisWan - ok 06:06:22.0971 3344 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys 06:06:22.0972 3344 NDProxy - ok 06:06:23.0092 3344 Nero BackItUp Scheduler 4.0 (7d2633295eb6ff2b938185874884059d) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe 06:06:23.0122 3344 Nero BackItUp Scheduler 4.0 - ok 06:06:23.0168 3344 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 06:06:23.0170 3344 NetBIOS - ok 06:06:23.0200 3344 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys 06:06:23.0209 3344 NetBT - ok 06:06:23.0231 3344 Netlogon (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 06:06:23.0232 3344 Netlogon - ok 06:06:23.0280 3344 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll 06:06:23.0285 3344 Netman - ok 06:06:23.0326 3344 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll 06:06:23.0331 3344 netprofm - ok 06:06:23.0383 3344 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 06:06:23.0386 3344 NetTcpPortSharing - ok 06:06:23.0411 3344 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 06:06:23.0413 3344 nfrd960 - ok 06:06:23.0451 3344 NlaSvc (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll 06:06:23.0454 3344 NlaSvc - ok 06:06:23.0663 3344 NOBU (5839a8027d6d324a7cd494051a96628c) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe 06:06:23.0706 3344 NOBU - ok 06:06:23.0783 3344 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 06:06:23.0784 3344 Npfs - ok 06:06:23.0814 3344 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll 06:06:23.0815 3344 nsi - ok 06:06:23.0829 3344 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 06:06:23.0830 3344 nsiproxy - ok 06:06:24.0059 3344 nSvcIp (20e179a7fe78b37a02d30c4d34c870e7) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe 06:06:24.0061 3344 nSvcIp - ok 06:06:24.0218 3344 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys 06:06:24.0237 3344 Ntfs - ok 06:06:24.0309 3344 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 06:06:24.0310 3344 Null - ok 06:06:24.0355 3344 NVENETFD (a85b4f2ef3a7304a5399ef0526423040) C:\Windows\system32\DRIVERS\nvm62x64.sys 06:06:24.0362 3344 NVENETFD - ok 06:06:24.0950 3344 nvlddmkm (4628fa8f0cc0d509bc14a223e99d36f3) C:\Windows\system32\DRIVERS\nvlddmkm.sys 06:06:25.0159 3344 nvlddmkm - ok 06:06:25.0288 3344 NVNET (909eedcbd365bb81027d8e742e6b3416) C:\Windows\system32\DRIVERS\nvmf6264.sys 06:06:25.0298 3344 NVNET - ok 06:06:25.0344 3344 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys 06:06:25.0361 3344 nvraid - ok 06:06:25.0385 3344 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys 06:06:25.0387 3344 nvstor - ok 06:06:25.0423 3344 nvstor64 (1e45f96342429d63dc30e0d9117da3d8) C:\Windows\system32\DRIVERS\nvstor64.sys 06:06:25.0425 3344 nvstor64 - ok 06:06:25.0460 3344 nvsvc (703f996312202d84663f7c8584acaf55) C:\Windows\system32\nvvsvc.exe 06:06:25.0463 3344 nvsvc - ok 06:06:25.0498 3344 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys 06:06:25.0500 3344 nv_agp - ok 06:06:25.0513 3344 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys 06:06:25.0515 3344 ohci1394 - ok 06:06:25.0588 3344 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 06:06:25.0600 3344 ose - ok 06:06:25.0880 3344 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 06:06:25.0905 3344 osppsvc - ok 06:06:26.0044 3344 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 06:06:26.0053 3344 p2pimsvc - ok 06:06:26.0111 3344 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll 06:06:26.0141 3344 p2psvc - ok 06:06:26.0178 3344 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 06:06:26.0180 3344 Parport - ok 06:06:26.0212 3344 partmgr (90061b1acfe8ccaa5345750ffe08d8b8) C:\Windows\system32\drivers\partmgr.sys 06:06:26.0213 3344 partmgr - ok 06:06:26.0226 3344 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll 06:06:26.0228 3344 PcaSvc - ok 06:06:26.0261 3344 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys 06:06:26.0264 3344 pci - ok 06:06:26.0278 3344 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys 06:06:26.0279 3344 pciide - ok 06:06:26.0294 3344 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 06:06:26.0297 3344 pcmcia - ok 06:06:26.0309 3344 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 06:06:26.0310 3344 pcw - ok 06:06:26.0352 3344 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 06:06:26.0365 3344 PEAUTH - ok 06:06:26.0433 3344 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe 06:06:26.0436 3344 PerfHost - ok 06:06:26.0577 3344 pla (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll 06:06:26.0592 3344 pla - ok 06:06:26.0669 3344 PlugPlay (98b1721b8718164293b9701b98c52d77) C:\Windows\system32\umpnpmgr.dll 06:06:26.0674 3344 PlugPlay - ok 06:06:26.0678 3344 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll 06:06:26.0680 3344 PNRPAutoReg - ok 06:06:26.0727 3344 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 06:06:26.0729 3344 PNRPsvc - ok 06:06:26.0793 3344 PolicyAgent (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll 06:06:26.0828 3344 PolicyAgent - ok 06:06:26.0871 3344 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll 06:06:26.0873 3344 Power - ok 06:06:26.0923 3344 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys 06:06:26.0925 3344 PptpMiniport - ok 06:06:26.0943 3344 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 06:06:26.0945 3344 Processor - ok 06:06:26.0977 3344 ProfSvc (97293447431311c06703368ad0f6c4be) C:\Windows\system32\profsvc.dll 06:06:26.0979 3344 ProfSvc - ok 06:06:27.0047 3344 ProtectedStorage (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 06:06:27.0048 3344 ProtectedStorage - ok 06:06:27.0080 3344 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys 06:06:27.0081 3344 Psched - ok 06:06:27.0176 3344 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 06:06:27.0217 3344 ql2300 - ok 06:06:27.0299 3344 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 06:06:27.0302 3344 ql40xx - ok 06:06:27.0332 3344 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll 06:06:27.0344 3344 QWAVE - ok 06:06:27.0358 3344 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 06:06:27.0374 3344 QWAVEdrv - ok 06:06:27.0387 3344 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 06:06:27.0389 3344 RasAcd - ok 06:06:27.0423 3344 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 06:06:27.0426 3344 RasAgileVpn - ok 06:06:27.0465 3344 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll 06:06:27.0469 3344 RasAuto - ok 06:06:27.0526 3344 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys 06:06:27.0527 3344 Rasl2tp - ok 06:06:27.0562 3344 RasMan (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll 06:06:27.0597 3344 RasMan - ok 06:06:27.0621 3344 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 06:06:27.0622 3344 RasPppoe - ok 06:06:27.0641 3344 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 06:06:27.0643 3344 RasSstp - ok 06:06:27.0676 3344 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys 06:06:27.0681 3344 rdbss - ok 06:06:27.0698 3344 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 06:06:27.0699 3344 rdpbus - ok 06:06:27.0760 3344 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 06:06:27.0761 3344 RDPCDD - ok 06:06:27.0825 3344 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 06:06:27.0826 3344 RDPENCDD - ok 06:06:27.0857 3344 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 06:06:27.0858 3344 RDPREFMP - ok 06:06:27.0896 3344 RDPWD (447de7e3dea39d422c1504f245b668b1) C:\Windows\system32\drivers\RDPWD.sys 06:06:27.0899 3344 RDPWD - ok 06:06:27.0930 3344 rdyboost (e5dc9ba9e439d6dbdd79f8caacb5bf01) C:\Windows\system32\drivers\rdyboost.sys 06:06:27.0933 3344 rdyboost - ok 06:06:27.0960 3344 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll 06:06:27.0963 3344 RemoteAccess - ok 06:06:27.0986 3344 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll 06:06:27.0994 3344 RemoteRegistry - ok 06:06:28.0007 3344 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll 06:06:28.0008 3344 RpcEptMapper - ok 06:06:28.0030 3344 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe 06:06:28.0060 3344 RpcLocator - ok 06:06:28.0148 3344 RpcSs (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll 06:06:28.0151 3344 RpcSs - ok 06:06:28.0183 3344 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 06:06:28.0184 3344 rspndr - ok 06:06:28.0213 3344 SamSs (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 06:06:28.0214 3344 SamSs - ok 06:06:28.0231 3344 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys 06:06:28.0246 3344 sbp2port - ok 06:06:28.0271 3344 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll 06:06:28.0274 3344 SCardSvr - ok 06:06:28.0288 3344 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys 06:06:28.0290 3344 scfilter - ok 06:06:28.0437 3344 Schedule (624d0f5ff99428bb90a5b8a4123e918e) C:\Windows\system32\schedsvc.dll 06:06:28.0468 3344 Schedule - ok 06:06:28.0525 3344 SCPolicySvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 06:06:28.0525 3344 SCPolicySvc - ok 06:06:28.0550 3344 SDRSVC (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll 06:06:28.0553 3344 SDRSVC - ok 06:06:28.0592 3344 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 06:06:28.0593 3344 secdrv - ok 06:06:28.0611 3344 seclogon (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll 06:06:28.0612 3344 seclogon - ok 06:06:28.0632 3344 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll 06:06:28.0633 3344 SENS - ok 06:06:28.0647 3344 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll 06:06:28.0659 3344 SensrSvc - ok 06:06:28.0674 3344 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 06:06:28.0689 3344 Serenum - ok 06:06:28.0709 3344 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 06:06:28.0711 3344 Serial - ok 06:06:28.0716 3344 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 06:06:28.0717 3344 sermouse - ok 06:06:28.0759 3344 SessionEnv (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll 06:06:28.0761 3344 SessionEnv - ok 06:06:28.0776 3344 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys 06:06:28.0777 3344 sffdisk - ok 06:06:28.0784 3344 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys 06:06:28.0788 3344 sffp_mmc - ok 06:06:28.0793 3344 sffp_sd (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\DRIVERS\sffp_sd.sys 06:06:28.0795 3344 sffp_sd - ok 06:06:28.0806 3344 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys06:06:28.0808 3344 sfloppy - ok 06:06:28.0893 3344 Sftfs (c6cc9297bd53e5229653303e556aa539) C:\Windows\system32\DRIVERS\Sftfslh.sys 06:06:28.0932 3344 Sftfs - ok 06:06:29.0054 3344 sftlist (13693b6354dd6e72dc5131da7d764b90) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe 06:06:29.0059 3344 sftlist - ok 06:06:29.0097 3344 Sftplay (390aa7bc52cee43f6790cdea1e776703) C:\Windows\system32\DRIVERS\Sftplaylh.sys 06:06:29.0100 3344 Sftplay - ok 06:06:29.0118 3344 Sftredir (617e29a0b0a2807466560d4c4e338d3e) C:\Windows\system32\DRIVERS\Sftredirlh.sys 06:06:29.0246 3344 Sftredir - ok 06:06:29.0309 3344 Sftvol (8f571f016fa1976f445147e9e6c8ae9b) C:\Windows\system32\DRIVERS\Sftvollh.sys 06:06:29.0338 3344 Sftvol - ok 06:06:29.0361 3344 sftvsa (c3cddd18f43d44ab713cf8c4916f7696) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe 06:06:29.0364 3344 sftvsa - ok 06:06:29.0482 3344 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll 06:06:29.0488 3344 SharedAccess - ok 06:06:29.0622 3344 ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll 06:06:29.0629 3344 ShellHWDetection - ok 06:06:29.0740 3344 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 06:06:29.0768 3344 SiSRaid2 - ok 06:06:29.0791 3344 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 06:06:29.0793 3344 SiSRaid4 - ok 06:06:29.0813 3344 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 06:06:29.0817 3344 Smb - ok 06:06:29.0898 3344 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe 06:06:29.0913 3344 SNMPTRAP - ok 06:06:29.0952 3344 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 06:06:29.0953 3344 spldr - ok 06:06:30.0102 3344 Spooler (f8e1fa03cb70d54a9892ac88b91d1e7b) C:\Windows\System32\spoolsv.exe 06:06:30.0109 3344 Spooler - ok 06:06:30.0654 3344 sppsvc (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe 06:06:30.0770 3344 sppsvc - ok 06:06:31.0185 3344 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll 06:06:31.0187 3344 sppuinotify - ok 06:06:31.0333 3344 SRTSP (06b9a7ba94356ec5207c5ddb59540378) C:\Windows\system32\drivers\NAVx64\1307010.005\SRTSP64.SYS 06:06:31.0341 3344 SRTSP - ok 06:06:31.0358 3344 SRTSPX (fbb8945a61e55a2345d12487c74a9d76) C:\Windows\system32\drivers\NAVx64\1307010.005\SRTSPX64.SYS 06:06:31.0360 3344 SRTSPX - ok 06:06:31.0399 3344 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys 06:06:31.0409 3344 srv - ok 06:06:31.0449 3344 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys 06:06:31.0461 3344 srv2 - ok 06:06:31.0499 3344 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys 06:06:31.0502 3344 srvnet - ok 06:06:31.0525 3344 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll 06:06:31.0529 3344 SSDPSRV - ok 06:06:31.0538 3344 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll 06:06:31.0540 3344 SstpSvc - ok 06:06:31.0559 3344 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 06:06:31.0566 3344 stexstor - ok 06:06:31.0606 3344 stisvc (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll 06:06:31.0614 3344 stisvc - ok 06:06:31.0660 3344 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys 06:06:31.0664 3344 swenum - ok 06:06:31.0790 3344 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll 06:06:31.0798 3344 swprv - ok 06:06:31.0945 3344 SymDS (8b2430762099598da40686f754632efd) C:\Windows\system32\drivers\NAVx64\1307010.005\SYMDS64.SYS 06:06:31.0964 3344 SymDS - ok 06:06:32.0371 3344 SymEFA (f90c7a190399165d3ab2245048d34786) C:\Windows\system32\drivers\NAVx64\1307010.005\SYMEFA64.SYS 06:06:32.0390 3344 SymEFA - ok 06:06:32.0447 3344 SymEvent (898bb48c797483420df523b2bbc1ecdb) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 06:06:32.0462 3344 SymEvent - ok 06:06:32.0710 3344 SymIRON (5013a76caaa1d7cf1c55214b490b4e35) C:\Windows\system32\drivers\NAVx64\1307010.005\Ironx64.SYS 06:06:32.0732 3344 SymIRON - ok 06:06:33.0834 3344 SymNetS (3911bd0e68c010e5438a87706abbe9ab) C:\Windows\system32\drivers\NAVx64\1307010.005\SYMNETS.SYS 06:06:33.0859 3344 SymNetS - ok 06:06:33.0981 3344 SysMain (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll 06:06:34.0001 3344 SysMain - ok 06:06:34.0095 3344 TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll 06:06:34.0097 3344 TabletInputService - ok 06:06:34.0127 3344 TapiSrv (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll 06:06:34.0136 3344 TapiSrv - ok 06:06:34.0141 3344 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll 06:06:34.0143 3344 TBS - ok 06:06:34.0285 3344 Tcpip (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\drivers\tcpip.sys 06:06:34.0332 3344 Tcpip - ok 06:06:34.0479 3344 TCPIP6 (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\DRIVERS\tcpip.sys 06:06:34.0488 3344 TCPIP6 - ok 06:06:34.0978 3344 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys 06:06:34.0979 3344 tcpipreg - ok 06:06:35.0369 3344 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 06:06:35.0382 3344 TDPIPE - ok 06:06:35.0447 3344 TDTCP (7518f7bcfd4b308abc9192bacaf6c970) C:\Windows\system32\drivers\tdtcp.sys 06:06:35.0448 3344 TDTCP - ok 06:06:35.0556 3344 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys 06:06:35.0557 3344 tdx - ok 06:06:35.0580 3344 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys 06:06:35.0582 3344 TermDD - ok 06:06:35.0648 3344 TermService (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll 06:06:35.0663 3344 TermService - ok 06:06:35.0674 3344 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll 06:06:35.0676 3344 Themes - ok 06:06:35.0701 3344 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 06:06:35.0702 3344 THREADORDER - ok 06:06:35.0721 3344 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll 06:06:35.0722 3344 TrkWks - ok 06:06:35.0751 3344 TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe 06:06:35.0753 3344 TrustedInstaller - ok 06:06:35.0778 3344 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys 06:06:35.0780 3344 tssecsrv - ok 06:06:35.0810 3344 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys 06:06:35.0812 3344 tunnel - ok 06:06:35.0833 3344 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 06:06:35.0835 3344 uagp35 - ok 06:06:35.0892 3344 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys 06:06:35.0901 3344 udfs - ok 06:06:35.0918 3344 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe 06:06:35.0920 3344 UI0Detect - ok 06:06:35.0933 3344 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys 06:06:35.0935 3344 uliagpkx - ok 06:06:35.0947 3344 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys 06:06:35.0948 3344 umbus - ok 06:06:35.0953 3344 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 06:06:35.0955 3344 UmPass - ok 06:06:36.0005 3344 Updater Service (f9ec9acd504d823d9b9ca98a4f8d3ca2) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe 06:06:36.0007 3344 Updater Service - ok 06:06:36.0040 3344 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll 06:06:36.0078 3344 upnphost - ok 06:06:36.0178 3344 USBAAPL64 (fb251567f41bc61988b26731dec19e4b) C:\Windows\system32\Drivers\usbaapl64.sys 06:06:36.0180 3344 USBAAPL64 - ok 06:06:36.0206 3344 usbccgp (7b6a127c93ee590e4d79a5f2a76fe46f) C:\Windows\system32\DRIVERS\usbccgp.sys 06:06:36.0208 3344 usbccgp - ok 06:06:36.0229 3344 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys 06:06:36.0231 3344 usbcir - ok 06:06:36.0253 3344 usbehci (92969ba5ac44e229c55a332864f79677) C:\Windows\system32\DRIVERS\usbehci.sys 06:06:36.0254 3344 usbehci - ok 06:06:36.0280 3344 usbhub (e7df1cfd28ca86b35ef5add0735ceef3) C:\Windows\system32\DRIVERS\usbhub.sys 06:06:36.0290 3344 usbhub - ok 06:06:36.0321 3344 usbohci (f1bb1e55f1e7a65c5839ccc7b36d773e) C:\Windows\system32\DRIVERS\usbohci.sys 06:06:36.0322 3344 usbohci - ok 06:06:36.0339 3344 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 06:06:36.0353 3344 usbprint - ok 06:06:36.0381 3344 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys 06:06:36.0382 3344 usbscan - ok 06:06:36.0402 3344 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS 06:06:36.0404 3344 USBSTOR - ok 06:06:36.0421 3344 usbuhci (bc3070350a491d84b518d7cca9abd36f) C:\Windows\system32\drivers\usbuhci.sys 06:06:36.0423 3344 usbuhci - ok 06:06:36.0441 3344 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll 06:06:36.0443 3344 UxSms - ok 06:06:36.0476 3344 VaultSvc (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 06:06:36.0477 3344 VaultSvc - ok 06:06:36.0574 3344 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys 06:06:36.0576 3344 vdrvroot - ok 06:06:37.0126 3344 vds (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe 06:06:37.0135 3344 vds - ok 06:06:37.0191 3344 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 06:06:37.0193 3344 vga - ok 06:06:37.0278 3344 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 06:06:37.0279 3344 VgaSave - ok 06:06:37.0290 3344 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys 06:06:37.0308 3344 vhdmp - ok 06:06:37.0312 3344 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys 06:06:37.0313 3344 viaide - ok 06:06:37.0332 3344 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys 06:06:37.0334 3344 volmgr - ok 06:06:37.0364 3344 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys 06:06:37.0368 3344 volmgrx - ok 06:06:37.0455 3344 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys 06:06:37.0459 3344 volsnap - ok 06:06:37.0493 3344 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 06:06:37.0497 3344 vsmraid - ok 06:06:37.0640 3344 VSS (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe 06:06:37.0657 3344 VSS - ok 06:06:37.0861 3344 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys 06:06:37.0863 3344 vwifibus - ok 06:06:37.0890 3344 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll 06:06:37.0896 3344 W32Time - ok 06:06:37.0948 3344 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 06:06:37.0949 3344 WacomPen - ok 06:06:37.0983 3344 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 06:06:37.0985 3344 WANARP - ok 06:06:37.0995 3344 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 06:06:37.0996 3344 Wanarpv6 - ok 06:06:38.0086 3344 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe 06:06:38.0181 3344 WatAdminSvc - ok 06:06:38.0473 3344 wbengine (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe 06:06:38.0520 3344 wbengine - ok 06:06:40.0040 3344 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll 06:06:40.0050 3344 WbioSrvc - ok 06:06:40.0106 3344 wcncsvc (dd1bae8ebfc653824d29ccf8c9054d68) C:\Windows\System32\wcncsvc.dll 06:06:40.0152 3344 wcncsvc - ok 06:06:40.0226 3344 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll 06:06:40.0229 3344 WcsPlugInService - ok 06:06:40.0267 3344 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 06:06:40.0269 3344 Wd - ok 06:06:40.0341 3344 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 06:06:40.0369 3344 Wdf01000 - ok 06:06:40.0391 3344 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 06:06:40.0393 3344 WdiServiceHost - ok 06:06:40.0397 3344 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 06:06:40.0399 3344 WdiSystemHost - ok 06:06:40.0460 3344 WebClient (733006127f235be7c35354ebee7b9a7b) C:\Windows\System32\webclnt.dll 06:06:40.0468 3344 WebClient - ok 06:06:40.0493 3344 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll 06:06:40.0497 3344 Wecsvc - ok 06:06:40.0565 3344 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll 06:06:40.0573 3344 wercplsupport - ok 06:06:41.0160 3344 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll 06:06:41.0190 3344 WerSvc - ok 06:06:42.0233 3344 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 06:06:42.0234 3344 WfpLwf - ok 06:06:42.0291 3344 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 06:06:42.0292 3344 WIMMount - ok 06:06:42.0316 3344 WinDefend - ok 06:06:42.0324 3344 WinHttpAutoProxySvc - ok 06:06:43.0092 3344 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll 06:06:43.0095 3344 Winmgmt - ok 06:06:45.0796 3344 WinRM (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll 06:06:45.0823 3344 WinRM - ok 06:06:45.0938 3344 WinUsb (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys 06:06:45.0939 3344 WinUsb - ok 06:06:45.0994 3344 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll 06:06:46.0012 3344 Wlansvc - ok 06:06:46.0059 3344 wlcrasvc (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 06:06:46.0072 3344 wlcrasvc - ok 06:06:46.0401 3344 wlidsvc (7e47c328fc4768cb8beafbcfafa70362) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 06:06:46.0433 3344 wlidsvc - ok 06:06:46.0676 3344 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys 06:06:46.0677 3344 WmiAcpi - ok 06:06:47.0041 3344 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe 06:06:47.0044 3344 wmiApSrv - ok 06:06:47.0110 3344 WMPNetworkSvc - ok 06:06:47.0260 3344 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll 06:06:47.0262 3344 WPCSvc - ok 06:06:47.0396 3344 WPDBusEnum (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll 06:06:47.0398 3344 WPDBusEnum - ok 06:06:47.0407 3344 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 06:06:47.0409 3344 ws2ifsl - ok 06:06:47.0439 3344 wscsvc (8f9f3969933c02da96eb0f84576db43e) C:\Windows\System32\wscsvc.dll 06:06:47.0441 3344 wscsvc - ok 06:06:47.0444 3344 WSearch - ok 06:06:47.0609 3344 wuauserv (d9ef901dca379cfe914e9fa13b73b4c4) C:\Windows\system32\wuaueng.dll 06:06:47.0646 3344 wuauserv - ok 06:06:47.0757 3344 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys 06:06:47.0759 3344 WudfPf - ok 06:06:47.0783 3344 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys 06:06:47.0785 3344 WUDFRd - ok 06:06:47.0799 3344 wudfsvc (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll 06:06:47.0800 3344 wudfsvc - ok 06:06:47.0825 3344 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll 06:06:47.0829 3344 WwanSvc - ok 06:06:47.0877 3344 MBR (0x1B8) (0f84f2562620c40d8a3e1908c8075675) \Device\Harddisk0\DR0 06:06:47.0909 3344 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - infected 06:06:47.0909 3344 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.b (0) 06:06:47.0920 3344 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk2\DR2 06:06:47.0929 3344 \Device\Harddisk2\DR2 - ok 06:06:47.0973 3344 Boot (0x1200) (7f8a94a5e0df110a601c59fb6a1ae568) \Device\Harddisk0\DR0\Partition0 06:06:47.0975 3344 \Device\Harddisk0\DR0\Partition0 - ok 06:06:47.0987 3344 Boot (0x1200) (8dd7f34b2b315058981fd5c872f75b30) \Device\Harddisk0\DR0\Partition1 06:06:47.0988 3344 \Device\Harddisk0\DR0\Partition1 - ok 06:06:47.0999 3344 Boot (0x1200) (f83ea84c22cc51ed4eaaee371b1f369f) \Device\Harddisk2\DR2\Partition0 06:06:48.0001 3344 \Device\Harddisk2\DR2\Partition0 - ok 06:06:48.0001 3344 ============================================================ 06:06:48.0001 3344 Scan finished 06:06:48.0002 3344 ============================================================ 06:06:48.0014 4772 Detected object count: 1 06:06:48.0014 4772 Actual detected object count: 1 06:07:04.0590 4772 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - skipped by user 06:07:04.0590 4772 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - User select action: Skip 06:07:14.0290 5052 ============================================================ 06:07:14.0290 5052 Scan started 06:07:14.0290 5052 Mode: Manual; 06:07:14.0290 5052 ============================================================ 06:07:18.0072 5052 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys 06:07:18.0074 5052 1394ohci - ok 06:07:18.0100 5052 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys 06:07:18.0102 5052 ACPI - ok 06:07:18.0115 5052 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys 06:07:18.0116 5052 AcpiPmi - ok 06:07:18.0179 5052 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 06:07:18.0180 5052 AdobeARMservice - ok 06:07:18.0265 5052 AdobeFlashPlayerUpdateSvc (5e1a953c6472e7bb644892a4d0df5e72) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 06:07:18.0266 5052 AdobeFlashPlayerUpdateSvc - ok 06:07:18.0300 5052 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys06:07:18.0303 5052 adp94xx - ok 06:07:18.0332 5052 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 06:07:18.0335 5052 adpahci - ok 06:07:18.0351 5052 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 06:07:18.0353 5052 adpu320 - ok 06:07:18.0374 5052 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll 06:07:18.0375 5052 AeLookupSvc - ok 06:07:18.0418 5052 AFD (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys 06:07:18.0421 5052 AFD - ok 06:07:18.0436 5052 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys 06:07:18.0437 5052 agp440 - ok 06:07:18.0452 5052 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe 06:07:18.0453 5052 ALG - ok 06:07:18.0465 5052 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys 06:07:18.0466 5052 aliide - ok 06:07:18.0478 5052 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys 06:07:18.0479 5052 amdide - ok 06:07:18.0494 5052 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 06:07:18.0496 5052 AmdK8 - ok 06:07:18.0511 5052 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 06:07:18.0512 5052 AmdPPM - ok 06:07:18.0533 5052 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys 06:07:18.0535 5052 amdsata - ok 06:07:18.0549 5052 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 06:07:18.0551 5052 amdsbs - ok 06:07:18.0568 5052 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys 06:07:18.0569 5052 amdxata - ok 06:07:18.0574 5052 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys 06:07:18.0575 5052 AppID - ok 06:07:18.0584 5052 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll 06:07:18.0585 5052 AppIDSvc - ok 06:07:18.0599 5052 Appinfo (d065be66822847b7f127d1f90158376e) C:\Windows\System32\appinfo.dll 06:07:18.0600 5052 Appinfo - ok 06:07:18.0669 5052 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 06:07:18.0670 5052 Apple Mobile Device - ok 06:07:18.0689 5052 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 06:07:18.0690 5052 arc - ok 06:07:18.0707 5052 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 06:07:18.0708 5052 arcsas - ok 06:07:18.0712 5052 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 06:07:18.0713 5052 AsyncMac - ok 06:07:18.0717 5052 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys 06:07:18.0718 5052 atapi - ok 06:07:18.0764 5052 AudioEndpointBuilder (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 06:07:18.0768 5052 AudioEndpointBuilder - ok 06:07:18.0774 5052 AudioSrv (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 06:07:18.0778 5052 AudioSrv - ok 06:07:18.0795 5052 AxInstSV (b20b5fa5ca050e9926e4d1db81501b32) C:\Windows\System32\AxInstSV.dll 06:07:18.0796 5052 AxInstSV - ok 06:07:18.0831 5052 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 06:07:18.0833 5052 b06bdrv - ok 06:07:18.0846 5052 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 06:07:18.0848 5052 b57nd60a - ok 06:07:18.0933 5052 BBSvc (a2494901e7226b356b8c1005c45f1c5f) C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.exe 06:07:18.0934 5052 BBSvc - ok 06:07:18.0947 5052 BBUpdate (63b1cbbae4790b5bac98f01bf9449722) C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe 06:07:18.0949 5052 BBUpdate - ok 06:07:18.0959 5052 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll 06:07:18.0960 5052 BDESVC - ok 06:07:18.0969 5052 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 06:07:18.0970 5052 Beep - ok 06:07:19.0005 5052 BFE (4992c609a6315671463e30f6512bc022) C:\Windows\System32\bfe.dll 06:07:19.0009 5052 BFE - ok 06:07:19.0349 5052 BHDrvx64 (c8ab71a5102d0fc103f6dfc750005137) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\BASHDefs\20120711.002\BHDrvx64.sys 06:07:19.0363 5052 BHDrvx64 - ok 06:07:19.0469 5052 BITS (7f0c323fe3da28aa4aa1bda3f575707f) C:\Windows\System32\qmgr.dll 06:07:19.0474 5052 BITS - ok 06:07:19.0490 5052 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 06:07:19.0491 5052 blbdrive - ok 06:07:19.0557 5052 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe 06:07:19.0560 5052 Bonjour Service - ok 06:07:19.0589 5052 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys 06:07:19.0589 5052 bowser - ok 06:07:19.0606 5052 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 06:07:19.0607 5052 BrFiltLo - ok 06:07:19.0619 5052 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 06:07:19.0620 5052 BrFiltUp - ok 06:07:19.0650 5052 Browser (94fbc06f294d58d02361918418f996e3) C:\Windows\System32\browser.dll 06:07:19.0652 5052 Browser - ok 06:07:19.0676 5052 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 06:07:19.0678 5052 Brserid - ok 06:07:19.0684 5052 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 06:07:19.0685 5052 BrSerWdm - ok 06:07:19.0700 5052 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 06:07:19.0700 5052 BrUsbMdm - ok 06:07:19.0708 5052 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 06:07:19.0709 5052 BrUsbSer - ok 06:07:19.0716 5052 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 06:07:19.0717 5052 BTHMODEM - ok 06:07:19.0735 5052 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll 06:07:19.0736 5052 bthserv - ok 06:07:19.0800 5052 ccSet_NAV (0e1737a63aec0f6de231bb59836c0a11) C:\Windows\system32\drivers\NAVx64\1307010.005\ccSetx64.sys 06:07:19.0801 5052 ccSet_NAV - ok 06:07:19.0819 5052 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 06:07:19.0820 5052 cdfs - ok 06:07:19.0836 5052 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys 06:07:19.0838 5052 cdrom - ok 06:07:19.0855 5052 CertPropSvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 06:07:19.0856 5052 CertPropSvc - ok 06:07:19.0863 5052 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 06:07:19.0864 5052 circlass - ok 06:07:19.0891 5052 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 06:07:19.0893 5052 CLFS - ok 06:07:19.0957 5052 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 06:07:19.0958 5052 clr_optimization_v2.0.50727_32 - ok 06:07:19.0995 5052 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 06:07:19.0996 5052 clr_optimization_v2.0.50727_64 - ok 06:07:20.0066 5052 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 06:07:20.0067 5052 clr_optimization_v4.0.30319_32 - ok 06:07:20.0091 5052 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 06:07:20.0093 5052 clr_optimization_v4.0.30319_64 - ok 06:07:20.0099 5052 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 06:07:20.0099 5052 CmBatt - ok 06:07:20.0104 5052 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys 06:07:20.0105 5052 cmdide - ok 06:07:20.0345 5052 CNG (ca7720b73446fddec5c69519c1174c98) C:\Windows\system32\Drivers\cng.sys 06:07:20.0347 5052 CNG - ok 06:07:20.0418 5052 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 06:07:20.0419 5052 Compbatt - ok 06:07:20.0425 5052 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys 06:07:20.0426 5052 CompositeBus - ok 06:07:20.0431 5052 COMSysApp - ok 06:07:20.0467 5052 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 06:07:20.0467 5052 crcdisk - ok 06:07:20.0586 5052 CryptSvc (f02786b66375292e58c8777082d4396d) C:\Windows\system32\cryptsvc.dll 06:07:20.0587 5052 CryptSvc - ok 06:07:20.0959 5052 cvhsvc (72794d112cbaff3bc0c29bf7350d4741) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE 06:07:20.0963 5052 cvhsvc - ok 06:07:21.0114 5052 DcomLaunch (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll 06:07:21.0117 5052 DcomLaunch - ok 06:07:21.0150 5052 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll 06:07:21.0152 5052 defragsvc - ok 06:07:21.0189 5052 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys 06:07:21.0190 5052 DfsC - ok 06:07:21.0207 5052 Dhcp (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll 06:07:21.0209 5052 Dhcp - ok 06:07:21.0223 5052 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 06:07:21.0223 5052 discache - ok 06:07:21.0236 5052 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 06:07:21.0237 5052 Disk - ok 06:07:21.0275 5052 Dnscache (85cf424c74a1d5ec33533e1dbff9920a) C:\Windows\System32\dnsrslvr.dll 06:07:21.0276 5052 Dnscache - ok 06:07:21.0290 5052 dot3svc (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll 06:07:21.0291 5052 dot3svc - ok 06:07:21.0305 5052 DPS (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll 06:07:21.0307 5052 DPS - ok 06:07:21.0316 5052 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 06:07:21.0317 5052 drmkaud - ok 06:07:21.0388 5052 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys 06:07:21.0393 5052 DXGKrnl - ok 06:07:21.0412 5052 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll 06:07:21.0413 5052 EapHost - ok 06:07:21.0678 5052 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 06:07:21.0693 5052 ebdrv - ok 06:07:21.0791 5052 eeCtrl (ba6420c1f7070ed8f1ba372844f3e1ec) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys 06:07:21.0794 5052 eeCtrl - ok 06:07:21.0904 5052 EFS (156f6159457d0aa7e59b62681b56eb90) C:\Windows\System32\lsass.exe 06:07:21.0906 5052 EFS - ok 06:07:22.0007 5052 ehRecvr (47c071994c3f649f23d9cd075ac9304a) C:\Windows\ehome\ehRecvr.exe 06:07:22.0011 5052 ehRecvr - ok 06:07:22.0039 5052 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe 06:07:22.0040 5052 ehSched - ok 06:07:22.0107 5052 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 06:07:22.0110 5052 elxstor - ok 06:07:22.0148 5052 EraserUtilRebootDrv (1343df3451bc0c442dc69837c6fba21b) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 06:07:22.0149 5052 EraserUtilRebootDrv - ok 06:07:22.0169 5052 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys 06:07:22.0170 5052 ErrDev - ok 06:07:22.0225 5052 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll 06:07:22.0227 5052 EventSystem - ok 06:07:22.0253 5052 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 06:07:22.0254 5052 exfat - ok 06:07:22.0284 5052 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 06:07:22.0286 5052 fastfat - ok 06:07:22.0346 5052 Fax (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe 06:07:22.0350 5052 Fax - ok 06:07:22.0356 5052 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 06:07:22.0358 5052 fdc - ok 06:07:22.0374 5052 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll 06:07:22.0375 5052 fdPHost - ok 06:07:22.0384 5052 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll 06:07:22.0385 5052 FDResPub - ok 06:07:22.0398 5052 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 06:07:22.0399 5052 FileInfo - ok 06:07:22.0412 5052 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 06:07:22.0412 5052 Filetrace - ok 06:07:22.0421 5052 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 06:07:22.0423 5052 flpydisk - ok 06:07:22.0457 5052 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys 06:07:22.0459 5052 FltMgr - ok 06:07:22.0563 5052 FontCache (cb5e4b9c319e3c6bb363eb7e58a4a051) C:\Windows\system32\FntCache.dll 06:07:22.0573 5052 FontCache - ok 06:07:22.0631 5052 FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 06:07:22.0631 5052 FontCache3.0.0.0 - ok 06:07:22.0741 5052 ForceWare Intelligent Application Manager (IAM) (52b58a46beefb238c580b69fd051cb5b) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe 06:07:22.0744 5052 ForceWare Intelligent Application Manager (IAM) - ok 06:07:22.0808 5052 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 06:07:22.0808 5052 FsDepends - ok 06:07:22.0844 5052 Fs_Rec (d3e3f93d67821a2db2b3d9fac2dc2064) C:\Windows\system32\drivers\Fs_Rec.sys 06:07:22.0844 5052 Fs_Rec - ok 06:07:22.0869 5052 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys 06:07:22.0871 5052 fvevol - ok 06:07:22.0886 5052 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 06:07:22.0887 5052 gagp30kx - ok 06:07:22.0949 5052 GameConsoleService (ce16683cfd11fe70bde435dda5ea1fca) C:\Program Files (x86)\eMachines Games\eMachines Game Console\GameConsoleService.exe 06:07:22.0951 5052 GameConsoleService - ok 06:07:22.0978 5052 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 06:07:22.0979 5052 GEARAspiWDM - ok 06:07:23.0043 5052 gpsvc (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll 06:07:23.0048 5052 gpsvc - ok 06:07:23.0056 5052 GREGService (0191dee9b9eb7902af2cf4f67301095d) C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe 06:07:23.0056 5052 GREGService - ok 06:07:23.0146 5052 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 06:07:23.0147 5052 gupdate - ok 06:07:23.0151 5052 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 06:07:23.0152 5052 gupdatem - ok 06:07:23.0169 5052 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 06:07:23.0170 5052 gusvc - ok 06:07:23.0175 5052 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 06:07:23.0176 5052 hcw85cir - ok 06:07:23.0209 5052 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys 06:07:23.0211 5052 HdAudAddService - ok 06:07:23.0233 5052 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys 06:07:23.0235 5052 HDAudBus - ok 06:07:23.0239 5052 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 06:07:23.0240 5052 HidBatt - ok 06:07:23.0256 5052 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 06:07:23.0257 5052 HidBth - ok 06:07:23.0269 5052 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 06:07:23.0270 5052 HidIr - ok 06:07:23.0286 5052 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll 06:07:23.0287 5052 hidserv - ok 06:07:23.0296 5052 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys 06:07:23.0297 5052 HidUsb - ok 06:07:23.0324 5052 hkmsvc (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll 06:07:23.0325 5052 hkmsvc - ok 06:07:23.0342 5052 HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll 06:07:23.0345 5052 HomeGroupListener - ok 06:07:23.0375 5052 HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll 06:07:23.0377 5052 HomeGroupProvider - ok 06:07:23.0396 5052 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys 06:07:23.0397 5052 HpSAMD - ok 06:07:23.0440 5052 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys 06:07:23.0444 5052 HTTP - ok 06:07:23.0454 5052 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys 06:07:23.0455 5052 hwpolicy - ok 06:07:23.0469 5052 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 06:07:23.0470 5052 i8042prt - ok 06:07:23.0516 5052 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys 06:07:23.0518 5052 iaStorV - ok 06:07:23.0613 5052 idsvc (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 06:07:23.0618 5052 idsvc - ok 06:07:23.0779 5052 IDSVia64 (ce0bf35c79e03bb89da6b14fac838605) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\IPSDefs\20120718.001\IDSvia64.sys 06:07:23.0782 5052 IDSVia64 - ok 06:07:23.0860 5052 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 06:07:23.0861 5052 iirsp - ok 06:07:23.0946 5052 IKEEXT (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll 06:07:23.0950 5052 IKEEXT - ok 06:07:24.0140 5052 IntcAzAudAddService (2e3b99e8c23be2bf32ebe1db5261f275) C:\Windows\system32\drivers\RTKVHD64.sys 06:07:24.0152 5052 IntcAzAudAddService - ok 06:07:24.0277 5052 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys 06:07:24.0278 5052 intelide - ok 06:07:24.0297 5052 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 06:07:24.0299 5052 intelppm - ok 06:07:24.0362 5052 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll 06:07:24.0364 5052 IPBusEnum - ok 06:07:24.0389 5052 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys 06:07:24.0390 5052 IpFilterDriver - ok 06:07:24.0439 5052 iphlpsvc (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll 06:07:24.0443 5052 iphlpsvc - ok 06:07:24.0452 5052 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys 06:07:24.0453 5052 IPMIDRV - ok 06:07:24.0499 5052 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 06:07:24.0500 5052 IPNAT - ok 06:07:24.0623 5052 iPod Service (50d6ccc6ff5561f9f56946b3e6164fb8) C:\Program Files\iPod\bin\iPodService.exe 06:07:24.0627 5052 iPod Service - ok 06:07:24.0652 5052 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 06:07:24.0652 5052 IRENUM - ok 06:07:24.0670 5052 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys 06:07:24.0670 5052 isapnp - ok 06:07:24.0692 5052 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys 06:07:24.0694 5052 iScsiPrt - ok 06:07:24.0731 5052 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys 06:07:24.0732 5052 kbdclass - ok 06:07:24.0750 5052 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys 06:07:24.0751 5052 kbdhid - ok 06:07:24.0779 5052 KeyIso (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 06:07:24.0780 5052 KeyIso - ok 06:07:24.0812 5052 KSecDD (4f4b5fde429416877de7143044582eb5) C:\Windows\system32\Drivers\ksecdd.sys 06:07:24.0812 5052 KSecDD - ok 06:07:24.0838 5052 KSecPkg (6f40465a44ecdc1731befafec5bdd03c) C:\Windows\system32\Drivers\ksecpkg.sys 06:07:24.0839 5052 KSecPkg - ok 06:07:24.0849 5052 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 06:07:24.0851 5052 ksthunk - ok 06:07:24.0888 5052 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll 06:07:24.0891 5052 KtmRm - ok 06:07:24.0958 5052 LanmanServer (81f1d04d4d0e433099365127375fd501) C:\Windows\system32\srvsvc.dll 06:07:24.0960 5052 LanmanServer - ok 06:07:24.0992 5052 LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll 06:07:24.0994 5052 LanmanWorkstation - ok 06:07:25.0025 5052 LicCtrlService (29fab5363138f6e322f4cd780ed9d337) C:\Windows\runservice.exe 06:07:25.0026 5052 LicCtrlService - ok 06:07:25.0050 5052 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 06:07:25.0050 5052 lltdio - ok 06:07:25.0085 5052 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll 06:07:25.0088 5052 lltdsvc - ok 06:07:25.0101 5052 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll 06:07:25.0103 5052 lmhosts - ok 06:07:25.0126 5052 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 06:07:25.0127 5052 LSI_FC - ok 06:07:25.0150 5052 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 06:07:25.0152 5052 LSI_SAS - ok 06:07:25.0162 5052 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 06:07:25.0163 5052 LSI_SAS2 - ok 06:07:25.0187 5052 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 06:07:25.0188 5052 LSI_SCSI - ok 06:07:25.0212 5052 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 06:07:25.0212 5052 luafv - ok 06:07:25.0215 5052 lxdn_device - ok 06:07:25.0271 5052 MBAMProtector (dc8490812a3b72811ae534f423b4c206) C:\Windows\system32\drivers\mbam.sys 06:07:25.0272 5052 MBAMProtector - ok 06:07:25.0361 5052 MBAMService (43683e970f008c93c9429ef428147a54) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 06:07:25.0364 5052 MBAMService - ok 06:07:25.0383 5052 Mcx2Svc (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll 06:07:25.0385 5052 Mcx2Svc - ok 06:07:25.0401 5052 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 06:07:25.0402 5052 megasas - ok 06:07:25.0416 5052 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 06:07:25.0418 5052 MegaSR - ok 06:07:25.0500 5052 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 06:07:25.0502 5052 MMCSS - ok 06:07:25.0507 5052 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 06:07:25.0507 5052 Modem - ok 06:07:25.0544 5052 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 06:07:25.0545 5052 monitor - ok 06:07:25.0558 5052 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 06:07:25.0559 5052 mouclass - ok 06:07:25.0574 5052 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 06:07:25.0575 5052 mouhid - ok 06:07:25.0594 5052 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys 06:07:25.0594 5052 mountmgr - ok 06:07:25.0611 5052 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys 06:07:25.0612 5052 mpio - ok 06:07:25.0638 5052 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 06:07:25.0638 5052 mpsdrv - ok 06:07:25.0718 5052 MpsSvc (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll 06:07:25.0726 5052 MpsSvc - ok 06:07:25.0737 5052 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys 06:07:25.0738 5052 MRxDAV - ok 06:07:25.0770 5052 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys 06:07:25.0771 5052 mrxsmb - ok 06:07:25.0813 5052 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys 06:07:25.0815 5052 mrxsmb10 - ok 06:07:25.0840 5052 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys 06:07:25.0841 5052 mrxsmb20 - ok 06:07:25.0845 5052 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys 06:07:25.0846 5052 msahci - ok 06:07:25.0866 5052 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys 06:07:25.0867 5052 msdsm - ok 06:07:25.0881 5052 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe 06:07:25.0883 5052 MSDTC - ok 06:07:25.0904 5052 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 06:07:25.0905 5052 Msfs - ok 06:07:25.0913 5052 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 06:07:25.0913 5052 mshidkmdf - ok 06:07:25.0920 5052 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys 06:07:25.0921 5052 msisadrv - ok 06:07:25.0943 5052 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll 06:07:25.0945 5052 MSiSCSI - ok 06:07:25.0948 5052 msiserver - ok 06:07:25.0963 5052 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 06:07:25.0963 5052 MSKSSRV - ok 06:07:25.0974 5052 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 06:07:25.0975 5052 MSPCLOCK - ok 06:07:25.0978 5052 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 06:07:25.0979 5052 MSPQM - ok 06:07:26.0014 5052 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys 06:07:26.0016 5052 MsRPC - ok 06:07:26.0028 5052 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys 06:07:26.0029 5052 mssmbios - ok 06:07:26.0033 5052 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 06:07:26.0034 5052 MSTEE - ok 06:07:26.0038 5052 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 06:07:26.0039 5052 MTConfig - ok 06:07:26.0169 5052 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 06:07:26.0170 5052 Mup - ok 06:07:26.0211 5052 napagent (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll 06:07:26.0214 5052 napagent - ok 06:07:26.0256 5052 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 06:07:26.0258 5052 NativeWifiP - ok 06:07:26.0346 5052 NAV (c6948f034d7edabcfa2234d399fc78bc) C:\Program Files (x86)\Norton AntiVirus\Engine\19.7.1.5\ccSvcHst.exe 06:07:26.0347 5052 NAV - ok 06:07:26.0475 5052 NAVENG (8043d41f881d6ace40b854ad6e32217f) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\VirusDefs\20120718.021\ENG64.SYS 06:07:26.0476 5052 NAVENG - ok 06:07:26.0589 5052 NAVEX15 (9a9ab2fc45d701daed465d14980f1305) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\VirusDefs\20120718.021\EX64.SYS 06:07:26.0599 5052 NAVEX15 - ok 06:07:26.0760 5052 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys 06:07:26.0765 5052 NDIS - ok 06:07:26.0801 5052 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 06:07:26.0802 5052 NdisCap - ok 06:07:26.0815 5052 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 06:07:26.0815 5052 NdisTapi - ok 06:07:26.0825 5052 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys 06:07:26.0825 5052 Ndisuio - ok 06:07:26.0843 5052 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys 06:07:26.0845 5052 NdisWan - ok 06:07:26.0864 5052 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys 06:07:26.0865 5052 NDProxy - ok 06:07:27.0050 5052 Nero BackItUp Scheduler 4.0 (7d2633295eb6ff2b938185874884059d) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe 06:07:27.0055 5052 Nero BackItUp Scheduler 4.0 - ok 06:07:27.0076 5052 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 06:07:27.0077 5052 NetBIOS - ok 06:07:27.0102 5052 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys 06:07:27.0105 5052 NetBT - ok 06:07:27.0137 5052 Netlogon (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 06:07:27.0138 5052 Netlogon - ok 06:07:27.0213 5052 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll 06:07:27.0216 5052 Netman - ok 06:07:27.0247 5052 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll 06:07:27.0250 5052 netprofm - ok 06:07:27.0297 5052 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 06:07:27.0298 5052 NetTcpPortSharing - ok 06:07:27.0310 5052 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 06:07:27.0310 5052 nfrd960 - ok 06:07:27.0339 5052 NlaSvc (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll 06:07:27.0341 5052 NlaSvc - ok 06:07:27.0477 5052 NOBU (5839a8027d6d324a7cd494051a96628c) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe 06:07:27.0492 5052 NOBU - ok 06:07:27.0581 5052 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 06:07:27.0582 5052 Npfs - ok 06:07:27.0597 5052 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll 06:07:27.0598 5052 nsi - ok 06:07:27.0611 5052 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 06:07:27.0611 5052 nsiproxy - ok 06:07:27.0681 5052 nSvcIp (20e179a7fe78b37a02d30c4d34c870e7) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe 06:07:27.0683 5052 nSvcIp - ok 06:07:27.0805 5052 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys 06:07:27.0815 5052 Ntfs - ok 06:07:27.0871 5052 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 06:07:27.0871 5052 Null - ok 06:07:27.0906 5052 NVENETFD (a85b4f2ef3a7304a5399ef0526423040) C:\Windows\system32\DRIVERS\nvm62x64.sys 06:07:27.0908 5052 NVENETFD - ok 06:07:28.0485 5052 nvlddmkm (4628fa8f0cc0d509bc14a223e99d36f3) C:\Windows\system32\DRIVERS\nvlddmkm.sys 06:07:28.0598 5052 nvlddmkm - ok 06:07:28.0667 5052 NVNET (909eedcbd365bb81027d8e742e6b3416) C:\Windows\system32\DRIVERS\nvmf6264.sys 06:07:28.0669 5052 NVNET - ok 06:07:28.0699 5052 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys 06:07:28.0700 5052 nvraid - ok 06:07:28.0723 5052 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys 06:07:28.0725 5052 nvstor - ok 06:07:28.0762 5052 nvstor64 (1e45f96342429d63dc30e0d9117da3d8) C:\Windows\system32\DRIVERS\nvstor64.sys 06:07:28.0764 5052 nvstor64 - ok 06:07:28.0780 5052 nvsvc (703f996312202d84663f7c8584acaf55) C:\Windows\system32\nvvsvc.exe 06:07:28.0782 5052 nvsvc - ok 06:07:28.0790 5052 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys 06:07:28.0791 5052 nv_agp - ok 06:07:28.0802 5052 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys 06:07:28.0803 5052 ohci1394 - ok 06:07:28.0860 5052 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 06:07:28.0861 5052 ose - ok 06:07:29.0166 5052 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 06:07:29.0190 5052 osppsvc - ok 06:07:29.0321 5052 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 06:07:29.0323 5052 p2pimsvc - ok 06:07:29.0369 5052 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll 06:07:29.0372 5052 p2psvc - ok 06:07:29.0386 5052 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 06:07:29.0387 5052 Parport - ok 06:07:29.0439 5052 partmgr (90061b1acfe8ccaa5345750ffe08d8b8) C:\Windows\system32\drivers\partmgr.sys 06:07:29.0439 5052 partmgr - ok 06:07:29.0453 5052 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll 06:07:29.0455 5052 PcaSvc - ok 06:07:29.0495 5052 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys 06:07:29.0496 5052 pci - ok 06:07:29.0511 5052 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys 06:07:29.0511 5052 pciide - ok 06:07:29.0546 5052 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 06:07:29.0547 5052 pcmcia - ok 06:07:29.0568 5052 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 06:07:29.0568 5052 pcw - ok 06:07:29.0632 5052 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 06:07:29.0636 5052 PEAUTH - ok 06:07:29.0734 5052 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe 06:07:29.0736 5052 PerfHost - ok 06:07:29.0866 5052 pla (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll 06:07:29.0874 5052 pla - ok 06:07:29.0951 5052 PlugPlay (98b1721b8718164293b9701b98c52d77) C:\Windows\system32\umpnpmgr.dll 06:07:29.0954 5052 PlugPlay - ok 06:07:29.0975 5052 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll 06:07:29.0976 5052 PNRPAutoReg - ok 06:07:30.0005 5052 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 06:07:30.0007 5052 PNRPsvc - ok 06:07:30.0043 5052 PolicyAgent (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll 06:07:30.0047 5052 PolicyAgent - ok 06:07:30.0068 5052 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll 06:07:30.0071 5052 Power - ok 06:07:30.0114 5052 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys 06:07:30.0115 5052 PptpMiniport - ok 06:07:30.0143 5052 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 06:07:30.0144 5052 Processor - ok 06:07:30.0218 5052 ProfSvc (97293447431311c06703368ad0f6c4be) C:\Windows\system32\profsvc.dll 06:07:30.0220 5052 ProfSvc - ok 06:07:30.0249 5052 ProtectedStorage (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 06:07:30.0251 5052 ProtectedStorage - ok 06:07:30.0280 5052 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys 06:07:30.0281 5052 Psched - ok 06:07:30.0397 5052 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 06:07:30.0414 5052 ql2300 - ok 06:07:30.0501 5052 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 06:07:30.0502 5052 ql40xx - ok 06:07:30.0620 5052 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll 06:07:30.0622 5052 QWAVE - ok 06:07:30.0639 5052 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 06:07:30.0640 5052 QWAVEdrv - ok 06:07:30.0653 5052 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 06:07:30.0654 5052 RasAcd - ok 06:07:30.0669 5052 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 06:07:30.0670 5052 RasAgileVpn - ok 06:07:30.0689 5052 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll 06:07:30.0691 5052 RasAuto - ok 06:07:30.0708 5052 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys 06:07:30.0709 5052 Rasl2tp - ok 06:07:30.0733 5052 RasMan (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll 06:07:30.0735 5052 RasMan - ok 06:07:30.0747 5052 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 06:07:30.0748 5052 RasPppoe - ok 06:07:30.0766 5052 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 06:07:30.0767 5052 RasSstp - ok 06:07:30.0790 5052 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys 06:07:30.0792 5052 rdbss - ok 06:07:30.0805 5052 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 06:07:30.0805 5052 rdpbus - ok 06:07:30.0817 5052 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 06:07:30.0818 5052 RDPCDD - ok 06:07:30.0841 5052 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 06:07:30.0841 5052 RDPENCDD - ok 06:07:30.0856 5052 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 06:07:30.0857 5052 RDPREFMP - ok 06:07:30.0889 5052 RDPWD (447de7e3dea39d422c1504f245b668b1) C:\Windows\system32\drivers\RDPWD.sys 06:07:30.0890 5052 RDPWD - ok 06:07:30.0917 5052 rdyboost (e5dc9ba9e439d6dbdd79f8caacb5bf01) C:\Windows\system32\drivers\rdyboost.sys 06:07:30.0918 5052 rdyboost - ok 06:07:30.0940 5052 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll 06:07:30.0941 5052 RemoteAccess - ok 06:07:30.0975 5052 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll 06:07:30.0977 5052 RemoteRegistry - ok 06:07:30.0987 5052 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll 06:07:30.0989 5052 RpcEptMapper - ok 06:07:31.0012 5052 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe 06:07:31.0013 5052 RpcLocator - ok 06:07:31.0046 5052 RpcSs (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll 06:07:31.0050 5052 RpcSs - ok 06:07:31.0121 5052 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 06:07:31.0122 5052 rspndr - ok 06:07:31.0187 5052 SamSs (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 06:07:31.0188 5052 SamSs - ok 06:07:31.0222 5052 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys 06:07:31.0224 5052 sbp2port - ok 06:07:31.0243 5052 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll 06:07:31.0245 5052 SCardSvr - ok 06:07:31.0260 5052 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys 06:07:31.0261 5052 scfilter - ok 06:07:31.0334 5052 Schedule (624d0f5ff99428bb90a5b8a4123e918e) C:\Windows\system32\schedsvc.dll 06:07:31.0342 5052 Schedule - ok 06:07:31.0389 5052 SCPolicySvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 06:07:31.0390 5052 SCPolicySvc - ok 06:07:31.0412 5052 SDRSVC (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll 06:07:31.0414 5052 SDRSVC - ok 06:07:31.0451 5052 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 06:07:31.0451 5052 secdrv - ok 06:07:31.0460 5052 seclogon (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll 06:07:31.0461 5052 seclogon - ok 06:07:31.0765 5052 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll 06:07:31.0766 5052 SENS - ok 06:07:31.0846 5052 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll 06:07:31.0847 5052 SensrSvc - ok 06:07:31.0855 5052 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 06:07:31.0856 5052 Serenum - ok 06:07:31.0868 5052 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 06:07:31.0869 5052 Serial - ok 06:07:31.0875 5052 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 06:07:31.0876 5052 sermouse - ok 06:07:31.0910 5052 SessionEnv (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll 06:07:31.0911 5052 SessionEnv - ok 06:07:31.0920 5052 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys 06:07:31.0921 5052 sffdisk - ok 06:07:31.0928 5052 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys 06:07:31.0929 5052 sffp_mmc - ok 06:07:31.0937 5052 sffp_sd (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\DRIVERS\sffp_sd.sys 06:07:31.0938 5052 sffp_sd - ok 06:07:31.0943 5052 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 06:07:31.0944 5052 sfloppy - ok 06:07:32.0017 5052 Sftfs (c6cc9297bd53e5229653303e556aa539) C:\Windows\system32\DRIVERS\Sftfslh.sys 06:07:32.0021 5052 Sftfs - ok 06:07:32.0110 5052 sftlist (13693b6354dd6e72dc5131da7d764b90) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe 06:07:32.0113 5052 sftlist - ok 06:07:32.0141 5052 Sftplay (390aa7bc52cee43f6790cdea1e776703) C:\Windows\system32\DRIVERS\Sftplaylh.sys 06:07:32.0143 5052 Sftplay - ok 06:07:32.0157 5052 Sftredir (617e29a0b0a2807466560d4c4e338d3e) C:\Windows\system32\DRIVERS\Sftredirlh.sys 06:07:32.0158 5052 Sftredir - ok 06:07:32.0164 5052 Sftvol (8f571f016fa1976f445147e9e6c8ae9b) C:\Windows\system32\DRIVERS\Sftvollh.sys 06:07:32.0165 5052 Sftvol - ok 06:07:32.0196 5052 sftvsa (c3cddd18f43d44ab713cf8c4916f7696) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe 06:07:32.0197 5052 sftvsa - ok 06:07:32.0256 5052 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll 06:07:32.0258 5052 SharedAccess - ok 06:07:32.0294 5052 ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll 06:07:32.0297 5052 ShellHWDetection - ok 06:07:32.0302 5052 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 06:07:32.0302 5052 SiSRaid2 - ok 06:07:32.0323 5052 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 06:07:32.0325 5052 SiSRaid4 - ok 06:07:32.0342 5052 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 06:07:32.0343 5052 Smb - ok 06:07:32.0370 5052 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe 06:07:32.0372 5052 SNMPTRAP - ok 06:07:32.0384 5052 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 06:07:32.0385 5052 spldr - ok 06:07:32.0458 5052 Spooler (f8e1fa03cb70d54a9892ac88b91d1e7b) C:\Windows\System32\spoolsv.exe 06:07:32.0463 5052 Spooler - ok 06:07:32.0716 5052 sppsvc (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe 06:07:32.0743 5052 sppsvc - ok 06:07:32.0836 5052 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll 06:07:32.0837 5052 sppuinotify - ok 06:07:32.0950 5052 SRTSP (06b9a7ba94356ec5207c5ddb59540378) C:\Windows\system32\drivers\NAVx64\1307010.005\SRTSP64.SYS 06:07:32.0955 5052 SRTSP - ok 06:07:32.0974 5052 SRTSPX (fbb8945a61e55a2345d12487c74a9d76) C:\Windows\system32\drivers\NAVx64\1307010.005\SRTSPX64.SYS 06:07:32.0975 5052 SRTSPX - ok 06:07:33.0017 5052 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys 06:07:33.0020 5052 srv - ok 06:07:33.0076 5052 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys 06:07:33.0078 5052 srv2 - ok 06:07:33.0117 5052 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys 06:07:33.0118 5052 srvnet - ok 06:07:33.0141 5052 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll 06:07:33.0143 5052 SSDPSRV - ok 06:07:33.0155 5052 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll 06:07:33.0157 5052 SstpSvc - ok 06:07:33.0177 5052 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 06:07:33.0178 5052 stexstor - ok 06:07:33.0217 5052 stisvc (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll 06:07:33.0221 5052 stisvc - ok 06:07:33.0235 5052 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys 06:07:33.0236 5052 swenum - ok 06:07:33.0266 5052 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll 06:07:33.0269 5052 swprv - ok 06:07:33.0343 5052 SymDS (8b2430762099598da40686f754632efd) C:\Windows\system32\drivers\NAVx64\1307010.005\SYMDS64.SYS 06:07:33.0346 5052 SymDS - ok 06:07:33.0452 5052 SymEFA (f90c7a190399165d3ab2245048d34786) C:\Windows\system32\drivers\NAVx64\1307010.005\SYMEFA64.SYS 06:07:33.0461 5052 SymEFA - ok 06:07:33.0492 5052 SymEvent (898bb48c797483420df523b2bbc1ecdb) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 06:07:33.0494 5052 SymEvent - ok 06:07:33.0550 5052 SymIRON (5013a76caaa1d7cf1c55214b490b4e35) C:\Windows\system32\drivers\NAVx64\1307010.005\Ironx64.SYS 06:07:33.0551 5052 SymIRON - ok 06:07:33.0602 5052 SymNetS (3911bd0e68c010e5438a87706abbe9ab) C:\Windows\system32\drivers\NAVx64\1307010.005\SYMNETS.SYS 06:07:33.0605 5052 SymNetS - ok 06:07:33.0715 5052 SysMain (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll 06:07:33.0725 5052 SysMain - ok 06:07:33.0811 5052 TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll 06:07:33.0814 5052 TabletInputService - ok 06:07:33.0838 5052 TapiSrv (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll 06:07:33.0840 5052 TapiSrv - ok 06:07:33.0850 5052 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll 06:07:33.0851 5052 TBS - ok 06:07:33.0969 5052 Tcpip (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\drivers\tcpip.sys 06:07:33.0979 5052 Tcpip - ok 06:07:34.0093 5052 TCPIP6 (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\DRIVERS\tcpip.sys 06:07:34.0103 5052 TCPIP6 - ok 06:07:34.0169 5052 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys 06:07:34.0170 5052 tcpipreg - ok 06:07:34.0184 5052 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 06:07:34.0185 5052 TDPIPE - ok 06:07:34.0206 5052 TDTCP (7518f7bcfd4b308abc9192bacaf6c970) C:\Windows\system32\drivers\tdtcp.sys 06:07:34.0206 5052 TDTCP - ok 06:07:34.0219 5052 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys 06:07:34.0219 5052 tdx - ok 06:07:34.0246 5052 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys 06:07:34.0247 5052 TermDD - ok 06:07:34.0293 5052 TermService (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll 06:07:34.0297 5052 TermService - ok 06:07:34.0307 5052 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll 06:07:34.0309 5052 Themes - ok 06:07:34.0338 5052 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 06:07:34.0339 5052 THREADORDER - ok 06:07:34.0360 5052 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll 06:07:34.0363 5052 TrkWks - ok 06:07:34.0399 5052 TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe 06:07:34.0400 5052 TrustedInstaller - ok 06:07:34.0415 5052 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys 06:07:34.0416 5052 tssecsrv - ok 06:07:34.0434 5052 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys 06:07:34.0436 5052 tunnel - ok 06:07:34.0447 5052 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 06:07:34.0448 5052 uagp35 - ok 06:07:34.0577 5052 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys 06:07:34.0579 5052 udfs - ok 06:07:34.0649 5052 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe 06:07:34.0650 5052 UI0Detect - ok 06:07:34.0678 5052 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys 06:07:34.0680 5052 uliagpkx - ok 06:07:34.0701 5052 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys 06:07:34.0702 5052 umbus - ok 06:07:34.0725 5052 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 06:07:34.0726 5052 UmPass - ok 06:07:34.0819 5052 Updater Service (f9ec9acd504d823d9b9ca98a4f8d3ca2) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe 06:07:34.0821 5052 Updater Service - ok 06:07:34.0849 5052 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll 06:07:34.0852 5052 upnphost - ok 06:07:34.0895 5052 USBAAPL64 (fb251567f41bc61988b26731dec19e4b) C:\Windows\system32\Drivers\usbaapl64.sys 06:07:34.0896 5052 USBAAPL64 - ok 06:07:34.0927 5052 usbccgp (7b6a127c93ee590e4d79a5f2a76fe46f) C:\Windows\system32\DRIVERS\usbccgp.sys 06:07:34.0929 5052 usbccgp - ok 06:07:34.0957 5052 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys 06:07:34.0958 5052 usbcir - ok 06:07:34.0992 5052 usbehci (92969ba5ac44e229c55a332864f79677) C:\Windows\system32\DRIVERS\usbehci.sys 06:07:34.0993 5052 usbehci - ok 06:07:35.0038 5052 usbhub (e7df1cfd28ca86b35ef5add0735ceef3) C:\Windows\system32\DRIVERS\usbhub.sys 06:07:35.0040 5052 usbhub - ok 06:07:35.0070 5052 usbohci (f1bb1e55f1e7a65c5839ccc7b36d773e) C:\Windows\system32\DRIVERS\usbohci.sys 06:07:35.0071 5052 usbohci - ok 06:07:35.0083 5052 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 06:07:35.0085 5052 usbprint - ok 06:07:35.0103 5052 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys 06:07:35.0104 5052 usbscan - ok 06:07:35.0125 5052 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS 06:07:35.0127 5052 USBSTOR - ok 06:07:35.0145 5052 usbuhci (bc3070350a491d84b518d7cca9abd36f) C:\Windows\system32\drivers\usbuhci.sys 06:07:35.0146 5052 usbuhci - ok 06:07:35.0172 5052 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll 06:07:35.0174 5052 UxSms - ok 06:07:35.0195 5052 VaultSvc (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 06:07:35.0196 5052 VaultSvc - ok 06:07:35.0208 5052 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys 06:07:35.0209 5052 vdrvroot - ok 06:07:35.0255 5052 vds (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe 06:07:35.0258 5052 vds - ok 06:07:35.0275 5052 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 06:07:35.0276 5052 vga - ok 06:07:35.0294 5052 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 06:07:35.0295 5052 VgaSave - ok 06:07:35.0311 5052 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys 06:07:35.0313 5052 vhdmp - ok 06:07:35.0324 5052 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys 06:07:35.0325 5052 viaide - ok 06:07:35.0387 5052 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys 06:07:35.0389 5052 volmgr - ok 06:07:35.0455 5052 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys 06:07:35.0457 5052 volmgrx - ok 06:07:35.0535 5052 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys 06:07:35.0536 5052 volsnap - ok 06:07:35.0640 5052 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 06:07:35.0641 5052 vsmraid - ok 06:07:35.0852 5052 VSS (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe 06:07:35.0861 5052 VSS - ok 06:07:36.0077 5052 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys 06:07:36.0077 5052 vwifibus - ok 06:07:36.0327 5052 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll 06:07:36.0330 5052 W32Time - ok 06:07:36.0356 5052 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 06:07:36.0358 5052 WacomPen - ok 06:07:36.0392 5052 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 06:07:36.0394 5052 WANARP - ok 06:07:36.0397 5052 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 06:07:36.0398 5052 Wanarpv6 - ok 06:07:36.0736 5052 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe 06:07:36.0744 5052 WatAdminSvc - ok 06:07:37.0314 5052 wbengine (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe 06:07:37.0322 5052 wbengine - ok 06:07:37.0414 5052 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll 06:07:37.0417 5052 WbioSrvc - ok 06:07:37.0466 5052 wcncsvc (dd1bae8ebfc653824d29ccf8c9054d68) C:\Windows\System32\wcncsvc.dll 06:07:37.0469 5052 wcncsvc - ok 06:07:37.0487 5052 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll 06:07:37.0488 5052 WcsPlugInService - ok 06:07:37.0515 5052 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 06:07:37.0516 5052 Wd - ok 06:07:37.0547 5052 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 06:07:37.0550 5052 Wdf01000 - ok 06:07:37.0579 5052 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 06:07:37.0581 5052 WdiServiceHost - ok 06:07:37.0587 5052 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 06:07:37.0590 5052 WdiSystemHost - ok 06:07:37.0651 5052 WebClient (733006127f235be7c35354ebee7b9a7b) C:\Windows\System32\webclnt.dll 06:07:37.0654 5052 WebClient - ok 06:07:37.0677 5052 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll 06:07:37.0680 5052 Wecsvc - ok 06:07:37.0690 5052 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll 06:07:37.0692 5052 wercplsupport - ok 06:07:37.0708 5052 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll 06:07:37.0710 5052 WerSvc - ok 06:07:37.0723 5052 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 06:07:37.0724 5052 WfpLwf - ok 06:07:37.0728 5052 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 06:07:37.0729 5052 WIMMount - ok 06:07:37.0747 5052 WinDefend - ok 06:07:37.0754 5052 WinHttpAutoProxySvc - ok 06:07:37.0795 5052 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll 06:07:37.0797 5052 Winmgmt - ok 06:07:37.0962 5052 WinRM (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll 06:07:37.0973 5052 WinRM - ok 06:07:38.0071 5052 WinUsb (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys 06:07:38.0072 5052 WinUsb - ok 06:07:38.0142 5052 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll 06:07:38.0148 5052 Wlansvc - ok 06:07:38.0194 5052 wlcrasvc (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 06:07:38.0194 5052 wlcrasvc - ok 06:07:38.0363 5052 wlidsvc (7e47c328fc4768cb8beafbcfafa70362) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 06:07:38.0375 5052 wlidsvc - ok 06:07:38.0433 5052 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys 06:07:38.0433 5052 WmiAcpi - ok 06:07:38.0464 5052 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe 06:07:38.0465 5052 wmiApSrv - ok 06:07:38.0540 5052 WMPNetworkSvc - ok 06:07:38.0573 5052 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll 06:07:38.0574 5052 WPCSvc - ok 06:07:38.0626 5052 WPDBusEnum (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll 06:07:38.0628 5052 WPDBusEnum - ok 06:07:38.0638 5052 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 06:07:38.0639 5052 ws2ifsl - ok 06:07:38.0669 5052 wscsvc (8f9f3969933c02da96eb0f84576db43e) C:\Windows\System32\wscsvc.dll 06:07:38.0671 5052 wscsvc - ok 06:07:38.0674 5052 WSearch - ok 06:07:38.0859 5052 wuauserv (d9ef901dca379cfe914e9fa13b73b4c4) C:\Windows\system32\wuaueng.dll 06:07:38.0874 5052 wuauserv - ok 06:07:38.0956 5052 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys 06:07:38.0957 5052 WudfPf - ok 06:07:38.0976 5052 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys 06:07:38.0977 5052 WUDFRd - ok 06:07:38.0999 5052 wudfsvc (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll 06:07:39.0001 5052 wudfsvc - ok 06:07:39.0024 5052 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll 06:07:39.0027 5052 WwanSvc - ok 06:07:39.0051 5052 MBR (0x1B8) (0f84f2562620c40d8a3e1908c8075675) \Device\Harddisk0\DR0 06:07:39.0074 5052 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - infected 06:07:39.0075 5052 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.b (0) 06:07:39.0084 5052 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk2\DR2 06:07:39.0092 5052 \Device\Harddisk2\DR2 - ok 06:07:39.0123 5052 Boot (0x1200) (7f8a94a5e0df110a601c59fb6a1ae568) \Device\Harddisk0\DR0\Partition0 06:07:39.0124 5052 \Device\Harddisk0\DR0\Partition0 - ok 06:07:39.0136 5052 Boot (0x1200) (8dd7f34b2b315058981fd5c872f75b30) \Device\Harddisk0\DR0\Partition1 06:07:39.0138 5052 \Device\Harddisk0\DR0\Partition1 - ok 06:07:39.0146 5052 Boot (0x1200) (f83ea84c22cc51ed4eaaee371b1f369f) \Device\Harddisk2\DR2\Partition0 06:07:39.0148 5052 \Device\Harddisk2\DR2\Partition0 - ok 06:07:39.0148 5052 ============================================================ 06:07:39.0149 5052 Scan finished 06:07:39.0149 5052 ============================================================ 06:07:39.0159 5700 Detected object count: 1 06:07:39.0159 5700 Actual detected object count: 1 06:08:14.0755 5700 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - skipped by user 06:08:14.0755 5700 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - User select action: Skip 06:08:29.0412 5736 Deinitialize success aswMBR log aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software Run date: 2012-07-19 06:09:46 —————————– 06:09:46.049 OS Version: Windows x64 6.1.7600 06:09:46.049 Number of processors: 2 586 0x603 06:09:46.052 ComputerName: LIZDON13-PC UserName: LizDon13 06:09:50.328 Initialize success 06:16:11.522 AVAST engine defs: 12071901 06:20:52.767 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000060 06:20:52.777 Disk 0 Vendor: WDC_WD50 05.0 Size: 476940MB BusType: 3 06:20:52.777 Device \Driver\nvstor64 -> MajorFunction fffffa8004b715c4 06:20:52.787 Disk 0 MBR read successfully 06:20:52.797 Disk 0 MBR scan 06:20:52.797 Disk 0 Windows 7 default MBR code 06:20:52.807 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 14336 MB offset 2048 06:20:52.817 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 29362176 06:20:52.827 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 462502 MB offset 29566976 06:20:52.847 Disk 0 scanning C:\Windows\system32\drivers 06:20:59.382 Service scanning 06:21:17.150 Modules scanning 06:21:17.166 Disk 0 trace - called modules: 06:21:17.181 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys >>UNKNOWN [0xfffffa8004b715c4]<< 06:21:17.181 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004606330] 06:21:17.181 3 CLASSPNP.SYS[fffff88001a8f43f] -> nt!IofCallDriver -> [0xfffffa800427c3f0] 06:21:17.197 5 ACPI.sys[fffff88000ea7781] -> nt!IofCallDriver -> \Device\00000060[0xfffffa80042809c0] 06:21:17.197 \Driver\nvstor64[0xfffffa8004ad4e70] -> IRP_MJ_CREATE -> 0xfffffa8004b715c4 06:21:19.194 AVAST engine scan C:\Windows 06:21:21.971 AVAST engine scan C:\Windows\system32 06:23:37.869 AVAST engine scan C:\Windows\system32\drivers 06:23:50.286 AVAST engine scan C:\Users\LizDon13 06:24:58.926 Disk 0 MBR has been saved successfully to "C:\Users\LizDon13\Desktop\Don\MBR.dat" 06:24:58.942 The log file has been saved successfully to "C:\Users\LizDon13\Desktop\Don\aswMBR.txt"

Conspire

Post #11July 19, 2012, 12:28 PM UTC

Ok, please rerun TDSS Killer and allow it to fix this time. Post the log back in your next reply.

donhughesmusic

Post #12July 19, 2012, 12:41 PM UTC

I have been ad free for the past hour and a half (since I turned the computer on this morning). Would you still like me to do this???

Conspire

Post #13July 19, 2012, 1:30 PM UTC

That's odd, we did not fix anything yet. What did you do? Yes, please. Rerun TDSS Killer.

donhughesmusic

Post #14July 19, 2012, 3:55 PM UTC

I didn't do anything different. Just turned on the computer. 11:44:14.0534 5748 TDSS rootkit removing tool [removed] Jul 16 2012 22:10:11 11:44:14.0890 5748 ============================================================ 11:44:14.0890 5748 Current date / time: 2012/07/19 11:44:14.0890 11:44:14.0890 5748 SystemInfo: 11:44:14.0890 5748 11:44:14.0890 5748 OS Version: 6.1.7600 ServicePack: 0.0 11:44:14.0890 5748 Product type: Workstation 11:44:14.0890 5748 ComputerName: LIZDON13-PC 11:44:14.0891 5748 UserName: LizDon13 11:44:14.0891 5748 Windows directory: C:\Windows 11:44:14.0891 5748 System windows directory: C:\Windows 11:44:14.0891 5748 Running under WOW64 11:44:14.0891 5748 Processor architecture: Intel x64 11:44:14.0891 5748 Number of processors: 2 11:44:14.0891 5748 Page size: 0x1000 11:44:14.0891 5748 Boot type: Normal boot 11:44:14.0891 5748 ============================================================ 11:44:15.0953 5748 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 11:44:15.0990 5748 Drive \Device\Harddisk2\DR2 - Size: 0xEC580000 (3.69 Gb), SectorSize: 0x200, Cylinders: 0x1E2, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 11:44:15.0994 5748 ============================================================ 11:44:15.0994 5748 \Device\Harddisk0\DR0: 11:44:15.0994 5748 MBR partitions: 11:44:15.0994 5748 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x1C00800, BlocksNum 0x32000 11:44:15.0994 5748 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1C32800, BlocksNum 0x38753030 11:44:15.0994 5748 \Device\Harddisk2\DR2: 11:44:15.0996 5748 MBR partitions: 11:44:15.0996 5748 \Device\Harddisk2\DR2\Partition0: MBR, Type 0xB, StartLBA 0x2000, BlocksNum 0x760C00 11:44:15.0996 5748 ============================================================ 11:44:16.0012 5748 C: <-> \Device\Harddisk0\DR0\Partition1 11:44:16.0012 5748 ============================================================ 11:44:16.0013 5748 Initialize success 11:44:16.0013 5748 ============================================================ 11:44:17.0666 0952 ============================================================ 11:44:17.0666 0952 Scan started 11:44:17.0666 0952 Mode: Manual; 11:44:17.0666 0952 ============================================================ 11:44:18.0819 0952 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys 11:44:18.0821 0952 1394ohci - ok 11:44:18.0856 0952 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys 11:44:18.0860 0952 ACPI - ok 11:44:18.0882 0952 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys 11:44:18.0883 0952 AcpiPmi - ok 11:44:18.0955 0952 AdobeARMservice (62b7936f9036dd6ed36e6a7efa805dc0) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 11:44:18.0957 0952 AdobeARMservice - ok 11:44:19.0099 0952 AdobeFlashPlayerUpdateSvc (5e1a953c6472e7bb644892a4d0df5e72) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 11:44:19.0104 0952 AdobeFlashPlayerUpdateSvc - ok 11:44:19.0177 0952 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 11:44:19.0187 0952 adp94xx - ok 11:44:19.0228 0952 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 11:44:19.0232 0952 adpahci - ok 11:44:19.0254 0952 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 11:44:19.0256 0952 adpu320 - ok 11:44:19.0275 0952 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll 11:44:19.0277 0952 AeLookupSvc - ok 11:44:19.0347 0952 AFD (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys 11:44:19.0352 0952 AFD - ok 11:44:19.0378 0952 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys 11:44:19.0378 0952 agp440 - ok 11:44:19.0394 0952 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe 11:44:19.0396 0952 ALG - ok 11:44:19.0407 0952 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys 11:44:19.0407 0952 aliide - ok 11:44:19.0417 0952 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys 11:44:19.0418 0952 amdide - ok 11:44:19.0428 0952 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 11:44:19.0429 0952 AmdK8 - ok 11:44:19.0445 0952 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 11:44:19.0446 0952 AmdPPM - ok 11:44:19.0468 0952 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys 11:44:19.0468 0952 amdsata - ok 11:44:19.0485 0952 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 11:44:19.0487 0952 amdsbs - ok 11:44:19.0509 0952 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys 11:44:19.0510 0952 amdxata - ok 11:44:19.0523 0952 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys 11:44:19.0524 0952 AppID - ok 11:44:19.0552 0952 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll 11:44:19.0553 0952 AppIDSvc - ok 11:44:19.0567 0952 Appinfo (d065be66822847b7f127d1f90158376e) C:\Windows\System32\appinfo.dll 11:44:19.0568 0952 Appinfo - ok 11:44:19.0631 0952 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 11:44:19.0634 0952 Apple Mobile Device - ok 11:44:19.0658 0952 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 11:44:19.0659 0952 arc - ok 11:44:19.0675 0952 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 11:44:19.0676 0952 arcsas - ok 11:44:19.0758 0952 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 11:44:19.0760 0952 AsyncMac - ok 11:44:19.0785 0952 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys 11:44:19.0787 0952 atapi - ok 11:44:20.0108 0952 AudioEndpointBuilder (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 11:44:20.0133 0952 AudioEndpointBuilder - ok 11:44:20.0151 0952 AudioSrv (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 11:44:20.0156 0952 AudioSrv - ok 11:44:20.0196 0952 AxInstSV (b20b5fa5ca050e9926e4d1db81501b32) C:\Windows\System32\AxInstSV.dll 11:44:20.0199 0952 AxInstSV - ok 11:44:20.0254 0952 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 11:44:20.0260 0952 b06bdrv - ok 11:44:20.0281 0952 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 11:44:20.0284 0952 b57nd60a - ok 11:44:20.0424 0952 BBSvc (a2494901e7226b356b8c1005c45f1c5f) C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.exe 11:44:20.0427 0952 BBSvc - ok 11:44:20.0452 0952 BBUpdate (63b1cbbae4790b5bac98f01bf9449722) C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe 11:44:20.0455 0952 BBUpdate - ok 11:44:20.0470 0952 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll 11:44:20.0473 0952 BDESVC - ok 11:44:20.0485 0952 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 11:44:20.0486 0952 Beep - ok 11:44:20.0550 0952 BFE (4992c609a6315671463e30f6512bc022) C:\Windows\System32\bfe.dll 11:44:20.0567 0952 BFE - ok 11:44:20.0912 0952 BHDrvx64 (c8ab71a5102d0fc103f6dfc750005137) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\BASHDefs\20120711.002\BHDrvx64.sys 11:44:20.0936 0952 BHDrvx64 - ok 11:44:21.0120 0952 BITS (7f0c323fe3da28aa4aa1bda3f575707f) C:\Windows\System32\qmgr.dll 11:44:21.0139 0952 BITS - ok 11:44:21.0175 0952 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 11:44:21.0175 0952 blbdrive - ok 11:44:21.0262 0952 Bonjour Service (ebbcd5dfbb1de70e8f4af8fa59e401fd) C:\Program Files\Bonjour\mDNSResponder.exe 11:44:21.0267 0952 Bonjour Service - ok 11:44:21.0299 0952 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys 11:44:21.0300 0952 bowser - ok 11:44:21.0315 0952 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 11:44:21.0316 0952 BrFiltLo - ok 11:44:21.0328 0952 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 11:44:21.0329 0952 BrFiltUp - ok 11:44:21.0370 0952 Browser (94fbc06f294d58d02361918418f996e3) C:\Windows\System32\browser.dll 11:44:21.0372 0952 Browser - ok 11:44:21.0399 0952 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 11:44:21.0402 0952 Brserid - ok 11:44:21.0411 0952 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 11:44:21.0412 0952 BrSerWdm - ok 11:44:21.0425 0952 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 11:44:21.0425 0952 BrUsbMdm - ok 11:44:21.0439 0952 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 11:44:21.0439 0952 BrUsbSer - ok 11:44:21.0448 0952 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 11:44:21.0449 0952 BTHMODEM - ok 11:44:21.0556 0952 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll 11:44:21.0567 0952 bthserv - ok 11:44:21.0654 0952 ccSet_NAV (0e1737a63aec0f6de231bb59836c0a11) C:\Windows\system32\drivers\NAVx64\1307010.005\ccSetx64.sys 11:44:21.0660 0952 ccSet_NAV - ok 11:44:21.0697 0952 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 11:44:21.0698 0952 cdfs - ok 11:44:21.0714 0952 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys 11:44:21.0717 0952 cdrom - ok 11:44:21.0748 0952 CertPropSvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 11:44:21.0749 0952 CertPropSvc - ok 11:44:21.0755 0952 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 11:44:21.0756 0952 circlass - ok 11:44:21.0788 0952 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 11:44:21.0795 0952 CLFS - ok 11:44:21.0858 0952 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 11:44:21.0861 0952 clr_optimization_v2.0.50727_32 - ok 11:44:21.0958 0952 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 11:44:21.0963 0952 clr_optimization_v2.0.50727_64 - ok 11:44:22.0054 0952 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 11:44:22.0057 0952 clr_optimization_v4.0.30319_32 - ok 11:44:22.0086 0952 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 11:44:22.0088 0952 clr_optimization_v4.0.30319_64 - ok 11:44:22.0100 0952 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 11:44:22.0101 0952 CmBatt - ok 11:44:22.0123 0952 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys 11:44:22.0124 0952 cmdide - ok 11:44:22.0195 0952 CNG (ca7720b73446fddec5c69519c1174c98) C:\Windows\system32\Drivers\cng.sys 11:44:22.0232 0952 CNG - ok 11:44:22.0271 0952 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 11:44:22.0271 0952 Compbatt - ok 11:44:22.0350 0952 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys 11:44:22.0352 0952 CompositeBus - ok 11:44:22.0375 0952 COMSysApp - ok 11:44:22.0420 0952 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 11:44:22.0421 0952 crcdisk - ok 11:44:22.0599 0952 CryptSvc (f02786b66375292e58c8777082d4396d) C:\Windows\system32\cryptsvc.dll 11:44:22.0604 0952 CryptSvc - ok 11:44:22.0887 0952 cvhsvc (72794d112cbaff3bc0c29bf7350d4741) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE 11:44:22.0893 0952 cvhsvc - ok 11:44:23.0029 0952 DcomLaunch (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll 11:44:23.0036 0952 DcomLaunch - ok 11:44:23.0096 0952 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll 11:44:23.0106 0952 defragsvc - ok 11:44:23.0162 0952 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys 11:44:23.0165 0952 DfsC - ok 11:44:23.0194 0952 Dhcp (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll 11:44:23.0199 0952 Dhcp - ok 11:44:23.0215 0952 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 11:44:23.0216 0952 discache - ok 11:44:23.0238 0952 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 11:44:23.0239 0952 Disk - ok 11:44:23.0279 0952 Dnscache (85cf424c74a1d5ec33533e1dbff9920a) C:\Windows\System32\dnsrslvr.dll 11:44:23.0282 0952 Dnscache - ok 11:44:23.0300 0952 dot3svc (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll 11:44:23.0304 0952 dot3svc - ok 11:44:23.0325 0952 DPS (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll 11:44:23.0328 0952 DPS - ok 11:44:23.0350 0952 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 11:44:23.0350 0952 drmkaud - ok 11:44:23.0432 0952 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys 11:44:23.0444 0952 DXGKrnl - ok 11:44:23.0463 0952 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll 11:44:23.0464 0952 EapHost - ok 11:44:23.0947 0952 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 11:44:24.0026 0952 ebdrv - ok 11:44:24.0347 0952 eeCtrl (ba6420c1f7070ed8f1ba372844f3e1ec) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys 11:44:24.0370 0952 eeCtrl - ok 11:44:24.0680 0952 EFS (156f6159457d0aa7e59b62681b56eb90) C:\Windows\System32\lsass.exe 11:44:24.0684 0952 EFS - ok 11:44:24.0766 0952 ehRecvr (47c071994c3f649f23d9cd075ac9304a) C:\Windows\ehome\ehRecvr.exe 11:44:24.0785 0952 ehRecvr - ok 11:44:24.0812 0952 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe 11:44:24.0815 0952 ehSched - ok 11:44:24.0915 0952 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 11:44:24.0923 0952 elxstor - ok 11:44:24.0973 0952 EraserUtilRebootDrv (1343df3451bc0c442dc69837c6fba21b) C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 11:44:24.0976 0952 EraserUtilRebootDrv - ok 11:44:24.0992 0952 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys 11:44:24.0992 0952 ErrDev - ok 11:44:25.0050 0952 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll 11:44:25.0053 0952 EventSystem - ok 11:44:25.0085 0952 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 11:44:25.0088 0952 exfat - ok 11:44:25.0109 0952 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 11:44:25.0112 0952 fastfat - ok 11:44:25.0173 0952 Fax (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe 11:44:25.0181 0952 Fax - ok 11:44:25.0188 0952 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 11:44:25.0189 0952 fdc - ok 11:44:25.0199 0952 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll 11:44:25.0200 0952 fdPHost - ok 11:44:25.0210 0952 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll 11:44:25.0210 0952 FDResPub - ok 11:44:25.0221 0952 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 11:44:25.0222 0952 FileInfo - ok 11:44:25.0237 0952 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 11:44:25.0238 0952 Filetrace - ok 11:44:25.0243 0952 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 11:44:25.0243 0952 flpydisk - ok 11:44:25.0279 0952 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys 11:44:25.0282 0952 FltMgr - ok 11:44:25.0376 0952 FontCache (cb5e4b9c319e3c6bb363eb7e58a4a051) C:\Windows\system32\FntCache.dll 11:44:25.0394 0952 FontCache - ok 11:44:25.0448 0952 FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 11:44:25.0451 0952 FontCache3.0.0.0 - ok 11:44:25.0592 0952 ForceWare Intelligent Application Manager (IAM) (52b58a46beefb238c580b69fd051cb5b) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe 11:44:25.0610 0952 ForceWare Intelligent Application Manager (IAM) - ok 11:44:25.0672 0952 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 11:44:25.0673 0952 FsDepends - ok 11:44:25.0702 0952 Fs_Rec (d3e3f93d67821a2db2b3d9fac2dc2064) C:\Windows\system32\drivers\Fs_Rec.sys 11:44:25.0703 0952 Fs_Rec - ok 11:44:25.0738 0952 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys 11:44:25.0740 0952 fvevol - ok 11:44:25.0769 0952 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 11:44:25.0770 0952 gagp30kx - ok 11:44:25.0846 0952 GameConsoleService (ce16683cfd11fe70bde435dda5ea1fca) C:\Program Files (x86)\eMachines Games\eMachines Game Console\GameConsoleService.exe 11:44:25.0855 0952 GameConsoleService - ok 11:44:25.0887 0952 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 11:44:25.0887 0952 GEARAspiWDM - ok 11:44:25.0949 0952 gpsvc (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll 11:44:25.0958 0952 gpsvc - ok 11:44:25.0973 0952 GREGService (0191dee9b9eb7902af2cf4f67301095d) C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe 11:44:25.0975 0952 GREGService - ok 11:44:26.0075 0952 gupdate (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 11:44:26.0078 0952 gupdate - ok 11:44:26.0087 0952 gupdatem (f02a533f517eb38333cb12a9e8963773) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 11:44:26.0089 0952 gupdatem - ok 11:44:26.0114 0952 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 11:44:26.0117 0952 gusvc - ok 11:44:26.0123 0952 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 11:44:26.0123 0952 hcw85cir - ok 11:44:26.0162 0952 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys 11:44:26.0166 0952 HdAudAddService - ok 11:44:26.0194 0952 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys 11:44:26.0196 0952 HDAudBus - ok 11:44:26.0203 0952 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 11:44:26.0203 0952 HidBatt - ok 11:44:26.0224 0952 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 11:44:26.0225 0952 HidBth - ok 11:44:26.0237 0952 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 11:44:26.0238 0952 HidIr - ok 11:44:26.0253 0952 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll 11:44:26.0254 0952 hidserv - ok 11:44:26.0272 0952 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys 11:44:26.0273 0952 HidUsb - ok 11:44:26.0300 0952 hkmsvc (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll 11:44:26.0301 0952 hkmsvc - ok 11:44:26.0321 0952 HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll 11:44:26.0325 0952 HomeGroupListener - ok 11:44:26.0361 0952 HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll 11:44:26.0364 0952 HomeGroupProvider - ok 11:44:26.0387 0952 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys 11:44:26.0388 0952 HpSAMD - ok 11:44:26.0439 0952 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys 11:44:26.0447 0952 HTTP - ok 11:44:26.0462 0952 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys 11:44:26.0462 0952 hwpolicy - ok 11:44:26.0487 0952 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 11:44:26.0487 0952 i8042prt - ok 11:44:26.0533 0952 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys 11:44:26.0538 0952 iaStorV - ok 11:44:26.0669 0952 idsvc (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 11:44:26.0703 0952 idsvc - ok 11:44:26.0887 0952 IDSVia64 (ce0bf35c79e03bb89da6b14fac838605) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\IPSDefs\20120718.001\IDSvia64.sys 11:44:26.0907 0952 IDSVia64 - ok 11:44:26.0994 0952 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 11:44:26.0994 0952 iirsp - ok 11:44:27.0080 0952 IKEEXT (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll 11:44:27.0100 0952 IKEEXT - ok 11:44:27.0276 0952 IntcAzAudAddService (2e3b99e8c23be2bf32ebe1db5261f275) C:\Windows\system32\drivers\RTKVHD64.sys 11:44:27.0314 0952 IntcAzAudAddService - ok 11:44:27.0376 0952 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys 11:44:27.0377 0952 intelide - ok 11:44:27.0397 0952 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 11:44:27.0397 0952 intelppm - ok 11:44:27.0414 0952 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll 11:44:27.0416 0952 IPBusEnum - ok 11:44:27.0433 0952 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys 11:44:27.0433 0952 IpFilterDriver - ok 11:44:27.0465 0952 iphlpsvc (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll 11:44:27.0472 0952 iphlpsvc - ok 11:44:27.0478 0952 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys 11:44:27.0479 0952 IPMIDRV - ok 11:44:27.0493 0952 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 11:44:27.0494 0952 IPNAT - ok 11:44:27.0617 0952 iPod Service (50d6ccc6ff5561f9f56946b3e6164fb8) C:\Program Files\iPod\bin\iPodService.exe 11:44:27.0627 0952 iPod Service - ok 11:44:27.0644 0952 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 11:44:27.0645 0952 IRENUM - ok 11:44:27.0668 0952 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys 11:44:27.0668 0952 isapnp - ok 11:44:27.0692 0952 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys 11:44:27.0695 0952 iScsiPrt - ok 11:44:27.0724 0952 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys 11:44:27.0725 0952 kbdclass - ok 11:44:27.0741 0952 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys 11:44:27.0742 0952 kbdhid - ok 11:44:27.0821 0952 KeyIso (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 11:44:27.0824 0952 KeyIso - ok 11:44:27.0847 0952 KSecDD (4f4b5fde429416877de7143044582eb5) C:\Windows\system32\Drivers\ksecdd.sys 11:44:27.0849 0952 KSecDD - ok 11:44:27.0885 0952 KSecPkg (6f40465a44ecdc1731befafec5bdd03c) C:\Windows\system32\Drivers\ksecpkg.sys 11:44:27.0887 0952 KSecPkg - ok 11:44:27.0899 0952 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 11:44:27.0899 0952 ksthunk - ok 11:44:27.0940 0952 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll 11:44:27.0957 0952 KtmRm - ok 11:44:28.0007 0952 LanmanServer (81f1d04d4d0e433099365127375fd501) C:\Windows\system32\srvsvc.dll 11:44:28.0011 0952 LanmanServer - ok 11:44:28.0059 0952 LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll 11:44:28.0062 0952 LanmanWorkstation - ok 11:44:28.0100 0952 LicCtrlService (29fab5363138f6e322f4cd780ed9d337) C:\Windows\runservice.exe 11:44:28.0101 0952 LicCtrlService - ok 11:44:28.0128 0952 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 11:44:28.0130 0952 lltdio - ok 11:44:28.0173 0952 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll 11:44:28.0183 0952 lltdsvc - ok 11:44:28.0193 0952 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll 11:44:28.0195 0952 lmhosts - ok 11:44:28.0228 0952 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 11:44:28.0229 0952 LSI_FC - ok 11:44:28.0241 0952 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 11:44:28.0242 0952 LSI_SAS - ok 11:44:28.0251 0952 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 11:44:28.0252 0952 LSI_SAS2 - ok 11:44:28.0268 0952 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 11:44:28.0269 0952 LSI_SCSI - ok 11:44:28.0300 0952 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 11:44:28.0301 0952 luafv - ok 11:44:28.0311 0952 lxdn_device - ok 11:44:28.0346 0952 MBAMProtector (dc8490812a3b72811ae534f423b4c206) C:\Windows\system32\drivers\mbam.sys 11:44:28.0347 0952 MBAMProtector - ok 11:44:28.0456 0952 MBAMService (43683e970f008c93c9429ef428147a54) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 11:44:28.0463 0952 MBAMService - ok 11:44:28.0482 0952 Mcx2Svc (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll 11:44:28.0486 0952 Mcx2Svc - ok 11:44:28.0502 0952 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 11:44:28.0502 0952 megasas - ok 11:44:28.0521 0952 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 11:44:28.0523 0952 MegaSR - ok 11:44:28.0572 0952 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 11:44:28.0574 0952 MMCSS - ok 11:44:28.0578 0952 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 11:44:28.0579 0952 Modem - ok 11:44:28.0609 0952 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 11:44:28.0610 0952 monitor - ok 11:44:28.0634 0952 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 11:44:28.0635 0952 mouclass - ok 11:44:28.0654 0952 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 11:44:28.0654 0952 mouhid - ok 11:44:28.0677 0952 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys 11:44:28.0678 0952 mountmgr - ok 11:44:28.0691 0952 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys 11:44:28.0692 0952 mpio - ok 11:44:28.0729 0952 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 11:44:28.0730 0952 mpsdrv - ok 11:44:28.0800 0952 MpsSvc (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll 11:44:28.0810 0952 MpsSvc - ok 11:44:28.0834 0952 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys 11:44:28.0836 0952 MRxDAV - ok 11:44:28.0907 0952 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys 11:44:28.0909 0952 mrxsmb - ok 11:44:28.0962 0952 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys 11:44:28.0965 0952 mrxsmb10 - ok 11:44:28.0994 0952 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys 11:44:28.0995 0952 mrxsmb20 - ok 11:44:29.0001 0952 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys 11:44:29.0002 0952 msahci - ok 11:44:29.0019 0952 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys 11:44:29.0021 0952 msdsm - ok 11:44:29.0051 0952 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe 11:44:29.0054 0952 MSDTC - ok 11:44:29.0079 0952 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 11:44:29.0079 0952 Msfs - ok 11:44:29.0087 0952 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 11:44:29.0088 0952 mshidkmdf - ok 11:44:29.0096 0952 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys 11:44:29.0096 0952 msisadrv - ok 11:44:29.0129 0952 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll 11:44:29.0132 0952 MSiSCSI - ok 11:44:29.0135 0952 msiserver - ok 11:44:29.0149 0952 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 11:44:29.0149 0952 MSKSSRV - ok 11:44:29.0165 0952 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 11:44:29.0166 0952 MSPCLOCK - ok 11:44:29.0170 0952 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 11:44:29.0170 0952 MSPQM - ok 11:44:29.0212 0952 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys 11:44:29.0215 0952 MsRPC - ok 11:44:29.0245 0952 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys 11:44:29.0246 0952 mssmbios - ok 11:44:29.0249 0952 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 11:44:29.0250 0952 MSTEE - ok 11:44:29.0267 0952 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 11:44:29.0267 0952 MTConfig - ok 11:44:29.0288 0952 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 11:44:29.0289 0952 Mup - ok 11:44:29.0333 0952 napagent (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll 11:44:29.0338 0952 napagent - ok 11:44:29.0376 0952 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 11:44:29.0379 0952 NativeWifiP - ok 11:44:29.0479 0952 NAV (c6948f034d7edabcfa2234d399fc78bc) C:\Program Files (x86)\Norton AntiVirus\Engine\19.7.1.5\ccSvcHst.exe 11:44:29.0482 0952 NAV - ok 11:44:29.0611 0952 NAVENG (8043d41f881d6ace40b854ad6e32217f) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\VirusDefs\20120718.034\ENG64.SYS 11:44:29.0616 0952 NAVENG - ok 11:44:29.0776 0952 NAVEX15 (9a9ab2fc45d701daed465d14980f1305) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.7.1.5\Definitions\VirusDefs\20120718.034\EX64.SYS 11:44:29.0808 0952 NAVEX15 - ok 11:44:29.0940 0952 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys 11:44:29.0962 0952 NDIS - ok 11:44:29.0976 0952 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 11:44:29.0977 0952 NdisCap - ok 11:44:29.0998 0952 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 11:44:29.0999 0952 NdisTapi - ok 11:44:30.0015 0952 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys 11:44:30.0016 0952 Ndisuio - ok 11:44:30.0035 0952 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys 11:44:30.0036 0952 NdisWan - ok 11:44:30.0061 0952 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys 11:44:30.0061 0952 NDProxy - ok 11:44:30.0192 0952 Nero BackItUp Scheduler 4.0 (7d2633295eb6ff2b938185874884059d) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe 11:44:30.0215 0952 Nero BackItUp Scheduler 4.0 - ok 11:44:30.0234 0952 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 11:44:30.0235 0952 NetBIOS - ok 11:44:30.0263 0952 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys 11:44:30.0266 0952 NetBT - ok 11:44:30.0297 0952 Netlogon (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 11:44:30.0298 0952 Netlogon - ok 11:44:30.0353 0952 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll 11:44:30.0358 0952 Netman - ok 11:44:30.0397 0952 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll 11:44:30.0403 0952 netprofm - ok 11:44:30.0467 0952 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 11:44:30.0471 0952 NetTcpPortSharing - ok 11:44:30.0502 0952 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 11:44:30.0503 0952 nfrd960 - ok 11:44:30.0536 0952 NlaSvc (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll 11:44:30.0539 0952 NlaSvc - ok 11:44:30.0726 0952 NOBU (5839a8027d6d324a7cd494051a96628c) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe 11:44:30.0771 0952 NOBU - ok 11:44:30.0849 0952 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 11:44:30.0850 0952 Npfs - ok 11:44:30.0880 0952 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll 11:44:30.0881 0952 nsi - ok 11:44:30.0894 0952 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 11:44:30.0895 0952 nsiproxy - ok 11:44:31.0003 0952 nSvcIp (20e179a7fe78b37a02d30c4d34c870e7) C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe 11:44:31.0014 0952 nSvcIp - ok 11:44:31.0153 0952 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys 11:44:31.0175 0952 Ntfs - ok 11:44:31.0246 0952 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 11:44:31.0246 0952 Null - ok 11:44:31.0296 0952 NVENETFD (a85b4f2ef3a7304a5399ef0526423040) C:\Windows\system32\DRIVERS\nvm62x64.sys 11:44:31.0300 0952 NVENETFD - ok 11:44:31.0912 0952 nvlddmkm (4628fa8f0cc0d509bc14a223e99d36f3) C:\Windows\system32\DRIVERS\nvlddmkm.sys 11:44:32.0110 0952 nvlddmkm - ok 11:44:32.0226 0952 NVNET (909eedcbd365bb81027d8e742e6b3416) C:\Windows\system32\DRIVERS\nvmf6264.sys 11:44:32.0233 0952 NVNET - ok 11:44:32.0270 0952 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys 11:44:32.0272 0952 nvraid - ok 11:44:32.0294 0952 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys 11:44:32.0296 0952 nvstor - ok 11:44:32.0334 0952 nvstor64 (1e45f96342429d63dc30e0d9117da3d8) C:\Windows\system32\DRIVERS\nvstor64.sys 11:44:32.0336 0952 nvstor64 - ok 11:44:32.0383 0952 nvsvc (703f996312202d84663f7c8584acaf55) C:\Windows\system32\nvvsvc.exe 11:44:32.0386 0952 nvsvc - ok 11:44:32.0432 0952 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys 11:44:32.0433 0952 nv_agp - ok 11:44:32.0454 0952 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys 11:44:32.0455 0952 ohci1394 - ok 11:44:32.0533 0952 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 11:44:32.0539 0952 ose - ok 11:44:32.0876 0952 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 11:44:32.0946 0952 osppsvc - ok 11:44:33.0085 0952 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 11:44:33.0106 0952 p2pimsvc - ok 11:44:33.0157 0952 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll 11:44:33.0179 0952 p2psvc - ok 11:44:33.0211 0952 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 11:44:33.0213 0952 Parport - ok 11:44:33.0245 0952 partmgr (90061b1acfe8ccaa5345750ffe08d8b8) C:\Windows\system32\drivers\partmgr.sys 11:44:33.0246 0952 partmgr - ok 11:44:33.0260 0952 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll 11:44:33.0264 0952 PcaSvc - ok 11:44:33.0287 0952 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys 11:44:33.0289 0952 pci - ok 11:44:33.0303 0952 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys 11:44:33.0303 0952 pciide - ok 11:44:33.0322 0952 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 11:44:33.0326 0952 pcmcia - ok 11:44:33.0350 0952 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 11:44:33.0351 0952 pcw - ok 11:44:33.0404 0952 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 11:44:33.0412 0952 PEAUTH - ok 11:44:33.0474 0952 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe 11:44:33.0476 0952 PerfHost - ok 11:44:33.0577 0952 pla (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll 11:44:33.0593 0952 pla - ok 11:44:33.0650 0952 PlugPlay (98b1721b8718164293b9701b98c52d77) C:\Windows\system32\umpnpmgr.dll 11:44:33.0654 0952 PlugPlay - ok 11:44:33.0668 0952 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll 11:44:33.0670 0952 PNRPAutoReg - ok 11:44:33.0701 0952 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 11:44:33.0703 0952 PNRPsvc - ok 11:44:33.0749 0952 PolicyAgent (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll 11:44:33.0753 0952 PolicyAgent - ok 11:44:33.0771 0952 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll 11:44:33.0774 0952 Power - ok 11:44:33.0830 0952 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys 11:44:33.0831 0952 PptpMiniport - ok 11:44:33.0843 0952 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 11:44:33.0844 0952 Processor - ok 11:44:33.0876 0952 ProfSvc (97293447431311c06703368ad0f6c4be) C:\Windows\system32\profsvc.dll 11:44:33.0878 0952 ProfSvc - ok 11:44:33.0930 0952 ProtectedStorage (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 11:44:33.0931 0952 ProtectedStorage - ok 11:44:34.0069 0952 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys 11:44:34.0073 0952 Psched - ok 11:44:34.0204 0952 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 11:44:34.0221 0952 ql2300 - ok 11:44:34.0307 0952 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 11:44:34.0308 0952 ql40xx - ok 11:44:34.0338 0952 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll 11:44:34.0341 0952 QWAVE - ok 11:44:34.0357 0952 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 11:44:34.0358 0952 QWAVEdrv - ok 11:44:34.0370 0952 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 11:44:34.0371 0952 RasAcd - ok 11:44:34.0387 0952 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 11:44:34.0387 0952 RasAgileVpn - ok 11:44:34.0409 0952 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll 11:44:34.0411 0952 RasAuto - ok 11:44:34.0425 0952 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys 11:44:34.0427 0952 Rasl2tp - ok 11:44:34.0464 0952 RasMan (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll 11:44:34.0472 0952 RasMan - ok 11:44:34.0491 0952 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 11:44:34.0492 0952 RasPppoe - ok 11:44:34.0507 0952 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 11:44:34.0508 0952 RasSstp - ok 11:44:34.0537 0952 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys 11:44:34.0539 0952 rdbss - ok 11:44:34.0572 0952 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 11:44:34.0572 0952 rdpbus - ok 11:44:34.0584 0952 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 11:44:34.0584 0952 RDPCDD - ok 11:44:34.0592 0952 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 11:44:34.0592 0952 RDPENCDD - ok 11:44:34.0606 0952 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 11:44:34.0607 0952 RDPREFMP - ok 11:44:34.0641 0952 RDPWD (447de7e3dea39d422c1504f245b668b1) C:\Windows\system32\drivers\RDPWD.sys 11:44:34.0649 0952 RDPWD - ok 11:44:34.0678 0952 rdyboost (e5dc9ba9e439d6dbdd79f8caacb5bf01) C:\Windows\system32\drivers\rdyboost.sys 11:44:34.0680 0952 rdyboost - ok 11:44:34.0708 0952 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll 11:44:34.0710 0952 RemoteAccess - ok 11:44:34.0729 0952 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll 11:44:34.0732 0952 RemoteRegistry - ok 11:44:34.0746 0952 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll 11:44:34.0748 0952 RpcEptMapper - ok 11:44:34.0770 0952 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe 11:44:34.0772 0952 RpcLocator - ok 11:44:34.0811 0952 RpcSs (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll 11:44:34.0814 0952 RpcSs - ok 11:44:34.0840 0952 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 11:44:34.0840 0952 rspndr - ok 11:44:34.0863 0952 SamSs (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 11:44:34.0864 0952 SamSs - ok 11:44:34.0882 0952 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys 11:44:34.0883 0952 sbp2port - ok 11:44:34.0920 0952 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll 11:44:34.0923 0952 SCardSvr - ok 11:44:34.0937 0952 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys 11:44:34.0937 0952 scfilter - ok 11:44:35.0022 0952 Schedule (624d0f5ff99428bb90a5b8a4123e918e) C:\Windows\system32\schedsvc.dll 11:44:35.0032 0952 Schedule - ok 11:44:35.0057 0952 SCPolicySvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 11:44:35.0057 0952 SCPolicySvc - ok 11:44:35.0081 0952 SDRSVC (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll 11:44:35.0084 0952 SDRSVC - ok 11:44:35.0128 0952 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 11:44:35.0129 0952 secdrv - ok 11:44:35.0151 0952 seclogon (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll 11:44:35.0153 0952 seclogon - ok 11:44:35.0164 0952 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll 11:44:35.0166 0952 SENS - ok 11:44:35.0179 0952 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll 11:44:35.0182 0952 SensrSvc - ok 11:44:35.0188 0952 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 11:44:35.0189 0952 Serenum - ok 11:44:35.0210 0952 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 11:44:35.0211 0952 Serial - ok 11:44:35.0216 0952 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 11:44:35.0217 0952 sermouse - ok 11:44:35.0246 0952 SessionEnv (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll 11:44:35.0248 0952 SessionEnv - ok 11:44:35.0251 0952 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys 11:44:35.0252 0952 sffdisk - ok 11:44:35.0256 0952 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys 11:44:35.0257 0952 sffp_mmc - ok 11:44:35.0262 0952 sffp_sd (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\DRIVERS\sffp_sd.sys 11:44:35.0263 0952 sffp_sd - ok 11:44:35.0268 0952 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 11:44:35.0269 0952 sfloppy - ok 11:44:35.0341 0952 Sftfs (c6cc9297bd53e5229653303e556aa539) C:\Windows\system32\DRIVERS\Sftfslh.sys 11:44:35.0347 0952 Sftfs - ok 11:44:35.0452 0952 sftlist (13693b6354dd6e72dc5131da7d764b90) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe 11:44:35.0463 0952 sftlist - ok 11:44:35.0499 0952 Sftplay (390aa7bc52cee43f6790cdea1e776703) C:\Windows\system32\DRIVERS\Sftplaylh.sys 11:44:35.0502 0952 Sftplay - ok 11:44:35.0525 0952 Sftredir (617e29a0b0a2807466560d4c4e338d3e) C:\Windows\system32\DRIVERS\Sftredirlh.sys 11:44:35.0525 0952 Sftredir - ok 11:44:35.0539 0952 Sftvol (8f571f016fa1976f445147e9e6c8ae9b) C:\Windows\system32\DRIVERS\Sftvollh.sys 11:44:35.0540 0952 Sftvol - ok 11:44:35.0569 0952 sftvsa (c3cddd18f43d44ab713cf8c4916f7696) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe 11:44:35.0572 0952 sftvsa - ok 11:44:35.0609 0952 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll 11:44:35.0617 0952 SharedAccess - ok 11:44:35.0654 0952 ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll 11:44:35.0668 0952 ShellHWDetection - ok 11:44:35.0703 0952 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 11:44:35.0704 0952 SiSRaid2 - ok 11:44:35.0723 0952 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 11:44:35.0724 0952 SiSRaid4 - ok 11:44:35.0741 0952 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 11:44:35.0742 0952 Smb - ok 11:44:35.0762 0952 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe 11:44:35.0764 0952 SNMPTRAP - ok 11:44:35.0776 0952 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 11:44:35.0777 0952 spldr - ok 11:44:35.0884 0952 Spooler (f8e1fa03cb70d54a9892ac88b91d1e7b) C:\Windows\System32\spoolsv.exe 11:44:35.0897 0952 Spooler - ok 11:44:36.0105 0952 sppsvc (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe 11:44:36.0179 0952 sppsvc - ok 11:44:36.0261 0952 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll 11:44:36.0264 0952 sppuinotify - ok 11:44:36.0427 0952 SRTSP (06b9a7ba94356ec5207c5ddb59540378) C:\Windows\system32\drivers\NAVx64\1307010.005\SRTSP64.SYS 11:44:36.0463 0952 SRTSP - ok 11:44:36.0483 0952 SRTSPX (fbb8945a61e55a2345d12487c74a9d76) C:\Windows\system32\drivers\NAVx64\1307010.005\SRTSPX64.SYS 11:44:36.0485 0952 SRTSPX - ok 11:44:36.0540 0952 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys 11:44:36.0545 0952 srv - ok 11:44:36.0582 0952 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys 11:44:36.0586 0952 srv2 - ok 11:44:36.0648 0952 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys 11:44:36.0652 0952 srvnet - ok 11:44:36.0693 0952 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll 11:44:36.0696 0952 SSDPSRV - ok 11:44:36.0715 0952 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll 11:44:36.0718 0952 SstpSvc - ok 11:44:36.0742 0952 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 11:44:36.0743 0952 stexstor - ok 11:44:36.0815 0952 stisvc (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll 11:44:36.0829 0952 stisvc - ok 11:44:36.0844 0952 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys 11:44:36.0845 0952 swenum - ok 11:44:36.0881 0952 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll 11:44:36.0889 0952 swprv - ok 11:44:36.0994 0952 SymDS (8b2430762099598da40686f754632efd) C:\Windows\system32\drivers\NAVx64\1307010.005\SYMDS64.SYS 11:44:37.0012 0952 SymDS - ok 11:44:37.0190 0952 SymEFA (f90c7a190399165d3ab2245048d34786) C:\Windows\system32\drivers\NAVx64\1307010.005\SYMEFA64.SYS 11:44:37.0217 0952 SymEFA - ok 11:44:37.0267 0952 SymEvent (898bb48c797483420df523b2bbc1ecdb) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 11:44:37.0269 0952 SymEvent - ok 11:44:37.0325 0952 SymIRON (5013a76caaa1d7cf1c55214b490b4e35) C:\Windows\system32\drivers\NAVx64\1307010.005\Ironx64.SYS 11:44:37.0328 0952 SymIRON - ok 11:44:37.0403 0952 SymNetS (3911bd0e68c010e5438a87706abbe9ab) C:\Windows\system32\drivers\NAVx64\1307010.005\SYMNETS.SYS 11:44:37.0409 0952 SymNetS - ok 11:44:37.0543 0952 SysMain (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll 11:44:37.0564 0952 SysMain - ok 11:44:37.0664 0952 TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll 11:44:37.0672 0952 TabletInputService - ok 11:44:37.0708 0952 TapiSrv (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll 11:44:37.0724 0952 TapiSrv - ok 11:44:37.0731 0952 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll 11:44:37.0735 0952 TBS - ok 11:44:37.0860 0952 Tcpip (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\drivers\tcpip.sys 11:44:37.0877 0952 Tcpip - ok 11:44:38.0034 0952 TCPIP6 (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\DRIVERS\tcpip.sys 11:44:38.0043 0952 TCPIP6 - ok 11:44:38.0105 0952 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys 11:44:38.0106 0952 tcpipreg - ok 11:44:38.0118 0952 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 11:44:38.0119 0952 TDPIPE - ok 11:44:38.0140 0952 TDTCP (7518f7bcfd4b308abc9192bacaf6c970) C:\Windows\system32\drivers\tdtcp.sys 11:44:38.0140 0952 TDTCP - ok 11:44:38.0163 0952 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys 11:44:38.0164 0952 tdx - ok 11:44:38.0189 0952 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys 11:44:38.0189 0952 TermDD - ok 11:44:38.0246 0952 TermService (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll 11:44:38.0253 0952 TermService - ok 11:44:38.0266 0952 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll 11:44:38.0268 0952 Themes - ok 11:44:38.0297 0952 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 11:44:38.0298 0952 THREADORDER - ok 11:44:38.0320 0952 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll 11:44:38.0322 0952 TrkWks - ok 11:44:38.0368 0952 TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe 11:44:38.0369 0952 TrustedInstaller - ok 11:44:38.0381 0952 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys 11:44:38.0382 0952 tssecsrv - ok 11:44:38.0411 0952 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys 11:44:38.0412 0952 tunnel - ok 11:44:38.0420 0952 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 11:44:38.0420 0952 uagp35 - ok 11:44:38.0449 0952 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys 11:44:38.0452 0952 udfs - ok 11:44:38.0468 0952 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe 11:44:38.0471 0952 UI0Detect - ok 11:44:38.0493 0952 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys 11:44:38.0493 0952 uliagpkx - ok 11:44:38.0506 0952 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys 11:44:38.0507 0952 umbus - ok 11:44:38.0536 0952 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 11:44:38.0537 0952 UmPass - ok 11:44:38.0614 0952 Updater Service (f9ec9acd504d823d9b9ca98a4f8d3ca2) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe 11:44:38.0646 0952 Updater Service - ok 11:44:38.0690 0952 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll 11:44:38.0698 0952 upnphost - ok 11:44:38.0730 0952 USBAAPL64 (fb251567f41bc61988b26731dec19e4b) C:\Windows\system32\Drivers\usbaapl64.sys 11:44:38.0730 0952 USBAAPL64 - ok 11:44:38.0757 0952 usbccgp (7b6a127c93ee590e4d79a5f2a76fe46f) C:\Windows\system32\DRIVERS\usbccgp.sys 11:44:38.0758 0952 usbccgp - ok 11:44:38.0779 0952 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys 11:44:38.0780 0952 usbcir - ok 11:44:38.0803 0952 usbehci (92969ba5ac44e229c55a332864f79677) C:\Windows\system32\DRIVERS\usbehci.sys 11:44:38.0804 0952 usbehci - ok 11:44:38.0842 0952 usbhub (e7df1cfd28ca86b35ef5add0735ceef3) C:\Windows\system32\DRIVERS\usbhub.sys 11:44:38.0846 0952 usbhub - ok 11:44:38.0870 0952 usbohci (f1bb1e55f1e7a65c5839ccc7b36d773e) C:\Windows\system32\DRIVERS\usbohci.sys 11:44:38.0871 0952 usbohci - ok 11:44:38.0889 0952 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 11:44:38.0890 0952 usbprint - ok 11:44:38.0910 0952 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys 11:44:38.0911 0952 usbscan - ok 11:44:38.0935 0952 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS 11:44:38.0936 0952 USBSTOR - ok 11:44:38.0954 0952 usbuhci (bc3070350a491d84b518d7cca9abd36f) C:\Windows\system32\drivers\usbuhci.sys 11:44:38.0954 0952 usbuhci - ok 11:44:38.0981 0952 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll 11:44:38.0983 0952 UxSms - ok 11:44:39.0013 0952 VaultSvc (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 11:44:39.0014 0952 VaultSvc - ok 11:44:39.0033 0952 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys 11:44:39.0034 0952 vdrvroot - ok 11:44:39.0125 0952 vds (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe 11:44:39.0150 0952 vds - ok 11:44:39.0164 0952 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 11:44:39.0166 0952 vga - ok 11:44:39.0194 0952 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 11:44:39.0194 0952 VgaSave - ok 11:44:39.0224 0952 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys 11:44:39.0227 0952 vhdmp - ok 11:44:39.0233 0952 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys 11:44:39.0234 0952 viaide - ok 11:44:39.0249 0952 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys 11:44:39.0251 0952 volmgr - ok 11:44:39.0285 0952 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys 11:44:39.0288 0952 volmgrx - ok 11:44:39.0323 0952 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys 11:44:39.0326 0952 volsnap - ok 11:44:39.0347 0952 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 11:44:39.0350 0952 vsmraid - ok 11:44:39.0449 0952 VSS (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe 11:44:39.0473 0952 VSS - ok 11:44:39.0552 0952 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys 11:44:39.0552 0952 vwifibus - ok 11:44:39.0595 0952 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll 11:44:39.0600 0952 W32Time - ok 11:44:39.0608 0952 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 11:44:39.0609 0952 WacomPen - ok 11:44:39.0635 0952 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 11:44:39.0636 0952 WANARP - ok 11:44:39.0639 0952 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 11:44:39.0639 0952 Wanarpv6 - ok 11:44:39.0747 0952 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe 11:44:39.0764 0952 WatAdminSvc - ok 11:44:39.0850 0952 wbengine (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe 11:44:39.0868 0952 wbengine - ok 11:44:39.0943 0952 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll 11:44:39.0947 0952 WbioSrvc - ok 11:44:39.0992 0952 wcncsvc (dd1bae8ebfc653824d29ccf8c9054d68) C:\Windows\System32\wcncsvc.dll 11:44:40.0001 0952 wcncsvc - ok 11:44:40.0012 0952 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll 11:44:40.0014 0952 WcsPlugInService - ok 11:44:40.0023 0952 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 11:44:40.0024 0952 Wd - ok 11:44:40.0072 0952 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 11:44:40.0078 0952 Wdf01000 - ok 11:44:40.0098 0952 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 11:44:40.0100 0952 WdiServiceHost - ok 11:44:40.0104 0952 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 11:44:40.0105 0952 WdiSystemHost - ok 11:44:40.0145 0952 WebClient (733006127f235be7c35354ebee7b9a7b) C:\Windows\System32\webclnt.dll 11:44:40.0149 0952 WebClient - ok 11:44:40.0169 0952 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll 11:44:40.0173 0952 Wecsvc - ok 11:44:40.0191 0952 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll 11:44:40.0201 0952 wercplsupport - ok 11:44:40.0217 0952 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll 11:44:40.0220 0952 WerSvc - ok 11:44:40.0248 0952 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 11:44:40.0249 0952 WfpLwf - ok 11:44:40.0254 0952 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 11:44:40.0255 0952 WIMMount - ok 11:44:40.0280 0952 WinDefend - ok 11:44:40.0287 0952 WinHttpAutoProxySvc - ok 11:44:40.0347 0952 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll 11:44:40.0350 0952 Winmgmt - ok 11:44:40.0464 0952 WinRM (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll 11:44:40.0493 0952 WinRM - ok 11:44:40.0639 0952 WinUsb (817eaff5d38674edd7713b9dfb8e9791) C:\Windows\system32\DRIVERS\WinUsb.sys 11:44:40.0641 0952 WinUsb - ok 11:44:40.0715 0952 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll 11:44:40.0739 0952 Wlansvc - ok 11:44:40.0785 0952 wlcrasvc (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 11:44:40.0787 0952 wlcrasvc - ok 11:44:40.0949 0952 wlidsvc (7e47c328fc4768cb8beafbcfafa70362) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 11:44:40.0985 0952 wlidsvc - ok 11:44:41.0058 0952 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys 11:44:41.0059 0952 WmiAcpi - ok 11:44:41.0104 0952 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe 11:44:41.0107 0952 wmiApSrv - ok 11:44:41.0139 0952 WMPNetworkSvc - ok 11:44:41.0163 0952 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll 11:44:41.0165 0952 WPCSvc - ok 11:44:41.0180 0952 WPDBusEnum (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll 11:44:41.0183 0952 WPDBusEnum - ok 11:44:41.0196 0952 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 11:44:41.0197 0952 ws2ifsl - ok 11:44:41.0237 0952 wscsvc (8f9f3969933c02da96eb0f84576db43e) C:\Windows\System32\wscsvc.dll 11:44:41.0239 0952 wscsvc - ok 11:44:41.0243 0952 WSearch - ok 11:44:41.0406 0952 wuauserv (d9ef901dca379cfe914e9fa13b73b4c4) C:\Windows\system32\wuaueng.dll 11:44:41.0446 0952 wuauserv - ok 11:44:41.0576 0952 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys 11:44:41.0579 0952 WudfPf - ok 11:44:41.0617 0952 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys 11:44:41.0619 0952 WUDFRd - ok 11:44:41.0632 0952 wudfsvc (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll 11:44:41.0636 0952 wudfsvc - ok 11:44:41.0659 0952 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll 11:44:41.0671 0952 WwanSvc - ok 11:44:41.0709 0952 MBR (0x1B8) (0f84f2562620c40d8a3e1908c8075675) \Device\Harddisk0\DR0 11:44:41.0733 0952 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - infected 11:44:41.0733 0952 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.b (0) 11:44:41.0742 0952 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk2\DR2 11:44:41.0754 0952 \Device\Harddisk2\DR2 - ok 11:44:41.0789 0952 Boot (0x1200) (7f8a94a5e0df110a601c59fb6a1ae568) \Device\Harddisk0\DR0\Partition0 11:44:41.0791 0952 \Device\Harddisk0\DR0\Partition0 - ok 11:44:41.0803 0952 Boot (0x1200) (8dd7f34b2b315058981fd5c872f75b30) \Device\Harddisk0\DR0\Partition1 11:44:41.0805 0952 \Device\Harddisk0\DR0\Partition1 - ok 11:44:41.0813 0952 Boot (0x1200) (f83ea84c22cc51ed4eaaee371b1f369f) \Device\Harddisk2\DR2\Partition0 11:44:41.0816 0952 \Device\Harddisk2\DR2\Partition0 - ok 11:44:41.0816 0952 ============================================================ 11:44:41.0816 0952 Scan finished 11:44:41.0816 0952 ============================================================ 11:44:41.0828 5228 Detected object count: 1 11:44:41.0829 5228 Actual detected object count: 1 11:46:22.0103 5228 \Device\Harddisk0\DR0\# - copied to quarantine 11:46:22.0104 5228 \Device\Harddisk0\DR0 - copied to quarantine 11:46:22.0141 5228 \Device\Harddisk0\DR0\TDLFS\ph.dll - copied to quarantine 11:46:22.0144 5228 \Device\Harddisk0\DR0\TDLFS\phx.dll - copied to quarantine 11:46:22.0148 5228 \Device\Harddisk0\DR0\TDLFS\sub.dll - copied to quarantine 11:46:22.0153 5228 \Device\Harddisk0\DR0\TDLFS\subx.dll - copied to quarantine 11:46:22.0166 5228 \Device\Harddisk0\DR0\TDLFS\phd - copied to quarantine 11:46:22.0176 5228 \Device\Harddisk0\DR0\TDLFS\phdx - copied to quarantine 11:46:22.0177 5228 \Device\Harddisk0\DR0\TDLFS\phs - copied to quarantine 11:46:22.0179 5228 \Device\Harddisk0\DR0\TDLFS\phdata - copied to quarantine 11:46:22.0181 5228 \Device\Harddisk0\DR0\TDLFS\phld - copied to quarantine 11:46:22.0183 5228 \Device\Harddisk0\DR0\TDLFS\phln - copied to quarantine 11:46:22.0186 5228 \Device\Harddisk0\DR0\TDLFS\phlx - copied to quarantine 11:46:22.0188 5228 \Device\Harddisk0\DR0\TDLFS\phm - copied to quarantine 11:46:22.0190 5228 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - will be cured on reboot 11:46:22.0191 5228 \Device\Harddisk0\DR0 - ok 11:46:22.0389 5228 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - User select action: Cure 11:46:27.0118 0672 Deinitialize success

Conspire

Post #15July 19, 2012, 4:41 PM UTC

Hmm ok.

Please read through these instructions to familarize yourself with what to expect when this tool runs

Refer to the ComboFix User's Guide

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT- Save ComboFix.exe to your Desktop

====================================================

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs

====================================================

Double click on combofix.exe & follow the prompts.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply for further review.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Ads keep playing on my computer [Closed]

✨ Ask AI

Ask AI