Spyware / Malware / Virus Removal

Malicious URL Blocked involving process \\.\globalroot\systemroot\svch

50 min read

Looking for the outcome? Ask AI

teNATEcious Topic Starter

Post #1July 20, 2012, 1:34 AM UTC

Hi guys! I've never needed to seek help like this before, but it seems there's something on my computer that I can't quite get rid of. Just two days ago, I must have clicked on a bad link or advert somewhere. Usually I do pretty well staying away from all those things. I started hearing random audio and a Babylon toolbar took over my browser after an Alcohol 120% install. In the process of ridding myself of Babylon, I got a little crazy and installed Avast and Malwarebytes and deleted some important files. I don't remember what they were, because once rebooting my computer, I could not open any programs. About 50% of my processes had just stopped. I finally decided to wipe it clean and start fresh. Once booting up, I still heard the random audio and assumed it was linked to my Bluetooth, which I have since disabled. I haven't heard it since. I would still like to remove whatever program is causing it in case I want to use that feature in the future. I reinstalled Avast and Firefox and a couple games, but nothing else until I make sure my computer is clean. The reason I think it may not be, is because Avast is going bonkers every 10 seconds or less, telling me that some website link connected to this process (\\.\globalroot\systemroot\svchost.exe) is being malicious. It could be nothing, but I wanted to run some logs by you guys to make ABSOLUTELY sure. I've looked over the instructions topic and will post the logs I've run using OTL. Thanks for any help you are able to send my way.

Conspire

Post #2July 20, 2012, 3:35 AM UTC

**In any case where you happen to be busy or unable to give us a reply, we would be grateful if you keep us informed in advance and we will be more than happy to wait. Failure to do so we will have your thread closed in THREE(3) days.

Hello there, teNATEcious

I'm Conspire, I'll be glad to help you with your computer problems.

Please observe these rules while we work:

Read the entire procedure
It is important to perform ALL actions in sequence.
If you don't know, stop and ask! Don't keep going on.
Please reply to this thread. Do not start a new topic.
Stick with me till you're given the all clear.
Remember, absence of symptoms does not mean the infection is all gone.
Don't attempt to clean your computer with any tools other than the ones I ask you to use during the cleanup process.

IMPORTANT NOTE : Please do not delete anything unless instructed to. Remember to backup all your important data(if possible) before moving on.

—————————————————————————————————

Please post the OTL log you have along with the scans that I am about to ask you to perform.

—————————————————————————————————

Please download aswMBR.exe and save it to your desktop.

Double click aswMBR.exe to start the tool. (Vista/Windows 7 users - right click to run as administrator)
Allow it to update where necessary
Click Scan
Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet.
You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well.

===================================================

Download TDSSKiller.exe and save it to your desktop

Execute TDSSKiller.exe by doubleclicking on it.
Press Start Scan
If Malicious objects are found, do NOT select Cure. Change the action to Skip, and save the log.
Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.log.txt

===================================================

On your next reply please post :
OTL log
aswMBR log
TDSS Killer log

Please STOP and let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

Conspire

Post #3July 20, 2012, 3:36 AM UTC

BTW, when you said you wipe it clean and start fresh, do mean you did a reinstall and reformat of the operating system?

teNATEcious

Post #4July 20, 2012, 3:49 AM UTC

Hey Conspire! Thanks for taking on my case today.

You're right. When I wiped it I just formatted my C: drive, leaving the Recovery Partition (I couldn't ever get that to work), and used a Windows 7 Home version ISO I downloaded from Microsoft's website.

Let's see. I'll go ahead and post the OTL logs and work on getting the others you requested.

Thanks again!

——
Note: I made sure to close all other windows when scanning with OTL, but I forgot to turn off Avast in the background. Would that affect anything?
——

OTL logfile created on: 7/19/2012 9:08:02 PM - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\teNATEcious\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

15.98 Gb Total Physical Memory | 13.11 Gb Available Physical Memory | 82.06% Memory free
31.95 Gb Paging File | 29.18 Gb Available in Paging File | 91.32% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 449.09 Gb Total Space | 390.80 Gb Free Space | 87.02% Space Free | Partition Type: NTFS
Drive D: | 3.44 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Drive E: | 1397.26 Gb Total Space | 1304.20 Gb Free Space | 93.34% Space Free | Partition Type: NTFS
Drive G: | 7.47 Gb Total Space | 5.60 Gb Free Space | 74.91% Space Free | Partition Type: FAT32

Computer Name: TENATECIOUS-PC | User Name: teNATEcious | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\teNATEcious\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - \\.\globalroot\systemroot\svchost.exe ()
PRC - \\.\globalroot\systemroot\svchost.exe ()
PRC - \\.\globalroot\systemroot\svchost.exe ()
PRC - \\.\globalroot\systemroot\svchost.exe ()
PRC - \\.\globalroot\systemroot\svchost.exe ()
PRC - \\.\globalroot\systemroot\svchost.exe ()

========== Modules (No Company Name) ==========

========== Win32 Services (SafeList) ==========

SRV:64bit: - (avast! Antivirus) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (MozillaMaintenance) – C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (SkypeUpdate) – C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (Stereo Service) – C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV:64bit: - (dtsoftbus01) – C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV:64bit: - (aswSnx) – C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software)
DRV:64bit: - (aswSP) – C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software)
DRV:64bit: - (aswMonFlt) – C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (aswTdi) – C:\Windows\SysNative\drivers\aswTdi.sys (AVAST Software)
DRV:64bit: - (aswRdr) – C:\Windows\SysNative\drivers\aswRdr2.sys (AVAST Software)
DRV:64bit: - (aswFsBlk) – C:\Windows\SysNative\drivers\aswFsBlk.sys (AVAST Software)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (NVHDA) – C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (BtFilter) – C:\Windows\SysNative\drivers\btfilter.sys (Atheros)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (MEIx64) Intel® – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (athr) – C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 5E B4 09 2A 60 65 CD 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.google.com/finance"
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_265.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012/07/19 00:20:41 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/07/18 23:45:32 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2012/07/18 23:46:07 | 000,000,000 | —D | M] (No name found) – C:\Users\teNATEcious\AppData\Roaming\Mozilla\Extensions
[2012/07/18 23:45:32 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/07/19 00:20:41 | 000,000,000 | —D | M] (avast! WebRep) – C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2012/07/13 20:17:47 | 000,136,672 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/07/13 20:16:36 | 000,002,252 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/07/13 20:16:36 | 000,002,040 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7E6A1C2C-852A-46C4-98A0-14D00E9FF821}: DhcpNameServer = 192.168.1.254
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 07:25:20 | 000,000,052 | R— | M] () - D:\AUTORUN.INF – [ UDF ]
O32 - AutoRun File - [2008/12/15 03:01:46 | 000,000,113 | —- | M] () - E:\Autorun.inf – [ NTFS ]
O33 - MountPoints2\{1411baf2-d162-11e1-926a-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{1411baf2-d162-11e1-926a-806e6f6e6963}\Shell\AutoRun\command - "" = D:\InstAll.exe – [2010/08/30 07:13:52 | 002,013,824 | R— | M] (ASUSTek COMPUTER INC.)
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/07/19 18:44:14 | 000,000,000 | —D | C] – C:\Windows\Minidump
[2012/07/19 16:47:22 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2012/07/19 16:47:22 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2012/07/19 16:47:22 | 002,311,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2012/07/19 16:47:22 | 001,494,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2012/07/19 16:47:22 | 001,427,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2012/07/19 16:47:22 | 000,818,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2012/07/19 16:47:22 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2012/07/19 16:47:22 | 000,697,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2012/07/19 16:47:22 | 000,603,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2012/07/19 16:47:22 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2012/07/19 16:47:22 | 000,452,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2012/07/19 16:47:22 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2012/07/19 16:47:22 | 000,434,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2012/07/19 16:47:22 | 000,367,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2012/07/19 16:47:22 | 000,282,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2012/07/19 16:47:22 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieaksie.dll
[2012/07/19 16:47:22 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2012/07/19 16:47:22 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2012/07/19 16:47:22 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2012/07/19 16:47:22 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2012/07/19 16:47:22 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2012/07/19 16:47:22 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2012/07/19 16:47:22 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2012/07/19 16:47:22 | 000,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2012/07/19 16:47:22 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2012/07/19 16:47:22 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieakui.dll
[2012/07/19 16:47:22 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieakui.dll
[2012/07/19 16:47:22 | 000,162,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2012/07/19 16:47:22 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2012/07/19 16:47:22 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieakeng.dll
[2012/07/19 16:47:22 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2012/07/19 16:47:22 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2012/07/19 16:47:22 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2012/07/19 16:47:22 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2012/07/19 16:47:22 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2012/07/19 16:47:22 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2012/07/19 16:47:22 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieakeng.dll
[2012/07/19 16:47:22 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2012/07/19 16:47:22 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2012/07/19 16:47:22 | 000,114,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\admparse.dll
[2012/07/19 16:47:22 | 000,111,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2012/07/19 16:47:22 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2012/07/19 16:47:22 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2012/07/19 16:47:22 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\admparse.dll
[2012/07/19 16:47:22 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2012/07/19 16:47:22 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2012/07/19 16:47:22 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2012/07/19 16:47:22 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2012/07/19 16:47:22 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2012/07/19 16:47:22 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2012/07/19 16:47:22 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2012/07/19 16:47:22 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2012/07/19 16:47:22 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2012/07/19 16:47:22 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2012/07/19 16:47:22 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2012/07/19 16:47:22 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2012/07/19 16:47:22 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2012/07/19 16:47:22 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2012/07/19 16:47:22 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2012/07/19 16:47:22 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2012/07/19 16:47:22 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2012/07/19 16:47:22 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2012/07/19 16:47:22 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2012/07/19 16:47:22 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2012/07/19 16:47:22 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2012/07/19 16:47:22 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2012/07/19 16:47:22 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2012/07/19 16:47:22 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2012/07/19 16:47:22 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2012/07/19 16:47:22 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2012/07/19 16:47:22 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2012/07/19 16:47:22 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2012/07/19 15:31:26 | 001,359,976 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvhdagenco642040.dll
[2012/07/19 15:31:26 | 000,174,184 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\drivers\nvhda64v.sys
[2012/07/19 15:31:26 | 000,029,288 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvhdap64.dll
[2012/07/19 15:30:41 | 000,000,000 | —D | C] – C:\ProgramData\NVIDIA
[2012/07/19 15:30:31 | 000,000,000 | —D | C] – C:\Program Files (x86)\NVIDIA Corporation
[2012/07/19 15:27:06 | 000,000,000 | —D | C] – C:\ProgramData\NVIDIA Corporation
[2012/07/19 15:26:58 | 001,617,512 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvdispco6420120.dll
[2012/07/19 15:26:57 | 001,359,976 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvgenco642040.dll
[2012/07/19 15:24:55 | 008,130,152 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvwgf2umx.dll
[2012/07/19 15:24:55 | 006,048,872 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvwgf2um.dll
[2012/07/19 15:24:53 | 020,492,392 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvoglv64.dll
[2012/07/19 15:24:51 | 015,067,752 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvoglv32.dll
[2012/07/19 15:24:47 | 012,872,296 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvd3dumx.dll
[2012/07/19 15:24:46 | 010,085,992 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvd3dum.dll
[2012/07/19 15:24:45 | 003,113,576 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuvid.dll
[2012/07/19 15:24:45 | 002,897,512 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuvid.dll
[2012/07/19 15:24:45 | 002,482,792 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuvenc.dll
[2012/07/19 15:24:44 | 004,943,976 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuda.dll
[2012/07/19 15:24:44 | 002,253,416 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuvenc.dll
[2012/07/19 15:24:43 | 006,607,976 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuda.dll
[2012/07/19 15:24:42 | 013,011,560 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcompiler.dll
[2012/07/19 15:24:40 | 018,580,072 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcompiler.dll
[2012/07/19 15:24:40 | 002,221,672 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvapi64.dll
[2012/07/19 15:24:40 | 001,986,152 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvapi.dll
[2012/07/19 15:24:40 | 000,011,240 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\drivers\nvBridge.kmd
[2012/07/19 15:24:39 | 000,067,176 | —- | C] (Khronos Group) – C:\Windows\SysNative\OpenCL.dll
[2012/07/19 15:24:39 | 000,057,960 | —- | C] (Khronos Group) – C:\Windows\SysWow64\OpenCL.dll
[2012/07/19 15:22:54 | 000,000,000 | —D | C] – C:\NvidiaLogs
[2012/07/19 15:07:12 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Roaming\InstallShield
[2012/07/19 15:03:21 | 000,000,000 | —D | C] – C:\Users\teNATEcious\Desktop\League of legends
[2012/07/19 15:00:24 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Local\PMB Files
[2012/07/19 15:00:22 | 000,000,000 | —D | C] – C:\ProgramData\PMB Files
[2012/07/19 15:00:07 | 000,000,000 | —D | C] – C:\Program Files (x86)\Pando Networks
[2012/07/19 14:36:41 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Roaming\Skype
[2012/07/19 14:36:33 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012/07/19 14:36:33 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Skype
[2012/07/19 14:36:30 | 000,000,000 | R–D | C] – C:\Program Files (x86)\Skype
[2012/07/19 14:36:17 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2012/07/19 12:52:10 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHost.exe
[2012/07/19 12:52:10 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHostProxy.dll
[2012/07/19 12:52:10 | 000,049,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netfxperf.dll
[2012/07/19 12:52:09 | 001,942,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfshim.dll
[2012/07/19 12:52:09 | 001,130,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfshim.dll
[2012/07/19 12:52:09 | 000,320,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHost.exe
[2012/07/19 12:52:09 | 000,109,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHostProxy.dll
[2012/07/19 12:52:09 | 000,048,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netfxperf.dll
[2012/07/19 02:23:32 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2012/07/19 02:22:24 | 000,000,000 | —D | C] – C:\Windows\Panther
[2012/07/19 02:22:09 | 000,000,000 | -HSD | C] – C:\Boot
[2012/07/19 01:55:41 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Local\Macromedia
[2012/07/19 01:26:33 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\Windows\svchost.exe
[2012/07/19 01:25:37 | 000,000,000 | —D | C] – C:\Windows\Prefetch
[2012/07/19 00:40:00 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Roaming\NVIDIA
[2012/07/19 00:40:00 | 000,000,000 | —D | C] – C:\Users\teNATEcious\Documents\My Games
[2012/07/19 00:31:33 | 002,430,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_41.dll
[2012/07/19 00:31:33 | 001,846,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_41.dll
[2012/07/19 00:31:32 | 000,520,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_41.dll
[2012/07/19 00:31:32 | 000,453,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_41.dll
[2012/07/19 00:31:31 | 005,425,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_41.dll
[2012/07/19 00:31:31 | 004,178,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_41.dll
[2012/07/19 00:31:28 | 000,521,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_4.dll
[2012/07/19 00:31:28 | 000,517,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_4.dll
[2012/07/19 00:31:28 | 000,073,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_3.dll
[2012/07/19 00:31:28 | 000,069,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_3.dll
[2012/07/19 00:31:25 | 000,235,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_4.dll
[2012/07/19 00:31:25 | 000,174,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_4.dll
[2012/07/19 00:31:25 | 000,024,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_6.dll
[2012/07/19 00:31:25 | 000,022,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_6.dll
[2012/07/19 00:31:24 | 002,605,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_40.dll
[2012/07/19 00:31:24 | 002,036,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_40.dll
[2012/07/19 00:31:24 | 000,519,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_40.dll
[2012/07/19 00:31:24 | 000,452,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_40.dll
[2012/07/19 00:31:21 | 005,631,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_40.dll
[2012/07/19 00:31:21 | 004,379,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_40.dll
[2012/07/19 00:31:20 | 000,518,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_3.dll
[2012/07/19 00:31:20 | 000,514,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_3.dll
[2012/07/19 00:31:20 | 000,074,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_2.dll
[2012/07/19 00:31:20 | 000,070,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_2.dll
[2012/07/19 00:31:18 | 000,235,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_3.dll
[2012/07/19 00:31:18 | 000,175,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_3.dll
[2012/07/19 00:31:17 | 000,025,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_5.dll
[2012/07/19 00:31:17 | 000,023,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_5.dll
[2012/07/19 00:31:16 | 000,513,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_2.dll
[2012/07/19 00:31:16 | 000,509,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_2.dll
[2012/07/19 00:31:16 | 000,072,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_1.dll
[2012/07/19 00:31:16 | 000,068,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_1.dll
[2012/07/19 00:31:14 | 000,238,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_2.dll
[2012/07/19 00:31:14 | 000,177,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_2.dll
[2012/07/19 00:31:11 | 001,942,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_39.dll
[2012/07/19 00:31:11 | 001,493,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_39.dll
[2012/07/19 00:31:11 | 000,540,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_39.dll
[2012/07/19 00:31:11 | 000,467,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_39.dll
[2012/07/19 00:31:10 | 004,992,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_39.dll
[2012/07/19 00:31:10 | 003,851,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_39.dll
[2012/07/19 00:31:09 | 000,511,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_1.dll
[2012/07/19 00:31:09 | 000,507,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_1.dll
[2012/07/19 00:31:09 | 000,068,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_0.dll
[2012/07/19 00:31:09 | 000,065,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_0.dll
[2012/07/19 00:31:08 | 000,238,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_1.dll
[2012/07/19 00:31:08 | 000,177,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_1.dll
[2012/07/19 00:31:07 | 000,028,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_4.dll
[2012/07/19 00:31:07 | 000,025,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_4.dll
[2012/07/19 00:31:06 | 001,941,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_38.dll
[2012/07/19 00:31:06 | 001,491,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_38.dll
[2012/07/19 00:31:06 | 000,540,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_38.dll
[2012/07/19 00:31:06 | 000,467,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_38.dll
[2012/07/19 00:31:05 | 004,991,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_38.dll
[2012/07/19 00:31:05 | 003,850,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_38.dll
[2012/07/19 00:31:05 | 000,489,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_0.dll
[2012/07/19 00:31:05 | 000,479,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_0.dll
[2012/07/19 00:31:03 | 000,238,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_0.dll
[2012/07/19 00:31:03 | 000,177,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_0.dll
[2012/07/19 00:31:03 | 000,028,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_3.dll
[2012/07/19 00:31:03 | 000,025,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_3.dll
[2012/07/19 00:31:02 | 001,860,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_37.dll
[2012/07/19 00:31:02 | 001,420,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_37.dll
[2012/07/19 00:31:02 | 000,529,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_37.dll
[2012/07/19 00:31:02 | 000,462,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_37.dll
[2012/07/19 00:31:01 | 004,910,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_37.dll
[2012/07/19 00:31:01 | 003,786,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_37.dll
[2012/07/19 00:31:00 | 000,411,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_10.dll
[2012/07/19 00:31:00 | 000,267,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_10.dll
[2012/07/19 00:30:58 | 002,006,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_36.dll
[2012/07/19 00:30:58 | 001,374,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_36.dll
[2012/07/19 00:30:58 | 000,508,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_36.dll
[2012/07/19 00:30:58 | 000,444,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_36.dll
[2012/07/19 00:30:53 | 005,081,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_36.dll
[2012/07/19 00:30:53 | 003,734,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_36.dll
[2012/07/19 00:30:52 | 000,411,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_9.dll
[2012/07/19 00:30:52 | 000,267,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_9.dll
[2012/07/19 00:30:50 | 001,985,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_35.dll
[2012/07/19 00:30:50 | 001,358,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_35.dll
[2012/07/19 00:30:50 | 000,508,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_35.dll
[2012/07/19 00:30:50 | 000,444,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_35.dll
[2012/07/19 00:30:49 | 005,073,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_35.dll
[2012/07/19 00:30:49 | 003,727,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_35.dll
[2012/07/19 00:30:48 | 000,409,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_8.dll
[2012/07/19 00:30:48 | 000,266,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_8.dll
[2012/07/19 00:30:48 | 000,021,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_2.dll
[2012/07/19 00:30:48 | 000,017,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_2.dll
[2012/07/19 00:30:47 | 001,401,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_34.dll
[2012/07/19 00:30:47 | 001,124,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_34.dll
[2012/07/19 00:30:47 | 000,506,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_34.dll
[2012/07/19 00:30:47 | 000,443,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_34.dll
[2012/07/19 00:30:46 | 004,496,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_34.dll
[2012/07/19 00:30:46 | 003,497,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_34.dll
[2012/07/19 00:30:46 | 000,107,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xinput1_3.dll
[2012/07/19 00:30:46 | 000,081,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xinput1_3.dll
[2012/07/19 00:30:45 | 000,403,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_7.dll
[2012/07/19 00:30:45 | 000,261,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_7.dll
[2012/07/19 00:30:42 | 001,400,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_33.dll
[2012/07/19 00:30:42 | 001,123,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_33.dll
[2012/07/19 00:30:42 | 000,506,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_33.dll
[2012/07/19 00:30:42 | 000,443,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_33.dll
[2012/07/19 00:30:40 | 004,494,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_33.dll
[2012/07/19 00:30:40 | 003,495,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_33.dll
[2012/07/19 00:30:39 | 000,393,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_6.dll
[2012/07/19 00:30:39 | 000,255,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_6.dll
[2012/07/19 00:30:36 | 000,390,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_5.dll
[2012/07/19 00:30:36 | 000,251,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_5.dll
[2012/07/19 00:30:35 | 000,469,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10.dll
[2012/07/19 00:30:35 | 000,440,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10.dll
[2012/07/19 00:30:34 | 004,398,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_32.dll
[2012/07/19 00:30:34 | 003,426,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_32.dll
[2012/07/19 00:30:33 | 000,364,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_4.dll
[2012/07/19 00:30:33 | 000,237,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_4.dll
[2012/07/19 00:30:33 | 000,017,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\x3daudio1_1.dll
[2012/07/19 00:30:33 | 000,015,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\x3daudio1_1.dll
[2012/07/19 00:30:32 | 003,977,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_31.dll
[2012/07/19 00:30:32 | 002,414,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_31.dll
[2012/07/19 00:30:31 | 000,363,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_3.dll
[2012/07/19 00:30:31 | 000,236,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_3.dll
[2012/07/19 00:30:31 | 000,083,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xinput1_2.dll
[2012/07/19 00:30:31 | 000,062,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xinput1_2.dll
[2012/07/19 00:30:29 | 000,354,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_2.dll
[2012/07/19 00:30:29 | 000,230,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_2.dll
[2012/07/19 00:30:29 | 000,083,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xinput1_1.dll
[2012/07/19 00:30:29 | 000,062,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xinput1_1.dll
[2012/07/19 00:30:27 | 000,352,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_1.dll
[2012/07/19 00:30:27 | 000,229,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_1.dll
[2012/07/19 00:30:21 | 003,927,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_30.dll
[2012/07/19 00:30:21 | 002,388,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_30.dll
[2012/07/19 00:30:18 | 000,355,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_0.dll
[2012/07/19 00:30:18 | 000,230,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_0.dll
[2012/07/19 00:30:18 | 000,016,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\x3daudio1_0.dll
[2012/07/19 00:30:18 | 000,014,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\x3daudio1_0.dll
[2012/07/19 00:30:16 | 003,830,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_29.dll
[2012/07/19 00:30:16 | 002,332,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_29.dll
[2012/07/19 00:30:15 | 003,815,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_28.dll
[2012/07/19 00:30:15 | 002,323,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_28.dll
[2012/07/19 00:30:11 | 003,807,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_27.dll
[2012/07/19 00:30:11 | 002,319,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_27.dll
[2012/07/19 00:30:10 | 003,767,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_26.dll
[2012/07/19 00:30:10 | 002,297,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_26.dll
[2012/07/19 00:30:05 | 003,823,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_25.dll
[2012/07/19 00:30:05 | 002,337,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_25.dll
[2012/07/19 00:30:04 | 003,544,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_24.dll
[2012/07/19 00:30:04 | 002,222,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_24.dll
[2012/07/19 00:29:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\AGEIA Technologies
[2012/07/19 00:29:29 | 000,000,000 | —D | C] – C:\Windows\SysWow64\AGEIA
[2012/07/19 00:29:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2012/07/19 00:24:00 | 000,000,000 | —D | C] – C:\Program Files (x86)\2K Games
[2012/07/19 00:23:59 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\InstallShield Installation Information
[2012/07/19 00:23:35 | 000,000,000 | —D | C] – C:\BDS
[2012/07/19 00:23:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\InstallShield
[2012/07/19 00:21:23 | 000,355,856 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswSP.sys
[2012/07/19 00:21:23 | 000,025,232 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswFsBlk.sys
[2012/07/19 00:21:23 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2012/07/19 00:21:22 | 000,054,072 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswRdr2.sys
[2012/07/19 00:21:21 | 000,059,728 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswTdi.sys
[2012/07/19 00:21:20 | 000,958,400 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswSnx.sys
[2012/07/19 00:21:19 | 000,285,328 | —- | C] (AVAST Software) – C:\Windows\SysNative\aswBoot.exe
[2012/07/19 00:21:19 | 000,071,064 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswMonFlt.sys
[2012/07/19 00:20:35 | 000,041,224 | —- | C] (AVAST Software) – C:\Windows\avastSS.scr
[2012/07/19 00:20:34 | 000,227,648 | —- | C] (AVAST Software) – C:\Windows\SysWow64\aswBoot.exe
[2012/07/19 00:20:27 | 000,000,000 | —D | C] – C:\ProgramData\AVAST Software
[2012/07/19 00:20:27 | 000,000,000 | —D | C] – C:\Program Files\AVAST Software
[2012/07/19 00:08:18 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2012/07/19 00:08:18 | 000,000,000 | —D | C] – C:\Program Files\7-Zip
[2012/07/19 00:04:32 | 000,283,200 | —- | C] (DT Soft Ltd) – C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2012/07/19 00:04:30 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Roaming\DAEMON Tools Lite
[2012/07/19 00:04:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\DAEMON Tools Lite
[2012/07/19 00:03:57 | 000,319,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcjt32.dll
[2012/07/19 00:03:57 | 000,212,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbctrac.dll
[2012/07/19 00:03:57 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbctrac.dll
[2012/07/19 00:03:57 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccp32.dll
[2012/07/19 00:03:57 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccp32.dll
[2012/07/19 00:03:57 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccu32.dll
[2012/07/19 00:03:57 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccr32.dll
[2012/07/19 00:03:57 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccu32.dll
[2012/07/19 00:03:57 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccr32.dll
[2012/07/19 00:03:56 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xmllite.dll
[2012/07/19 00:03:55 | 001,837,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2012/07/19 00:03:55 | 001,541,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2012/07/19 00:03:55 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2012/07/19 00:03:55 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2012/07/19 00:03:55 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2012/07/19 00:03:41 | 002,870,272 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2012/07/19 00:03:41 | 002,614,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2012/07/19 00:03:40 | 000,961,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CPFilters.dll
[2012/07/19 00:03:40 | 000,642,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CPFilters.dll
[2012/07/19 00:03:40 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\poqexec.exe
[2012/07/19 00:03:40 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\poqexec.exe
[2012/07/19 00:03:39 | 001,118,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sbe.dll
[2012/07/19 00:03:39 | 000,850,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbe.dll
[2012/07/19 00:03:39 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mpg2splt.ax
[2012/07/19 00:03:39 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2012/07/19 00:03:36 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2012/07/19 00:03:36 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2012/07/19 00:03:35 | 000,000,000 | —D | C] – C:\ProgramData\DAEMON Tools Lite
[2012/07/19 00:03:11 | 001,572,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2012/07/19 00:03:11 | 001,328,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2012/07/19 00:03:10 | 002,228,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssrch.dll
[2012/07/19 00:03:10 | 000,514,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdvd.dll
[2012/07/19 00:03:10 | 000,366,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2012/07/19 00:03:09 | 002,326,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tquery.dll
[2012/07/19 00:03:09 | 001,553,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tquery.dll
[2012/07/19 00:03:09 | 001,401,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssrch.dll
[2012/07/19 00:03:08 | 000,779,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssvp.dll
[2012/07/19 00:03:08 | 000,666,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssvp.dll
[2012/07/19 00:03:08 | 000,491,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssph.dll
[2012/07/19 00:03:08 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssph.dll
[2012/07/19 00:03:08 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssphtb.dll
[2012/07/19 00:03:08 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchProtocolHost.exe
[2012/07/19 00:03:08 | 000,113,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFilterHost.exe
[2012/07/19 00:03:08 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscntrs.dll
[2012/07/19 00:03:07 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscntrs.dll
[2012/07/19 00:03:02 | 002,085,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2012/07/19 00:02:59 | 000,509,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntshrui.dll
[2012/07/19 00:02:56 | 001,975,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2012/07/19 00:02:56 | 001,320,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2012/07/19 00:02:48 | 001,169,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskschd.dll
[2012/07/19 00:02:48 | 000,524,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmicmiplugin.dll
[2012/07/19 00:02:48 | 000,496,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskschd.dll
[2012/07/19 00:02:48 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskcomp.dll
[2012/07/19 00:02:48 | 000,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskeng.exe
[2012/07/19 00:02:48 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskcomp.dll
[2012/07/19 00:02:48 | 000,285,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schtasks.exe
[2012/07/19 00:02:48 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schtasks.exe
[2012/07/19 00:02:46 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webio.dll
[2012/07/19 00:02:46 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webio.dll
[2012/07/19 00:02:44 | 000,483,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\StructuredQuery.dll
[2012/07/19 00:02:44 | 000,424,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2012/07/19 00:02:44 | 000,422,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2012/07/19 00:02:44 | 000,369,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2012/07/19 00:02:44 | 000,365,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2012/07/19 00:02:44 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2012/07/19 00:02:44 | 000,356,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2012/07/19 00:02:44 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2012/07/19 00:02:44 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2012/07/19 00:02:44 | 000,306,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2012/07/19 00:02:44 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2012/07/19 00:02:44 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2012/07/19 00:02:44 | 000,277,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2012/07/19 00:02:44 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2012/07/19 00:02:44 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2012/07/19 00:02:44 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2012/07/19 00:02:44 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2012/07/19 00:02:42 | 000,552,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdri.dll
[2012/07/19 00:02:37 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\csrsrv.dll
[2012/07/19 00:02:34 | 000,515,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\timedate.cpl
[2012/07/19 00:02:34 | 000,478,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\timedate.cpl
[2012/07/19 00:02:34 | 000,476,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsGdiConverter.dll
[2012/07/19 00:02:33 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsGdiConverter.dll
[2012/07/19 00:02:30 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comctl32.dll
[2012/07/19 00:02:27 | 000,264,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\upnp.dll
[2012/07/19 00:02:27 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\upnp.dll
[2012/07/19 00:02:25 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\davclnt.dll
[2012/07/19 00:02:25 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscapi.dll
[2012/07/19 00:02:25 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscapi.dll
[2012/07/19 00:02:25 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slwga.dll
[2012/07/19 00:02:25 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slwga.dll
[2012/07/19 00:02:23 | 000,662,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsPrint.dll
[2012/07/19 00:02:23 | 000,442,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsPrint.dll
[2012/07/19 00:02:20 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2012/07/19 00:02:19 | 001,395,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42.dll
[2012/07/19 00:02:19 | 001,359,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42u.dll
[2012/07/19 00:02:19 | 001,164,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42u.dll
[2012/07/19 00:02:19 | 001,137,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42.dll
[2012/07/19 00:02:15 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2012/07/19 00:01:38 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcorekmts.dll
[2012/07/19 00:01:38 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpwsx.dll
[2012/07/19 00:01:38 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdrmemptylst.exe
[2012/07/19 00:01:28 | 001,446,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2012/07/19 00:01:28 | 000,307,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncrypt.dll
[2012/07/19 00:01:28 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspicli.dll
[2012/07/19 00:01:28 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspisrv.dll
[2012/07/19 00:01:28 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secur32.dll
[2012/07/19 00:01:22 | 000,367,104 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2012/07/19 00:01:20 | 000,294,912 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2012/07/19 00:01:20 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontsub.dll
[2012/07/19 00:01:20 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontsub.dll
[2012/07/19 00:01:20 | 000,046,080 | —- | C] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2012/07/19 00:01:20 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2012/07/19 00:01:18 | 001,888,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2012/07/19 00:01:17 | 004,068,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mf.dll
[2012/07/19 00:01:17 | 003,181,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mf.dll
[2012/07/19 00:01:15 | 001,863,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ExplorerFrame.dll
[2012/07/19 00:01:15 | 001,619,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2012/07/19 00:01:15 | 001,495,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ExplorerFrame.dll
[2012/07/19 00:01:15 | 000,265,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxgmms1.sys
[2012/07/19 00:01:15 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfreadwrite.dll
[2012/07/19 00:01:15 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsRasterService.dll
[2012/07/19 00:01:15 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfps.dll
[2012/07/19 00:01:15 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfreadwrite.dll
[2012/07/19 00:01:15 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2012/07/19 00:01:15 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsRasterService.dll
[2012/07/19 00:01:01 | 000,027,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys
[2012/07/19 00:01:00 | 000,082,944 | —- | C] (Radius Inc.) – C:\Windows\SysWow64\iccvid.dll
[2012/07/19 00:00:54 | 000,356,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnsapi.dll
[2012/07/19 00:00:54 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscacheugc.exe
[2012/07/19 00:00:54 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscacheugc.exe
[2012/07/19 00:00:53 | 001,024,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2012/07/19 00:00:53 | 000,738,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2012/07/19 00:00:52 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2012/07/19 00:00:52 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2012/07/19 00:00:49 | 000,613,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisdecd.dll
[2012/07/19 00:00:49 | 000,465,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisdecd.dll
[2012/07/19 00:00:49 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSNP.ax
[2012/07/19 00:00:49 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSNP.ax
[2012/07/19 00:00:49 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisrndr.ax
[2012/07/19 00:00:49 | 000,104,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mpeg2Data.ax
[2012/07/19 00:00:49 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisrndr.ax
[2012/07/19 00:00:49 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSDvbNP.ax
[2012/07/19 00:00:49 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mpeg2Data.ax
[2012/07/19 00:00:49 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSDvbNP.ax
[2012/07/19 00:00:39 | 003,213,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msi.dll
[2012/07/19 00:00:21 | 000,640,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.efi
[2012/07/19 00:00:21 | 000,603,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.exe
[2012/07/19 00:00:21 | 000,556,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.efi
[2012/07/19 00:00:21 | 000,518,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.exe
[2012/07/19 00:00:21 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdusb.dll
[2012/07/19 00:00:21 | 000,019,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kd1394.dll
[2012/07/19 00:00:21 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdcom.dll
[2012/07/19 00:00:17 | 000,954,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40.dll
[2012/07/19 00:00:17 | 000,954,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40u.dll
[2012/07/19 00:00:16 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2012/07/19 00:00:14 | 001,460,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2012/07/19 00:00:14 | 000,140,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptnet.dll
[2012/07/18 23:59:55 | 001,162,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kernel32.dll
[2012/07/18 23:59:55 | 000,422,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KernelBase.dll
[2012/07/18 23:59:55 | 000,362,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64win.dll
[2012/07/18 23:59:55 | 000,338,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\conhost.exe
[2012/07/18 23:59:55 | 000,243,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2012/07/18 23:59:55 | 000,214,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsrv.dll
[2012/07/18 23:59:55 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setup16.exe
[2012/07/18 23:59:55 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntvdm64.dll
[2012/07/18 23:59:55 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntvdm64.dll
[2012/07/18 23:59:55 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64cpu.dll
[2012/07/18 23:59:55 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\instnm.exe
[2012/07/18 23:59:55 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wow32.dll
[2012/07/18 23:59:55 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/07/18 23:59:55 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/07/18 23:59:54 | 000,006,144 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2012/07/18 23:59:54 | 000,006,144 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2012/07/18 23:59:54 | 000,005,120 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2012/07/18 23:59:54 | 000,005,120 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2012/07/18 23:59:54 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2012/07/18 23:59:54 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2012/07/18 23:59:54 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2012/07/18 23:59:54 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2012/07/18 23:59:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2012/07/18 23:59:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2012/07/18 23:59:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2012/07/18 23:59:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2012/07/18 23:59:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2012/07/18 23:59:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2012/07/18 23:59:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2012/07/18 23:59:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2012/07/18 23:59:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2012/07/18 23:59:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2012/07/18 23:59:54 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\user.exe
[2012/07/18 23:59:53 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvinst.exe
[2012/07/18 23:59:53 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\devrtl.dll
[2012/07/18 23:59:52 | 003,138,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstscax.dll
[2012/07/18 23:59:52 | 002,690,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2012/07/18 23:59:51 | 001,034,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2012/07/18 23:59:50 | 001,097,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstsc.exe
[2012/07/18 23:59:48 | 014,627,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2012/07/18 23:59:48 | 011,406,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2012/07/18 23:59:47 | 012,625,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2012/07/18 23:59:47 | 012,625,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2012/07/18 23:59:46 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prevhost.exe
[2012/07/18 23:59:46 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prevhost.exe
[2012/07/18 23:59:45 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSCOVER.exe
[2012/07/18 23:59:44 | 000,634,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msvcrt.dll
[2012/07/18 23:59:42 | 000,112,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\consent.exe
[2012/07/18 23:59:40 | 000,861,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleaut32.dll
[2012/07/18 23:59:40 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleacc.dll
[2012/07/18 23:59:39 | 000,723,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EncDec.dll
[2012/07/18 23:59:39 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2012/07/18 23:56:16 | 000,720,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbc32.dll
[2012/07/18 23:56:16 | 000,573,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbc32.dll
[2012/07/18 23:55:39 | 001,739,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2012/07/18 23:49:51 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Wat
[2012/07/18 23:49:51 | 000,000,000 | —D | C] – C:\Windows\SysNative\Wat
[2012/07/18 23:49:06 | 005,504,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2012/07/18 23:49:06 | 003,958,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2012/07/18 23:49:05 | 003,902,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2012/07/18 23:48:54 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2012/07/18 23:48:54 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imagehlp.dll
[2012/07/18 23:48:54 | 000,022,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fs_rec.sys
[2012/07/18 23:46:16 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sscore.dll
[2012/07/18 23:45:57 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Roaming\Mozilla
[2012/07/18 23:45:57 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Local\Mozilla
[2012/07/18 23:45:35 | 000,000,000 | —D | C] – C:\ProgramData\Mozilla
[2012/07/18 23:45:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Maintenance Service
[2012/07/18 23:45:32 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Firefox
[2012/07/18 23:45:16 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\packager.dll
[2012/07/18 23:45:16 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\packager.dll
[2012/07/18 23:43:23 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabview.dll
[2012/07/18 23:43:23 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2012/07/18 23:42:59 | 001,031,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcore.dll
[2012/07/18 23:42:59 | 000,826,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpcore.dll
[2012/07/18 23:41:12 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Roaming\Macromedia
[2012/07/18 23:41:12 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Roaming\Adobe
[2012/07/18 23:40:30 | 000,426,184 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/07/18 23:40:30 | 000,070,344 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/07/18 23:40:29 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Macromed
[2012/07/18 23:40:29 | 000,000,000 | —D | C] – C:\Windows\SysNative\Macromed
[2012/07/18 23:39:40 | 002,622,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2012/07/18 23:39:40 | 000,057,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2012/07/18 23:39:40 | 000,044,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2012/07/18 23:39:36 | 000,701,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapi.dll
[2012/07/18 23:39:36 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wudriver.dll
[2012/07/18 23:39:36 | 000,038,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups.dll
[2012/07/18 23:39:29 | 000,186,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2012/07/18 23:39:29 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2012/07/18 23:36:35 | 002,228,736 | —- | C] (Atheros Communications, Inc.) – C:\Windows\SysNative\drivers\athrx.sys
[2012/07/18 23:05:44 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2012/07/18 22:59:06 | 000,000,000 | -HSD | C] – C:\Windows\Installer
[2012/07/18 22:58:31 | 000,000,000 | —D | C] – C:\Program Files\NVIDIA Corporation
[2012/07/18 22:52:40 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Local\Diagnostics
[2012/07/18 22:44:59 | 000,053,248 | R— | C] (Windows XP Bundled build C-Centric Single User) – C:\Windows\SysWow64\CSVer.dll
[2012/07/18 22:44:59 | 000,000,000 | —D | C] – C:\Program Files (x86)\Intel
[2012/07/18 22:44:36 | 000,000,000 | —D | C] – C:\Intel
[2012/07/18 22:38:28 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2012/07/18 22:38:28 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\Searches
[2012/07/18 22:38:28 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2012/07/18 22:38:28 | 000,000,000 | -H-D | C] – C:\Users\teNATEcious\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2012/07/18 22:38:20 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Roaming\Identities
[2012/07/18 22:38:19 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\Contacts
[2012/07/18 22:38:17 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Local\VirtualStore
[2012/07/18 22:38:09 | 000,000,000 | –SD | C] – C:\Users\teNATEcious\AppData\Roaming\Microsoft
[2012/07/18 22:38:09 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\Videos
[2012/07/18 22:38:09 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\Saved Games
[2012/07/18 22:38:09 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\Pictures
[2012/07/18 22:38:09 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\Music
[2012/07/18 22:38:09 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012/07/18 22:38:09 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\Links
[2012/07/18 22:38:09 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\Favorites
[2012/07/18 22:38:09 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\Downloads
[2012/07/18 22:38:09 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\Documents
[2012/07/18 22:38:09 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\Desktop
[2012/07/18 22:38:09 | 000,000,000 | R–D | C] – C:\Users\teNATEcious\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\AppData\Local\Temporary Internet Files
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\Templates
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\Start Menu
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\SendTo
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\Recent
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\PrintHood
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\NetHood
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\Documents\My Videos
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\Documents\My Pictures
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\Documents\My Music
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\My Documents
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\Local Settings
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\AppData\Local\History
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\Cookies
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\Application Data
[2012/07/18 22:38:09 | 000,000,000 | -HSD | C] – C:\Users\teNATEcious\AppData\Local\Application Data
[2012/07/18 22:38:09 | 000,000,000 | -H-D | C] – C:\Users\teNATEcious\AppData
[2012/07/18 22:38:09 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Local\Temp
[2012/07/18 22:38:09 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Local\Microsoft
[2012/07/18 22:38:09 | 000,000,000 | —D | C] – C:\Users\teNATEcious\AppData\Roaming\Media Center Programs
[2012/07/18 22:38:03 | 000,000,000 | -HSD | C] – C:\Recovery
[2012/07/18 22:38:00 | 000,000,000 | —D | C] – C:\Windows\SoftwareDistribution

========== Files - Modified Within 30 Days ==========

[2012/07/19 20:46:56 | 000,013,808 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/07/19 20:46:56 | 000,013,808 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/07/19 18:49:29 | 000,713,888 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2012/07/19 18:49:29 | 000,615,360 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2012/07/19 18:49:29 | 000,103,702 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2012/07/19 18:44:11 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/07/19 18:44:06 | 4277,002,238 | -HS- | M] () – C:\hiberfil.sys
[2012/07/19 18:44:05 | 1551,650,853 | —- | M] () – C:\Windows\MEMORY.DMP
[2012/07/19 18:41:25 | 000,001,441 | —- | M] () – C:\Users\teNATEcious\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/07/19 16:47:22 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2012/07/19 16:47:22 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2012/07/19 16:47:22 | 002,311,680 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2012/07/19 16:47:22 | 001,494,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2012/07/19 16:47:22 | 001,427,968 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2012/07/19 16:47:22 | 000,818,688 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2012/07/19 16:47:22 | 000,716,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2012/07/19 16:47:22 | 000,697,344 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2012/07/19 16:47:22 | 000,603,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2012/07/19 16:47:22 | 000,534,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2012/07/19 16:47:22 | 000,452,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2012/07/19 16:47:22 | 000,448,512 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2012/07/19 16:47:22 | 000,434,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2012/07/19 16:47:22 | 000,367,104 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2012/07/19 16:47:22 | 000,282,112 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2012/07/19 16:47:22 | 000,267,776 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieaksie.dll
[2012/07/19 16:47:22 | 000,248,320 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2012/07/19 16:47:22 | 000,237,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2012/07/19 16:47:22 | 000,231,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2012/07/19 16:47:22 | 000,227,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2012/07/19 16:47:22 | 000,222,208 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2012/07/19 16:47:22 | 000,197,120 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2012/07/19 16:47:22 | 000,176,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2012/07/19 16:47:22 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2012/07/19 16:47:22 | 000,165,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2012/07/19 16:47:22 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieakui.dll
[2012/07/19 16:47:22 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieakui.dll
[2012/07/19 16:47:22 | 000,162,304 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2012/07/19 16:47:22 | 000,160,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2012/07/19 16:47:22 | 000,160,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieakeng.dll
[2012/07/19 16:47:22 | 000,152,064 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2012/07/19 16:47:22 | 000,150,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2012/07/19 16:47:22 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2012/07/19 16:47:22 | 000,145,920 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2012/07/19 16:47:22 | 000,142,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2012/07/19 16:47:22 | 000,135,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2012/07/19 16:47:22 | 000,130,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieakeng.dll
[2012/07/19 16:47:22 | 000,123,392 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2012/07/19 16:47:22 | 000,118,784 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2012/07/19 16:47:22 | 000,114,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\admparse.dll
[2012/07/19 16:47:22 | 000,111,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2012/07/19 16:47:22 | 000,110,592 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2012/07/19 16:47:22 | 000,103,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2012/07/19 16:47:22 | 000,101,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\admparse.dll
[2012/07/19 16:47:22 | 000,096,768 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2012/07/19 16:47:22 | 000,091,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2012/07/19 16:47:22 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2012/07/19 16:47:22 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2012/07/19 16:47:22 | 000,086,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2012/07/19 16:47:22 | 000,085,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2012/07/19 16:47:22 | 000,082,432 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2012/07/19 16:47:22 | 000,078,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2012/07/19 16:47:22 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2012/07/19 16:47:22 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2012/07/19 16:47:22 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2012/07/19 16:47:22 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2012/07/19 16:47:22 | 000,074,240 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2012/07/19 16:47:22 | 000,073,216 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2012/07/19 16:47:22 | 000,072,822 | —- | M] () – C:\Windows\SysWow64\ieuinit.inf
[2012/07/19 16:47:22 | 000,072,822 | —- | M] () – C:\Windows\SysNative\ieuinit.inf
[2012/07/19 16:47:22 | 000,066,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2012/07/19 16:47:22 | 000,065,024 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2012/07/19 16:47:22 | 000,063,488 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2012/07/19 16:47:22 | 000,054,272 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2012/07/19 16:47:22 | 000,049,664 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2012/07/19 16:47:22 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2012/07/19 16:47:22 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2012/07/19 16:47:22 | 000,039,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2012/07/19 16:47:22 | 000,031,744 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2012/07/19 16:47:22 | 000,030,720 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2012/07/19 16:47:22 | 000,023,552 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2012/07/19 16:47:22 | 000,012,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2012/07/19 16:47:22 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2012/07/19 16:47:22 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2012/07/19 15:09:25 | 000,106,624 | —- | M] () – C:\Windows\AsCD_Item_3.jpg
[2012/07/19 14:09:11 | 000,274,320 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2012/07/19 02:22:11 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2012/07/19 01:53:58 | 000,426,184 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/07/19 01:53:58 | 000,070,344 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/07/19 01:29:01 | 000,041,962 | —- | M] () – C:\Windows\SysWow64\license.rtf
[2012/07/19 01:29:01 | 000,041,962 | —- | M] () – C:\Windows\SysNative\license.rtf
[2012/07/19 00:24:25 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012/07/19 00:21:23 | 000,001,922 | —- | M] () – C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012/07/19 00:21:19 | 000,000,000 | —- | M] () – C:\Windows\SysWow64\config.nt
[2012/07/19 00:04:32 | 000,283,200 | —- | M] (DT Soft Ltd) – C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2012/07/03 12:21:52 | 000,958,400 | —- | M] (AVAST Software) – C:\Windows\SysNative\drivers\aswSnx.sys
[2012/07/03 12:21:52 | 000,355,856 | —- | M] (AVAST Software) – C:\Windows\SysNative\drivers\aswSP.sys
[2012/07/03 12:21:52 | 000,071,064 | —- | M] (AVAST Software) – C:\Windows\SysNative\drivers\aswMonFlt.sys
[2012/07/03 12:21:52 | 000,059,728 | —- | M] (AVAST Software) – C:\Windows\SysNative\drivers\aswTdi.sys
[2012/07/03 12:21:52 | 000,054,072 | —- | M] (AVAST Software) – C:\Windows\SysNative\drivers\aswRdr2.sys
[2012/07/03 12:21:51 | 000,025,232 | —- | M] (AVAST Software) – C:\Windows\SysNative\drivers\aswFsBlk.sys
[2012/07/03 12:21:32 | 000,041,224 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr
[2012/07/03 12:21:28 | 000,227,648 | —- | M] (AVAST Software) – C:\Windows\SysWow64\aswBoot.exe
[2012/07/03 12:21:18 | 000,285,328 | —- | M] (AVAST Software) – C:\Windows\SysNative\aswBoot.exe

========== Files Created - No Company Name ==========

[2012/07/19 18:44:05 | 1551,650,853 | —- | C] () – C:\Windows\MEMORY.DMP
[2012/07/19 16:47:22 | 000,072,822 | —- | C] () – C:\Windows\SysWow64\ieuinit.inf
[2012/07/19 16:47:22 | 000,072,822 | —- | C] () – C:\Windows\SysNative\ieuinit.inf
[2012/07/19 15:26:58 | 000,007,621 | —- | C] () – C:\Windows\SysNative\nvinfo.pb
[2012/07/19 15:09:25 | 000,106,624 | —- | C] () – C:\Windows\AsCD_Item_3.jpg
[2012/07/19 02:22:11 | 000,008,192 | RHS- | C] () – C:\BOOTSECT.BAK
[2012/07/19 02:22:09 | 000,383,562 | RHS- | C] () – C:\bootmgr
[2012/07/19 01:28:55 | 000,001,345 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2012/07/19 01:28:49 | 000,001,326 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2012/07/19 01:25:02 | 4277,002,238 | -HS- | C] () – C:\hiberfil.sys
[2012/07/19 00:24:25 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012/07/19 00:21:23 | 000,001,922 | —- | C] () – C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012/07/19 00:21:19 | 000,000,000 | —- | C] () – C:\Windows\SysWow64\config.nt
[2012/07/18 23:45:35 | 000,001,146 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012/07/18 22:52:11 | 000,001,441 | —- | C] () – C:\Users\teNATEcious\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/07/18 22:38:33 | 000,001,413 | —- | C] () – C:\Users\teNATEcious\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2012/07/18 22:38:30 | 000,001,447 | —- | C] () – C:\Users\teNATEcious\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012/07/18 22:38:09 | 000,000,290 | —- | C] () – C:\Users\teNATEcious\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2012/07/18 22:38:09 | 000,000,272 | —- | C] () – C:\Users\teNATEcious\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk

========== LOP Check ==========

[2012/07/19 00:23:17 | 000,000,000 | —D | M] – C:\Users\teNATEcious\AppData\Roaming\DAEMON Tools Lite
[2009/07/14 01:08:49 | 000,004,132 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2009/07/13 21:38:58 | 000,383,562 | RHS- | M] () – C:\bootmgr
[2012/07/19 02:22:11 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2012/07/19 18:44:06 | 4277,002,238 | -HS- | M] () – C:\hiberfil.sys
[2012/07/19 18:44:07 | 4271,017,981 | -HS- | M] () – C:\pagefile.sys
[2012/07/19 15:09:05 | 000,000,086 | —- | M] () – C:\setup.log

< %systemroot%\Fonts\*.com >
[2009/07/14 01:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 01:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 01:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 01:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 16:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >
[2012/07/19 15:09:25 | 000,106,624 | —- | M] () – C:\Windows\AsCD_Item_3.jpg

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2012/07/03 12:21:32 | 000,041,224 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 00:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2012/07/19 18:41:25 | 000,000,221 | -HS- | M] () – C:\Users\teNATEcious\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >

teNATEcious

Post #5July 20, 2012, 3:50 AM UTC

OTL Extras logfile created on: 7/19/2012 9:08:02 PM - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\teNATEcious\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

15.98 Gb Total Physical Memory | 13.11 Gb Available Physical Memory | 82.06% Memory free
31.95 Gb Paging File | 29.18 Gb Available in Paging File | 91.32% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 449.09 Gb Total Space | 390.80 Gb Free Space | 87.02% Space Free | Partition Type: NTFS
Drive D: | 3.44 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Drive E: | 1397.26 Gb Total Space | 1304.20 Gb Free Space | 93.34% Space Free | Partition Type: NTFS
Drive G: | 7.47 Gb Total Space | 5.60 Gb Free Space | 74.91% Space Free | Partition Type: FAT32

Computer Name: TENATECIOUS-PC | User Name: teNATEcious | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{15A69392-618E-4731-9A0A-6270C212E4E3}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{3197D13E-1C7A-4070-98D9-227F843C2D6E}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{434620E7-A5AB-4098-A772-428FEACD1990}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{661D268C-EF67-4AD0-8241-CCC4817B95BF}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{D19B60C1-A0D2-4E94-A144-AB0752677394}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{D9432D0E-AA89-4B58-9C35-AE3F293DD90C}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"TCP Query User{4B3A359F-F780-4F0D-89BC-5E6BEFD6B566}C:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe" = protocol=6 | dir=in | app=c:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe |
"UDP Query User{6E038C7F-535E-4265-B19B-97B27B391ACB}C:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe" = protocol=17 | dir=in | app=c:\program files (x86)\2k games\gearbox software\borderlands\binaries\borderlands.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 268.37
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 268.37
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 268.37
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.2.22.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F61E0B1-1AB8-F15E-07C4-46D100A1D3F7}" = Borderlands
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{D56B0E27-4A3E-46C9-B5C1-D93D580C099C}" = NVIDIA PhysX v8.10.29
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"avast" = avast! Free Antivirus
"DAEMON Tools Lite" = DAEMON Tools Lite
"Mozilla Firefox 14.0.1 (x86 en-US)" = Mozilla Firefox 14.0.1 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 7/19/2012 1:25:47 AM | Computer Name = 37L4247E29-32 | Source = ESENT | ID = 412
Description = Catalog Database (340) Catalog Database: Unable to read the header
of logfile C:\Windows\system32\CatRoot2\edb.log. Error -546.

Error - 7/19/2012 1:25:47 AM | Computer Name = 37L4247E29-32 | Source = ESENT | ID = 412
Description = Catalog Database (340) Catalog Database: Unable to read the header
of logfile C:\Windows\system32\CatRoot2\edb.log. Error -546.

Error - 7/19/2012 1:25:47 AM | Computer Name = 37L4247E29-32 | Source = Microsoft-Windows-CAPI2 | ID = 257
Description = The Cryptographic Services service failed to initialize the Catalog
Database. The ESENT error was: -546.

Error - 7/19/2012 12:21:19 AM | Computer Name = teNATEcious-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files\AVAST Software\Avast\asOutExt64.dll".
Dependent
Assembly Microsoft.VC90.ATL,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 7/19/2012 3:18:13 PM | Computer Name = teNATEcious-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Borderlands.exe, version: 1.4.1.0, time
stamp: 0x4cb4e3fc Faulting module name: KERNELBASE.dll, version: 6.1.7600.16850,
time stamp: 0x4e211485 Exception code: 0xe06d7363 Fault offset: 0x0000b9bc Faulting
process id: 0xde4 Faulting application start time: 0x01cd65e32f5b2e85 Faulting application
path: C:\Program Files (x86)\2K Games\Gearbox Software\Borderlands\Binaries\Borderlands.exe
Faulting
module path: C:\Windows\syswow64\KERNELBASE.dll Report Id: 7bab75a4-d1d6-11e1-af64-c8d68489e18d

Error - 7/19/2012 3:18:43 PM | Computer Name = teNATEcious-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Borderlands.exe, version: 1.4.1.0, time
stamp: 0x4cb4e3fc Faulting module name: KERNELBASE.dll, version: 6.1.7600.16850,
time stamp: 0x4e211485 Exception code: 0xe06d7363 Fault offset: 0x0000b9bc Faulting
process id: 0xf60 Faulting application start time: 0x01cd65e34aa9506e Faulting application
path: C:\Program Files (x86)\2K Games\Gearbox Software\Borderlands\Binaries\Borderlands.exe
Faulting
module path: C:\Windows\syswow64\KERNELBASE.dll Report Id: 8d3f5cff-d1d6-11e1-af64-c8d68489e18d

Error - 7/19/2012 6:53:14 PM | Computer Name = teNATEcious-PC | Source = Application Error | ID = 1000
Description = Faulting application name: svchost.exe, version: 6.1.7600.16385, time
stamp: 0x4a5bc3c5 Faulting module name: MSHTML.dll, version: 9.0.8112.16447, time
stamp: 0x4fc9d776 Exception code: 0xc0000005 Fault offset: 0x0021d9dc Faulting process
id: 0xa44 Faulting application start time: 0x01cd6600289c651b Faulting application
path: \\.\globalroot\systemroot\svchost.exe Faulting module path: C:\Windows\system32\MSHTML.dll
Report
Id: 84fa01d0-d1f4-11e1-9d0b-809011d9b089

[ System Events ]
Error - 7/18/2012 11:51:11 PM | Computer Name = teNATEcious-PC | Source = BTHUSB | ID = 327697
Description = The local Bluetooth adapter has failed in an undetermined manner and
will not be used. The driver has been unloaded.

Error - 7/19/2012 12:15:53 AM | Computer Name = teNATEcious-PC | Source = BTHUSB | ID = 327697
Description = The local Bluetooth adapter has failed in an undetermined manner and
will not be used. The driver has been unloaded.

Error - 7/19/2012 12:51:42 PM | Computer Name = teNATEcious-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Windows Internet Explorer 9 for Windows 7 for x64-based
Systems.

Error - 7/19/2012 1:54:32 PM | Computer Name = teNATEcious-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Windows Internet Explorer 9 for Windows 7 for x64-based
Systems.

Error - 7/19/2012 1:54:53 PM | Computer Name = teNATEcious-PC | Source = Service Control Manager | ID = 7023
Description = The Windows Modules Installer service terminated with the following
error: %%32

Error - 7/19/2012 2:10:06 PM | Computer Name = teNATEcious-PC | Source = Service Control Manager | ID = 7023
Description = The Windows Modules Installer service terminated with the following
error: %%16405

Error - 7/19/2012 3:15:33 PM | Computer Name = teNATEcious-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 3:13:53 PM on ?7/?19/?2012 was unexpected.

Error - 7/19/2012 3:38:01 PM | Computer Name = teNATEcious-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 3:36:17 PM on ?7/?19/?2012 was unexpected.

Error - 7/19/2012 6:44:12 PM | Computer Name = teNATEcious-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 6:41:02 PM on ?7/?19/?2012 was unexpected.

Error - 7/19/2012 6:44:17 PM | Computer Name = teNATEcious-PC | Source = BugCheck | ID = 1001
Description =

< End of report >

teNATEcious

Post #6July 20, 2012, 3:58 AM UTC

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software Run date: 2012-07-19 23:51:58 —————————– 23:51:58.730 OS Version: Windows x64 6.1.7600 23:51:58.730 Number of processors: 8 586 0x2A07 23:51:58.730 ComputerName: TENATECIOUS-PC UserName: teNATEcious 23:52:00.850 Initialize success 23:52:00.917 AVAST engine defs: 12071902 23:52:38.715 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 23:52:38.719 Disk 0 Vendor: ST950042 0002 Size: 476940MB BusType: 3 23:52:38.724 Device \Driver\iaStor -> MajorFunction fffffa800fa095e8 23:52:38.730 Disk 0 MBR read successfully 23:52:38.736 Disk 0 MBR scan 23:52:38.740 Disk 0 Windows 7 default MBR code 23:52:38.805 Disk 0 Partition 1 00 1C Hidd FAT32 LBA MSDOS5.0 17069 MB offset 63 23:52:38.819 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 459868 MB offset 34957440 23:52:38.845 Disk 0 scanning C:\Windows\system32\drivers 23:52:43.124 Service scanning 23:52:52.474 Modules scanning 23:52:52.490 Disk 0 trace - called modules: 23:52:52.502 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys >>UNKNOWN [0xfffffa800fa095e8]<< 23:52:52.511 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa800d9a3060] 23:52:52.516 3 CLASSPNP.SYS[fffff8800120143f] -> nt!IofCallDriver -> [0xfffffa800d225560] 23:52:52.521 5 ACPI.sys[fffff88000ed7781] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa800d228050] 23:52:52.529 \Driver\iaStor[0xfffffa800f8f3e70] -> IRP_MJ_CREATE -> 0xfffffa800fa095e8 23:52:55.310 AVAST engine scan C:\Windows 23:52:57.470 AVAST engine scan C:\Windows\system32 23:54:22.310 AVAST engine scan C:\Windows\system32\drivers 23:54:29.072 AVAST engine scan C:\Users\teNATEcious 23:55:01.026 AVAST engine scan C:\ProgramData 23:55:08.577 Scan finished successfully 23:55:44.093 Disk 0 MBR has been saved successfully to "C:\Users\teNATEcious\Downloads\MBR.dat" 23:55:44.099 The log file has been saved successfully to "C:\Users\teNATEcious\Downloads\aswMBR.txt"

Attachments:

📎MBR.zip

teNATEcious

Post #7July 20, 2012, 4:04 AM UTC

23:58:24.0808 5916 TDSS rootkit removing tool [removed] Jul 16 2012 22:10:11 23:58:25.0427 5916 ============================================================ 23:58:25.0427 5916 Current date / time: 2012/07/19 23:58:25.0427 23:58:25.0427 5916 SystemInfo: 23:58:25.0427 5916 23:58:25.0427 5916 OS Version: 6.1.7600 ServicePack: 0.0 23:58:25.0427 5916 Product type: Workstation 23:58:25.0427 5916 ComputerName: TENATECIOUS-PC 23:58:25.0427 5916 UserName: teNATEcious 23:58:25.0427 5916 Windows directory: C:\Windows 23:58:25.0427 5916 System windows directory: C:\Windows 23:58:25.0427 5916 Running under WOW64 23:58:25.0427 5916 Processor architecture: Intel x64 23:58:25.0427 5916 Number of processors: 8 23:58:25.0427 5916 Page size: 0x1000 23:58:25.0427 5916 Boot type: Normal boot 23:58:25.0427 5916 ============================================================ 23:58:25.0997 5916 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 23:58:26.0001 5916 Drive \Device\Harddisk1\DR1 - Size: 0x15D50F66000 (1397.27 Gb), SectorSize: 0x200, Cylinders: 0x2C881, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 23:58:36.0705 5916 Drive \Device\Harddisk2\DR2 - Size: 0x1DEFFFE00 (7.48 Gb), SectorSize: 0x200, Cylinders: 0x3D1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 23:58:36.0709 5916 ============================================================ 23:58:36.0709 5916 \Device\Harddisk0\DR0: 23:58:36.0709 5916 MBR partitions: 23:58:36.0709 5916 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x2156880, BlocksNum 0x3822E700 23:58:36.0709 5916 \Device\Harddisk1\DR1: 23:58:36.0710 5916 MBR partitions: 23:58:36.0710 5916 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xAEA86741 23:58:36.0710 5916 \Device\Harddisk2\DR2: 23:58:36.0711 5916 MBR partitions: 23:58:36.0711 5916 \Device\Harddisk2\DR2\Partition0: MBR, Type 0xB, StartLBA 0x2C, BlocksNum 0xEF3FA4 23:58:36.0711 5916 ============================================================ 23:58:36.0730 5916 C: <-> \Device\Harddisk0\DR0\Partition0 23:58:36.0746 5916 E: <-> \Device\Harddisk1\DR1\Partition0 23:58:36.0746 5916 ============================================================ 23:58:36.0746 5916 Initialize success 23:58:36.0746 5916 ============================================================ 23:58:51.0037 4296 ============================================================ 23:58:51.0037 4296 Scan started 23:58:51.0037 4296 Mode: Manual; 23:58:51.0037 4296 ============================================================ 23:58:51.0645 4296 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys 23:58:51.0651 4296 1394ohci - ok 23:58:51.0681 4296 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys 23:58:51.0687 4296 ACPI - ok 23:58:51.0693 4296 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys 23:58:51.0695 4296 AcpiPmi - ok 23:58:51.0719 4296 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 23:58:51.0734 4296 adp94xx - ok 23:58:51.0756 4296 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 23:58:51.0762 4296 adpahci - ok 23:58:51.0776 4296 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 23:58:51.0779 4296 adpu320 - ok 23:58:51.0803 4296 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll 23:58:51.0805 4296 AeLookupSvc - ok 23:58:51.0847 4296 AFD (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys 23:58:51.0851 4296 AFD - ok 23:58:51.0867 4296 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys 23:58:51.0868 4296 agp440 - ok 23:58:51.0886 4296 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe 23:58:51.0887 4296 ALG - ok 23:58:51.0899 4296 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys 23:58:51.0900 4296 aliide - ok 23:58:51.0923 4296 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys 23:58:51.0923 4296 amdide - ok 23:58:51.0932 4296 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 23:58:51.0933 4296 AmdK8 - ok 23:58:51.0942 4296 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 23:58:51.0943 4296 AmdPPM - ok 23:58:51.0958 4296 amdsata (7a4b413614c055935567cf88a9734d38) C:\Windows\system32\DRIVERS\amdsata.sys 23:58:51.0959 4296 amdsata - ok 23:58:51.0970 4296 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 23:58:51.0974 4296 amdsbs - ok 23:58:51.0985 4296 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\Windows\system32\DRIVERS\amdxata.sys 23:58:51.0985 4296 amdxata - ok 23:58:52.0018 4296 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys 23:58:52.0019 4296 AppID - ok 23:58:52.0041 4296 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll 23:58:52.0042 4296 AppIDSvc - ok 23:58:52.0063 4296 Appinfo (d065be66822847b7f127d1f90158376e) C:\Windows\System32\appinfo.dll 23:58:52.0065 4296 Appinfo - ok 23:58:52.0074 4296 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 23:58:52.0075 4296 arc - ok 23:58:52.0105 4296 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 23:58:52.0107 4296 arcsas - ok 23:58:52.0134 4296 aswFsBlk (df59b8e8df0bd2e0e303778a3806a17d) C:\Windows\system32\drivers\aswFsBlk.sys 23:58:52.0135 4296 aswFsBlk - ok 23:58:52.0181 4296 aswMonFlt (f8e6ab4f876feff69250f2e0c29ef004) C:\Windows\system32\drivers\aswMonFlt.sys 23:58:52.0183 4296 aswMonFlt - ok 23:58:52.0209 4296 aswRdr (aa92bc4bcba40ca3aa3ffd1be24f0c09) C:\Windows\System32\Drivers\aswrdr2.sys 23:58:52.0210 4296 aswRdr - ok 23:58:52.0264 4296 aswSnx (f06e230e1e8ca9437a6474b7b551cd37) C:\Windows\system32\drivers\aswSnx.sys 23:58:52.0273 4296 aswSnx - ok 23:58:52.0298 4296 aswSP (3610ca74a69e380424f0452dec5c1317) C:\Windows\system32\drivers\aswSP.sys 23:58:52.0302 4296 aswSP - ok 23:58:52.0310 4296 aswTdi (87de3e31cb0091d22351349869324065) C:\Windows\system32\drivers\aswTdi.sys 23:58:52.0311 4296 aswTdi - ok 23:58:52.0331 4296 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 23:58:52.0332 4296 AsyncMac - ok 23:58:52.0356 4296 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys 23:58:52.0357 4296 atapi - ok 23:58:52.0469 4296 athr (de8b9c3e0e09d918b394207f34ac16dd) C:\Windows\system32\DRIVERS\athrx.sys 23:58:52.0515 4296 athr - ok 23:58:52.0625 4296 AudioEndpointBuilder (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 23:58:52.0636 4296 AudioEndpointBuilder - ok 23:58:52.0650 4296 AudioSrv (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 23:58:52.0660 4296 AudioSrv - ok 23:58:52.0738 4296 avast! Antivirus (2f7c0f3e39c45e0127fb78b2f18a41f3) C:\Program Files\AVAST Software\Avast\AvastSvc.exe 23:58:52.0740 4296 avast! Antivirus - ok 23:58:52.0779 4296 AxInstSV (b20b5fa5ca050e9926e4d1db81501b32) C:\Windows\System32\AxInstSV.dll 23:58:52.0783 4296 AxInstSV - ok 23:58:52.0848 4296 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 23:58:52.0868 4296 b06bdrv - ok 23:58:52.0903 4296 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 23:58:52.0910 4296 b57nd60a - ok 23:58:52.0929 4296 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll 23:58:52.0930 4296 BDESVC - ok 23:58:52.0957 4296 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 23:58:52.0958 4296 Beep - ok 23:58:52.0993 4296 BFE (4992c609a6315671463e30f6512bc022) C:\Windows\System32\bfe.dll 23:58:52.0996 4296 BFE - ok 23:58:53.0043 4296 BITS (7f0c323fe3da28aa4aa1bda3f575707f) C:\Windows\System32\qmgr.dll 23:58:53.0048 4296 BITS - ok 23:58:53.0078 4296 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 23:58:53.0078 4296 blbdrive - ok 23:58:53.0128 4296 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys 23:58:53.0131 4296 bowser - ok 23:58:53.0152 4296 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 23:58:53.0153 4296 BrFiltLo - ok 23:58:53.0157 4296 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 23:58:53.0158 4296 BrFiltUp - ok 23:58:53.0189 4296 Browser (94fbc06f294d58d02361918418f996e3) C:\Windows\System32\browser.dll 23:58:53.0192 4296 Browser - ok 23:58:53.0213 4296 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 23:58:53.0218 4296 Brserid - ok 23:58:53.0224 4296 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 23:58:53.0226 4296 BrSerWdm - ok 23:58:53.0230 4296 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 23:58:53.0230 4296 BrUsbMdm - ok 23:58:53.0236 4296 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 23:58:53.0236 4296 BrUsbSer - ok 23:58:53.0290 4296 BtFilter (0f4c980b9612abdb25bcabf0c660c058) C:\Windows\system32\DRIVERS\btfilter.sys 23:58:53.0298 4296 BtFilter - ok 23:58:53.0309 4296 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 23:58:53.0311 4296 BTHMODEM - ok 23:58:53.0359 4296 BTHPORT (a51fa9d0e85d5adabef72e67f386309c) C:\Windows\system32\Drivers\BTHport.sys 23:58:53.0368 4296 BTHPORT - ok 23:58:53.0407 4296 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll 23:58:53.0412 4296 bthserv - ok 23:58:53.0427 4296 BTHUSB (f740b9a16b2c06700f2130e19986bf3b) C:\Windows\system32\Drivers\BTHUSB.sys 23:58:53.0428 4296 BTHUSB - ok 23:58:53.0465 4296 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 23:58:53.0467 4296 cdfs - ok 23:58:53.0500 4296 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys 23:58:53.0503 4296 cdrom - ok 23:58:53.0526 4296 CertPropSvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 23:58:53.0529 4296 CertPropSvc - ok 23:58:53.0538 4296 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 23:58:53.0539 4296 circlass - ok 23:58:53.0567 4296 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 23:58:53.0574 4296 CLFS - ok 23:58:53.0625 4296 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 23:58:53.0630 4296 clr_optimization_v2.0.50727_32 - ok 23:58:53.0677 4296 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 23:58:53.0682 4296 clr_optimization_v2.0.50727_64 - ok 23:58:53.0707 4296 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 23:58:53.0708 4296 CmBatt - ok 23:58:53.0731 4296 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys 23:58:53.0732 4296 cmdide - ok 23:58:53.0782 4296 CNG (ca7720b73446fddec5c69519c1174c98) C:\Windows\system32\Drivers\cng.sys 23:58:53.0789 4296 CNG - ok 23:58:53.0807 4296 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 23:58:53.0808 4296 Compbatt - ok 23:58:53.0824 4296 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys 23:58:53.0826 4296 CompositeBus - ok 23:58:53.0831 4296 COMSysApp - ok 23:58:53.0849 4296 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 23:58:53.0850 4296 crcdisk - ok 23:58:53.0877 4296 CryptSvc (f02786b66375292e58c8777082d4396d) C:\Windows\system32\cryptsvc.dll 23:58:53.0881 4296 CryptSvc - ok 23:58:53.0931 4296 DcomLaunch (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll 23:58:53.0947 4296 DcomLaunch - ok 23:58:53.0974 4296 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll 23:58:53.0977 4296 defragsvc - ok 23:58:53.0995 4296 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys 23:58:53.0997 4296 DfsC - ok 23:58:54.0026 4296 Dhcp (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll 23:58:54.0030 4296 Dhcp - ok 23:58:54.0046 4296 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 23:58:54.0047 4296 discache - ok 23:58:54.0080 4296 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 23:58:54.0082 4296 Disk - ok 23:58:54.0117 4296 Dnscache (85cf424c74a1d5ec33533e1dbff9920a) C:\Windows\System32\dnsrslvr.dll 23:58:54.0121 4296 Dnscache - ok 23:58:54.0151 4296 dot3svc (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll 23:58:54.0158 4296 dot3svc - ok 23:58:54.0171 4296 DPS (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll 23:58:54.0175 4296 DPS - ok 23:58:54.0207 4296 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 23:58:54.0208 4296 drmkaud - ok 23:58:54.0252 4296 dtsoftbus01 (46571ed73ae84469dca53081d33cf3c8) C:\Windows\system32\DRIVERS\dtsoftbus01.sys 23:58:54.0257 4296 dtsoftbus01 - ok 23:58:54.0326 4296 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys 23:58:54.0340 4296 DXGKrnl - ok 23:58:54.0364 4296 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll 23:58:54.0367 4296 EapHost - ok 23:58:54.0509 4296 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 23:58:54.0592 4296 ebdrv - ok 23:58:54.0665 4296 EFS (156f6159457d0aa7e59b62681b56eb90) C:\Windows\System32\lsass.exe 23:58:54.0670 4296 EFS - ok 23:58:54.0731 4296 ehRecvr (47c071994c3f649f23d9cd075ac9304a) C:\Windows\ehome\ehRecvr.exe 23:58:54.0739 4296 ehRecvr - ok 23:58:54.0757 4296 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe 23:58:54.0761 4296 ehSched - ok 23:58:54.0820 4296 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 23:58:54.0838 4296 elxstor - ok 23:58:54.0852 4296 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys 23:58:54.0854 4296 ErrDev - ok 23:58:54.0895 4296 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll 23:58:54.0901 4296 EventSystem - ok 23:58:54.0921 4296 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 23:58:54.0923 4296 exfat - ok 23:58:54.0941 4296 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 23:58:54.0944 4296 fastfat - ok 23:58:54.0979 4296 Fax (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe 23:58:54.0989 4296 Fax - ok 23:58:54.0996 4296 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 23:58:54.0998 4296 fdc - ok 23:58:55.0008 4296 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll 23:58:55.0009 4296 fdPHost - ok 23:58:55.0021 4296 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll 23:58:55.0022 4296 FDResPub - ok 23:58:55.0040 4296 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 23:58:55.0041 4296 FileInfo - ok 23:58:55.0044 4296 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 23:58:55.0045 4296 Filetrace - ok 23:58:55.0053 4296 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 23:58:55.0053 4296 flpydisk - ok 23:58:55.0078 4296 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys 23:58:55.0080 4296 FltMgr - ok 23:58:55.0132 4296 FontCache (bc00505cfda789ed3be95d2ff38c4875) C:\Windows\system32\FntCache.dll 23:58:55.0142 4296 FontCache - ok 23:58:55.0198 4296 FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 23:58:55.0200 4296 FontCache3.0.0.0 - ok 23:58:55.0244 4296 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 23:58:55.0246 4296 FsDepends - ok 23:58:55.0273 4296 Fs_Rec (d3e3f93d67821a2db2b3d9fac2dc2064) C:\Windows\system32\drivers\Fs_Rec.sys 23:58:55.0275 4296 Fs_Rec - ok 23:58:55.0318 4296 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys 23:58:55.0323 4296 fvevol - ok 23:58:55.0343 4296 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 23:58:55.0347 4296 gagp30kx - ok 23:58:55.0409 4296 gpsvc (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll 23:58:55.0420 4296 gpsvc - ok 23:58:55.0431 4296 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 23:58:55.0433 4296 hcw85cir - ok 23:58:55.0469 4296 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys 23:58:55.0472 4296 HdAudAddService - ok 23:58:55.0493 4296 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys 23:58:55.0494 4296 HDAudBus - ok 23:58:55.0508 4296 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 23:58:55.0509 4296 HidBatt - ok 23:58:55.0517 4296 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 23:58:55.0519 4296 HidBth - ok 23:58:55.0534 4296 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 23:58:55.0535 4296 HidIr - ok 23:58:55.0557 4296 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll 23:58:55.0560 4296 hidserv - ok 23:58:55.0585 4296 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys 23:58:55.0586 4296 HidUsb - ok 23:58:55.0608 4296 hkmsvc (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll 23:58:55.0611 4296 hkmsvc - ok 23:58:55.0633 4296 HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll 23:58:55.0640 4296 HomeGroupListener - ok 23:58:55.0663 4296 HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll 23:58:55.0669 4296 HomeGroupProvider - ok 23:58:55.0681 4296 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys 23:58:55.0683 4296 HpSAMD - ok 23:58:55.0713 4296 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys 23:58:55.0721 4296 HTTP - ok 23:58:55.0749 4296 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys 23:58:55.0750 4296 hwpolicy - ok 23:58:55.0762 4296 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 23:58:55.0764 4296 i8042prt - ok 23:58:55.0799 4296 iaStor (d7921d5a870b11cc1adab198a519d50a) C:\Windows\system32\DRIVERS\iaStor.sys 23:58:55.0804 4296 iaStor - ok 23:58:55.0835 4296 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\Windows\system32\DRIVERS\iaStorV.sys 23:58:55.0842 4296 iaStorV - ok 23:58:55.0995 4296 idsvc (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 23:58:56.0006 4296 idsvc - ok 23:58:56.0049 4296 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 23:58:56.0051 4296 iirsp - ok 23:58:56.0104 4296 IKEEXT (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll 23:58:56.0114 4296 IKEEXT - ok 23:58:56.0132 4296 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys 23:58:56.0133 4296 intelide - ok 23:58:56.0161 4296 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 23:58:56.0162 4296 intelppm - ok 23:58:56.0174 4296 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll 23:58:56.0177 4296 IPBusEnum - ok 23:58:56.0196 4296 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys 23:58:56.0198 4296 IpFilterDriver - ok 23:58:56.0237 4296 iphlpsvc (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll 23:58:56.0249 4296 iphlpsvc - ok 23:58:56.0261 4296 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys 23:58:56.0262 4296 IPMIDRV - ok 23:58:56.0277 4296 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 23:58:56.0278 4296 IPNAT - ok 23:58:56.0283 4296 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 23:58:56.0283 4296 IRENUM - ok 23:58:56.0307 4296 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys 23:58:56.0308 4296 isapnp - ok 23:58:56.0333 4296 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys 23:58:56.0338 4296 iScsiPrt - ok 23:58:56.0346 4296 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys 23:58:56.0348 4296 kbdclass - ok 23:58:56.0353 4296 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys 23:58:56.0354 4296 kbdhid - ok 23:58:56.0377 4296 KeyIso (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 23:58:56.0380 4296 KeyIso - ok 23:58:56.0398 4296 KSecDD (4f4b5fde429416877de7143044582eb5) C:\Windows\system32\Drivers\ksecdd.sys 23:58:56.0399 4296 KSecDD - ok 23:58:56.0413 4296 KSecPkg (6f40465a44ecdc1731befafec5bdd03c) C:\Windows\system32\Drivers\ksecpkg.sys 23:58:56.0415 4296 KSecPkg - ok 23:58:56.0429 4296 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 23:58:56.0430 4296 ksthunk - ok 23:58:56.0467 4296 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll 23:58:56.0476 4296 KtmRm - ok 23:58:56.0513 4296 LanmanServer (81f1d04d4d0e433099365127375fd501) C:\Windows\system32\srvsvc.dll 23:58:56.0520 4296 LanmanServer - ok 23:58:56.0539 4296 LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll 23:58:56.0546 4296 LanmanWorkstation - ok 23:58:56.0575 4296 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 23:58:56.0577 4296 lltdio - ok 23:58:56.0602 4296 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll 23:58:56.0609 4296 lltdsvc - ok 23:58:56.0626 4296 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll 23:58:56.0629 4296 lmhosts - ok 23:58:56.0653 4296 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 23:58:56.0655 4296 LSI_FC - ok 23:58:56.0666 4296 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 23:58:56.0668 4296 LSI_SAS - ok 23:58:56.0675 4296 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 23:58:56.0677 4296 LSI_SAS2 - ok 23:58:56.0692 4296 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 23:58:56.0694 4296 LSI_SCSI - ok 23:58:56.0704 4296 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 23:58:56.0706 4296 luafv - ok 23:58:56.0729 4296 Mcx2Svc (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll 23:58:56.0732 4296 Mcx2Svc - ok 23:58:56.0738 4296 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 23:58:56.0740 4296 megasas - ok 23:58:56.0760 4296 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 23:58:56.0765 4296 MegaSR - ok 23:58:56.0786 4296 MEIx64 (a6518dcc42f7a6e999bb3bea8fd87567) C:\Windows\system32\DRIVERS\HECIx64.sys 23:58:56.0787 4296 MEIx64 - ok 23:58:56.0815 4296 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 23:58:56.0818 4296 MMCSS - ok 23:58:56.0830 4296 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 23:58:56.0831 4296 Modem - ok 23:58:56.0837 4296 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 23:58:56.0838 4296 monitor - ok 23:58:56.0846 4296 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 23:58:56.0847 4296 mouclass - ok 23:58:56.0860 4296 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 23:58:56.0861 4296 mouhid - ok 23:58:56.0871 4296 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys 23:58:56.0873 4296 mountmgr - ok 23:58:56.0925 4296 MozillaMaintenance (46297fa8e30a6007f14118fc2b942fbc) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 23:58:56.0929 4296 MozillaMaintenance - ok 23:58:56.0947 4296 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys 23:58:56.0951 4296 mpio - ok 23:58:56.0962 4296 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 23:58:56.0964 4296 mpsdrv - ok 23:58:57.0017 4296 MpsSvc (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll 23:58:57.0030 4296 MpsSvc - ok 23:58:57.0049 4296 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys 23:58:57.0050 4296 MRxDAV - ok 23:58:57.0110 4296 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys 23:58:57.0114 4296 mrxsmb - ok 23:58:57.0133 4296 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys 23:58:57.0138 4296 mrxsmb10 - ok 23:58:57.0172 4296 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys 23:58:57.0175 4296 mrxsmb20 - ok 23:58:57.0183 4296 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys 23:58:57.0185 4296 msahci - ok 23:58:57.0199 4296 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys 23:58:57.0203 4296 msdsm - ok 23:58:57.0234 4296 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe 23:58:57.0242 4296 MSDTC - ok 23:58:57.0262 4296 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 23:58:57.0263 4296 Msfs - ok 23:58:57.0277 4296 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 23:58:57.0278 4296 mshidkmdf - ok 23:58:57.0290 4296 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys 23:58:57.0291 4296 msisadrv - ok 23:58:57.0323 4296 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll 23:58:57.0328 4296 MSiSCSI - ok 23:58:57.0333 4296 msiserver - ok 23:58:57.0356 4296 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 23:58:57.0357 4296 MSKSSRV - ok 23:58:57.0369 4296 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 23:58:57.0371 4296 MSPCLOCK - ok 23:58:57.0389 4296 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 23:58:57.0391 4296 MSPQM - ok 23:58:57.0417 4296 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys 23:58:57.0423 4296 MsRPC - ok 23:58:57.0433 4296 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys 23:58:57.0435 4296 mssmbios - ok 23:58:57.0440 4296 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 23:58:57.0441 4296 MSTEE - ok 23:58:57.0453 4296 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 23:58:57.0455 4296 MTConfig - ok 23:58:57.0463 4296 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 23:58:57.0464 4296 Mup - ok 23:58:57.0498 4296 napagent (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll 23:58:57.0510 4296 napagent - ok 23:58:57.0554 4296 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 23:58:57.0560 4296 NativeWifiP - ok 23:58:57.0635 4296 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys 23:58:57.0649 4296 NDIS - ok 23:58:57.0659 4296 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 23:58:57.0661 4296 NdisCap - ok 23:58:57.0686 4296 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 23:58:57.0688 4296 NdisTapi - ok 23:58:57.0704 4296 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys 23:58:57.0706 4296 Ndisuio - ok 23:58:57.0724 4296 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys 23:58:57.0727 4296 NdisWan - ok 23:58:57.0746 4296 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys 23:58:57.0747 4296 NDProxy - ok 23:58:57.0754 4296 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 23:58:57.0756 4296 NetBIOS - ok 23:58:57.0776 4296 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys 23:58:57.0780 4296 NetBT - ok 23:58:57.0802 4296 Netlogon (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 23:58:57.0806 4296 Netlogon - ok 23:58:57.0847 4296 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll 23:58:57.0856 4296 Netman - ok 23:58:57.0883 4296 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll 23:58:57.0893 4296 netprofm - ok 23:58:57.0963 4296 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 23:58:57.0968 4296 NetTcpPortSharing - ok 23:58:58.0007 4296 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 23:58:58.0009 4296 nfrd960 - ok 23:58:58.0049 4296 NlaSvc (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll 23:58:58.0057 4296 NlaSvc - ok 23:58:58.0065 4296 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 23:58:58.0067 4296 Npfs - ok 23:58:58.0079 4296 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll 23:58:58.0084 4296 nsi - ok 23:58:58.0090 4296 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 23:58:58.0091 4296 nsiproxy - ok 23:58:58.0230 4296 Ntfs (356698a13c4630d5b31c37378d469196) C:\Windows\system32\drivers\Ntfs.sys 23:58:58.0243 4296 Ntfs - ok 23:58:58.0306 4296 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 23:58:58.0308 4296 Null - ok 23:58:58.0345 4296 NVHDA (f2662fdc20518ee8a8eed4f61ba42349) C:\Windows\system32\drivers\nvhda64v.sys 23:58:58.0348 4296 NVHDA - ok 23:58:58.0812 4296 nvlddmkm (b6d7d3ebb1401b04b48f40c3d0ce5b09) C:\Windows\system32\DRIVERS\nvlddmkm.sys 23:58:58.0869 4296 nvlddmkm - ok 23:58:58.0957 4296 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\Windows\system32\DRIVERS\nvraid.sys 23:58:58.0961 4296 nvraid - ok 23:58:58.0976 4296 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\Windows\system32\DRIVERS\nvstor.sys 23:58:58.0979 4296 nvstor - ok 23:58:59.0033 4296 NVSvc (1c594d199180864cbea5fa0b0b55287a) C:\Windows\system32\nvvsvc.exe 23:58:59.0046 4296 NVSvc - ok 23:58:59.0060 4296 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys 23:58:59.0061 4296 nv_agp - ok 23:58:59.0067 4296 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys 23:58:59.0067 4296 ohci1394 - ok 23:58:59.0095 4296 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 23:58:59.0101 4296 p2pimsvc - ok 23:58:59.0134 4296 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll 23:58:59.0141 4296 p2psvc - ok 23:58:59.0151 4296 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 23:58:59.0152 4296 Parport - ok 23:58:59.0167 4296 partmgr (90061b1acfe8ccaa5345750ffe08d8b8) C:\Windows\system32\drivers\partmgr.sys 23:58:59.0168 4296 partmgr - ok 23:58:59.0207 4296 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll 23:58:59.0215 4296 PcaSvc - ok 23:58:59.0234 4296 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys 23:58:59.0238 4296 pci - ok 23:58:59.0259 4296 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys 23:58:59.0260 4296 pciide - ok 23:58:59.0285 4296 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 23:58:59.0290 4296 pcmcia - ok 23:58:59.0298 4296 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 23:58:59.0299 4296 pcw - ok 23:58:59.0337 4296 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 23:58:59.0342 4296 PEAUTH - ok 23:58:59.0409 4296 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe 23:58:59.0415 4296 PerfHost - ok 23:58:59.0504 4296 pla (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll 23:58:59.0544 4296 pla - ok 23:58:59.0582 4296 PlugPlay (98b1721b8718164293b9701b98c52d77) C:\Windows\system32\umpnpmgr.dll 23:58:59.0589 4296 PlugPlay - ok 23:58:59.0601 4296 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll 23:58:59.0605 4296 PNRPAutoReg - ok 23:58:59.0621 4296 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 23:58:59.0627 4296 PNRPsvc - ok 23:58:59.0657 4296 PolicyAgent (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll 23:58:59.0671 4296 PolicyAgent - ok 23:58:59.0692 4296 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll 23:58:59.0698 4296 Power - ok 23:58:59.0751 4296 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys 23:58:59.0754 4296 PptpMiniport - ok 23:58:59.0774 4296 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 23:58:59.0776 4296 Processor - ok 23:58:59.0803 4296 ProfSvc (97293447431311c06703368ad0f6c4be) C:\Windows\system32\profsvc.dll 23:58:59.0811 4296 ProfSvc - ok 23:58:59.0835 4296 ProtectedStorage (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 23:58:59.0840 4296 ProtectedStorage - ok 23:58:59.0865 4296 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys 23:58:59.0868 4296 Psched - ok 23:58:59.0966 4296 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 23:58:59.0999 4296 ql2300 - ok 23:59:00.0074 4296 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 23:59:00.0077 4296 ql40xx - ok 23:59:00.0106 4296 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll 23:59:00.0116 4296 QWAVE - ok 23:59:00.0131 4296 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 23:59:00.0133 4296 QWAVEdrv - ok 23:59:00.0138 4296 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 23:59:00.0140 4296 RasAcd - ok 23:59:00.0158 4296 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 23:59:00.0160 4296 RasAgileVpn - ok 23:59:00.0174 4296 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll 23:59:00.0181 4296 RasAuto - ok 23:59:00.0226 4296 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys 23:59:00.0229 4296 Rasl2tp - ok 23:59:00.0256 4296 RasMan (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll 23:59:00.0267 4296 RasMan - ok 23:59:00.0279 4296 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 23:59:00.0281 4296 RasPppoe - ok 23:59:00.0294 4296 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 23:59:00.0295 4296 RasSstp - ok 23:59:00.0320 4296 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys 23:59:00.0323 4296 rdbss - ok 23:59:00.0339 4296 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 23:59:00.0341 4296 rdpbus - ok 23:59:00.0366 4296 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 23:59:00.0367 4296 RDPCDD - ok 23:59:00.0380 4296 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 23:59:00.0381 4296 RDPENCDD - ok 23:59:00.0394 4296 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 23:59:00.0395 4296 RDPREFMP - ok 23:59:00.0434 4296 RDPWD (447de7e3dea39d422c1504f245b668b1) C:\Windows\system32\drivers\RDPWD.sys 23:59:00.0439 4296 RDPWD - ok 23:59:00.0459 4296 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys 23:59:00.0462 4296 rdyboost - ok 23:59:00.0492 4296 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll 23:59:00.0496 4296 RemoteAccess - ok 23:59:00.0521 4296 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll 23:59:00.0529 4296 RemoteRegistry - ok 23:59:00.0548 4296 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll 23:59:00.0553 4296 RpcEptMapper - ok 23:59:00.0566 4296 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe 23:59:00.0571 4296 RpcLocator - ok 23:59:00.0606 4296 RpcSs (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll 23:59:00.0615 4296 RpcSs - ok 23:59:00.0652 4296 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 23:59:00.0654 4296 rspndr - ok 23:59:00.0684 4296 SamSs (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 23:59:00.0687 4296 SamSs - ok 23:59:00.0700 4296 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys 23:59:00.0702 4296 sbp2port - ok 23:59:00.0722 4296 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll 23:59:00.0729 4296 SCardSvr - ok 23:59:00.0744 4296 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys 23:59:00.0746 4296 scfilter - ok 23:59:00.0807 4296 Schedule (624d0f5ff99428bb90a5b8a4123e918e) C:\Windows\system32\schedsvc.dll 23:59:00.0821 4296 Schedule - ok 23:59:00.0871 4296 SCPolicySvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 23:59:00.0874 4296 SCPolicySvc - ok 23:59:00.0892 4296 SDRSVC (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll 23:59:00.0900 4296 SDRSVC - ok 23:59:00.0943 4296 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 23:59:00.0945 4296 secdrv - ok 23:59:00.0958 4296 seclogon (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll 23:59:00.0966 4296 seclogon - ok 23:59:00.0986 4296 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll 23:59:00.0992 4296 SENS - ok 23:59:01.0012 4296 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll 23:59:01.0020 4296 SensrSvc - ok 23:59:01.0045 4296 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 23:59:01.0047 4296 Serenum - ok 23:59:01.0065 4296 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 23:59:01.0068 4296 Serial - ok 23:59:01.0086 4296 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 23:59:01.0087 4296 sermouse - ok 23:59:01.0114 4296 SessionEnv (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll 23:59:01.0120 4296 SessionEnv - ok 23:59:01.0126 4296 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys 23:59:01.0127 4296 sffdisk - ok 23:59:01.0132 4296 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys 23:59:01.0133 4296 sffp_mmc - ok 23:59:01.0138 4296 sffp_sd (5588b8c6193eb1522490c122eb94dffa) C:\Windows\system32\DRIVERS\sffp_sd.sys 23:59:01.0139 4296 sffp_sd - ok 23:59:01.0154 4296 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 23:59:01.0155 4296 sfloppy - ok 23:59:01.0192 4296 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll 23:59:01.0208 4296 SharedAccess - ok 23:59:01.0236 4296 ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll 23:59:01.0245 4296 ShellHWDetection - ok 23:59:01.0258 4296 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 23:59:01.0259 4296 SiSRaid2 - ok 23:59:01.0270 4296 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 23:59:01.0272 4296 SiSRaid4 - ok 23:59:01.0338 4296 SkypeUpdate (f07af60b152221472fbdb2fecec4896d) C:\Program Files (x86)\Skype\Updater\Updater.exe 23:59:01.0343 4296 SkypeUpdate - ok 23:59:01.0376 4296 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 23:59:01.0378 4296 Smb - ok 23:59:01.0416 4296 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe 23:59:01.0422 4296 SNMPTRAP - ok 23:59:01.0437 4296 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 23:59:01.0439 4296 spldr - ok 23:59:01.0481 4296 Spooler (f8e1fa03cb70d54a9892ac88b91d1e7b) C:\Windows\System32\spoolsv.exe 23:59:01.0493 4296 Spooler - ok 23:59:01.0634 4296 sppsvc (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe 23:59:01.0658 4296 sppsvc - ok 23:59:01.0728 4296 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll 23:59:01.0736 4296 sppuinotify - ok 23:59:01.0784 4296 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys 23:59:01.0792 4296 srv - ok 23:59:01.0830 4296 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys 23:59:01.0834 4296 srv2 - ok 23:59:01.0856 4296 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys 23:59:01.0859 4296 srvnet - ok 23:59:01.0898 4296 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll 23:59:01.0908 4296 SSDPSRV - ok 23:59:01.0929 4296 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll 23:59:01.0938 4296 SstpSvc - ok 23:59:02.0008 4296 Stereo Service (1d26267eb061652a0419698e7cf06d72) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe 23:59:02.0015 4296 Stereo Service - ok 23:59:02.0041 4296 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 23:59:02.0043 4296 stexstor - ok 23:59:02.0096 4296 stisvc (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll 23:59:02.0122 4296 stisvc - ok 23:59:02.0133 4296 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys 23:59:02.0134 4296 swenum - ok 23:59:02.0180 4296 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll 23:59:02.0195 4296 swprv - ok 23:59:02.0288 4296 SysMain (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll 23:59:02.0302 4296 SysMain - ok 23:59:02.0359 4296 TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll 23:59:02.0368 4296 TabletInputService - ok 23:59:02.0389 4296 TapiSrv (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll 23:59:02.0400 4296 TapiSrv - ok 23:59:02.0411 4296 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll 23:59:02.0417 4296 TBS - ok 23:59:02.0516 4296 Tcpip (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\drivers\tcpip.sys 23:59:02.0532 4296 Tcpip - ok 23:59:02.0654 4296 TCPIP6 (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\DRIVERS\tcpip.sys 23:59:02.0674 4296 TCPIP6 - ok 23:59:02.0742 4296 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys 23:59:02.0745 4296 tcpipreg - ok 23:59:02.0767 4296 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 23:59:02.0769 4296 TDPIPE - ok 23:59:02.0788 4296 TDTCP (7518f7bcfd4b308abc9192bacaf6c970) C:\Windows\system32\drivers\tdtcp.sys 23:59:02.0790 4296 TDTCP - ok 23:59:02.0817 4296 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys 23:59:02.0820 4296 tdx - ok 23:59:02.0829 4296 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys 23:59:02.0831 4296 TermDD - ok 23:59:02.0879 4296 TermService (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll 23:59:02.0891 4296 TermService - ok 23:59:02.0908 4296 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll 23:59:02.0912 4296 Themes - ok 23:59:02.0933 4296 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 23:59:02.0935 4296 THREADORDER - ok 23:59:02.0952 4296 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll 23:59:02.0957 4296 TrkWks - ok 23:59:02.0993 4296 TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe 23:59:02.0995 4296 TrustedInstaller - ok 23:59:03.0010 4296 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys 23:59:03.0011 4296 tssecsrv - ok 23:59:03.0035 4296 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys 23:59:03.0036 4296 tunnel - ok 23:59:03.0055 4296 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 23:59:03.0057 4296 uagp35 - ok 23:59:03.0083 4296 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys 23:59:03.0086 4296 udfs - ok 23:59:03.0104 4296 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe 23:59:03.0108 4296 UI0Detect - ok 23:59:03.0136 4296 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys 23:59:03.0137 4296 uliagpkx - ok 23:59:03.0149 4296 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys 23:59:03.0150 4296 umbus - ok 23:59:03.0154 4296 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 23:59:03.0155 4296 UmPass - ok 23:59:03.0177 4296 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll 23:59:03.0183 4296 upnphost - ok 23:59:03.0194 4296 usbccgp (b26afb54a534d634523c4fb66765b026) C:\Windows\system32\DRIVERS\usbccgp.sys 23:59:03.0195 4296 usbccgp - ok 23:59:03.0203 4296 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys 23:59:03.0205 4296 usbcir - ok 23:59:03.0211 4296 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys 23:59:03.0212 4296 usbehci - ok 23:59:03.0292 4296 usbhub (4c9042b8df86c1e8e6240c218b99b39b) C:\Windows\system32\DRIVERS\usbhub.sys 23:59:03.0298 4296 usbhub - ok 23:59:03.0312 4296 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys 23:59:03.0313 4296 usbohci - ok 23:59:03.0320 4296 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 23:59:03.0321 4296 usbprint - ok 23:59:03.0332 4296 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\Windows\system32\DRIVERS\USBSTOR.SYS 23:59:03.0334 4296 USBSTOR - ok 23:59:03.0340 4296 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys 23:59:03.0341 4296 usbuhci - ok 23:59:03.0382 4296 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\System32\Drivers\usbvideo.sys 23:59:03.0385 4296 usbvideo - ok 23:59:03.0407 4296 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll 23:59:03.0412 4296 UxSms - ok 23:59:03.0434 4296 VaultSvc (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 23:59:03.0437 4296 VaultSvc - ok 23:59:03.0462 4296 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys 23:59:03.0463 4296 vdrvroot - ok 23:59:03.0495 4296 vds (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe 23:59:03.0516 4296 vds - ok 23:59:03.0531 4296 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 23:59:03.0532 4296 vga - ok 23:59:03.0539 4296 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 23:59:03.0540 4296 VgaSave - ok 23:59:03.0563 4296 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys 23:59:03.0568 4296 vhdmp - ok 23:59:03.0581 4296 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys 23:59:03.0582 4296 viaide - ok 23:59:03.0591 4296 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys 23:59:03.0593 4296 volmgr - ok 23:59:03.0620 4296 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys 23:59:03.0624 4296 volmgrx - ok 23:59:03.0650 4296 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys 23:59:03.0654 4296 volsnap - ok 23:59:03.0677 4296 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 23:59:03.0680 4296 vsmraid - ok 23:59:03.0757 4296 VSS (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe 23:59:03.0776 4296 VSS - ok 23:59:03.0854 4296 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 23:59:03.0856 4296 vwifibus - ok 23:59:03.0878 4296 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 23:59:03.0880 4296 vwififlt - ok 23:59:03.0913 4296 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll 23:59:03.0924 4296 W32Time - ok 23:59:03.0935 4296 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 23:59:03.0937 4296 WacomPen - ok 23:59:03.0950 4296 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 23:59:03.0952 4296 WANARP - ok 23:59:03.0955 4296 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 23:59:03.0956 4296 Wanarpv6 - ok 23:59:04.0030 4296 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe 23:59:04.0043 4296 WatAdminSvc - ok 23:59:04.0154 4296 wbengine (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe 23:59:04.0201 4296 wbengine - ok 23:59:04.0268 4296 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll 23:59:04.0282 4296 WbioSrvc - ok 23:59:04.0322 4296 wcncsvc (dd1bae8ebfc653824d29ccf8c9054d68) C:\Windows\System32\wcncsvc.dll 23:59:04.0333 4296 wcncsvc - ok 23:59:04.0351 4296 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll 23:59:04.0358 4296 WcsPlugInService - ok 23:59:04.0393 4296 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 23:59:04.0395 4296 Wd - ok 23:59:04.0421 4296 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 23:59:04.0428 4296 Wdf01000 - ok 23:59:04.0446 4296 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 23:59:04.0451 4296 WdiServiceHost - ok 23:59:04.0455 4296 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 23:59:04.0460 4296 WdiSystemHost - ok 23:59:04.0493 4296 WebClient (733006127f235be7c35354ebee7b9a7b) C:\Windows\System32\webclnt.dll 23:59:04.0500 4296 WebClient - ok 23:59:04.0522 4296 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll 23:59:04.0531 4296 Wecsvc - ok 23:59:04.0544 4296 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll 23:59:04.0550 4296 wercplsupport - ok 23:59:04.0563 4296 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll 23:59:04.0568 4296 WerSvc - ok 23:59:04.0616 4296 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 23:59:04.0618 4296 WfpLwf - ok 23:59:04.0637 4296 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 23:59:04.0639 4296 WIMMount - ok 23:59:04.0660 4296 WinDefend - ok 23:59:04.0672 4296 WinHttpAutoProxySvc - ok 23:59:04.0724 4296 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll 23:59:04.0730 4296 Winmgmt - ok 23:59:04.0825 4296 WinRM (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll 23:59:04.0845 4296 WinRM - ok 23:59:04.0957 4296 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll 23:59:04.0970 4296 Wlansvc - ok 23:59:05.0009 4296 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys 23:59:05.0010 4296 WmiAcpi - ok 23:59:05.0062 4296 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe 23:59:05.0067 4296 wmiApSrv - ok 23:59:05.0097 4296 WMPNetworkSvc - ok 23:59:05.0134 4296 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll 23:59:05.0142 4296 WPCSvc - ok 23:59:05.0165 4296 WPDBusEnum (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll 23:59:05.0173 4296 WPDBusEnum - ok 23:59:05.0190 4296 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 23:59:05.0191 4296 ws2ifsl - ok 23:59:05.0219 4296 wscsvc (8f9f3969933c02da96eb0f84576db43e) C:\Windows\System32\wscsvc.dll 23:59:05.0227 4296 wscsvc - ok 23:59:05.0232 4296 WSearch - ok 23:59:05.0373 4296 wuauserv (d9ef901dca379cfe914e9fa13b73b4c4) C:\Windows\system32\wuaueng.dll 23:59:05.0389 4296 wuauserv - ok 23:59:05.0467 4296 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys 23:59:05.0470 4296 WudfPf - ok 23:59:05.0483 4296 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys 23:59:05.0488 4296 WUDFRd - ok 23:59:05.0511 4296 wudfsvc (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll 23:59:05.0516 4296 wudfsvc - ok 23:59:05.0539 4296 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll 23:59:05.0546 4296 WwanSvc - ok 23:59:05.0567 4296 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0 23:59:05.0594 4296 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - infected 23:59:05.0594 4296 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.c (0) 23:59:05.0600 4296 MBR (0x1B8) (739b36f7a373fc81121d831231b6d311) \Device\Harddisk1\DR1 23:59:05.0793 4296 \Device\Harddisk1\DR1 - ok 23:59:05.0796 4296 MBR (0x1B8) (5fb38429d5d77768867c76dcbdb35194) \Device\Harddisk2\DR2 23:59:05.0799 4296 \Device\Harddisk2\DR2 - ok 23:59:05.0829 4296 Boot (0x1200) (41614d3319a970e89e8acb2413dc4c75) \Device\Harddisk0\DR0\Partition0 23:59:05.0832 4296 \Device\Harddisk0\DR0\Partition0 - ok 23:59:05.0838 4296 Boot (0x1200) (adc6498066d30524e678cb650aab957e) \Device\Harddisk1\DR1\Partition0 23:59:05.0842 4296 \Device\Harddisk1\DR1\Partition0 - ok 23:59:05.0848 4296 Boot (0x1200) (ed1f372f1fe2ba3ed8d48cbe2951f9bd) \Device\Harddisk2\DR2\Partition0 23:59:05.0850 4296 \Device\Harddisk2\DR2\Partition0 - ok 23:59:05.0851 4296 ============================================================ 23:59:05.0851 4296 Scan finished 23:59:05.0851 4296 ============================================================ 23:59:05.0863 4244 Detected object count: 1 23:59:05.0863 4244 Actual detected object count: 1 23:59:24.0154 4244 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - skipped by user 23:59:24.0154 4244 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - User select action: Skip

teNATEcious

Post #8July 20, 2012, 4:08 AM UTC

Also, my topic title got cut off. The process it's linking is \\.\globalroot\systemroot\svchost.exe. I'm not sure how significant that is. Have a great evening!

Conspire

Post #9July 20, 2012, 1:02 PM UTC

It's alright, we pretty much know what is going on from the log. Now allow TDSS Killer to Cure Pihar rootkit and post the log back in your next reply.

teNATEcious

Post #10July 20, 2012, 8:02 PM UTC

15:56:47.0488 5960 TDSS rootkit removing tool [removed] Jul 16 2012 22:10:11 15:56:47.0788 5960 ============================================================ 15:56:47.0788 5960 Current date / time: 2012/07/20 15:56:47.0788 15:56:47.0788 5960 SystemInfo: 15:56:47.0788 5960 15:56:47.0788 5960 OS Version: 6.1.7600 ServicePack: 0.0 15:56:47.0788 5960 Product type: Workstation 15:56:47.0788 5960 ComputerName: TENATECIOUS-PC 15:56:47.0788 5960 UserName: teNATEcious 15:56:47.0788 5960 Windows directory: C:\Windows 15:56:47.0788 5960 System windows directory: C:\Windows 15:56:47.0788 5960 Running under WOW64 15:56:47.0788 5960 Processor architecture: Intel x64 15:56:47.0788 5960 Number of processors: 8 15:56:47.0788 5960 Page size: 0x1000 15:56:47.0788 5960 Boot type: Normal boot 15:56:47.0788 5960 ============================================================ 15:56:48.0398 5960 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 15:56:48.0398 5960 Drive \Device\Harddisk1\DR1 - Size: 0x15D50F66000 (1397.27 Gb), SectorSize: 0x200, Cylinders: 0x2C881, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 15:56:48.0418 5960 ============================================================ 15:56:48.0418 5960 \Device\Harddisk0\DR0: 15:56:48.0418 5960 MBR partitions: 15:56:48.0418 5960 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x2156880, BlocksNum 0x3822E700 15:56:48.0418 5960 \Device\Harddisk1\DR1: 15:56:48.0418 5960 MBR partitions: 15:56:48.0418 5960 \Device\Harddisk1\DR1\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xAEA86741 15:56:48.0418 5960 ============================================================ 15:56:48.0438 5960 C: <-> \Device\Harddisk0\DR0\Partition0 15:56:48.0438 5960 E: <-> \Device\Harddisk1\DR1\Partition0 15:56:48.0438 5960 ============================================================ 15:56:48.0438 5960 Initialize success 15:56:48.0438 5960 ============================================================ 15:56:49.0818 5416 ============================================================ 15:56:49.0818 5416 Scan started 15:56:49.0818 5416 Mode: Manual; 15:56:49.0818 5416 ============================================================ 15:56:50.0348 5416 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\Windows\system32\DRIVERS\1394ohci.sys 15:56:50.0348 5416 1394ohci - ok 15:56:50.0368 5416 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys 15:56:50.0378 5416 ACPI - ok 15:56:50.0388 5416 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys 15:56:50.0388 5416 AcpiPmi - ok 15:56:50.0428 5416 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 15:56:50.0438 5416 adp94xx - ok 15:56:50.0468 5416 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 15:56:50.0478 5416 adpahci - ok 15:56:50.0498 5416 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 15:56:50.0498 5416 adpu320 - ok 15:56:50.0518 5416 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll 15:56:50.0518 5416 AeLookupSvc - ok 15:56:50.0558 5416 AFD (db9d6c6b2cd95a9ca414d045b627422e) C:\Windows\system32\drivers\afd.sys 15:56:50.0568 5416 AFD - ok 15:56:50.0568 5416 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys 15:56:50.0578 5416 agp440 - ok 15:56:50.0588 5416 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe 15:56:50.0598 5416 ALG - ok 15:56:50.0608 5416 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys 15:56:50.0608 5416 aliide - ok 15:56:50.0608 5416 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys 15:56:50.0618 5416 amdide - ok 15:56:50.0618 5416 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 15:56:50.0618 5416 AmdK8 - ok 15:56:50.0628 5416 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 15:56:50.0638 5416 AmdPPM - ok 15:56:50.0668 5416 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\drivers\amdsata.sys 15:56:50.0668 5416 amdsata - ok 15:56:50.0678 5416 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 15:56:50.0688 5416 amdsbs - ok 15:56:50.0698 5416 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\drivers\amdxata.sys 15:56:50.0698 5416 amdxata - ok 15:56:50.0718 5416 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys 15:56:50.0728 5416 AppID - ok 15:56:50.0738 5416 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll 15:56:50.0738 5416 AppIDSvc - ok 15:56:50.0748 5416 Appinfo (d065be66822847b7f127d1f90158376e) C:\Windows\System32\appinfo.dll 15:56:50.0758 5416 Appinfo - ok 15:56:50.0758 5416 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 15:56:50.0758 5416 arc - ok 15:56:50.0768 5416 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 15:56:50.0768 5416 arcsas - ok 15:56:50.0848 5416 ASLDRService (a3626c6d3f2dc95497f3f61842d7fd89) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe 15:56:50.0848 5416 ASLDRService - ok 15:56:50.0868 5416 ASMMAP64 (4c016fd76ed5c05e84ca8cab77993961) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys 15:56:50.0868 5416 ASMMAP64 - ok 15:56:50.0918 5416 aswFsBlk (df59b8e8df0bd2e0e303778a3806a17d) C:\Windows\system32\drivers\aswFsBlk.sys 15:56:50.0918 5416 aswFsBlk - ok 15:56:50.0948 5416 aswMonFlt (f8e6ab4f876feff69250f2e0c29ef004) C:\Windows\system32\drivers\aswMonFlt.sys 15:56:50.0948 5416 aswMonFlt - ok 15:56:50.0968 5416 aswRdr (aa92bc4bcba40ca3aa3ffd1be24f0c09) C:\Windows\System32\Drivers\aswrdr2.sys 15:56:50.0968 5416 aswRdr - ok 15:56:51.0008 5416 aswSnx (f06e230e1e8ca9437a6474b7b551cd37) C:\Windows\system32\drivers\aswSnx.sys 15:56:51.0018 5416 aswSnx - ok 15:56:51.0038 5416 aswSP (3610ca74a69e380424f0452dec5c1317) C:\Windows\system32\drivers\aswSP.sys 15:56:51.0038 5416 aswSP - ok 15:56:51.0048 5416 aswTdi (87de3e31cb0091d22351349869324065) C:\Windows\system32\drivers\aswTdi.sys 15:56:51.0048 5416 aswTdi - ok 15:56:51.0068 5416 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 15:56:51.0068 5416 AsyncMac - ok 15:56:51.0098 5416 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys 15:56:51.0098 5416 atapi - ok 15:56:51.0298 5416 athr (b4174564ad5834a1680610572477878c) C:\Windows\system32\DRIVERS\athrx.sys 15:56:51.0338 5416 athr - ok 15:56:51.0418 5416 ATKGFNEXSrv (dbc598e47e7a382e60e2a4745d41fef9) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe 15:56:51.0418 5416 ATKGFNEXSrv - ok 15:56:51.0458 5416 ATKWMIACPIIO (41ceaffcf3550785e59e3ec9bee8d97a) C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys 15:56:51.0458 5416 ATKWMIACPIIO - ok 15:56:51.0618 5416 AudioEndpointBuilder (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 15:56:51.0638 5416 AudioEndpointBuilder - ok 15:56:51.0648 5416 AudioSrv (07721a77180edd4d39ccb865bf63c7fd) C:\Windows\System32\Audiosrv.dll 15:56:51.0658 5416 AudioSrv - ok 15:56:51.0778 5416 avast! Antivirus (2f7c0f3e39c45e0127fb78b2f18a41f3) C:\Program Files\AVAST Software\Avast\AvastSvc.exe 15:56:51.0788 5416 avast! Antivirus - ok 15:56:51.0808 5416 AxInstSV (b20b5fa5ca050e9926e4d1db81501b32) C:\Windows\System32\AxInstSV.dll 15:56:51.0808 5416 AxInstSV - ok 15:56:51.0888 5416 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 15:56:51.0918 5416 b06bdrv - ok 15:56:51.0958 5416 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 15:56:51.0968 5416 b57nd60a - ok 15:56:52.0018 5416 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll 15:56:52.0018 5416 BDESVC - ok 15:56:52.0028 5416 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 15:56:52.0028 5416 Beep - ok 15:56:52.0068 5416 BFE (4992c609a6315671463e30f6512bc022) C:\Windows\System32\bfe.dll 15:56:52.0078 5416 BFE - ok 15:56:52.0118 5416 BITS (7f0c323fe3da28aa4aa1bda3f575707f) C:\Windows\System32\qmgr.dll 15:56:52.0138 5416 BITS - ok 15:56:52.0208 5416 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 15:56:52.0208 5416 blbdrive - ok 15:56:52.0238 5416 bowser (19d20159708e152267e53b66677a4995) C:\Windows\system32\DRIVERS\bowser.sys 15:56:52.0238 5416 bowser - ok 15:56:52.0258 5416 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 15:56:52.0268 5416 BrFiltLo - ok 15:56:52.0268 5416 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 15:56:52.0278 5416 BrFiltUp - ok 15:56:52.0308 5416 Browser (94fbc06f294d58d02361918418f996e3) C:\Windows\System32\browser.dll 15:56:52.0318 5416 Browser - ok 15:56:52.0338 5416 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 15:56:52.0348 5416 Brserid - ok 15:56:52.0348 5416 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 15:56:52.0358 5416 BrSerWdm - ok 15:56:52.0358 5416 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 15:56:52.0358 5416 BrUsbMdm - ok 15:56:52.0368 5416 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 15:56:52.0368 5416 BrUsbSer - ok 15:56:52.0418 5416 BtFilter (0f4c980b9612abdb25bcabf0c660c058) C:\Windows\system32\DRIVERS\btfilter.sys 15:56:52.0418 5416 BtFilter - ok 15:56:52.0428 5416 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 15:56:52.0428 5416 BTHMODEM - ok 15:56:52.0478 5416 BTHPORT (21084ceb85280468c9aca3c805c0f8cf) C:\Windows\System32\Drivers\BTHport.sys 15:56:52.0498 5416 BTHPORT - ok 15:56:52.0538 5416 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll 15:56:52.0548 5416 bthserv - ok 15:56:52.0558 5416 BTHUSB (8504842634dd144c075b6b0c982ccec4) C:\Windows\System32\Drivers\BTHUSB.sys 15:56:52.0558 5416 BTHUSB - ok 15:56:52.0578 5416 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 15:56:52.0588 5416 cdfs - ok 15:56:52.0618 5416 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys 15:56:52.0618 5416 cdrom - ok 15:56:52.0648 5416 CertPropSvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 15:56:52.0648 5416 CertPropSvc - ok 15:56:52.0658 5416 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 15:56:52.0658 5416 circlass - ok 15:56:52.0678 5416 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 15:56:52.0688 5416 CLFS - ok 15:56:52.0758 5416 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 15:56:52.0758 5416 clr_optimization_v2.0.50727_32 - ok 15:56:52.0788 5416 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 15:56:52.0788 5416 clr_optimization_v2.0.50727_64 - ok 15:56:53.0008 5416 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 15:56:53.0018 5416 clr_optimization_v4.0.30319_32 - ok 15:56:53.0128 5416 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 15:56:53.0138 5416 clr_optimization_v4.0.30319_64 - ok 15:56:53.0168 5416 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 15:56:53.0178 5416 CmBatt - ok 15:56:53.0198 5416 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys 15:56:53.0198 5416 cmdide - ok 15:56:53.0248 5416 CNG (ca7720b73446fddec5c69519c1174c98) C:\Windows\system32\Drivers\cng.sys 15:56:53.0278 5416 CNG - ok 15:56:53.0298 5416 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 15:56:53.0298 5416 Compbatt - ok 15:56:53.0318 5416 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys 15:56:53.0328 5416 CompositeBus - ok 15:56:53.0328 5416 COMSysApp - ok 15:56:53.0358 5416 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 15:56:53.0358 5416 crcdisk - ok 15:56:53.0408 5416 Creative ALchemy AL6 Licensing Service (c8bd651e13895b93ed9ec5b4f1df42bc) C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe 15:56:53.0418 5416 Creative ALchemy AL6 Licensing Service - ok 15:56:53.0438 5416 Creative Audio Engine Licensing Service (c0ead9f8ab83d41ff07303c75589c2b8) C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe 15:56:53.0438 5416 Creative Audio Engine Licensing Service - ok 15:56:53.0478 5416 CryptSvc (f02786b66375292e58c8777082d4396d) C:\Windows\system32\cryptsvc.dll 15:56:53.0488 5416 CryptSvc - ok 15:56:53.0548 5416 DcomLaunch (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll 15:56:53.0568 5416 DcomLaunch - ok 15:56:53.0598 5416 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll 15:56:53.0608 5416 defragsvc - ok 15:56:53.0628 5416 DfsC (9c253ce7311ca60fc11c774692a13208) C:\Windows\system32\Drivers\dfsc.sys 15:56:53.0638 5416 DfsC - ok 15:56:53.0668 5416 Dhcp (ce3b9562d997f69b330d181a8875960f) C:\Windows\system32\dhcpcore.dll 15:56:53.0668 5416 Dhcp - ok 15:56:53.0688 5416 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 15:56:53.0688 5416 discache - ok 15:56:53.0728 5416 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 15:56:53.0728 5416 Disk - ok 15:56:53.0748 5416 Dnscache (85cf424c74a1d5ec33533e1dbff9920a) C:\Windows\System32\dnsrslvr.dll 15:56:53.0758 5416 Dnscache - ok 15:56:53.0768 5416 dot3svc (14452acdb09b70964c8c21bf80a13acb) C:\Windows\System32\dot3svc.dll 15:56:53.0778 5416 dot3svc - ok 15:56:53.0788 5416 DPS (8c2ba6bea949ee6e68385f5692bafb94) C:\Windows\system32\dps.dll 15:56:53.0798 5416 DPS - ok 15:56:53.0828 5416 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 15:56:53.0828 5416 drmkaud - ok 15:56:53.0858 5416 dtsoftbus01 (46571ed73ae84469dca53081d33cf3c8) C:\Windows\system32\DRIVERS\dtsoftbus01.sys 15:56:53.0868 5416 dtsoftbus01 - ok 15:56:53.0908 5416 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys 15:56:53.0918 5416 DXGKrnl - ok 15:56:53.0928 5416 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll 15:56:53.0928 5416 EapHost - ok 15:56:54.0078 5416 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 15:56:54.0178 5416 ebdrv - ok 15:56:54.0248 5416 EFS (156f6159457d0aa7e59b62681b56eb90) C:\Windows\System32\lsass.exe 15:56:54.0258 5416 EFS - ok 15:56:54.0318 5416 ehRecvr (47c071994c3f649f23d9cd075ac9304a) C:\Windows\ehome\ehRecvr.exe 15:56:54.0348 5416 ehRecvr - ok 15:56:54.0368 5416 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe 15:56:54.0378 5416 ehSched - ok 15:56:54.0448 5416 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 15:56:54.0468 5416 elxstor - ok 15:56:54.0488 5416 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys 15:56:54.0488 5416 ErrDev - ok 15:56:54.0538 5416 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll 15:56:54.0558 5416 EventSystem - ok 15:56:54.0588 5416 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 15:56:54.0588 5416 exfat - ok 15:56:54.0608 5416 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 15:56:54.0618 5416 fastfat - ok 15:56:54.0658 5416 Fax (d607b2f1bee3992aa6c2c92c0a2f0855) C:\Windows\system32\fxssvc.exe 15:56:54.0688 5416 Fax - ok 15:56:54.0698 5416 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 15:56:54.0698 5416 fdc - ok 15:56:54.0718 5416 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll 15:56:54.0718 5416 fdPHost - ok 15:56:54.0728 5416 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll 15:56:54.0738 5416 FDResPub - ok 15:56:54.0748 5416 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 15:56:54.0758 5416 FileInfo - ok 15:56:54.0758 5416 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 15:56:54.0758 5416 Filetrace - ok 15:56:54.0768 5416 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 15:56:54.0768 5416 flpydisk - ok 15:56:54.0788 5416 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys 15:56:54.0798 5416 FltMgr - ok 15:56:54.0838 5416 FLxHCIc (bfda4d45d7c3e278d46f5bb0e5348c56) C:\Windows\system32\DRIVERS\FLxHCIc.sys 15:56:54.0848 5416 FLxHCIc - ok 15:56:54.0868 5416 FLxHCIh (7dab83e54f868806d919384ac3def762) C:\Windows\system32\DRIVERS\FLxHCIh.sys 15:56:54.0878 5416 FLxHCIh - ok 15:56:54.0938 5416 FontCache (bc00505cfda789ed3be95d2ff38c4875) C:\Windows\system32\FntCache.dll 15:56:54.0968 5416 FontCache - ok 15:56:55.0038 5416 FontCache3.0.0.0 (8d89e3131c27fdd6932189cb785e1b7a) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 15:56:55.0038 5416 FontCache3.0.0.0 - ok 15:56:55.0068 5416 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 15:56:55.0068 5416 FsDepends - ok 15:56:55.0128 5416 fspad_win764 (3dfa8d4e50d608f8f732014614c84dd2) C:\Windows\system32\DRIVERS\fspad_win764.sys 15:56:55.0128 5416 fspad_win764 - ok 15:56:55.0148 5416 Fs_Rec (d3e3f93d67821a2db2b3d9fac2dc2064) C:\Windows\system32\drivers\Fs_Rec.sys 15:56:55.0148 5416 Fs_Rec - ok 15:56:55.0188 5416 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\Windows\system32\DRIVERS\fvevol.sys 15:56:55.0198 5416 fvevol - ok 15:56:55.0218 5416 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 15:56:55.0218 5416 gagp30kx - ok 15:56:55.0258 5416 gpsvc (fe5ab4525bc2ec68b9119a6e5d40128b) C:\Windows\System32\gpsvc.dll 15:56:55.0278 5416 gpsvc - ok 15:56:55.0298 5416 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 15:56:55.0298 5416 hcw85cir - ok 15:56:55.0338 5416 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\Windows\system32\drivers\HdAudio.sys 15:56:55.0348 5416 HdAudAddService - ok 15:56:55.0368 5416 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys 15:56:55.0378 5416 HDAudBus - ok 15:56:55.0388 5416 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 15:56:55.0388 5416 HidBatt - ok 15:56:55.0398 5416 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 15:56:55.0398 5416 HidBth - ok 15:56:55.0428 5416 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 15:56:55.0428 5416 HidIr - ok 15:56:55.0438 5416 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll 15:56:55.0448 5416 hidserv - ok 15:56:55.0478 5416 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys 15:56:55.0478 5416 HidUsb - ok 15:56:55.0528 5416 hkmsvc (efa58ede58dd74388ffd04cb32681518) C:\Windows\system32\kmsvc.dll 15:56:55.0528 5416 hkmsvc - ok 15:56:55.0548 5416 HomeGroupListener (046b2673767ca626e2cfb7fdf735e9e8) C:\Windows\system32\ListSvc.dll 15:56:55.0558 5416 HomeGroupListener - ok 15:56:55.0578 5416 HomeGroupProvider (06a7422224d9865a5613710a089987df) C:\Windows\system32\provsvc.dll 15:56:55.0588 5416 HomeGroupProvider - ok 15:56:55.0608 5416 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys 15:56:55.0608 5416 HpSAMD - ok 15:56:55.0668 5416 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys 15:56:55.0688 5416 HTTP - ok 15:56:55.0718 5416 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys 15:56:55.0718 5416 hwpolicy - ok 15:56:55.0728 5416 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 15:56:55.0728 5416 i8042prt - ok 15:56:55.0768 5416 iaStor (d7921d5a870b11cc1adab198a519d50a) C:\Windows\system32\DRIVERS\iaStor.sys 15:56:55.0768 5416 iaStor - ok 15:56:55.0818 5416 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\drivers\iaStorV.sys 15:56:55.0818 5416 iaStorV - ok 15:56:55.0928 5416 idsvc (2f2be70d3e02b6fa877921ab9516d43c) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 15:56:55.0968 5416 idsvc - ok 15:56:56.0008 5416 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 15:56:56.0008 5416 iirsp - ok 15:56:56.0068 5416 IKEEXT (c5b4683680df085b57bc53e5ef34861f) C:\Windows\System32\ikeext.dll 15:56:56.0088 5416 IKEEXT - ok 15:56:56.0318 5416 IntcAzAudAddService (602788bf364d43e5878aa1b4f85c232b) C:\Windows\system32\drivers\RTKVHD64.sys 15:56:56.0338 5416 IntcAzAudAddService - ok 15:56:56.0448 5416 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys 15:56:56.0448 5416 intelide - ok 15:56:56.0468 5416 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 15:56:56.0468 5416 intelppm - ok 15:56:56.0508 5416 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll 15:56:56.0508 5416 IPBusEnum - ok 15:56:56.0528 5416 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys 15:56:56.0528 5416 IpFilterDriver - ok 15:56:56.0578 5416 iphlpsvc (f8e058d17363ec580e4b7232778b6cb5) C:\Windows\System32\iphlpsvc.dll 15:56:56.0598 5416 iphlpsvc - ok 15:56:56.0608 5416 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys 15:56:56.0618 5416 IPMIDRV - ok 15:56:56.0628 5416 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 15:56:56.0628 5416 IPNAT - ok 15:56:56.0628 5416 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 15:56:56.0638 5416 IRENUM - ok 15:56:56.0648 5416 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys 15:56:56.0648 5416 isapnp - ok 15:56:56.0678 5416 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys 15:56:56.0688 5416 iScsiPrt - ok 15:56:56.0708 5416 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys 15:56:56.0708 5416 kbdclass - ok 15:56:56.0718 5416 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys 15:56:56.0728 5416 kbdhid - ok 15:56:56.0748 5416 KeyIso (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 15:56:56.0748 5416 KeyIso - ok 15:56:56.0768 5416 KSecDD (4f4b5fde429416877de7143044582eb5) C:\Windows\system32\Drivers\ksecdd.sys 15:56:56.0768 5416 KSecDD - ok 15:56:56.0788 5416 KSecPkg (6f40465a44ecdc1731befafec5bdd03c) C:\Windows\system32\Drivers\ksecpkg.sys 15:56:56.0798 5416 KSecPkg - ok 15:56:56.0808 5416 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 15:56:56.0808 5416 ksthunk - ok 15:56:56.0848 5416 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll 15:56:56.0858 5416 KtmRm - ok 15:56:56.0888 5416 LanmanServer (81f1d04d4d0e433099365127375fd501) C:\Windows\system32\srvsvc.dll 15:56:56.0898 5416 LanmanServer - ok 15:56:56.0928 5416 LanmanWorkstation (27026eac8818e8a6c00a1cad2f11d29a) C:\Windows\System32\wkssvc.dll 15:56:56.0938 5416 LanmanWorkstation - ok 15:56:56.0988 5416 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 15:56:56.0988 5416 lltdio - ok 15:56:57.0018 5416 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll 15:56:57.0028 5416 lltdsvc - ok 15:56:57.0058 5416 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll 15:56:57.0058 5416 lmhosts - ok 15:56:57.0078 5416 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 15:56:57.0088 5416 LSI_FC - ok 15:56:57.0098 5416 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 15:56:57.0098 5416 LSI_SAS - ok 15:56:57.0108 5416 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 15:56:57.0108 5416 LSI_SAS2 - ok 15:56:57.0118 5416 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 15:56:57.0118 5416 LSI_SCSI - ok 15:56:57.0138 5416 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 15:56:57.0138 5416 luafv - ok 15:56:57.0168 5416 MBfilt (8ff2d95cba49b405c5de27039ff0bf35) C:\Windows\system32\drivers\MBfilt64.sys 15:56:57.0168 5416 MBfilt - ok 15:56:57.0198 5416 Mcx2Svc (f84c8f1000bc11e3b7b23cbd3baff111) C:\Windows\system32\Mcx2Svc.dll 15:56:57.0208 5416 Mcx2Svc - ok 15:56:57.0208 5416 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 15:56:57.0208 5416 megasas - ok 15:56:57.0228 5416 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 15:56:57.0238 5416 MegaSR - ok 15:56:57.0268 5416 MEIx64 (a6518dcc42f7a6e999bb3bea8fd87567) C:\Windows\system32\DRIVERS\HECIx64.sys 15:56:57.0268 5416 MEIx64 - ok 15:56:57.0288 5416 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 15:56:57.0298 5416 MMCSS - ok 15:56:57.0308 5416 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 15:56:57.0308 5416 Modem - ok 15:56:57.0328 5416 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 15:56:57.0328 5416 monitor - ok 15:56:57.0338 5416 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 15:56:57.0338 5416 mouclass - ok 15:56:57.0358 5416 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 15:56:57.0358 5416 mouhid - ok 15:56:57.0368 5416 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys 15:56:57.0368 5416 mountmgr - ok 15:56:57.0418 5416 MozillaMaintenance (46297fa8e30a6007f14118fc2b942fbc) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 15:56:57.0428 5416 MozillaMaintenance - ok 15:56:57.0438 5416 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys 15:56:57.0448 5416 mpio - ok 15:56:57.0458 5416 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 15:56:57.0458 5416 mpsdrv - ok 15:56:57.0498 5416 MpsSvc (aecab449567d1846dad63ece49e893e3) C:\Windows\system32\mpssvc.dll 15:56:57.0528 5416 MpsSvc - ok 15:56:57.0548 5416 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys 15:56:57.0558 5416 MRxDAV - ok 15:56:57.0578 5416 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys 15:56:57.0588 5416 mrxsmb - ok 15:56:57.0608 5416 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys 15:56:57.0618 5416 mrxsmb10 - ok 15:56:57.0638 5416 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys 15:56:57.0638 5416 mrxsmb20 - ok 15:56:57.0648 5416 msahci (5c37497276e3b3a5488b23a326a754b7) C:\Windows\system32\DRIVERS\msahci.sys 15:56:57.0648 5416 msahci - ok 15:56:57.0658 5416 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys 15:56:57.0658 5416 msdsm - ok 15:56:57.0678 5416 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe 15:56:57.0678 5416 MSDTC - ok 15:56:57.0698 5416 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 15:56:57.0698 5416 Msfs - ok 15:56:57.0718 5416 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 15:56:57.0718 5416 mshidkmdf - ok 15:56:57.0728 5416 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys 15:56:57.0728 5416 msisadrv - ok 15:56:57.0768 5416 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll 15:56:57.0778 5416 MSiSCSI - ok 15:56:57.0778 5416 msiserver - ok 15:56:57.0798 5416 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 15:56:57.0808 5416 MSKSSRV - ok 15:56:57.0828 5416 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 15:56:57.0838 5416 MSPCLOCK - ok 15:56:57.0838 5416 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 15:56:57.0848 5416 MSPQM - ok 15:56:57.0868 5416 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys 15:56:57.0878 5416 MsRPC - ok 15:56:57.0888 5416 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys 15:56:57.0888 5416 mssmbios - ok 15:56:57.0888 5416 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 15:56:57.0888 5416 MSTEE - ok 15:56:57.0908 5416 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 15:56:57.0908 5416 MTConfig - ok 15:56:57.0918 5416 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 15:56:57.0918 5416 Mup - ok 15:56:57.0958 5416 napagent (4987e079a4530fa737a128be54b63b12) C:\Windows\system32\qagentRT.dll 15:56:57.0978 5416 napagent - ok 15:56:58.0038 5416 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 15:56:58.0048 5416 NativeWifiP - ok 15:56:58.0108 5416 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\Windows\system32\drivers\ndis.sys 15:56:58.0138 5416 NDIS - ok 15:56:58.0158 5416 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 15:56:58.0168 5416 NdisCap - ok 15:56:58.0178 5416 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 15:56:58.0178 5416 NdisTapi - ok 15:56:58.0188 5416 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys 15:56:58.0198 5416 Ndisuio - ok 15:56:58.0208 5416 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys 15:56:58.0218 5416 NdisWan - ok 15:56:58.0218 5416 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys 15:56:58.0228 5416 NDProxy - ok 15:56:58.0238 5416 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 15:56:58.0238 5416 NetBIOS - ok 15:56:58.0258 5416 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys 15:56:58.0268 5416 NetBT - ok 15:56:58.0298 5416 Netlogon (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 15:56:58.0298 5416 Netlogon - ok 15:56:58.0328 5416 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll 15:56:58.0338 5416 Netman - ok 15:56:58.0368 5416 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll 15:56:58.0378 5416 netprofm - ok 15:56:58.0458 5416 NetTcpPortSharing (3e5a36127e201ddf663176b66828fafe) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 15:56:58.0458 5416 NetTcpPortSharing - ok 15:56:58.0498 5416 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 15:56:58.0508 5416 nfrd960 - ok 15:56:58.0528 5416 NlaSvc (d9a0ce66046d6efa0c61baa885cba0a8) C:\Windows\System32\nlasvc.dll 15:56:58.0538 5416 NlaSvc - ok 15:56:58.0538 5416 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 15:56:58.0538 5416 Npfs - ok 15:56:58.0568 5416 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll 15:56:58.0568 5416 nsi - ok 15:56:58.0568 5416 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 15:56:58.0568 5416 nsiproxy - ok 15:56:58.0658 5416 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys 15:56:58.0708 5416 Ntfs - ok 15:56:58.0788 5416 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 15:56:58.0798 5416 Null - ok 15:56:58.0838 5416 NVHDA (8d4aac74b571fc356560e5b308955e93) C:\Windows\system32\drivers\nvhda64v.sys 15:56:58.0838 5416 NVHDA - ok 15:56:59.0398 5416 nvlddmkm (01502a328ae7cf595698a3fd954d18f0) C:\Windows\system32\DRIVERS\nvlddmkm.sys 15:56:59.0458 5416 nvlddmkm - ok 15:56:59.0588 5416 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\drivers\nvraid.sys 15:56:59.0588 5416 nvraid - ok 15:56:59.0628 5416 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\drivers\nvstor.sys 15:56:59.0638 5416 nvstor - ok 15:56:59.0708 5416 NvStUSB (fcb83807e4954e13924f1dc31eb4ab11) C:\Windows\system32\DRIVERS\nvstusb.sys 15:56:59.0708 5416 NvStUSB - ok 15:56:59.0788 5416 NVSvc (9196496e4edc48ba7c7162d29698bcaa) C:\Windows\system32\nvvsvc.exe 15:56:59.0818 5416 NVSvc - ok 15:56:59.0988 5416 nvUpdatusService (ab56c9bf8b0b830833c2cb6a63947d2f) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe 15:57:00.0008 5416 nvUpdatusService - ok 15:57:00.0128 5416 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys 15:57:00.0128 5416 nv_agp - ok 15:57:00.0138 5416 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys 15:57:00.0148 5416 ohci1394 - ok 15:57:00.0188 5416 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 15:57:00.0208 5416 p2pimsvc - ok 15:57:00.0238 5416 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll 15:57:00.0268 5416 p2psvc - ok 15:57:00.0278 5416 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 15:57:00.0278 5416 Parport - ok 15:57:00.0308 5416 partmgr (90061b1acfe8ccaa5345750ffe08d8b8) C:\Windows\system32\drivers\partmgr.sys 15:57:00.0308 5416 partmgr - ok 15:57:00.0328 5416 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll 15:57:00.0338 5416 PcaSvc - ok 15:57:00.0358 5416 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys 15:57:00.0358 5416 pci - ok 15:57:00.0378 5416 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys 15:57:00.0378 5416 pciide - ok 15:57:00.0408 5416 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 15:57:00.0408 5416 pcmcia - ok 15:57:00.0418 5416 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 15:57:00.0418 5416 pcw - ok 15:57:00.0458 5416 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 15:57:00.0468 5416 PEAUTH - ok 15:57:00.0558 5416 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe 15:57:00.0558 5416 PerfHost - ok 15:57:00.0648 5416 pla (557e9a86f65f0de18c9b6751dfe9d3f1) C:\Windows\system32\pla.dll 15:57:00.0688 5416 pla - ok 15:57:00.0728 5416 PlugPlay (98b1721b8718164293b9701b98c52d77) C:\Windows\system32\umpnpmgr.dll 15:57:00.0748 5416 PlugPlay - ok 15:57:00.0758 5416 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll 15:57:00.0768 5416 PNRPAutoReg - ok 15:57:00.0788 5416 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll 15:57:00.0798 5416 PNRPsvc - ok 15:57:00.0838 5416 PolicyAgent (166eb40d1f5b47e615de3d0fffe5f243) C:\Windows\System32\ipsecsvc.dll 15:57:00.0858 5416 PolicyAgent - ok 15:57:00.0878 5416 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll 15:57:00.0888 5416 Power - ok 15:57:00.0948 5416 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys 15:57:00.0958 5416 PptpMiniport - ok 15:57:00.0978 5416 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 15:57:00.0978 5416 Processor - ok 15:57:01.0008 5416 ProfSvc (97293447431311c06703368ad0f6c4be) C:\Windows\system32\profsvc.dll 15:57:01.0018 5416 ProfSvc - ok 15:57:01.0058 5416 ProtectedStorage (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 15:57:01.0058 5416 ProtectedStorage - ok 15:57:01.0088 5416 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys 15:57:01.0088 5416 Psched - ok 15:57:01.0168 5416 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 15:57:01.0218 5416 ql2300 - ok 15:57:01.0308 5416 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 15:57:01.0308 5416 ql40xx - ok 15:57:01.0348 5416 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll 15:57:01.0358 5416 QWAVE - ok 15:57:01.0378 5416 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 15:57:01.0378 5416 QWAVEdrv - ok 15:57:01.0388 5416 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 15:57:01.0388 5416 RasAcd - ok 15:57:01.0418 5416 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 15:57:01.0428 5416 RasAgileVpn - ok 15:57:01.0438 5416 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll 15:57:01.0448 5416 RasAuto - ok 15:57:01.0478 5416 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys 15:57:01.0478 5416 Rasl2tp - ok 15:57:01.0508 5416 RasMan (47394ed3d16d053f5906efe5ab51cc83) C:\Windows\System32\rasmans.dll 15:57:01.0528 5416 RasMan - ok 15:57:01.0548 5416 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 15:57:01.0548 5416 RasPppoe - ok 15:57:01.0568 5416 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 15:57:01.0568 5416 RasSstp - ok 15:57:01.0588 5416 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys 15:57:01.0598 5416 rdbss - ok 15:57:01.0608 5416 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 15:57:01.0608 5416 rdpbus - ok 15:57:01.0638 5416 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 15:57:01.0638 5416 RDPCDD - ok 15:57:01.0648 5416 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 15:57:01.0648 5416 RDPENCDD - ok 15:57:01.0668 5416 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 15:57:01.0668 5416 RDPREFMP - ok 15:57:01.0708 5416 RDPWD (447de7e3dea39d422c1504f245b668b1) C:\Windows\system32\drivers\RDPWD.sys 15:57:01.0718 5416 RDPWD - ok 15:57:01.0748 5416 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys 15:57:01.0758 5416 rdyboost - ok 15:57:01.0778 5416 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll 15:57:01.0788 5416 RemoteAccess - ok 15:57:01.0808 5416 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll 15:57:01.0828 5416 RemoteRegistry - ok 15:57:01.0838 5416 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll 15:57:01.0848 5416 RpcEptMapper - ok 15:57:01.0868 5416 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe 15:57:01.0868 5416 RpcLocator - ok 15:57:01.0908 5416 RpcSs (7266972e86890e2b30c0c322e906b027) C:\Windows\system32\rpcss.dll 15:57:01.0908 5416 RpcSs - ok 15:57:01.0938 5416 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 15:57:01.0938 5416 rspndr - ok 15:57:01.0998 5416 RSUSBVSTOR (e57fac2cdb73f06586ed2ed310b80932) C:\Windows\system32\Drivers\RtsUVStor.sys 15:57:01.0998 5416 RSUSBVSTOR - ok 15:57:02.0068 5416 RTL8167 (f4c374b1c46de294b573bb43723ac3f6) C:\Windows\system32\DRIVERS\Rt64win7.sys 15:57:02.0078 5416 RTL8167 - ok 15:57:02.0098 5416 SamSs (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 15:57:02.0108 5416 SamSs - ok 15:57:02.0118 5416 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys 15:57:02.0118 5416 sbp2port - ok 15:57:02.0148 5416 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll 15:57:02.0158 5416 SCardSvr - ok 15:57:02.0198 5416 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys 15:57:02.0198 5416 scfilter - ok 15:57:02.0258 5416 Schedule (624d0f5ff99428bb90a5b8a4123e918e) C:\Windows\system32\schedsvc.dll 15:57:02.0318 5416 Schedule - ok 15:57:02.0348 5416 SCPolicySvc (312e2f82af11e79906898ac3e3d58a1f) C:\Windows\System32\certprop.dll 15:57:02.0348 5416 SCPolicySvc - ok 15:57:02.0368 5416 SDRSVC (765a27c3279ce11d14cb9e4f5869fca5) C:\Windows\System32\SDRSVC.dll 15:57:02.0378 5416 SDRSVC - ok 15:57:02.0428 5416 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 15:57:02.0428 5416 secdrv - ok 15:57:02.0438 5416 seclogon (463b386ebc70f98da5dff85f7e654346) C:\Windows\system32\seclogon.dll 15:57:02.0448 5416 seclogon - ok 15:57:02.0458 5416 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll 15:57:02.0468 5416 SENS - ok 15:57:02.0478 5416 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll 15:57:02.0488 5416 SensrSvc - ok 15:57:02.0508 5416 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 15:57:02.0518 5416 Serenum - ok 15:57:02.0528 5416 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 15:57:02.0538 5416 Serial - ok 15:57:02.0548 5416 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 15:57:02.0558 5416 sermouse - ok 15:57:02.0578 5416 SessionEnv (c3bc61ce47ff6f4e88ab8a3b429a36af) C:\Windows\system32\sessenv.dll 15:57:02.0588 5416 SessionEnv - ok 15:57:02.0608 5416 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys 15:57:02.0608 5416 sffdisk - ok 15:57:02.0608 5416 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys 15:57:02.0618 5416 sffp_mmc - ok 15:57:02.0628 5416 sffp_sd (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\drivers\sffp_sd.sys 15:57:02.0628 5416 sffp_sd - ok 15:57:02.0638 5416 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 15:57:02.0638 5416 sfloppy - ok 15:57:02.0668 5416 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll 15:57:02.0678 5416 SharedAccess - ok 15:57:02.0698 5416 ShellHWDetection (0298ac45d0efffb2db4baa7dd186e7bf) C:\Windows\System32\shsvcs.dll 15:57:02.0708 5416 ShellHWDetection - ok 15:57:02.0728 5416 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 15:57:02.0728 5416 SiSRaid2 - ok 15:57:02.0738 5416 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 15:57:02.0738 5416 SiSRaid4 - ok 15:57:02.0798 5416 SkypeUpdate (f07af60b152221472fbdb2fecec4896d) C:\Program Files (x86)\Skype\Updater\Updater.exe 15:57:02.0798 5416 SkypeUpdate - ok 15:57:02.0828 5416 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 15:57:02.0828 5416 Smb - ok 15:57:02.0858 5416 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe 15:57:02.0858 5416 SNMPTRAP - ok 15:57:02.0868 5416 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 15:57:02.0868 5416 spldr - ok 15:57:02.0918 5416 Spooler (f8e1fa03cb70d54a9892ac88b91d1e7b) C:\Windows\System32\spoolsv.exe 15:57:02.0938 5416 Spooler - ok 15:57:03.0118 5416 sppsvc (913d843498553a1bc8f8dbad6358e49f) C:\Windows\system32\sppsvc.exe 15:57:03.0188 5416 sppsvc - ok 15:57:03.0248 5416 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll 15:57:03.0258 5416 sppuinotify - ok 15:57:03.0328 5416 srv (2408c0366d96bcdf63e8f1c78e4a29c5) C:\Windows\system32\DRIVERS\srv.sys 15:57:03.0348 5416 srv - ok 15:57:03.0388 5416 srv2 (76548f7b818881b47d8d1ae1be9c11f8) C:\Windows\system32\DRIVERS\srv2.sys 15:57:03.0408 5416 srv2 - ok 15:57:03.0428 5416 srvnet (0af6e19d39c70844c5caa8fb0183c36e) C:\Windows\system32\DRIVERS\srvnet.sys 15:57:03.0438 5416 srvnet - ok 15:57:03.0478 5416 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll 15:57:03.0488 5416 SSDPSRV - ok 15:57:03.0508 5416 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll 15:57:03.0518 5416 SstpSvc - ok 15:57:03.0608 5416 Stereo Service (3d3816d395e92f7a3663c76a93157564) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe 15:57:03.0618 5416 Stereo Service - ok 15:57:03.0648 5416 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 15:57:03.0648 5416 stexstor - ok 15:57:03.0698 5416 stisvc (52d0e33b681bd0f33fdc08812fee4f7d) C:\Windows\System32\wiaservc.dll 15:57:03.0718 5416 stisvc - ok 15:57:03.0738 5416 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys 15:57:03.0738 5416 swenum - ok 15:57:03.0778 5416 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll 15:57:03.0788 5416 swprv - ok 15:57:03.0868 5416 SysMain (3c1284516a62078fb68f768de4f1a7be) C:\Windows\system32\sysmain.dll 15:57:03.0928 5416 SysMain - ok 15:57:04.0008 5416 TabletInputService (238935c3cf2854886dc7cbb2a0e2cc66) C:\Windows\System32\TabSvc.dll 15:57:04.0018 5416 TabletInputService - ok 15:57:04.0038 5416 TapiSrv (884264ac597b690c5707c89723bb8e7b) C:\Windows\System32\tapisrv.dll 15:57:04.0048 5416 TapiSrv - ok 15:57:04.0058 5416 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll 15:57:04.0058 5416 TBS - ok 15:57:04.0188 5416 Tcpip (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\drivers\tcpip.sys 15:57:04.0228 5416 Tcpip - ok 15:57:04.0358 5416 TCPIP6 (624c5b3aa4c99b3184bb922d9ece3ff0) C:\Windows\system32\DRIVERS\tcpip.sys 15:57:04.0378 5416 TCPIP6 - ok 15:57:04.0558 5416 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys 15:57:04.0558 5416 tcpipreg - ok 15:57:04.0578 5416 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 15:57:04.0578 5416 TDPIPE - ok 15:57:04.0608 5416 TDTCP (7518f7bcfd4b308abc9192bacaf6c970) C:\Windows\system32\drivers\tdtcp.sys 15:57:04.0608 5416 TDTCP - ok 15:57:04.0618 5416 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys 15:57:04.0628 5416 tdx - ok 15:57:04.0638 5416 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys 15:57:04.0648 5416 TermDD - ok 15:57:04.0688 5416 TermService (0f05ec2887bfe197ad82a13287d2f404) C:\Windows\System32\termsrv.dll 15:57:04.0718 5416 TermService - ok 15:57:04.0728 5416 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll 15:57:04.0738 5416 Themes - ok 15:57:04.0758 5416 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll 15:57:04.0758 5416 THREADORDER - ok 15:57:04.0778 5416 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll 15:57:04.0778 5416 TrkWks - ok 15:57:04.0818 5416 TrustedInstaller (840f7fb849f5887a49ba18c13b2da920) C:\Windows\servicing\TrustedInstaller.exe 15:57:04.0828 5416 TrustedInstaller - ok 15:57:04.0838 5416 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys 15:57:04.0838 5416 tssecsrv - ok 15:57:04.0868 5416 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys 15:57:04.0868 5416 tunnel - ok 15:57:04.0888 5416 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 15:57:04.0898 5416 uagp35 - ok 15:57:04.0918 5416 udfs (d47baead86c65d4f4069d7ce0a4edceb) C:\Windows\system32\DRIVERS\udfs.sys 15:57:04.0918 5416 udfs - ok 15:57:04.0938 5416 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe 15:57:04.0948 5416 UI0Detect - ok 15:57:04.0968 5416 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys 15:57:04.0978 5416 uliagpkx - ok 15:57:04.0988 5416 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys 15:57:04.0988 5416 umbus - ok 15:57:04.0988 5416 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 15:57:04.0988 5416 UmPass - ok 15:57:05.0018 5416 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll 15:57:05.0028 5416 upnphost - ok 15:57:05.0058 5416 usbccgp (7b6a127c93ee590e4d79a5f2a76fe46f) C:\Windows\system32\DRIVERS\usbccgp.sys 15:57:05.0058 5416 usbccgp - ok 15:57:05.0098 5416 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys 15:57:05.0108 5416 usbcir - ok 15:57:05.0118 5416 usbehci (92969ba5ac44e229c55a332864f79677) C:\Windows\system32\drivers\usbehci.sys 15:57:05.0128 5416 usbehci - ok 15:57:05.0158 5416 usbhub (e7df1cfd28ca86b35ef5add0735ceef3) C:\Windows\system32\DRIVERS\usbhub.sys 15:57:05.0158 5416 usbhub - ok 15:57:05.0178 5416 usbohci (f1bb1e55f1e7a65c5839ccc7b36d773e) C:\Windows\system32\drivers\usbohci.sys 15:57:05.0188 5416 usbohci - ok 15:57:05.0188 5416 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 15:57:05.0198 5416 usbprint - ok 15:57:05.0218 5416 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\drivers\USBSTOR.SYS 15:57:05.0218 5416 USBSTOR - ok 15:57:05.0238 5416 usbuhci (bc3070350a491d84b518d7cca9abd36f) C:\Windows\system32\drivers\usbuhci.sys 15:57:05.0238 5416 usbuhci - ok 15:57:05.0278 5416 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\System32\Drivers\usbvideo.sys 15:57:05.0288 5416 usbvideo - ok 15:57:05.0308 5416 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll 15:57:05.0318 5416 UxSms - ok 15:57:05.0358 5416 VaultSvc (156f6159457d0aa7e59b62681b56eb90) C:\Windows\system32\lsass.exe 15:57:05.0358 5416 VaultSvc - ok 15:57:05.0388 5416 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys 15:57:05.0388 5416 vdrvroot - ok 15:57:05.0418 5416 vds (44d73e0bbc1d3c8981304ba15135c2f2) C:\Windows\System32\vds.exe 15:57:05.0438 5416 vds - ok 15:57:05.0448 5416 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 15:57:05.0458 5416 vga - ok 15:57:05.0458 5416 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 15:57:05.0458 5416 VgaSave - ok 15:57:05.0478 5416 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys 15:57:05.0488 5416 vhdmp - ok 15:57:05.0498 5416 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys 15:57:05.0498 5416 viaide - ok 15:57:05.0508 5416 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys 15:57:05.0518 5416 volmgr - ok 15:57:05.0538 5416 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys 15:57:05.0548 5416 volmgrx - ok 15:57:05.0568 5416 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys 15:57:05.0578 5416 volsnap - ok 15:57:05.0608 5416 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 15:57:05.0618 5416 vsmraid - ok 15:57:05.0688 5416 VSS (787898bf9fb6d7bd87a36e2d95c899ba) C:\Windows\system32\vssvc.exe 15:57:05.0768 5416 VSS - ok 15:57:05.0848 5416 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 15:57:05.0848 5416 vwifibus - ok 15:57:05.0868 5416 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 15:57:05.0868 5416 vwififlt - ok 15:57:05.0898 5416 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll 15:57:05.0908 5416 W32Time - ok 15:57:05.0918 5416 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 15:57:05.0928 5416 WacomPen - ok 15:57:05.0948 5416 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 15:57:05.0948 5416 WANARP - ok 15:57:05.0948 5416 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 15:57:05.0958 5416 Wanarpv6 - ok 15:57:06.0028 5416 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe 15:57:06.0088 5416 WatAdminSvc - ok 15:57:06.0168 5416 wbengine (5ab1bb85bd8b5089cc5d64200dedae68) C:\Windows\system32\wbengine.exe 15:57:06.0198 5416 wbengine - ok 15:57:06.0258 5416 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll 15:57:06.0268 5416 WbioSrvc - ok 15:57:06.0318 5416 wcncsvc (dd1bae8ebfc653824d29ccf8c9054d68) C:\Windows\System32\wcncsvc.dll 15:57:06.0338 5416 wcncsvc - ok 15:57:06.0348 5416 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll 15:57:06.0358 5416 WcsPlugInService - ok 15:57:06.0408 5416 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 15:57:06.0418 5416 Wd - ok 15:57:06.0468 5416 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 15:57:06.0478 5416 Wdf01000 - ok 15:57:06.0508 5416 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 15:57:06.0518 5416 WdiServiceHost - ok 15:57:06.0518 5416 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll 15:57:06.0538 5416 WdiSystemHost - ok 15:57:06.0568 5416 WebClient (733006127f235be7c35354ebee7b9a7b) C:\Windows\System32\webclnt.dll 15:57:06.0578 5416 WebClient - ok 15:57:06.0608 5416 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll 15:57:06.0618 5416 Wecsvc - ok 15:57:06.0638 5416 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll 15:57:06.0638 5416 wercplsupport - ok 15:57:06.0668 5416 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll 15:57:06.0668 5416 WerSvc - ok 15:57:06.0728 5416 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 15:57:06.0738 5416 WfpLwf - ok 15:57:06.0758 5416 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 15:57:06.0758 5416 WIMMount - ok 15:57:06.0778 5416 WinDefend - ok 15:57:06.0778 5416 WinHttpAutoProxySvc - ok 15:57:06.0828 5416 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll 15:57:06.0838 5416 Winmgmt - ok 15:57:06.0928 5416 WinRM (41fbb751936b387f9179e7f03a74fe29) C:\Windows\system32\WsmSvc.dll 15:57:06.0978 5416 WinRM - ok 15:57:07.0088 5416 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll 15:57:07.0118 5416 Wlansvc - ok 15:57:07.0178 5416 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys 15:57:07.0178 5416 WmiAcpi - ok 15:57:07.0238 5416 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe 15:57:07.0248 5416 wmiApSrv - ok 15:57:07.0268 5416 WMPNetworkSvc - ok 15:57:07.0298 5416 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll 15:57:07.0308 5416 WPCSvc - ok 15:57:07.0328 5416 WPDBusEnum (2e57ddf2880a7e52e76f41c7e96d327b) C:\Windows\system32\wpdbusenum.dll 15:57:07.0338 5416 WPDBusEnum - ok 15:57:07.0358 5416 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 15:57:07.0358 5416 ws2ifsl - ok 15:57:07.0388 5416 wscsvc (8f9f3969933c02da96eb0f84576db43e) C:\Windows\System32\wscsvc.dll 15:57:07.0398 5416 wscsvc - ok 15:57:07.0398 5416 WSearch - ok 15:57:07.0518 5416 wuauserv (d9ef901dca379cfe914e9fa13b73b4c4) C:\Windows\system32\wuaueng.dll 15:57:07.0588 5416 wuauserv - ok 15:57:07.0668 5416 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\Windows\system32\drivers\WudfPf.sys 15:57:07.0668 5416 WudfPf - ok 15:57:07.0678 5416 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\Windows\system32\DRIVERS\WUDFRd.sys 15:57:07.0688 5416 WUDFRd - ok 15:57:07.0718 5416 wudfsvc (b551d6637aa0e132c18ac6e504f7b79b) C:\Windows\System32\WUDFSvc.dll 15:57:07.0728 5416 wudfsvc - ok 15:57:07.0748 5416 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll 15:57:07.0758 5416 WwanSvc - ok 15:57:07.0778 5416 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0 15:57:07.0798 5416 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - infected 15:57:07.0798 5416 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.c (0) 15:57:07.0808 5416 MBR (0x1B8) (739b36f7a373fc81121d831231b6d311) \Device\Harddisk1\DR1 15:57:07.0978 5416 \Device\Harddisk1\DR1 - ok 15:57:07.0998 5416 Boot (0x1200) (41614d3319a970e89e8acb2413dc4c75) \Device\Harddisk0\DR0\Partition0 15:57:07.0998 5416 \Device\Harddisk0\DR0\Partition0 - ok 15:57:07.0998 5416 Boot (0x1200) (adc6498066d30524e678cb650aab957e) \Device\Harddisk1\DR1\Partition0 15:57:07.0998 5416 \Device\Harddisk1\DR1\Partition0 - ok 15:57:07.0998 5416 ============================================================ 15:57:07.0998 5416 Scan finished 15:57:07.0998 5416 ============================================================ 15:57:08.0008 4516 Detected object count: 1 15:57:08.0008 4516 Actual detected object count: 1 15:57:25.0675 4516 \Device\Harddisk0\DR0\# - copied to quarantine 15:57:25.0675 4516 \Device\Harddisk0\DR0 - copied to quarantine 15:57:25.0725 4516 \Device\Harddisk0\DR0\TDLFS\cmd.dll - copied to quarantine 15:57:25.0755 4516 \Device\Harddisk0\DR0\TDLFS\cmd64.dll - copied to quarantine 15:57:25.0775 4516 \Device\Harddisk0\DR0\TDLFS\sub.dll - copied to quarantine 15:57:27.0935 4516 \Device\Harddisk0\DR0\TDLFS\subx.dll - copied to quarantine 15:57:27.0965 4516 \Device\Harddisk0\DR0\TDLFS\drv32 - copied to quarantine 15:57:27.0985 4516 \Device\Harddisk0\DR0\TDLFS\drv64 - copied to quarantine 15:57:28.0015 4516 \Device\Harddisk0\DR0\TDLFS\servers.dat - copied to quarantine 15:57:28.0015 4516 \Device\Harddisk0\DR0\TDLFS\config.ini - copied to quarantine 15:57:28.0015 4516 \Device\Harddisk0\DR0\TDLFS\ldr16 - copied to quarantine 15:57:28.0015 4516 \Device\Harddisk0\DR0\TDLFS\ldr32 - copied to quarantine 15:57:28.0045 4516 \Device\Harddisk0\DR0\TDLFS\ldr64 - copied to quarantine 15:57:28.0055 4516 \Device\Harddisk0\DR0\TDLFS\s - copied to quarantine 15:57:28.0055 4516 \Device\Harddisk0\DR0\TDLFS\ldrm - copied to quarantine 15:57:28.0055 4516 \Device\Harddisk0\DR0\TDLFS\u - copied to quarantine 15:57:28.0075 4516 \Device\Harddisk0\DR0\TDLFS\ph.dll - copied to quarantine 15:57:28.0105 4516 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - will be cured on reboot 15:57:28.0135 4516 \Device\Harddisk0\DR0 - ok 15:57:28.0145 4516 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - User select action: Cure 15:57:36.0075 2304 Deinitialize success

Conspire

Post #11July 21, 2012, 2:42 AM UTC

As long as it doesn't interfere with the scans, it shouldn't be a problem.

Please read through these instructions to familiarize yourself with what to expect when this tool runs

Refer to the ComboFix User's Guide

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT- Save ComboFix.exe to your Desktop

====================================================

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs

====================================================

Double click on combofix.exe & follow the prompts.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply for further review.

teNATEcious

Post #12July 23, 2012, 3:11 AM UTC

Ok. Well I must have screwed the pooch on this one. That, or my computer had more problems than I realized. I looked for all antivirus programs that I knew of, including Windows Defender. But since I didn't see it in my side-tray or right away in Control Panel, I assumed I didn't have it. ComboFix told me that it was enabled for the duration of the scan. I hope that didn't cause these issues. Now that it's done I can't even open Windows Defender due to some deleted registry keys. My Internet browsers were disabled along with some other programs. I couldn't even open the ComboFix log on my computer. Luckily it was already opened from the scan. Something about those registry keys being deleted. I couldn't reinstall FireFox after it was complete either. So I hope it's not too bad and you can still help me. So here it goes. ——- ComboFix 12-07-21.01 - teNATEcious 07/22/2012 19:30:47.1.8 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.16361.14421 [GMT -4:00] Running from: c:\users\[removed]\Downloads\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\svchost.exe . . ((((((((((((((((((((((((( Files Created from 2012-06-22 to 2012-07-22 ))))))))))))))))))))))))))))))) . . 2012-07-22 23:34 . 2012-07-22 23:34 ——– d—–w- c:\users\Default\AppData\Local\temp 2012-07-22 07:41 . 2012-05-04 11:00 366592 —-a-w- c:\windows\system32\qdvd.dll 2012-07-22 07:41 . 2012-05-04 09:59 514560 —-a-w- c:\windows\SysWow64\qdvd.dll 2012-07-21 08:37 . 2012-07-21 08:37 ——– d—–w- c:\windows\system32\SPReview 2012-07-21 08:36 . 2012-07-21 08:36 ——– d—–w- c:\windows\system32\EventProviders 2012-07-20 19:57 . 2012-07-20 19:57 ——– d—–w- C:\TDSSKiller_Quarantine 2012-07-20 18:02 . 2012-07-16 06:40 9133488 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FC812735-5592-4DAB-AFB4-8B260EB4B52B}\mpengine.dll 2012-07-20 16:52 . 2011-02-19 12:05 1139200 —-a-w- c:\windows\system32\FntCache.dll 2012-07-20 16:52 . 2011-02-19 12:04 902656 —-a-w- c:\windows\system32\d2d1.dll 2012-07-20 16:52 . 2011-02-19 06:30 739840 —-a-w- c:\windows\SysWow64\d2d1.dll 2012-07-20 16:41 . 2012-07-20 16:41 ——– d—–w- c:\program files (x86)\Microsoft.NET 2012-07-20 05:45 . 2000-05-11 05:00 90112 ——w- c:\windows\Updreg.EXE 2012-07-20 05:45 . 2010-09-14 17:53 25600 ——w- c:\windows\system32\THXCfg64.dll 2012-07-20 05:45 . 2010-07-21 20:51 11264 ——w- c:\windows\SysWow64\ResDefA.exe 2012-07-20 05:42 . 2012-07-20 05:42 ——– d—–w- c:\program files (x86)\ASUS 2012-07-20 05:18 . 2012-07-22 07:20 ——– d—–w- c:\program files\FSP 2012-07-20 04:50 . 2012-07-20 04:50 ——– d—–w- c:\users\UpdatusUser 2012-07-20 04:49 . 2012-07-20 04:50 ——– d—–w- c:\program files (x86)\NVIDIA Corporation 2012-07-20 04:17 . 2012-07-03 07:19 59701280 —-a-w- c:\windows\system32\MRT.exe 2012-07-19 22:55 . 2010-11-20 13:25 1975296 —-a-w- c:\windows\system32\CertEnroll.dll 2012-07-19 22:54 . 2010-11-20 13:27 424448 —-a-w- c:\windows\system32\rastls.dll 2012-07-19 22:53 . 2010-11-20 13:27 25600 —-a-w- c:\windows\system32\msyuv.dll 2012-07-19 22:52 . 2010-11-20 13:01 2560 —-a-w- c:\windows\system32\drivers\en-US\rdpwd.sys.mui 2012-07-19 22:52 . 2010-11-20 12:57 3072 —-a-w- c:\windows\system32\drivers\en-US\tsusbflt.sys.mui 2012-07-19 22:52 . 2010-11-20 13:11 6144 —-a-w- c:\windows\system32\drivers\en-US\IPMIDrv.sys.mui 2012-07-19 22:52 . 2010-11-20 13:10 4608 —-a-w- c:\windows\system32\drivers\en-US\kbdclass.sys.mui 2012-07-19 22:52 . 2010-11-20 13:26 399872 —-a-w- c:\windows\system32\dpx.dll 2012-07-19 22:52 . 2010-11-20 12:21 189952 —-a-w- c:\windows\SysWow64\wdscore.dll 2012-07-19 22:52 . 2010-11-20 12:21 189952 —-a-w- c:\windows\SysWow64\sqmapi.dll 2012-07-19 22:52 . 2010-11-20 12:21 363008 —-a-w- c:\windows\SysWow64\wbemcomn.dll 2012-07-19 22:52 . 2010-11-20 12:21 189952 —-a-w- c:\program files (x86)\Windows Portable Devices\sqmapi.dll 2012-07-19 22:52 . 2010-11-20 12:19 606208 —-a-w- c:\windows\SysWow64\wbem\fastprox.dll 2012-07-19 22:50 . 2010-11-20 13:27 529408 —-a-w- c:\windows\system32\wbemcomn.dll 2012-07-19 22:50 . 2010-11-20 13:27 244736 —-a-w- c:\program files\Windows Portable Devices\sqmapi.dll 2012-07-19 22:50 . 2010-11-20 13:27 244736 —-a-w- c:\windows\system32\sqmapi.dll 2012-07-19 20:47 . 2012-07-19 20:47 995328 —-a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll 2012-07-19 19:31 . 2011-03-03 13:29 1359976 —-a-w- c:\windows\system32\nvhdagenco642040.dll 2012-07-19 19:30 . 2012-07-22 23:35 ——– d—–w- c:\programdata\NVIDIA 2012-07-19 19:27 . 2012-07-19 19:27 ——– d—–w- c:\programdata\NVIDIA Corporation 2012-07-19 19:26 . 2011-04-27 11:21 1617512 —-a-w- c:\windows\system32\nvdispco6420120.dll 2012-07-19 19:26 . 2011-04-27 11:21 1359976 —-a-w- c:\windows\system32\nvgenco642040.dll 2012-07-19 19:24 . 2012-03-05 08:22 9732416 —-a-w- c:\windows\system32\nvwgf2umx.dll 2012-07-19 19:24 . 2012-03-05 08:22 7726912 —-a-w- c:\windows\SysWow64\nvwgf2um.dll 2012-07-19 19:24 . 2012-03-05 08:22 2677568 —-a-w- c:\windows\system32\nvapi64.dll 2012-07-19 19:24 . 2012-03-05 08:22 2316608 —-a-w- c:\windows\SysWow64\nvapi.dll 2012-07-19 19:24 . 2011-04-27 11:21 11240 —-a-w- c:\windows\system32\drivers\nvBridge.kmd 2012-07-19 19:24 . 2012-03-05 08:22 68928 —-a-w- c:\windows\system32\OpenCL.dll 2012-07-19 19:24 . 2012-03-05 08:22 61248 —-a-w- c:\windows\SysWow64\OpenCL.dll 2012-07-19 19:22 . 2012-07-19 19:28 ——– d—–w- C:\NvidiaLogs 2012-07-19 19:00 . 2012-07-19 19:03 ——– d—–w- c:\programdata\PMB Files 2012-07-19 19:00 . 2012-07-19 19:00 ——– d—–w- c:\program files (x86)\Pando Networks 2012-07-19 18:36 . 2012-07-19 18:36 ——– d—–w- c:\program files (x86)\Common Files\Skype 2012-07-19 18:36 . 2012-07-19 18:36 ——– d—–r- c:\program files (x86)\Skype 2012-07-19 18:36 . 2012-07-19 18:36 ——– d—–w- c:\programdata\Skype 2012-07-19 17:07 . 2012-06-12 03:08 3148800 —-a-w- c:\windows\system32\win32k.sys 2012-07-19 06:22 . 2012-07-19 02:38 ——– d—–w- c:\windows\Panther 2012-07-19 06:22 . 2012-07-21 09:02 ——– d—–w- C:\Boot 2012-07-19 04:30 . 2007-10-12 19:14 2006552 —-a-w- c:\windows\system32\D3DCompiler_36.dll 2012-07-19 04:29 . 2012-07-19 04:29 ——– d—–w- c:\program files (x86)\AGEIA Technologies 2012-07-19 04:29 . 2012-07-19 04:29 ——– d—–w- c:\windows\SysWow64\AGEIA 2012-07-19 04:29 . 2012-07-19 04:29 ——– d—–w- c:\program files (x86)\Common Files\Wise Installation Wizard 2012-07-19 04:24 . 2012-07-19 04:24 ——– d—–w- c:\program files (x86)\2K Games 2012-07-19 04:23 . 2012-07-20 05:45 ——– d–h–w- c:\program files (x86)\InstallShield Installation Information 2012-07-19 04:23 . 2012-07-19 04:29 ——– d—–w- C:\BDS 2012-07-19 04:23 . 2012-07-20 05:18 ——– d—–w- c:\program files (x86)\Common Files\InstallShield 2012-07-19 04:21 . 2012-07-03 16:21 355856 —-a-w- c:\windows\system32\drivers\aswSP.sys 2012-07-19 04:21 . 2012-07-03 16:21 25232 —-a-w- c:\windows\system32\drivers\aswFsBlk.sys 2012-07-19 04:21 . 2012-07-03 16:21 54072 —-a-w- c:\windows\system32\drivers\aswRdr2.sys 2012-07-19 04:21 . 2012-07-03 16:21 59728 —-a-w- c:\windows\system32\drivers\aswTdi.sys 2012-07-19 04:21 . 2012-07-03 16:21 958400 —-a-w- c:\windows\system32\drivers\aswSnx.sys 2012-07-19 04:21 . 2012-07-03 16:21 71064 —-a-w- c:\windows\system32\drivers\aswMonFlt.sys 2012-07-19 04:21 . 2012-07-03 16:21 285328 —-a-w- c:\windows\system32\aswBoot.exe 2012-07-19 04:20 . 2012-07-03 16:21 41224 —-a-w- c:\windows\avastSS.scr 2012-07-19 04:20 . 2012-07-03 16:21 227648 —-a-w- c:\windows\SysWow64\aswBoot.exe 2012-07-19 04:20 . 2012-07-19 04:20 ——– d—–w- c:\programdata\AVAST Software 2012-07-19 04:20 . 2012-07-19 04:20 ——– d—–w- c:\program files\AVAST Software 2012-07-19 04:08 . 2012-07-19 04:08 ——– d—–w- c:\program files\7-Zip 2012-07-19 04:04 . 2012-07-19 04:04 283200 —-a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2012-07-19 04:04 . 2012-07-19 04:04 ——– d—–w- c:\program files (x86)\DAEMON Tools Lite 2012-07-19 04:02 . 2012-01-04 10:44 509952 —-a-w- c:\windows\system32\ntshrui.dll 2012-07-19 04:01 . 2012-04-26 05:41 77312 —-a-w- c:\windows\system32\rdpwsx.dll 2012-07-19 04:00 . 2012-05-01 05:40 209920 —-a-w- c:\windows\system32\profsvc.dll 2012-07-19 03:59 . 2011-07-16 05:41 362496 —-a-w- c:\windows\system32\wow64win.dll 2012-07-19 03:56 . 2011-11-05 05:32 2048 —-a-w- c:\windows\system32\tzres.dll 2012-07-19 03:55 . 2011-11-17 06:41 1731920 —-a-w- c:\windows\system32\ntdll.dll 2012-07-19 03:55 . 2011-11-17 05:38 1292080 —-a-w- c:\windows\SysWow64\ntdll.dll 2012-07-19 03:49 . 2012-07-19 03:49 ——– d—–w- c:\windows\SysWow64\Wat 2012-07-19 03:49 . 2012-07-19 03:49 ——– d—–w- c:\windows\system32\Wat 2012-07-19 03:48 . 2012-03-01 06:46 23408 —-a-w- c:\windows\system32\drivers\fs_rec.sys 2012-07-19 03:48 . 2012-03-01 06:38 220672 —-a-w- c:\windows\system32\wintrust.dll 2012-07-19 03:48 . 2012-03-01 06:33 81408 —-a-w- c:\windows\system32\imagehlp.dll 2012-07-19 03:48 . 2012-03-01 06:28 5120 —-a-w- c:\windows\system32\wmi.dll 2012-07-19 03:48 . 2012-03-01 05:37 172544 —-a-w- c:\windows\SysWow64\wintrust.dll 2012-07-19 03:48 . 2012-03-01 05:33 159232 —-a-w- c:\windows\SysWow64\imagehlp.dll 2012-07-19 03:48 . 2012-03-01 05:29 5120 —-a-w- c:\windows\SysWow64\wmi.dll 2012-07-19 03:46 . 2012-05-31 16:25 279656 ——w- c:\windows\system32\MpSigStub.exe 2012-07-19 03:45 . 2012-07-19 03:45 ——– d—–w- c:\program files (x86)\Mozilla Maintenance Service 2012-07-19 03:45 . 2011-11-19 14:58 77312 —-a-w- c:\windows\system32\packager.dll 2012-07-19 03:45 . 2011-11-19 14:01 67072 —-a-w- c:\windows\SysWow64\packager.dll 2012-07-19 03:42 . 2012-02-17 06:38 1031680 —-a-w- c:\windows\system32\rdpcore.dll 2012-07-19 03:42 . 2012-02-17 05:34 826880 —-a-w- c:\windows\SysWow64\rdpcore.dll 2012-07-19 03:42 . 2012-02-17 04:57 23552 —-a-w- c:\windows\system32\drivers\tdtcp.sys 2012-07-19 03:40 . 2012-07-19 05:53 70344 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-07-19 03:40 . 2012-07-19 05:53 426184 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-07-19 03:40 . 2012-07-19 03:40 ——– d—–w- c:\windows\SysWow64\Macromed 2012-07-19 03:40 . 2012-07-19 03:40 ——– d—–w- c:\windows\system32\Macromed 2012-07-19 03:39 . 2012-06-02 22:19 2428952 —-a-w- c:\windows\system32\wuaueng.dll 2012-07-19 03:39 . 2012-06-02 22:19 57880 —-a-w- c:\windows\system32\wuauclt.exe 2012-07-19 03:39 . 2012-06-02 22:19 44056 —-a-w- c:\windows\system32\wups2.dll 2012-07-19 03:39 . 2012-06-02 22:15 2622464 —-a-w- c:\windows\system32\wucltux.dll 2012-07-19 03:39 . 2012-06-02 22:19 38424 —-a-w- c:\windows\system32\wups.dll 2012-07-19 03:39 . 2012-06-02 22:19 701976 —-a-w- c:\windows\system32\wuapi.dll 2012-07-19 03:39 . 2012-06-02 22:15 99840 —-a-w- c:\windows\system32\wudriver.dll 2012-07-19 03:39 . 2012-06-02 19:19 186752 —-a-w- c:\windows\system32\wuwebv.dll 2012-07-19 03:39 . 2012-06-02 19:15 36864 —-a-w- c:\windows\system32\wuapp.exe 2012-07-19 02:59 . 2012-07-20 20:45 ——– d-sh–w- c:\windows\Installer 2012-07-19 02:58 . 2012-07-20 04:50 ——– d—–w- c:\program files\NVIDIA Corporation 2012-07-19 02:44 . 2012-07-19 19:09 ——– d—–w- c:\program files (x86)\Intel 2012-07-19 02:44 . 2010-10-04 05:02 53248 —-a-r- c:\windows\SysWow64\CSVer.dll 2012-07-19 02:44 . 2012-07-19 02:44 ——– d—–w- C:\Intel 2012-07-19 02:38 . 2012-07-19 02:38 ——– d—–w- c:\users\teNATEcious 2012-07-19 02:38 . 2012-07-19 02:38 ——– d—–w- C:\Recovery . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-07-21 08:43 . 2009-07-14 02:36 175616 —-a-w- c:\windows\system32\msclmd.dll 2012-07-21 08:43 . 2009-07-14 02:36 152576 —-a-w- c:\windows\SysWow64\msclmd.dll 2012-07-20 06:18 . 2010-08-03 22:43 290920 —-a-w- c:\windows\system32\drivers\RtsUVStor.sys 2012-07-20 06:18 . 2009-11-25 18:21 7367200 —-a-w- c:\windows\SysWow64\RtsUVStoricon.dll 2012-07-20 05:18 . 2011-06-19 18:03 215040 —-a-w- c:\windows\SysWow64\StlFspAPI32.dll 2012-07-20 05:18 . 2011-06-19 18:03 249856 —-a-w- c:\windows\system32\StlFspAPI64.dll 2012-07-20 05:18 . 2011-06-19 18:03 1721576 —-a-w- c:\windows\system32\WdfCoInstaller01009.dll 2012-07-20 05:18 . 2011-06-19 18:03 66048 —-a-w- c:\windows\system32\fspadco.dll 2012-07-20 05:18 . 2011-06-19 18:03 53760 —-a-w- c:\windows\system32\drivers\fspad_win764.sys 2012-07-20 05:15 . 2011-04-22 06:17 107552 —-a-w- c:\windows\system32\RTNUninst64.dll 2012-07-20 05:15 . 2011-04-22 06:17 74272 —-a-w- c:\windows\system32\RtNicProp64.dll 2012-07-20 05:15 . 2011-04-22 06:17 471144 —-a-w- c:\windows\system32\drivers\Rt64win7.sys 2012-07-20 05:13 . 2011-10-07 14:49 2770944 —-a-w- c:\windows\system32\drivers\athrx.sys . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-07-03 4273976] "FLxHCIm64"="c:\program files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe" [2012-01-15 48128] "ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2011-12-22 318080] "ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2011-10-24 174720] "HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016] "THX TruStudio NB Settings"="c:\program files (x86)\Creative\THX TruStudio\THXNBSet\THXAudNB.exe" [2011-03-16 909312] "UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944] R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2011-01-24 283136] R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2012-07-20 79360] R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2012-07-20 79360] R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-07-14 113120] R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys [2012-07-20 290920] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-07-19 1255736] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-07-19 283200] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-07-03 71064] S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-03-05 2458944] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-03-04 382272] S3 FLxHCIc;Fresco Logic xHCI (USB3) Device Driver;c:\windows\system32\DRIVERS\FLxHCIc.sys [2012-01-10 219648] S3 FLxHCIh;Fresco Logic xHCI (USB3) Hub Device Driver;c:\windows\system32\DRIVERS\FLxHCIh.sys [2012-01-10 65024] S3 fspad_win764;Finger Sensing Pad Driver for Windows 2000/XP/Vista/Win7_win764;c:\windows\system32\DRIVERS\fspad_win764.sys [2012-07-20 53760] S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys [2012-07-20 32344] S3 MEIx64;Intel® Management Engine Interface ;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344] S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [2012-01-17 188224] S3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\DRIVERS\nvstusb.sys [2012-03-05 398656] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2012-07-20 471144] . . — Other Services/Drivers In Memory — . *NewlyCreated* - WS2IFSL . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2012-07-03 16:21 133400 —-a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-07-20 12446824] "THXCfg64"="c:\windows\system32\THXCfg64.dll" [2010-09-14 25600] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm TCP: DhcpNameServer = 192.168.1.254 FF - ProfilePath - c:\users\teNATEcious\AppData\Roaming\Mozilla\Firefox\Profiles\26nyywy9.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/finance . - - - - ORPHANS REMOVED - - - - . HKLM-Run-fspuip - c:\program files (x86)\FSP\fspuip.exe . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_257_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_257.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ———————— Other Running Processes ———————— . c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe c:\program files\AVAST Software\Avast\AvastSvc.exe c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe . ************************************************************************** . Completion time: 2012-07-22 19:39:31 - machine was rebooted ComboFix-quarantined-files.txt 2012-07-22 23:39 . Pre-Run: 420,138,332,160 bytes free Post-Run: 420,465,033,216 bytes free . - - End Of File - - 8414E2397FDD774FB18CB441E4DB5A9E ——- Thanks in advance for any help you can provide me.

Conspire

Post #13July 23, 2012, 3:42 AM UTC

Actually this is normal for the "marked for deletion" message to appear even after a reboot. Sometimes it takes more than twice to reboot the computer. So try rebooting it again will most likely to get things to normal. Let me know how your machine behaves.

The Windows Defender don't appear on the right hand side of system tray icon, it usually runs on the background.

Download TFC to your desktop

Close any open windows.
Double click the TFC icon to run the program
TFC will close all open programs itself in order to run,
Click the Start button to begin the process.
Allow TFC to run uninterrupted.
The program should not take long to finish it's job
Once its finished it should automatically reboot your machine,
if it doesn't, manually reboot to ensure a complete clean

===================================================

ESET Online Scanner
I'd like us to scan your machine with ESET OnlineScan

Note: If you are using Windows Vista/7, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.

Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
Click the [external image: Posted Image] button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
- Double click on the [external image: Posted Image] icon on your desktop.
Check [external image: Posted Image]
Click the [external image: Posted Image] button.
Accept any security warnings from your browser.
Check [external image: Posted Image]
Make sure that the option "Remove found threats" is Unchecked
Push the Start button.
ESET will then download updates for itself, install itself, and begin
scanning your computer. Please be patient as this can take some time.
When the scan completes, push [external image: Posted Image]
Push [external image: Posted Image], and save the file to your desktop using a unique name, such as MyEsetScan. Alternatively, look for report in C:\Program Files\ESET\ESET Online Scanner\log.txt. Include the contents of this report in your next reply.
Push the Back button.
Select Uninstall application on close check box and push [external image: Posted Image]

===================================================

Malwarebytes' Anti-Malware
Download Malwarebytes' Anti-Malware here and save to your desktop.

Double-click mbam-setup.exe and follow the prompts to install the program. (Note to Vista users, please right-click and select Run as Administrator.)
At the end, be sure a checkmark is placed next to:
- Update Malwarebytes' Anti-Malware
- Launch Malwarebytes' Anti-Malware
Then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform quick scan, then click Scan.
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected.
When completed, a log will open in Notepad. Please copy and paste the log back into your next reply

Note:

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
Or via the Logs tab when Malwarebytes' Anti-Malware is started.

Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so. Failure to reboot will prevent MBAM from removing all the malware.

===================================================

On your next reply please post :
ESET log
MBAM log
Report on machine behavior

Please STOP and let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

Conspire

Post #14July 27, 2012, 10:25 AM UTC

Are you still with us?

teNATEcious

Post #15July 30, 2012, 5:37 AM UTC

I'm sorry about that. I should have posted. I went home for the weekend as it was my parent's anniversary. I'm going to run the tests on your last post so we can get this issue resolved.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Malicious URL Blocked involving process \\.\globalroot\systemroot\svch

✨ Ask AI

Ask AI