My first BSOD... Windows 7 trying to fix myself [Solved]

Ok let me go find FRST. I saw this other log for TDSSkiller in the root. it has the same date but a couple of minutes earlier than the scan I pasted a little while ago. Thought I'd just run that by you. Here it is. 11:13:39.0503 6896 TDSS rootkit removing tool [removed] Aug 20 2012 17:30:03 11:13:41.0508 6896 ============================================================ 11:13:41.0508 6896 Current date / time: 2012/08/23 11:13:41.0508 11:13:41.0508 6896 SystemInfo: 11:13:41.0508 6896 11:13:41.0508 6896 OS Version: 6.1.7601 ServicePack: 1.0 11:13:41.0508 6896 Product type: Workstation 11:13:41.0508 6896 ComputerName: MANUEL-PC 11:13:41.0509 6896 UserName: Manuel 11:13:41.0509 6896 Windows directory: C:\Windows 11:13:41.0509 6896 System windows directory: C:\Windows 11:13:41.0509 6896 Running under WOW64 11:13:41.0509 6896 Processor architecture: Intel x64 11:13:41.0509 6896 Number of processors: 2 11:13:41.0509 6896 Page size: 0x1000 11:13:41.0509 6896 Boot type: Normal boot 11:13:41.0509 6896 ============================================================ 11:13:42.0060 6896 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x76C1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 11:13:42.0065 6896 ============================================================ 11:13:42.0065 6896 \Device\Harddisk0\DR0: 11:13:42.0065 6896 MBR partitions: 11:13:42.0066 6896 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x95800, BlocksNum 0x25C0000 11:13:42.0066 6896 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x2655800, BlocksNum 0x1AB6F970 11:13:42.0066 6896 ============================================================ 11:13:42.0102 6896 C: <-> \Device\Harddisk0\DR0\Partition2 11:13:42.0102 6896 ============================================================ 11:13:42.0102 6896 Initialize success 11:13:42.0102 6896 ============================================================ 11:13:50.0660 1420 ============================================================ 11:13:50.0660 1420 Scan started 11:13:50.0660 1420 Mode: Manual; 11:13:50.0660 1420 ============================================================ 11:13:55.0231 1420 ================ Scan system memory ======================== 11:13:55.0231 1420 System memory - ok 11:13:55.0231 1420 ================ Scan services ============================= 11:13:56.0885 1420 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 11:13:56.0888 1420 1394ohci - ok 11:13:56.0967 1420 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys 11:13:56.0970 1420 ACPI - ok 11:13:57.0546 1420 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 11:13:57.0547 1420 AcpiPmi - ok 11:13:58.0151 1420 [ A9D3B95E8466BD58EEB8A1154654E162 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 11:13:58.0154 1420 AdobeFlashPlayerUpdateSvc - ok 11:13:58.0312 1420 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys 11:13:58.0317 1420 adp94xx - ok 11:13:58.0439 1420 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys 11:13:58.0446 1420 adpahci - ok 11:13:58.0546 1420 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys 11:13:58.0549 1420 adpu320 - ok 11:13:58.0825 1420 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 11:13:58.0826 1420 AeLookupSvc - ok 11:13:59.0460 1420 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys 11:13:59.0467 1420 AFD - ok 11:13:59.0555 1420 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys 11:13:59.0556 1420 agp440 - ok 11:13:59.0697 1420 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe 11:13:59.0699 1420 ALG - ok 11:13:59.0807 1420 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys 11:13:59.0808 1420 aliide - ok 11:13:59.0862 1420 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys 11:13:59.0865 1420 amdide - ok 11:13:59.0919 1420 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 11:14:00.0019 1420 AmdK8 - ok 11:14:00.0054 1420 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 11:14:00.0056 1420 AmdPPM - ok 11:14:00.0190 1420 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys 11:14:00.0192 1420 amdsata - ok 11:14:00.0359 1420 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys 11:14:00.0362 1420 amdsbs - ok 11:14:00.0503 1420 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys 11:14:00.0503 1420 amdxata - ok 11:14:00.0787 1420 [ 1412E9A88FE1F7E35CE6058A2EF03664 ] ApfiltrService C:\Windows\system32\DRIVERS\Apfiltr.sys 11:14:00.0812 1420 ApfiltrService - ok 11:14:01.0223 1420 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys 11:14:01.0225 1420 AppID - ok 11:14:01.0257 1420 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll 11:14:01.0258 1420 AppIDSvc - ok 11:14:01.0435 1420 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll 11:14:01.0436 1420 Appinfo - ok 11:14:01.0936 1420 [ ACB095E7E1663F1B83A41C22C5D75F90 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 11:14:01.0937 1420 Apple Mobile Device - ok 11:14:02.0018 1420 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys 11:14:02.0019 1420 arc - ok 11:14:02.0048 1420 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys 11:14:02.0050 1420 arcsas - ok 11:14:02.0176 1420 aspnet_state - ok 11:14:02.0691 1420 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 11:14:02.0693 1420 AsyncMac - ok 11:14:03.0935 1420 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys 11:14:03.0936 1420 atapi - ok 11:14:04.0082 1420 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 11:14:04.0086 1420 AudioEndpointBuilder - ok 11:14:04.0103 1420 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll 11:14:04.0107 1420 AudioSrv - ok 11:14:05.0974 1420 [ D67719BCFDE5798F5C30D14EFED3BCAF ] AVGIDSAgent C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe 11:14:06.0110 1420 AVGIDSAgent - ok 11:14:07.0335 1420 [ 1B2E9FCDC26DC7C81D4131430E2DC936 ] AVGIDSDriver C:\Windows\system32\DRIVERS\avgidsdrivera.sys 11:14:07.0339 1420 AVGIDSDriver - ok 11:14:07.0723 1420 [ 0F293406F64B48D5D2F0D3A1117F3A83 ] AVGIDSFilter C:\Windows\system32\DRIVERS\avgidsfiltera.sys 11:14:07.0724 1420 AVGIDSFilter - ok 11:14:07.0789 1420 [ CFFC3A4A638F462E0561CB368B9A7A3A ] AVGIDSHA C:\Windows\system32\DRIVERS\avgidsha.sys 11:14:07.0790 1420 AVGIDSHA - ok 11:14:08.0122 1420 [ 59955B4C288DD2A8B9FD2CD5158355C5 ] Avgldx64 C:\Windows\system32\DRIVERS\avgldx64.sys 11:14:08.0125 1420 Avgldx64 - ok 11:14:08.0604 1420 [ A6AEC362AAE5E2DDA7445E7690CB0F33 ] Avgmfx64 C:\Windows\system32\DRIVERS\avgmfx64.sys 11:14:08.0605 1420 Avgmfx64 - ok 11:14:09.0081 1420 [ 645C7F0A0E39758A0024A9B1748273C0 ] Avgrkx64 C:\Windows\system32\DRIVERS\avgrkx64.sys 11:14:09.0082 1420 Avgrkx64 - ok 11:14:09.0828 1420 [ 1BEE674AD792B1C63BB0DAC5FA724B23 ] Avgtdia C:\Windows\system32\DRIVERS\avgtdia.sys 11:14:09.0830 1420 Avgtdia - ok 11:14:10.0226 1420 [ E964EA70249DDE1343C8F694B52575EE ] avgtp C:\Windows\system32\drivers\avgtpx64.sys 11:14:10.0226 1420 avgtp - ok 11:14:10.0635 1420 [ EA1145DEBCD508FD25BD1E95C4346929 ] avgwd C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe 11:14:10.0637 1420 avgwd - ok 11:14:10.0871 1420 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll 11:14:10.0873 1420 AxInstSV - ok 11:14:11.0014 1420 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys 11:14:11.0020 1420 b06bdrv - ok 11:14:11.0092 1420 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 11:14:11.0096 1420 b57nd60a - ok 11:14:11.0204 1420 [ 01A24B415926BB5F772DBE12459D97DE ] BBSvc C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE 11:14:11.0207 1420 BBSvc - ok 11:14:11.0305 1420 [ 785DE7ABDA13309D6065305542829E76 ] BBUpdate C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE 11:14:11.0308 1420 BBUpdate - ok 11:14:11.0350 1420 [ E001DD475A7C27EBE5A0DB45C11BAD71 ] BCM42RLY C:\Windows\system32\drivers\BCM42RLY.sys 11:14:11.0350 1420 BCM42RLY - ok 11:14:11.0539 1420 [ 37394D3553E220FB732C21E217E1BD8B ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys 11:14:11.0559 1420 BCM43XX - ok 11:14:11.0628 1420 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll 11:14:11.0630 1420 BDESVC - ok 11:14:11.0655 1420 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys 11:14:11.0656 1420 Beep - ok 11:14:11.0743 1420 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll 11:14:11.0751 1420 BFE - ok 11:14:11.0794 1420 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\system32\qmgr.dll 11:14:11.0804 1420 BITS - ok 11:14:11.0870 1420 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 11:14:11.0871 1420 blbdrive - ok 11:14:12.0016 1420 [ A065F048E9E23E6C026A7BB548D126A7 ] Bonjour Service C:\Program Files (x86)\Bonjour\mDNSResponder.exe 11:14:12.0019 1420 Bonjour Service - ok 11:14:12.0088 1420 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 11:14:12.0089 1420 bowser - ok 11:14:12.0258 1420 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys 11:14:12.0259 1420 BrFiltLo - ok 11:14:12.0282 1420 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys 11:14:12.0283 1420 BrFiltUp - ok 11:14:12.0388 1420 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys 11:14:12.0390 1420 BridgeMP - ok 11:14:12.0483 1420 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll 11:14:12.0486 1420 Browser - ok 11:14:12.0509 1420 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys 11:14:12.0514 1420 Brserid - ok 11:14:12.0547 1420 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 11:14:12.0549 1420 BrSerWdm - ok 11:14:12.0593 1420 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 11:14:12.0595 1420 BrUsbMdm - ok 11:14:12.0606 1420 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 11:14:12.0607 1420 BrUsbSer - ok 11:14:12.0627 1420 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys 11:14:12.0630 1420 BTHMODEM - ok 11:14:12.0688 1420 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll 11:14:12.0690 1420 bthserv - ok 11:14:12.0753 1420 catchme - ok 11:14:12.0792 1420 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 11:14:12.0794 1420 cdfs - ok 11:14:12.0864 1420 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\drivers\cdrom.sys 11:14:12.0866 1420 cdrom - ok 11:14:12.0937 1420 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll 11:14:12.0939 1420 CertPropSvc - ok 11:14:12.0994 1420 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys 11:14:12.0995 1420 circlass - ok 11:14:13.0049 1420 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys 11:14:13.0052 1420 CLFS - ok 11:14:13.0492 1420 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 11:14:13.0510 1420 clr_optimization_v2.0.50727_32 - ok 11:14:13.0588 1420 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 11:14:13.0611 1420 clr_optimization_v2.0.50727_64 - ok 11:14:13.0746 1420 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 11:14:13.0829 1420 clr_optimization_v4.0.30319_32 - ok 11:14:13.0985 1420 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 11:14:13.0988 1420 clr_optimization_v4.0.30319_64 - ok 11:14:14.0076 1420 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 11:14:14.0077 1420 CmBatt - ok 11:14:14.0108 1420 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys 11:14:14.0110 1420 cmdide - ok 11:14:14.0220 1420 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys 11:14:14.0224 1420 CNG - ok 11:14:14.0299 1420 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 11:14:14.0299 1420 Compbatt - ok 11:14:14.0348 1420 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 11:14:14.0349 1420 CompositeBus - ok 11:14:14.0372 1420 COMSysApp - ok 11:14:14.0469 1420 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys 11:14:14.0472 1420 crcdisk - ok 11:14:15.0321 1420 [ 4F5414602E2544A4554D95517948B705 ] CryptSvc C:\Windows\system32\cryptsvc.dll 11:14:15.0323 1420 CryptSvc - ok 11:14:15.0405 1420 [ ED5CF92396A62F4C15110DCDB5E854D9 ] CtClsFlt C:\Windows\system32\DRIVERS\CtClsFlt.sys 11:14:15.0407 1420 CtClsFlt - ok 11:14:15.0491 1420 [ 76E02DB615A03801D698199A2BC4A06A ] dc3d C:\Windows\system32\DRIVERS\dc3d.sys 11:14:15.0492 1420 dc3d - ok 11:14:15.0620 1420 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll 11:14:15.0625 1420 DcomLaunch - ok 11:14:15.0671 1420 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll 11:14:15.0675 1420 defragsvc - ok 11:14:15.0737 1420 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 11:14:15.0739 1420 DfsC - ok 11:14:15.0799 1420 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll 11:14:15.0802 1420 Dhcp - ok 11:14:15.0837 1420 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys 11:14:15.0838 1420 discache - ok 11:14:15.0878 1420 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys 11:14:15.0880 1420 Disk - ok 11:14:15.0946 1420 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll 11:14:15.0948 1420 Dnscache - ok 11:14:16.0068 1420 [ 0840ABBBDF438691EE65A20040635CBE ] DockLoginService C:\Program Files\Dell\DellDock\DockLogin.exe 11:14:16.0069 1420 DockLoginService - ok 11:14:16.0140 1420 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll 11:14:16.0144 1420 dot3svc - ok 11:14:16.0188 1420 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll 11:14:16.0190 1420 DPS - ok 11:14:16.0243 1420 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 11:14:16.0244 1420 drmkaud - ok 11:14:16.0373 1420 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 11:14:16.0380 1420 DXGKrnl - ok 11:14:16.0810 1420 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll 11:14:16.0812 1420 EapHost - ok 11:14:17.0099 1420 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys 11:14:17.0219 1420 ebdrv - ok 11:14:17.0273 1420 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe 11:14:17.0275 1420 EFS - ok 11:14:17.0549 1420 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 11:14:17.0746 1420 ehRecvr - ok 11:14:17.0859 1420 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe 11:14:17.0861 1420 ehSched - ok 11:14:17.0952 1420 [ 8D18A680BDAB2ACA00506FE6F8AEF81A ] ElbyCDFL C:\Windows\system32\Drivers\ElbyCDFL.sys 11:14:17.0953 1420 ElbyCDFL - ok 11:14:18.0024 1420 [ EA2FF60FCCE3B9FFE0BD77658B88512D ] ElbyCDIO C:\Windows\system32\Drivers\ElbyCDIO.sys 11:14:18.0024 1420 ElbyCDIO - ok 11:14:18.0078 1420 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys 11:14:18.0085 1420 elxstor - ok 11:14:18.0238 1420 [ 1E345F2A2D95DA3190596E691CDE9342 ] EPSON_PM_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE 11:14:18.0240 1420 EPSON_PM_RPCV4_01 - ok 11:14:18.0340 1420 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys 11:14:18.0341 1420 ErrDev - ok 11:14:18.0900 1420 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll 11:14:18.0903 1420 EventSystem - ok 11:14:18.0953 1420 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys 11:14:18.0956 1420 exfat - ok 11:14:19.0047 1420 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys 11:14:19.0050 1420 fastfat - ok 11:14:19.0176 1420 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe 11:14:19.0185 1420 Fax - ok 11:14:19.0217 1420 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys 11:14:19.0218 1420 fdc - ok 11:14:19.0391 1420 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll 11:14:19.0392 1420 fdPHost - ok 11:14:19.0416 1420 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll 11:14:19.0417 1420 FDResPub - ok 11:14:19.0477 1420 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 11:14:19.0477 1420 FileInfo - ok 11:14:19.0501 1420 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 11:14:19.0502 1420 Filetrace - ok 11:14:19.0691 1420 [ F76D04F7413B07DAA029F6520B64B4E8 ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe 11:14:19.0699 1420 FLEXnet Licensing Service - ok 11:14:19.0762 1420 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 11:14:19.0763 1420 flpydisk - ok 11:14:19.0823 1420 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 11:14:19.0825 1420 FltMgr - ok 11:14:20.0307 1420 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll 11:14:20.0339 1420 FontCache - ok 11:14:20.0829 1420 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 11:14:20.0837 1420 FontCache3.0.0.0 - ok 11:14:20.0864 1420 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 11:14:20.0866 1420 FsDepends - ok 11:14:20.0938 1420 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 11:14:20.0939 1420 Fs_Rec - ok 11:14:21.0024 1420 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 11:14:21.0027 1420 fvevol - ok 11:14:21.0352 1420 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys 11:14:21.0354 1420 gagp30kx - ok 11:14:21.0497 1420 [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 11:14:21.0497 1420 GEARAspiWDM - ok 11:14:21.0543 1420 [ D3316F6E3C011435F36E3D6E49B3196C ] GoToAssist C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe 11:14:21.0545 1420 GoToAssist - ok 11:14:21.0665 1420 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll 11:14:21.0673 1420 gpsvc - ok 11:14:21.0854 1420 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 11:14:21.0855 1420 gupdate - ok 11:14:21.0877 1420 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 11:14:21.0878 1420 gupdatem - ok 11:14:22.0262 1420 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe 11:14:22.0284 1420 gusvc - ok 11:14:22.0697 1420 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 11:14:22.0698 1420 hcw85cir - ok 11:14:22.0756 1420 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys 11:14:22.0758 1420 HDAudBus - ok 11:14:22.0803 1420 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys 11:14:22.0804 1420 HidBatt - ok 11:14:22.0819 1420 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys 11:14:22.0821 1420 HidBth - ok 11:14:22.0864 1420 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys 11:14:22.0865 1420 HidIr - ok 11:14:22.0910 1420 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll 11:14:22.0911 1420 hidserv - ok 11:14:23.0073 1420 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 11:14:23.0074 1420 HidUsb - ok 11:14:23.0118 1420 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll 11:14:23.0120 1420 hkmsvc - ok 11:14:23.0355 1420 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll 11:14:23.0359 1420 HomeGroupListener - ok 11:14:23.0431 1420 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 11:14:23.0433 1420 HomeGroupProvider - ok 11:14:23.0569 1420 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 11:14:23.0571 1420 HpSAMD - ok 11:14:23.0766 1420 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys 11:14:23.0771 1420 HTTP - ok 11:14:23.0870 1420 hwdatacard - ok 11:14:24.0011 1420 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 11:14:24.0011 1420 hwpolicy - ok 11:14:24.0082 1420 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 11:14:24.0084 1420 i8042prt - ok 11:14:24.0222 1420 [ 7548066DF68A8A1A56B043359F915F37 ] IAANTMON C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe 11:14:24.0248 1420 IAANTMON - ok 11:14:24.0348 1420 [ 4F6FB2CDBDEEFC47E7D2066E78254580 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys 11:14:24.0352 1420 iaStor - ok 11:14:24.0788 1420 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 11:14:24.0793 1420 iaStorV - ok 11:14:24.0876 1420 [ DAF66902F08796F9C694901660E5A64A ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe 11:14:24.0878 1420 IDriverT - ok 11:14:25.0038 1420 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 11:14:25.0262 1420 idsvc - ok 11:14:25.0892 1420 [ BABD5F9B2BCC82CE556A0BAF1AE208A7 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys 11:14:26.0107 1420 igfx - ok 11:14:26.0142 1420 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys 11:14:26.0144 1420 iirsp - ok 11:14:26.0227 1420 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll 11:14:26.0237 1420 IKEEXT - ok 11:14:26.0328 1420 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys 11:14:26.0329 1420 intelide - ok 11:14:26.0654 1420 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 11:14:26.0655 1420 intelppm - ok 11:14:26.0695 1420 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll 11:14:26.0697 1420 IPBusEnum - ok 11:14:26.0762 1420 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 11:14:26.0763 1420 IpFilterDriver - ok 11:14:26.0841 1420 [ A34A587FFFD45FA649FBA6D03784D257 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 11:14:26.0845 1420 iphlpsvc - ok 11:14:26.0887 1420 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 11:14:26.0889 1420 IPMIDRV - ok 11:14:27.0035 1420 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 11:14:27.0038 1420 IPNAT - ok 11:14:27.0107 1420 [ DC115BD67A913F71A77C7C72C1E64C0A ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 11:14:27.0114 1420 iPod Service - ok 11:14:27.0150 1420 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 11:14:27.0150 1420 IRENUM - ok 11:14:27.0650 1420 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys 11:14:27.0651 1420 isapnp - ok 11:14:27.0768 1420 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 11:14:27.0772 1420 iScsiPrt - ok 11:14:27.0961 1420 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 11:14:27.0962 1420 kbdclass - ok 11:14:28.0517 1420 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 11:14:28.0518 1420 kbdhid - ok 11:14:28.0539 1420 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe 11:14:28.0541 1420 KeyIso - ok 11:14:28.0803 1420 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 11:14:28.0805 1420 KSecDD - ok 11:14:28.0862 1420 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 11:14:28.0865 1420 KSecPkg - ok 11:14:29.0179 1420 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 11:14:29.0180 1420 ksthunk - ok 11:14:29.0271 1420 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll 11:14:29.0277 1420 KtmRm - ok 11:14:29.0488 1420 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll 11:14:29.0493 1420 LanmanServer - ok 11:14:29.0556 1420 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 11:14:29.0558 1420 LanmanWorkstation - ok 11:14:29.0607 1420 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 11:14:29.0608 1420 lltdio - ok 11:14:29.0688 1420 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll 11:14:29.0694 1420 lltdsvc - ok 11:14:29.0741 1420 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll 11:14:29.0742 1420 lmhosts - ok 11:14:29.0790 1420 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys 11:14:29.0792 1420 LSI_FC - ok 11:14:29.0873 1420 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys 11:14:29.0875 1420 LSI_SAS - ok 11:14:29.0935 1420 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys 11:14:29.0937 1420 LSI_SAS2 - ok 11:14:29.0966 1420 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys 11:14:29.0967 1420 LSI_SCSI - ok 11:14:29.0987 1420 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys 11:14:29.0988 1420 luafv - ok 11:14:30.0032 1420 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 11:14:30.0048 1420 Mcx2Svc - ok 11:14:30.0118 1420 [ 11F714F85530A2BD134074DC30E99FCA ] MDM C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE 11:14:30.0121 1420 MDM - ok 11:14:30.0151 1420 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys 11:14:30.0152 1420 megasas - ok 11:14:30.0179 1420 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys 11:14:30.0183 1420 MegaSR - ok 11:14:30.0219 1420 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll 11:14:30.0221 1420 MMCSS - ok 11:14:30.0247 1420 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys 11:14:30.0249 1420 Modem - ok 11:14:30.0293 1420 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys 11:14:30.0294 1420 monitor - ok 11:14:30.0319 1420 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 11:14:30.0320 1420 mouclass - ok 11:14:30.0348 1420 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 11:14:30.0349 1420 mouhid - ok 11:14:30.0496 1420 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 11:14:30.0497 1420 mountmgr - ok 11:14:30.0541 1420 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys 11:14:30.0543 1420 mpio - ok 11:14:30.0584 1420 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 11:14:30.0585 1420 mpsdrv - ok 11:14:30.0688 1420 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll 11:14:30.0695 1420 MpsSvc - ok 11:14:30.0841 1420 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 11:14:30.0880 1420 MRxDAV - ok 11:14:30.0921 1420 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 11:14:30.0923 1420 mrxsmb - ok11:14:31.0126 1420 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 11:14:31.0128 1420 mrxsmb10 - ok 11:14:31.0189 1420 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 11:14:31.0191 1420 mrxsmb20 - ok 11:14:31.0282 1420 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys 11:14:31.0284 1420 msahci - ok 11:14:31.0315 1420 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys 11:14:31.0317 1420 msdsm - ok 11:14:31.0381 1420 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe 11:14:31.0383 1420 MSDTC - ok 11:14:31.0456 1420 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys 11:14:31.0457 1420 Msfs - ok 11:14:31.0484 1420 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 11:14:31.0485 1420 mshidkmdf - ok 11:14:31.0528 1420 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 11:14:31.0529 1420 msisadrv - ok 11:14:31.0680 1420 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 11:14:31.0683 1420 MSiSCSI - ok 11:14:31.0689 1420 msiserver - ok 11:14:31.0740 1420 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 11:14:31.0741 1420 MSKSSRV - ok 11:14:31.0776 1420 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 11:14:31.0777 1420 MSPCLOCK - ok 11:14:31.0784 1420 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 11:14:31.0785 1420 MSPQM - ok 11:14:31.0832 1420 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 11:14:31.0835 1420 MsRPC - ok 11:14:31.0933 1420 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 11:14:31.0934 1420 mssmbios - ok 11:14:31.0996 1420 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 11:14:31.0997 1420 MSTEE - ok 11:14:32.0005 1420 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys 11:14:32.0007 1420 MTConfig - ok 11:14:32.0021 1420 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys 11:14:32.0022 1420 Mup - ok 11:14:32.0117 1420 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll 11:14:32.0151 1420 napagent - ok 11:14:32.0246 1420 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 11:14:32.0250 1420 NativeWifiP - ok 11:14:32.0322 1420 [ 79B47FD40D9A817E932F9D26FAC0A81C ] NDIS C:\Windows\system32\drivers\ndis.sys 11:14:32.0332 1420 NDIS - ok 11:14:32.0369 1420 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 11:14:32.0374 1420 NdisCap - ok 11:14:32.0512 1420 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 11:14:32.0514 1420 NdisTapi - ok 11:14:32.0576 1420 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 11:14:32.0577 1420 Ndisuio - ok 11:14:32.0637 1420 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 11:14:32.0639 1420 NdisWan - ok 11:14:32.0717 1420 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 11:14:32.0720 1420 NDProxy - ok 11:14:32.0774 1420 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 11:14:32.0776 1420 NetBIOS - ok 11:14:32.0841 1420 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 11:14:32.0844 1420 NetBT - ok 11:14:32.0873 1420 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe 11:14:32.0874 1420 Netlogon - ok 11:14:32.0906 1420 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll 11:14:32.0910 1420 Netman - ok 11:14:32.0943 1420 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll 11:14:32.0946 1420 netprofm - ok 11:14:33.0047 1420 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 11:14:33.0075 1420 NetTcpPortSharing - ok 11:14:33.0128 1420 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys 11:14:33.0130 1420 nfrd960 - ok 11:14:33.0210 1420 [ 1EE99A89CC788ADA662441D1E9830529 ] NlaSvc C:\Windows\System32\nlasvc.dll 11:14:33.0213 1420 NlaSvc - ok 11:14:33.0295 1420 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys 11:14:33.0297 1420 Npfs - ok 11:14:33.0331 1420 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll 11:14:33.0333 1420 nsi - ok 11:14:33.0359 1420 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 11:14:33.0360 1420 nsiproxy - ok 11:14:33.0524 1420 [ A2F74975097F52A00745F9637451FDD8 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 11:14:33.0535 1420 Ntfs - ok 11:14:33.0642 1420 [ 4C08A14D04E62963E96E0BB57BBC953B ] NuidFltr C:\Windows\system32\DRIVERS\NuidFltr.sys 11:14:33.0644 1420 NuidFltr - ok 11:14:33.0671 1420 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys 11:14:33.0672 1420 Null - ok 11:14:33.0702 1420 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys 11:14:33.0705 1420 nvraid - ok 11:14:33.0755 1420 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys 11:14:33.0758 1420 nvstor - ok 11:14:33.0783 1420 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 11:14:33.0785 1420 nv_agp - ok 11:14:33.0825 1420 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 11:14:33.0861 1420 ohci1394 - ok 11:14:33.0900 1420 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 11:14:33.0902 1420 ose - ok 11:14:33.0948 1420 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 11:14:33.0953 1420 p2pimsvc - ok 11:14:33.0996 1420 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll 11:14:34.0003 1420 p2psvc - ok 11:14:34.0044 1420 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys 11:14:34.0047 1420 Parport - ok 11:14:34.0084 1420 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys 11:14:34.0085 1420 partmgr - ok 11:14:34.0117 1420 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll 11:14:34.0120 1420 PcaSvc - ok 11:14:34.0166 1420 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys 11:14:34.0167 1420 pci - ok 11:14:34.0212 1420 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys 11:14:34.0213 1420 pciide - ok 11:14:34.0245 1420 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys 11:14:34.0249 1420 pcmcia - ok 11:14:34.0292 1420 [ AF7CE12C4F3DC8CB2B07685C916BBCFE ] pcouffin C:\Windows\system32\Drivers\pcouffin.sys 11:14:34.0294 1420 pcouffin - ok 11:14:34.0314 1420 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys 11:14:34.0315 1420 pcw - ok 11:14:34.0343 1420 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys 11:14:34.0348 1420 PEAUTH - ok 11:14:34.0627 1420 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe 11:14:34.0738 1420 PerfHost - ok 11:14:34.0931 1420 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll 11:14:34.0985 1420 pla - ok 11:14:35.0097 1420 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 11:14:35.0101 1420 PlugPlay - ok 11:14:35.0141 1420 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 11:14:35.0153 1420 PNRPAutoReg - ok 11:14:35.0204 1420 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 11:14:35.0207 1420 PNRPsvc - ok 11:14:35.0268 1420 [ B8D8EC78B0F9ED8E220506181274F3D3 ] Point64 C:\Windows\system32\DRIVERS\point64.sys 11:14:35.0270 1420 Point64 - ok 11:14:35.0317 1420 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 11:14:35.0324 1420 PolicyAgent - ok 11:14:35.0356 1420 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll 11:14:35.0359 1420 Power - ok 11:14:35.0398 1420 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 11:14:35.0400 1420 PptpMiniport - ok 11:14:35.0414 1420 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys 11:14:35.0416 1420 Processor - ok 11:14:35.0451 1420 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll 11:14:35.0454 1420 ProfSvc - ok 11:14:35.0484 1420 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe 11:14:35.0485 1420 ProtectedStorage - ok 11:14:35.0563 1420 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys 11:14:35.0570 1420 Psched - ok 11:14:35.0618 1420 [ A6A7AD767BF5141665F5C675F671B3E1 ] PSI_SVC_2 c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe 11:14:35.0620 1420 PSI_SVC_2 - ok 11:14:35.0653 1420 [ 4712CC14E720ECCCC0AA16949D18AAF1 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys 11:14:35.0654 1420 PxHlpa64 - ok 11:14:35.0774 1420 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys 11:14:35.0825 1420 ql2300 - ok 11:14:35.0856 1420 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys 11:14:35.0858 1420 ql40xx - ok 11:14:35.0896 1420 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll 11:14:35.0900 1420 QWAVE - ok 11:14:35.0933 1420 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 11:14:35.0934 1420 QWAVEdrv - ok 11:14:35.0953 1420 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 11:14:35.0955 1420 RasAcd - ok 11:14:36.0007 1420 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 11:14:36.0008 1420 RasAgileVpn - ok 11:14:36.0039 1420 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll 11:14:36.0042 1420 RasAuto - ok 11:14:36.0084 1420 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 11:14:36.0087 1420 Rasl2tp - ok 11:14:36.0145 1420 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll 11:14:36.0150 1420 RasMan - ok 11:14:36.0237 1420 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 11:14:36.0238 1420 RasPppoe - ok 11:14:36.0262 1420 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 11:14:36.0263 1420 RasSstp - ok 11:14:36.0304 1420 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 11:14:36.0309 1420 rdbss - ok 11:14:36.0320 1420 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys 11:14:36.0322 1420 rdpbus - ok 11:14:36.0350 1420 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 11:14:36.0350 1420 RDPCDD - ok 11:14:36.0406 1420 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 11:14:36.0407 1420 RDPENCDD - ok 11:14:36.0554 1420 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 11:14:36.0555 1420 RDPREFMP - ok 11:14:36.0622 1420 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 11:14:36.0625 1420 RDPWD - ok 11:14:36.0683 1420 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 11:14:36.0686 1420 rdyboost - ok 11:14:36.0720 1420 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll 11:14:36.0722 1420 RemoteAccess - ok 11:14:36.0758 1420 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll 11:14:36.0762 1420 RemoteRegistry - ok 11:14:36.0786 1420 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 11:14:36.0788 1420 RpcEptMapper - ok 11:14:36.0826 1420 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe 11:14:36.0828 1420 RpcLocator - ok 11:14:36.0975 1420 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll 11:14:36.0980 1420 RpcSs - ok 11:14:37.0054 1420 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 11:14:37.0055 1420 rspndr - ok 11:14:37.0120 1420 [ 4A25DC970C58104602ED274DACAFD784 ] RSUSBSTOR C:\Windows\system32\Drivers\RtsUStor.sys 11:14:37.0123 1420 RSUSBSTOR - ok 11:14:37.0161 1420 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe 11:14:37.0163 1420 SamSs - ok 11:14:37.0238 1420 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 11:14:37.0240 1420 sbp2port - ok 11:14:37.0363 1420 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe 11:14:37.0376 1420 SBSDWSCService - ok 11:14:37.0443 1420 [ F9C85B83954B976702AA8E61B77D9C68 ] sbtis C:\Windows\system32\drivers\sbtis.sys 11:14:37.0444 1420 sbtis - ok 11:14:37.0493 1420 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll 11:14:37.0497 1420 SCardSvr - ok 11:14:37.0545 1420 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 11:14:37.0546 1420 scfilter - ok 11:14:37.0635 1420 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll 11:14:37.0643 1420 Schedule - ok 11:14:37.0703 1420 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll 11:14:37.0704 1420 SCPolicySvc - ok 11:14:37.0769 1420 [ 003EE6F643B8336837150B4E28D2531B ] ScReadSpool C:\Program Files (x86)\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe 11:14:37.0771 1420 ScReadSpool - ok 11:14:37.0827 1420 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll 11:14:37.0831 1420 SDRSVC - ok 11:14:37.0952 1420 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 11:14:37.0953 1420 secdrv - ok 11:14:38.0001 1420 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll 11:14:38.0003 1420 seclogon - ok 11:14:38.0036 1420 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll 11:14:38.0038 1420 SENS - ok 11:14:38.0085 1420 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll 11:14:38.0088 1420 SensrSvc - ok 11:14:38.0111 1420 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 11:14:38.0112 1420 Serenum - ok 11:14:38.0159 1420 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys 11:14:38.0161 1420 Serial - ok 11:14:38.0213 1420 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys 11:14:38.0215 1420 sermouse - ok 11:14:38.0296 1420 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll 11:14:38.0299 1420 SessionEnv - ok 11:14:38.0355 1420 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 11:14:38.0357 1420 sffdisk - ok 11:14:38.0363 1420 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 11:14:38.0366 1420 sffp_mmc - ok 11:14:38.0383 1420 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 11:14:38.0384 1420 sffp_sd - ok 11:14:38.0488 1420 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys 11:14:38.0489 1420 sfloppy - ok 11:14:38.0665 1420 [ 74EC60E20516AAA573BE74F31175270F ] SftService C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.exe 11:14:38.0682 1420 SftService - ok 11:14:38.0768 1420 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll 11:14:38.0773 1420 SharedAccess - ok 11:14:38.0822 1420 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll 11:14:38.0826 1420 ShellHWDetection - ok 11:14:38.0861 1420 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys 11:14:38.0863 1420 SiSRaid2 - ok 11:14:38.0880 1420 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys 11:14:38.0882 1420 SiSRaid4 - ok 11:14:38.0986 1420 [ DDAA5F4A6B958FC313EBD02DD925752F ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 11:14:38.0988 1420 SkypeUpdate - ok 11:14:39.0037 1420 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys 11:14:39.0039 1420 Smb - ok 11:14:39.0097 1420 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 11:14:39.0099 1420 SNMPTRAP - ok 11:14:39.0112 1420 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys 11:14:39.0112 1420 spldr - ok 11:14:39.0386 1420 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe 11:14:39.0423 1420 Spooler - ok 11:14:39.0685 1420 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe 11:14:39.0782 1420 sppsvc - ok 11:14:39.0845 1420 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll 11:14:39.0848 1420 sppuinotify - ok 11:14:39.0934 1420 [ D630B6F2E8379B6F10DC16E82A426552 ] sprtsvc_DellSupportCenter C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe 11:14:39.0937 1420 sprtsvc_DellSupportCenter - ok 11:14:39.0997 1420 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys 11:14:40.0003 1420 srv - ok 11:14:40.0027 1420 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 11:14:40.0032 1420 srv2 - ok 11:14:40.0078 1420 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 11:14:40.0081 1420 srvnet - ok 11:14:40.0137 1420 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 11:14:40.0141 1420 SSDPSRV - ok 11:14:40.0155 1420 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll 11:14:40.0157 1420 SstpSvc - ok 11:14:40.0292 1420 [ 444109453A2B87E6C16BCDA5953E81A9 ] STacSV C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe 11:14:40.0294 1420 STacSV - ok 11:14:40.0387 1420 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys 11:14:40.0388 1420 stexstor - ok 11:14:40.0425 1420 [ 02E784FA49032F84964DB90A3ED81890 ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys 11:14:40.0431 1420 STHDA - ok 11:14:40.0612 1420 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll 11:14:40.0620 1420 stisvc - ok 11:14:40.0708 1420 [ 745E8BDD1AD92BCE97DBCF1BA60D4045 ] SUSTUCAM C:\Windows\system32\DRIVERS\sustucam.sys 11:14:40.0710 1420 SUSTUCAM - ok 11:14:40.0730 1420 [ C7C1C5CA51447B273A6C8BC972397BA5 ] SUSTUCAP C:\Windows\system32\DRIVERS\sustucap.sys 11:14:40.0731 1420 SUSTUCAP - ok 11:14:40.0754 1420 [ A69A9A9FE119907E85BB30CDFBFB2A38 ] SUSTUCAU C:\Windows\system32\DRIVERS\sustucau.sys 11:14:40.0755 1420 SUSTUCAU - ok 11:14:40.0804 1420 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys 11:14:40.0805 1420 swenum - ok 11:14:40.0873 1420 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll 11:14:40.0903 1420 swprv - ok 11:14:41.0047 1420 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll 11:14:41.0127 1420 SysMain - ok 11:14:41.0168 1420 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll 11:14:41.0171 1420 TabletInputService - ok 11:14:41.0239 1420 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll 11:14:41.0246 1420 TapiSrv - ok 11:14:41.0281 1420 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll 11:14:41.0283 1420 TBS - ok 11:14:41.0413 1420 [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 11:14:41.0467 1420 Tcpip - ok 11:14:41.0569 1420 [ ACB82BDA8F46C84F465C1AFA517DC4B9 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 11:14:41.0581 1420 TCPIP6 - ok 11:14:41.0706 1420 [ DF687E3D8836BFB04FCC0615BF15A519 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 11:14:41.0707 1420 tcpipreg - ok 11:14:41.0744 1420 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 11:14:41.0746 1420 TDPIPE - ok 11:14:41.0790 1420 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 11:14:41.0791 1420 TDTCP - ok 11:14:41.0852 1420 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 11:14:41.0854 1420 tdx - ok 11:14:41.0912 1420 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys 11:14:41.0913 1420 TermDD - ok 11:14:42.0058 1420 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll 11:14:42.0086 1420 TermService - ok 11:14:42.0117 1420 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll 11:14:42.0119 1420 Themes - ok 11:14:42.0141 1420 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll 11:14:42.0143 1420 THREADORDER - ok 11:14:42.0210 1420 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll 11:14:42.0213 1420 TrkWks - ok 11:14:42.0275 1420 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 11:14:42.0278 1420 TrustedInstaller - ok 11:14:42.0336 1420 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 11:14:42.0338 1420 tssecsrv - ok 11:14:42.0414 1420 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 11:14:42.0416 1420 TsUsbFlt - ok 11:14:42.0484 1420 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 11:14:42.0487 1420 tunnel - ok 11:14:42.0537 1420 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys 11:14:42.0539 1420 uagp35 - ok 11:14:42.0644 1420 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 11:14:42.0649 1420 udfs - ok 11:14:42.0712 1420 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe 11:14:42.0714 1420 UI0Detect - ok 11:14:42.0740 1420 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 11:14:42.0742 1420 uliagpkx - ok 11:14:42.0800 1420 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys 11:14:42.0801 1420 umbus - ok 11:14:42.0834 1420 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 11:14:42.0835 1420 UmPass - ok 11:14:42.0884 1420 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll 11:14:42.0890 1420 upnphost - ok 11:14:42.0942 1420 [ 5CF1EAD086176DD3348E920A40BED03D ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys 11:14:42.0944 1420 USBAAPL64 - ok 11:14:42.0992 1420 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 11:14:42.0994 1420 usbccgp - ok 11:14:43.0068 1420 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys 11:14:43.0070 1420 usbcir - ok 11:14:43.0088 1420 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 11:14:43.0089 1420 usbehci - ok 11:14:43.0153 1420 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 11:14:43.0157 1420 usbhub - ok 11:14:43.0193 1420 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys 11:14:43.0194 1420 usbohci - ok 11:14:43.0241 1420 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 11:14:43.0242 1420 usbprint - ok 11:14:43.0271 1420 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 11:14:43.0273 1420 usbscan - ok 11:14:43.0328 1420 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\drivers\USBSTOR.SYS 11:14:43.0330 1420 USBSTOR - ok 11:14:43.0359 1420 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys 11:14:43.0360 1420 usbuhci - ok 11:14:43.0425 1420 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys 11:14:43.0428 1420 usbvideo - ok 11:14:43.0457 1420 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll 11:14:43.0459 1420 UxSms - ok 11:14:43.0472 1420 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe 11:14:43.0474 1420 VaultSvc - ok 11:14:43.0545 1420 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 11:14:43.0546 1420 vdrvroot - ok 11:14:43.0657 1420 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe 11:14:43.0665 1420 vds - ok 11:14:43.0712 1420 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 11:14:43.0714 1420 vga - ok 11:14:43.0734 1420 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys 11:14:43.0735 1420 VgaSave - ok 11:14:43.0777 1420 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 11:14:43.0780 1420 vhdmp - ok 11:14:43.0823 1420 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys 11:14:43.0825 1420 viaide - ok 11:14:43.0849 1420 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys 11:14:43.0850 1420 volmgr - ok 11:14:43.0934 1420 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 11:14:43.0937 1420 volmgrx - ok 11:14:43.0996 1420 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys 11:14:44.0000 1420 volsnap - ok 11:14:44.0074 1420 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys 11:14:44.0077 1420 vsmraid - ok 11:14:44.0277 1420 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe 11:14:44.0386 1420 VSS - ok 11:14:44.0631 1420 [ EF51747440486C23BD466311048BD924 ] vToolbarUpdater12.2.0 C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.2.0\ToolbarUpdater.exe 11:14:44.0644 1420 vToolbarUpdater12.2.0 - ok 11:14:44.0699 1420 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 11:14:44.0701 1420 vwifibus - ok 11:14:44.0749 1420 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 11:14:44.0751 1420 vwififlt - ok 11:14:44.0799 1420 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys 11:14:44.0800 1420 vwifimp - ok 11:14:44.0855 1420 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll 11:14:44.0861 1420 W32Time - ok 11:14:44.0936 1420 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys 11:14:44.0938 1420 WacomPen - ok 11:14:44.0990 1420 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 11:14:44.0992 1420 WANARP - ok 11:14:45.0005 1420 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 11:14:45.0006 1420 Wanarpv6 - ok 11:14:45.0161 1420 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe 11:14:45.0215 1420 WatAdminSvc - ok 11:14:45.0325 1420 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe 11:14:45.0343 1420 wbengine - ok 11:14:45.0492 1420 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 11:14:45.0503 1420 WbioSrvc - ok 11:14:45.0715 1420 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll 11:14:45.0721 1420 wcncsvc - ok 11:14:45.0750 1420 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 11:14:45.0753 1420 WcsPlugInService - ok 11:14:46.0320 1420 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys 11:14:46.0322 1420 Wd - ok 11:14:46.0544 1420 [ A3D04EBF5227886029B4532F20D026F7 ] WDC_SAM C:\Windows\system32\DRIVERS\wdcsam64.sys 11:14:46.0545 1420 WDC_SAM - ok 11:14:46.0741 1420 [ 441BD2D7B4F98134C3A4F9FA570FD250 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 11:14:46.0746 1420 Wdf01000 - ok 11:14:46.0974 1420 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll 11:14:46.0978 1420 WdiServiceHost - ok 11:14:46.0982 1420 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll 11:14:46.0985 1420 WdiSystemHost - ok 11:14:47.0035 1420 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll 11:14:47.0040 1420 WebClient - ok 11:14:47.0178 1420 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll 11:14:47.0183 1420 Wecsvc - ok 11:14:47.0241 1420 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll 11:14:47.0244 1420 wercplsupport - ok 11:14:47.0344 1420 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll 11:14:47.0347 1420 WerSvc - ok 11:14:47.0420 1420 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 11:14:47.0421 1420 WfpLwf - ok 11:14:47.0827 1420 [ B14EF15BD757FA488F9C970EEE9C0D35 ] WimFltr C:\Windows\system32\DRIVERS\wimfltr.sys 11:14:47.0829 1420 WimFltr - ok 11:14:47.0865 1420 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys 11:14:47.0866 1420 WIMMount - ok 11:14:48.0041 1420 WinDefend - ok 11:14:48.0050 1420 WinHttpAutoProxySvc - ok 11:14:48.0180 1420 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 11:14:48.0184 1420 Winmgmt - ok 11:14:49.0095 1420 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll 11:14:49.0811 1420 WinRM - ok 11:14:49.0954 1420 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys 11:14:49.0956 1420 WinUsb - ok 11:14:50.0043 1420 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll 11:14:50.0051 1420 Wlansvc - ok 11:14:50.0159 1420 [ 13B0A570E1AE451C92DA550085D72CF3 ] wltrysvc C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE 11:14:50.0160 1420 wltrysvc - ok 11:14:50.0295 1420 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 11:14:50.0296 1420 WmiAcpi - ok 11:14:50.0375 1420 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 11:14:50.0378 1420 wmiApSrv - ok 11:14:50.0717 1420 WMPNetworkSvc - ok 11:14:50.0838 1420 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll 11:14:50.0840 1420 WPCSvc - ok 11:14:50.0911 1420 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 11:14:50.0914 1420 WPDBusEnum - ok 11:14:50.0943 1420 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 11:14:50.0944 1420 ws2ifsl - ok 11:14:50.0981 1420 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll 11:14:51.0014 1420 wscsvc - ok 11:14:51.0019 1420 WSearch - ok 11:14:51.0395 1420 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll 11:14:51.0456 1420 wuauserv - ok 11:14:51.0506 1420 [ D3381DC54C34D79B22CEE0D65BA91B7C ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 11:14:51.0507 1420 WudfPf - ok 11:14:51.0673 1420 [ CF8D590BE3373029D57AF80914190682 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 11:14:51.0676 1420 WUDFRd - ok 11:14:51.0739 1420 [ 7A95C95B6C4CF292D689106BCAE49543 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 11:14:51.0743 1420 wudfsvc - ok 11:14:51.0854 1420 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll 11:14:51.0858 1420 WwanSvc - ok 11:14:51.0949 1420 [ 64F88AF327AA74E03658AE32B48CCB8B ] yukonw7 C:\Windows\system32\DRIVERS\yk62x64.sys 11:14:51.0954 1420 yukonw7 - ok 11:14:51.0987 1420 ================ Scan global =============================== 11:14:52.0207 1420 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll 11:14:52.0283 1420 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll 11:14:52.0293 1420 [ EB6A48CC998E1090E44E8E7F1009A640 ] C:\Windows\system32\winsrv.dll 11:14:52.0562 1420 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll 11:14:52.0666 1420 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe 11:14:52.0670 1420 [Global] - ok 11:14:52.0671 1420 ================ Scan MBR ================================== 11:14:52.0736 1420 [ CDB4DE4BBD714F152979DA2DCBEF57EB ] \Device\Harddisk0\DR0 11:14:52.0737 1420 Suspicious mbr (Forged): \Device\Harddisk0\DR0 11:14:53.0061 1420 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - infected 11:14:53.0062 1420 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.c (0) 11:14:53.0062 1420 ================ Scan VBR ================================== 11:14:53.0066 1420 [ 9025F5F50A56850B1F101CD31FC80309 ] \Device\Harddisk0\DR0\Partition1 11:14:53.0067 1420 \Device\Harddisk0\DR0\Partition1 - ok 11:14:53.0120 1420 [ B8423112AD17DD9169A457BB0123942B ] \Device\Harddisk0\DR0\Partition2 11:14:53.0122 1420 \Device\Harddisk0\DR0\Partition2 - ok 11:14:53.0123 1420 ============================================================ 11:14:53.0123 1420 Scan finished 11:14:53.0123 1420 ============================================================ 11:14:53.0143 2344 Detected object count: 1 11:14:53.0143 2344 Actual detected object count: 1 11:15:19.0666 2344 \Device\Harddisk0\DR0\# - copied to quarantine 11:15:19.0669 2344 \Device\Harddisk0\DR0 - copied to quarantine 11:15:19.0979 2344 \Device\Harddisk0\DR0\TDLFS\cmd.dll - copied to quarantine 11:15:19.0981 2344 \Device\Harddisk0\DR0\TDLFS\cmd64.dll - copied to quarantine 11:15:19.0985 2344 \Device\Harddisk0\DR0\TDLFS\sub.dll - copied to quarantine 11:15:19.0989 2344 \Device\Harddisk0\DR0\TDLFS\subx.dll - copied to quarantine 11:15:19.0999 2344 \Device\Harddisk0\DR0\TDLFS\drv32 - copied to quarantine 11:15:20.0006 2344 \Device\Harddisk0\DR0\TDLFS\drv64 - copied to quarantine 11:15:20.0007 2344 \Device\Harddisk0\DR0\TDLFS\servers.dat - copied to quarantine 11:15:20.0052 2344 \Device\Harddisk0\DR0\TDLFS\config.ini - copied to quarantine 11:15:20.0053 2344 \Device\Harddisk0\DR0\TDLFS\ldr16 - copied to quarantine 11:15:20.0056 2344 \Device\Harddisk0\DR0\TDLFS\ldr32 - copied to quarantine 11:15:20.0059 2344 \Device\Harddisk0\DR0\TDLFS\ldr64 - copied to quarantine 11:15:20.0061 2344 \Device\Harddisk0\DR0\TDLFS\s - copied to quarantine 11:15:20.0062 2344 \Device\Harddisk0\DR0\TDLFS\ldrm - copied to quarantine 11:15:20.0063 2344 \Device\Harddisk0\DR0\TDLFS\u - copied to quarantine 11:15:20.0161 2344 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - will be cured on reboot 11:15:20.0162 2344 \Device\Harddisk0\DR0 - ok 11:15:20.0640 2344 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.c ) - User select action: Cure 11:15:31.0254 6356 Deinitialize success

Download ListParts64 to your Desktop.

• Double click ListParts64.exe to launch the program.
• Press the Scan button.
• When finished scanning it will make a log Result.txt on your Desktop.
• Please post me the contents of the log.

OK.. Got that done. Here's the log: ListParts by Farbar Version: 10-08-2012 Ran by [removed] (administrator) on 23-08-2012 at 13:35:18 Windows 7 (X64) Running From: C:\Users\[removed]\Desktop Language: 0409 ************************************************************ ========================= Memory info ====================== Percentage of memory in use: 37% Total physical RAM: 4056.36 MB Available physical RAM: 2542.49 MB Total Pagefile: 8110.92 MB Available Pagefile: 6316.88 MB Total Virtual: 8192 MB Available Virtual: 8191.89 MB ======================= Partitions ========================= 1 Drive c: (OS) (Fixed) (Total:213.72 GB) (Free:36.77 GB) NTFS Disk ### Status Size Free Dyn Gpt ——– ————- ——- ——- — — Disk 0 Online 232 GB 0 B Partitions of Disk 0: =============== Partition ### Type Size Offset ————- —————- ——- ——- Partition 1 OEM 298 MB 31 KB Partition 2 Primary 18 GB 299 MB Partition 3 Primary 213 GB 19 GB ================================================================================ ====================== Disk: 0 Partition 1 Type : DE Hidden: Yes Active: No There is no volume associated with this partition. ================================================================================ ====================== Disk: 0 Partition 2 Type : 07 Hidden: No Active: Yes Volume ### Ltr Label Fs Type Size Status Info ———- — ———– —– ———- ——- ——— ——– * Volume 1 RECOVERY NTFS Partition 18 GB Healthy System (partition with boot components) ================================================================================ ====================== Disk: 0 Partition 3 Type : 07 Hidden: No Active: No Volume ### Ltr Label Fs Type Size Status Info ———- — ———– —– ———- ——- ——— ——– * Volume 2 C OS NTFS Partition 213 GB Healthy Boot ================================================================================ ====================== ****** End Of Log ******

Good job getting all of this done. How is your system running?

Looks good so far.. Haven't got a BSOD since we tried combofix. It boots up decently.. Only thing different is that it blinks out (black screen) during the welcome screen at bootup. That is only for a fraction of a second. Are we at the end of the fix? Is there anything else I need to do? Should I keep AVG and Malwarebytes running and monitoring? or should I switch to AVIRA? You mentioned before that the Microsoft Windows Malicious Software removal tool was legit. Should I install since I have AVG and Malwarebytes now? If I don't reply after this It's becaus I'll have to shut down and get some stuff done. Thanks so much for your help.. I will definitely make a donation on payal Manny

Hi,

Should I keep AVG and Malwarebytes running and monitoring? or should I switch to AVIRA?

I am not a big fan of AVG or Avira personally but either one is fine. I only recommend either of the following myself but it is your choice…
Microsoft Security Essentials
Avast

You mentioned before that the Microsoft Windows Malicious Software removal tool was legit.

Yes you can install that if you wish….I don't use it but it is fine to have.

Thanks so much for your help.. I will definitely make a donation on payal

You are more than welcome and thank you.

Go ahead and run it until tomorrow and let me know how things are running. If all is fine I will clean up our tools and you are good to go.

Roger that… I will run the heck out of this machine tonight and tomorrow. Thanks for your opinion of the AV software and MS Malicious software removal tool… very much appreciated. I will have to consider some kind of AV software to prevent getting Rootkits, viruses, etc. Well sir… Goodnight and I will report the results of my computer's performance soon. Thanks again Manny

Everything ok?

So far the machine is performing well. Ran it all day yesterday. Hbernated it.. restarted it…shut it off.. surfed the web… Everything seems normal. Still asking me if I want to install Microsoft malicious ware removal.. etc. I think you've got it licked. Anything else I need to do?

I think you've got it licked. Anything else I need to do?

Sounds great! Be sure to allow any updates Windows is trying to perform.

Providing there are no other malware related problems…

IT APPEARS THAT YOUR LOGS ARE NOW CLEAN SO LETS DO A COUPLE OF THINGS TO WRAP THIS UP!!

This infection appears to have been cleaned, but I can not give you any absolute guarantees. As a precaution, I would go ahead and change all of your passwords as this is especially important after an infection.
———-

The following will implement some cleanup procedures as well as reset System Restore points:

Click Start > Run and copy/paste the following text into the Run box as shown and click OK.
Combofix /Uninstall
(Note: There is a space between the ..X and the /U that needs to be there.)

[external image: Posted Image]
———-

Clean up with OTL:

• Right-click and Run as Administrator OTL.exe to start the program.
• Close all other programs apart from OTL as this step will require a reboot
• On the OTL main screen, press the CLEANUP button
• Say Yes to the prompt and then allow the program to reboot your computer.

———-

Any of the logs that you created for use in the forums or remaining tools that have not yet been removed can be deleted so they aren't cluttering up your desktop.
If you didn't already have it I would keep Malwarebytes AntiMalware though.

Here are some tips to reduce the potential for spyware infection in the future:

1. Internet Explorer. Even if you don't use it as your main browser it should be kept up-to-date because that is the browser Windows uses for updates.
Make your Internet Explorer more secure - This can be done by following these simple instructions:

• From within Internet Explorer click on the Tools menu and then click on Options.
• Click once on the Security tab
• Click once on the Internet icon so it becomes highlighted.
• Click once on the Custom Level button.
• Change the Download signed ActiveX controls to Prompt
• Change the Download unsigned ActiveX controls to Disable
• Change the Initialize and script ActiveX controls not marked as safe to Disable
• Change the Installation of desktop items to Prompt
• Change the Launching programs and files in an IFRAME to Prompt
• Change the Navigate sub-frames across different domains to Prompt
• When all these settings have been made, click on the OK button.
• If it prompts you as to whether or not you want to save the settings, press the Yes button.
• Next press the Apply button and then the OK to exit the Internet Properties page.

2. Enable Protected Mode in Internet Explorer. This helps Windows Vista users stay more protected from attack by running Internet Explorer with restricted privileges as well as reducing the ability to write, alter or destroy data on your system or install malicious code. To make sure this is running follow these steps:

• Open Internet Explorer
• Click on Tools > Internet Options
• Press Security tab
• Select Internet zone then place check next to Enable Protected Mode if not already done
• Do the same for Local Intranet, Trusted Sites and Restricted Sites and then press Apply
• Restart Internet Explorer and in the bottom right corner of your screen you will see Protected Mode: On showing you it is enabled.

3. Use and update an anti-virus software - I can not overemphasize the need for you to use and update your anti-virus application on a regular basis. With the ever increasing number of new variants of malware arriving on the scene daily, you become very susceptible to an attack without updated protection.

4. Firewall
Using a third-party firewall will allow you to give/deny access for applications that want to go online. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a firewall in its default configuration can lower your risk greatly. I would personally only recommend using one of the following two below:
Online Armor Free
Agnitum Outpost Firewall Free

5. Make sure you keep your Windows OS current. Windows XP users can visit Windows update regularly to download and install any critical updates and service packs. Windows Vista/7 users can open the Start menu > All Programs > Windows Update > Check for Updates (in left hand task pane) to update these systems. Without these you are leaving the back door open.

6. WOT (Web of Trust) As "Googling" is such an integral part of internet life, this free browser add on warns you about risky websites that try to scam visitors, deliver malware or send spam. It is especially helpful when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites. WOT has an add-on available for Firefox, Internet Explorer as well as Google Chrome.

7.Finally, I strongly recommend that you read TonyKlein's good advice So how did I get infected in the first place?

Please reply to this thread once more if you are satisfied so that we can mark the problem as resolved.

I'll get those done ASAP Jeff.. One thing though. Where do I get the otl.exe application?

Hi,

Where do I get the otl.exe application?

How embarrassing….please disregard the OTL instructions in the clean-up instructions >>

Clean up with OTL:
Right-click and Run as Administrator OTL.exe to start the program.
Close all other programs apart from OTL as this step will require a reboot
On the OTL main screen, press the CLEANUP button
Say Yes to the prompt and then allow the program to reboot your computer.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.