"The specified device does not exist as an installed service"

My niece's lap top is having some problems.

Running Windows 7 Pro

1) It no longer will connect to internet, whether wireless or wired
2) The USB ports are no longer being recognized by the system
3) When running various programs including DDS, I get the following error


The specified device does not exist as an installed service


I was able to copy over "HijackThis" from another computer and run it.


Note: When running HijackThis, the following error/warning was experienced

==============

"For some reason your system denied write access to the Hosts file. If any hijacked domains are in this file. HijackThis may NOT
be able to fix this.

If that happens, you need to edit the file yourself. To do this, click Start, Run and type

notepad C:\Windows\System32\drivers\etc\hosts and press enter

Find the line(s) Hijackthis reports and delete them. Save the file as "hosts" and reboot. "

=====================================


I was not able to find any lines in that file related to HijackThis. Here is the resulting logfile from the run which does not
look like a full log to me.


=======================================================

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:38:21 PM, on 11/16/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
C:\Users\T61p\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Users\T61p\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20111004203608.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (cleanup)] rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript
O4 - Startup: Dropbox.lnk = C:\Users\T61p\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Windows\system32\mfevtps.exe

–
End of file - 2992 bytes

Hello and

My name is patndoris. I will be glad to take a look at your log and help you with solving any malware problems. It will be very helpful if you follow these guidelines:

• Malware logs are often lengthy and can take a lot of time to research and interpret. Please be patient while I review your logs.
• Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
• Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
• Please follow my instructions carefully and in the order they are posted. You may also find it helpful to print out the instructions you receive.
• Please do not run any scans or install/uninstall any applications or delete anything without being directed to do so.
• Remember, absence of symptoms does not mean the infection is all gone. Please stick with me till you're given the "all clear".
• Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
• Please reply within 3 days. If I do not hear back from you in that time frame, I will post a reminder for you. Topics with no reply in 4 days are closed!

Before we try running DDS or anything else again, please try downloading (via the clean computer) and transferring over to the infected computer and then running these tools. I'd like to see the results of the TDSSKiller report before we move forward.



Download and Run RKill

Please download and run the following tool to help allow other programs to run. (Thanks to Grinler of BleepingComputer.com)
There are 3 different versions. If one of them won't run then download and try to run the other one.
Vista and Win7 users need to right click and choose Run as Admin

You only need to get one of these to run, not all of them.
Rkill.exe
Rkill.com
Rkill.scr

Once it is downloaded, right-click and choose Run as Administrator[/] on the rkill.com in order to automatically try to stop any processes associated with rogue programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next steps.

If you get a message rkill is an infection, do not be concerned. The message is just a fake warning by some rogue programs when it terminates programs that may potentially remove it. The trick is to leave the warning on the screen and then run Rkill again. By not closing the warning, this should allow you to bypass the malware trying to protect itself so that rkill can terminate the rogue processes. Continue to try running Rkill until the malware is no longer running. You will then be able to proceed with the next steps.

Do not reboot your computer after running rkill as the malware programs will start again.

If for some reason the machine reboots, repeat the process. Again, try not to restart the machine.




Please read carefully and follow these steps. There is a difference between what you see in one of the images below and what I need you to do.
We are only creating a log - I do NOT want you to "cure" or try to fix anything in this step. It is very important that you don't choose Cure when presented with that option.

• Download TDSSKiller and save it to your Desktop.
• Extract its contents to your desktop.
• Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
  
  
  🖼Click to load external image (Posted Image)
  
  
• If an infected file is detected, the default action will be Cure but I want you to choose SKIP instead , click on Continue.
  
  
  🖼Click to load external image (Posted Image)
  
  
• If a suspicious file is detected, the default action will be Skip, click on Continue.
  
  
  🖼Click to load external image (Posted Image)
  
  
• It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  
  
  🖼Click to load external image (Posted Image)
  
  
• If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
• If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

Hi patndoris! Thank you so much for helping me. None of the three versions of rkill will run. All 3 give the same error of "The specified service does not exist as an installed service" when launched on the infected computer. This is the same error I have been seeing with other programs I try to launch. Note: The rkill files were copied from the clean computer to the infected computer and placed on the infected computers desktop. I ran as administrator for the version that gave that option (rkill.exe) and just ran as normal in the other two versions since the option of running as the admin was not available when right clicking those files. I will not move on to the TDSSKiller step until I hear back from you on how to proceed with the rkill issue. Thank you Maldini

Boot your computer in Safe Mode

• Turn the computer on or Restart the computer
• As soon as BIOS is loaded, start tapping the F8 key.
• The Windows Advanced Options Menu appears.
  If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
• Use the arrow keys to select the Safe Mode menu option.
• Press Enter.
• The computer then begins to start in Safe mode.
• Log into your usual account
  
  Then see if DDS and TDSSKiller will run (try without using RKill)
  
• When you are finished with all troubleshooting, close all programs and restart the computer as you normally would.

ok, I was able to run both programs in safe mode.

I am posting dds.txt and tdskiller.txt and am attaching attach.txt to this reply.

============================

.
DDS (Ver_11-03-05.01) - NTFSx86 MINIMAL
Run by [removed] at 18:26:10.12 on Mon 11/19/2012
Internet Explorer: 9.0.8112.16421
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3054.2661 [GMT -5:00]
.
AV: McAfee VirusScan Enterprise *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee VirusScan Enterprise Antispyware Module *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Users\T61p\Desktop\dds.scr
C:\Windows\system32\conhost.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = https://www.google.com/
mWinlogon: Userinit=userinit.exe,
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\common files\mcafee\systemcore\ScriptSn.20111004203608.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
mRunOnce: [Malwarebytes Anti-Malware (cleanup)] rundll32.exe "c:\programdata\malwarebytes\malwarebytes' anti-malware\cleanup.dll",ProcessCleanupScript
StartupFolder: c:\users\t61p\appdata\roaming\micros~1\windows\startm~1\programs\startup\dropbox.lnk - c:\users\t61p\appdata\roaming\dropbox\bin\Dropbox.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~1\office12\EXCEL.EXE/3000
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~1\office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
============= SERVICES / DRIVERS ===============
.
R0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2011-10-4 162928]
S0 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2011-10-4 436728]
S1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2009-6-23 9968]
S1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2009-6-23 72944]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 McAfeeFramework;McAfee Framework Service;c:\program files\mcafee\common framework\FrameworkService.exe [2011-1-12 120128]
S2 McShield;McAfee McShield;c:\program files\common files\mcafee\systemcore\mcshield.exe [2011-10-4 159320]
S2 McTaskManager;McAfee Task Manager;c:\program files\mcafee\virusscan enterprise\VsTskMgr.exe [2011-1-12 209760]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2011-10-4 145936]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2011-10-4 171296]
S3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2011-10-4 58456]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2011-10-4 85152]
S3 netw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\drivers\netw5v32.sys [2009-6-10 4231168]
S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2009-6-23 7408]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\drivers\VSTAZL3.SYS [2009-7-13 207360]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\drivers\VSTDPV3.SYS [2009-7-13 980992]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\drivers\VSTCNXT3.SYS [2009-7-13 661504]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-8-26 52224]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2011-8-26 1343400]
S4 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2012-7-27 63960]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-28 250808]
S4 NVIDIA Performance Driver Service;NVIDIA Performance Driver Service;c:\program files\nvidia corporation\performance drivers\nvPDsvc.exe [2009-7-19 4446752]
.
=============== Created Last 30 ================
.
2012-11-15 03:41:44 ——– d—–w- c:\windows\pss
2012-11-09 22:13:40 ——– d—–w- c:\progra~2\SOPAgent
2012-11-09 21:55:38 ——– d—–w- c:\users\t61p\Applications
2012-11-09 21:54:55 ——– d—–w- c:\users\t61p\appdata\roaming\Ydid
2012-11-09 21:54:55 ——– d—–w- c:\users\t61p\appdata\roaming\Ugovyh
2012-11-09 21:54:55 ——– d—–w- c:\users\t61p\appdata\roaming\Avex
2012-11-09 21:45:09 6918632 —-a-w- c:\progra~2\microsoft\windows defender\definition updates\{c2ea3c82-6638-4962-bf63-c9b2b9c8b509}\mpengine.dll
.
==================== Find3M ====================
.
2012-10-08 23:20:15 73656 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-08 23:20:15 696760 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2012-09-14 18:28:53 2048 —-a-w- c:\windows\system32\tzres.dll
2012-08-30 17:12:02 3968880 —-a-w- c:\windows\system32\ntkrnlpa.exe
2012-08-30 17:12:02 3914096 —-a-w- c:\windows\system32\ntoskrnl.exe
2012-08-24 16:57:48 172544 —-a-w- c:\windows\system32\wintrust.dll
2012-08-24 06:59:17 1800704 —-a-w- c:\windows\system32\jscript9.dll
2012-08-24 06:51:27 1129472 —-a-w- c:\windows\system32\wininet.dll
2012-08-24 06:51:02 1427968 —-a-w- c:\windows\system32\inetcpl.cpl
2012-08-24 06:47:26 142848 —-a-w- c:\windows\system32\ieUnatt.exe
2012-08-24 06:47:12 420864 —-a-w- c:\windows\system32\vbscript.dll
2012-08-24 06:43:58 2382848 —-a-w- c:\windows\system32\mshtml.tlb
.
============= FINISH: 18:26:30.68 ===============




================================================================================

18:35:04.0695 1388 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
18:35:04.0804 1388 ============================================================
18:35:04.0804 1388 Current date / time: 2012/11/19 18:35:04.0804
18:35:04.0804 1388 SystemInfo:
18:35:04.0804 1388
18:35:04.0804 1388 OS Version: 6.1.7601 ServicePack: 1.0
18:35:04.0804 1388 Product type: Workstation
18:35:04.0804 1388 ComputerName: T61P-PC
18:35:04.0804 1388 UserName: T61p
18:35:04.0804 1388 Windows directory: C:\Windows
18:35:04.0804 1388 System windows directory: C:\Windows
18:35:04.0804 1388 Processor architecture: Intel x86
18:35:04.0804 1388 Number of processors: 2
18:35:04.0804 1388 Page size: 0x1000
18:35:04.0804 1388 Boot type: Safe boot
18:35:04.0804 1388 ============================================================
18:35:06.0754 1388 Drive \Device\Harddisk0\DR0 - Size: 0x3A38B2E000 (232.89 Gb), SectorSize: 0x200, Cylinders: 0x7E2D, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xF0, Type 'K0', Flags 0x00000050
18:35:06.0754 1388 ============================================================
18:35:06.0754 1388 \Device\Harddisk0\DR0:
18:35:06.0754 1388 MBR partitions:
18:35:06.0754 1388 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x1D1C4191
18:35:06.0754 1388 ============================================================
18:35:06.0785 1388 C: <-> \Device\Harddisk0\DR0\Partition1
18:35:06.0785 1388 ============================================================
18:35:06.0785 1388 Initialize success
18:35:06.0785 1388 ============================================================
18:35:09.0001 1424 ============================================================
18:35:09.0001 1424 Scan started
18:35:09.0001 1424 Mode: Manual;
18:35:09.0001 1424 ============================================================
18:35:09.0796 1424 ================ Scan system memory ========================
18:35:09.0796 1424 System memory - ok
18:35:09.0796 1424 ================ Scan services =============================
18:35:09.0983 1424 [ 1B133875B8AA8AC48969BD3458AFE9F5 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
18:35:09.0983 1424 1394ohci - ok
18:35:10.0030 1424 [ CEA80C80BED809AA0DA6FEBC04733349 ] ACPI C:\Windows\system32\drivers\ACPI.sys
18:35:10.0046 1424 ACPI - ok
18:35:10.0093 1424 [ 1EFBC664ABFF416D1D07DB115DCB264F ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
18:35:10.0093 1424 AcpiPmi - ok
18:35:10.0171 1424 [ 6C61BCEB60C2C187E6F96001FD69493E ] ADIHdAudAddService C:\Windows\system32\drivers\ADIHdAud.sys
18:35:10.0171 1424 ADIHdAudAddService - ok
18:35:10.0342 1424 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
18:35:10.0342 1424 AdobeARMservice - ok
18:35:10.0467 1424 [ 44C00A385CA9DBC1D5CF3781F8C26AEA ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
18:35:10.0483 1424 AdobeFlashPlayerUpdateSvc - ok
18:35:10.0529 1424 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
18:35:10.0545 1424 adp94xx - ok
18:35:10.0592 1424 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
18:35:10.0607 1424 adpahci - ok
18:35:10.0623 1424 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
18:35:10.0639 1424 adpu320 - ok
18:35:10.0685 1424 [ 4DC6B0772D1698F04FC79053A21C8260 ] AEADIFilters C:\Windows\system32\AEADISRV.EXE
18:35:10.0701 1424 AEADIFilters - ok
18:35:10.0763 1424 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
18:35:10.0763 1424 AeLookupSvc - ok
18:35:10.0841 1424 [ 9EBBBA55060F786F0FCAA3893BFA2806 ] AFD C:\Windows\system32\drivers\afd.sys
18:35:10.0857 1424 AFD - ok
18:35:10.0904 1424 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\drivers\agp440.sys
18:35:10.0904 1424 agp440 - ok
18:35:10.0951 1424 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
18:35:10.0951 1424 aic78xx - ok
18:35:10.0982 1424 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
18:35:10.0982 1424 ALG - ok
18:35:11.0029 1424 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\drivers\aliide.sys
18:35:11.0029 1424 aliide - ok
18:35:11.0060 1424 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\drivers\amdagp.sys
18:35:11.0075 1424 amdagp - ok
18:35:11.0091 1424 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\drivers\amdide.sys
18:35:11.0091 1424 amdide - ok
18:35:11.0138 1424 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
18:35:11.0138 1424 AmdK8 - ok
18:35:11.0169 1424 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
18:35:11.0169 1424 AmdPPM - ok
18:35:11.0247 1424 [ D320BF87125326F996D4904FE24300FC ] amdsata C:\Windows\system32\drivers\amdsata.sys
18:35:11.0247 1424 amdsata - ok
18:35:11.0309 1424 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
18:35:11.0309 1424 amdsbs - ok
18:35:11.0372 1424 [ 46387FB17B086D16DEA267D5BE23A2F2 ] amdxata C:\Windows\system32\drivers\amdxata.sys
18:35:11.0387 1424 amdxata - ok
18:35:11.0434 1424 [ AEA177F783E20150ACE5383EE368DA19 ] AppID C:\Windows\system32\drivers\appid.sys
18:35:11.0434 1424 AppID - ok
18:35:11.0465 1424 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
18:35:11.0481 1424 AppIDSvc - ok
18:35:11.0559 1424 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
18:35:11.0559 1424 AppMgmt - ok
18:35:11.0621 1424 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
18:35:11.0621 1424 arc - ok
18:35:11.0668 1424 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
18:35:11.0684 1424 arcsas - ok
18:35:11.0699 1424 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
18:35:11.0715 1424 AsyncMac - ok
18:35:11.0777 1424 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\drivers\atapi.sys
18:35:11.0777 1424 atapi - ok
18:35:11.0824 1424 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
18:35:11.0824 1424 AudioEndpointBuilder - ok
18:35:11.0855 1424 [ CE3B4E731638D2EF62FCB419BE0D39F0 ] Audiosrv C:\Windows\System32\Audiosrv.dll
18:35:11.0855 1424 Audiosrv - ok
18:35:11.0933 1424 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
18:35:11.0933 1424 b06bdrv - ok
18:35:11.0965 1424 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
18:35:11.0980 1424 b57nd60x - ok
18:35:12.0058 1424 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
18:35:12.0058 1424 BDESVC - ok
18:35:12.0121 1424 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
18:35:12.0121 1424 Beep - ok
18:35:12.0199 1424 [ E585445D5021971FAE10393F0F1C3961 ] BITS C:\Windows\System32\qmgr.dll
18:35:12.0292 1424 BITS - ok
18:35:12.0323 1424 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
18:35:12.0323 1424 blbdrive - ok
18:35:12.0370 1424 [ 8F2DA3028D5FCBD1A060A3DE64CD6506 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
18:35:12.0370 1424 bowser - ok
18:35:12.0417 1424 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
18:35:12.0417 1424 BrFiltLo - ok
18:35:12.0526 1424 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
18:35:12.0526 1424 BrFiltUp - ok
18:35:12.0589 1424 [ 3DAA727B5B0A45039B0E1C9A211B8400 ] Browser C:\Windows\System32\browser.dll
18:35:12.0589 1424 Browser - ok
18:35:12.0682 1424 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
18:35:12.0682 1424 Brserid - ok
18:35:12.0776 1424 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
18:35:12.0791 1424 BrSerWdm - ok
18:35:12.0838 1424 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
18:35:12.0838 1424 BrUsbMdm - ok
18:35:12.0885 1424 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
18:35:13.0010 1424 BrUsbSer - ok
18:35:13.0119 1424 [ 2865A5C8E98C70C605F417908CEBB3A4 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
18:35:13.0119 1424 BthEnum - ok
18:35:13.0150 1424 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
18:35:13.0150 1424 BTHMODEM - ok
18:35:13.0337 1424 [ AD1872E5829E8A2C3B5B4B641C3EAB0E ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
18:35:13.0337 1424 BthPan - ok
18:35:13.0447 1424 [ 1153DE2E4F5941E10C399CB5592F78A1 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
18:35:13.0462 1424 BTHPORT - ok
18:35:13.0525 1424 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
18:35:13.0525 1424 bthserv - ok
18:35:13.0618 1424 [ C81E9413A25A439F436B1D4B6A0CF9E9 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
18:35:13.0618 1424 BTHUSB - ok
18:35:13.0696 1424 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
18:35:13.0696 1424 cdfs - ok
18:35:13.0790 1424 [ BE167ED0FDB9C1FA1133953C18D5A6C9 ] cdrom C:\Windows\system32\drivers\cdrom.sys
18:35:13.0790 1424 cdrom - ok
18:35:13.0837 1424 [ 319C6B309773D063541D01DF8AC6F55F ] CertPropSvc C:\Windows\System32\certprop.dll
18:35:13.0852 1424 CertPropSvc - ok
18:35:13.0915 1424 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
18:35:13.0915 1424 circlass - ok
18:35:14.0055 1424 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
18:35:14.0055 1424 CLFS - ok
18:35:14.0242 1424 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:35:14.0273 1424 clr_optimization_v2.0.50727_32 - ok
18:35:14.0429 1424 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:35:14.0601 1424 clr_optimization_v4.0.30319_32 - ok
18:35:14.0663 1424 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
18:35:14.0663 1424 CmBatt - ok
18:35:14.0710 1424 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\drivers\cmdide.sys
18:35:14.0710 1424 cmdide - ok
18:35:14.0851 1424 [ 247B4CE2DAB1160CD422D532D5241E1F ] CNG C:\Windows\system32\Drivers\cng.sys
18:35:14.0897 1424 CNG - ok
18:35:14.0991 1424 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
18:35:14.0991 1424 Compbatt - ok
18:35:15.0038 1424 [ CBE8C58A8579CFE5FCCF809E6F114E89 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
18:35:15.0038 1424 CompositeBus - ok
18:35:15.0085 1424 COMSysApp - ok
18:35:15.0131 1424 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
18:35:15.0131 1424 crcdisk - ok
18:35:15.0209 1424 [ 96C0E38905CFD788313BE8E11DAE3F2F ] CryptSvc C:\Windows\system32\cryptsvc.dll
18:35:15.0209 1424 CryptSvc - ok
18:35:15.0381 1424 [ 3C2177A897B4CA2788C6FB0C3FD81D4B ] CSC C:\Windows\system32\drivers\csc.sys
18:35:15.0397 1424 CSC - ok
18:35:15.0490 1424 [ 15F93B37F6801943360D9EB42485D5D3 ] CscService C:\Windows\System32\cscsvc.dll
18:35:15.0506 1424 CscService - ok
18:35:15.0662 1424 [ 7660F01D3B38ACA1747E397D21D790AF ] DcomLaunch C:\Windows\system32\rpcss.dll
18:35:15.0677 1424 DcomLaunch - ok
18:35:15.0755 1424 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
18:35:15.0755 1424 defragsvc - ok
18:35:15.0880 1424 [ F024449C97EC1E464AAFFDA18593DB88 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
18:35:15.0880 1424 DfsC - ok
18:35:15.0943 1424 [ E9E01EB683C132F7FA27CD607B8A2B63 ] Dhcp C:\Windows\system32\dhcpcore.dll
18:35:15.0958 1424 Dhcp - ok
18:35:16.0067 1424 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
18:35:16.0067 1424 discache - ok
18:35:16.0099 1424 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
18:35:16.0114 1424 Disk - ok
18:35:16.0192 1424 [ 33EF4861F19A0736B11314AAD9AE28D0 ] Dnscache C:\Windows\System32\dnsrslvr.dll
18:35:16.0192 1424 Dnscache - ok
18:35:16.0255 1424 [ 366BA8FB4B7BB7435E3B9EACB3843F67 ] dot3svc C:\Windows\System32\dot3svc.dll
18:35:16.0255 1424 dot3svc - ok
18:35:16.0348 1424 [ 8EC04CA86F1D68DA9E11952EB85973D6 ] DPS C:\Windows\system32\dps.dll
18:35:16.0348 1424 DPS - ok
18:35:16.0395 1424 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
18:35:16.0395 1424 drmkaud - ok
18:35:16.0473 1424 [ 23F5D28378A160352BA8F817BD8C71CB ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
18:35:16.0504 1424 DXGKrnl - ok
18:35:16.0567 1424 [ CF0A6015F437161698C5B2A0A12CF052 ] e1express C:\Windows\system32\DRIVERS\e1e6032.sys
18:35:16.0582 1424 e1express - ok
18:35:16.0691 1424 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
18:35:16.0691 1424 EapHost - ok
18:35:17.0035 1424 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
18:35:17.0222 1424 ebdrv - ok
18:35:17.0331 1424 [ 81951F51E318AECC2D68559E47485CC4 ] EFS C:\Windows\System32\lsass.exe
18:35:17.0331 1424 EFS - ok
18:35:17.0487 1424 [ A8C362018EFC87BEB013EE28F29C0863 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
18:35:17.0503 1424 ehRecvr - ok
18:35:17.0549 1424 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
18:35:17.0549 1424 ehSched - ok
18:35:17.0659 1424 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
18:35:17.0659 1424 elxstor - ok
18:35:17.0705 1424 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\drivers\errdev.sys
18:35:17.0705 1424 ErrDev - ok
18:35:17.0877 1424 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
18:35:17.0877 1424 EventSystem - ok
18:35:17.0924 1424 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
18:35:17.0924 1424 exfat - ok
18:35:18.0002 1424 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
18:35:18.0002 1424 fastfat - ok
18:35:18.0080 1424 [ 967EA5B213E9984CBE270205DF37755B ] Fax C:\Windows\system32\fxssvc.exe
18:35:18.0095 1424 Fax - ok
18:35:18.0111 1424 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
18:35:18.0111 1424 fdc - ok
18:35:18.0220 1424 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
18:35:18.0220 1424 fdPHost - ok
18:35:18.0283 1424 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
18:35:18.0283 1424 FDResPub - ok
18:35:18.0439 1424 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
18:35:18.0439 1424 FileInfo - ok
18:35:18.0470 1424 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
18:35:18.0470 1424 Filetrace - ok
18:35:18.0532 1424 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
18:35:18.0532 1424 flpydisk - ok
18:35:18.0688 1424 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
18:35:18.0688 1424 FltMgr - ok
18:35:18.0844 1424 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
18:35:18.0844 1424 FontCache3.0.0.0 - ok
18:35:18.0891 1424 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
18:35:18.0891 1424 FsDepends - ok
18:35:18.0969 1424 [ 7DAE5EBCC80E45D3253F4923DC424D05 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
18:35:18.0985 1424 Fs_Rec - ok
18:35:19.0047 1424 [ 8A73E79089B282100B9393B644CB853B ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
18:35:19.0047 1424 fvevol - ok
18:35:19.0172 1424 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
18:35:19.0172 1424 gagp30kx - ok
18:35:19.0250 1424 [ E897EAF5ED6BA41E081060C9B447A673 ] gpsvc C:\Windows\System32\gpsvc.dll
18:35:19.0265 1424 gpsvc - ok
18:35:19.0343 1424 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
18:35:19.0359 1424 hcw85cir - ok
18:35:19.0453 1424 [ A5EF29D5315111C80A5C1ABAD14C8972 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
18:35:19.0453 1424 HdAudAddService - ok
18:35:19.0499 1424 [ 9036377B8A6C15DC2EEC53E489D159B5 ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
18:35:19.0499 1424 HDAudBus - ok
18:35:19.0624 1424 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
18:35:19.0624 1424 HidBatt - ok
18:35:19.0640 1424 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
18:35:19.0655 1424 HidBth - ok
18:35:19.0749 1424 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
18:35:19.0765 1424 HidIr - ok
18:35:19.0827 1424 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
18:35:19.0827 1424 hidserv - ok
18:35:19.0874 1424 [ 10C19F8290891AF023EAEC0832E1EB4D ] HidUsb C:\Windows\system32\drivers\hidusb.sys
18:35:19.0874 1424 HidUsb - ok
18:35:20.0014 1424 [ 196B4E3F4CCCC24AF836CE58FACBB699 ] hkmsvc C:\Windows\system32\kmsvc.dll
18:35:20.0014 1424 hkmsvc - ok
18:35:20.0092 1424 [ 6658F4404DE03D75FE3BA09F7ABA6A30 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
18:35:20.0092 1424 HomeGroupListener - ok
18:35:20.0186 1424 [ DBC02D918FFF1CAD628ACBE0C0EAA8E8 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
18:35:20.0201 1424 HomeGroupProvider - ok
18:35:20.0248 1424 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
18:35:20.0248 1424 HpSAMD - ok
18:35:20.0451 1424 [ 7BC42C65B5C6281777C1A7605B253BA8 ] HSF_DPV C:\Windows\system32\DRIVERS\HSX_DPV.sys
18:35:20.0467 1424 HSF_DPV - ok
18:35:20.0591 1424 [ 9EBF2D102CCBB6BCDFBF1B7922F8BA2E ] HSXHWAZL C:\Windows\system32\DRIVERS\HSXHWAZL.sys
18:35:20.0591 1424 HSXHWAZL - ok
18:35:20.0701 1424 [ 871917B07A141BFF43D76D8844D48106 ] HTTP C:\Windows\system32\drivers\HTTP.sys
18:35:20.0716 1424 HTTP - ok
18:35:20.0779 1424 [ 0C4E035C7F105F1299258C90886C64C5 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
18:35:20.0779 1424 hwpolicy - ok
18:35:20.0841 1424 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
18:35:20.0841 1424 i8042prt - ok
18:35:20.0919 1424 [ 5CD5F9A5444E6CDCB0AC89BD62D8B76E ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
18:35:20.0935 1424 iaStorV - ok
18:35:20.0997 1424 [ BF648877413F6160E480814A24942B65 ] IBMPMDRV C:\Windows\system32\DRIVERS\ibmpmdrv.sys
18:35:20.0997 1424 IBMPMDRV - ok
18:35:21.0044 1424 [ A75CE11915E4ECC5E1597D6E0F7BB2DB ] IBMPMSVC C:\Windows\system32\ibmpmsvc.exe
18:35:21.0059 1424 IBMPMSVC - ok
18:35:21.0293 1424 [ C521D7EB6497BB1AF6AFA89E322FB43C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:35:21.0434 1424 idsvc - ok
18:35:21.0465 1424 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
18:35:21.0465 1424 iirsp - ok
18:35:21.0574 1424 [ F95622F161474511B8D80D6B093AA610 ] IKEEXT C:\Windows\System32\ikeext.dll
18:35:21.0590 1424 IKEEXT - ok
18:35:21.0668 1424 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\drivers\intelide.sys
18:35:21.0668 1424 intelide - ok
18:35:21.0715 1424 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
18:35:21.0715 1424 intelppm - ok
18:35:21.0761 1424 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:35:21.0761 1424 IpFilterDriver - ok
18:35:21.0808 1424 [ 4BD7134618C1D2A27466A099062547BF ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
18:35:21.0808 1424 IPMIDRV - ok
18:35:21.0855 1424 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
18:35:21.0855 1424 IPNAT - ok
18:35:21.0949 1424 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
18:35:21.0949 1424 IRENUM - ok
18:35:21.0995 1424 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\drivers\isapnp.sys
18:35:21.0995 1424 isapnp - ok
18:35:22.0073 1424 [ CB7A9ABB12B8415BCE5D74994C7BA3AE ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
18:35:22.0073 1424 iScsiPrt - ok
18:35:22.0120 1424 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
18:35:22.0120 1424 kbdclass - ok
18:35:22.0245 1424 [ 9E3CED91863E6EE98C24794D05E27A71 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
18:35:22.0245 1424 kbdhid - ok
18:35:22.0307 1424 [ 81951F51E318AECC2D68559E47485CC4 ] KeyIso C:\Windows\system32\lsass.exe
18:35:22.0323 1424 KeyIso - ok
18:35:22.0401 1424 [ B7895B4182C0D16F6EFADEB8081E8D36 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
18:35:22.0401 1424 KSecDD - ok
18:35:22.0448 1424 [ D30159AC9237519FBC62C6EC247D2D46 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
18:35:22.0448 1424 KSecPkg - ok
18:35:22.0510 1424 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
18:35:22.0526 1424 KtmRm - ok
18:35:22.0557 1424 [ D64AF876D53ECA3668BB97B51B4E70AB ] LanmanServer C:\Windows\system32\srvsvc.dll
18:35:22.0573 1424 LanmanServer - ok
18:35:22.0619 1424 [ 58405E4F68BA8E4057C6E914F326ABA2 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:35:22.0666 1424 LanmanWorkstation - ok
18:35:22.0838 1424 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
18:35:22.0838 1424 lltdio - ok
18:35:22.0916 1424 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
18:35:22.0931 1424 lltdsvc - ok
18:35:22.0994 1424 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
18:35:22.0994 1424 lmhosts - ok
18:35:23.0041 1424 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
18:35:23.0056 1424 LSI_FC - ok
18:35:23.0072 1424 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
18:35:23.0072 1424 LSI_SAS - ok
18:35:23.0103 1424 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
18:35:23.0103 1424 LSI_SAS2 - ok
18:35:23.0259 1424 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
18:35:23.0275 1424 LSI_SCSI - ok
18:35:23.0384 1424 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
18:35:23.0384 1424 luafv - ok
18:35:23.0509 1424 [ 062D80F13D762F7BC2F38430D60F5048 ] McAfeeFramework C:\Program Files\McAfee\Common Framework\FrameworkService.exe
18:35:23.0555 1424 McAfeeFramework - ok
18:35:23.0665 1424 [ 50182E471B44C7A0F63B46E2DEF08B0F ] McShield C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
18:35:23.0665 1424 McShield - ok
18:35:23.0836 1424 [ 113C20EB4982C5670F49718441BEE76D ] McTaskManager C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
18:35:23.0852 1424 McTaskManager - ok
18:35:23.0914 1424 [ BFB9EE8EE977EFE85D1A3105ABEF6DD1 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
18:35:23.0914 1424 Mcx2Svc - ok
18:35:24.0008 1424 [ 0CEA2D0D3FA284B85ED5B68365114F76 ] mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys
18:35:24.0008 1424 mdmxsdk - ok
18:35:24.0070 1424 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
18:35:24.0070 1424 megasas - ok
18:35:24.0101 1424 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
18:35:24.0117 1424 MegaSR - ok
18:35:24.0211 1424 [ C0D975D64C1AF8057F2D75B1297A6979 ] mfeapfk C:\Windows\system32\drivers\mfeapfk.sys
18:35:24.0211 1424 mfeapfk - ok
18:35:24.0351 1424 [ C169326049A8A03D5F905B34F5A65F8C ] mfeavfk C:\Windows\system32\drivers\mfeavfk.sys
18:35:24.0351 1424 mfeavfk - ok
18:35:24.0398 1424 [ 50B0253B2484A306A20D8695C5AE5858 ] mfebopk C:\Windows\system32\drivers\mfebopk.sys
18:35:24.0398 1424 mfebopk - ok
18:35:24.0476 1424 [ 188B40866DB2AB8EF262FEBC65291687 ] mfehidk C:\Windows\system32\drivers\mfehidk.sys
18:35:24.0491 1424 mfehidk - ok
18:35:24.0569 1424 [ C1B30AF2E18E69BF8CEB39B33F32D3C1 ] mferkdet C:\Windows\system32\drivers\mferkdet.sys
18:35:24.0569 1424 mferkdet - ok
18:35:24.0632 1424 [ 49C8E20D178BE981FF28523A942A570F ] mfevtp C:\Windows\system32\mfevtps.exe
18:35:24.0632 1424 mfevtp - ok
18:35:24.0710 1424 [ 451B49F0E10D6058CED5B56852D82C8B ] mfewfpk C:\Windows\system32\drivers\mfewfpk.sys
18:35:24.0710 1424 mfewfpk - ok
18:35:24.0757 1424 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
18:35:24.0757 1424 MMCSS - ok
18:35:24.0788 1424 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
18:35:24.0803 1424 Modem - ok
18:35:24.0897 1424 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
18:35:24.0897 1424 monitor - ok
18:35:24.0928 1424 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\drivers\mouclass.sys
18:35:24.0928 1424 mouclass - ok
18:35:25.0006 1424 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
18:35:25.0006 1424 mouhid - ok
18:35:25.0053 1424 [ FC8771F45ECCCFD89684E38842539B9B ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
18:35:25.0053 1424 mountmgr - ok
18:35:25.0100 1424 [ 2D699FB6E89CE0D8DA14ECC03B3EDFE0 ] mpio C:\Windows\system32\drivers\mpio.sys
18:35:25.0115 1424 mpio - ok
18:35:25.0256 1424 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
18:35:25.0256 1424 mpsdrv - ok
18:35:25.0365 1424 [ CEB46AB7C01C9F825F8CC6BABC18166A ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
18:35:25.0365 1424 MRxDAV - ok
18:35:25.0443 1424 [ 5D16C921E3671636C0EBA3BBAAC5FD25 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
18:35:25.0443 1424 mrxsmb - ok
18:35:25.0474 1424 [ 6D17A4791ACA19328C685D256349FEFC ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:35:25.0474 1424 mrxsmb10 - ok
18:35:25.0568 1424 [ B81F204D146000BE76651A50670A5E9E ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:35:25.0568 1424 mrxsmb20 - ok
18:35:25.0615 1424 [ 012C5F4E9349E711E11E0F19A8589F0A ] msahci C:\Windows\system32\drivers\msahci.sys
18:35:25.0615 1424 msahci - ok
18:35:25.0677 1424 [ 55055F8AD8BE27A64C831322A780A228 ] msdsm C:\Windows\system32\drivers\msdsm.sys
18:35:25.0677 1424 msdsm - ok
18:35:25.0693 1424 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
18:35:25.0708 1424 MSDTC - ok
18:35:25.0880 1424 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
18:35:25.0880 1424 Msfs - ok
18:35:25.0911 1424 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
18:35:25.0911 1424 mshidkmdf - ok
18:35:25.0989 1424 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
18:35:25.0989 1424 msisadrv - ok
18:35:26.0020 1424 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
18:35:26.0036 1424 MSiSCSI - ok
18:35:26.0083 1424 msiserver - ok
18:35:26.0192 1424 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
18:35:26.0192 1424 MSKSSRV - ok
18:35:26.0239 1424 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
18:35:26.0239 1424 MSPCLOCK - ok
18:35:26.0270 1424 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
18:35:26.0270 1424 MSPQM - ok
18:35:26.0317 1424 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
18:35:26.0332 1424 MsRPC - ok
18:35:26.0535 1424 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
18:35:26.0535 1424 mssmbios - ok
18:35:26.0629 1424 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
18:35:26.0629 1424 MSTEE - ok
18:35:26.0660 1424 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
18:35:26.0660 1424 MTConfig - ok
18:35:26.0800 1424 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
18:35:26.0800 1424 Mup - ok
18:35:26.0847 1424 [ 61D57A5D7C6D9AFE10E77DAE6E1B445E ] napagent C:\Windows\system32\qagentRT.dll
18:35:26.0863 1424 napagent - ok
18:35:26.0987 1424 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
18:35:26.0987 1424 NativeWifiP - ok
18:35:27.0112 1424 [ 8C9C922D71F1CD4DEF73F186416B7896 ] NDIS C:\Windows\system32\drivers\ndis.sys
18:35:27.0128 1424 NDIS - ok
18:35:27.0206 1424 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
18:35:27.0206 1424 NdisCap - ok
18:35:27.0237 1424 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
18:35:27.0237 1424 NdisTapi - ok
18:35:27.0331 1424 [ D8A65DAFB3EB41CBB622745676FCD072 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
18:35:27.0331 1424 Ndisuio - ok
18:35:27.0409 1424 [ 38FBE267E7E6983311179230FACB1017 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
18:35:27.0440 1424 NdisWan - ok
18:35:27.0549 1424 [ A4BDC541E69674FBFF1A8FF00BE913F2 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
18:35:27.0549 1424 NDProxy - ok
18:35:27.0627 1424 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
18:35:27.0627 1424 NetBIOS - ok
18:35:27.0689 1424 [ 280122DDCF04B378EDD1AD54D71C1E54 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
18:35:27.0705 1424 NetBT - ok
18:35:27.0752 1424 [ 81951F51E318AECC2D68559E47485CC4 ] Netlogon C:\Windows\system32\lsass.exe
18:35:27.0752 1424 Netlogon - ok
18:35:27.0845 1424 [ F476EC40033CDB91EFBE73EB99B8362D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:35:27.0845 1424 NetTcpPortSharing - ok
18:35:28.0111 1424 [ 58218EC6B61B1169CF54AAB0D00F5FE2 ] netw5v32 C:\Windows\system32\DRIVERS\netw5v32.sys
18:35:28.0235 1424 netw5v32 - ok
18:35:28.0282 1424 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
18:35:28.0282 1424 nfrd960 - ok
18:35:28.0329 1424 [ 912084381D30D8B89EC4E293053F4710 ] NlaSvc C:\Windows\System32\nlasvc.dll
18:35:28.0345 1424 NlaSvc - ok
18:35:28.0391 1424 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
18:35:28.0391 1424 Npfs - ok
18:35:28.0423 1424 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
18:35:28.0423 1424 nsiproxy - ok
18:35:28.0516 1424 [ 0D87503986BB3DFED58E343FE39DDE13 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
18:35:28.0547 1424 Ntfs - ok
18:35:28.0625 1424 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
18:35:28.0625 1424 Null - ok
18:35:28.0813 1424 [ 6CB78EE92A95A534E418C7153EF3B1F8 ] NVIDIA Performance Driver Service C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe
18:35:28.0953 1424 NVIDIA Performance Driver Service - ok
18:35:29.0296 1424 [ 4A6688BF47940CDC1475772B235C6323 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
18:35:29.0577 1424 nvlddmkm - ok
18:35:29.0733 1424 [ B3E25EE28883877076E0E1FF877D02E0 ] nvraid C:\Windows\system32\drivers\nvraid.sys
18:35:29.0733 1424 nvraid - ok
18:35:29.0749 1424 [ 4380E59A170D88C4F1022EFF6719A8A4 ] nvstor C:\Windows\system32\drivers\nvstor.sys
18:35:29.0764 1424 nvstor - ok
18:35:29.0827 1424 [ BDF0A1C578CF6B018910E418CDBF7BD9 ] nvsvc C:\Windows\system32\nvvsvc.exe
18:35:29.0842 1424 nvsvc - ok
18:35:29.0889 1424 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
18:35:29.0889 1424 nv_agp - ok
18:35:29.0998 1424 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:35:30.0014 1424 odserv - ok
18:35:30.0045 1424 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
18:35:30.0045 1424 ohci1394 - ok
18:35:30.0092 1424 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:35:30.0092 1424 ose - ok
18:35:30.0139 1424 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
18:35:30.0139 1424 p2pimsvc - ok
18:35:30.0201 1424 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
18:35:30.0217 1424 p2psvc - ok
18:35:30.0279 1424 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
18:35:30.0279 1424 Parport - ok
18:35:30.0357 1424 [ 3F34A1B4C5F6475F320C275E63AFCE9B ] partmgr C:\Windows\system32\drivers\partmgr.sys
18:35:30.0357 1424 partmgr - ok
18:35:30.0435 1424 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
18:35:30.0435 1424 Parvdm - ok
18:35:30.0466 1424 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
18:35:30.0482 1424 PcaSvc - ok
18:35:30.0544 1424 [ 673E55C3498EB970088E812EA820AA8F ] pci C:\Windows\system32\drivers\pci.sys
18:35:30.0544 1424 pci - ok
18:35:30.0560 1424 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\drivers\pciide.sys
18:35:30.0560 1424 pciide - ok
18:35:30.0607 1424 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
18:35:30.0622 1424 pcmcia - ok
18:35:30.0653 1424 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
18:35:30.0653 1424 pcw - ok
18:35:30.0731 1424 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
18:35:30.0747 1424 PEAUTH - ok
18:35:30.0841 1424 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
18:35:30.0872 1424 PeerDistSvc - ok
18:35:30.0997 1424 [ 414BBA67A3DED1D28437EB66AEB8A720 ] pla C:\Windows\system32\pla.dll
18:35:31.0043 1424 pla - ok
18:35:31.0059 1424 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
18:35:31.0075 1424 PNRPAutoReg - ok
18:35:31.0137 1424 [ 53946B69BA0836BD95B03759530C81EC ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
18:35:31.0153 1424 PolicyAgent - ok
18:35:31.0215 1424 [ F87D30E72E03D579A5199CCB3831D6EA ] Power C:\Windows\system32\umpo.dll
18:35:31.0215 1424 Power - ok
18:35:31.0262 1424 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
18:35:31.0262 1424 PptpMiniport - ok
18:35:31.0293 1424 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
18:35:31.0293 1424 Processor - ok
18:35:31.0371 1424 [ CADEFAC453040E370A1BDFF3973BE00D ] ProfSvc C:\Windows\system32\profsvc.dll
18:35:31.0371 1424 ProfSvc - ok
18:35:31.0387 1424 [ 81951F51E318AECC2D68559E47485CC4 ] ProtectedStorage C:\Windows\system32\lsass.exe
18:35:31.0402 1424 ProtectedStorage - ok
18:35:31.0433 1424 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
18:35:31.0433 1424 Psched - ok
18:35:31.0527 1424 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
18:35:31.0558 1424 ql2300 - ok
18:35:31.0605 1424 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
18:35:31.0605 1424 ql40xx - ok
18:35:31.0636 1424 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
18:35:31.0636 1424 QWAVEdrv - ok
18:35:31.0652 1424 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
18:35:31.0667 1424 RasAcd - ok
18:35:31.0730 1424 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
18:35:31.0730 1424 RasAgileVpn - ok
18:35:31.0777 1424 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
18:35:31.0792 1424 RasAuto - ok
18:35:31.0823 1424 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
18:35:31.0839 1424 Rasl2tp - ok
18:35:31.0870 1424 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
18:35:31.0886 1424 RasPppoe - ok
18:35:31.0917 1424 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
18:35:31.0933 1424 RasSstp - ok
18:35:31.0979 1424 [ D528BC58A489409BA40334EBF96A311B ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
18:35:31.0979 1424 rdbss - ok
18:35:32.0042 1424 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
18:35:32.0057 1424 rdpbus - ok
18:35:32.0120 1424 [ 23DAE03F29D253AE74C44F99E515F9A1 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
18:35:32.0120 1424 RDPCDD - ok
18:35:32.0198 1424 [ B973FCFC50DC1434E1970A146F7E3885 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
18:35:32.0213 1424 RDPDR - ok
18:35:32.0260 1424 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
18:35:32.0260 1424 RDPENCDD - ok
18:35:32.0307 1424 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
18:35:32.0307 1424 RDPREFMP - ok
18:35:32.0369 1424 [ F031683E6D1FEA157ABB2FF260B51E61 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
18:35:32.0369 1424 RDPWD - ok
18:35:32.0416 1424 [ 518395321DC96FE2C9F0E96AC743B656 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
18:35:32.0416 1424 rdyboost - ok
18:35:32.0494 1424 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
18:35:32.0494 1424 RemoteAccess - ok
18:35:32.0541 1424 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
18:35:32.0557 1424 RemoteRegistry - ok
18:35:32.0572 1424 [ CB928D9E6DAF51879DD6BA8D02F01321 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
18:35:32.0572 1424 RFCOMM - ok
18:35:32.0650 1424 [ D65AC8797F0286ED269500747D6290A4 ] rimmptsk C:\Windows\system32\DRIVERS\rimmptsk.sys
18:35:32.0650 1424 rimmptsk - ok
18:35:32.0681 1424 [ 49EC82B44EB93374ED9988DA7E0E0151 ] rimsptsk C:\Windows\system32\DRIVERS\rimsptsk.sys
18:35:32.0681 1424 rimsptsk - ok
18:35:32.0697 1424 [ 3F400C3CCD0818858602DDB37B5DE719 ] rismxdp C:\Windows\system32\DRIVERS\rixdptsk.sys
18:35:32.0713 1424 rismxdp - ok
18:35:32.0744 1424 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
18:35:32.0759 1424 RpcEptMapper - ok
18:35:32.0791 1424 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
18:35:32.0791 1424 RpcLocator - ok
18:35:32.0869 1424 [ 7660F01D3B38ACA1747E397D21D790AF ] RpcSs C:\Windows\system32\rpcss.dll
18:35:32.0869 1424 RpcSs - ok
18:35:32.0931 1424 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
18:35:32.0931 1424 rspndr - ok
18:35:33.0009 1424 [ 7FA7F2E249A5DCBB7970630E15E1F482 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
18:35:33.0009 1424 s3cap - ok
18:35:33.0025 1424 [ 81951F51E318AECC2D68559E47485CC4 ] SamSs C:\Windows\system32\lsass.exe
18:35:33.0025 1424 SamSs - ok
18:35:33.0118 1424 [ 5BF35C4EA3F00FA8D3F1E5BF03D24584 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
18:35:33.0118 1424 SASDIFSV - ok
18:35:33.0149 1424 [ A22F08C98AC2F44587BF3A1FB52BF8CD ] SASENUM C:\Program Files\SUPERAntiSpyware\SASENUM.SYS
18:35:33.0149 1424 SASENUM - ok
18:35:33.0165 1424 [ 81C02EA5F88CA4125E579384DFD75E3A ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
18:35:33.0165 1424 SASKUTIL - ok
18:35:33.0212 1424 [ 05D860DA1040F111503AC416CCEF2BCA ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
18:35:33.0227 1424 sbp2port - ok
18:35:33.0259 1424 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
18:35:33.0274 1424 SCardSvr - ok
18:35:33.0305 1424 [ 0693B5EC673E34DC147E195779A4DCF6 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
18:35:33.0305 1424 scfilter - ok
18:35:33.0399 1424 [ A04BB13F8A72F8B6E8B4071723E4E336 ] Schedule C:\Windows\system32\schedsvc.dll
18:35:33.0415 1424 Schedule - ok
18:35:33.0430 1424 [ 319C6B309773D063541D01DF8AC6F55F ] SCPolicySvc C:\Windows\System32\certprop.dll
18:35:33.0430 1424 SCPolicySvc - ok
18:35:33.0524 1424 [ 0328BE1C7F1CBA23848179F8762E391C ] sdbus C:\Windows\system32\drivers\sdbus.sys
18:35:33.0524 1424 sdbus - ok
18:35:33.0571 1424 [ 08236C4BCE5EDD0A0318A438AF28E0F7 ] SDRSVC C:\Windows\System32\SDRSVC.dll
18:35:33.0586 1424 SDRSVC - ok
18:35:33.0649 1424 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
18:35:33.0649 1424 secdrv - ok
18:35:33.0711 1424 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
18:35:33.0727 1424 Serenum - ok
18:35:33.0773 1424 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
18:35:33.0789 1424 Serial - ok
18:35:33.0820 1424 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
18:35:33.0820 1424 sermouse - ok
18:35:33.0883 1424 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
18:35:33.0883 1424 sffdisk - ok
18:35:33.0914 1424 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
18:35:33.0914 1424 sffp_mmc - ok
18:35:33.0945 1424 [ 6D4CCAEDC018F1CF52866BBBAA235982 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
18:35:33.0961 1424 sffp_sd - ok
18:35:34.0007 1424 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
18:35:34.0007 1424 sfloppy - ok
18:35:34.0085 1424 [ 414DA952A35BF5D50192E28263B40577 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:35:34.0101 1424 ShellHWDetection - ok
18:35:34.0163 1424 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\drivers\sisagp.sys
18:35:34.0163 1424 sisagp - ok
18:35:34.0210 1424 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
18:35:34.0210 1424 SiSRaid2 - ok
18:35:34.0273 1424 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
18:35:34.0288 1424 SiSRaid4 - ok
18:35:34.0319 1424 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
18:35:34.0319 1424 Smb - ok
18:35:34.0413 1424 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
18:35:34.0413 1424 SNMPTRAP - ok
18:35:34.0460 1424 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
18:35:34.0460 1424 spldr - ok
18:35:34.0538 1424 [ 9AEA093B8F9C37CF45538382CABA2475 ] Spooler C:\Windows\System32\spoolsv.exe
18:35:34.0553 1424 Spooler - ok
18:35:34.0678 1424 [ CF87A1DE791347E75B98885214CED2B8 ] sppsvc C:\Windows\system32\sppsvc.exe
18:35:34.0787 1424 sppsvc - ok
18:35:34.0865 1424 [ E4C2764065D66EA1D2D3EBC28FE99C46 ] srv C:\Windows\system32\DRIVERS\srv.sys
18:35:34.0865 1424 srv - ok
18:35:34.0912 1424 [ 03F0545BD8D4C77FA0AE1CEEDFCC71AB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
18:35:34.0943 1424 srv2 - ok
18:35:35.0006 1424 [ E00FDFAFF025E94F9821153750C35A6D ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL3.SYS
18:35:35.0021 1424 SrvHsfHDA - ok
18:35:35.0068 1424 [ CEB4E3B6890E1E42DCA6694D9E59E1A0 ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV3.SYS
18:35:35.0099 1424 SrvHsfV92 - ok
18:35:35.0146 1424 [ BC0C7EA89194C299F051C24119000E17 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT3.SYS
18:35:35.0162 1424 SrvHsfWinac - ok
18:35:35.0224 1424 [ BE6BD660CAA6F291AE06A718A4FA8ABC ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
18:35:35.0224 1424 srvnet - ok
18:35:35.0287 1424 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
18:35:35.0302 1424 SSDPSRV - ok
18:35:35.0318 1424 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
18:35:35.0333 1424 SstpSvc - ok
18:35:35.0380 1424 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
18:35:35.0380 1424 stexstor - ok
18:35:35.0458 1424 [ E1FB3706030FB4578A0D72C2FC3689E4 ] StiSvc C:\Windows\System32\wiaservc.dll
18:35:35.0474 1424 StiSvc - ok
18:35:35.0489 1424 [ 472AF0311073DCECEAA8FA18BA2BDF89 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
18:35:35.0489 1424 storflt - ok
18:35:35.0552 1424 [ 0BF669F0A910BEDA4A32258D363AF2A5 ] StorSvc C:\Windows\system32\storsvc.dll
18:35:35.0567 1424 StorSvc - ok
18:35:35.0630 1424 [ DCAFFD62259E0BDB433DD67B5BB37619 ] storvsc C:\Windows\system32\drivers\storvsc.sys
18:35:35.0630 1424 storvsc - ok
18:35:35.0661 1424 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\drivers\swenum.sys
18:35:35.0661 1424 swenum - ok
18:35:35.0755 1424 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
18:35:35.0770 1424 swprv - ok
18:35:35.0833 1424 [ D7DC30B8B41E7A913C3FCCC0631E72EC ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
18:35:35.0848 1424 SynTP - ok
18:35:35.0911 1424 [ 763FECDC3D30C815FE72DD57936C6CD1 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:35:35.0926 1424 TabletInputService - ok
18:35:35.0957 1424 [ 613BF4820361543956909043A265C6AC ] TapiSrv C:\Windows\System32\tapisrv.dll
18:35:35.0973 1424 TapiSrv - ok
18:35:36.0020 1424 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
18:35:36.0020 1424 TBS - ok
18:35:36.0129 1424 [ A5EBB8F648000E88B7D9390B514976BF ] Tcpip C:\Windows\system32\drivers\tcpip.sys
18:35:36.0145 1424 Tcpip - ok
18:35:36.0191 1424 [ A5EBB8F648000E88B7D9390B514976BF ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
18:35:36.0207 1424 TCPIP6 - ok
18:35:36.0285 1424 [ CCA24162E055C3714CE5A88B100C64ED ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
18:35:36.0285 1424 tcpipreg - ok
18:35:36.0363 1424 [ 1CB91B2BD8F6DD367DFC2EF26FD751B2 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
18:35:36.0363 1424 TDPIPE - ok
18:35:36.0425 1424 [ 2C2C5AFE7EE4F620D69C23C0617651A8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
18:35:36.0425 1424 TDTCP - ok
18:35:36.0488 1424 [ B459575348C20E8121D6039DA063C704 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
18:35:36.0488 1424 tdx - ok
18:35:36.0550 1424 [ 04DBF4B01EA4BF25A9A3E84AFFAC9B20 ] TermDD C:\Windows\system32\drivers\termdd.sys
18:35:36.0550 1424 TermDD - ok
18:35:36.0628 1424 [ 382C804C92811BE57829D8E550A900E2 ] TermService C:\Windows\System32\termsrv.dll
18:35:36.0644 1424 TermService - ok
18:35:36.0691 1424 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
18:35:36.0706 1424 Themes - ok
18:35:36.0737 1424 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
18:35:36.0737 1424 THREADORDER - ok
18:35:36.0800 1424 [ 5AD05191DC8B444A7BA4D79B76C42A30 ] TPM C:\Windows\system32\drivers\tpm.sys
18:35:36.0800 1424 TPM - ok
18:35:36.0862 1424 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
18:35:36.0878 1424 TrkWks - ok
18:35:36.0940 1424 [ 2C49B175AEE1D4364B91B531417FE583 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:35:36.0940 1424 TrustedInstaller - ok
18:35:37.0003 1424 [ 254BB140EEE3C59D6114C1A86B636877 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
18:35:37.0003 1424 tssecsrv - ok
18:35:37.0081 1424 [ FD1D6C73E6333BE727CBCC6054247654 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
18:35:37.0081 1424 TsUsbFlt - ok
18:35:37.0159 1424 [ B2FA25D9B17A68BB93D58B0556E8C90D ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
18:35:37.0159 1424 tunnel - ok
18:35:37.0221 1424 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
18:35:37.0237 1424 uagp35 - ok
18:35:37.0299 1424 [ EE43346C7E4B5E63E54F927BABBB32FF ] udfs C:\Windows\system32\DRIVERS\udfs.sys
18:35:37.0299 1424 udfs - ok
18:35:37.0377 1424 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
18:35:37.0377 1424 UI0Detect - ok
18:35:37.0424 1424 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
18:35:37.0424 1424 uliagpkx - ok
18:35:37.0455 1424 [ D295BED4B898F0FD999FCFA9B32B071B ] umbus C:\Windows\system32\drivers\umbus.sys
18:35:37.0455 1424 umbus - ok
18:35:37.0517 1424 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
18:35:37.0517 1424 UmPass - ok
18:35:37.0595 1424 [ 409994A8EACEEE4E328749C0353527A0 ] UmRdpService C:\Windows\System32\umrdp.dll
18:35:37.0611 1424 UmRdpService - ok
18:35:37.0642 1424 [ BD9C55D7023C5DE374507ACC7A14E2AC ] usbccgp C:\Windows\system32\drivers\usbccgp.sys
18:35:37.0658 1424 usbccgp - ok
18:35:37.0689 1424 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\drivers\usbcir.sys
18:35:37.0705 1424 usbcir - ok
18:35:37.0783 1424 [ F92DE757E4B7CE9C07C5E65423F3AE3B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
18:35:37.0783 1424 usbehci - ok
18:35:37.0814 1424 [ 8DC94AEC6A7E644A06135AE7506DC2E9 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
18:35:37.0829 1424 usbhub - ok
18:35:37.0845 1424 [ E185D44FAC515A18D9DEDDC23C2CDF44 ] usbohci C:\Windows\system32\drivers\usbohci.sys
18:35:37.0845 1424 usbohci - ok
18:35:37.0923 1424 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
18:35:37.0923 1424 usbprint - ok
18:35:37.0970 1424 [ F991AB9CC6B908DB552166768176896A ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:35:37.0970 1424 USBSTOR - ok
18:35:38.0017 1424 [ 68DF884CF41CDADA664BEB01DAF67E3D ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
18:35:38.0017 1424 usbuhci - ok
18:35:38.0110 1424 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
18:35:38.0110 1424 UxSms - ok
18:35:38.0126 1424 [ 81951F51E318AECC2D68559E47485CC4 ] VaultSvc C:\Windows\system32\lsass.exe
18:35:38.0126 1424 VaultSvc - ok
18:35:38.0173 1424 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
18:35:38.0173 1424 vdrvroot - ok
18:35:38.0235 1424 [ C3CD30495687C2A2F66A65CA6FD89BE9 ] vds C:\Windows\System32\vds.exe
18:35:38.0251 1424 vds - ok
18:35:38.0297 1424 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
18:35:38.0297 1424 vga - ok
18:35:38.0344 1424 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
18:35:38.0344 1424 VgaSave - ok
18:35:38.0391 1424 [ 5461686CCA2FDA57B024547733AB42E3 ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
18:35:38.0391 1424 vhdmp - ok
18:35:38.0422 1424 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\drivers\viaagp.sys
18:35:38.0422 1424 viaagp - ok
18:35:38.0469 1424 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
18:35:38.0469 1424 ViaC7 - ok
18:35:38.0500 1424 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\drivers\viaide.sys
18:35:38.0500 1424 viaide - ok
18:35:38.0547 1424 [ C2F2911156FDC7817C52829C86DA494E ] vmbus C:\Windows\system32\drivers\vmbus.sys
18:35:38.0547 1424 vmbus - ok
18:35:38.0578 1424 [ D4D77455211E204F370D08F4963063CE ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
18:35:38.0578 1424 VMBusHID - ok
18:35:38.0609 1424 [ 4C63E00F2F4B5F86AB48A58CD990F212 ] volmgr C:\Windows\system32\drivers\volmgr.sys
18:35:38.0609 1424 volmgr - ok
18:35:38.0672 1424 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
18:35:38.0687 1424 volmgrx - ok
18:35:38.0734 1424 [ F497F67932C6FA693D7DE2780631CFE7 ] volsnap C:\Windows\system32\drivers\volsnap.sys
18:35:38.0734 1424 volsnap - ok
18:35:38.0797 1424 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
18:35:38.0812 1424 vsmraid - ok
18:35:38.0875 1424 [ 209A3B1901B83AEB8527ED211CCE9E4C ] VSS C:\Windows\system32\vssvc.exe
18:35:38.0906 1424 VSS - ok
18:35:38.0968 1424 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
18:35:38.0984 1424 vwifibus - ok
18:35:39.0046 1424 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
18:35:39.0062 1424 W32Time - ok
18:35:39.0093 1424 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
18:35:39.0093 1424 WacomPen - ok
18:35:39.0140 1424 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
18:35:39.0155 1424 WANARP - ok
18:35:39.0155 1424 [ 3C3C78515F5AB448B022BDF5B8FFDD2E ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
18:35:39.0155 1424 Wanarpv6 - ok
18:35:39.0249 1424 [ 353A04C273EC58475D8633E75CCD5604 ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
18:35:39.0280 1424 WatAdminSvc - ok
18:35:39.0358 1424 [ 691E3285E53DCA558E1A84667F13E15A ] wbengine C:\Windows\system32\wbengine.exe
18:35:39.0389 1424 wbengine - ok
18:35:39.0436 1424 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
18:35:39.0452 1424 WbioSrvc - ok
18:35:39.0530 1424 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
18:35:39.0530 1424 Wd - ok
18:35:39.0561 1424 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
18:35:39.0577 1424 Wdf01000 - ok
18:35:39.0655 1424 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
18:35:39.0655 1424 WdiServiceHost - ok
18:35:39.0686 1424 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
18:35:39.0686 1424 WdiSystemHost - ok
18:35:39.0717 1424 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
18:35:39.0733 1424 Wecsvc - ok
18:35:39.0764 1424 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
18:35:39.0779 1424 wercplsupport - ok
18:35:39.0826 1424 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
18:35:39.0826 1424 WerSvc - ok
18:35:39.0873 1424 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
18:35:39.0889 1424 WfpLwf - ok
18:35:39.0920 1424 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
18:35:39.0920 1424 WIMMount - ok
18:35:39.0967 1424 [ 5A77AC34A0FFB70CE8B35B524FEDE9BA ] winachsf C:\Windows\system32\DRIVERS\HSX_CNXT.sys
18:35:39.0982 1424 winachsf - ok
18:35:40.0045 1424 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
18:35:40.0060 1424 Winmgmt - ok
18:35:40.0123 1424 [ 1B91CD34EA3A90AB6A4EF0550174F4CC ] WinRM C:\Windows\system32\WsmSvc.dll
18:35:40.0154 1424 WinRM - ok
18:35:40.0247 1424 [ A67E5F9A400F3BD1BE3D80613B45F708 ] WinUsb C:\Windows\system32\DRIVERS\WinUSB.sys
18:35:40.0247 1424 WinUsb - ok
18:35:40.0341 1424 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
18:35:40.0372 1424 Wlansvc - ok
18:35:40.0388 1424 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
18:35:40.0388 1424 WmiAcpi - ok
18:35:40.0450 1424 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
18:35:40.0450 1424 wmiApSrv - ok
18:35:40.0528 1424 [ 3B40D3A61AA8C21B88AE57C58AB3122E ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
18:35:40.0559 1424 WMPNetworkSvc - ok
18:35:40.0606 1424 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
18:35:40.0622 1424 WPCSvc - ok
18:35:40.0669 1424 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
18:35:40.0684 1424 ws2ifsl - ok
18:35:40.0715 1424 WSearch - ok
18:35:40.0809 1424 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
18:35:40.0856 1424 wuauserv - ok
18:35:40.0871 1424 [ E714A1C0354636837E20CCBF00888EE7 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
18:35:40.0871 1424 WudfPf - ok
18:35:40.0918 1424 [ 1023EE888C9B47178C5293ED5336AB69 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
18:35:40.0934 1424 WUDFRd - ok
18:35:40.0965 1424 [ 8D1E1E529A2C9E9B6A85B55A345F7629 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
18:35:40.0981 1424 wudfsvc - ok
18:35:41.0043 1424 [ 88AF537264F2B818DA15479CEEAF5D7C ] XAudio C:\Windows\system32\DRIVERS\xaudio.sys
18:35:41.0043 1424 XAudio - ok
18:35:41.0105 1424 [ 15A317674A08DF26BE65164D959E9203 ] XAudioService C:\Windows\system32\DRIVERS\xaudio.exe
18:35:41.0121 1424 XAudioService - ok
18:35:41.0215 1424 ================ Scan global ===============================
18:35:41.0277 1424 [ DAB748AE0439955ED2FA22357533DDDB ] C:\Windows\system32\basesrv.dll
18:35:41.0371 1424 [ 48CB4FDBCAAEAC7BCE2F5941545FF071 ] C:\Windows\system32\winsrv.dll
18:35:41.0386 1424 [ 48CB4FDBCAAEAC7BCE2F5941545FF071 ] C:\Windows\system32\winsrv.dll
18:35:41.0464 1424 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
18:35:41.0495 1424 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
18:35:41.0495 1424 [Global] - ok
18:35:41.0511 1424 ================ Scan MBR ==================================
18:35:41.0542 1424 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
18:35:42.0307 1424 \Device\Harddisk0\DR0 - ok
18:35:42.0307 1424 ================ Scan VBR ==================================
18:35:42.0353 1424 [ 57B4E4B6890FD0723C4DB1952E82D193 ] \Device\Harddisk0\DR0\Partition1
18:35:42.0353 1424 \Device\Harddisk0\DR0\Partition1 - ok
18:35:42.0369 1424 ============================================================
18:35:42.0369 1424 Scan finished
18:35:42.0369 1424 ============================================================
18:35:42.0400 1416 Detected object count: 0
18:35:42.0400 1416 Actual detected object count: 0

>Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

ComboFix finished. The log is included below.

I rebooted into normal mode, and the computer is still exhibiting the same symptoms.

===============================================

ComboFix 12-11-19.02 - T61p 11/19/2012 19:25:35.1.2 - x86 NETWORK
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3054.2508 [GMT -5:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: McAfee VirusScan Enterprise *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: McAfee VirusScan Enterprise Antispyware Module *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Thumbs.db
c:\users\T61p\AppData\Roaming\793BEB
c:\users\T61p\AppData\Roaming\793BEB\793BEB.exe
c:\users\T61p\AppData\Roaming\Ydid
c:\users\T61p\AppData\Roaming\Ydid\keybk.exe
c:\users\T61p\Applications\Microsoft\msmedia.exe
c:\users\T61p\Applications\Microsoft\msplayer.exe
c:\windows\Temp\temp28.exe
.
.
((((((((((((((((((((((((( Files Created from 2012-10-20 to 2012-11-20 )))))))))))))))))))))))))))))))
.
.
2012-11-20 00:31 . 2012-11-20 00:31 ——– d—–w- c:\users\T61p\AppData\Local\temp
2012-11-20 00:31 . 2012-11-20 00:31 ——– d—–w- c:\users\Default\AppData\Local\temp
2012-11-09 22:13 . 2012-11-09 22:15 ——– d—–w- c:\programdata\SOPAgent
2012-11-09 21:55 . 2012-11-09 21:55 ——– d—–w- c:\users\T61p\Applications
2012-11-09 21:54 . 2012-11-09 22:05 ——– d—–w- c:\users\T61p\AppData\Roaming\Avex
2012-11-09 21:54 . 2012-11-09 21:54 ——– d—–w- c:\users\T61p\AppData\Roaming\Ugovyh
2012-11-09 21:45 . 2012-10-12 05:56 6918632 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C2EA3C82-6638-4962-BF63-C9B2B9C8B509}\mpengine.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-08 23:20 . 2012-04-28 23:46 696760 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-08 23:20 . 2012-04-28 23:46 73656 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-14 18:28 . 2012-10-10 19:30 2048 —-a-w- c:\windows\system32\tzres.dll
2012-09-07 21:04 . 2011-08-28 22:37 22856 —-a-w- c:\windows\system32\drivers\mbam.sys
2012-08-31 17:18 . 2012-10-10 19:29 1211760 —-a-w- c:\windows\system32\drivers\ntfs.sys
2012-08-30 17:12 . 2012-10-10 19:28 3968880 —-a-w- c:\windows\system32\ntkrnlpa.exe
2012-08-30 17:12 . 2012-10-10 19:28 3914096 —-a-w- c:\windows\system32\ntoskrnl.exe
2012-08-24 16:57 . 2012-10-10 19:30 172544 —-a-w- c:\windows\system32\wintrust.dll
2012-08-24 06:59 . 2012-09-22 07:00 1800704 —-a-w- c:\windows\system32\jscript9.dll
2012-08-24 06:51 . 2012-09-22 07:00 1129472 —-a-w- c:\windows\system32\wininet.dll
2012-08-24 06:51 . 2012-09-22 07:00 1427968 —-a-w- c:\windows\system32\inetcpl.cpl
2012-08-24 06:47 . 2012-09-22 07:00 142848 —-a-w- c:\windows\system32\ieUnatt.exe
2012-08-24 06:47 . 2012-09-22 07:00 420864 —-a-w- c:\windows\system32\vbscript.dll
2012-08-24 06:43 . 2012-09-22 07:00 2382848 —-a-w- c:\windows\system32\mshtml.tlb
2012-08-22 17:16 . 2012-09-12 20:45 1292144 —-a-w- c:\windows\system32\drivers\tcpip.sys
2012-08-22 17:16 . 2012-09-12 20:45 712048 —-a-w- c:\windows\system32\drivers\ndis.sys
2012-08-22 17:16 . 2012-09-12 20:45 240496 —-a-w- c:\windows\system32\drivers\netio.sys
2012-08-22 17:16 . 2012-09-12 20:45 187760 —-a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 94208 —-a-w- c:\users\T61p\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 94208 —-a-w- c:\users\T61p\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-15 00:32 94208 —-a-w- c:\users\T61p\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware (cleanup)"="c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll" [2012-09-07 1089608]
.
c:\users\T61p\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\T61p\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-6-13 27595032]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
.
[HKLM\~\startupfolder\C:^Users^T61p^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
path=c:\users\T61p\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
backup=c:\windows\pss\Dropbox.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\McAfeeUpdaterUI]
KEY [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
VSTARTUP [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShStatEXE]
E [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
2009-08-27 03:10 1657376 —-a-w- c:\windows\System32\nwiz.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SOPAgent]
2012-11-11 21:48 8 —-a-w- c:\programdata\SOPAgent\sopag_oxgmvte.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
2009-06-23 15:01 1830128 —-a-w- c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe
.
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [x]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.sys [x]
R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [x]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 NVIDIA Performance Driver Service;NVIDIA Performance Driver Service;c:\program files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe [x]
S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [x]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [x]
S3 netw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-11-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-28 23:20]
.
.
——- Supplementary Scan ——-
.
uStart Page = https://www.google.com/
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.1
.
- - - - ORPHANS REMOVED - - - -
.
MSConfigStartUp-Adobe ARM - FILES\ADOBE\ARM\1.0\ADOBEARM.EXE
MSConfigStartUp-msmediapro - c:\users\T61p\Applications\Microsoft\msmedia.exe
MSConfigStartUp-msplayer - c:\users\T61p\Applications\Microsoft\msplayer.exe
MSConfigStartUp-Saudok - c:\users\T61p\AppData\Roaming\Ydid\keybk.exe
MSConfigStartUp-SonyAgent - c:\windows\Temp\temp28.exe
MSConfigStartUp-SoundMAXPnP - P.EXE
MSConfigStartUp-SunJavaUpdateSched - FILES\JAVA\JAVA UPDATE\JUSCHED.EXE
MSConfigStartUp-SUPERAntiSpyware - c:\users\T61p\AppData\Roaming\793BEB\793BEB.exe
MSConfigStartUp-SynTPEnh - H.EXE
.
.
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-11-19 19:32:46
ComboFix-quarantined-files.txt 2012-11-20 00:32
.
Pre-Run: 181,664,256,000 bytes free
Post-Run: 182,224,449,536 bytes free
.
- - End Of File - - D7D3BA1D77D117C018096CFE2C0951A3

I have the new log and a question about the repair disc I was not able to create the repair disc on the infected machine. I did create it on my clean machine but the disc that was created was said to be a "64 bit" repair disc and I know the infected machine is a "32 bit" machine. Will that be an issue? Here is the log file =============================== Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-11-2012 Ran by [removed] at 20-11-2012 09:27:34 Running from D:\ Windows 7 Professional (X86) OS Language: English(US) The current controlset is ControlSet002 ==================== Registry ================================ HKU\Default\…\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun [1174016 2010-11-20] (Microsoft Corporation) HKU\Default\…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe [93696 2009-07-13] (Microsoft Corporation) HKU\Default User\…\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun [1174016 2010-11-20] (Microsoft Corporation) HKU\Default User\…\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe [93696 2009-07-13] (Microsoft Corporation) HKLM\…\RunOnce: [Malwarebytes Anti-Malware (cleanup)] rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1089608 2012-09-07] (Malwarebytes Corporation) HKLM\…\Winlogon: [Userinit] C:\Windows\system32\userinit.exe, [26624 2010-11-20] (Microsoft Corporation) HKLM\…\Winlogon: [Shell] Explorer.exe [2616320 2011-02-24] (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 Lsa: [Authentication Packages] msv1_0 Lsa: [Notification Packages] scecli Startup: C:\Users\T61p\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> (No File) ============== Services ========================= 4 AdobeARMservice; "C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe" [63960 2012-07-27] (Adobe Systems Incorporated) 4 AdobeFlashPlayerUpdateSvc; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [250808 2012-10-08] (Adobe Systems Incorporated) 4 AEADIFilters; C:\Windows\System32\AEADISRV.EXE [90112 2008-07-15] (Andrea Electronics Corporation) 3 AeLookupSvc; C:\Windows\System32\aelupsvc.dll [62464 2009-07-13] (Microsoft Corporation) 3 ALG; C:\Windows\System32\alg.exe [59392 2009-07-13] (Microsoft Corporation) 3 AppIDSvc; C:\Windows\System32\appidsvc.dll [27648 2009-07-13] (Microsoft Corporation) 3 AppMgmt; C:\Windows\System32\appmgmts.dll [149504 2009-07-13] (Microsoft Corporation) 2 AudioEndpointBuilder; C:\Windows\System32\Audiosrv.dll [473600 2010-11-20] (Microsoft Corporation) 2 Audiosrv; C:\Windows\System32\Audiosrv.dll [473600 2010-11-20] (Microsoft Corporation) 3 BDESVC; C:\Windows\System32\bdesvc.dll [76800 2009-07-13] (Microsoft Corporation) 2 BFE; C:\Windows\System32\bfe.dll [494592 2010-11-20] (Microsoft Corporation) 3 BITS; C:\Windows\System32\qmgr.dll [585728 2010-11-20] (Microsoft Corporation) 3 Browser; C:\Windows\System32\browser.dll [102912 2012-07-04] (Microsoft Corporation) 3 bthserv; C:\Windows\System32\bthserv.dll [64512 2009-07-13] (Microsoft Corporation) 3 CertPropSvc; C:\Windows\System32\certprop.dll [67584 2010-11-20] (Microsoft Corporation) 4 clr_optimization_v2.0.50727_32; C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [66384 2009-06-10] (Microsoft Corporation) 2 clr_optimization_v4.0.30319_32; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [130384 2010-03-18] (Microsoft Corporation) 3 COMSysApp; C:\Windows\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} [7168 2009-07-13] (Microsoft Corporation) 2 CryptSvc; C:\Windows\System32\cryptsvc.dll [140288 2012-06-01] (Microsoft Corporation) 2 CscService; C:\Windows\System32\cscsvc.dll [546304 2010-11-20] (Microsoft Corporation) 2 DcomLaunch; C:\Windows\System32\rpcss.dll [376832 2010-11-20] (Microsoft Corporation) 3 defragsvc; C:\Windows\System32\defragsvc.dll [218624 2009-07-13] (Microsoft Corporation) 2 Dhcp; C:\Windows\System32\dhcpcore.dll [254464 2010-11-20] (Microsoft Corporation) 2 Dnscache; C:\Windows\System32\dnsrslvr.dll [132608 2011-03-02] (Microsoft Corporation) 3 dot3svc; C:\Windows\System32\dot3svc.dll [214016 2010-11-20] (Microsoft Corporation) 2 DPS; C:\Windows\System32\dps.dll [144384 2010-11-20] (Microsoft Corporation) 3 EapHost; C:\Windows\System32\eapsvc.dll [98304 2009-07-13] (Microsoft Corporation) 3 EFS; C:\Windows\System32\lsass.exe [22528 2011-11-16] (Microsoft Corporation) 3 ehRecvr; C:\Windows\ehome\ehRecvr.exe [556544 2010-11-20] (Microsoft Corporation) 3 ehSched; C:\Windows\ehome\ehsched.exe [94720 2009-07-13] (Microsoft Corporation) 2 eventlog; C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [20992 2009-07-13] (Microsoft Corporation) 2 EventSystem; C:\Windows\System32\es.dll [271360 2009-07-13] (Microsoft Corporation) 3 Fax; C:\Windows\System32\fxssvc.exe [523264 2010-11-20] (Microsoft Corporation) 3 fdPHost; C:\Windows\System32\fdPHost.dll [12800 2009-07-13] (Microsoft Corporation) 2 FDResPub; C:\Windows\System32\fdrespub.dll [28160 2009-07-13] (Microsoft Corporation) 3 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [42856 2009-06-10] (Microsoft Corporation) 2 gpsvc; C:\Windows\System32\gpsvc.dll [593408 2010-11-20] (Microsoft Corporation) 3 hidserv; C:\Windows\System32\hidserv.dll [49152 2009-07-13] (Microsoft Corporation) 3 hkmsvc; C:\Windows\System32\kmsvc.dll [71168 2010-11-20] (Microsoft Corporation) 3 HomeGroupListener; C:\Windows\System32\ListSvc.dll [194560 2010-11-20] (Microsoft Corporation) 3 HomeGroupProvider; C:\Windows\System32\provsvc.dll [165376 2010-11-20] (Microsoft Corporation) 4 IBMPMSVC; C:\Windows\System32\ibmpmsvc.exe [36400 2007-05-31] (Lenovo) 3 idsvc; "C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe" [878416 2010-11-04] (Microsoft Corporation) 2 IKEEXT; C:\Windows\System32\ikeext.dll [674304 2010-11-20] (Microsoft Corporation) 3 KeyIso; C:\Windows\System32\lsass.exe [22528 2011-11-16] (Microsoft Corporation) 3 KtmRm; C:\Windows\System32\msdtckrm.dll [308736 2009-07-13] (Microsoft Corporation) 2 LanmanServer; C:\Windows\System32\srvsvc.dll [168960 2010-11-20] (Microsoft Corporation) 2 LanmanWorkstation; C:\Windows\System32\wkssvc.dll [84480 2010-11-20] (Microsoft Corporation) 3 lltdsvc; C:\Windows\System32\lltdsvc.dll [189952 2009-07-13] (Microsoft Corporation) 2 lmhosts; C:\Windows\System32\lmhsvc.dll [18432 2009-07-13] (Microsoft Corporation) 2 McAfeeFramework; "C:\Program Files\McAfee\Common Framework\FrameworkService.exe" /ServiceStart [120128 2011-01-12] (McAfee, Inc.) 2 McShield; "C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe" [159320 2011-10-04] (McAfee, Inc.) 2 McTaskManager; "C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe" [209760 2011-01-12] (McAfee, Inc.) 4 Mcx2Svc; C:\Windows\System32\Mcx2Svc.dll [68096 2010-11-20] (Microsoft Corporation) 2 mfevtp; "C:\Windows\system32\mfevtps.exe" [145936 2011-10-04] (McAfee, Inc.) 2 MMCSS; C:\Windows\System32\mmcss.dll [49664 2009-07-13] (Microsoft Corporation) 3 MSDTC; C:\Windows\System32\msdtc.exe [134144 2009-07-13] (Microsoft Corporation) 3 MSiSCSI; C:\Windows\System32\iscsiexe.dll [114688 2009-07-13] (Microsoft Corporation) 3 msiserver; C:\Windows\System32\msiexec.exe /V [73216 2010-11-20] (Microsoft Corporation) 3 napagent; C:\Windows\System32\qagentRT.dll [330240 2010-11-20] (Microsoft Corporation) 3 Netlogon; C:\Windows\System32\lsass.exe [22528 2011-11-16] (Microsoft Corporation) 4 NetTcpPortSharing; "C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe" [128848 2010-11-04] (Microsoft Corporation) 2 NlaSvc; C:\Windows\System32\nlasvc.dll [242688 2010-11-20] (Microsoft Corporation) 4 NVIDIA Performance Driver Service; "C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe" [4446752 2009-07-19] () 4 nvsvc; C:\Windows\system32\nvvsvc.exe [211560 2009-09-05] (NVIDIA Corporation) 3 odserv; "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE" [440696 2011-07-20] (Microsoft Corporation) 3 ose; "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" [145184 2006-10-26] (Microsoft Corporation) 3 p2pimsvc; C:\Windows\System32\pnrpsvc.dll [269824 2009-07-13] (Microsoft Corporation) 3 p2psvc; C:\Windows\System32\p2psvc.dll [327680 2009-07-13] (Microsoft Corporation) 3 PcaSvc; C:\Windows\System32\pcasvc.dll [154624 2009-07-13] (Microsoft Corporation) 3 PeerDistSvc; C:\Windows\System32\peerdistsvc.dll [1004544 2009-07-13] (Microsoft Corporation) 3 pla; C:\Windows\System32\pla.dll [1508864 2010-11-20] (Microsoft Corporation) 3 PNRPAutoReg; C:\Windows\System32\pnrpauto.dll [20480 2009-07-13] (Microsoft Corporation) 3 PolicyAgent; C:\Windows\System32\ipsecsvc.dll [350208 2010-11-20] (Microsoft Corporation) 2 Power; C:\Windows\System32\umpo.dll [119808 2010-11-20] (Microsoft Corporation) 2 ProfSvc; C:\Windows\System32\profsvc.dll [164352 2012-04-30] (Microsoft Corporation) 3 ProtectedStorage; C:\Windows\System32\lsass.exe [22528 2011-11-16] (Microsoft Corporation) 3 RasAuto; C:\Windows\System32\rasauto.dll [90624 2009-07-13] (Microsoft Corporation) 3 RasMan; C:\Windows\System32\svchost.exe -k netsvcs [20992 2009-07-13] (Microsoft Corporation) 4 RemoteAccess; C:\Windows\System32\mprdim.dll [75264 2009-07-13] (Microsoft Corporation) 3 RemoteRegistry; C:\Windows\System32\regsvc.dll [112640 2009-07-13] (Microsoft Corporation) 2 RpcEptMapper; C:\Windows\System32\RpcEpMap.dll [43520 2009-07-13] (Microsoft Corporation) 3 RpcLocator; C:\Windows\System32\locator.exe [9216 2009-07-13] (Microsoft Corporation) 2 RpcSs; C:\Windows\System32\rpcss.dll [376832 2010-11-20] (Microsoft Corporation) 2 SamSs; C:\Windows\System32\lsass.exe [22528 2011-11-16] (Microsoft Corporation) 3 SCardSvr; C:\Windows\System32\SCardSvr.dll [132608 2009-07-13] (Microsoft Corporation) 2 Schedule; C:\Windows\System32\schedsvc.dll [750592 2010-11-20] (Microsoft Corporation) 3 SCPolicySvc; C:\Windows\System32\certprop.dll [67584 2010-11-20] (Microsoft Corporation) 3 SDRSVC; C:\Windows\System32\SDRSVC.dll [125952 2010-11-20] (Microsoft Corporation) 2 seclogon; C:\Windows\system32\seclogon.dll [21504 2009-07-13] (Microsoft Corporation) 3 SensrSvc; C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation [20992 2009-07-13] (Microsoft Corporation) 2 SharedAccess; C:\Windows\System32\ipnathlp.dll [300544 2009-07-13] (Microsoft Corporation) 2 ShellHWDetection; C:\Windows\System32\shsvcs.dll [328192 2010-11-20] (Microsoft Corporation) 3 SNMPTRAP; C:\Windows\System32\snmptrap.exe [12800 2009-07-13] (Microsoft Corporation) 2 Spooler; C:\Windows\System32\spoolsv.exe [317440 2012-02-10] (Microsoft Corporation) 2 sppsvc; C:\Windows\System32\sppsvc.exe [3179520 2010-11-20] (Microsoft Corporation) 3 SSDPSRV; C:\Windows\System32\ssdpsrv.dll [162816 2009-07-13] (Microsoft Corporation) 3 SstpSvc; C:\Windows\System32\sstpsvc.dll [90112 2009-07-13] (Microsoft Corporation) 2 StiSvc; C:\Windows\System32\wiaservc.dll [463360 2010-11-20] (Microsoft Corporation) 3 StorSvc; C:\Windows\System32\storsvc.dll [16384 2009-07-13] (Microsoft Corporation) 3 swprv; C:\Windows\System32\swprv.dll [313856 2009-07-13] (Microsoft Corporation) 3 TabletInputService; C:\Windows\System32\TabSvc.dll [73216 2010-11-20] (Microsoft Corporation) 3 TapiSrv; C:\Windows\System32\tapisrv.dll [242176 2010-11-20] (Microsoft Corporation) 3 TBS; C:\Windows\System32\tbssvc.dll [55808 2009-07-13] (Microsoft Corporation) 3 TermService; C:\Windows\System32\termsrv.dll [521216 2010-11-20] (Microsoft Corporation) 2 Themes; C:\Windows\System32\themeservice.dll [37376 2009-07-13] (Microsoft Corporation) 3 THREADORDER; C:\Windows\System32\mmcss.dll [49664 2009-07-13] (Microsoft Corporation) 2 TrkWks; C:\Windows\System32\trkwks.dll [77312 2009-07-13] (Microsoft Corporation) 3 TrustedInstaller; C:\Windows\servicing\TrustedInstaller.exe [204800 2010-11-20] (Microsoft Corporation) 3 UI0Detect; C:\Windows\System32\UI0Detect.exe [35840 2009-07-13] (Microsoft Corporation) 3 UmRdpService; C:\Windows\System32\umrdp.dll [171008 2010-11-20] (Microsoft Corporation) 2 UxSms; C:\Windows\System32\uxsms.dll [29696 2009-07-13] (Microsoft Corporation) 3 VaultSvc; C:\Windows\System32\lsass.exe [22528 2011-11-16] (Microsoft Corporation) 3 vds; C:\Windows\System32\vds.exe [453632 2010-11-20] (Microsoft Corporation) 3 VSS; C:\Windows\System32\vssvc.exe [1025536 2010-11-20] (Microsoft Corporation) 3 W32Time; C:\Windows\System32\w32time.dll [288768 2009-07-13] (Microsoft Corporation) 3 WatAdminSvc; C:\Windows\System32\Wat\WatAdminSvc.exe [1343400 2011-08-26] (Microsoft Corporation) 3 wbengine; "C:\Windows\system32\wbengine.exe" [1203200 2010-11-20] (Microsoft Corporation) 3 WbioSrvc; C:\Windows\System32\wbiosrvc.dll [151552 2009-07-13] (Microsoft Corporation) 3 WdiServiceHost; C:\Windows\System32\wdi.dll [76288 2009-07-13] (Microsoft Corporation) 3 WdiSystemHost; C:\Windows\System32\wdi.dll [76288 2009-07-13] (Microsoft Corporation) 3 WebClient; C:\Windows\System32\svchost.exe -k LocalService [20992 2009-07-13] (Microsoft Corporation) 3 Wecsvc; C:\Windows\System32\wecsvc.dll [147968 2009-07-13] (Microsoft Corporation) 3 wercplsupport; C:\Windows\System32\wercplsupport.dll [61440 2009-07-13] (Microsoft Corporation) 3 WerSvc; C:\Windows\System32\WerSvc.dll [65024 2009-07-13] (Microsoft Corporation) 2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-13] (Microsoft Corporation) 3 WinHttpAutoProxySvc; winhttp.dll [351232 2010-11-20] (Microsoft Corporation) 2 Winmgmt; C:\Windows\System32\wbem\WMIsvc.dll [168960 2009-07-13] (Microsoft Corporation) 3 WinRM; C:\Windows\System32\WsmSvc.dll [1175040 2010-11-20] (Microsoft Corporation) 2 Wlansvc; C:\Windows\System32\wlansvc.dll [829440 2009-07-13] (Microsoft Corporation) 3 wmiApSrv; C:\Windows\System32\wbem\WmiApSrv.exe [136192 2009-07-13] (Microsoft Corporation) 2 WMPNetworkSvc; "C:\Program Files\Windows Media Player\wmpnetwk.exe" [1121792 2010-11-20] (Microsoft Corporation) 3 WPCSvc; C:\Windows\System32\wpcsvc.dll [10752 2009-07-13] (Microsoft Corporation) 3 WPDBusEnum; C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [20992 2009-07-13] (Microsoft Corporation) 2 wscsvc; C:\Windows\System32\wscsvc.dll [73728 2009-07-13] (Microsoft Corporation) 2 WSearch; C:\Windows\System32\SearchIndexer.exe /Embedding [427520 2011-05-03] (Microsoft Corporation) 2 wuauserv; C:\Windows\System32\wuaueng.dll [1933848 2012-06-02] (Microsoft Corporation) 2 wudfsvc; C:\Windows\System32\WUDFSvc.dll [67584 2010-11-20] (Microsoft Corporation) 4 XAudioService; C:\Windows\System32\DRIVERS\xaudio.exe [386560 2006-11-27] (Conexant Systems, Inc.) ==================== Drivers =============================== 3 1394ohci; C:\Windows\system32\drivers\1394ohci.sys [164864 2010-11-20] (Microsoft Corporation) 0 ACPI; C:\Windows\System32\drivers\ACPI.sys [274304 2010-11-20] (Microsoft Corporation) 3 AcpiPmi; C:\Windows\system32\drivers\acpipmi.sys [10240 2010-11-20] (Microsoft Corporation) 3 ADIHdAudAddService; C:\Windows\System32\drivers\ADIHdAud.sys [381440 2009-05-18] (Analog Devices, Inc.) 3 adp94xx; C:\Windows\system32\DRIVERS\adp94xx.sys [422976 2009-07-13] (Adaptec, Inc.) 3 adpahci; C:\Windows\system32\DRIVERS\adpahci.sys [297552 2009-07-13] (Adaptec, Inc.) 3 adpu320; C:\Windows\system32\DRIVERS\adpu320.sys [146512 2009-07-13] (Adaptec, Inc.) 1 AFD; C:\Windows\system32\drivers\afd.sys [338944 2011-04-24] (Microsoft Corporation) 3 agp440; C:\Windows\system32\drivers\agp440.sys [53312 2009-07-13] (Microsoft Corporation) 3 aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [70720 2009-07-13] (Adaptec, Inc.) 3 aliide; C:\Windows\system32\drivers\aliide.sys [14400 2009-07-13] (Acer Laboratories Inc.) 3 amdagp; C:\Windows\system32\drivers\amdagp.sys [53312 2009-07-13] (Microsoft Corporation) 3 amdide; C:\Windows\system32\drivers\amdide.sys [14912 2009-07-13] (Microsoft Corporation) 3 AmdK8; C:\Windows\system32\DRIVERS\amdk8.sys [55296 2009-07-13] (Microsoft Corporation) 3 AmdPPM; C:\Windows\system32\DRIVERS\amdppm.sys [52736 2009-07-13] (Microsoft Corporation) 3 amdsata; C:\Windows\system32\drivers\amdsata.sys [80256 2011-03-10] (Advanced Micro Devices) 3 amdsbs; C:\Windows\system32\DRIVERS\amdsbs.sys [159312 2009-07-13] (AMD Technologies Inc.) 0 amdxata; C:\Windows\System32\drivers\amdxata.sys [22400 2011-03-10] (Advanced Micro Devices) 3 AppID; C:\Windows\system32\drivers\appid.sys [50176 2010-11-20] (Microsoft Corporation) 3 arc; C:\Windows\system32\DRIVERS\arc.sys [76368 2009-07-13] (Adaptec, Inc.) 3 arcsas; C:\Windows\system32\DRIVERS\arcsas.sys [86608 2009-07-13] (Adaptec, Inc.) 3 AsyncMac; C:\Windows\System32\DRIVERS\asyncmac.sys [17920 2009-07-13] (Microsoft Corporation) 0 atapi; C:\Windows\System32\drivers\atapi.sys [21584 2009-07-13] (Microsoft Corporation) 3 b06bdrv; C:\Windows\system32\DRIVERS\bxvbdx.sys [430080 2009-07-13] (Broadcom Corporation) 3 b57nd60x; C:\Windows\System32\DRIVERS\b57nd60x.sys [229888 2009-07-13] (Broadcom Corporation) 1 Beep; C:\Windows\System32\Drivers\Beep.sys [6144 2009-07-13] (Microsoft Corporation) 1 blbdrive; C:\Windows\System32\DRIVERS\blbdrive.sys [35328 2009-07-13] (Microsoft Corporation) 3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [69632 2011-02-22] (Microsoft Corporation) 3 BrFiltLo; C:\Windows\system32\DRIVERS\BrFiltLo.sys [13568 2009-07-13] (Brother Industries, Ltd.) 3 BrFiltUp; C:\Windows\system32\DRIVERS\BrFiltUp.sys [5248 2009-07-13] (Brother Industries, Ltd.) 3 BridgeMP; C:\Windows\System32\DRIVERS\bridge.sys [78336 2009-07-13] (Microsoft Corporation) 3 Brserid; C:\Windows\System32\Drivers\Brserid.sys [272128 2009-07-13] (Brother Industries Ltd.) 3 BrSerWdm; C:\Windows\System32\Drivers\BrSerWdm.sys [62336 2009-07-13] (Brother Industries Ltd.) 3 BrUsbMdm; C:\Windows\System32\Drivers\BrUsbMdm.sys [12160 2009-07-13] (Brother Industries Ltd.) 3 BrUsbSer; C:\Windows\System32\Drivers\BrUsbSer.sys [11904 2009-07-13] (Brother Industries Ltd.) 3 BthEnum; C:\Windows\system32\drivers\BthEnum.sys [34816 2009-07-13] (Microsoft Corporation) 3 BTHMODEM; C:\Windows\system32\DRIVERS\bthmodem.sys [56320 2009-07-13] (Microsoft Corporation) 3 BthPan; C:\Windows\System32\DRIVERS\bthpan.sys [93696 2009-07-13] (Microsoft Corporation) 3 BTHPORT; C:\Windows\System32\Drivers\BTHport.sys [393728 2012-07-06] (Microsoft Corporation) 3 BTHUSB; C:\Windows\System32\Drivers\BTHUSB.sys [60416 2011-04-27] (Microsoft Corporation) 4 cdfs; C:\Windows\System32\DRIVERS\cdfs.sys [70656 2009-07-13] (Microsoft Corporation) 1 cdrom; C:\Windows\system32\drivers\cdrom.sys [108544 2010-11-20] (Microsoft Corporation) 3 circlass; C:\Windows\system32\DRIVERS\circlass.sys [37888 2009-07-13] (Microsoft Corporation) 0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-13] (Microsoft Corporation) 3 CmBatt; C:\Windows\System32\DRIVERS\CmBatt.sys [14080 2009-07-13] (Microsoft Corporation) 3 cmdide; C:\Windows\system32\drivers\cmdide.sys [15952 2009-07-13] (CMD Technology, Inc.) 0 CNG; C:\Windows\System32\Drivers\cng.sys [369336 2012-06-01] (Microsoft Corporation) 0 Compbatt; C:\Windows\System32\DRIVERS\compbatt.sys [19024 2009-07-13] (Microsoft Corporation) 3 CompositeBus; C:\Windows\system32\drivers\CompositeBus.sys [31232 2010-11-20] (Microsoft Corporation) 4 crcdisk; C:\Windows\system32\DRIVERS\crcdisk.sys [22096 2009-07-13] (Microsoft Corporation) 1 CSC; C:\Windows\System32\drivers\csc.sys [388096 2010-11-20] (Microsoft Corporation) 1 DfsC; C:\Windows\System32\Drivers\dfsc.sys [78336 2010-11-20] (Microsoft Corporation) 1 discache; C:\Windows\System32\drivers\discache.sys [32256 2009-07-13] (Microsoft Corporation) 0 Disk; C:\Windows\System32\DRIVERS\disk.sys [57424 2009-07-13] (Microsoft Corporation) 3 drmkaud; C:\Windows\System32\drivers\drmkaud.sys [5120 2009-07-13] (Microsoft Corporation) 3 DXGKrnl; C:\Windows\System32\drivers\dxgkrnl.sys [728448 2010-11-20] (Microsoft Corporation) 3 e1express; C:\Windows\System32\DRIVERS\e1e6032.sys [211456 2009-07-13] (Intel Corporation) 3 ebdrv; C:\Windows\system32\DRIVERS\evbdx.sys [3100160 2009-07-13] (Broadcom Corporation) 3 elxstor; C:\Windows\system32\DRIVERS\elxstor.sys [453712 2009-07-13] (Emulex) 3 ErrDev; C:\Windows\system32\drivers\errdev.sys [7168 2009-07-13] (Microsoft Corporation) 3 exfat; C:\Windows\System32\Drivers\exfat.sys [142336 2009-07-13] (Microsoft Corporation) 3 fastfat; C:\Windows\System32\Drivers\fastfat.sys [148480 2009-07-13] (Microsoft Corporation) 3 fdc; C:\Windows\system32\DRIVERS\fdc.sys [25088 2009-07-13] (Microsoft Corporation) 0 FileInfo; C:\Windows\System32\drivers\fileinfo.sys [58448 2009-07-13] (Microsoft Corporation) 3 Filetrace; C:\Windows\System32\drivers\filetrace.sys [28160 2009-07-13] (Microsoft Corporation) 3 flpydisk; C:\Windows\system32\DRIVERS\flpydisk.sys [19968 2009-07-13] (Microsoft Corporation) 0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [198208 2009-07-13] (Microsoft Corporation) 3 FsDepends; C:\Windows\System32\drivers\FsDepends.sys [46160 2009-07-13] (Microsoft Corporation) 0 Fs_Rec; C:\Windows\System32\Drivers\Fs_Rec.sys [19824 2012-02-29] (Microsoft Corporation) 0 fvevol; C:\Windows\System32\DRIVERS\fvevol.sys [194800 2010-11-20] (Microsoft Corporation) 3 gagp30kx; C:\Windows\system32\DRIVERS\gagp30kx.sys [57936 2009-07-13] (Microsoft Corporation) 3 hcw85cir; C:\Windows\system32\drivers\hcw85cir.sys [26624 2009-07-13] (Hauppauge Computer Works, Inc.) 3 HdAudAddService; C:\Windows\system32\drivers\HdAudio.sys [304128 2010-11-20] (Microsoft Corporation) 3 HDAudBus; C:\Windows\system32\drivers\HDAudBus.sys [108544 2010-11-20] (Microsoft Corporation) 3 HidBatt; C:\Windows\system32\DRIVERS\HidBatt.sys [21504 2009-07-13] (Microsoft Corporation) 3 HidBth; C:\Windows\system32\DRIVERS\hidbth.sys [91136 2009-07-13] (Microsoft Corporation) 3 HidIr; C:\Windows\system32\DRIVERS\hidir.sys [37888 2009-07-13] (Microsoft Corporation) 3 HidUsb; C:\Windows\system32\drivers\hidusb.sys [24064 2010-11-20] (Microsoft Corporation) 3 HpSAMD; C:\Windows\system32\drivers\HpSAMD.sys [67152 2009-07-13] (Hewlett-Packard Company) 3 HSF_DPV; C:\Windows\System32\DRIVERS\HSX_DPV.sys [985600 2006-12-21] (Conexant Systems, Inc.) 3 HSXHWAZL; C:\Windows\System32\DRIVERS\HSXHWAZL.sys [207360 2006-12-21] (Conexant Systems, Inc.) 3 HTTP; C:\Windows\System32\drivers\HTTP.sys [513536 2010-11-20] (Microsoft Corporation) 0 hwpolicy; C:\Windows\System32\drivers\hwpolicy.sys [14208 2010-11-20] (Microsoft Corporation) 3 i8042prt; C:\Windows\system32\drivers\i8042prt.sys [80896 2009-07-13] (Microsoft Corporation) 3 iaStorV; C:\Windows\system32\drivers\iaStorV.sys [332160 2011-03-10] (Intel Corporation) 3 IBMPMDRV; C:\Windows\System32\DRIVERS\ibmpmdrv.sys [21424 2007-05-31] (Lenovo.) 3 iirsp; C:\Windows\system32\DRIVERS\iirsp.sys [41040 2009-07-13] (Intel Corp./ICP vortex GmbH) 0 intelide; C:\Windows\System32\drivers\intelide.sys [15424 2009-07-13] (Microsoft Corporation) 3 intelppm; C:\Windows\System32\DRIVERS\intelppm.sys [53760 2009-07-13] (Microsoft Corporation) 3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [58880 2009-07-13] (Microsoft Corporation) 3 IPMIDRV; C:\Windows\system32\drivers\IPMIDrv.sys [65536 2010-11-20] (Microsoft Corporation) 3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [101888 2009-07-13] (Microsoft Corporation) 3 IRENUM; C:\Windows\System32\drivers\irenum.sys [13824 2009-07-13] (Microsoft Corporation) 3 isapnp; C:\Windows\system32\drivers\isapnp.sys [46656 2009-07-13] (Microsoft Corporation) 3 iScsiPrt; C:\Windows\system32\drivers\msiscsi.sys [233344 2010-11-20] (Microsoft Corporation) 3 kbdclass; C:\Windows\system32\drivers\kbdclass.sys [42576 2009-07-13] (Microsoft Corporation) 3 kbdhid; C:\Windows\system32\drivers\kbdhid.sys [28160 2010-11-20] (Microsoft Corporation) 0 KSecDD; C:\Windows\System32\Drivers\ksecdd.sys [67440 2012-06-01] (Microsoft Corporation) 0 KSecPkg; C:\Windows\System32\Drivers\ksecpkg.sys [134000 2012-06-01] (Microsoft Corporation) 2 lltdio; C:\Windows\System32\DRIVERS\lltdio.sys [48128 2009-07-13] (Microsoft Corporation) 3 LSI_FC; C:\Windows\system32\DRIVERS\lsi_fc.sys [95824 2009-07-13] (LSI Corporation) 3 LSI_SAS; C:\Windows\system32\DRIVERS\lsi_sas.sys [89168 2009-07-13] (LSI Corporation) 3 LSI_SAS2; C:\Windows\system32\DRIVERS\lsi_sas2.sys [54864 2009-07-13] (LSI Corporation) 3 LSI_SCSI; C:\Windows\system32\DRIVERS\lsi_scsi.sys [96848 2009-07-13] (LSI Corporation) 2 luafv; C:\Windows\system32\drivers\luafv.sys [86528 2009-07-13] (Microsoft Corporation) 2 mdmxsdk; C:\Windows\System32\DRIVERS\mdmxsdk.sys [12672 2006-06-18] (Conexant) 3 megasas; C:\Windows\system32\DRIVERS\megasas.sys [30800 2009-07-13] (LSI Corporation) 3 MegaSR; C:\Windows\system32\DRIVERS\MegaSR.sys [235584 2009-07-13] (LSI Corporation, Inc.) 3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [116104 2011-10-04] (McAfee, Inc.) 3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [171296 2011-10-04] (McAfee, Inc.) 3 mfebopk; C:\Windows\System32\drivers\mfebopk.sys [58456 2011-10-04] (McAfee, Inc.) 0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [436728 2011-10-04] (McAfee, Inc.) 3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [85152 2011-10-04] (McAfee, Inc.) 0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [162928 2011-10-04] (McAfee, Inc.) 3 Modem; C:\Windows\System32\drivers\modem.sys [31744 2009-07-13] (Microsoft Corporation) 3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [23552 2009-07-13] (Microsoft Corporation) 3 mouclass; C:\Windows\system32\drivers\mouclass.sys [41552 2009-07-13] (Microsoft Corporation) 3 mouhid; C:\Windows\system32\DRIVERS\mouhid.sys [26112 2009-07-13] (Microsoft Corporation) 0 mountmgr; C:\Windows\System32\drivers\mountmgr.sys [78208 2010-11-20] (Microsoft Corporation) 3 mpio; C:\Windows\system32\drivers\mpio.sys [130432 2010-11-20] (Microsoft Corporation) 3 mpsdrv; C:\Windows\System32\drivers\mpsdrv.sys [60416 2009-07-13] (Microsoft Corporation) 3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [115712 2010-11-20] (Microsoft Corporation) 3 mrxsmb; C:\Windows\System32\DRIVERS\mrxsmb.sys [123904 2011-04-26] (Microsoft Corporation) 3 mrxsmb10; C:\Windows\System32\DRIVERS\mrxsmb10.sys [223744 2011-07-08] (Microsoft Corporation) 3 mrxsmb20; C:\Windows\System32\DRIVERS\mrxsmb20.sys [96768 2011-04-26] (Microsoft Corporation) 0 msahci; C:\Windows\System32\drivers\msahci.sys [28032 2010-11-20] (Microsoft Corporation) 3 msdsm; C:\Windows\system32\drivers\msdsm.sys [116096 2010-11-20] (Microsoft Corporation) 1 Msfs; C:\Windows\System32\Drivers\Msfs.sys [22528 2009-07-13] (Microsoft Corporation) 3 mshidkmdf; C:\Windows\System32\drivers\mshidkmdf.sys [4096 2009-07-13] (Microsoft Corporation) 0 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [13888 2009-07-13] (Microsoft Corporation) 3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [8320 2009-07-13] (Microsoft Corporation) 3 MSPCLOCK; C:\Windows\System32\drivers\MSPCLOCK.sys [5888 2009-07-13] (Microsoft Corporation) 3 MSPQM; C:\Windows\System32\drivers\MSPQM.sys [5504 2009-07-13] (Microsoft Corporation) 3 MsRPC; C:\Windows\System32\Drivers\MsRPC.sys [162896 2009-07-13] (Microsoft Corporation) 1 mssmbios; C:\Windows\system32\drivers\mssmbios.sys [28240 2009-07-13] (Microsoft Corporation) 3 MSTEE; C:\Windows\System32\drivers\MSTEE.sys [6144 2009-07-13] (Microsoft Corporation) 3 MTConfig; C:\Windows\system32\DRIVERS\MTConfig.sys [12288 2009-07-13] (Microsoft Corporation) 0 Mup; C:\Windows\System32\Drivers\mup.sys [49728 2009-07-13] (Microsoft Corporation) 3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [267264 2009-07-13] (Microsoft Corporation) 0 NDIS; C:\Windows\System32\drivers\ndis.sys [712048 2012-08-22] (Microsoft Corporation) 3 NdisCap; C:\Windows\System32\DRIVERS\ndiscap.sys [27136 2009-07-13] (Microsoft Corporation) 3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [20992 2009-07-13] (Microsoft Corporation) 3 Ndisuio; C:\Windows\System32\DRIVERS\ndisuio.sys [46080 2010-11-20] (Microsoft Corporation) 3 NdisWan; C:\Windows\System32\DRIVERS\ndiswan.sys [118784 2010-11-20] (Microsoft Corporation) 3 NDProxy; C:\Windows\System32\Drivers\NDProxy.sys [48640 2010-11-20] (Microsoft Corporation) 1 NetBIOS; C:\Windows\System32\DRIVERS\netbios.sys [36352 2009-07-13] (Microsoft Corporation) 1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [187904 2010-11-20] (Microsoft Corporation) 3 netw5v32; C:\Windows\System32\DRIVERS\netw5v32.sys [4231168 2009-07-13] (Intel Corporation) 3 nfrd960; C:\Windows\system32\DRIVERS\nfrd960.sys [44624 2009-07-13] (IBM Corporation) 1 Npfs; C:\Windows\System32\Drivers\Npfs.sys [35328 2009-07-13] (Microsoft Corporation) 1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [16896 2009-07-13] (Microsoft Corporation) 3 Ntfs; C:\Windows\System32\Drivers\Ntfs.sys [1211760 2012-08-31] (Microsoft Corporation) 1 Null; C:\Windows\System32\Drivers\Null.sys [4608 2009-07-13] (Microsoft Corporation) 3 nvlddmkm; C:\Windows\System32\DRIVERS\nvlddmkm.sys [9833032 2009-09-05] (NVIDIA Corporation) 3 nvraid; C:\Windows\system32\drivers\nvraid.sys [117120 2011-03-10] (NVIDIA Corporation) 3 nvstor; C:\Windows\system32\drivers\nvstor.sys [143744 2011-03-10] (NVIDIA Corporation) 3 nv_agp; C:\Windows\system32\drivers\nv_agp.sys [105024 2009-07-13] (Microsoft Corporation) 3 ohci1394; C:\Windows\system32\drivers\ohci1394.sys [62464 2009-07-13] (Microsoft Corporation) 3 Parport; C:\Windows\system32\DRIVERS\parport.sys [79360 2009-07-13] (Microsoft Corporation) 0 partmgr; C:\Windows\System32\drivers\partmgr.sys [56176 2012-03-16] (Microsoft Corporation) 2 Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [8704 2009-07-13] (Microsoft Corporation) 0 pci; C:\Windows\System32\drivers\pci.sys [153984 2010-11-20] (Microsoft Corporation) 3 pciide; C:\Windows\system32\drivers\pciide.sys [12368 2009-07-13] (Microsoft Corporation) 0 pcmcia; C:\Windows\System32\DRIVERS\pcmcia.sys [180288 2009-07-13] (Microsoft Corporation) 0 pcw; C:\Windows\System32\drivers\pcw.sys [43088 2009-07-13] (Microsoft Corporation) 2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [586752 2009-07-13] (Microsoft Corporation) 3 PptpMiniport; C:\Windows\System32\DRIVERS\raspptp.sys [73728 2009-07-13] (Microsoft Corporation) 3 Processor; C:\Windows\system32\DRIVERS\processr.sys [52224 2009-07-13] (Microsoft Corporation) 1 Psched; C:\Windows\System32\DRIVERS\pacer.sys [104448 2009-07-13] (Microsoft Corporation) 3 ql2300; C:\Windows\system32\DRIVERS\ql2300.sys [1383488 2009-07-13] (QLogic Corporation) 3 ql40xx; C:\Windows\system32\DRIVERS\ql40xx.sys [106064 2009-07-13] (QLogic Corporation) 3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [31744 2009-07-13] (Microsoft Corporation) 3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [11776 2009-07-13] (Microsoft Corporation) 3 RasAgileVpn; C:\Windows\System32\DRIVERS\AgileVpn.sys [49152 2009-07-13] (Microsoft Corporation) 3 Rasl2tp; C:\Windows\System32\DRIVERS\rasl2tp.sys [78848 2009-07-13] (Microsoft Corporation) 3 RasPppoe; C:\Windows\System32\DRIVERS\raspppoe.sys [77824 2009-07-13] (Microsoft Corporation) 3 RasSstp; C:\Windows\System32\DRIVERS\rassstp.sys [75264 2009-07-13] (Microsoft Corporation) 1 rdbss; C:\Windows\System32\DRIVERS\rdbss.sys [242688 2010-11-20] (Microsoft Corporation) 3 rdpbus; C:\Windows\System32\DRIVERS\rdpbus.sys [18944 2009-07-13] (Microsoft Corporation) 1 RDPCDD; C:\Windows\System32\DRIVERS\RDPCDD.sys [6656 2010-11-20] (Microsoft Corporation) 3 RDPDR; C:\Windows\System32\drivers\rdpdr.sys [133632 2010-11-20] (Microsoft Corporation) 1 RDPENCDD; C:\Windows\System32\drivers\rdpencdd.sys [6656 2009-07-13] (Microsoft Corporation) 1 RDPREFMP; C:\Windows\System32\drivers\rdprefmp.sys [7168 2009-07-13] (Microsoft Corporation) 3 RDPWD; C:\Windows\System32\Drivers\RDPWD.sys [183808 2012-04-27] (Microsoft Corporation) 0 rdyboost; C:\Windows\System32\drivers\rdyboost.sys [173440 2010-11-20] (Microsoft Corporation) 3 RFCOMM; C:\Windows\System32\DRIVERS\rfcomm.sys [129536 2009-07-13] (Microsoft Corporation) 2 rimmptsk; C:\Windows\System32\DRIVERS\rimmptsk.sys [48128 2009-09-07] (REDC) 2 rimsptsk; C:\Windows\System32\DRIVERS\rimsptsk.sys [44544 2009-09-15] (REDC) 2 rismxdp; C:\Windows\System32\DRIVERS\rixdptsk.sys [38400 2009-09-15] (REDC) 2 rspndr; C:\Windows\System32\DRIVERS\rspndr.sys [60928 2009-07-13] (Microsoft Corporation) 3 s3cap; C:\Windows\system32\drivers\vms3cap.sys [5632 2010-11-20] (Microsoft Corporation) 1 SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [9968 2009-06-23] (SUPERAdBlocker.com and SUPERAntiSpyware.com) 3 SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS [7408 2009-06-23] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) 1 SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys [72944 2009-06-23] (SUPERAdBlocker.com and SUPERAntiSpyware.com) 3 sbp2port; C:\Windows\system32\drivers\sbp2port.sys [85376 2010-11-20] (Microsoft Corporation) 3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [26624 2010-11-20] (Microsoft Corporation) 3 sdbus; C:\Windows\system32\drivers\sdbus.sys [84992 2010-11-20] (Microsoft Corporation) 2 secdrv; C:\Windows\System32\Drivers\secdrv.sys [20480 2009-07-13] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) 3 Serenum; C:\Windows\system32\DRIVERS\serenum.sys [17920 2009-07-13] (Microsoft Corporation) 3 Serial; C:\Windows\system32\DRIVERS\serial.sys [83456 2009-07-13] (Microsoft Corporation) 3 sermouse; C:\Windows\system32\DRIVERS\sermouse.sys [19968 2009-07-13] (Microsoft Corporation) 3 sffdisk; C:\Windows\system32\drivers\sffdisk.sys [11264 2009-07-13] (Microsoft Corporation) 3 sffp_mmc; C:\Windows\system32\drivers\sffp_mmc.sys [12288 2009-07-13] (Microsoft Corporation) 3 sffp_sd; C:\Windows\system32\drivers\sffp_sd.sys [12800 2010-11-20] (Microsoft Corporation) 3 sfloppy; C:\Windows\system32\DRIVERS\sfloppy.sys [13824 2009-07-13] (Microsoft Corporation) 3 sisagp; C:\Windows\system32\drivers\sisagp.sys [52304 2009-07-13] (Microsoft Corporation) 3 SiSRaid2; C:\Windows\system32\DRIVERS\SiSRaid2.sys [40016 2009-07-13] (Silicon Integrated Systems Corp.) 3 SiSRaid4; C:\Windows\system32\DRIVERS\sisraid4.sys [77888 2009-07-13] (Silicon Integrated Systems) 3 Smb; C:\Windows\System32\DRIVERS\smb.sys [71168 2009-07-13] (Microsoft Corporation) 0 spldr; C:\Windows\System32\Drivers\spldr.sys [17472 2009-07-13] (Microsoft Corporation) 3 srv; C:\Windows\System32\DRIVERS\srv.sys [311808 2011-04-28] (Microsoft Corporation) 3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [310272 2011-04-28] (Microsoft Corporation) 3 SrvHsfHDA; C:\Windows\System32\DRIVERS\VSTAZL3.SYS [207360 2009-07-13] (Conexant Systems, Inc.) 3 SrvHsfV92; C:\Windows\System32\DRIVERS\VSTDPV3.SYS [980992 2009-07-13] (Conexant Systems, Inc.) 3 SrvHsfWinac; C:\Windows\System32\DRIVERS\VSTCNXT3.SYS [661504 2009-07-13] (Conexant Systems, Inc.) 3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [114688 2011-04-28] (Microsoft Corporation) 3 stexstor; C:\Windows\system32\DRIVERS\stexstor.sys [21072 2009-07-13] (Promise Technology) 0 storflt; C:\Windows\System32\drivers\vmstorfl.sys [40704 2010-11-20] (Microsoft Corporation) 3 storvsc; C:\Windows\system32\drivers\storvsc.sys [28032 2010-11-20] (Microsoft Corporation) 3 swenum; C:\Windows\system32\drivers\swenum.sys [12240 2009-07-13] (Microsoft Corporation) 3 SynTP; C:\Windows\System32\DRIVERS\SynTP.sys [244784 2010-04-22] (Synaptics Incorporated) 0 Tcpip; C:\Windows\System32\drivers\tcpip.sys [1292144 2012-08-22] (Microsoft Corporation) 3 TCPIP6; C:\Windows\System32\DRIVERS\tcpip.sys [1292144 2012-08-22] (Microsoft Corporation) 2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [35328 2010-11-20] (Microsoft Corporation) 3 TDPIPE; C:\Windows\System32\drivers\tdpipe.sys [18432 2010-11-20] (Microsoft Corporation) 3 TDTCP; C:\Windows\System32\drivers\tdtcp.sys [24576 2012-02-16] (Microsoft Corporation) 1 tdx; C:\Windows\System32\DRIVERS\tdx.sys [74752 2010-11-20] (Microsoft Corporation) 1 TermDD; C:\Windows\system32\drivers\termdd.sys [53120 2010-11-20] (Microsoft Corporation) 3 TPM; C:\Windows\System32\drivers\tpm.sys [30720 2009-07-13] (Microsoft Corporation) 3 tssecsrv; C:\Windows\System32\DRIVERS\tssecsrv.sys [31232 2010-11-20] (Microsoft Corporation) 3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [52224 2010-11-20] (Microsoft Corporation) 3 tunnel; C:\Windows\System32\DRIVERS\tunnel.sys [108544 2010-11-20] (Microsoft Corporation) 3 uagp35; C:\Windows\system32\DRIVERS\uagp35.sys [55888 2009-07-13] (Microsoft Corporation) 4 udfs; C:\Windows\System32\DRIVERS\udfs.sys [246784 2010-11-20] (Microsoft Corporation) 3 uliagpkx; C:\Windows\system32\drivers\uliagpkx.sys [57424 2009-07-13] (Microsoft Corporation) 3 umbus; C:\Windows\system32\drivers\umbus.sys [39936 2010-11-20] (Microsoft Corporation) 3 UmPass; C:\Windows\system32\DRIVERS\umpass.sys [8192 2009-07-13] (Microsoft Corporation) 3 usbccgp; C:\Windows\system32\drivers\usbccgp.sys [75776 2011-03-24] (Microsoft Corporation) 3 usbcir; C:\Windows\system32\drivers\usbcir.sys [86016 2009-07-13] (Microsoft Corporation) 3 usbehci; C:\Windows\System32\DRIVERS\usbehci.sys [43008 2011-03-24] (Microsoft Corporation) 3 usbhub; C:\Windows\System32\DRIVERS\usbhub.sys [258560 2011-03-24] (Microsoft Corporation) 3 usbohci; C:\Windows\system32\drivers\usbohci.sys [20480 2011-03-24] (Microsoft Corporation) 3 usbprint; C:\Windows\system32\DRIVERS\usbprint.sys [19968 2009-07-13] (Microsoft Corporation) 3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [76288 2011-03-10] (Microsoft Corporation) 3 usbuhci; C:\Windows\System32\DRIVERS\usbuhci.sys [24064 2011-03-24] (Microsoft Corporation) 0 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [32832 2009-07-13] (Microsoft Corporation) 3 vga; C:\Windows\System32\DRIVERS\vgapnp.sys [26112 2009-07-13] (Microsoft Corporation) 1 VgaSave; C:\Windows\System32\drivers\vga.sys [25088 2009-07-13] (Microsoft Corporation) 3 vhdmp; C:\Windows\system32\drivers\vhdmp.sys [160128 2010-11-20] (Microsoft Corporation) 3 viaagp; C:\Windows\system32\drivers\viaagp.sys [53328 2009-07-13] (Microsoft Corporation) 3 ViaC7; C:\Windows\system32\DRIVERS\viac7.sys [52736 2009-07-13] (Microsoft Corporation) 3 viaide; C:\Windows\system32\drivers\viaide.sys [16976 2009-07-13] (VIA Technologies, Inc.) 0 vmbus; C:\Windows\System32\drivers\vmbus.sys [175360 2010-11-20] (Microsoft Corporation) 3 VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [17920 2010-11-20] (Microsoft Corporation) 0 volmgr; C:\Windows\System32\drivers\volmgr.sys [53120 2010-11-20] (Microsoft Corporation) 0 volmgrx; C:\Windows\System32\drivers\volmgrx.sys [297040 2009-07-13] (Microsoft Corporation) 0 volsnap; C:\Windows\System32\drivers\volsnap.sys [245632 2010-11-20] (Microsoft Corporation) 3 vsmraid; C:\Windows\system32\DRIVERS\vsmraid.sys [141904 2009-07-13] (VIA Technologies Inc.,Ltd) 3 vwifibus; C:\Windows\System32\drivers\vwifibus.sys [19968 2009-07-13] (Microsoft Corporation) 3 WacomPen; C:\Windows\system32\DRIVERS\wacompen.sys [21632 2009-07-13] (Microsoft Corporation) 3 WANARP; C:\Windows\System32\DRIVERS\wanarp.sys [63488 2010-11-20] (Microsoft Corporation) 1 Wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [63488 2010-11-20] (Microsoft Corporation) 3 Wd; C:\Windows\system32\DRIVERS\wd.sys [19024 2009-07-13] (Microsoft Corporation) 0 Wdf01000; C:\Windows\System32\drivers\Wdf01000.sys [445008 2009-07-13] (Microsoft Corporation) 1 WfpLwf; C:\Windows\System32\DRIVERS\wfplwf.sys [9728 2009-07-13] (Microsoft Corporation) 3 WIMMount; C:\Windows\System32\drivers\wimmount.sys [19008 2009-07-13] (Microsoft Corporation) 3 winachsf; C:\Windows\System32\DRIVERS\HSX_CNXT.sys [659968 2006-12-21] (Conexant Systems, Inc.) 3 WinUsb; C:\Windows\System32\DRIVERS\WinUSB.sys [35968 2010-11-20] (Microsoft Corporation) 3 WmiAcpi; C:\Windows\system32\drivers\wmiacpi.sys [11264 2009-07-13] (Microsoft Corporation) 1 ws2ifsl; C:\Windows\system32\drivers\ws2ifsl.sys [16384 2009-07-13] (Microsoft Corporation) 3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [92672 2010-11-20] (Microsoft Corporation) 3 WUDFRd; C:\Windows\System32\DRIVERS\WUDFRd.sys [132224 2010-11-20] (Microsoft Corporation) 2 XAudio; C:\Windows\System32\DRIVERS\xaudio.sys [8192 2006-11-27] (Conexant Systems, Inc.) 3 catchme; \??\C:\Users\T61p\AppData\Local\Temp\catchme.sys [x] 3 mfeavfk01; [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2012-11-20 09:26 - 2012-11-20 09:26 - 00000000 ____D C:\FRST 2012-11-19 16:32 - 2012-11-19 16:32 - 00009214 ____A C:\ComboFix.txt 2012-11-19 16:23 - 2011-06-25 22:45 - 00256000 ____A C:\Windows\PEV.exe 2012-11-19 16:23 - 2010-11-07 09:20 - 00208896 ____A C:\Windows\MBR.exe 2012-11-19 16:23 - 2009-04-19 20:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe 2012-11-19 16:23 - 2000-08-30 16:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe 2012-11-19 16:23 - 2000-08-30 16:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe 2012-11-19 16:23 - 2000-08-30 16:00 - 00098816 ____A C:\Windows\sed.exe 2012-11-19 16:23 - 2000-08-30 16:00 - 00080412 ____A C:\Windows\grep.exe 2012-11-19 16:23 - 2000-08-30 16:00 - 00068096 ____A C:\Windows\zip.exe 2012-11-19 16:08 - 2012-11-19 16:32 - 00000000 ____D C:\Qoobox 2012-11-19 16:07 - 2012-11-19 16:31 - 00000000 ____D C:\Windows\erdnt 2012-11-19 16:02 - 2012-11-19 16:02 - 05002894 ____R (Swearware) C:\Users\T61p\Desktop\ComboFix.exe 2012-11-19 15:39 - 2012-11-19 15:39 - 00061817 ____A C:\Users\T61p\Desktop\tdskiller.txt 2012-11-19 15:38 - 2012-11-19 15:38 - 00000000 ____A C:\Users\T61p\Desktop\tdskiller.txt.txt 2012-11-19 15:31 - 2012-11-19 15:31 - 00000000 ____D C:\Users\T61p\Desktop\tdsskiller 2012-11-19 15:27 - 2012-11-19 15:27 - 00011242 ____A C:\Users\T61p\Desktop\Attach.txt 2012-11-19 15:27 - 2012-11-19 15:27 - 00007065 ____A C:\Users\T61p\Desktop\DDS.txt 2012-11-19 15:07 - 2012-11-19 15:07 - 01754528 ____A (Bleeping Computer, LLC) C:\Users\T61p\Desktop\rkill.scr 2012-11-19 15:07 - 2012-11-19 15:07 - 01754528 ____A (Bleeping Computer, LLC) C:\Users\T61p\Desktop\rkill.exe 2012-11-19 15:05 - 2012-11-19 15:05 - 01754528 ____A (Bleeping Computer, LLC) C:\Users\T61p\Desktop\rkill.com 2012-11-17 10:02 - 2012-11-17 10:01 - 00625664 ____A C:\Users\T61p\Desktop\dds.scr 2012-11-16 10:38 - 2012-11-16 10:50 - 00002993 ____A C:\Users\T61p\Desktop\hijackthis.log 2012-11-16 10:36 - 2012-11-16 10:35 - 00388608 ____A (Trend Micro Inc.) C:\Users\T61p\Desktop\HiJackThis.exe 2012-11-14 19:41 - 2012-11-14 19:49 - 00000000 ____D C:\Windows\pss 2012-11-14 19:34 - 2012-11-14 19:34 - 00000005 ____A C:\Users\T61p\AppData\Roaming\mbam.context.scan 2012-11-14 16:52 - 2012-09-10 06:16 - 00649864 ____A (Sysinternals - www.sysinternals.com) C:\Users\T61p\Desktop\autoruns.exe 2012-11-09 14:13 - 2012-11-09 14:15 - 00000000 ____D C:\Users\All Users\SOPAgent 2012-11-09 13:55 - 2012-11-09 13:55 - 00000000 ____D C:\Users\T61p\Applications 2012-11-09 13:54 - 2012-11-09 14:05 - 00000000 ____D C:\Users\T61p\AppData\Roaming\Avex 2012-11-09 13:54 - 2012-11-09 13:54 - 00000000 ____D C:\Users\T61p\AppData\Roaming\Ugovyh 2012-11-07 19:37 - 2012-11-07 19:37 - 00225526 ____A C:\Users\T61p\Desktop\Presentation1.pptx ==================== One Month Modified Files and Folders ======== 2012-11-20 09:26 - 2012-11-20 09:26 - 00000000 ____D C:\FRST 2012-11-20 06:09 - 2011-08-26 09:41 - 02046516 ____A C:\Windows\WindowsUpdate.log 2012-11-20 06:09 - 2009-07-13 20:34 - 00014256 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2012-11-20 06:09 - 2009-07-13 20:34 - 00014256 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2012-11-20 05:20 - 2012-04-28 15:46 - 00000830 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2012-11-19 19:06 - 2011-08-26 07:00 - 00726316 ____A C:\Windows\System32\PerfStringBackup.INI 2012-11-19 19:04 - 2009-07-13 18:37 - 00000000 ____D C:\Windows\System32\NDF 2012-11-19 19:02 - 2012-06-19 19:22 - 00000000 ____D C:\Users\T61p\AppData\Roaming\Dropbox 2012-11-19 19:01 - 2011-08-26 08:44 - 00014102 ____A C:\Windows\PFRO.log 2012-11-19 19:01 - 2009-07-13 20:53 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2012-11-19 16:32 - 2012-11-19 16:32 - 00009214 ____A C:\ComboFix.txt 2012-11-19 16:32 - 2012-11-19 16:08 - 00000000 ____D C:\Qoobox 2012-11-19 16:32 - 2009-07-13 18:37 - 00000000 ___RD C:\users\Public 2012-11-19 16:31 - 2012-11-19 16:07 - 00000000 ____D C:\Windows\erdnt 2012-11-19 16:31 - 2009-07-13 18:04 - 00000215 ____A C:\Windows\system.ini 2012-11-19 16:02 - 2012-11-19 16:02 - 05002894 ____R (Swearware) C:\Users\T61p\Desktop\ComboFix.exe 2012-11-19 15:39 - 2012-11-19 15:39 - 00061817 ____A C:\Users\T61p\Desktop\tdskiller.txt 2012-11-19 15:38 - 2012-11-19 15:38 - 00000000 ____A C:\Users\T61p\Desktop\tdskiller.txt.txt 2012-11-19 15:31 - 2012-11-19 15:31 - 00000000 ____D C:\Users\T61p\Desktop\tdsskiller 2012-11-19 15:27 - 2012-11-19 15:27 - 00011242 ____A C:\Users\T61p\Desktop\Attach.txt 2012-11-19 15:27 - 2012-11-19 15:27 - 00007065 ____A C:\Users\T61p\Desktop\DDS.txt 2012-11-19 15:07 - 2012-11-19 15:07 - 01754528 ____A (Bleeping Computer, LLC) C:\Users\T61p\Desktop\rkill.scr 2012-11-19 15:07 - 2012-11-19 15:07 - 01754528 ____A (Bleeping Computer, LLC) C:\Users\T61p\Desktop\rkill.exe 2012-11-19 15:05 - 2012-11-19 15:05 - 01754528 ____A (Bleeping Computer, LLC) C:\Users\T61p\Desktop\rkill.com 2012-11-17 10:01 - 2012-11-17 10:02 - 00625664 ____A C:\Users\T61p\Desktop\dds.scr 2012-11-16 10:50 - 2012-11-16 10:38 - 00002993 ____A C:\Users\T61p\Desktop\hijackthis.log 2012-11-16 10:35 - 2012-11-16 10:36 - 00388608 ____A (Trend Micro Inc.) C:\Users\T61p\Desktop\HiJackThis.exe 2012-11-14 19:49 - 2012-11-14 19:41 - 00000000 ____D C:\Windows\pss 2012-11-14 19:34 - 2012-11-14 19:34 - 00000005 ____A C:\Users\T61p\AppData\Roaming\mbam.context.scan 2012-11-14 19:09 - 2011-10-04 17:08 - 00000000 ____D C:\QUARANTINE 2012-11-14 15:57 - 2009-07-13 20:34 - 00024576 ____A C:\Windows\System32\umstartup.etl 2012-11-13 15:22 - 2011-08-26 07:01 - 00000000 ____D C:\Users\T61p\AppData\Local\VirtualStore 2012-11-09 19:12 - 2011-08-26 07:01 - 00000000 ____D C:\users\T61p 2012-11-09 14:19 - 2011-12-04 16:36 - 00204800 __ASH C:\Users\T61p\Desktop\Thumbs.db 2012-11-09 14:15 - 2012-11-09 14:13 - 00000000 ____D C:\Users\All Users\SOPAgent 2012-11-09 14:05 - 2012-11-09 13:54 - 00000000 ____D C:\Users\T61p\AppData\Roaming\Avex 2012-11-09 13:55 - 2012-11-09 13:55 - 00000000 ____D C:\Users\T61p\Applications 2012-11-09 13:54 - 2012-11-09 13:54 - 00000000 ____D C:\Users\T61p\AppData\Roaming\Ugovyh 2012-11-07 19:37 - 2012-11-07 19:37 - 00225526 ____A C:\Users\T61p\Desktop\Presentation1.pptx 2012-10-29 11:54 - 2011-08-26 10:14 - 00000000 ____D C:\Users\All Users\Adobe 2012-10-25 14:05 - 2012-09-13 12:44 - 00000000 ____D C:\Users\T61p\Desktop\Senior Year ZeroAccess: C:\Users\T61p\AppData\Local\{d6d6eb2d-74e4-8bfe-b2da-58eacbda3349} C:\Users\T61p\AppData\Local\{d6d6eb2d-74e4-8bfe-b2da-58eacbda3349}\L C:\Users\T61p\AppData\Local\{d6d6eb2d-74e4-8bfe-b2da-58eacbda3349}\U ==================== Known DLLs ============================== [2009-07-13 15:44] - [2009-07-13 17:15] - 0522240 ____A (Microsoft Corporation) C:\Windows\System32\clbcatq.dll [2011-08-26 17:53] - [2010-11-20 04:20] - 1414144 ____A (Microsoft Corporation) C:\Windows\System32\ole32.dll [2011-08-26 17:53] - [2010-11-20 04:18] - 0640512 ____A (Microsoft Corporation) C:\Windows\System32\advapi32.dll [2011-08-26 17:53] - [2010-11-20 04:18] - 0485888 ____A (Microsoft Corporation) C:\Windows\System32\COMDLG32.dll [2011-08-26 17:53] - [2010-11-20 04:19] - 0304640 ____A (Microsoft Corporation) C:\Windows\System32\gdi32.dll [2012-09-21 23:00] - [2012-08-23 22:44] - 1793024 ____A (Microsoft Corporation) C:\Windows\System32\IERTUTIL.dll [2012-04-11 14:08] - [2012-02-29 21:33] - 0159232 ____A (Microsoft Corporation) C:\Windows\System32\IMAGEHLP.dll [2011-08-26 17:52] - [2010-11-20 04:19] - 0118272 ____A (Microsoft Corporation) C:\Windows\System32\IMM32.dll [2012-10-10 11:29] - [2012-08-20 09:40] - 0868352 ____A (Microsoft Corporation) C:\Windows\System32\kernel32.dll [2009-07-13 15:25] - [2009-07-13 17:15] - 0026624 ____A (Microsoft Corporation) C:\Windows\System32\LPK.dll [2009-07-13 15:28] - [2009-07-13 17:15] - 0828928 ____A (Microsoft Corporation) C:\Windows\System32\MSCTF.dll [2012-02-14 19:19] - [2011-12-15 23:52] - 0690688 ____A (Microsoft Corporation) C:\Windows\System32\MSVCRT.dll [2009-07-13 15:15] - [2009-07-13 17:09] - 0002048 ____A (Microsoft Corporation) C:\Windows\System32\NORMALIZ.dll [2009-07-13 15:12] - [2009-07-13 17:16] - 0008704 ____A (Microsoft Corporation) C:\Windows\System32\NSI.dll [2011-10-12 16:46] - [2011-08-26 20:26] - 0571904 ____A (Microsoft Corporation) C:\Windows\System32\OLEAUT32.dll [2009-07-13 15:15] - [2009-07-13 17:16] - 0006144 ____A (Microsoft Corporation) C:\Windows\System32\PSAPI.dll [2011-08-26 17:53] - [2010-11-20 04:21] - 0653312 ____A (Microsoft Corporation) C:\Windows\System32\rpcrt4.dll [2009-07-13 15:11] - [2009-07-13 17:16] - 0092160 ____A (Microsoft Corporation) C:\Windows\System32\sechost.dll [2011-08-26 17:53] - [2010-11-20 04:21] - 1667584 ____A (Microsoft Corporation) C:\Windows\System32\Setupapi.dll [2012-07-11 15:27] - [2012-06-08 20:41] - 12873728 ____A (Microsoft Corporation) C:\Windows\System32\SHELL32.dll [2011-08-26 17:53] - [2010-11-20 04:21] - 0350208 ____A (Microsoft Corporation) C:\Windows\System32\SHLWAPI.dll [2012-09-21 23:00] - [2012-08-23 22:51] - 1103872 ____A (Microsoft Corporation) C:\Windows\System32\URLMON.dll [2011-08-26 17:53] - [2010-11-20 04:21] - 0811520 ____A (Microsoft Corporation) C:\Windows\System32\user32.dll [2011-08-26 17:53] - [2010-11-20 04:21] - 0626176 ____A (Microsoft Corporation) C:\Windows\System32\USP10.dll [2012-09-21 23:00] - [2012-08-23 22:51] - 1129472 ____A (Microsoft Corporation) C:\Windows\System32\WININET.dll [2011-08-26 17:53] - [2010-11-20 04:21] - 0269824 ____A (Microsoft Corporation) C:\Windows\System32\WLDAP32.dll [2011-08-26 17:53] - [2010-11-20 04:21] - 0206848 ____A (Microsoft Corporation) C:\Windows\System32\WS2_32.dll [2009-07-13 15:16] - [2009-07-13 17:15] - 0315904 ____A (Microsoft Corporation) C:\Windows\System32\DifxApi.dll ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => MD5 is legit C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== EXE ASSOCIATION ===================== HKLM\…\.exe: exefile => OK HKLM\…\exefile\DefaultIcon: %1 => OK HKLM\…\exefile\open\command: "%1" %* => OK ==================== Restore Points ========================= Restore point made on: 2012-11-19 19:34:05 ==================== Memory info =========================== Percentage of memory in use: 13% Total physical RAM: 3054.3 MB Available physical RAM: 2637.89 MB Total Pagefile: 3052.57 MB Available Pagefile: 2639.43 MB Total Virtual: 2047.88 MB Available Virtual: 1960.7 MB ==================== Partitions ============================= 1 Drive c: () (Fixed) (Total:232.88 GB) (Free:169.31 GB) NTFS ==>[Drive with boot components (obtained from BCD)] 2 Drive d: (Nov 20 2012) (CDROM) (Total:0.64 GB) (Free:0.61 GB) UDF 3 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS Disk ### Status Size Free Dyn Gpt ——– ————- ——- ——- — — Disk 0 Online 232 GB 1024 KB Partitions of Disk 0: =============== Partition ### Type Size Offset ————- —————- ——- ——- Partition 1 Primary 232 GB 31 KB ========================================================= Disk: 0 Partition 1 Type : 07 Hidden: No Active: Yes Volume ### Ltr Label Fs Type Size Status Info ———- — ———– —– ———- ——- ——— ——– * Volume 1 C NTFS Partition 232 GB Healthy ========================================================= Last Boot: 2012-11-16 11:20 ==================== End Of Log ============================