Spyware / Malware / Virus Removal
Malware [Solved]
70 min read
Meeko
Topic Starter
Hi, I have a really bad virus problem (I'm not sure which virus…multiple problems have popped up) that just happened yesterday. So far I've ran MalwareBytes / Tdsskiller / and my antivirus ESET Nod 32. All which has not gotten rid of the virus yet.
Problems:
-Sometimes when I google a topic it redirects me to a different page. (Happens in safe mode too.)
-Does not fully clean computer after scans.
-Keeps asking to reboot computer.
-I've ran antivirus scans in the past but none of them has had as bad of a lag as last night's. It was lagging to the point where my screen froze on & off.
-Alerts me with a new threat but when I prompt it to delete the threat, it says error in deleting.
Log to DDS:
.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by [removed] at 18:55:26.93 on Mon 12/17/2012
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.5.1
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.6050.2568 [GMT -8:00]
.
AV: ESET NOD32 Antivirus 5.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe
C:\windows\system32\conhost.exe
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\IDT\WDM\AESTSr64.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\svchost.exe -k HPZ12
C:\windows\System32\svchost.exe -k HPZ12
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
C:\Program Files\Soluto\SolutoService.exe
C:\windows\system32\taskhost.exe
C:\Program Files\Soluto\soluto.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files (x86)\ooVoo\ooVoo.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
C:\windows\system32\wbem\unsecapp.exe
C:\windows\system32\wbem\unsecapp.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
C:\windows\system32\SearchIndexer.exe
C:\windows\system32\svchost.exe -k HPService
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\windows\system32\DllHost.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\windows\System32\svchost.exe -k secsvcs
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\SwiftKit\SwiftKit-RS.exe
C:\Program Files (x86)\Java\jre7\bin\java.exe
C:\windows\system32\conhost.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\taskeng.exe
"C:\windows\SysWOW64\svchost.exe" -k LocalServiceDns
C:\windows\system32\sppsvc.exe
C:\windows\system32\SearchProtocolHost.exe
C:\windows\system32\SearchFilterHost.exe
C:\windows\System32\svchost.exe -k WerSvcGroup
C:\windows\system32\DllHost.exe
C:\windows\system32\DllHost.exe
C:\Users\Angel\Desktop\dds.scr
C:\windows\system32\conhost.exe
C:\windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.yaho.com/
uInternet Settings,ProxyOverride = *.local
BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
BHO: ooVoo toolbar, powered by Ask.com: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
TB: ooVoo toolbar, powered by Ask.com: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll
uRun: [Google Update] "C:\Users\Angel\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
uRun: [Adobe] rundll32.exe "C:\Users\Angel\AppData\Local\Apple\Adobe\wwsuvoky.dll",sf_commandW
uRun: [join.me] rundll32.exe "C:\Users\Angel\AppData\Local\Macromedia\join.me\ivtevtm.dll",CreateTzanShellW
uRun: [ooVoo.exe] C:\Program Files (x86)\ooVoo\oovoo.exe /minimized
mRun: []
mRun: [DELL Webcam Manager] "C:\Program Files (x86)\Dell\Dell Webcam Manager\DellWMgr.exe" /s
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\qttask.exe" -atboottime
mRun: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
dRun: [Avg2013] rundll32.exe "C:\Users\Angel\AppData\Local\Dell\Avg2013\hlvoin.dll",DllRegisterServerW
dRun: [Adobe] rundll32.exe "C:\Users\Angel\AppData\Local\Apple\Adobe\wwsuvoky.dll",sf_commandW
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
LSP: mswsock.dll
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
BHO-X64: URLRedirectionBHO - No File
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
EB-X64: {555D4D79-4BD2-4094-A395-CFC534424A05} - No File
mRun-x64: [IgfxTray] C:\Windows\system32\igfxtray.exe
mRun-x64: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
mRun-x64: [Persistence] C:\Windows\system32\igfxpers.exe
mRun-x64: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
mRun-x64: [IntelPAN] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray
mRun-x64: [Logitech Download Assistant] C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
mRun-x64: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Angel\AppData\Roaming\Mozilla\Firefox\Profiles\ahwvxh6c.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npRLCT4Player.dll
FF - plugin: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\dtplugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll
FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\Angel\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: C:\Users\Angel\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
FF - plugin: C:\Users\Angel\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll
FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll
.
============= SERVICES / DRIVERS ===============
.
R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2012-2-28 55856]
R0 Soluto;Soluto;C:\Windows\System32\drivers\Soluto.sys [2012-9-29 54728]
R1 eamonm;eamonm;C:\Windows\System32\drivers\eamonm.sys [2012-3-14 209768]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-13 59904]
R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2012-2-28 89600]
R2 BTHSSecurityMgr;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Security Service;C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-6-3 134928]
R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2012-1-4 822624]
R2 ekrn;ESET Service;C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-3-7 913144]
R2 epfwwfpr;epfwwfpr;C:\Windows\System32\drivers\epfwwfpr.sys [2012-3-14 137144]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-2-28 13336]
R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2012-11-11 1153368]
R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-1 508776]
R2 SolutoService;Soluto PCGenome Core Service;C:\Program Files\Soluto\SolutoService.exe [2012-9-26 604728]
R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\System32\drivers\TurboB.sys [2010-11-29 16120]
R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2012-2-28 2655768]
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Virtual Adapter;C:\Windows\System32\drivers\AmpPal.sys [2011-9-15 299008]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\Windows\System32\drivers\CtClsFlt.sys [2012-2-28 176096]
R3 IntcDAud;Intel® Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2012-2-28 317440]
R3 iwdbus;IWD Bus Enumerator;C:\Windows\System32\drivers\iwdbus.sys [2011-6-21 25496]
R3 MEIx64;Intel® Management Engine Interface ;C:\Windows\System32\drivers\HECIx64.sys [2010-10-19 56344]
R3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\System32\drivers\NETwNs64.sys [2011-9-18 8604672]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2011-6-10 539240]
R3 Sftfs;Sftfs;C:\Windows\System32\drivers\Sftfslh.sys [2011-10-1 764264]
R3 Sftplay;Sftplay;C:\Windows\System32\drivers\Sftplaylh.sys [2011-10-1 268648]
R3 Sftredir;Sftredir;C:\Windows\System32\drivers\Sftredirlh.sys [2011-10-1 25960]
R3 Sftvol;Sftvol;C:\Windows\System32\drivers\Sftvollh.sys [2011-10-1 22376]
R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-1 219496]
R3 tihub3;TI USB3 Hub Service;C:\Windows\System32\drivers\tihub3.sys [2011-7-20 136000]
R3 tixhci;TI XHCI Service;C:\Windows\System32\drivers\tixhci.sys [2011-7-20 406336]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\System32\drivers\vwifimp.sys [2009-7-13 17920]
S1 sajpwgms;sajpwgms;C:\Windows\System32\drivers\sajpwgms.sys [2012-12-17 49872]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 RoxWatch12;Roxio Hard Drive Watcher 12;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-3 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-6-12 250808]
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protocol;C:\Windows\System32\drivers\AmpPal.sys [2011-9-15 299008]
S3 btmaudio;Intel Bluetooth Audio Service;C:\Windows\System32\drivers\btmaud.sys [2011-5-18 51712]
S3 btmaux;Intel Bluetooth Auxiliary Service;C:\Windows\System32\drivers\btmaux.sys [2011-5-18 53248]
S3 btmhsf;btmhsf;C:\Windows\System32\drivers\btmhsf.sys [2011-11-15 327168]
S3 iBtFltCoex;iBtFltCoex;C:\Windows\System32\drivers\iBtFltCoex.sys [2011-12-9 60416]
S3 intaud_WaveExtensible;Intel WiDi Audio Device;C:\Windows\System32\drivers\intelaud.sys [2011-6-21 34200]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-6-11 115168]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-9-15 340240]
S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184]
S3 RoxMediaDB12OEM;RoxMediaDB12OEM;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2012-2-28 250984]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-20 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-20 31232]
S3 TurboBoost;Intel® Turbo Boost Technology Monitor 2.0;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 52736]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2012-6-10 1255736]
S4 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-4-3 63928]
S4 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-9-15 1166848]
S4 Bluetooth Device Monitor;Bluetooth Device Monitor;C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-5-18 921664]
S4 Bluetooth Media Service;Bluetooth Media Service;C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2011-5-18 1335360]
S4 Bluetooth OBEX Service;Bluetooth OBEX Service;C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2011-5-18 995392]
S4 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S4 NAUpdate;Nero Update;C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-5-4 503080]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2012-12-18 02:44:51 ——– d-s—w- C:\ComboFix
2012-12-18 02:34:45 49872 —-a-w- C:\windows\System32\drivers\sajpwgms.sys
2012-12-18 02:31:49 76232 —-a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{649F26EA-6C88-479A-8406-9873FED2DD80}\offreg.dll
2012-12-18 01:47:59 9125352 —-a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{649F26EA-6C88-479A-8406-9873FED2DD80}\mpengine.dll
2012-12-17 09:35:34 ——– d—–w- C:\Users\Angel\AppData\Roaming\Malwarebytes
2012-12-17 09:35:17 ——– d—–w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-12-17 09:35:17 ——– d—–w- C:\PROGRA~3\Malwarebytes
2012-12-17 09:25:10 ——– d—–w- C:\Users\Angel\AppData\Local\ElevatedDiagnostics
2012-12-13 06:02:03 2382848 ——w- C:\windows\SysWow64\mshtml.tlb
2012-12-13 06:02:02 420864 ——w- C:\windows\SysWow64\vbscript.dll
2012-12-13 06:01:57 1392128 ——w- C:\windows\System32\wininet.dll
2012-12-13 06:01:57 1129472 ——w- C:\windows\SysWow64\wininet.dll
2012-12-13 06:01:55 1800704 ——w- C:\windows\SysWow64\jscript9.dll
2012-12-13 03:27:11 424960 ——w- C:\windows\System32\KernelBase.dll
2012-12-13 03:27:10 215040 ——w- C:\windows\System32\winsrv.dll
2012-12-13 03:27:09 274944 ——w- C:\windows\SysWow64\KernelBase.dll
2012-12-13 03:27:06 362496 ——w- C:\windows\System32\wow64win.dll
2012-12-13 03:27:06 243200 ——w- C:\windows\System32\wow64.dll
2012-12-13 03:27:06 13312 ——w- C:\windows\System32\wow64cpu.dll
2012-12-04 09:22:17 ——– d—–w- C:\Users\Angel\AppData\Roaming\Reallusion
2012-12-04 09:22:16 ——– d—–w- C:\Users\Angel\AppData\Roaming\tmp
2012-12-04 09:14:27 ——– d—–w- C:\Users\Angel\AppData\Roaming\ooVoo Details
2012-12-04 09:14:09 ——– d—–w- C:\Program Files (x86)\Ask.com
2012-12-04 09:13:40 ——– d—–w- C:\Program Files (x86)\ooVoo
2012-11-29 23:13:08 ——– d—–w- C:\TDSSKiller_Quarantine
2012-11-29 20:16:38 20480 —-a-w- C:\windows\svchost.exe
2012-11-27 06:32:55 ——– d—–w- C:\Users\Angel\AppData\Local\{55ABBE3F-DD2B-457F-902A-1A0666BE9072}
.
==================== Find3M ====================
.
2012-12-12 08:46:25 73656 —-a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-12-12 08:46:25 697272 —-a-w- C:\windows\SysWow64\FlashPlayerApp.exe
2012-12-12 08:46:12 16363960 —-a-w- C:\windows\SysWow64\FlashPlayerInstaller.exe
2012-10-25 11:12:26 94208 —-a-w- C:\windows\SysWow64\QuickTimeVR.qtx
2012-10-25 11:12:26 69632 —-a-w- C:\windows\SysWow64\QuickTime.qts
2012-10-18 18:25:58 3149824 —-a-w- C:\windows\System32\win32k.sys
2012-10-17 07:46:13 75 –sh–r- C:\windows\CT4CET.bin
2012-10-16 08:38:37 135168 —-a-w- C:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 08:38:34 350208 —-a-w- C:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 07:39:52 561664 —-a-w- C:\windows\apppatch\AcLayers.dll
2012-10-09 18:17:13 55296 —-a-w- C:\windows\System32\dhcpcsvc6.dll
2012-10-09 18:17:13 226816 —-a-w- C:\windows\System32\dhcpcore6.dll
2012-10-09 17:40:31 44032 —-a-w- C:\windows\SysWow64\dhcpcsvc6.dll
2012-10-09 17:40:31 193536 —-a-w- C:\windows\SysWow64\dhcpcore6.dll
2012-10-08 11:31:03 2312704 —-a-w- C:\windows\System32\jscript9.dll
2012-10-08 11:24:37 1346048 —-a-w- C:\windows\System32\urlmon(72).dll
2012-10-08 11:23:52 1392128 —-a-w- C:\windows\System32\wininet(74).dll
2012-10-08 11:22:55 1494528 —-a-w- C:\windows\System32\inetcpl.cpl
2012-10-08 11:18:22 173056 —-a-w- C:\windows\System32\ieUnatt.exe
2012-10-08 11:17:35 599040 —-a-w- C:\windows\System32\vbscript.dll
2012-10-08 11:15:09 2144768 —-a-w- C:\windows\System32\iertutil(67).dll
2012-10-08 11:13:33 2382848 —-a-w- C:\windows\System32\mshtml.tlb
2012-10-08 08:28:33 12320768 —-a-w- C:\windows\SysWow64\mshtml(87).dll
2012-10-08 08:02:17 9738240 —-a-w- C:\windows\SysWow64\ieframe(81).dll
2012-10-08 07:56:24 1800704 —-a-w- C:\windows\SysWow64\jscript9(83).dll
2012-10-08 07:48:51 1103872 —-a-w- C:\windows\SysWow64\urlmon(89).dll
2012-10-08 07:48:03 1129472 —-a-w- C:\windows\SysWow64\wininet(91).dll
2012-10-08 07:47:44 1427968 —-a-w- C:\windows\SysWow64\inetcpl.cpl
2012-10-08 07:44:05 142848 —-a-w- C:\windows\SysWow64\ieUnatt.exe
2012-10-08 07:43:21 420864 —-a-w- C:\windows\SysWow64\vbscript(90).dll
2012-10-08 07:41:28 1793024 —-a-w- C:\windows\SysWow64\iertutil(82).dll
2012-10-08 07:40:56 2382848 —-a-w- C:\windows\SysWow64\mshtml(88).tlb
2012-10-03 17:56:54 1914248 —-a-w- C:\windows\System32\drivers\tcpip.sys
2012-10-03 17:44:21 70656 —-a-w- C:\windows\System32\nlaapi.dll
2012-10-03 17:44:21 303104 —-a-w- C:\windows\System32\nlasvc.dll
2012-10-03 17:44:17 246272 —-a-w- C:\windows\System32\netcorehc.dll
2012-10-03 17:44:17 18944 —-a-w- C:\windows\System32\netevent.dll
2012-10-03 17:44:16 216576 —-a-w- C:\windows\System32\ncsi.dll
2012-10-03 17:42:16 569344 —-a-w- C:\windows\System32\iphlpsvc.dll
2012-10-03 16:42:24 18944 —-a-w- C:\windows\SysWow64\netevent.dll
2012-10-03 16:42:24 175104 —-a-w- C:\windows\SysWow64\netcorehc.dll
2012-10-03 16:42:23 156672 —-a-w- C:\windows\SysWow64\ncsi.dll
2012-10-03 16:07:26 45568 —-a-w- C:\windows\System32\drivers\tcpipreg.sys
2012-09-26 18:01:04 54728 —-a-w- C:\windows\System32\drivers\Soluto.sys
2012-09-25 22:47:43 78336 —-a-w- C:\windows\SysWow64\synceng.dll
2012-09-25 22:46:17 95744 —-a-w- C:\windows\System32\synceng.dll
2012-09-20 23:02:06 1832760 —-a-w- C:\windows\System32\LogiLDA.DLL
.
============= FINISH: 18:57:27.95 ===============
Thank you for taking the time to look at my problem! I apologize in advance if I cause any frustrations, I'm not too familiar with fixing computer problems. Please be patient with me. Thank you, again.
patndoris
Hello and 
My name is patndoris. I will be glad to take a look at your log and help you with solving any malware problems. It will be very helpful if you follow these guidelines:
I see you have already installed Combofix. Can you please advise if you have already run this tool?
While you may see ComboFix being used quite often, and without incident, the tool should not be run unsupervised (as stated in the Disclaimer that is first displayed by ComboFix when you run the tool) Going forward, I highly recommend you heed such instructions.
If you have already run it, then I will need to ask that you also post the log that can be found at C:\ComboFix.txt so I can see what may have already been removed from your machine. If you have not run it PLEASE DO NOT DO SO until I have seen the results of your TDSSKiller logs.
Please read carefully and follow these steps. There is a difference between what you see in one of the images below and what I need you to do.
We are only creating a log - I do NOT want you to "cure" or try to fix anything in this step. It is very important that you don't choose Cure when presented with that option.
My name is patndoris. I will be glad to take a look at your log and help you with solving any malware problems. It will be very helpful if you follow these guidelines:
- Malware logs are often lengthy and can take a lot of time to research and interpret. Please be patient while I review your logs.
- Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
- Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
- Please follow my instructions carefully and in the order they are posted. You may also find it helpful to print out the instructions you receive.
- Please do not run any scans or install/uninstall any applications or delete anything without being directed to do so
- Remember, absence of symptoms does not mean the infection is all gone. Please stick with me till you're given the "all clear".
- Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
- Please reply within 3 days. If I do not hear back from you in that time frame, I will post a reminder for you. Topics with no reply in 4 days are closed!
I see you have already installed Combofix. Can you please advise if you have already run this tool?
While you may see ComboFix being used quite often, and without incident, the tool should not be run unsupervised (as stated in the Disclaimer that is first displayed by ComboFix when you run the tool) Going forward, I highly recommend you heed such instructions.
Why we don't ask you to run ComboFix from the onset
As stated by the author of ComboFix:
ComboFix is a very powerful tool which when improperly used may render your machine to a doorstop.
We first need to verify if there's any rootkits present and how they could affect our tools. DDS & TDSSKiller are preliminary scans. We use their logs to map our strategy for attack.
With these logs we can determine the infections present & decide whether to deploy ComboFix.
If you have already run it, then I will need to ask that you also post the log that can be found at C:\ComboFix.txt so I can see what may have already been removed from your machine. If you have not run it PLEASE DO NOT DO SO until I have seen the results of your TDSSKiller logs.
Please read carefully and follow these steps. There is a difference between what you see in one of the images below and what I need you to do.
We are only creating a log - I do NOT want you to "cure" or try to fix anything in this step. It is very important that you don't choose Cure when presented with that option.
- Download TDSSKiller and save it to your Desktop.
- Extract its contents to your desktop.
- Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
Click to load external image (Posted Image)
- If an infected file is detected, the default action will be Cure but I want you to choose SKIP instead , click on Continue.
Click to load external image (Posted Image)
- If a suspicious file is detected, the default action will be Skip, click on Continue.
Click to load external image (Posted Image)
- It may ask you to reboot the computer to complete the process. Click on Reboot Now.
Click to load external image (Posted Image)
- If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
- If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
Meeko
Hi PatnDoris,
I found this forum when I was searching for a way to get rid of this virus and someone advised her to download ComboFix. I downloaded it and clicked on it before I saw that it should not be ran without supervision, so I tried to close it asap, I didn't run it thoroughly.
TDSSkiller log:
19:18:15.0358 9452 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
19:18:15.0732 9452 ============================================================
19:18:15.0732 9452 Current date / time: 2012/12/18 19:18:15.0732
19:18:15.0732 9452 SystemInfo:
19:18:15.0732 9452
19:18:15.0732 9452 OS Version: 6.1.7601 ServicePack: 1.0
19:18:15.0732 9452 Product type: Workstation
19:18:15.0733 9452 ComputerName: ANGEL-PC
19:18:15.0733 9452 UserName: Angel
19:18:15.0733 9452 Windows directory: C:\windows
19:18:15.0733 9452 System windows directory: C:\windows
19:18:15.0733 9452 Running under WOW64
19:18:15.0733 9452 Processor architecture: Intel x64
19:18:15.0733 9452 Number of processors: 4
19:18:15.0733 9452 Page size: 0x1000
19:18:15.0733 9452 Boot type: Normal boot
19:18:15.0733 9452 ============================================================
19:18:20.0483 9452 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
19:18:20.0487 9452 ============================================================
19:18:20.0487 9452 \Device\Harddisk0\DR0:
19:18:20.0488 9452 MBR partitions:
19:18:20.0488 9452 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1D4C000
19:18:20.0488 9452 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1D7E800, BlocksNum 0x38607030
19:18:20.0488 9452 ============================================================
19:18:20.0615 9452 C: <-> \Device\Harddisk0\DR0\Partition2
19:18:20.0638 9452 ============================================================
19:18:20.0638 9452 Initialize success
19:18:20.0638 9452 ============================================================
19:18:22.0279 3864 ============================================================
19:18:22.0279 3864 Scan started
19:18:22.0279 3864 Mode: Manual;
19:18:22.0279 3864 ============================================================
19:18:29.0206 3864 ================ Scan system memory ========================
19:18:29.0206 3864 System memory - ok
19:18:29.0207 3864 ================ Scan services =============================
19:18:29.0638 3864 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\windows\system32\drivers\1394ohci.sys
19:18:29.0656 3864 1394ohci - ok
19:18:29.0831 3864 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\windows\system32\drivers\ACPI.sys
19:18:29.0871 3864 ACPI - ok
19:18:29.0988 3864 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\windows\system32\drivers\acpipmi.sys
19:18:30.0013 3864 AcpiPmi - ok
19:18:30.0246 3864 [ 62B7936F9036DD6ED36E6A7EFA805DC0 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
19:18:30.0308 3864 AdobeARMservice - ok
19:18:31.0072 3864 [ 0CB0AA071C7B86A64F361DCFDF357329 ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
19:18:31.0158 3864 AdobeFlashPlayerUpdateSvc - ok
19:18:31.0278 3864 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\windows\system32\drivers\adp94xx.sys
19:18:31.0305 3864 adp94xx - ok
19:18:31.0359 3864 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\windows\system32\drivers\adpahci.sys
19:18:31.0363 3864 adpahci - ok
19:18:31.0418 3864 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\windows\system32\drivers\adpu320.sys
19:18:31.0509 3864 adpu320 - ok
19:18:31.0553 3864 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\windows\System32\aelupsvc.dll
19:18:31.0579 3864 AeLookupSvc - ok
19:18:32.0084 3864 [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters C:\Program Files\IDT\WDM\AESTSr64.exe
19:18:32.0126 3864 AESTFilters - ok
19:18:32.0277 3864 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\windows\system32\drivers\afd.sys
19:18:32.0324 3864 AFD - ok
19:18:32.0492 3864 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\windows\system32\drivers\agp440.sys
19:18:32.0536 3864 agp440 - ok
19:18:32.0646 3864 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\windows\System32\alg.exe
19:18:32.0741 3864 ALG - ok
19:18:32.0802 3864 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\windows\system32\drivers\aliide.sys
19:18:32.0803 3864 aliide - ok
19:18:32.0831 3864 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\windows\system32\drivers\amdide.sys
19:18:32.0843 3864 amdide - ok
19:18:32.0968 3864 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\windows\system32\drivers\amdk8.sys
19:18:33.0019 3864 AmdK8 - ok
19:18:33.0029 3864 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\windows\system32\drivers\amdppm.sys
19:18:33.0034 3864 AmdPPM - ok
19:18:33.0084 3864 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\windows\system32\drivers\amdsata.sys
19:18:33.0118 3864 amdsata - ok
19:18:33.0246 3864 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\windows\system32\drivers\amdsbs.sys
19:18:33.0263 3864 amdsbs - ok
19:18:33.0300 3864 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\windows\system32\drivers\amdxata.sys
19:18:33.0304 3864 amdxata - ok
19:18:33.0557 3864 [ 3BC90482A834F998C3B7A9C934A20342 ] AMPPAL C:\windows\system32\DRIVERS\AMPPAL.sys
19:18:33.0702 3864 AMPPAL - ok
19:18:33.0741 3864 [ 3BC90482A834F998C3B7A9C934A20342 ] AMPPALP C:\windows\system32\DRIVERS\amppal.sys
19:18:33.0747 3864 AMPPALP - ok
19:18:34.0225 3864 [ A47D7FEBD9381D34DDB4FF38B15A67FE ] AMPPALR3 C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
19:18:34.0268 3864 AMPPALR3 - ok
19:18:34.0441 3864 [ 24ED0EB2B2558970176ECEE680F8F806 ] ApfiltrService C:\windows\system32\DRIVERS\Apfiltr.sys
19:18:34.0447 3864 ApfiltrService - ok
19:18:34.0521 3864 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\windows\system32\drivers\appid.sys
19:18:34.0524 3864 AppID - ok
19:18:34.0659 3864 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\windows\System32\appidsvc.dll
19:18:34.0684 3864 AppIDSvc - ok
19:18:34.0733 3864 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\windows\System32\appinfo.dll
19:18:34.0764 3864 Appinfo - ok
19:18:34.0944 3864 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
19:18:34.0967 3864 Apple Mobile Device - ok
19:18:35.0099 3864 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\windows\system32\drivers\arc.sys
19:18:35.0113 3864 arc - ok
19:18:35.0127 3864 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\windows\system32\drivers\arcsas.sys
19:18:35.0140 3864 arcsas - ok
19:18:35.0364 3864 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
19:18:35.0408 3864 aspnet_state - ok
19:18:35.0451 3864 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\windows\system32\DRIVERS\asyncmac.sys
19:18:35.0462 3864 AsyncMac - ok
19:18:35.0576 3864 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\windows\system32\drivers\atapi.sys
19:18:35.0589 3864 atapi - ok
19:18:35.0658 3864 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
19:18:35.0665 3864 AudioEndpointBuilder - ok
19:18:35.0673 3864 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\windows\System32\Audiosrv.dll
19:18:35.0677 3864 AudioSrv - ok
19:18:35.0730 3864 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\windows\System32\AxInstSV.dll
19:18:35.0739 3864 AxInstSV - ok
19:18:35.0853 3864 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\windows\system32\drivers\bxvbda.sys
19:18:35.0883 3864 b06bdrv - ok
19:18:35.0953 3864 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\windows\system32\DRIVERS\b57nd60a.sys
19:18:35.0956 3864 b57nd60a - ok
19:18:36.0062 3864 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\windows\System32\bdesvc.dll
19:18:36.0071 3864 BDESVC - ok
19:18:36.0088 3864 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\windows\system32\drivers\Beep.sys
19:18:36.0111 3864 Beep - ok
19:18:36.0185 3864 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\windows\System32\bfe.dll
19:18:36.0193 3864 BFE - ok
19:18:36.0370 3864 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\windows\System32\qmgr.dll
19:18:36.0424 3864 BITS - ok
19:18:36.0541 3864 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\windows\system32\DRIVERS\blbdrive.sys
19:18:36.0603 3864 blbdrive - ok
19:18:36.0868 3864 [ 5FF7B9916A10E8E69E7C0D16F0B4787A ] Bluetooth Device Monitor C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
19:18:36.0912 3864 Bluetooth Device Monitor - ok
19:18:36.0963 3864 [ E43D73CAF1023976EFBA1D0F0E69E271 ] Bluetooth Media Service C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
19:18:37.0101 3864 Bluetooth Media Service - ok
19:18:37.0648 3864 [ 20427929646784A482DF34EF8C4FED23 ] Bluetooth OBEX Service C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
19:18:37.0738 3864 Bluetooth OBEX Service - ok
19:18:38.0083 3864 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
19:18:38.0127 3864 Bonjour Service - ok
19:18:38.0199 3864 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\windows\system32\DRIVERS\bowser.sys
19:18:38.0218 3864 bowser - ok
19:18:38.0361 3864 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\windows\system32\drivers\BrFiltLo.sys
19:18:38.0385 3864 BrFiltLo - ok
19:18:38.0417 3864 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\windows\system32\drivers\BrFiltUp.sys
19:18:38.0433 3864 BrFiltUp - ok
19:18:38.0445 3864 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\windows\system32\DRIVERS\bridge.sys
19:18:38.0471 3864 BridgeMP - ok
19:18:38.0649 3864 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\windows\System32\browser.dll
19:18:38.0699 3864 Browser - ok
19:18:38.0881 3864 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\windows\System32\Drivers\Brserid.sys
19:18:38.0929 3864 Brserid - ok
19:18:39.0068 3864 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\windows\System32\Drivers\BrSerWdm.sys
19:18:39.0104 3864 BrSerWdm - ok
19:18:39.0146 3864 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\windows\System32\Drivers\BrUsbMdm.sys
19:18:39.0148 3864 BrUsbMdm - ok
19:18:39.0152 3864 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\windows\System32\Drivers\BrUsbSer.sys
19:18:39.0168 3864 BrUsbSer - ok
19:18:39.0280 3864 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\windows\system32\drivers\BthEnum.sys
19:18:39.0330 3864 BthEnum - ok
19:18:39.0393 3864 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\windows\system32\drivers\bthmodem.sys
19:18:39.0422 3864 BTHMODEM - ok
19:18:39.0538 3864 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\windows\system32\DRIVERS\bthpan.sys
19:18:39.0540 3864 BthPan - ok
19:18:39.0710 3864 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\windows\System32\Drivers\BTHport.sys
19:18:39.0812 3864 BTHPORT - ok
19:18:39.0877 3864 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\windows\system32\bthserv.dll
19:18:39.0989 3864 bthserv - ok
19:18:40.0084 3864 [ 9E2AF97302B9F4BF97E952A865EB31AE ] BTHSSecurityMgr C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
19:18:40.0096 3864 BTHSSecurityMgr - ok
19:18:40.0149 3864 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\windows\System32\Drivers\BTHUSB.sys
19:18:40.0259 3864 BTHUSB - ok
19:18:40.0327 3864 [ 274E47BD9C1367BDBFA9DF10C2E6C544 ] btmaudio C:\windows\system32\drivers\btmaud.sys
19:18:40.0355 3864 btmaudio - ok
19:18:40.0404 3864 [ 75EAB5AAF6E9F83739249CE60B4B9C39 ] btmaux C:\windows\system32\DRIVERS\btmaux.sys
19:18:40.0486 3864 btmaux - ok
19:18:40.0554 3864 [ 40C6FEC49D1CC4D112368A2BCD2BCBB7 ] btmhsf C:\windows\system32\DRIVERS\btmhsf.sys
19:18:40.0564 3864 btmhsf - ok
19:18:40.0590 3864 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\windows\system32\DRIVERS\cdfs.sys
19:18:40.0610 3864 cdfs - ok
19:18:40.0685 3864 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\windows\system32\DRIVERS\cdrom.sys
19:18:40.0728 3864 cdrom - ok
19:18:40.0855 3864 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\windows\System32\certprop.dll
19:18:40.0865 3864 CertPropSvc - ok
19:18:40.0905 3864 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\windows\system32\drivers\circlass.sys
19:18:40.0920 3864 circlass - ok
19:18:40.0935 3864 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\windows\system32\CLFS.sys
19:18:40.0943 3864 CLFS - ok
19:18:41.0097 3864 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:18:41.0139 3864 clr_optimization_v2.0.50727_32 - ok
19:18:41.0198 3864 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
19:18:41.0217 3864 clr_optimization_v2.0.50727_64 - ok
19:18:41.0389 3864 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:18:41.0405 3864 clr_optimization_v4.0.30319_32 - ok
19:18:41.0449 3864 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
19:18:41.0486 3864 clr_optimization_v4.0.30319_64 - ok
19:18:41.0548 3864 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\windows\system32\DRIVERS\CmBatt.sys
19:18:41.0632 3864 CmBatt - ok
19:18:41.0661 3864 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\windows\system32\drivers\cmdide.sys
19:18:41.0680 3864 cmdide - ok
19:18:41.0733 3864 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\windows\system32\Drivers\cng.sys
19:18:41.0772 3864 CNG - ok
19:18:41.0839 3864 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\windows\system32\drivers\compbatt.sys
19:18:41.0843 3864 Compbatt - ok
19:18:41.0985 3864 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\windows\system32\DRIVERS\CompositeBus.sys
19:18:41.0997 3864 CompositeBus - ok
19:18:42.0017 3864 COMSysApp - ok
19:18:42.0089 3864 cpuz135 - ok
19:18:42.0182 3864 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\windows\system32\drivers\crcdisk.sys
19:18:42.0185 3864 crcdisk - ok
19:18:42.0262 3864 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\windows\system32\cryptsvc.dll
19:18:42.0299 3864 CryptSvc - ok
19:18:42.0431 3864 [ BC3D4F90978CD7C8EABD1BAF3BF7873A ] CtClsFlt C:\windows\system32\DRIVERS\CtClsFlt.sys
19:18:42.0533 3864 CtClsFlt - ok
19:18:42.0639 3864 [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
19:18:42.0782 3864 cvhsvc - ok
19:18:42.0850 3864 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\windows\system32\rpcss.dll
19:18:42.0855 3864 DcomLaunch - ok
19:18:42.0963 3864 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\windows\System32\defragsvc.dll
19:18:42.0989 3864 defragsvc - ok
19:18:43.0039 3864 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\windows\system32\Drivers\dfsc.sys
19:18:43.0050 3864 DfsC - ok
19:18:43.0109 3864 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\windows\system32\dhcpcore.dll
19:18:43.0118 3864 Dhcp - ok
19:18:43.0150 3864 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\windows\system32\drivers\discache.sys
19:18:43.0154 3864 discache - ok
19:18:43.0295 3864 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\windows\system32\drivers\disk.sys
19:18:43.0304 3864 Disk - ok
19:18:43.0344 3864 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\windows\System32\dnsrslvr.dll
19:18:43.0364 3864 Dnscache - ok
19:18:43.0409 3864 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\windows\System32\dot3svc.dll
19:18:43.0427 3864 dot3svc - ok
19:18:43.0486 3864 [ B42ED0320C6E41102FDE0005154849BB ] Dot4 C:\windows\system32\DRIVERS\Dot4.sys
19:18:43.0510 3864 Dot4 - ok
19:18:43.0531 3864 [ E9F5969233C5D89F3C35E3A66A52A361 ] Dot4Print C:\windows\system32\DRIVERS\Dot4Prt.sys
19:18:43.0604 3864 Dot4Print - ok
19:18:43.0629 3864 [ FD05A02B0370BC3000F402E543CA5814 ] dot4usb C:\windows\system32\DRIVERS\dot4usb.sys
19:18:43.0660 3864 dot4usb - ok
19:18:43.0688 3864 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\windows\system32\dps.dll
19:18:43.0692 3864 DPS - ok
19:18:43.0762 3864 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\windows\system32\drivers\drmkaud.sys
19:18:43.0763 3864 drmkaud - ok
19:18:43.0799 3864 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\windows\System32\drivers\dxgkrnl.sys
19:18:43.0818 3864 DXGKrnl - ok
19:18:43.0885 3864 [ D00EAE9C735A7DEE8049E50D73D25434 ] eamonm C:\windows\system32\DRIVERS\eamonm.sys
19:18:43.0901 3864 eamonm - ok
19:18:44.0033 3864 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\windows\System32\eapsvc.dll
19:18:44.0060 3864 EapHost - ok
19:18:44.0194 3864 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\windows\system32\drivers\evbda.sys
19:18:44.0294 3864 ebdrv - ok
19:18:44.0374 3864 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\windows\System32\lsass.exe
19:18:44.0404 3864 EFS - ok
19:18:44.0434 3864 [ E5EDDE3C8158DD0CBC5812F201DCDED0 ] ehdrv C:\windows\system32\DRIVERS\ehdrv.sys
19:18:44.0444 3864 ehdrv - ok
19:18:44.0614 3864 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\windows\ehome\ehRecvr.exe
19:18:44.0634 3864 ehRecvr - ok
19:18:44.0674 3864 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\windows\ehome\ehsched.exe
19:18:44.0674 3864 ehSched - ok
19:18:44.0864 3864 [ AD4FAADE819E0DA9933BEA7C01D2C763 ] ekrn C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
19:18:44.0904 3864 ekrn - ok
19:18:44.0954 3864 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\windows\system32\drivers\elxstor.sys
19:18:44.0984 3864 elxstor - ok
19:18:45.0104 3864 [ 3EBB7FD3C605262B942868A1D840F4F1 ] epfwwfpr C:\windows\system32\DRIVERS\epfwwfpr.sys
19:18:45.0144 3864 epfwwfpr - ok
19:18:45.0144 3864 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\windows\system32\drivers\errdev.sys
19:18:45.0144 3864 ErrDev - ok
19:18:45.0204 3864 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\windows\system32\es.dll
19:18:45.0224 3864 EventSystem - ok
19:18:45.0344 3864 [ B20A788579E443F768AAB1A24F705D0A ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
19:18:45.0439 3864 EvtEng - ok
19:18:45.0459 3864 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\windows\system32\drivers\exfat.sys
19:18:45.0484 3864 exfat - ok
19:18:45.0509 3864 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\windows\system32\drivers\fastfat.sys
19:18:45.0514 3864 fastfat - ok
19:18:45.0644 3864 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\windows\system32\fxssvc.exe
19:18:45.0664 3864 Fax - ok
19:18:45.0689 3864 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\windows\system32\drivers\fdc.sys
19:18:45.0689 3864 fdc - ok
19:18:45.0779 3864 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\windows\system32\fdPHost.dll
19:18:45.0894 3864 fdPHost - ok
19:18:45.0919 3864 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\windows\system32\fdrespub.dll
19:18:45.0924 3864 FDResPub - ok
19:18:45.0974 3864 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\windows\system32\drivers\fileinfo.sys
19:18:45.0989 3864 FileInfo - ok
19:18:46.0024 3864 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\windows\system32\drivers\filetrace.sys
19:18:46.0114 3864 Filetrace - ok
19:18:46.0134 3864 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\windows\system32\drivers\flpydisk.sys
19:18:46.0139 3864 flpydisk - ok
19:18:46.0214 3864 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\windows\system32\drivers\fltmgr.sys
19:18:46.0229 3864 FltMgr - ok
19:18:46.0354 3864 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\windows\system32\FntCache.dll
19:18:46.0379 3864 FontCache - ok
19:18:46.0429 3864 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
19:18:46.0429 3864 FontCache3.0.0.0 - ok
19:18:46.0484 3864 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\windows\system32\drivers\FsDepends.sys
19:18:46.0484 3864 FsDepends - ok
19:18:46.0599 3864 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\windows\system32\drivers\Fs_Rec.sys
19:18:46.0609 3864 Fs_Rec - ok
19:18:46.0664 3864 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\windows\system32\DRIVERS\fvevol.sys
19:18:46.0709 3864 fvevol - ok
19:18:46.0814 3864 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\windows\system32\drivers\gagp30kx.sys
19:18:46.0824 3864 gagp30kx - ok
19:18:46.0992 3864 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
19:18:47.0041 3864 GamesAppService - ok
19:18:47.0177 3864 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\windows\system32\DRIVERS\GEARAspiWDM.sys
19:18:47.0182 3864 GEARAspiWDM - ok
19:18:47.0492 3864 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\windows\System32\gpsvc.dll
19:18:47.0958 3864 gpsvc - ok
19:18:48.0284 3864 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\windows\system32\drivers\hcw85cir.sys
19:18:48.0327 3864 hcw85cir - ok
19:18:48.0370 3864 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
19:18:48.0379 3864 HdAudAddService - ok
19:18:48.0459 3864 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\windows\system32\DRIVERS\HDAudBus.sys
19:18:48.0464 3864 HDAudBus - ok
19:18:48.0493 3864 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\windows\system32\drivers\HidBatt.sys
19:18:48.0496 3864 HidBatt - ok
19:18:48.0531 3864 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\windows\system32\drivers\hidbth.sys
19:18:48.0533 3864 HidBth - ok
19:18:48.0562 3864 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\windows\system32\drivers\hidir.sys
19:18:48.0579 3864 HidIr - ok
19:18:48.0625 3864 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\windows\System32\hidserv.dll
19:18:48.0720 3864 hidserv - ok
19:18:48.0827 3864 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\windows\system32\DRIVERS\hidusb.sys
19:18:48.0950 3864 HidUsb - ok
19:18:48.0994 3864 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\windows\system32\kmsvc.dll
19:18:49.0016 3864 hkmsvc - ok
19:18:49.0050 3864 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\windows\system32\ListSvc.dll
19:18:49.0065 3864 HomeGroupListener - ok
19:18:49.0207 3864 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\windows\system32\provsvc.dll
19:18:49.0239 3864 HomeGroupProvider - ok
19:18:50.0562 3864 [ 5DA42D24712E00728CEA2342A65009B2 ] hpqcxs08 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
19:18:50.0847 3864 hpqcxs08 - ok
19:18:50.0920 3864 [ D86A39BF100069444D026D22D9A6E555 ] hpqddsvc C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll
19:18:50.0941 3864 hpqddsvc - ok
19:18:51.0063 3864 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\windows\system32\drivers\HpSAMD.sys
19:18:51.0070 3864 HpSAMD - ok
19:18:51.0730 3864 [ D4F91CF4DE215D6F14A06087D46725E4 ] HPSLPSVC C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
19:18:52.0232 3864 HPSLPSVC - ok
19:18:52.0404 3864 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\windows\system32\drivers\HTTP.sys
19:18:52.0422 3864 HTTP - ok
19:18:52.0454 3864 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\windows\system32\drivers\hwpolicy.sys
19:18:52.0457 3864 hwpolicy - ok
19:18:52.0555 3864 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\windows\system32\DRIVERS\i8042prt.sys
19:18:52.0577 3864 i8042prt - ok
19:18:52.0714 3864 [ D7921D5A870B11CC1ADAB198A519D50A ] iaStor C:\windows\system32\DRIVERS\iaStor.sys
19:18:52.0717 3864 iaStor - ok
19:18:52.0784 3864 [ 8FFF9083252C16FE3960173722605E9E ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
19:18:52.0884 3864 IAStorDataMgrSvc - ok
19:18:52.0947 3864 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\windows\system32\drivers\iaStorV.sys
19:18:52.0989 3864 iaStorV - ok
19:18:53.0118 3864 [ FC47F5CF561BF0FD897EFD1A9604DCCF ] iBtFltCoex C:\windows\system32\DRIVERS\iBtFltCoex.sys
19:18:53.0186 3864 iBtFltCoex - ok
19:18:53.0721 3864 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
19:18:53.0774 3864 idsvc - ok
19:18:54.0107 3864 [ 174BCAC474DE13B2650E444CF124828E ] igfx C:\windows\system32\DRIVERS\igdkmd64.sys
19:18:54.0465 3864 igfx - ok
19:18:54.0506 3864 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\windows\system32\drivers\iirsp.sys
19:18:54.0507 3864 iirsp - ok
19:18:54.0571 3864 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\windows\System32\ikeext.dll
19:18:54.0581 3864 IKEEXT - ok
19:18:54.0704 3864 [ CADDF0927DAC63EDAE48F5C35A61D87D ] intaud_WaveExtensible C:\windows\system32\drivers\intelaud.sys
19:18:54.0716 3864 intaud_WaveExtensible - ok
19:18:54.0779 3864 [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud C:\windows\system32\DRIVERS\IntcDAud.sys
19:18:54.0783 3864 IntcDAud - ok
19:18:54.0828 3864 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\windows\system32\drivers\intelide.sys
19:18:54.0829 3864 intelide - ok
19:18:54.0932 3864 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\windows\system32\DRIVERS\intelppm.sys
19:18:54.0936 3864 intelppm - ok
19:18:55.0000 3864 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\windows\system32\ipbusenum.dll
19:18:55.0004 3864 IPBusEnum - ok
19:18:55.0014 3864 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\windows\system32\DRIVERS\ipfltdrv.sys
19:18:55.0041 3864 IpFilterDriver - ok
19:18:55.0178 3864 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\windows\System32\iphlpsvc.dll
19:18:55.0435 3864 iphlpsvc - ok
19:18:55.0474 3864 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\windows\system32\drivers\IPMIDrv.sys
19:18:55.0476 3864 IPMIDRV - ok
19:18:55.0508 3864 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\windows\system32\drivers\ipnat.sys
19:18:55.0532 3864 IPNAT - ok
19:18:55.0602 3864 [ 6E50CFA46527B39015B750AAD161C5CC ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
19:18:55.0613 3864 iPod Service - ok
19:18:55.0703 3864 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\windows\system32\drivers\irenum.sys
19:18:55.0713 3864 IRENUM - ok
19:18:55.0773 3864 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\windows\system32\drivers\isapnp.sys
19:18:55.0773 3864 isapnp - ok
19:18:55.0803 3864 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\windows\system32\drivers\msiscsi.sys
19:18:55.0823 3864 iScsiPrt - ok
19:18:55.0923 3864 [ 716F66336F10885D935B08174DC54242 ] iwdbus C:\windows\system32\DRIVERS\iwdbus.sys
19:18:55.0933 3864 iwdbus - ok
19:18:55.0983 3864 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\windows\system32\DRIVERS\kbdclass.sys
19:18:55.0983 3864 kbdclass - ok
19:18:56.0043 3864 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\windows\system32\DRIVERS\kbdhid.sys
19:18:56.0043 3864 kbdhid - ok
19:18:56.0123 3864 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\windows\system32\lsass.exe
19:18:56.0123 3864 KeyIso - ok
19:18:56.0213 3864 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\windows\system32\Drivers\ksecdd.sys
19:18:56.0233 3864 KSecDD - ok
19:18:56.0293 3864 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\windows\system32\Drivers\ksecpkg.sys
19:18:56.0293 3864 KSecPkg - ok
19:18:56.0383 3864 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\windows\system32\drivers\ksthunk.sys
19:18:56.0383 3864 ksthunk - ok
19:18:56.0443 3864 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\windows\system32\msdtckrm.dll
19:18:56.0463 3864 KtmRm - ok
19:18:56.0573 3864 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\windows\System32\srvsvc.dll
19:18:56.0603 3864 LanmanServer - ok
19:18:56.0623 3864 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\windows\System32\wkssvc.dll
19:18:56.0633 3864 LanmanWorkstation - ok
19:18:56.0743 3864 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\windows\system32\DRIVERS\lltdio.sys
19:18:56.0743 3864 lltdio - ok
19:18:56.0763 3864 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\windows\System32\lltdsvc.dll
19:18:56.0773 3864 lltdsvc - ok
19:18:56.0813 3864 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\windows\System32\lmhsvc.dll
19:18:56.0813 3864 lmhosts - ok
19:18:56.0973 3864 [ 0803906D607A9B83184447B75B60ECC2 ] LMS C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
19:18:57.0003 3864 LMS - ok
19:18:57.0073 3864 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\windows\system32\drivers\lsi_fc.sys
19:18:57.0073 3864 LSI_FC - ok
19:18:57.0163 3864 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\windows\system32\drivers\lsi_sas.sys
19:18:57.0173 3864 LSI_SAS - ok
19:18:57.0173 3864 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\windows\system32\drivers\lsi_sas2.sys
19:18:57.0173 3864 LSI_SAS2 - ok
19:18:57.0243 3864 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\windows\system32\drivers\lsi_scsi.sys
19:18:57.0263 3864 LSI_SCSI - ok
19:18:57.0303 3864 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\windows\system32\drivers\luafv.sys
19:18:57.0303 3864 luafv - ok
19:18:57.0423 3864 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\windows\system32\Mcx2Svc.dll
19:18:57.0443 3864 Mcx2Svc - ok
19:18:57.0483 3864 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\windows\system32\drivers\megasas.sys
19:18:57.0483 3864 megasas - ok
19:18:57.0573 3864 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\windows\system32\drivers\MegaSR.sys
19:18:57.0573 3864 MegaSR - ok
19:18:57.0633 3864 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\windows\system32\DRIVERS\HECIx64.sys
19:18:57.0643 3864 MEIx64 - ok
19:18:57.0693 3864 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\windows\system32\mmcss.dll
19:18:57.0703 3864 MMCSS - ok
19:18:57.0703 3864 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\windows\system32\drivers\modem.sys
19:18:57.0793 3864 Modem - ok
19:18:57.0833 3864 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\windows\system32\DRIVERS\monitor.sys
19:18:57.0853 3864 monitor - ok
19:18:57.0893 3864 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\windows\system32\DRIVERS\mouclass.sys
19:18:57.0893 3864 mouclass - ok
19:18:58.0023 3864 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\windows\system32\DRIVERS\mouhid.sys
19:18:58.0023 3864 mouhid - ok
19:18:58.0083 3864 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\windows\system32\drivers\mountmgr.sys
19:18:58.0083 3864 mountmgr - ok
19:18:58.0203 3864 [ 8C7336950F1E69CDFD811CBBD9CF00A2 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
19:18:58.0223 3864 MozillaMaintenance - ok
19:18:58.0263 3864 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\windows\system32\drivers\mpio.sys
19:18:58.0263 3864 mpio - ok
19:18:58.0303 3864 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\windows\system32\drivers\mpsdrv.sys
19:18:58.0323 3864 mpsdrv - ok
19:18:58.0453 3864 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\windows\system32\mpssvc.dll
19:18:58.0463 3864 MpsSvc - ok
19:18:58.0463 3864 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\windows\system32\drivers\mrxdav.sys
19:18:58.0483 3864 MRxDAV - ok
19:18:58.0523 3864 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\windows\system32\DRIVERS\mrxsmb.sys
19:18:58.0523 3864 mrxsmb - ok
19:18:58.0613 3864 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\windows\system32\DRIVERS\mrxsmb10.sys
19:18:58.0623 3864 mrxsmb10 - ok
19:18:58.0653 3864 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\windows\system32\DRIVERS\mrxsmb20.sys
19:18:58.0653 3864 mrxsmb20 - ok
19:18:58.0693 3864 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\windows\system32\drivers\msahci.sys
19:18:58.0693 3864 msahci - ok
19:18:58.0703 3864 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\windows\system32\drivers\msdsm.sys
19:18:58.0703 3864 msdsm - ok
19:18:58.0783 3864 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\windows\System32\msdtc.exe
19:18:58.0793 3864 MSDTC - ok
19:18:58.0843 3864 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\windows\system32\drivers\Msfs.sys
19:18:58.0853 3864 Msfs - ok
19:18:58.0893 3864 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\windows\System32\drivers\mshidkmdf.sys
19:18:58.0903 3864 mshidkmdf - ok
19:18:58.0983 3864 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\windows\system32\drivers\msisadrv.sys
19:18:58.0983 3864 msisadrv - ok
19:18:59.0033 3864 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\windows\system32\iscsiexe.dll
19:18:59.0073 3864 MSiSCSI - ok
19:18:59.0083 3864 msiserver - ok
19:18:59.0203 3864 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\windows\system32\drivers\MSKSSRV.sys
19:18:59.0203 3864 MSKSSRV - ok
19:18:59.0243 3864 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\windows\system32\drivers\MSPCLOCK.sys
19:18:59.0243 3864 MSPCLOCK - ok
19:18:59.0313 3864 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\windows\system32\drivers\MSPQM.sys
19:18:59.0313 3864 MSPQM - ok
19:18:59.0373 3864 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\windows\system32\drivers\MsRPC.sys
19:18:59.0463 3864 MsRPC - ok
19:18:59.0503 3864 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\windows\system32\DRIVERS\mssmbios.sys
19:18:59.0503 3864 mssmbios - ok
19:18:59.0533 3864 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\windows\system32\drivers\MSTEE.sys
19:18:59.0543 3864 MSTEE - ok
19:18:59.0623 3864 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\windows\system32\drivers\MTConfig.sys
19:18:59.0623 3864 MTConfig - ok
19:18:59.0673 3864 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\windows\system32\Drivers\mup.sys
19:18:59.0673 3864 Mup - ok
19:18:59.0743 3864 [ F217D7718FD7577AF331E89910B2D21E ] MyWiFiDHCPDNS C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
19:18:59.0753 3864 MyWiFiDHCPDNS - ok
19:18:59.0813 3864 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\windows\system32\qagentRT.dll
19:18:59.0813 3864 napagent - ok
19:18:59.0953 3864 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\windows\system32\DRIVERS\nwifi.sys
19:18:59.0963 3864 NativeWifiP - ok
19:19:00.0233 3864 [ 9D1CCE440552500DED3A62F9D779CDB4 ] NAUpdate C:\Program Files (x86)\Nero\Update\NASvc.exe
19:19:00.0263 3864 NAUpdate - ok
19:19:00.0323 3864 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\windows\system32\drivers\ndis.sys
19:19:00.0343 3864 NDIS - ok
19:19:00.0453 3864 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\windows\system32\DRIVERS\ndiscap.sys
19:19:00.0473 3864 NdisCap - ok
19:19:00.0513 3864 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\windows\system32\DRIVERS\ndistapi.sys
19:19:00.0513 3864 NdisTapi - ok
19:19:00.0563 3864 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\windows\system32\DRIVERS\ndisuio.sys
19:19:00.0563 3864 Ndisuio - ok
19:19:00.0593 3864 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\windows\system32\DRIVERS\ndiswan.sys
19:19:00.0593 3864 NdisWan - ok
19:19:00.0673 3864 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\windows\system32\drivers\NDProxy.sys
19:19:00.0693 3864 NDProxy - ok
19:19:00.0773 3864 [ DC6530A291D4BDF6DF399F1F128E7F8F ] Net Driver HPZ12 C:\windows\system32\HPZinw12.dll
19:19:00.0893 3864 Net Driver HPZ12 - ok
19:19:00.0953 3864 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\windows\system32\DRIVERS\netbios.sys
19:19:00.0963 3864 NetBIOS - ok
19:19:01.0023 3864 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\windows\system32\DRIVERS\netbt.sys
19:19:01.0053 3864 NetBT - ok
19:19:01.0093 3864 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\windows\system32\lsass.exe
19:19:01.0093 3864 Netlogon - ok
19:19:01.0212 3864 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\windows\System32\netman.dll
19:19:01.0221 3864 Netman - ok
19:19:01.0254 3864 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:19:01.0278 3864 NetMsmqActivator - ok
19:19:01.0297 3864 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:19:01.0298 3864 NetPipeActivator - ok
19:19:01.0349 3864 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\windows\System32\netprofm.dll
19:19:01.0424 3864 netprofm - ok
19:19:01.0429 3864 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:19:01.0430 3864 NetTcpActivator - ok
19:19:01.0433 3864 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
19:19:01.0434 3864 NetTcpPortSharing - ok
19:19:01.0684 3864 [ 9FD1BE1881446D954FF77244AE58FBCB ] NETwNs64 C:\windows\system32\DRIVERS\NETwNs64.sys
19:19:01.0842 3864 NETwNs64 - ok
19:19:01.0952 3864 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\windows\system32\drivers\nfrd960.sys
19:19:01.0964 3864 nfrd960 - ok
19:19:02.0040 3864 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\windows\System32\nlasvc.dll
19:19:02.0062 3864 NlaSvc - ok
19:19:02.0145 3864 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\windows\system32\drivers\Npfs.sys
19:19:02.0153 3864 Npfs - ok
19:19:02.0203 3864 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\windows\system32\nsisvc.dll
19:19:02.0205 3864 nsi - ok
19:19:02.0221 3864 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\windows\system32\drivers\nsiproxy.sys
19:19:02.0223 3864 nsiproxy - ok
19:19:02.0350 3864 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\windows\system32\drivers\Ntfs.sys
19:19:02.0390 3864 Ntfs - ok
19:19:02.0425 3864 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\windows\system32\drivers\Null.sys
19:19:02.0426 3864 Null - ok
19:19:02.0438 3864 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\windows\system32\drivers\nvraid.sys
19:19:02.0441 3864 nvraid - ok
19:19:02.0523 3864 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\windows\system32\drivers\nvstor.sys
19:19:02.0528 3864 nvstor - ok
19:19:02.0555 3864 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\windows\system32\drivers\nv_agp.sys
19:19:02.0557 3864 nv_agp - ok
19:19:02.0570 3864 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\windows\system32\drivers\ohci1394.sys
19:19:02.0586 3864 ohci1394 - ok
19:19:02.0636 3864 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:19:02.0734 3864 ose - ok
19:19:02.0850 3864 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
19:19:02.0941 3864 osppsvc - ok
19:19:02.0972 3864 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\windows\system32\pnrpsvc.dll
19:19:02.0994 3864 p2pimsvc - ok
19:19:03.0020 3864 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\windows\system32\p2psvc.dll
19:19:03.0043 3864 p2psvc - ok
19:19:03.0072 3864 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\windows\system32\drivers\parport.sys
19:19:03.0075 3864 Parport - ok
19:19:03.0111 3864 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\windows\system32\drivers\partmgr.sys
19:19:03.0121 3864 partmgr - ok
19:19:03.0193 3864 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\windows\System32\pcasvc.dll
19:19:03.0198 3864 PcaSvc - ok
19:19:03.0264 3864 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\windows\system32\drivers\pci.sys
19:19:03.0267 3864 pci - ok
19:19:03.0278 3864 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\windows\system32\drivers\pciide.sys
19:19:03.0279 3864 pciide - ok
19:19:03.0293 3864 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\windows\system32\drivers\pcmcia.sys
19:19:03.0303 3864 pcmcia - ok
19:19:03.0313 3864 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\windows\system32\drivers\pcw.sys
19:19:03.0313 3864 pcw - ok
19:19:03.0353 3864 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\windows\system32\drivers\peauth.sys
19:19:03.0383 3864 PEAUTH - ok
19:19:03.0493 3864 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\windows\SysWow64\perfhost.exe
19:19:03.0503 3864 PerfHost - ok
19:19:03.0583 3864 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\windows\system32\pla.dll
19:19:03.0613 3864 pla - ok
19:19:03.0663 3864 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\windows\system32\umpnpmgr.dll
19:19:03.0663 3864 PlugPlay - ok
19:19:03.0783 3864 [ 71F62C51DFDFBC04C83C5C64B2B8058E ] Pml Driver HPZ12 C:\windows\system32\HPZipm12.dll
19:19:03.0793 3864 Pml Driver HPZ12 - ok
19:19:03.0823 3864 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\windows\system32\pnrpauto.dll
19:19:03.0823 3864 PNRPAutoReg - ok
19:19:03.0843 3864 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\windows\system32\pnrpsvc.dll
19:19:03.0843 3864 PNRPsvc - ok
19:19:03.0933 3864 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\windows\System32\ipsecsvc.dll
19:19:03.0933 3864 PolicyAgent - ok
19:19:03.0953 3864 [ A2CCA4FB273E6050F17A0A416CFF2FCD ] Power C:\windows\system32\umpo.dll
19:19:03.0953 3864 Power - ok
19:19:04.0003 3864 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\windows\system32\DRIVERS\raspptp.sys
19:19:04.0023 3864 PptpMiniport - ok
19:19:04.0053 3864 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\windows\system32\drivers\processr.sys
19:19:04.0053 3864 Processor - ok
19:19:04.0113 3864 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\windows\system32\profsvc.dll
19:19:04.0203 3864 ProfSvc - ok
19:19:04.0233 3864 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\windows\system32\lsass.exe
19:19:04.0233 3864 ProtectedStorage - ok
19:19:04.0273 3864 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\windows\system32\DRIVERS\pacer.sys
19:19:04.0273 3864 Psched - ok
19:19:04.0333 3864 [ 87B04878A6D59D6C79251DC960C674C1 ] PxHlpa64 C:\windows\system32\Drivers\PxHlpa64.sys
19:19:04.0403 3864 PxHlpa64 - ok
19:19:04.0453 3864 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\windows\system32\drivers\ql2300.sys
19:19:04.0473 3864 ql2300 - ok
19:19:04.0473 3864 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\windows\system32\drivers\ql40xx.sys
19:19:04.0473 3864 ql40xx - ok
19:19:04.0503 3864 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\windows\system32\qwave.dll
19:19:04.0503 3864 QWAVE - ok
19:19:04.0573 3864 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\windows\system32\drivers\qwavedrv.sys
19:19:04.0573 3864 QWAVEdrv - ok
19:19:04.0583 3864 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\windows\system32\DRIVERS\rasacd.sys
19:19:04.0583 3864 RasAcd - ok
19:19:04.0643 3864 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\windows\system32\DRIVERS\AgileVpn.sys
19:19:04.0643 3864 RasAgileVpn - ok
19:19:04.0653 3864 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\windows\System32\rasauto.dll
19:19:04.0653 3864 RasAuto - ok
19:19:04.0673 3864 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\windows\system32\DRIVERS\rasl2tp.sys
19:19:04.0673 3864 Rasl2tp - ok
19:19:04.0753 3864 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\windows\System32\rasmans.dll
19:19:04.0773 3864 RasMan - ok
19:19:04.0793 3864 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\windows\system32\DRIVERS\raspppoe.sys
19:19:04.0793 3864 RasPppoe - ok
19:19:04.0813 3864 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\windows\system32\DRIVERS\rassstp.sys
19:19:04.0823 3864 RasSstp - ok
19:19:04.0843 3864 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\windows\system32\DRIVERS\rdbss.sys
19:19:04.0853 3864 rdbss - ok
19:19:04.0943 3864 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\windows\system32\drivers\rdpbus.sys
19:19:04.0954 3864 rdpbus - ok
19:19:04.0994 3864 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\windows\system32\DRIVERS\RDPCDD.sys
19:19:04.0994 3864 RDPCDD - ok
19:19:05.0024 3864 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\windows\system32\drivers\rdpencdd.sys
19:19:05.0034 3864 RDPENCDD - ok
19:19:05.0064 3864 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\windows\system32\drivers\rdprefmp.sys
19:19:05.0064 3864 RDPREFMP - ok
19:19:05.0114 3864 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\windows\system32\drivers\RDPWD.sys
19:19:05.0194 3864 RDPWD - ok
19:19:05.0284 3864 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\windows\system32\drivers\rdyboost.sys
19:19:05.0294 3864 rdyboost - ok
19:19:05.0454 3864 [ B9A0810D16EA7935B10A5499ABA61DC3 ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
19:19:05.0484 3864 RegSrvc - ok
19:19:05.0504 3864 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\windows\System32\mprdim.dll
19:19:05.0514 3864 RemoteAccess - ok
19:19:05.0564 3864 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\windows\system32\regsvc.dll
19:19:05.0564 3864 RemoteRegistry - ok
19:19:05.0684 3864 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\windows\system32\DRIVERS\rfcomm.sys
19:19:05.0694 3864 RFCOMM - ok
19:19:05.0984 3864 [ 3C957189B31C34D3AD21967B12B6AED7 ] RoxMediaDB12OEM c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
19:19:06.0094 3864 RoxMediaDB12OEM - ok
19:19:06.0154 3864 [ 2B73088CC2CA757A172B425C9398E5BC ] RoxWatch12 c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
19:19:06.0164 3864 RoxWatch12 - ok
19:19:06.0214 3864 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\windows\System32\RpcEpMap.dll
19:19:06.0224 3864 RpcEptMapper - ok
19:19:06.0314 3864 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\windows\system32\locator.exe
19:19:06.0314 3864 RpcLocator - ok
19:19:06.0344 3864 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\windows\system32\rpcss.dll
19:19:06.0354 3864 RpcSs - ok
19:19:06.0434 3864 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\windows\system32\DRIVERS\rspndr.sys
19:19:06.0434 3864 rspndr - ok
19:19:06.0524 3864 [ BE29B0A3AC1E8BD02FFAB8CEE86BADFA ] RSUSBSTOR C:\windows\system32\Drivers\RtsUStor.sys
19:19:06.0574 3864 RSUSBSTOR - ok
19:19:06.0694 3864 [ EE082E06A82FF630351D1E0EBBD3D8D0 ] RTL8167 C:\windows\system32\DRIVERS\Rt64win7.sys
19:19:06.0734 3864 RTL8167 - ok
19:19:06.0784 3864 [ 5E75CA03513BF7563F9A6AFCBDC47AC2 ] sajpwgms C:\windows\system32\drivers\sajpwgms.sys
19:19:06.0914 3864 sajpwgms - ok
19:19:06.0944 3864 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\windows\system32\lsass.exe
19:19:06.0954 3864 SamSs - ok
19:19:06.0984 3864 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\windows\system32\drivers\sbp2port.sys
19:19:06.0994 3864 sbp2port - ok
19:19:07.0154 3864 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
19:19:07.0184 3864 SBSDWSCService - ok
19:19:07.0324 3864 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\windows\System32\SCardSvr.dll
19:19:07.0364 3864 SCardSvr - ok
19:19:07.0404 3864 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\windows\system32\DRIVERS\scfilter.sys
19:19:07.0414 3864 scfilter - ok
19:19:07.0514 3864 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\windows\system32\schedsvc.dll
19:19:07.0544 3864 Schedule - ok
19:19:07.0584 3864 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\windows\System32\certprop.dll
19:19:07.0584 3864 SCPolicySvc - ok
19:19:07.0724 3864 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\windows\System32\SDRSVC.dll
19:19:07.0754 3864 SDRSVC - ok
19:19:07.0814 3864 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\windows\system32\drivers\secdrv.sys
19:19:07.0814 3864 secdrv - ok
19:19:07.0894 3864 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\windows\system32\seclogon.dll
19:19:07.0894 3864 seclogon - ok
19:19:07.0914 3864 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\windows\System32\sens.dll
19:19:07.0924 3864 SENS - ok
19:19:07.0974 3864 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\windows\system32\sensrsvc.dll
19:19:08.0094 3864 SensrSvc - ok
19:19:08.0124 3864 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\windows\system32\drivers\serenum.sys
19:19:08.0124 3864 Serenum - ok
19:19:08.0154 3864 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\windows\system32\drivers\serial.sys
19:19:08.0154 3864 Serial - ok
19:19:08.0154 3864 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\windows\system32\drivers\sermouse.sys
19:19:08.0164 3864 sermouse - ok
19:19:08.0224 3864 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\windows\system32\sessenv.dll
19:19:08.0224 3864 SessionEnv - ok
19:19:08.0234 3864 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\windows\system32\drivers\sffdisk.sys
19:19:08.0234 3864 sffdisk - ok
19:19:08.0244 3864 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\windows\system32\drivers\sffp_mmc.sys
19:19:08.0244 3864 sffp_mmc - ok
19:19:08.0254 3864 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\windows\system32\drivers\sffp_sd.sys
19:19:08.0264 3864 sffp_sd - ok
19:19:08.0284 3864 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\windows\system32\drivers\sfloppy.sys
19:19:08.0294 3864 sfloppy - ok
19:19:08.0374 3864 [ C6CC9297BD53E5229653303E556AA539 ] Sftfs C:\windows\system32\DRIVERS\Sftfslh.sys
19:19:08.0404 3864 Sftfs - ok
19:19:08.0504 3864 [ 13693B6354DD6E72DC5131DA7D764B90 ] sftlist C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
19:19:08.0524 3864 sftlist - ok
19:19:08.0584 3864 [ 390AA7BC52CEE43F6790CDEA1E776703 ] Sftplay C:\windows\system32\DRIVERS\Sftplaylh.sys
19:19:08.0584 3864 Sftplay - ok
19:19:08.0594 3864 [ 617E29A0B0A2807466560D4C4E338D3E ] Sftredir C:\windows\system32\DRIVERS\Sftredirlh.sys
19:19:08.0604 3864 Sftredir - ok
19:19:08.0634 3864 [ 8F571F016FA1976F445147E9E6C8AE9B ] Sftvol C:\windows\system32\DRIVERS\Sftvollh.sys
19:19:08.0654 3864 Sftvol - ok
19:19:08.0674 3864 [ C3CDDD18F43D44AB713CF8C4916F7696 ] sftvsa C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
19:19:08.0674 3864 sftvsa - ok
19:19:08.0714 3864 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\windows\System32\ipnathlp.dll
19:19:08.0714 3864 SharedAccess - ok
19:19:08.0814 3864 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\windows\System32\shsvcs.dll
19:19:08.0834 3864 ShellHWDetection - ok
19:19:08.0874 3864 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\windows\system32\drivers\SiSRaid2.sys
19:19:08.0874 3864 SiSRaid2 - ok
19:19:08.0904 3864 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\windows\system32\drivers\sisraid4.sys
19:19:08.0904 3864 SiSRaid4 - ok
19:19:09.0025 3864 [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
19:19:09.0035 3864 SkypeUpdate - ok
19:19:09.0065 3864 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\windows\system32\DRIVERS\smb.sys
19:19:09.0065 3864 Smb - ok
19:19:09.0145 3864 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\windows\System32\snmptrap.exe
19:19:09.0205 3864 SNMPTRAP - ok
19:19:09.0345 3864 [ F9369327409492097B0BB7CE86BD29DE ] Soluto C:\windows\system32\DRIVERS\Soluto.sys
19:19:09.0355 3864 Soluto - ok
19:19:09.0505 3864 [ 19F515739CB06A999098AD3CF2E3C65B ] SolutoService C:\Program Files\Soluto\SolutoService.exe
19:19:09.0515 3864 SolutoService - ok
19:19:09.0535 3864 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\windows\system32\drivers\spldr.sys
19:19:09.0555 3864 spldr - ok
19:19:09.0585 3864 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\windows\System32\spoolsv.exe
19:19:09.0585 3864 Spooler - ok
19:19:09.0655 3864 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\windows\system32\sppsvc.exe
19:19:09.0735 3864 sppsvc - ok
19:19:09.0755 3864 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\windows\system32\sppuinotify.dll
19:19:09.0765 3864 sppuinotify - ok
19:19:09.0795 3864 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\windows\system32\DRIVERS\srv.sys
19:19:09.0815 3864 srv - ok
19:19:09.0895 3864 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\windows\system32\DRIVERS\srv2.sys
19:19:09.0905 3864 srv2 - ok
19:19:09.0915 3864 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\windows\system32\DRIVERS\srvnet.sys
19:19:09.0925 3864 srvnet - ok
19:19:09.0975 3864 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\windows\System32\ssdpsrv.dll
19:19:09.0975 3864 SSDPSRV - ok
19:19:10.0065 3864 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\windows\system32\sstpsvc.dll
19:19:10.0075 3864 SstpSvc - ok
19:19:10.0275 3864 [ B2D8B364A831427A5741F6C408FA8AE3 ] STacSV C:\Program Files\IDT\WDM\STacSV64.exe
19:19:10.0305 3864 STacSV - ok
19:19:10.0345 3864 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\windows\system32\drivers\stexstor.sys
19:19:10.0355 3864 stexstor - ok
19:19:10.0455 3864 [ EF5ACDE92BA3F691BBFEF781CB063501 ] STHDA C:\windows\system32\DRIVERS\stwrt64.sys
19:19:10.0455 3864 STHDA - ok
19:19:10.0525 3864 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\windows\System32\wiaservc.dll
19:19:10.0565 3864 stisvc - ok
19:19:10.0615 3864 [ 7731F46EC0D687A931CBA063E8F90EF0 ] stllssvr c:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
19:19:10.0625 3864 stllssvr - ok
19:19:10.0725 3864 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\windows\system32\DRIVERS\swenum.sys
19:19:10.0735 3864 swenum - ok
19:19:10.0785 3864 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\windows\System32\swprv.dll
19:19:10.0795 3864 swprv - ok
19:19:10.0855 3864 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\windows\system32\sysmain.dll
19:19:10.0885 3864 SysMain - ok
19:19:10.0915 3864 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\windows\System32\TabSvc.dll
19:19:10.0915 3864 TabletInputService - ok
19:19:11.0005 3864 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\windows\System32\tapisrv.dll
19:19:11.0025 3864 TapiSrv - ok
19:19:11.0045 3864 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\windows\System32\tbssvc.dll
19:19:11.0055 3864 TBS - ok
19:19:11.0175 3864 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\windows\system32\drivers\tcpip.sys
19:19:11.0265 3864 Tcpip - ok
19:19:11.0325 3864 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\windows\system32\DRIVERS\tcpip.sys
19:19:11.0325 3864 TCPIP6 - ok
19:19:11.0365 3864 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\windows\system32\drivers\tcpipreg.sys
19:19:11.0385 3864 tcpipreg - ok
19:19:11.0405 3864 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\windows\system32\drivers\tdpipe.sys
19:19:11.0405 3864 TDPIPE - ok
19:19:11.0495 3864 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\windows\system32\drivers\tdtcp.sys
19:19:11.0495 3864 TDTCP - ok
19:19:11.0545 3864 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\windows\system32\DRIVERS\tdx.sys
19:19:11.0545 3864 tdx - ok
19:19:11.0555 3864 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\windows\system32\DRIVERS\termdd.sys
19:19:11.0565 3864 TermDD - ok
19:19:11.0595 3864 [ 2E648163254233755035B46DD7B89123 ] TermService C:\windows\System32\termsrv.dll
19:19:11.0605 3864 TermService - ok
19:19:11.0675 3864 [ F0344071948D1A1FA732231785A0664C ] Themes C:\windows\system32\themeservice.dll
19:19:11.0675 3864 Themes - ok
19:19:11.0695 3864 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\windows\system32\mmcss.dll
19:19:11.0695 3864 THREADORDER - ok
19:19:11.0755 3864 [ 68FE3D89829E27D4FD5EEA7BD2C41985 ] tihub3 C:\windows\system32\DRIVERS\tihub3.sys
19:19:11.0755 3864 tihub3 - ok
19:19:11.0795 3864 [ 0102C9633CE1F18A6AC021F28B734DB5 ] tixhci C:\windows\system32\DRIVERS\tixhci.sys
19:19:11.0815 3864 tixhci - ok
19:19:11.0875 3864 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\windows\System32\trkwks.dll
19:19:11.0895 3864 TrkWks - ok
19:19:12.0005 3864 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
19:19:12.0035 3864 TrustedInstaller - ok
19:19:12.0045 3864 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\windows\system32\DRIVERS\tssecsrv.sys
19:19:12.0055 3864 tssecsrv - ok
19:19:12.0105 3864 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\windows\system32\drivers\tsusbflt.sys
19:19:12.0105 3864 TsUsbFlt - ok
19:19:12.0175 3864 [ 9CC2CCAE8A84820EAECB886D477CBCB8 ] TsUsbGD C:\windows\system32\drivers\TsUsbGD.sys
19:19:12.0185 3864 TsUsbGD - ok
19:19:12.0245 3864 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\windows\system32\DRIVERS\tunnel.sys
19:19:12.0245 3864 tunnel - ok
19:19:12.0315 3864 [ FD24F98D2898BE093FE926604BE7DB99 ] TurboB C:\windows\system32\DRIVERS\TurboB.sys
19:19:12.0405 3864 TurboB - ok
19:19:12.0455 3864 [ 600B406A04D90F577FEA8A88D7379F08 ] TurboBoost C:\Program Files\Intel\TurboBoost\TurboBoost.exe
19:19:12.0455 3864 TurboBoost - ok
19:19:12.0485 3864 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\windows\system32\drivers\uagp35.sys
19:19:12.0485 3864 uagp35 - ok
19:19:12.0525 3864 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\windows\system32\DRIVERS\udfs.sys
19:19:12.0525 3864 udfs - ok
19:19:12.0605 3864 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\windows\system32\UI0Detect.exe
19:19:12.0605 3864 UI0Detect - ok
19:19:12.0635 3864 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\windows\system32\drivers\uliagpkx.sys
19:19:12.0635 3864 uliagpkx - ok
19:19:12.0675 3864 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\windows\system32\DRIVERS\umbus.sys
19:19:12.0695 3864 umbus - ok
19:19:12.0695 3864 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\windows\system32\drivers\umpass.sys
19:19:12.0705 3864 UmPass - ok
19:19:12.0925 3864 [ EB79C6C91A99930015EF29AE7FA802D1 ] UNS C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
19:19:13.0005 3864 UNS - ok
19:19:13.0035 3864 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\windows\System32\upnphost.dll
19:19:13.0035 3864 upnphost - ok
19:19:13.0145 3864 [ AF1B9474D67897D0C2CFF58E0ACEACCC ] USBAAPL64 C:\windows\system32\Drivers\usbaapl64.sys
19:19:13.0155 3864 USBAAPL64 - ok
19:19:13.0225 3864 [ 19AD7990C0B67E48DAC5B26F99628223 ] usbccgp C:\windows\system32\DRIVERS\usbccgp.sys
19:19:13.0225 3864 usbccgp - ok
19:19:13.0275 3864 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\windows\system32\drivers\usbcir.sys
19:19:13.0275 3864 usbcir - ok
19:19:13.0345 3864 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\windows\system32\DRIVERS\usbehci.sys
19:19:13.0345 3864 usbehci - ok
19:19:13.0415 3864 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\windows\system32\DRIVERS\usbhub.sys
19:19:13.0435 3864 usbhub - ok
19:19:13.0455 3864 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\windows\system32\drivers\usbohci.sys
19:19:13.0465 3864 usbohci - ok
19:19:13.0475 3864 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\windows\system32\DRIVERS\usbprint.sys
19:19:13.0485 3864 usbprint - ok
19:19:13.0515 3864 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\windows\system32\DRIVERS\usbscan.sys
19:19:13.0535 3864 usbscan - ok
19:19:13.0625 3864 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\windows\system32\DRIVERS\USBSTOR.SYS
19:19:13.0625 3864 USBSTOR - ok
19:19:13.0635 3864 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\windows\system32\drivers\usbuhci.sys
19:19:13.0635 3864 usbuhci - ok
19:19:13.0655 3864 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\windows\system32\Drivers\usbvideo.sys
19:19:13.0665 3864 usbvideo - ok
19:19:13.0695 3864 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\windows\System32\uxsms.dll
19:19:13.0705 3864 UxSms - ok
19:19:13.0725 3864 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\windows\system32\lsass.exe
19:19:13.0725 3864 VaultSvc - ok
19:19:13.0825 3864 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\windows\system32\drivers\vdrvroot.sys
19:19:13.0825 3864 vdrvroot - ok
19:19:13.0855 3864 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\windows\System32\vds.exe
19:19:13.0875 3864 vds - ok
19:19:13.0905 3864 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\windows\system32\DRIVERS\vgapnp.sys
19:19:13.0905 3864 vga - ok
19:19:13.0915 3864 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\windows\System32\drivers\vga.sys
19:19:13.0925 3864 VgaSave - ok
19:19:13.0925 3864 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\windows\system32\drivers\vhdmp.sys
19:19:13.0925 3864 vhdmp - ok
19:19:14.0006 3864 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\windows\system32\drivers\viaide.sys
19:19:14.0016 3864 viaide - ok
19:19:14.0026 3864 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\windows\system32\drivers\volmgr.sys
19:19:14.0026 3864 volmgr - ok
19:19:14.0056 3864 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\windows\system32\drivers\volmgrx.sys
19:19:14.0066 3864 volmgrx - ok
19:19:14.0096 3864 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\windows\system32\drivers\volsnap.sys
19:19:14.0186 3864 volsnap - ok
19:19:14.0236 3864 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\windows\system32\drivers\vsmraid.sys
19:19:14.0246 3864 vsmraid - ok
19:19:14.0286 3864 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\windows\system32\vssvc.exe
19:19:14.0296 3864 VSS - ok
19:19:14.0396 3864 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\windows\system32\DRIVERS\vwifibus.sys
19:19:14.0406 3864 vwifibus - ok
19:19:14.0466 3864 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\windows\system32\DRIVERS\vwififlt.sys
19:19:14.0466 3864 vwififlt - ok
19:19:14.0486 3864 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\windows\system32\DRIVERS\vwifimp.sys
19:19:14.0486 3864 vwifimp - ok
19:19:14.0516 3864 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\windows\system32\w32time.dll
19:19:14.0536 3864 W32Time - ok
19:19:14.0546 3864 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\windows\system32\drivers\wacompen.sys
19:19:14.0546 3864 WacomPen - ok
19:19:14.0596 3864 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\windows\system32\DRIVERS\wanarp.sys
19:19:14.0596 3864 WANARP - ok
19:19:14.0606 3864 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\windows\system32\DRIVERS\wanarp.sys
19:19:14.0606 3864 Wanarpv6 - ok
19:19:14.0776 3864 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\windows\system32\Wat\WatAdminSvc.exe
19:19:14.0826 3864 WatAdminSvc - ok
19:19:14.0876 3864 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\windows\system32\wbengine.exe
19:19:14.0896 3864 wbengine - ok
19:19:14.0916 3864 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\windows\System32\wbiosrvc.dll
19:19:14.0916 3864 WbioSrvc - ok
19:19:15.0006 3864 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\windows\System32\wcncsvc.dll
19:19:15.0036 3864 wcncsvc - ok
19:19:15.0066 3864 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
19:19:15.0076 3864 WcsPlugInService - ok
19:19:15.0186 3864 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\windows\system32\drivers\wd.sys
19:19:15.0186 3864 Wd - ok
19:19:15.0246 3864 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\windows\system32\drivers\Wdf01000.sys
19:19:15.0266 3864 Wdf01000 - ok
19:19:15.0276 3864 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\windows\system32\wdi.dll
19:19:15.0286 3864 WdiServiceHost - ok
19:19:15.0286 3864 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\windows\system32\wdi.dll
19:19:15.0286 3864 WdiSystemHost - ok
19:19:15.0316 3864 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\windows\System32\webclnt.dll
19:19:15.0326 3864 WebClient - ok
19:19:15.0346 3864 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\windows\system32\wecsvc.dll
19:19:15.0346 3864 Wecsvc - ok
19:19:15.0376 3864 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\windows\System32\wercplsupport.dll
19:19:15.0376 3864 wercplsupport - ok
19:19:15.0426 3864 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\windows\System32\WerSvc.dll
19:19:15.0426 3864 WerSvc - ok
19:19:15.0536 3864 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\windows\system32\DRIVERS\wfplwf.sys
19:19:15.0546 3864 WfpLwf - ok
19:19:15.0596 3864 [ B14EF15BD757FA488F9C970EEE9C0D35 ] WimFltr C:\windows\system32\DRIVERS\wimfltr.sys
19:19:15.0606 3864 WimFltr - ok
19:19:15.0626 3864 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\windows\system32\drivers\wimmount.sys
19:19:15.0636 3864 WIMMount - ok
19:19:15.0656 3864 WinDefend - ok
19:19:15.0666 3864 WinHttpAutoProxySvc - ok
19:19:15.0836 3864 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\windows\system32\wbem\WMIsvc.dll
19:19:15.0856 3864 Winmgmt - ok
19:19:15.0926 3864 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\windows\system32\WsmSvc.dll
19:19:15.0946 3864 WinRM - ok
19:19:16.0006 3864 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\windows\system32\DRIVERS\WinUsb.sys
19:19:16.0006 3864 WinUsb - ok
19:19:16.0056 3864 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\windows\System32\wlansvc.dll
19:19:16.0066 3864 Wlansvc - ok
19:19:16.0126 3864 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
19:19:16.0146 3864 wlcrasvc - ok
19:19:16.0306 3864 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
19:19:16.0346 3864 wlidsvc - ok
19:19:16.0386 3864 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\windows\system32\DRIVERS\wmiacpi.sys
19:19:16.0396 3864 WmiAcpi - ok
19:19:16.0426 3864 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\windows\system32\wbem\WmiApSrv.exe
19:19:16.0436 3864 wmiApSrv - ok
19:19:16.0536 3864 WMPNetworkSvc - ok
19:19:16.0556 3864 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\windows\System32\wpcsvc.dll
19:19:16.0566 3864 WPCSvc - ok
19:19:16.0586 3864 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\windows\system32\wpdbusenum.dll
19:19:16.0596 3864 WPDBusEnum - ok
19:19:16.0676 3864 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\windows\system32\drivers\ws2ifsl.sys
19:19:16.0676 3864 ws2ifsl - ok
19:19:16.0706 3864 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\windows\system32\wscsvc.dll
19:19:16.0716 3864 wscsvc - ok
19:19:16.0726 3864 WSearch - ok
19:19:16.0956 3864 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\windows\system32\wuaueng.dll
19:19:17.0006 3864 wuauserv - ok
19:19:17.0026 3864 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\windows\system32\drivers\WudfPf.sys
19:19:17.0036 3864 WudfPf - ok
19:19:17.0096 3864 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\windows\system32\DRIVERS\WUDFRd.sys
19:19:17.0096 3864 WUDFRd - ok
19:19:17.0186 3864 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\windows\System32\WUDFSvc.dll
19:19:17.0206 3864 wudfsvc - ok
19:19:17.0246 3864 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\windows\System32\wwansvc.dll
19:19:17.0256 3864 WwanSvc - ok
19:19:17.0326 3864 ================ Scan global ===============================
19:19:17.0366 3864 [ BA0CD8C393E8C9F83354106093832C7B ] C:\windows\system32\basesrv.dll
19:19:17.0486 3864 [ 72CC564BBC70DE268784BCE91EB8A28F ] C:\windows\system32\winsrv.dll
19:19:17.0536 3864 [ 72CC564BBC70DE268784BCE91EB8A28F ] C:\windows\system32\winsrv.dll
19:19:17.0606 3864 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\windows\system32\sxssrv.dll
19:19:17.0746 3864 [ 50BEA589F7D7958BDD2528A8F69D05CC ] C:\windows\system32\services.exe
19:19:17.0766 3864 Suspicious file (NoAccess): C:\windows\system32\services.exe. md5: 50BEA589F7D7958BDD2528A8F69D05CC
19:19:17.0766 3864 C:\windows\system32\services.exe ( Virus.Win64.ZAccess.a ) - infected
19:19:17.0766 3864 C:\windows\system32\services.exe - detected Virus.Win64.ZAccess.a (0)
19:19:17.0766 3864 ================ Scan MBR ==================================
19:19:17.0796 3864 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
19:19:18.0086 3864 \Device\Harddisk0\DR0 - ok
19:19:18.0086 3864 ================ Scan VBR ==================================
19:19:18.0096 3864 [ B4A651EA79A9998884DA67ECFFB5E2E7 ] \Device\Harddisk0\DR0\Partition1
19:19:18.0096 3864 \Device\Harddisk0\DR0\Partition1 - ok
19:19:18.0106 3864 [ 9353CF31A6EC515E78353D1600509A2F ] \Device\Harddisk0\DR0\Partition2
19:19:18.0106 3864 \Device\Harddisk0\DR0\Partition2 - ok
19:19:18.0106 3864 ============================================================
19:19:18.0106 3864 Scan finished
19:19:18.0106 3864 ============================================================
19:19:18.0116 1960 Detected object count: 1
19:19:18.0116 1960 Actual detected object count: 1
19:19:23.0117 1960 C:\windows\system32\services.exe ( Virus.Win64.ZAccess.a ) - skipped by user
19:19:23.0117 1960 C:\windows\system32\services.exe ( Virus.Win64.ZAccess.a ) - User select action: Skip
Meeko
Also - thank you very much for guiding me through this process.
patndoris
You have a particularly difficult infection known as Zero Access which affects each machine a little differently.
You will need to also be patient with me, as we will likely need to run several different tools to fully remove this. Some machines are rather easily cleared, while others are never fully recovered.
Based on the TDSSKiller and DDS logs, I do think it's safe to run Combofix on this machine so let's go ahead with that.
Please right click and delete the copy of Combofix from your desktop and download a fresh copy since it is updated almost daily.
Download and Install Combofix
Download ComboFix from one of the following locations:
Link 1
Link 2
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Notes:
1. 1. Do not mouse-click anywhere on the screen while it is running. That may cause it to stall. In fact, I suggest you do not do anything else on the computer while Combofix is running as it can cause it to stall. It may appear at times that it isn't doing anything but it is. Just let it run. It may also reboot the machine as a part of what it is doing and that is not unusual. (If your computer requires a login then you WILL need to fill in the login/password for it to continue. If your computer does not have a login then it will continue on it's own..) Then, just sit tight until it finishes. Sometimes it takes 10 minutes, sometimes it takes an hour. Just be patient until the log pops up. If it takes more than an hour and doesn't appear to be doing anything, you can stop it and come back and let me know.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now
If you have a problem launching programs after running Combofix, please do not panic! Simply reboot the computer and all should be fine.
And you are very welcome for the help. That's what we are here for
You will need to also be patient with me, as we will likely need to run several different tools to fully remove this. Some machines are rather easily cleared, while others are never fully recovered.
Based on the TDSSKiller and DDS logs, I do think it's safe to run Combofix on this machine so let's go ahead with that.
Please right click and delete the copy of Combofix from your desktop and download a fresh copy since it is updated almost daily.
Download and Install Combofix
Download ComboFix from one of the following locations:
Link 1
Link 2
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
- Double click on ComboFix.exe & follow the prompts.
When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Notes:
1. 1. Do not mouse-click anywhere on the screen while it is running. That may cause it to stall. In fact, I suggest you do not do anything else on the computer while Combofix is running as it can cause it to stall. It may appear at times that it isn't doing anything but it is. Just let it run. It may also reboot the machine as a part of what it is doing and that is not unusual. (If your computer requires a login then you WILL need to fill in the login/password for it to continue. If your computer does not have a login then it will continue on it's own..) Then, just sit tight until it finishes. Sometimes it takes 10 minutes, sometimes it takes an hour. Just be patient until the log pops up. If it takes more than an hour and doesn't appear to be doing anything, you can stop it and come back and let me know.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now
If you have a problem launching programs after running Combofix, please do not panic! Simply reboot the computer and all should be fine.
And you are very welcome for the help. That's what we are here for
Meeko
I apologize for the lack of response. My dad decided to take my computer to a family friend to wipe it, without my knowledge. So I think it may be clean now, but it's really slow at start up, slower than when I had the virus.
patndoris
Depending on whether the person just re-installed/repaired Windows, or actually reformatted the hard drive might explain why the system is still not performing as you expect.
Can you please perform the TDSSKiller w/skip (do NOT try to cure anything it might find) instructions again for me and post the results? That will tell me if the infection is still present on your machine or not.
Meeko
It seems as if TDSSkiller is not picking up on any virus.
TDSSkiller log:
17:56:20.0137 9352 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
17:56:20.0989 9352 ============================================================
17:56:20.0989 9352 Current date / time: 2012/12/21 17:56:20.0989
17:56:20.0989 9352 SystemInfo:
17:56:20.0989 9352
17:56:20.0989 9352 OS Version: 6.1.7601 ServicePack: 1.0
17:56:20.0989 9352 Product type: Workstation
17:56:20.0989 9352 ComputerName: ANGEL-20121219
17:56:20.0990 9352 UserName: Angel
17:56:20.0990 9352 Windows directory: C:\windows
17:56:20.0990 9352 System windows directory: C:\windows
17:56:20.0990 9352 Running under WOW64
17:56:20.0990 9352 Processor architecture: Intel x64
17:56:20.0990 9352 Number of processors: 4
17:56:20.0990 9352 Page size: 0x1000
17:56:20.0990 9352 Boot type: Normal boot
17:56:20.0990 9352 ============================================================
17:56:21.0767 9352 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
17:56:21.0785 9352 ============================================================
17:56:21.0785 9352 \Device\Harddisk0\DR0:
17:56:21.0786 9352 MBR partitions:
17:56:21.0786 9352 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x1D4C000
17:56:21.0786 9352 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1D7E800, BlocksNum 0x38607030
17:56:21.0786 9352 ============================================================
17:56:21.0849 9352 C: <-> \Device\Harddisk0\DR0\Partition2
17:56:21.0849 9352 ============================================================
17:56:21.0850 9352 Initialize success
17:56:21.0850 9352 ============================================================
17:56:25.0683 9428 ============================================================
17:56:25.0683 9428 Scan started
17:56:25.0683 9428 Mode: Manual;
17:56:25.0683 9428 ============================================================
17:56:25.0970 9428 ================ Scan system memory ========================
17:56:25.0970 9428 System memory - ok
17:56:25.0971 9428 ================ Scan services =============================
17:56:26.0608 9428 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\windows\system32\drivers\1394ohci.sys
17:56:26.0610 9428 1394ohci - ok
17:56:26.0715 9428 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\windows\system32\drivers\ACPI.sys
17:56:26.0729 9428 ACPI - ok
17:56:26.0758 9428 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\windows\system32\drivers\acpipmi.sys
17:56:26.0758 9428 AcpiPmi - ok
17:56:26.0921 9428 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
17:56:26.0922 9428 AdobeARMservice - ok
17:56:26.0971 9428 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\windows\system32\drivers\adp94xx.sys
17:56:26.0974 9428 adp94xx - ok
17:56:27.0054 9428 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\windows\system32\drivers\adpahci.sys
17:56:27.0058 9428 adpahci - ok
17:56:27.0066 9428 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\windows\system32\drivers\adpu320.sys
17:56:27.0072 9428 adpu320 - ok
17:56:27.0104 9428 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\windows\System32\aelupsvc.dll
17:56:27.0109 9428 AeLookupSvc - ok
17:56:27.0278 9428 [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters C:\Program Files\IDT\WDM\AESTSr64.exe
17:56:27.0279 9428 AESTFilters - ok
17:56:27.0332 9428 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\windows\system32\drivers\afd.sys
17:56:27.0340 9428 AFD - ok
17:56:27.0364 9428 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\windows\system32\drivers\agp440.sys
17:56:27.0365 9428 agp440 - ok
17:56:27.0447 9428 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\windows\System32\alg.exe
17:56:27.0456 9428 ALG - ok
17:56:27.0497 9428 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\windows\system32\drivers\aliide.sys
17:56:27.0498 9428 aliide - ok
17:56:27.0501 9428 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\windows\system32\drivers\amdide.sys
17:56:27.0501 9428 amdide - ok
17:56:27.0509 9428 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\windows\system32\drivers\amdk8.sys
17:56:27.0510 9428 AmdK8 - ok
17:56:27.0516 9428 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\windows\system32\drivers\amdppm.sys
17:56:27.0516 9428 AmdPPM - ok
17:56:27.0545 9428 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\windows\system32\drivers\amdsata.sys
17:56:27.0568 9428 amdsata - ok
17:56:27.0592 9428 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\windows\system32\drivers\amdsbs.sys
17:56:27.0593 9428 amdsbs - ok
17:56:27.0598 9428 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\windows\system32\drivers\amdxata.sys
17:56:27.0604 9428 amdxata - ok
17:56:27.0712 9428 [ 3BC90482A834F998C3B7A9C934A20342 ] AMPPAL C:\windows\system32\DRIVERS\AMPPAL.sys
17:56:27.0718 9428 AMPPAL - ok
17:56:27.0723 9428 [ 3BC90482A834F998C3B7A9C934A20342 ] AMPPALP C:\windows\system32\DRIVERS\amppal.sys
17:56:27.0725 9428 AMPPALP - ok
17:56:27.0783 9428 [ A47D7FEBD9381D34DDB4FF38B15A67FE ] AMPPALR3 C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
17:56:27.0794 9428 AMPPALR3 - ok
17:56:27.0915 9428 [ 24ED0EB2B2558970176ECEE680F8F806 ] ApfiltrService C:\windows\system32\DRIVERS\Apfiltr.sys
17:56:27.0922 9428 ApfiltrService - ok
17:56:27.0947 9428 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\windows\system32\drivers\appid.sys
17:56:27.0948 9428 AppID - ok
17:56:27.0973 9428 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\windows\System32\appidsvc.dll
17:56:27.0979 9428 AppIDSvc - ok
17:56:27.0983 9428 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\windows\System32\appinfo.dll
17:56:27.0988 9428 Appinfo - ok
17:56:28.0152 9428 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
17:56:28.0164 9428 Apple Mobile Device - ok
17:56:28.0167 9428 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\windows\system32\drivers\arc.sys
17:56:28.0168 9428 arc - ok
17:56:28.0219 9428 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\windows\system32\drivers\arcsas.sys
17:56:28.0221 9428 arcsas - ok
17:56:28.0607 9428 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
17:56:28.0608 9428 aspnet_state - ok
17:56:28.0627 9428 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\windows\system32\DRIVERS\asyncmac.sys
17:56:28.0628 9428 AsyncMac - ok
17:56:28.0646 9428 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\windows\system32\drivers\atapi.sys
17:56:28.0657 9428 atapi - ok
17:56:28.0733 9428 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll
17:56:28.0741 9428 AudioEndpointBuilder - ok
17:56:28.0751 9428 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\windows\System32\Audiosrv.dll
17:56:28.0755 9428 AudioSrv - ok
17:56:28.0791 9428 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\windows\System32\AxInstSV.dll
17:56:28.0796 9428 AxInstSV - ok
17:56:28.0837 9428 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\windows\system32\drivers\bxvbda.sys
17:56:28.0840 9428 b06bdrv - ok
17:56:28.0879 9428 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\windows\system32\DRIVERS\b57nd60a.sys
17:56:28.0880 9428 b57nd60a - ok
17:56:28.0916 9428 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\windows\System32\bdesvc.dll
17:56:28.0921 9428 BDESVC - ok
17:56:28.0993 9428 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\windows\system32\drivers\Beep.sys
17:56:29.0008 9428 Beep - ok
17:56:29.0075 9428 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\windows\System32\bfe.dll
17:56:29.0083 9428 BFE - ok
17:56:29.0127 9428 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\windows\System32\qmgr.dll
17:56:29.0137 9428 BITS - ok
17:56:29.0149 9428 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\windows\system32\DRIVERS\blbdrive.sys
17:56:29.0155 9428 blbdrive - ok
17:56:29.0242 9428 [ 5FF7B9916A10E8E69E7C0D16F0B4787A ] Bluetooth Device Monitor C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
17:56:29.0262 9428 Bluetooth Device Monitor - ok
17:56:29.0351 9428 [ E43D73CAF1023976EFBA1D0F0E69E271 ] Bluetooth Media Service C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
17:56:29.0376 9428 Bluetooth Media Service - ok
17:56:29.0419 9428 [ 20427929646784A482DF34EF8C4FED23 ] Bluetooth OBEX Service C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
17:56:29.0443 9428 Bluetooth OBEX Service - ok
17:56:29.0498 9428 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
17:56:29.0507 9428 Bonjour Service - ok
17:56:29.0572 9428 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\windows\system32\DRIVERS\bowser.sys
17:56:29.0577 9428 bowser - ok
17:56:29.0665 9428 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\windows\system32\drivers\BrFiltLo.sys
17:56:29.0676 9428 BrFiltLo - ok
17:56:29.0707 9428 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\windows\system32\drivers\BrFiltUp.sys
17:56:29.0707 9428 BrFiltUp - ok
17:56:29.0753 9428 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\windows\System32\browser.dll
17:56:29.0759 9428 Browser - ok
17:56:29.0789 9428 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\windows\System32\Drivers\Brserid.sys
17:56:29.0791 9428 Brserid - ok
17:56:29.0796 9428 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\windows\System32\Drivers\BrSerWdm.sys
17:56:29.0797 9428 BrSerWdm - ok
17:56:29.0868 9428 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\windows\System32\Drivers\BrUsbMdm.sys
17:56:29.0870 9428 BrUsbMdm - ok
17:56:29.0878 9428 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\windows\System32\Drivers\BrUsbSer.sys
17:56:29.0880 9428 BrUsbSer - ok
17:56:29.0928 9428 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\windows\system32\drivers\BthEnum.sys
17:56:29.0933 9428 BthEnum - ok
17:56:29.0936 9428 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\windows\system32\drivers\bthmodem.sys
17:56:29.0937 9428 BTHMODEM - ok
17:56:29.0968 9428 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\windows\system32\DRIVERS\bthpan.sys
17:56:29.0975 9428 BthPan - ok
17:56:30.0113 9428 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\windows\System32\Drivers\BTHport.sys
17:56:30.0121 9428 BTHPORT - ok
17:56:30.0192 9428 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\windows\system32\bthserv.dll
17:56:30.0208 9428 bthserv - ok
17:56:30.0300 9428 [ 9E2AF97302B9F4BF97E952A865EB31AE ] BTHSSecurityMgr C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
17:56:30.0301 9428 BTHSSecurityMgr - ok
17:56:30.0324 9428 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\windows\System32\Drivers\BTHUSB.sys
17:56:30.0337 9428 BTHUSB - ok
17:56:30.0383 9428 [ 274E47BD9C1367BDBFA9DF10C2E6C544 ] btmaudio C:\windows\system32\drivers\btmaud.sys
17:56:30.0387 9428 btmaudio - ok
17:56:30.0392 9428 [ 75EAB5AAF6E9F83739249CE60B4B9C39 ] btmaux C:\windows\system32\DRIVERS\btmaux.sys
17:56:30.0397 9428 btmaux - ok
17:56:30.0455 9428 [ 40C6FEC49D1CC4D112368A2BCD2BCBB7 ] btmhsf C:\windows\system32\DRIVERS\btmhsf.sys
17:56:30.0462 9428 btmhsf - ok
17:56:30.0615 9428 [ F3E5C6CEEC35C3F65221100B00AFB5F9 ] ccEvtMgr C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
17:56:30.0639 9428 ccEvtMgr - ok
17:56:30.0678 9428 [ F3E5C6CEEC35C3F65221100B00AFB5F9 ] ccSetMgr C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
17:56:30.0681 9428 ccSetMgr - ok
17:56:30.0736 9428 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\windows\system32\DRIVERS\cdfs.sys
17:56:30.0737 9428 cdfs - ok
17:56:30.0760 9428 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\windows\system32\DRIVERS\cdrom.sys
17:56:30.0761 9428 cdrom - ok
17:56:30.0862 9428 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\windows\System32\certprop.dll
17:56:30.0875 9428 CertPropSvc - ok
17:56:30.0912 9428 [ E8DDAAF635A4EA6F24927544E97C6DE8 ] cfwids C:\windows\system32\drivers\cfwids.sys
17:56:30.0913 9428 cfwids - ok
17:56:30.0944 9428 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\windows\system32\drivers\circlass.sys
17:56:30.0944 9428 circlass - ok
17:56:31.0011 9428 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\windows\system32\CLFS.sys
17:56:31.0022 9428 CLFS - ok
17:56:31.0233 9428 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:56:31.0234 9428 clr_optimization_v2.0.50727_32 - ok
17:56:31.0328 9428 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
17:56:31.0331 9428 clr_optimization_v2.0.50727_64 - ok
17:56:31.0641 9428 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:56:31.0660 9428 clr_optimization_v4.0.30319_32 - ok
17:56:31.0699 9428 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
17:56:31.0706 9428 clr_optimization_v4.0.30319_64 - ok
17:56:31.0736 9428 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\windows\system32\DRIVERS\CmBatt.sys
17:56:31.0740 9428 CmBatt - ok
17:56:31.0758 9428 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\windows\system32\drivers\cmdide.sys
17:56:31.0758 9428 cmdide - ok
17:56:31.0874 9428 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\windows\system32\Drivers\cng.sys
17:56:31.0887 9428 CNG - ok
17:56:31.0914 9428 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\windows\system32\drivers\compbatt.sys
17:56:31.0919 9428 Compbatt - ok
17:56:31.0950 9428 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\windows\system32\DRIVERS\CompositeBus.sys
17:56:31.0958 9428 CompositeBus - ok
17:56:31.0975 9428 COMSysApp - ok
17:56:31.0980 9428 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\windows\system32\drivers\crcdisk.sys
17:56:31.0980 9428 crcdisk - ok
17:56:32.0040 9428 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\windows\system32\cryptsvc.dll
17:56:32.0053 9428 CryptSvc - ok
17:56:32.0154 9428 [ BC3D4F90978CD7C8EABD1BAF3BF7873A ] CtClsFlt C:\windows\system32\DRIVERS\CtClsFlt.sys
17:56:32.0161 9428 CtClsFlt - ok
17:56:32.0267 9428 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\windows\system32\rpcss.dll
17:56:32.0279 9428 DcomLaunch - ok
17:56:32.0374 9428 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\windows\System32\defragsvc.dll
17:56:32.0381 9428 defragsvc - ok
17:56:32.0385 9428 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\windows\system32\Drivers\dfsc.sys
17:56:32.0390 9428 DfsC - ok
17:56:32.0431 9428 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\windows\system32\dhcpcore.dll
17:56:32.0450 9428 Dhcp - ok
17:56:32.0459 9428 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\windows\system32\drivers\discache.sys
17:56:32.0470 9428 discache - ok
17:56:32.0512 9428 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\windows\system32\drivers\disk.sys
17:56:32.0517 9428 Disk - ok
17:56:32.0573 9428 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\windows\System32\dnsrslvr.dll
17:56:32.0588 9428 Dnscache - ok
17:56:32.0616 9428 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\windows\System32\dot3svc.dll
17:56:32.0621 9428 dot3svc - ok
17:56:32.0724 9428 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\windows\system32\dps.dll
17:56:32.0727 9428 DPS - ok
17:56:32.0764 9428 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\windows\system32\drivers\drmkaud.sys
17:56:32.0765 9428 drmkaud - ok
17:56:32.0817 9428 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\windows\System32\drivers\dxgkrnl.sys
17:56:32.0831 9428 DXGKrnl - ok
17:56:32.0922 9428 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\windows\System32\eapsvc.dll
17:56:32.0930 9428 EapHost - ok
17:56:33.0051 9428 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\windows\system32\drivers\evbda.sys
17:56:33.0066 9428 ebdrv - ok
17:56:33.0222 9428 [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
17:56:33.0229 9428 eeCtrl - ok
17:56:33.0277 9428 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\windows\System32\lsass.exe
17:56:33.0284 9428 EFS - ok
17:56:33.0491 9428 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\windows\ehome\ehRecvr.exe
17:56:33.0525 9428 ehRecvr - ok
17:56:33.0529 9428 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\windows\ehome\ehsched.exe
17:56:33.0536 9428 ehSched - ok
17:56:33.0645 9428 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\windows\system32\drivers\elxstor.sys
17:56:33.0651 9428 elxstor - ok
17:56:33.0718 9428 [ C5BCCB378D0A896304A3E71BE7215983 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
17:56:33.0731 9428 EraserUtilRebootDrv - ok
17:56:33.0738 9428 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\windows\system32\drivers\errdev.sys
17:56:33.0740 9428 ErrDev - ok
17:56:33.0878 9428 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\windows\system32\es.dll
17:56:33.0896 9428 EventSystem - ok
17:56:34.0089 9428 [ B20A788579E443F768AAB1A24F705D0A ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
17:56:34.0113 9428 EvtEng - ok
17:56:34.0173 9428 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\windows\system32\drivers\exfat.sys
17:56:34.0176 9428 exfat - ok
17:56:34.0186 9428 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\windows\system32\drivers\fastfat.sys
17:56:34.0202 9428 fastfat - ok
17:56:34.0355 9428 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\windows\system32\fxssvc.exe
17:56:34.0363 9428 Fax - ok
17:56:34.0366 9428 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\windows\system32\drivers\fdc.sys
17:56:34.0367 9428 fdc - ok
17:56:34.0396 9428 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\windows\system32\fdPHost.dll
17:56:34.0401 9428 fdPHost - ok
17:56:34.0404 9428 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\windows\system32\fdrespub.dll
17:56:34.0409 9428 FDResPub - ok
17:56:34.0413 9428 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\windows\system32\drivers\fileinfo.sys
17:56:34.0419 9428 FileInfo - ok
17:56:34.0422 9428 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\windows\system32\drivers\filetrace.sys
17:56:34.0427 9428 Filetrace - ok
17:56:34.0431 9428 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\windows\system32\drivers\flpydisk.sys
17:56:34.0432 9428 flpydisk - ok
17:56:34.0459 9428 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\windows\system32\drivers\fltmgr.sys
17:56:34.0465 9428 FltMgr - ok
17:56:34.0525 9428 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\windows\system32\FntCache.dll
17:56:34.0542 9428 FontCache - ok
17:56:34.0616 9428 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
17:56:34.0618 9428 FontCache3.0.0.0 - ok
17:56:34.0659 9428 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\windows\system32\drivers\FsDepends.sys
17:56:34.0663 9428 FsDepends - ok
17:56:34.0774 9428 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\windows\system32\drivers\Fs_Rec.sys
17:56:34.0791 9428 Fs_Rec - ok
17:56:34.0844 9428 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\windows\system32\DRIVERS\fvevol.sys
17:56:34.0850 9428 fvevol - ok
17:56:34.0879 9428 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\windows\system32\drivers\gagp30kx.sys
17:56:34.0879 9428 gagp30kx - ok
17:56:34.0997 9428 [ C403C5DB49A0F9AAF4F2128EDC0106D8 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
17:56:35.0001 9428 GamesAppService - ok
17:56:35.0108 9428 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\windows\system32\DRIVERS\GEARAspiWDM.sys
17:56:35.0109 9428 GEARAspiWDM - ok
17:56:35.0214 9428 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\windows\System32\gpsvc.dll
17:56:35.0224 9428 gpsvc - ok
17:56:35.0257 9428 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\windows\system32\drivers\hcw85cir.sys
17:56:35.0258 9428 hcw85cir - ok
17:56:35.0310 9428 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
17:56:35.0316 9428 HdAudAddService - ok
17:56:35.0350 9428 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\windows\system32\DRIVERS\HDAudBus.sys
17:56:35.0355 9428 HDAudBus - ok
17:56:35.0358 9428 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\windows\system32\drivers\HidBatt.sys
17:56:35.0359 9428 HidBatt - ok
17:56:35.0363 9428 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\windows\system32\drivers\hidbth.sys
17:56:35.0368 9428 HidBth - ok
17:56:35.0444 9428 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\windows\system32\drivers\hidir.sys
17:56:35.0444 9428 HidIr - ok
17:56:35.0457 9428 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\windows\system32\hidserv.dll
17:56:35.0462 9428 hidserv - ok
17:56:35.0497 9428 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\windows\system32\DRIVERS\hidusb.sys
17:56:35.0502 9428 HidUsb - ok
17:56:35.0547 9428 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\windows\system32\kmsvc.dll
17:56:35.0552 9428 hkmsvc - ok
17:56:35.0595 9428 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\windows\system32\ListSvc.dll
17:56:35.0616 9428 HomeGroupListener - ok
17:56:35.0676 9428 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\windows\system32\provsvc.dll
17:56:35.0699 9428 HomeGroupProvider - ok
17:56:35.0708 9428 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\windows\system32\drivers\HpSAMD.sys
17:56:35.0709 9428 HpSAMD - ok
17:56:35.0746 9428 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\windows\system32\drivers\HTTP.sys
17:56:35.0756 9428 HTTP - ok
17:56:35.0789 9428 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\windows\system32\drivers\hwpolicy.sys
17:56:35.0794 9428 hwpolicy - ok
17:56:35.0833 9428 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\windows\system32\DRIVERS\i8042prt.sys
17:56:35.0853 9428 i8042prt - ok
17:56:35.0926 9428 [ D7921D5A870B11CC1ADAB198A519D50A ] iaStor C:\windows\system32\DRIVERS\iaStor.sys
17:56:35.0929 9428 iaStor - ok
17:56:36.0055 9428 [ 8FFF9083252C16FE3960173722605E9E ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
17:56:36.0069 9428 IAStorDataMgrSvc - ok
17:56:36.0118 9428 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\windows\system32\drivers\iaStorV.sys
17:56:36.0120 9428 iaStorV - ok
17:56:36.0182 9428 [ FC47F5CF561BF0FD897EFD1A9604DCCF ] iBtFltCoex C:\windows\system32\DRIVERS\iBtFltCoex.sys
17:56:36.0194 9428 iBtFltCoex - ok
17:56:36.0346 9428 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
17:56:36.0350 9428 idsvc - ok
17:56:36.0580 9428 [ 174BCAC474DE13B2650E444CF124828E ] igfx C:\windows\system32\DRIVERS\igdkmd64.sys
17:56:36.0641 9428 igfx - ok
17:56:36.0684 9428 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\windows\system32\drivers\iirsp.sys
17:56:36.0685 9428 iirsp - ok
17:56:36.0726 9428 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\windows\System32\ikeext.dll
17:56:36.0756 9428 IKEEXT - ok
17:56:36.0803 9428 [ CADDF0927DAC63EDAE48F5C35A61D87D ] intaud_WaveExtensible C:\windows\system32\drivers\intelaud.sys
17:56:36.0803 9428 intaud_WaveExtensible - ok
17:56:36.0914 9428 [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud C:\windows\system32\DRIVERS\IntcDAud.sys
17:56:36.0924 9428 IntcDAud - ok
17:56:36.0928 9428 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\windows\system32\drivers\intelide.sys
17:56:36.0928 9428 intelide - ok
17:56:36.0939 9428 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\windows\system32\DRIVERS\intelppm.sys
17:56:36.0947 9428 intelppm - ok
17:56:36.0964 9428 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\windows\system32\ipbusenum.dll
17:56:36.0972 9428 IPBusEnum - ok
17:56:36.0977 9428 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\windows\system32\DRIVERS\ipfltdrv.sys
17:56:36.0978 9428 IpFilterDriver - ok
17:56:37.0014 9428 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\windows\System32\iphlpsvc.dll
17:56:37.0021 9428 iphlpsvc - ok
17:56:37.0026 9428 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\windows\system32\drivers\IPMIDrv.sys
17:56:37.0028 9428 IPMIDRV - ok
17:56:37.0041 9428 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\windows\system32\drivers\ipnat.sys
17:56:37.0044 9428 IPNAT - ok
17:56:37.0105 9428 [ 0F261EC4F514926177C70C1832374231 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
17:56:37.0115 9428 iPod Service - ok
17:56:37.0194 9428 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\windows\system32\drivers\irenum.sys
17:56:37.0199 9428 IRENUM - ok
17:56:37.0202 9428 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\windows\system32\drivers\isapnp.sys
17:56:37.0202 9428 isapnp - ok
17:56:37.0239 9428 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\windows\system32\drivers\msiscsi.sys
17:56:37.0244 9428 iScsiPrt - ok
17:56:37.0292 9428 [ 716F66336F10885D935B08174DC54242 ] iwdbus C:\windows\system32\DRIVERS\iwdbus.sys
17:56:37.0310 9428 iwdbus - ok
17:56:37.0365 9428 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\windows\system32\DRIVERS\kbdclass.sys
17:56:37.0384 9428 kbdclass - ok
17:56:37.0387 9428 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\windows\system32\DRIVERS\kbdhid.sys
17:56:37.0392 9428 kbdhid - ok
17:56:37.0416 9428 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\windows\system32\lsass.exe
17:56:37.0417 9428 KeyIso - ok
17:56:37.0442 9428 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\windows\system32\Drivers\ksecdd.sys
17:56:37.0447 9428 KSecDD - ok
17:56:37.0485 9428 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\windows\system32\Drivers\ksecpkg.sys
17:56:37.0491 9428 KSecPkg - ok
17:56:37.0505 9428 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\windows\system32\drivers\ksthunk.sys
17:56:37.0510 9428 ksthunk - ok
17:56:37.0545 9428 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\windows\system32\msdtckrm.dll
17:56:37.0552 9428 KtmRm - ok
17:56:37.0597 9428 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\windows\system32\srvsvc.dll
17:56:37.0604 9428 LanmanServer - ok
17:56:37.0629 9428 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\windows\System32\wkssvc.dll
17:56:37.0636 9428 LanmanWorkstation - ok
17:56:37.0861 9428 [ 6ABE9ECAAB7DD0CC6F46EC830E0FE8FC ] LiveUpdate C:\PROGRA~2\Symantec\LIVEUP~1\LUCOMS~1.EXE
17:56:37.0887 9428 LiveUpdate - ok
17:56:37.0928 9428 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\windows\system32\DRIVERS\lltdio.sys
17:56:37.0946 9428 lltdio - ok
17:56:38.0057 9428 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\windows\System32\lltdsvc.dll
17:56:38.0064 9428 lltdsvc - ok
17:56:38.0090 9428 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\windows\System32\lmhsvc.dll
17:56:38.0096 9428 lmhosts - ok
17:56:38.0272 9428 [ 0803906D607A9B83184447B75B60ECC2 ] LMS C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
17:56:38.0295 9428 LMS - ok
17:56:38.0356 9428 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\windows\system32\drivers\lsi_fc.sys
17:56:38.0359 9428 LSI_FC - ok
17:56:38.0369 9428 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\windows\system32\drivers\lsi_sas.sys
17:56:38.0372 9428 LSI_SAS - ok
17:56:38.0377 9428 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\windows\system32\drivers\lsi_sas2.sys
17:56:38.0378 9428 LSI_SAS2 - ok
17:56:38.0458 9428 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\windows\system32\drivers\lsi_scsi.sys
17:56:38.0461 9428 LSI_SCSI - ok
17:56:38.0502 9428 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\windows\system32\drivers\luafv.sys
17:56:38.0510 9428 luafv - ok
17:56:38.0674 9428 [ 82128F909CD5148556F6DEB77B340532 ] McShield C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
17:56:38.0677 9428 McShield - ok
17:56:38.0749 9428 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\windows\system32\Mcx2Svc.dll
17:56:38.0750 9428 Mcx2Svc - ok
17:56:38.0753 9428 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\windows\system32\drivers\megasas.sys
17:56:38.0754 9428 megasas - ok
17:56:38.0834 9428 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\windows\system32\drivers\MegaSR.sys
17:56:38.0840 9428 MegaSR - ok
17:56:38.0896 9428 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\windows\system32\DRIVERS\HECIx64.sys
17:56:38.0915 9428 MEIx64 - ok
17:56:38.0999 9428 [ FB752FEB1ED4E660FF51712892905C04 ] mfeapfk C:\windows\system32\drivers\mfeapfk.sys
17:56:39.0000 9428 mfeapfk - ok
17:56:39.0015 9428 [ 3257CF681999A47D8C552DFBBEB7844E ] mfeavfk C:\windows\system32\drivers\mfeavfk.sys
17:56:39.0021 9428 mfeavfk - ok
17:56:39.0115 9428 [ A6CDFC6300E214D19DA765253E3E3D20 ] mfefire C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
17:56:39.0128 9428 mfefire - ok
17:56:39.0160 9428 [ 00016D7ED29A95D6F7E7B6A3F591FD2D ] mfefirek C:\windows\system32\drivers\mfefirek.sys
17:56:39.0167 9428 mfefirek - ok
17:56:39.0227 9428 [ 39030C98198F02A2F3A1C3166BF56253 ] mfehidk C:\windows\system32\drivers\mfehidk.sys
17:56:39.0245 9428 mfehidk - ok
17:56:39.0283 9428 [ 217FA02439DE74844B6A39AEBEED24E1 ] mfenlfk C:\windows\system32\DRIVERS\mfenlfk.sys
17:56:39.0288 9428 mfenlfk - ok
17:56:39.0295 9428 [ 8474E6EE0B5EAB108CF005C6C4956E75 ] mferkdet C:\windows\system32\drivers\mferkdet.sys
17:56:39.0296 9428 mferkdet - ok
17:56:39.0300 9428 [ BFCDF65F8513E396889A62DC1397273F ] mfevtp C:\Windows\system32\mfevtps.exe
17:56:39.0308 9428 mfevtp - ok
17:56:39.0359 9428 [ D4CF36F1EBA374FCC35903AE4F4E46BC ] mfewfpk C:\windows\system32\drivers\mfewfpk.sys
17:56:39.0376 9428 mfewfpk - ok
17:56:39.0416 9428 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\windows\system32\mmcss.dll
17:56:39.0421 9428 MMCSS - ok
17:56:39.0476 9428 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\windows\system32\drivers\modem.sys
17:56:39.0476 9428 Modem - ok
17:56:39.0480 9428 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\windows\system32\DRIVERS\monitor.sys
17:56:39.0485 9428 monitor - ok
17:56:39.0583 9428 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\windows\system32\DRIVERS\mouclass.sys
17:56:39.0596 9428 mouclass - ok
17:56:39.0621 9428 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\windows\system32\DRIVERS\mouhid.sys
17:56:39.0625 9428 mouhid - ok
17:56:39.0632 9428 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\windows\system32\drivers\mountmgr.sys
17:56:39.0638 9428 mountmgr - ok
17:56:39.0766 9428 [ 8C7336950F1E69CDFD811CBBD9CF00A2 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
17:56:39.0768 9428 MozillaMaintenance - ok
17:56:39.0816 9428 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\windows\system32\drivers\mpio.sys
17:56:39.0818 9428 mpio - ok
17:56:39.0827 9428 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\windows\system32\drivers\mpsdrv.sys
17:56:39.0844 9428 mpsdrv - ok
17:56:39.0898 9428 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\windows\system32\mpssvc.dll
17:56:39.0907 9428 MpsSvc - ok
17:56:39.0911 9428 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\windows\system32\drivers\mrxdav.sys
17:56:39.0917 9428 MRxDAV - ok
17:56:39.0941 9428 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\windows\system32\DRIVERS\mrxsmb.sys
17:56:39.0949 9428 mrxsmb - ok
17:56:39.0955 9428 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\windows\system32\DRIVERS\mrxsmb10.sys
17:56:39.0962 9428 mrxsmb10 - ok
17:56:39.0966 9428 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\windows\system32\DRIVERS\mrxsmb20.sys
17:56:39.0971 9428 mrxsmb20 - ok
17:56:39.0974 9428 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\windows\system32\drivers\msahci.sys
17:56:39.0980 9428 msahci - ok
17:56:40.0028 9428 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\windows\system32\drivers\msdsm.sys
17:56:40.0055 9428 msdsm - ok
17:56:40.0070 9428 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\windows\System32\msdtc.exe
17:56:40.0071 9428 MSDTC - ok
17:56:40.0088 9428 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\windows\system32\drivers\Msfs.sys
17:56:40.0094 9428 Msfs - ok
17:56:40.0100 9428 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\windows\System32\drivers\mshidkmdf.sys
17:56:40.0105 9428 mshidkmdf - ok
17:56:40.0107 9428 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\windows\system32\drivers\msisadrv.sys
17:56:40.0114 9428 msisadrv - ok
17:56:40.0149 9428 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\windows\system32\iscsiexe.dll
17:56:40.0153 9428 MSiSCSI - ok
17:56:40.0166 9428 msiserver - ok
17:56:40.0242 9428 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\windows\system32\drivers\MSKSSRV.sys
17:56:40.0242 9428 MSKSSRV - ok
17:56:40.0245 9428 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\windows\system32\drivers\MSPCLOCK.sys
17:56:40.0250 9428 MSPCLOCK - ok
17:56:40.0253 9428 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\windows\system32\drivers\MSPQM.sys
17:56:40.0257 9428 MSPQM - ok
17:56:40.0284 9428 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\windows\system32\drivers\MsRPC.sys
17:56:40.0290 9428 MsRPC - ok
17:56:40.0297 9428 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\windows\system32\DRIVERS\mssmbios.sys
17:56:40.0302 9428 mssmbios - ok
17:56:40.0305 9428 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\windows\system32\drivers\MSTEE.sys
17:56:40.0306 9428 MSTEE - ok
17:56:40.0309 9428 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\windows\system32\drivers\MTConfig.sys
17:56:40.0309 9428 MTConfig - ok
17:56:40.0315 9428 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\windows\system32\Drivers\mup.sys
17:56:40.0323 9428 Mup - ok
17:56:40.0356 9428 [ F217D7718FD7577AF331E89910B2D21E ] MyWiFiDHCPDNS C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
17:56:40.0358 9428 MyWiFiDHCPDNS - ok
17:56:40.0392 9428 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\windows\system32\qagentRT.dll
17:56:40.0406 9428 napagent - ok
17:56:40.0453 9428 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\windows\system32\DRIVERS\nwifi.sys
17:56:40.0476 9428 NativeWifiP - ok
17:56:40.0717 9428 [ C58D8A669D6551F616D90244BD2C2D4F ] NAVENG C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20121221.019\ENG64.SYS
17:56:40.0718 9428 NAVENG - ok
17:56:40.0844 9428 [ A3DBDB412ADFA5882DD6843B11FE0828 ] NAVEX15 C:\PROGRA~3\Symantec\DEFINI~1\VIRUSD~1\20121221.019\EX64.SYS
17:56:40.0862 9428 NAVEX15 - ok
17:56:41.0008 9428 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\windows\system32\drivers\ndis.sys
17:56:41.0041 9428 NDIS - ok
17:56:41.0089 9428 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\windows\system32\DRIVERS\ndiscap.sys
17:56:41.0089 9428 NdisCap - ok
17:56:41.0098 9428 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\windows\system32\DRIVERS\ndistapi.sys
17:56:41.0106 9428 NdisTapi - ok
17:56:41.0202 9428 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\windows\system32\DRIVERS\ndisuio.sys
17:56:41.0207 9428 Ndisuio - ok
17:56:41.0211 9428 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\windows\system32\DRIVERS\ndiswan.sys
17:56:41.0217 9428 NdisWan - ok
17:56:41.0220 9428 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\windows\system32\drivers\NDProxy.sys
17:56:41.0225 9428 NDProxy - ok
17:56:41.0240 9428 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\windows\system32\DRIVERS\netbios.sys
17:56:41.0244 9428 NetBIOS - ok
17:56:41.0255 9428 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\windows\system32\DRIVERS\netbt.sys
17:56:41.0261 9428 NetBT - ok
17:56:41.0287 9428 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\windows\system32\lsass.exe
17:56:41.0288 9428 Netlogon - ok
17:56:41.0326 9428 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\windows\System32\netman.dll
17:56:41.0334 9428 Netman - ok
17:56:41.0358 9428 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:56:41.0359 9428 NetMsmqActivator - ok
17:56:41.0377 9428 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:56:41.0378 9428 NetPipeActivator - ok
17:56:41.0460 9428 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\windows\System32\netprofm.dll
17:56:41.0477 9428 netprofm - ok
17:56:41.0480 9428 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:56:41.0484 9428 NetTcpActivator - ok
17:56:41.0488 9428 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:56:41.0489 9428 NetTcpPortSharing - ok
17:56:41.0638 9428 [ 9FD1BE1881446D954FF77244AE58FBCB ] NETwNs64 C:\windows\system32\DRIVERS\NETwNs64.sys
17:56:41.0680 9428 NETwNs64 - ok
17:56:41.0706 9428 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\windows\system32\drivers\nfrd960.sys
17:56:41.0707 9428 nfrd960 - ok
17:56:41.0768 9428 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\windows\System32\nlasvc.dll
17:56:41.0794 9428 NlaSvc - ok
17:56:41.0798 9428 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\windows\system32\drivers\Npfs.sys
17:56:41.0804 9428 Npfs - ok
17:56:41.0909 9428 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\windows\system32\nsisvc.dll
17:56:41.0921 9428 nsi - ok
17:56:41.0926 9428 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\windows\system32\drivers\nsiproxy.sys
17:56:41.0938 9428 nsiproxy - ok
17:56:42.0014 9428 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\windows\system32\drivers\Ntfs.sys
17:56:42.0036 9428 Ntfs - ok
17:56:42.0135 9428 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\windows\system32\drivers\Null.sys
17:56:42.0151 9428 Null - ok
17:56:42.0175 9428 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\windows\system32\drivers\nvraid.sys
17:56:42.0176 9428 nvraid - ok
17:56:42.0200 9428 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\windows\system32\drivers\nvstor.sys
17:56:42.0204 9428 nvstor - ok
17:56:42.0237 9428 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\windows\system32\drivers\nv_agp.sys
17:56:42.0237 9428 nv_agp - ok
17:56:42.0314 9428 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\windows\system32\drivers\ohci1394.sys
17:56:42.0315 9428 ohci1394 - ok
17:56:42.0374 9428 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:56:42.0378 9428 ose - ok
17:56:42.0650 9428 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
17:56:42.0674 9428 osppsvc - ok
17:56:42.0726 9428 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\windows\system32\pnrpsvc.dll
17:56:42.0749 9428 p2pimsvc - ok
17:56:42.0877 9428 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\windows\system32\p2psvc.dll
17:56:42.0885 9428 p2psvc - ok
17:56:42.0928 9428 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\windows\system32\drivers\parport.sys
17:56:42.0929 9428 Parport - ok
17:56:42.0959 9428 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\windows\system32\drivers\partmgr.sys
17:56:42.0968 9428 partmgr - ok
17:56:42.0973 9428 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\windows\System32\pcasvc.dll
17:56:42.0980 9428 PcaSvc - ok
17:56:43.0001 9428 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\windows\system32\drivers\pci.sys
17:56:43.0007 9428 pci - ok
17:56:43.0010 9428 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\windows\system32\drivers\pciide.sys
17:56:43.0011 9428 pciide - ok
17:56:43.0107 9428 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\windows\system32\drivers\pcmcia.sys
17:56:43.0111 9428 pcmcia - ok
17:56:43.0118 9428 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\windows\system32\drivers\pcw.sys
17:56:43.0125 9428 pcw - ok
17:56:43.0158 9428 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\windows\system32\drivers\peauth.sys
17:56:43.0166 9428 PEAUTH - ok
17:56:43.0512 9428 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\windows\SysWow64\perfhost.exe
17:56:43.0521 9428 PerfHost - ok
17:56:43.0620 9428 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\windows\system32\pla.dll
17:56:43.0635 9428 pla - ok
17:56:43.0750 9428 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\windows\system32\umpnpmgr.dll
17:56:43.0760 9428 PlugPlay - ok
17:56:43.0807 9428 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\windows\system32\pnrpauto.dll
17:56:43.0825 9428 PNRPAutoReg - ok
17:56:43.0856 9428 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\windows\system32\pnrpsvc.dll
17:56:43.0859 9428 PNRPsvc - ok
17:56:43.0914 9428 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\windows\System32\ipsecsvc.dll
17:56:43.0921 9428 PolicyAgent - ok
17:56:43.0948 9428 [ A2CCA4FB273E6050F17A0A416CFF2FCD ] Power C:\windows\system32\umpo.dll
17:56:43.0955 9428 Power - ok
17:56:44.0042 9428 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\windows\system32\DRIVERS\raspptp.sys
17:56:44.0063 9428 PptpMiniport - ok
17:56:44.0148 9428 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\windows\system32\drivers\processr.sys
17:56:44.0149 9428 Processor - ok
17:56:44.0207 9428 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\windows\system32\profsvc.dll
17:56:44.0215 9428 ProfSvc - ok
17:56:44.0251 9428 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\windows\system32\lsass.exe
17:56:44.0252 9428 ProtectedStorage - ok
17:56:44.0280 9428 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\windows\system32\DRIVERS\pacer.sys
17:56:44.0286 9428 Psched - ok
17:56:44.0378 9428 [ 87B04878A6D59D6C79251DC960C674C1 ] PxHlpa64 C:\windows\system32\Drivers\PxHlpa64.sys
17:56:44.0383 9428 PxHlpa64 - ok
17:56:44.0485 9428 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\windows\system32\drivers\ql2300.sys
17:56:44.0498 9428 ql2300 - ok
17:56:44.0546 9428 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\windows\system32\drivers\ql40xx.sys
17:56:44.0547 9428 ql40xx - ok
17:56:44.0628 9428 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\windows\system32\qwave.dll
17:56:44.0646 9428 QWAVE - ok
17:56:44.0649 9428 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\windows\system32\drivers\qwavedrv.sys
17:56:44.0653 9428 QWAVEdrv - ok
17:56:44.0657 9428 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\windows\system32\DRIVERS\rasacd.sys
17:56:44.0657 9428 RasAcd - ok
17:56:44.0702 9428 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\windows\system32\DRIVERS\AgileVpn.sys
17:56:44.0721 9428 RasAgileVpn - ok
17:56:44.0780 9428 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\windows\System32\rasauto.dll
17:56:44.0795 9428 RasAuto - ok
17:56:44.0800 9428 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\windows\system32\DRIVERS\rasl2tp.sys
17:56:44.0805 9428 Rasl2tp - ok
17:56:44.0816 9428 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\windows\System32\rasmans.dll
17:56:44.0823 9428 RasMan - ok
17:56:44.0839 9428 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\windows\system32\DRIVERS\raspppoe.sys
17:56:44.0844 9428 RasPppoe - ok
17:56:44.0848 9428 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\windows\system32\DRIVERS\rassstp.sys
17:56:44.0854 9428 RasSstp - ok
17:56:44.0897 9428 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\windows\system32\DRIVERS\rdbss.sys
17:56:44.0920 9428 rdbss - ok
17:56:44.0923 9428 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\windows\system32\drivers\rdpbus.sys
17:56:44.0924 9428 rdpbus - ok
17:56:44.0927 9428 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\windows\system32\DRIVERS\RDPCDD.sys
17:56:44.0935 9428 RDPCDD - ok
17:56:44.0949 9428 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\windows\system32\drivers\rdpencdd.sys
17:56:44.0954 9428 RDPENCDD - ok
17:56:44.0959 9428 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\windows\system32\drivers\rdprefmp.sys
17:56:44.0963 9428 RDPREFMP - ok
17:56:45.0009 9428 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\windows\system32\drivers\rdpvideominiport.sys
17:56:45.0015 9428 RdpVideoMiniport - ok
17:56:45.0057 9428 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\windows\system32\drivers\RDPWD.sys
17:56:45.0058 9428 RDPWD - ok
17:56:45.0157 9428 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\windows\system32\drivers\rdyboost.sys
17:56:45.0175 9428 rdyboost - ok
17:56:45.0241 9428 [ B9A0810D16EA7935B10A5499ABA61DC3 ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
17:56:45.0250 9428 RegSrvc - ok
17:56:45.0273 9428 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\windows\System32\mprdim.dll
17:56:45.0278 9428 RemoteAccess - ok
17:56:45.0305 9428 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\windows\system32\regsvc.dll
17:56:45.0311 9428 RemoteRegistry - ok
17:56:45.0324 9428 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\windows\system32\DRIVERS\rfcomm.sys
17:56:45.0331 9428 RFCOMM - ok
17:56:45.0340 9428 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\windows\System32\RpcEpMap.dll
17:56:45.0347 9428 RpcEptMapper - ok
17:56:45.0430 9428 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\windows\system32\locator.exe
17:56:45.0435 9428 RpcLocator - ok
17:56:45.0453 9428 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\windows\system32\rpcss.dll
17:56:45.0456 9428 RpcSs - ok
17:56:45.0496 9428 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\windows\system32\DRIVERS\rspndr.sys
17:56:45.0501 9428 rspndr - ok
17:56:45.0605 9428 [ BE29B0A3AC1E8BD02FFAB8CEE86BADFA ] RSUSBSTOR C:\windows\system32\Drivers\RtsUStor.sys
17:56:45.0609 9428 RSUSBSTOR - ok
17:56:45.0642 9428 [ 2777226EE8BF50B059D7A7C90177E99C ] RTL8167 C:\windows\system32\DRIVERS\Rt64win7.sys
17:56:45.0649 9428 RTL8167 - ok
17:56:45.0669 9428 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\windows\system32\lsass.exe
17:56:45.0670 9428 SamSs - ok
17:56:45.0688 9428 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\windows\system32\drivers\sbp2port.sys
17:56:45.0689 9428 sbp2port - ok
17:56:45.0768 9428 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\windows\System32\SCardSvr.dll
17:56:45.0784 9428 SCardSvr - ok
17:56:45.0789 9428 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\windows\system32\DRIVERS\scfilter.sys
17:56:45.0794 9428 scfilter - ok
17:56:45.0958 9428 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\windows\system32\schedsvc.dll
17:56:45.0972 9428 Schedule - ok
17:56:46.0005 9428 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\windows\System32\certprop.dll
17:56:46.0005 9428 SCPolicySvc - ok
17:56:46.0055 9428 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\windows\System32\SDRSVC.dll
17:56:46.0061 9428 SDRSVC - ok
17:56:46.0165 9428 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\windows\system32\drivers\secdrv.sys
17:56:46.0175 9428 secdrv - ok
17:56:46.0202 9428 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\windows\system32\seclogon.dll
17:56:46.0207 9428 seclogon - ok
17:56:46.0232 9428 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\windows\System32\sens.dll
17:56:46.0239 9428 SENS - ok
17:56:46.0279 9428 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\windows\system32\sensrsvc.dll
17:56:46.0295 9428 SensrSvc - ok
17:56:46.0298 9428 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\windows\system32\drivers\serenum.sys
17:56:46.0299 9428 Serenum - ok
17:56:46.0328 9428 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\windows\system32\drivers\serial.sys
17:56:46.0329 9428 Serial - ok
17:56:46.0343 9428 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\windows\system32\drivers\sermouse.sys
17:56:46.0344 9428 sermouse - ok
17:56:46.0424 9428 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\windows\system32\sessenv.dll
17:56:46.0429 9428 SessionEnv - ok
17:56:46.0432 9428 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\windows\system32\drivers\sffdisk.sys
17:56:46.0437 9428 sffdisk - ok
17:56:46.0440 9428 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\windows\system32\drivers\sffp_mmc.sys
17:56:46.0441 9428 sffp_mmc - ok
17:56:46.0444 9428 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\windows\system32\drivers\sffp_sd.sys
17:56:46.0451 9428 sffp_sd - ok
17:56:46.0454 9428 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\windows\system32\drivers\sfloppy.sys
17:56:46.0455 9428 sfloppy - ok
17:56:46.0514 9428 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\windows\System32\ipnathlp.dll
17:56:46.0534 9428 SharedAccess - ok
17:56:46.0575 9428 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\windows\System32\shsvcs.dll
17:56:46.0582 9428 ShellHWDetection - ok
17:56:46.0586 9428 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\windows\system32\drivers\SiSRaid2.sys
17:56:46.0586 9428 SiSRaid2 - ok
17:56:46.0675 9428 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\windows\system32\drivers\sisraid4.sys
17:56:46.0675 9428 SiSRaid4 - ok
17:56:46.0705 9428 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
17:56:46.0808 9428 SkypeUpdate - ok
17:56:46.0838 9428 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\windows\system32\DRIVERS\smb.sys
17:56:46.0839 9428 Smb - ok
17:56:47.0107 9428 [ 13FFB1D55C2710ABC3119474A83C0A44 ] SmcService C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Smc.exe
17:56:47.0137 9428 SmcService - ok
17:56:47.0210 9428 [ 0BDEF6DADB43601FDCB031B4B0383580 ] SNAC C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\SNAC64.EXE
17:56:47.0212 9428 SNAC - ok
17:56:47.0261 9428 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\windows\System32\snmptrap.exe
17:56:47.0266 9428 SNMPTRAP - ok
17:56:47.0340 9428 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\windows\system32\drivers\spldr.sys
17:56:47.0349 9428 spldr - ok
17:56:47.0395 9428 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\windows\System32\spoolsv.exe
17:56:47.0404 9428 Spooler - ok
17:56:47.0476 9428 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\windows\system32\sppsvc.exe
17:56:47.0571 9428 sppsvc - ok
17:56:47.0596 9428 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\windows\system32\sppuinotify.dll
17:56:47.0602 9428 sppuinotify - ok
17:56:47.0635 9428 [ 83834EBC0786CCF5EE64FBBB6A89CF3A ] SRTSP C:\windows\system32\Drivers\SRTSP64.SYS
17:56:47.0637 9428 SRTSP - ok
17:56:47.0645 9428 [ E47D5D68917E0D70E3730263D41CEFA3 ] SRTSPL C:\windows\system32\Drivers\SRTSPL64.SYS
17:56:47.0647 9428 SRTSPL - ok
17:56:47.0651 9428 [ EA2051FF6A40C89EAA98C1769AD68597 ] SRTSPX C:\windows\system32\Drivers\SRTSPX64.SYS
17:56:47.0652 9428 SRTSPX - ok
17:56:47.0701 9428 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\windows\system32\DRIVERS\srv.sys
17:56:47.0719 9428 srv - ok
17:56:47.0735 9428 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\windows\system32\DRIVERS\srv2.sys
17:56:47.0742 9428 srv2 - ok
17:56:47.0784 9428 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\windows\system32\DRIVERS\srvnet.sys
17:56:47.0790 9428 srvnet - ok
17:56:47.0870 9428 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\windows\System32\ssdpsrv.dll
17:56:47.0877 9428 SSDPSRV - ok
17:56:47.0986 9428 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\windows\system32\sstpsvc.dll
17:56:48.0009 9428 SstpSvc - ok
17:56:48.0167 9428 [ B2D8B364A831427A5741F6C408FA8AE3 ] STacSV C:\Program Files\IDT\WDM\STacSV64.exe
17:56:48.0174 9428 STacSV - ok
17:56:48.0176 9428 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\windows\system32\drivers\stexstor.sys
17:56:48.0183 9428 stexstor - ok
17:56:48.0229 9428 [ EF5ACDE92BA3F691BBFEF781CB063501 ] STHDA C:\windows\system32\DRIVERS\stwrt64.sys
17:56:48.0238 9428 STHDA - ok
17:56:48.0304 9428 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\windows\System32\wiaservc.dll
17:56:48.0313 9428 stisvc - ok
17:56:48.0348 9428 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\windows\system32\DRIVERS\swenum.sys
17:56:48.0354 9428 swenum - ok
17:56:48.0453 9428 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\windows\System32\swprv.dll
17:56:48.0462 9428 swprv - ok
17:56:48.0520 9428 [ 4402CF4959A30CB6A008099ABA8F22A9 ] Symantec AntiVirus C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe
17:56:48.0547 9428 Symantec AntiVirus - ok
17:56:48.0619 9428 [ D1F1A5E72E33D6BE449F5F1F4A513DD1 ] SymEvent C:\windows\system32\Drivers\SYMEVENT64x86.SYS
17:56:48.0620 9428 SymEvent - ok
17:56:48.0753 9428 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\windows\system32\sysmain.dll
17:56:48.0767 9428 SysMain - ok
17:56:48.0772 9428 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\windows\System32\TabSvc.dll
17:56:48.0779 9428 TabletInputService - ok
17:56:48.0784 9428 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\windows\System32\tapisrv.dll
17:56:48.0792 9428 TapiSrv - ok
17:56:48.0807 9428 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\windows\System32\tbssvc.dll
17:56:48.0813 9428 TBS - ok
17:56:48.0885 9428 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\windows\system32\drivers\tcpip.sys
17:56:48.0899 9428 Tcpip - ok
17:56:48.0940 9428 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\windows\system32\DRIVERS\tcpip.sys
17:56:48.0949 9428 TCPIP6 - ok
17:56:48.0986 9428 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\windows\system32\drivers\tcpipreg.sys
17:56:48.0991 9428 tcpipreg - ok
17:56:49.0083 9428 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\windows\system32\drivers\tdpipe.sys
17:56:49.0098 9428 TDPIPE - ok
17:56:49.0130 9428 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\windows\system32\drivers\tdtcp.sys
17:56:49.0131 9428 TDTCP - ok
17:56:49.0135 9428 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\windows\system32\DRIVERS\tdx.sys
17:56:49.0140 9428 tdx - ok
17:56:49.0190 9428 [ 9416ED539BB8771EEF44D454555A97DB ] Teefer2 C:\windows\system32\DRIVERS\teefer2.sys
17:56:49.0207 9428 Teefer2 - ok
17:56:49.0213 9428 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\windows\system32\DRIVERS\termdd.sys
17:56:49.0218 9428 TermDD - ok
17:56:49.0288 9428 [ 2E648163254233755035B46DD7B89123 ] TermService C:\windows\System32\termsrv.dll
17:56:49.0301 9428 TermService - ok
17:56:49.0304 9428 [ F0344071948D1A1FA732231785A0664C ] Themes C:\windows\system32\themeservice.dll
17:56:49.0310 9428 Themes - ok
17:56:49.0343 9428 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\windows\system32\mmcss.dll
17:56:49.0345 9428 THREADORDER - ok
17:56:49.0391 9428 [ 68FE3D89829E27D4FD5EEA7BD2C41985 ] tihub3 C:\windows\system32\DRIVERS\tihub3.sys
17:56:49.0412 9428 tihub3 - ok
17:56:49.0431 9428 [ 0102C9633CE1F18A6AC021F28B734DB5 ] tixhci C:\windows\system32\DRIVERS\tixhci.sys
17:56:49.0438 9428 tixhci - ok
17:56:49.0457 9428 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\windows\System32\trkwks.dll
17:56:49.0463 9428 TrkWks - ok
17:56:49.0570 9428 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
17:56:49.0575 9428 TrustedInstaller - ok
17:56:49.0586 9428 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\windows\system32\DRIVERS\tssecsrv.sys
17:56:49.0591 9428 tssecsrv - ok
17:56:49.0629 9428 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\windows\system32\drivers\tsusbflt.sys
17:56:49.0632 9428 TsUsbFlt - ok
17:56:49.0724 9428 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\windows\system32\drivers\TsUsbGD.sys
17:56:49.0724 9428 TsUsbGD - ok
17:56:49.0769 9428 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\windows\system32\DRIVERS\tunnel.sys
17:56:49.0775 9428 tunnel - ok
17:56:49.0824 9428 [ FD24F98D2898BE093FE926604BE7DB99 ] TurboB C:\windows\system32\DRIVERS\TurboB.sys
17:56:49.0829 9428 TurboB - ok
17:56:49.0968 9428 [ 600B406A04D90F577FEA8A88D7379F08 ] TurboBoost C:\Program Files\Intel\TurboBoost\TurboBoost.exe
17:56:49.0985 9428 TurboBoost - ok
17:56:49.0988 9428 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\windows\system32\drivers\uagp35.sys
17:56:49.0989 9428 uagp35 - ok
17:56:50.0021 9428 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\windows\system32\DRIVERS\udfs.sys
17:56:50.0023 9428 udfs - ok
17:56:50.0078 9428 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\windows\system32\UI0Detect.exe
17:56:50.0096 9428 UI0Detect - ok
17:56:50.0181 9428 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\windows\system32\drivers\uliagpkx.sys
17:56:50.0182 9428 uliagpkx - ok
17:56:50.0217 9428 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\windows\system32\DRIVERS\umbus.sys
17:56:50.0221 9428 umbus - ok
17:56:50.0224 9428 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\windows\system32\drivers\umpass.sys
17:56:50.0225 9428 UmPass - ok
17:56:50.0438 9428 [ EB79C6C91A99930015EF29AE7FA802D1 ] UNS C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
17:56:50.0462 9428 UNS - ok
17:56:50.0515 9428 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\windows\System32\upnphost.dll
17:56:50.0522 9428 upnphost - ok
17:56:50.0554 9428 [ 19AD7990C0B67E48DAC5B26F99628223 ] usbccgp C:\windows\system32\DRIVERS\usbccgp.sys
17:56:50.0560 9428 usbccgp - ok
17:56:50.0576 9428 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\windows\system32\drivers\usbcir.sys
17:56:50.0583 9428 usbcir - ok
17:56:50.0588 9428 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\windows\system32\DRIVERS\usbehci.sys
17:56:50.0595 9428 usbehci - ok
17:56:50.0679 9428 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\windows\system32\DRIVERS\usbhub.sys
17:56:50.0686 9428 usbhub - ok
17:56:50.0689 9428 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\windows\system32\drivers\usbohci.sys
17:56:50.0690 9428 usbohci - ok
17:56:50.0694 9428 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\windows\system32\drivers\usbprint.sys
17:56:50.0695 9428 usbprint - ok
17:56:50.0721 9428 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\windows\system32\DRIVERS\USBSTOR.SYS
17:56:50.0721 9428 USBSTOR - ok
17:56:50.0724 9428 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\windows\system32\drivers\usbuhci.sys
17:56:50.0725 9428 usbuhci - ok
17:56:50.0770 9428 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\windows\system32\Drivers\usbvideo.sys
17:56:50.0784 9428 usbvideo - ok
17:56:50.0860 9428 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\windows\System32\uxsms.dll
17:56:50.0872 9428 UxSms - ok
17:56:50.0893 9428 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\windows\system32\lsass.exe
17:56:50.0894 9428 VaultSvc - ok
17:56:50.0904 9428 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\windows\system32\drivers\vdrvroot.sys
17:56:50.0909 9428 vdrvroot - ok
17:56:50.0924 9428 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\windows\System32\vds.exe
17:56:50.0932 9428 vds - ok
17:56:50.0953 9428 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\windows\system32\DRIVERS\vgapnp.sys
17:56:50.0954 9428 vga - ok
17:56:50.0957 9428 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\windows\System32\drivers\vga.sys
17:56:50.0961 9428 VgaSave - ok
17:56:50.0967 9428 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\windows\system32\drivers\vhdmp.sys
17:56:50.0968 9428 vhdmp - ok
17:56:50.0971 9428 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\windows\system32\drivers\viaide.sys
17:56:50.0977 9428 viaide - ok
17:56:51.0009 9428 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\windows\system32\drivers\volmgr.sys
17:56:51.0029 9428 volmgr - ok
17:56:51.0105 9428 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\windows\system32\drivers\volmgrx.sys
17:56:51.0112 9428 volmgrx - ok
17:56:51.0141 9428 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\windows\system32\drivers\volsnap.sys
17:56:51.0152 9428 volsnap - ok
17:56:51.0181 9428 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\windows\system32\drivers\vsmraid.sys
17:56:51.0182 9428 vsmraid - ok
17:56:51.0251 9428 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\windows\system32\vssvc.exe
17:56:51.0264 9428 VSS - ok
17:56:51.0267 9428 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\windows\system32\DRIVERS\vwifibus.sys
17:56:51.0275 9428 vwifibus - ok
17:56:51.0304 9428 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\windows\system32\DRIVERS\vwififlt.sys
17:56:51.0326 9428 vwififlt - ok
17:56:51.0349 9428 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\windows\system32\DRIVERS\vwifimp.sys
17:56:51.0355 9428 vwifimp - ok
17:56:51.0423 9428 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\windows\system32\w32time.dll
17:56:51.0446 9428 W32Time - ok
17:56:51.0474 9428 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\windows\system32\drivers\wacompen.sys
17:56:51.0474 9428 WacomPen - ok
17:56:51.0510 9428 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\windows\system32\DRIVERS\wanarp.sys
17:56:51.0526 9428 WANARP - ok
17:56:51.0531 9428 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\windows\system32\DRIVERS\wanarp.sys
17:56:51.0533 9428 Wanarpv6 - ok
17:56:51.0594 9428 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\windows\system32\Wat\WatAdminSvc.exe
17:56:51.0607 9428 WatAdminSvc - ok
17:56:51.0655 9428 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\windows\system32\wbengine.exe
17:56:51.0667 9428 wbengine - ok
17:56:51.0685 9428 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\windows\System32\wbiosrvc.dll
17:56:51.0692 9428 WbioSrvc - ok
17:56:51.0703 9428 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\windows\System32\wcncsvc.dll
17:56:51.0711 9428 wcncsvc - ok
17:56:51.0753 9428 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
17:56:51.0758 9428 WcsPlugInService - ok
17:56:51.0793 9428 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\windows\system32\drivers\wd.sys
17:56:51.0793 9428 Wd - ok
17:56:51.0875 9428 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\windows\system32\drivers\Wdf01000.sys
17:56:51.0884 9428 Wdf01000 - ok
17:56:51.0888 9428 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\windows\system32\wdi.dll
17:56:51.0895 9428 WdiServiceHost - ok
17:56:51.0899 9428 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\windows\system32\wdi.dll
17:56:51.0900 9428 WdiSystemHost - ok
17:56:51.0929 9428 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\windows\System32\webclnt.dll
17:56:51.0937 9428 WebClient - ok
17:56:51.0968 9428 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\windows\system32\wecsvc.dll
17:56:51.0976 9428 Wecsvc - ok
17:56:52.0013 9428 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\windows\System32\wercplsupport.dll
17:56:52.0019 9428 wercplsupport - ok
17:56:52.0105 9428 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\windows\System32\WerSvc.dll
17:56:52.0111 9428 WerSvc - ok
17:56:52.0172 9428 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\windows\system32\DRIVERS\wfplwf.sys
17:56:52.0178 9428 WfpLwf - ok
17:56:52.0263 9428 [ B14EF15BD757FA488F9C970EEE9C0D35 ] WimFltr C:\windows\system32\DRIVERS\wimfltr.sys
17:56:52.0267 9428 WimFltr - ok
17:56:52.0285 9428 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\windows\system32\drivers\wimmount.sys
17:56:52.0287 9428 WIMMount - ok
17:56:52.0322 9428 WinDefend - ok
17:56:52.0355 9428 WinHttpAutoProxySvc - ok
17:56:52.0501 9428 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\windows\system32\wbem\WMIsvc.dll
17:56:52.0509 9428 Winmgmt - ok
17:56:52.0567 9428 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\windows\system32\WsmSvc.dll
17:56:52.0602 9428 WinRM - ok
17:56:52.0648 9428 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\windows\System32\wlansvc.dll
17:56:52.0658 9428 Wlansvc - ok
17:56:52.0672 9428 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\windows\system32\DRIVERS\wmiacpi.sys
17:56:52.0677 9428 WmiAcpi - ok
17:56:52.0708 9428 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\windows\system32\wbem\WmiApSrv.exe
17:56:52.0716 9428 wmiApSrv - ok
17:56:52.0762 9428 WMPNetworkSvc - ok
17:56:52.0777 9428 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\windows\System32\wpcsvc.dll
17:56:52.0782 9428 WPCSvc - ok
17:56:52.0786 9428 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\windows\system32\wpdbusenum.dll
17:56:52.0797 9428 WPDBusEnum - ok
17:56:52.0827 9428 [ 5C123D0266A85DC828B4DD638CBD6968 ] WPS C:\windows\system32\drivers\wpsdrvnt.sys
17:56:52.0832 9428 WPS - ok
17:56:52.0871 9428 [ 49B9FA407586503D27D17DBDEAEAC970 ] WpsHelper C:\windows\system32\drivers\WpsHelper.sys
17:56:52.0879 9428 WpsHelper - ok
17:56:52.0906 9428 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\windows\system32\drivers\ws2ifsl.sys
17:56:52.0911 9428 ws2ifsl - ok
17:56:52.0921 9428 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\windows\System32\wscsvc.dll
17:56:52.0929 9428 wscsvc - ok
17:56:52.0932 9428 WSearch - ok
17:56:53.0002 9428 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\windows\system32\wuaueng.dll
17:56:53.0028 9428 wuauserv - ok
17:56:53.0059 9428 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\windows\system32\drivers\WudfPf.sys
17:56:53.0064 9428 WudfPf - ok
17:56:53.0099 9428 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\windows\system32\DRIVERS\WUDFRd.sys
17:56:53.0101 9428 WUDFRd - ok
17:56:53.0137 9428 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\windows\System32\WUDFSvc.dll
17:56:53.0164 9428 wudfsvc - ok
17:56:53.0187 9428 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\windows\System32\wwansvc.dll
17:56:53.0195 9428 WwanSvc - ok
17:56:53.0250 9428 ================ Scan global ===============================
17:56:53.0278 9428 [ BA0CD8C393E8C9F83354106093832C7B ] C:\windows\system32\basesrv.dll
17:56:53.0314 9428 [ 72CC564BBC70DE268784BCE91EB8A28F ] C:\windows\system32\winsrv.dll
17:56:53.0324 9428 [ 72CC564BBC70DE268784BCE91EB8A28F ] C:\windows\system32\winsrv.dll
17:56:53.0348 9428 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\windows\system32\sxssrv.dll
17:56:53.0388 9428 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\windows\system32\services.exe
17:56:53.0396 9428 [Global] - ok
17:56:53.0396 9428 ================ Scan MBR ==================================
17:56:53.0416 9428 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
17:56:53.0558 9428 \Device\Harddisk0\DR0 - ok
17:56:53.0558 9428 ================ Scan VBR ==================================
17:56:53.0561 9428 [ B4A651EA79A9998884DA67ECFFB5E2E7 ] \Device\Harddisk0\DR0\Partition1
17:56:53.0562 9428 \Device\Harddisk0\DR0\Partition1 - ok
17:56:53.0576 9428 [ 76FB70B491DC4ADD2790CDD69A4AAAE4 ] \Device\Harddisk0\DR0\Partition2
17:56:53.0577 9428 \Device\Harddisk0\DR0\Partition2 - ok
17:56:53.0578 9428 ============================================================
17:56:53.0578 9428 Scan finished
17:56:53.0578 9428 ============================================================
17:56:53.0591 9420 Detected object count: 0
17:56:53.0591 9420 Actual detected object count: 0
patndoris
It looks like the infection you had before has indeed been cleared. When you say the system is slow at boot time as compared to what it used to be, how slow are we talking? 30 seconds slower or minutes slower? You appear to have a quad core 64 bit system which should be pretty zippy.
Keep in mind though, that if Windows was reinstalled, you will need to install all the updates that have happened since the version of Windows that was reinstalled (in this case Service Pack 1 for Windows 7). Updates build upon each other, so you have to install them, reboot if needed then let the system check again for more updates and do the process all over again until no more updates are needed. That process can take quite awhile depending on what updates are needed for your particular machine. Any time you have to reformat and reinstall Windows, it's not a quick process. It's possible that the Windows updates are what are downloading when you are booting the machine and that's what's slowing things down. Have you noticed that you've been getting any notifications about this? You can always go to control panel and Windows Updates and see what shows there.
Why don't you go ahead and run me a fresh DDS log and I'll take a look and just make sure everything looks ok. I suspect it will, but it can't hurt to take a peek at it.
Meeko
My PC used to reboot at around 2-3 minutes now it's taking around 6+ minutes. I'm not too sure what my aunt's friend did to the computer (I wasn't there) but it seems like he wiped it. Usually when my computer gets wiped I have to put all my music back into playlists but I didn't have to do that this time. He kept my files. The only thing I had to re-download was Java & Itunes.
Windows Updates:
Says there are 3 optional updates available.
DDS log:
.
==== Installed Programs ======================
.
Adobe AIR
Adobe Reader X (10.1.4) MUI
Advanced Audio FX Engine
Apple Application Support
Apple Software Update
Bejeweled 2 Deluxe
Blackhawk Striker 2
Bounce Symphony
Build-a-lot 2
Cake Mania
Chuzzle Deluxe
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Dell Getting Started Guide
Dell Home Systems Service Agreement
Dell MusicStage
Dell PhotoStage
Dell Product Registration
Dell VideoStage
Dell Webcam Central
Diner Dash 2 Restaurant Rescue
Dora's World Adventure
Escape Whisper Valley ™
Farm Frenzy
FATE
Final Drive Fury
Final Drive Nitro
High-Definition Video Playback
IDT Audio
Intel PROSet Wireless
Intel® Control Center
Intel® Management Engine Components
Intel® Processor Graphics
Intel® Rapid Storage Technology
Intel® WiDi
Java 7 Update 10
Java Auto Updater
Jewel Quest
Jewel Quest Solitaire 2
LiveUpdate 3.3 (Symantec Corporation)
Luxor
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2010
Microsoft Office Home and Student 2010
Microsoft Office OneNote MUI (English) 2010
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2010
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Single Image 2010
Microsoft Office Word MUI (English) 2010
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Mozilla Firefox 17.0.1 (x86 en-US)
Mozilla Maintenance Service
Namco All-Stars PAC-MAN
Nero 10 Movie ThemePack Basic
Nero Control Center 10
Nero ControlCenter 10 Help (CHM)
Nero Core Components 10
Penguins!
Plants vs. Zombies - Game of the Year
PlayReady PC Runtime x86
Poker Superstars III
Polar Bowler
Polar Golfer
Realtek Ethernet Controller Driver
Realtek USB 2.0 Card Reader
Samantha Swift
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft Excel 2010 (KB2597126) 32-Bit Edition
Security Update for Microsoft InfoPath 2010 (KB2687417) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553091)
Security Update for Microsoft Office 2010 (KB2553096)
Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2597986) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687501) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687510) 32-Bit Edition
Security Update for Microsoft PowerPoint 2010 (KB2553185) 32-Bit Edition
Security Update for Microsoft Visio Viewer 2010 (KB2598287) 32-Bit Edition
Security Update for Microsoft Word 2010 (KB2760410) 32-Bit Edition
Skype™ 5.10
SwiftKit
SyncUP
TI USB 3.0 Host Controller Driver
TI USB3 Host Driver
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2687277) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
Update Installer for WildTangent Games App
Virtual Villagers 4 - The Tree of Life
Wedding Dash - Ready, Aim, Love!
WildTangent Games
WildTangent Games App (Dell Games)
Windows Live Mesh ActiveX Control for Remote Connections
Zuma Deluxe
.
==== End Of File ===========================
Meeko
Oops sorry, I don't know how that happened.
DDS log:
.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by [removed] at 18:14:57.37 on Fri 12/21/2012
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.10.2
.
============== Running Processes ===============
.
C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\Rtvscan.exe
C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\ProtectionUtilSurrogate.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\SwiftKit\SwiftKit-RS.exe
C:\Program Files (x86)\Java\jre7\bin\jp2launcher.exe
C:\Program Files (x86)\Java\jre7\bin\java.exe
C:\Users\Angel\Desktop\dds.scr
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120228042334.dll
BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
mRun: [Dell Registration] C:\Program Files (x86)\System Registration\prodreg.exe /boot
mRun: [ccApp] "C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe"
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
BHO-X64: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20120228042334.dll
BHO-X64: scriptproxy - No File
BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
BHO-X64: URLRedirectionBHO - No File
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
mRun-x64: [IgfxTray] C:\Windows\system32\igfxtray.exe
mRun-x64: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
mRun-x64: [Persistence] C:\Windows\system32\igfxpers.exe
mRun-x64: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
mRun-x64: [Apoint] C:\Program Files\DellTPad\Apoint.exe
mRun-x64: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
mRun-x64: [IntelPAN] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray
mRun-x64: [BTMTrayAgent] rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Angel\AppData\Roaming\Mozilla\Firefox\Profiles\eirwg56j.default\
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
FF - plugin: C:\windows\SysWOW64\npDeployJava1.dll
FF - plugin: C:\windows\SysWOW64\npmproxy.dll
.
============= SERVICES / DRIVERS ===============
.
R? AdobeARMservice;Adobe Acrobat Update Service
R? AESTFilters;Andrea ST Filters Service
R? AMPPALP;Intelr Centrinor Wireless Bluetoothr 3.0 + High Speed Protocol
R? Bluetooth Device Monitor;Bluetooth Device Monitor
R? Bluetooth Media Service;Bluetooth Media Service
R? BTHSSecurityMgr;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Security Service
R? cfwids;McAfee Inc. cfwids
R? GamesAppService;GamesAppService
R? intaud_WaveExtensible;Intel WiDi Audio Device
R? McShield;McAfee McShield
R? mferkdet;McAfee Inc. mferkdet
R? MozillaMaintenance;Mozilla Maintenance Service
R? MyWiFiDHCPDNS;Wireless PAN DHCP Server
R? RdpVideoMiniport;Remote Desktop Video Miniport Driver
R? RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader
R? SkypeUpdate;Skype Updater
R? TsUsbFlt;TsUsbFlt
R? TsUsbGD;Remote Desktop Generic USB Device
R? TurboBoost;Intel® Turbo Boost Technology Monitor 2.0
R? WatAdminSvc;Windows Activation Technologies Service
S? AMPPAL;Intelr Centrinor Wireless Bluetoothr 3.0 + High Speed Virtual Adapter
S? AMPPALR3;Intelr Centrinor Wireless Bluetoothr 3.0 + High Speed Service
S? Bluetooth OBEX Service;Bluetooth OBEX Service
S? btmaudio;Intel Bluetooth Audio Service
S? btmaux;Intel Bluetooth Auxiliary Service
S? btmhsf;btmhsf
S? clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86
S? clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64
S? CtClsFlt;Creative Camera Class Upper Filter Driver
S? EraserUtilRebootDrv;EraserUtilRebootDrv
S? IAStorDataMgrSvc;Intel® Rapid Storage Technology
S? iBtFltCoex;iBtFltCoex
S? IntcDAud;Intel® Display Audio
S? iwdbus;IWD Bus Enumerator
S? MEIx64;Intel® Management Engine Interface
S? mfeavfk;McAfee Inc. mfeavfk
S? mfefire;McAfee Firewall Core Service
S? mfefirek;McAfee Inc. mfefirek
S? mfehidk;McAfee Inc. mfehidk
S? mfenlfk;McAfee NDIS Light Filter
S? mfevtp;McAfee Validation Trust Protection Service
S? mfewfpk;McAfee Inc. mfewfpk
S? NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit
S? osppsvc;Office Software Protection Platform
S? PxHlpa64;PxHlpa64
S? RTL8167;Realtek 8167 NT Driver
S? Symantec AntiVirus;Symantec Endpoint Protection
S? tihub3;TI USB3 Hub Service
S? tixhci;TI XHCI Service
S? TurboB;Turbo Boost UI Monitor driver
S? UNS;Intel® Management and Security Application User Notification Service
S? vwififlt;Virtual WiFi Filter Driver
S? vwifimp;Microsoft Virtual WiFi Miniport Service
.
=============== Created Last 30 ================
.
2012-12-21 22:25:56 ——– d—–w- C:\Users\Angel\jagexcache
2012-12-21 22:20:01 859072 —-a-w- C:\windows\SysWow64\npDeployJava1.dll
2012-12-21 22:19:06 95184 —-a-w- C:\windows\SysWow64\WindowsAccessBridge-32.dll
2012-12-21 22:14:41 ——– d—–w- C:\Users\Angel\AppData\Local\Apple Computer
2012-12-21 22:14:33 33240 —-a-w- C:\windows\System32\drivers\GEARAspiWDM.sys
2012-12-21 22:13:58 ——– d—–w- C:\Program Files\iPod
2012-12-21 22:13:56 ——– d—–w- C:\Program Files\iTunes
2012-12-21 22:13:56 ——– d—–w- C:\Program Files (x86)\iTunes
2012-12-21 22:13:56 ——– d—–w- C:\PROGRA~3\34BE82C4-E596-4e99-A191-52C6199EBF69
2012-12-21 22:13:18 ——– d—–w- C:\Users\Angel\AppData\Local\Apple
2012-12-21 22:12:45 ——– d—–w- C:\Program Files\Bonjour
2012-12-21 22:12:45 ——– d—–w- C:\Program Files (x86)\Bonjour
2012-12-21 21:37:56 203976 —-a-w- C:\windows\SysWow64\RICHTX32.OCX
2012-12-21 21:37:56 117507 —-a-w- C:\windows\SysWow64\msinet.ocx
2012-12-21 21:37:56 109248 —-a-w- C:\windows\SysWow64\MSWINSCK.OCX
2012-12-21 21:37:56 ——– d—–w- C:\PROGRA~3\SwiftKit
2012-12-21 21:37:53 ——– d—–w- C:\Program Files (x86)\SwiftKit
2012-12-21 21:35:27 ——– d—–w- C:\Users\Angel\AppData\Local\Mozilla
2012-12-21 21:26:35 ——– d—–w- C:\Program Files\AVAST Software
2012-12-21 21:26:35 ——– d—–w- C:\PROGRA~3\AVAST Software
2012-12-21 21:17:26 ——– d—–w- C:\Users\Angel\AppData\Roaming\IDT
2012-12-21 21:03:41 34304 —-a-w- C:\windows\SysWow64\atmlib.dll
2012-12-21 21:03:39 46080 —-a-w- C:\windows\System32\atmlib.dll
2012-12-21 21:03:31 367616 —-a-w- C:\windows\System32\atmfd.dll
2012-12-21 21:03:25 295424 —-a-w- C:\windows\SysWow64\atmfd.dll
2012-12-21 21:00:13 ——– d—–w- C:\PROGRA~3\PCDr
2012-12-21 00:10:54 ——– d—–w- C:\Users\Angel\AppData\Local\Nero_AG
2012-12-21 00:10:46 ——– d—–w- C:\Users\Angel\AppData\Local\Nero
2012-12-20 12:36:27 ——– d—–w- C:\windows\SysWow64\Wat
2012-12-20 12:36:27 ——– d—–w- C:\windows\System32\Wat
2012-12-20 12:36:15 ——– d—–r- C:\Program Files (x86)\Skype
2012-12-20 06:18:38 2560 —-a-w- C:\windows\System32\drivers\en-US\wdf01000.sys.mui
2012-12-20 06:18:37 9728 —-a-w- C:\windows\System32\Wdfres.dll
2012-12-20 06:18:37 785512 —-a-w- C:\windows\System32\drivers\Wdf01000.sys
2012-12-20 06:18:37 54376 —-a-w- C:\windows\System32\drivers\WdfLdr.sys
2012-12-20 06:00:59 2382848 —-a-w- C:\windows\SysWow64\mshtml.tlb
2012-12-20 05:56:17 87040 —-a-w- C:\windows\System32\drivers\WUDFPf.sys
2012-12-20 05:56:17 198656 —-a-w- C:\windows\System32\drivers\WUDFRd.sys
2012-12-20 05:56:16 84992 —-a-w- C:\windows\System32\WUDFSvc.dll
2012-12-20 05:56:16 194048 —-a-w- C:\windows\System32\WUDFPlatform.dll
2012-12-20 05:56:14 744448 —-a-w- C:\windows\System32\WUDFx.dll
2012-12-20 05:56:14 45056 —-a-w- C:\windows\System32\WUDFCoinstaller.dll
2012-12-20 05:56:14 229888 —-a-w- C:\windows\System32\WUDFHost.exe
2012-12-20 05:53:55 81408 —-a-w- C:\windows\System32\imagehlp.dll
2012-12-20 05:53:55 23408 —-a-w- C:\windows\System32\drivers\fs_rec.sys
2012-12-20 05:53:55 159232 —-a-w- C:\windows\SysWow64\imagehlp.dll
2012-12-20 05:53:54 5120 —-a-w- C:\windows\SysWow64\wmi.dll
2012-12-20 05:53:54 5120 —-a-w- C:\windows\System32\wmi.dll
2012-12-20 05:43:42 1659760 —-a-w- C:\windows\System32\drivers\ntfs.sys
2012-12-20 05:42:58 362496 —-a-w- C:\windows\System32\wow64win.dll
2012-12-20 05:41:55 509952 —-a-w- C:\windows\System32\ntshrui.dll
2012-12-20 05:40:57 1544704 —-a-w- C:\windows\System32\DWrite.dll
2012-12-20 05:39:59 209920 —-a-w- C:\windows\System32\profsvc.dll
2012-12-20 05:22:01 ——– d—–w- C:\Users\Angel\AppData\Roaming\Roxio Log Files
2012-12-20 05:21:22 ——– d—–w- C:\Users\Angel\AppData\Local\Symantec
2012-12-20 05:21:20 233120 —-a-w- C:\windows\System32\drivers\wpshelper.sys
2012-12-20 05:20:04 173616 —-a-w- C:\windows\System32\drivers\SYMEVENT64x86.SYS
2012-12-20 05:19:57 ——– d—–w- C:\Program Files\Symantec
2012-12-20 05:19:47 348160 —-a-w- C:\windows\SysWow64\MSVCR71.DLL
2012-12-20 05:19:46 503808 —-a-w- C:\windows\SysWow64\MSVCP71.DLL
2012-12-20 05:19:46 1060864 —-a-w- C:\windows\SysWow64\MFC71.DLL
2012-12-20 05:19:37 ——– d—–w- C:\Program Files\Common Files\Symantec Shared
2012-12-20 05:19:37 ——– d—–w- C:\Program Files (x86)\Symantec
2012-12-20 05:19:37 ——– d—–w- C:\Program Files (x86)\Common Files\Symantec Shared
2012-12-20 05:19:37 ——– d—–w- C:\PROGRA~3\Symantec
2012-12-20 05:07:02 ——– d—–w- C:\windows\PCHEALTH
2012-12-20 05:04:48 ——– d—–w- C:\Program Files (x86)\Microsoft Analysis Services
2012-12-20 05:04:33 ——– d—–w- C:\Users\Angel\AppData\Local\Microsoft Help
2012-12-20 04:30:51 826880 —-a-w- C:\windows\SysWow64\rdpcore.dll
2012-12-20 04:30:51 23552 —-a-w- C:\windows\System32\drivers\tdtcp.sys
2012-12-20 04:30:51 1031680 —-a-w- C:\windows\System32\rdpcore.dll
2012-12-20 04:27:12 2622464 —-a-w- C:\windows\System32\wucltux.dll
2012-12-20 04:27:06 99840 —-a-w- C:\windows\System32\wudriver.dll
2012-12-20 04:27:05 ——– d—–w- C:\Users\Angel\AppData\Local\Adobe
2012-12-20 04:26:57 36864 —-a-w- C:\windows\System32\wuapp.exe
2012-12-20 04:26:57 186752 —-a-w- C:\windows\System32\wuwebv.dll
2012-12-20 04:25:46 ——– d—–w- C:\Users\Angel\AppData\Local\Diagnostics
2012-12-20 04:24:17 ——– d—–w- C:\Users\Angel\AppData\Local\Dell
2012-12-20 04:23:41 ——– d—–w- C:\Users\Angel\AppData\Roaming\Dell
2012-12-20 04:23:34 ——– d—–w- C:\Users\Angel\AppData\Roaming\Intel Corporation
2012-12-20 04:23:31 ——– d—–w- C:\Users\Angel\AppData\Roaming\Fingertapps
2012-12-20 04:22:42 ——– d-sh–w- C:\$RECYCLE.BIN
2012-12-20 04:22:40 ——– d—–w- C:\Users\Angel\AppData\Local\VirtualStore
2012-12-20 03:57:24 ——– d—–w- C:\windows\SMINST
2012-11-30 10:45:49 1645320 —-a-w- C:\windows\SysWow64\gdiplus.dll
.
==================== Find3M ====================
.
2012-12-21 22:18:52 779704 —-a-w- C:\windows\SysWow64\deployJava1.dll
2012-11-30 10:45:49 152848 —-a-w- C:\windows\SysWow64\comdlg32.ocx
2012-11-22 03:26:40 3149824 —-a-w- C:\windows\System32\win32k.sys
2012-11-14 06:11:44 2312704 —-a-w- C:\windows\System32\jscript9.dll
2012-11-14 06:04:11 1392128 —-a-w- C:\windows\System32\wininet.dll
2012-11-14 06:02:49 1494528 —-a-w- C:\windows\System32\inetcpl.cpl
2012-11-14 05:57:46 599040 —-a-w- C:\windows\System32\vbscript.dll
2012-11-14 05:57:35 173056 —-a-w- C:\windows\System32\ieUnatt.exe
2012-11-14 05:52:40 2382848 —-a-w- C:\windows\System32\mshtml.tlb
2012-11-14 02:09:22 1800704 —-a-w- C:\windows\SysWow64\jscript9.dll
2012-11-14 01:58:15 1427968 —-a-w- C:\windows\SysWow64\inetcpl.cpl
2012-11-14 01:57:37 1129472 —-a-w- C:\windows\SysWow64\wininet.dll
2012-11-14 01:49:25 142848 —-a-w- C:\windows\SysWow64\ieUnatt.exe
2012-11-14 01:48:27 420864 —-a-w- C:\windows\SysWow64\vbscript.dll
2012-11-09 05:45:09 2048 —-a-w- C:\windows\System32\tzres.dll
2012-11-09 04:42:49 2048 —-a-w- C:\windows\SysWow64\tzres.dll
2012-11-02 05:59:11 478208 —-a-w- C:\windows\System32\dpnet.dll
2012-11-02 05:11:31 376832 —-a-w- C:\windows\SysWow64\dpnet.dll
2012-10-16 08:38:37 135168 —-a-w- C:\windows\apppatch\AppPatch64\AcXtrnal.dll
2012-10-16 08:38:34 350208 —-a-w- C:\windows\apppatch\AppPatch64\AcLayers.dll
2012-10-16 07:39:52 561664 —-a-w- C:\windows\apppatch\AcLayers.dll
2012-10-09 18:17:13 55296 —-a-w- C:\windows\System32\dhcpcsvc6.dll
2012-10-09 18:17:13 226816 —-a-w- C:\windows\System32\dhcpcore6.dll
2012-10-09 17:40:31 44032 —-a-w- C:\windows\SysWow64\dhcpcsvc6.dll
2012-10-09 17:40:31 193536 —-a-w- C:\windows\SysWow64\dhcpcore6.dll
2012-10-04 17:46:15 243200 —-a-w- C:\windows\System32\wow64.dll
2012-10-04 17:46:15 13312 —-a-w- C:\windows\System32\wow64cpu.dll
2012-10-04 17:45:55 215040 —-a-w- C:\windows\System32\winsrv.dll
2012-10-04 17:43:28 16384 —-a-w- C:\windows\System32\ntvdm64.dll
2012-10-04 17:41:16 424960 —-a-w- C:\windows\System32\KernelBase.dll
2012-10-04 16:47:41 5120 —-a-w- C:\windows\SysWow64\wow32.dll
2012-10-04 16:47:41 274944 —-a-w- C:\windows\SysWow64\KernelBase.dll
2012-10-04 15:21:55 338432 —-a-w- C:\windows\System32\conhost.exe
2012-10-04 14:46:46 7680 —-a-w- C:\windows\SysWow64\instnm.exe
2012-10-04 14:46:46 25600 —-a-w- C:\windows\SysWow64\setup16.exe
2012-10-04 14:46:44 14336 —-a-w- C:\windows\SysWow64\ntvdm64.dll
2012-10-04 14:46:43 2048 —-a-w- C:\windows\SysWow64\user.exe
2012-10-04 14:41:50 6144 —ha-w- C:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2012-10-04 14:41:50 4608 —ha-w- C:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2012-10-04 14:41:50 3584 —ha-w- C:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2012-10-04 14:41:50 3072 —ha-w- C:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2012-10-03 17:56:54 1914248 —-a-w- C:\windows\System32\drivers\tcpip.sys
2012-10-03 17:44:21 70656 —-a-w- C:\windows\System32\nlaapi.dll
2012-10-03 17:44:21 303104 —-a-w- C:\windows\System32\nlasvc.dll
2012-10-03 17:44:17 246272 —-a-w- C:\windows\System32\netcorehc.dll
2012-10-03 17:44:17 18944 —-a-w- C:\windows\System32\netevent.dll
2012-10-03 17:44:16 216576 —-a-w- C:\windows\System32\ncsi.dll
2012-10-03 17:42:16 569344 —-a-w- C:\windows\System32\iphlpsvc.dll
2012-10-03 16:42:24 18944 —-a-w- C:\windows\SysWow64\netevent.dll
2012-10-03 16:42:24 175104 —-a-w- C:\windows\SysWow64\netcorehc.dll
2012-10-03 16:42:23 156672 —-a-w- C:\windows\SysWow64\ncsi.dll
2012-10-03 16:07:26 45568 —-a-w- C:\windows\System32\drivers\tcpipreg.sys
2012-09-25 22:47:43 78336 —-a-w- C:\windows\SysWow64\synceng.dll
2012-09-25 22:46:17 95744 —-a-w- C:\windows\System32\synceng.dll
.
============= FINISH: 18:15:11.62 ===============
patndoris
OK, let's start with this:
These folders would indicate that you have (or have had) Avast installed on the machine. Currently it appears Symantec Endpoint is your Antivirus Protection. Having more than one AV program (even if only one is running) on the machine can cause conflicts. Please go to Programs and Features in Control Panel and see if Avast appears. If it does, please uninstall it. If not, please go ahead and manually navigate to these folders and delete them. (Let me know if you need instructions on how to do this.)
After doing this, reboot the computer and then see if there is any improvement in the boot time and let me know.
I'm not entirely comfortable in what I'm seeing in the DDS log. It looks several of your drivers/services may have some issues going on. But let's take it one step at a time. Let me know what happens after the folders are deleted and we'll take it from there.
C:\Program Files\AVAST Software
C:\PROGRA~3\AVAST Software
These folders would indicate that you have (or have had) Avast installed on the machine. Currently it appears Symantec Endpoint is your Antivirus Protection. Having more than one AV program (even if only one is running) on the machine can cause conflicts. Please go to Programs and Features in Control Panel and see if Avast appears. If it does, please uninstall it. If not, please go ahead and manually navigate to these folders and delete them. (Let me know if you need instructions on how to do this.)
After doing this, reboot the computer and then see if there is any improvement in the boot time and let me know.
I'm not entirely comfortable in what I'm seeing in the DDS log. It looks several of your drivers/services may have some issues going on. But let's take it one step at a time. Let me know what happens after the folders are deleted and we'll take it from there.
Meeko
First thing I did when I got my laptop back was download Avast so I have an antivirus running. I didn't know he had already installed one in, so I unintalled Avast; Avast is not showing up under programs. And I'm not sure how to navigate to folders.
-Boot time is still really slow.
Meeko
I'm also having a little bit of trouble downloading adobe flash player. I'll get the file to .exe and then it won't download. I'm not too sure what's going on with that.
It's doing this for me:
[external image: Posted Image]
It's doing this for me:
[external image: Posted Image]
Meeko
I got rid of the message from above, but I realized the problem was I can't click on the .exe file.
[external image: Posted Image]
I don't know if this is a problem on my end or a problem with Adobe…
[external image: Posted Image]
I don't know if this is a problem on my end or a problem with Adobe…
Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI