This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

for Jeff - Need your expertise again! [Solved]

31 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi,

We still have a couple that want to hang around so let's remove them.

Run a new scan with DDS and post that please.



Here it is:

18:40:07.0003 1128 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
18:40:07.0332 1128 ============================================================
18:40:07.0332 1128 Current date / time: 2013/01/29 18:40:07.0332
18:40:07.0332 1128 SystemInfo:
18:40:07.0332 1128
18:40:07.0332 1128 OS Version: 6.1.7601 ServicePack: 1.0
18:40:07.0332 1128 Product type: Workstation
18:40:07.0332 1128 ComputerName: DARLENES-PC
18:40:07.0333 1128 UserName: DARLENE'S
18:40:07.0333 1128 Windows directory: C:\Windows
18:40:07.0333 1128 System windows directory: C:\Windows
18:40:07.0333 1128 Running under WOW64
18:40:07.0333 1128 Processor architecture: Intel x64
18:40:07.0333 1128 Number of processors: 4
18:40:07.0333 1128 Page size: 0x1000
18:40:07.0333 1128 Boot type: Normal boot
18:40:07.0333 1128 ============================================================
18:40:08.0806 1128 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
18:40:08.0813 1128 ============================================================
18:40:08.0813 1128 \Device\Harddisk0\DR0:
18:40:08.0813 1128 MBR partitions:
18:40:08.0813 1128 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1801F5F, BlocksNum 0x32FCD
18:40:08.0813 1128 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1834F2C, BlocksNum 0x38B50904
18:40:08.0813 1128 ============================================================
18:40:08.0851 1128 C: <-> \Device\Harddisk0\DR0\Partition2
18:40:08.0851 1128 ============================================================
18:40:08.0851 1128 Initialize success
18:40:08.0851 1128 ============================================================
18:40:15.0515 3544 ============================================================
18:40:15.0515 3544 Scan started
18:40:15.0515 3544 Mode: Manual;
18:40:15.0515 3544 ============================================================
18:40:19.0919 3544 ================ Scan system memory ========================
18:40:19.0919 3544 System memory - ok
18:40:19.0920 3544 ================ Scan services =============================
18:40:20.0210 3544 !SASCORE - ok
18:40:20.0403 3544 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
18:40:20.0421 3544 1394ohci - ok
18:40:20.0498 3544 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
18:40:20.0523 3544 ACPI - ok
18:40:20.0578 3544 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
18:40:20.0591 3544 AcpiPmi - ok
18:40:20.0772 3544 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
18:40:20.0786 3544 AdobeARMservice - ok
18:40:20.0951 3544 [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
18:40:20.0974 3544 AdobeFlashPlayerUpdateSvc - ok
18:40:21.0020 3544 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
18:40:21.0049 3544 adp94xx - ok
18:40:21.0079 3544 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
18:40:21.0119 3544 adpahci - ok
18:40:21.0136 3544 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
18:40:21.0172 3544 adpu320 - ok
18:40:21.0196 3544 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
18:40:21.0197 3544 AeLookupSvc - ok
18:40:21.0285 3544 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
18:40:21.0311 3544 AFD - ok
18:40:21.0375 3544 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
18:40:21.0386 3544 agp440 - ok
18:40:21.0433 3544 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
18:40:21.0446 3544 ALG - ok
18:40:21.0482 3544 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
18:40:21.0492 3544 aliide - ok
18:40:21.0502 3544 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
18:40:21.0512 3544 amdide - ok
18:40:21.0536 3544 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
18:40:21.0547 3544 AmdK8 - ok
18:40:21.0563 3544 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
18:40:21.0573 3544 AmdPPM - ok
18:40:21.0629 3544 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
18:40:21.0643 3544 amdsata - ok
18:40:21.0680 3544 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
18:40:21.0697 3544 amdsbs - ok
18:40:21.0708 3544 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
18:40:21.0717 3544 amdxata - ok
18:40:21.0798 3544 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
18:40:21.0810 3544 AppID - ok
18:40:21.0840 3544 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
18:40:21.0848 3544 AppIDSvc - ok
18:40:21.0905 3544 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
18:40:21.0915 3544 Appinfo - ok
18:40:21.0968 3544 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
18:40:21.0980 3544 arc - ok
18:40:21.0998 3544 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
18:40:22.0010 3544 arcsas - ok
18:40:22.0182 3544 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
18:40:22.0231 3544 aspnet_state - ok
18:40:22.0274 3544 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
18:40:22.0284 3544 AsyncMac - ok
18:40:22.0345 3544 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
18:40:22.0355 3544 atapi - ok
18:40:22.0409 3544 [ D6CAD7E5B05055BB8226BDCB1644DA27 ] athr C:\Windows\system32\DRIVERS\athrx.sys
18:40:22.0496 3544 athr - ok
18:40:22.0659 3544 [ 3EFD964D52221360AF0673CD61C2F4F5 ] atikmdag C:\Windows\system32\drivers\atikmdag.sys
18:40:23.0079 3544 atikmdag - ok
18:40:23.0212 3544 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
18:40:23.0238 3544 AudioEndpointBuilder - ok
18:40:23.0253 3544 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
18:40:23.0257 3544 AudioSrv - ok
18:40:23.0345 3544 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
18:40:23.0361 3544 AxInstSV - ok
18:40:23.0425 3544 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
18:40:23.0449 3544 b06bdrv - ok
18:40:23.0494 3544 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
18:40:23.0515 3544 b57nd60a - ok
18:40:23.0635 3544 [ 825F81A6F7DD073509DB101F0BA6DC59 ] BBSvc C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE
18:40:23.0659 3544 BBSvc - ok
18:40:23.0687 3544 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
18:40:23.0700 3544 BDESVC - ok
18:40:23.0726 3544 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
18:40:23.0734 3544 Beep - ok
18:40:23.0820 3544 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
18:40:23.0865 3544 BFE - ok
18:40:23.0921 3544 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\system32\qmgr.dll
18:40:24.0017 3544 BITS - ok
18:40:24.0075 3544 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
18:40:24.0086 3544 blbdrive - ok
18:40:24.0196 3544 [ 5AB58C337AC65837FE404462AD6265AB ] Bonjour Service C:\Program Files (x86)\Bonjour\mDNSResponder.exe
18:40:24.0221 3544 Bonjour Service - ok
18:40:24.0284 3544 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
18:40:24.0300 3544 bowser - ok
18:40:24.0342 3544 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
18:40:24.0351 3544 BrFiltLo - ok
18:40:24.0363 3544 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
18:40:24.0371 3544 BrFiltUp - ok
18:40:24.0402 3544 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys
18:40:24.0416 3544 BridgeMP - ok
18:40:24.0502 3544 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
18:40:24.0516 3544 Browser - ok
18:40:24.0539 3544 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
18:40:24.0562 3544 Brserid - ok
18:40:24.0576 3544 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
18:40:24.0587 3544 BrSerWdm - ok
18:40:24.0614 3544 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
18:40:24.0623 3544 BrUsbMdm - ok
18:40:24.0634 3544 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
18:40:24.0643 3544 BrUsbSer - ok
18:40:24.0663 3544 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
18:40:24.0677 3544 BTHMODEM - ok
18:40:24.0725 3544 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
18:40:24.0737 3544 bthserv - ok
18:40:24.0780 3544 catchme - ok
18:40:24.0815 3544 [ D1787E11C6A0078DDEAF8CF3EE2AB293 ] CAXHWAZL C:\Windows\system32\DRIVERS\CAXHWAZL.sys
18:40:24.0836 3544 CAXHWAZL - ok
18:40:24.0853 3544 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
18:40:24.0866 3544 cdfs - ok
18:40:24.0946 3544 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
18:40:24.0961 3544 cdrom - ok
18:40:25.0042 3544 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
18:40:25.0056 3544 CertPropSvc - ok
18:40:25.0085 3544 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
18:40:25.0096 3544 circlass - ok
18:40:25.0127 3544 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
18:40:25.0148 3544 CLFS - ok
18:40:25.0226 3544 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:40:25.0242 3544 clr_optimization_v2.0.50727_32 - ok
18:40:25.0276 3544 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
18:40:25.0292 3544 clr_optimization_v2.0.50727_64 - ok
18:40:25.0414 3544 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:40:25.0601 3544 clr_optimization_v4.0.30319_32 - ok
18:40:25.0613 3544 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
18:40:25.0701 3544 clr_optimization_v4.0.30319_64 - ok
18:40:25.0749 3544 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
18:40:25.0758 3544 CmBatt - ok
18:40:25.0811 3544 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
18:40:25.0820 3544 cmdide - ok
18:40:25.0892 3544 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
18:40:25.0916 3544 CNG - ok
18:40:25.0939 3544 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
18:40:25.0949 3544 Compbatt - ok
18:40:26.0004 3544 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
18:40:26.0013 3544 CompositeBus - ok
18:40:26.0025 3544 COMSysApp - ok
18:40:26.0040 3544 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
18:40:26.0049 3544 crcdisk - ok
18:40:26.0117 3544 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
18:40:26.0133 3544 CryptSvc - ok
18:40:26.0191 3544 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
18:40:26.0199 3544 DcomLaunch - ok
18:40:26.0227 3544 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
18:40:26.0244 3544 defragsvc - ok
18:40:26.0301 3544 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
18:40:26.0315 3544 DfsC - ok
18:40:26.0381 3544 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
18:40:26.0398 3544 Dhcp - ok
18:40:26.0430 3544 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
18:40:26.0441 3544 discache - ok
18:40:26.0481 3544 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
18:40:26.0492 3544 Disk - ok
18:40:26.0579 3544 [ D5BCB77BE83CF99F508943945D46343D ] DKbFltr C:\Windows\SysWOW64\Drivers\DKbFltr.sys
18:40:26.0587 3544 DKbFltr - ok
18:40:26.0639 3544 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
18:40:26.0654 3544 Dnscache - ok
18:40:26.0756 3544 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
18:40:26.0773 3544 dot3svc - ok
18:40:26.0788 3544 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
18:40:26.0789 3544 DPS - ok
18:40:26.0836 3544 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
18:40:26.0845 3544 drmkaud - ok
18:40:26.0925 3544 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
18:40:26.0979 3544 DXGKrnl - ok
18:40:27.0011 3544 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
18:40:27.0024 3544 EapHost - ok
18:40:27.0104 3544 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
18:40:27.0315 3544 ebdrv - ok
18:40:27.0415 3544 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
18:40:27.0425 3544 EFS - ok
18:40:27.0532 3544 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
18:40:27.0580 3544 ehRecvr - ok
18:40:27.0628 3544 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
18:40:27.0643 3544 ehSched - ok
18:40:27.0681 3544 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
18:40:27.0707 3544 elxstor - ok
18:40:27.0834 3544 [ 8E910F796F5F30281CDD24ABA47DDEA2 ] ePowerSvc C:\Program Files\Gateway\Gateway Power Management\ePowerSvc.exe
18:40:27.0881 3544 ePowerSvc - ok
18:40:27.0950 3544 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
18:40:27.0960 3544 ErrDev - ok
18:40:28.0067 3544 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
18:40:28.0085 3544 EventSystem - ok
18:40:28.0117 3544 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
18:40:28.0133 3544 exfat - ok
18:40:28.0170 3544 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
18:40:28.0187 3544 fastfat - ok
18:40:28.0255 3544 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
18:40:28.0302 3544 Fax - ok
18:40:28.0316 3544 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
18:40:28.0326 3544 fdc - ok
18:40:28.0348 3544 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
18:40:28.0356 3544 fdPHost - ok
18:40:28.0362 3544 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
18:40:28.0371 3544 FDResPub - ok
18:40:28.0401 3544 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
18:40:28.0413 3544 FileInfo - ok
18:40:28.0431 3544 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
18:40:28.0442 3544 Filetrace - ok
18:40:28.0460 3544 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
18:40:28.0470 3544 flpydisk - ok
18:40:28.0528 3544 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
18:40:28.0548 3544 FltMgr - ok
18:40:28.0615 3544 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
18:40:28.0649 3544 FontCache - ok
18:40:28.0736 3544 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
18:40:28.0749 3544 FontCache3.0.0.0 - ok
18:40:28.0789 3544 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
18:40:28.0799 3544 FsDepends - ok
18:40:28.0899 3544 [ 07DA62C960DDCCC2D35836AEAB4FC578 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
18:40:28.0911 3544 fssfltr - ok
18:40:29.0070 3544 [ 28DDEEEC44E988657B732CF404D504CB ] fsssvc C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
18:40:29.0260 3544 fsssvc - ok
18:40:29.0334 3544 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
18:40:29.0343 3544 Fs_Rec - ok
18:40:29.0410 3544 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
18:40:29.0429 3544 fvevol - ok
18:40:29.0449 3544 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
18:40:29.0460 3544 gagp30kx - ok
18:40:29.0530 3544 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
18:40:29.0550 3544 gpsvc - ok
18:40:29.0631 3544 [ 816FD5A6F3C2F3D600900096632FC60E ] Greg_Service C:\Program Files (x86)\Gateway\Registration\GregHSRW.exe
18:40:29.0764 3544 Greg_Service - ok
18:40:29.0866 3544 [ B9893A68032A6D9ADDB5B98287C630F7 ] grmnusb C:\Windows\system32\drivers\grmnusb.sys
18:40:29.0875 3544 grmnusb - ok
18:40:29.0943 3544 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:40:29.0963 3544 gupdate - ok
18:40:30.0000 3544 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
18:40:30.0001 3544 gupdatem - ok
18:40:30.0063 3544 [ 5D4BC124FAAE6730AC002CDB67BF1A1C ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
18:40:30.0088 3544 gusvc - ok
18:40:30.0110 3544 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
18:40:30.0119 3544 hcw85cir - ok
18:40:30.0193 3544 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
18:40:30.0217 3544 HdAudAddService - ok
18:40:30.0241 3544 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
18:40:30.0255 3544 HDAudBus - ok
18:40:30.0292 3544 [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
18:40:30.0302 3544 HECIx64 - ok
18:40:30.0324 3544 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
18:40:30.0336 3544 HidBatt - ok
18:40:30.0347 3544 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
18:40:30.0361 3544 HidBth - ok
18:40:30.0373 3544 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
18:40:30.0385 3544 HidIr - ok
18:40:30.0415 3544 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll
18:40:30.0425 3544 hidserv - ok
18:40:30.0514 3544 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\drivers\hidusb.sys
18:40:30.0524 3544 HidUsb - ok
18:40:30.0600 3544 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
18:40:30.0612 3544 hkmsvc - ok
18:40:30.0681 3544 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
18:40:30.0697 3544 HomeGroupListener - ok
18:40:30.0746 3544 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
18:40:30.0748 3544 HomeGroupProvider - ok
18:40:30.0763 3544 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
18:40:30.0775 3544 HpSAMD - ok
18:40:30.0822 3544 [ 447256D1C026654C5CD3CC17E7B20631 ] HsfXAudioService C:\Windows\SysWOW64\XAudio64.dll
18:40:30.0843 3544 HsfXAudioService - ok
18:40:30.0909 3544 [ 26C5D00321937E49B6BC91029947D094 ] HSF_DPV C:\Windows\system32\DRIVERS\CAX_DPV.sys
18:40:30.0963 3544 HSF_DPV - ok
18:40:31.0035 3544 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
18:40:31.0123 3544 HTTP - ok
18:40:31.0184 3544 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
18:40:31.0193 3544 hwpolicy - ok
18:40:31.0247 3544 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
18:40:31.0262 3544 i8042prt - ok
18:40:31.0327 3544 [ 660BF3255A1EB18ED803FD2FBA6AE400 ] IAANTMON C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
18:40:31.0351 3544 IAANTMON - ok
18:40:31.0387 3544 [ BE7D72FCF442C26975942007E0831241 ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys
18:40:31.0389 3544 iaStor - ok
18:40:31.0457 3544 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
18:40:31.0480 3544 iaStorV - ok
18:40:31.0568 3544 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
18:40:31.0615 3544 idsvc - ok
18:40:31.0895 3544 [ 677AA5991026A65ADA128C4B59CF2BAD ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
18:40:32.0306 3544 igfx - ok
18:40:32.0369 3544 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
18:40:32.0379 3544 iirsp - ok
18:40:32.0458 3544 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
18:40:32.0504 3544 IKEEXT - ok
18:40:32.0598 3544 [ 36FDF367A1DABFF903E2214023D71368 ] Impcd C:\Windows\system32\DRIVERS\Impcd.sys
18:40:32.0614 3544 Impcd - ok
18:40:32.0688 3544 [ 492CD3A94913D753B4591CD9E29EC843 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
18:40:32.0894 3544 IntcAzAudAddService - ok
18:40:32.0935 3544 [ 408B401CD7CDB075C7470B0FF7BA8D0B ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
18:40:32.0953 3544 IntcDAud - ok
18:40:32.0968 3544 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
18:40:32.0976 3544 intelide - ok
18:40:33.0016 3544 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
18:40:33.0026 3544 intelppm - ok
18:40:33.0051 3544 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
18:40:33.0053 3544 IPBusEnum - ok
18:40:33.0102 3544 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:40:33.0115 3544 IpFilterDriver - ok
18:40:33.0224 3544 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
18:40:33.0253 3544 iphlpsvc - ok
18:40:33.0306 3544 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
18:40:33.0320 3544 IPMIDRV - ok
18:40:33.0410 3544 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
18:40:33.0425 3544 IPNAT - ok
18:40:33.0503 3544 [ 02DEF37AB75E0032C50724646F708DE8 ] iPodDrv C:\Windows\system32\drivers\iPodDrv.sys
18:40:33.0511 3544 iPodDrv - ok
18:40:33.0536 3544 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
18:40:33.0545 3544 IRENUM - ok
18:40:33.0603 3544 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
18:40:33.0613 3544 isapnp - ok
18:40:33.0637 3544 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
18:40:33.0658 3544 iScsiPrt - ok
18:40:33.0692 3544 [ D85F3F18E44F7447B5F1BA5C85BAEB7C ] k57nd60a C:\Windows\system32\DRIVERS\k57nd60a.sys
18:40:33.0713 3544 k57nd60a - ok
18:40:33.0734 3544 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
18:40:33.0745 3544 kbdclass - ok
18:40:33.0774 3544 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
18:40:33.0786 3544 kbdhid - ok
18:40:33.0808 3544 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
18:40:33.0810 3544 KeyIso - ok
18:40:33.0982 3544 [ 775C6D5D60146D7DB08A01CB596D7EC6 ] Kodak AiO Network Discovery Service C:\Program Files (x86)\Kodak\AiO\Center\EKAiOHostService.exe
18:40:34.0014 3544 Kodak AiO Network Discovery Service - ok
18:40:34.0184 3544 [ 17AFF68AB32F8671BC46612D35351099 ] Kodak AiO Status Monitor Service C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKPrinterSDK.exe
18:40:34.0191 3544 Kodak AiO Status Monitor Service - ok
18:40:34.0240 3544 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
18:40:34.0252 3544 KSecDD - ok
18:40:34.0309 3544 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
18:40:34.0325 3544 KSecPkg - ok
18:40:34.0366 3544 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
18:40:34.0377 3544 ksthunk - ok
18:40:34.0424 3544 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
18:40:34.0445 3544 KtmRm - ok
18:40:34.0508 3544 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll
18:40:34.0525 3544 LanmanServer - ok
18:40:34.0586 3544 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:40:34.0599 3544 LanmanWorkstation - ok
18:40:34.0633 3544 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
18:40:34.0645 3544 lltdio - ok
18:40:34.0678 3544 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
18:40:34.0697 3544 lltdsvc - ok
18:40:34.0711 3544 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
18:40:34.0719 3544 lmhosts - ok
18:40:34.0780 3544 [ 7485FBCEF9136F530953575E2977859D ] LMS C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
18:40:34.0803 3544 LMS - ok
18:40:34.0834 3544 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
18:40:34.0847 3544 LSI_FC - ok
18:40:34.0874 3544 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
18:40:34.0887 3544 LSI_SAS - ok
18:40:34.0908 3544 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
18:40:34.0920 3544 LSI_SAS2 - ok
18:40:34.0931 3544 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
18:40:34.0944 3544 LSI_SCSI - ok
18:40:34.0980 3544 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
18:40:34.0995 3544 luafv - ok
18:40:35.0093 3544 [ 92EB844D90615CB266F84C3202B8786E ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
18:40:35.0102 3544 MBAMProtector - ok
18:40:35.0180 3544 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
18:40:35.0236 3544 MBAMScheduler - ok
18:40:35.0310 3544 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
18:40:35.0406 3544 MBAMService - ok
18:40:35.0502 3544 [ F8B823414A22DBF3BEC10DCAA5F93CD8 ] McciCMService C:\Program Files (x86)\Common Files\Motive\McciCMService.exe
18:40:35.0540 3544 McciCMService - ok
18:40:35.0642 3544 [ 859E5A32485178DAECA06B52E2BB44B2 ] McciCMService64 C:\Program Files\Common Files\Motive\McciCMService.exe
18:40:35.0668 3544 McciCMService64 - ok
18:40:35.0773 3544 [ 22A7776C5D8EB5930EDF9C8DD0884259 ] McComponentHostService C:\Program Files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe
18:40:35.0820 3544 McComponentHostService - ok
18:40:35.0874 3544 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
18:40:35.0886 3544 Mcx2Svc - ok
18:40:35.0920 3544 [ E4F44EC214B3E381E1FC844A02926666 ] mdmxsdk C:\Windows\system32\DRIVERS\mdmxsdk.sys
18:40:35.0928 3544 mdmxsdk - ok
18:40:35.0962 3544 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
18:40:35.0972 3544 megasas - ok
18:40:35.0996 3544 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
18:40:36.0017 3544 MegaSR - ok
18:40:36.0044 3544 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
18:40:36.0045 3544 MMCSS - ok
18:40:36.0056 3544 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
18:40:36.0067 3544 Modem - ok
18:40:36.0119 3544 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
18:40:36.0129 3544 monitor - ok
18:40:36.0148 3544 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
18:40:36.0158 3544 mouclass - ok
18:40:36.0193 3544 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
18:40:36.0203 3544 mouhid - ok
18:40:36.0266 3544 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
18:40:36.0279 3544 mountmgr - ok
18:40:36.0366 3544 [ 46297FA8E30A6007F14118FC2B942FBC ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
18:40:36.0386 3544 MozillaMaintenance - ok
18:40:36.0442 3544 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
18:40:36.0460 3544 mpio - ok
18:40:36.0490 3544 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
18:40:36.0504 3544 mpsdrv - ok
18:40:36.0606 3544 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
18:40:36.0655 3544 MpsSvc - ok
18:40:36.0728 3544 [ 9BD4DCB5412921864A7AACDEDFBD1923 ] MREMP50 C:\PROGRA~2\COMMON~1\Motive\MREMP50.SYS
18:40:36.0740 3544 MREMP50 - ok
18:40:36.0768 3544 MREMP50a64 - ok
18:40:36.0772 3544 MREMPR5 - ok
18:40:36.0776 3544 MRENDIS5 - ok
18:40:36.0816 3544 [ 07C02C892E8E1A72D6BF35004F0E9C5E ] MRESP50 C:\PROGRA~2\COMMON~1\Motive\MRESP50.SYS
18:40:36.0827 3544 MRESP50 - ok
18:40:36.0830 3544 MRESP50a64 - ok
18:40:36.0882 3544 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
18:40:36.0897 3544 MRxDAV - ok
18:40:36.0958 3544 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
18:40:36.0975 3544 mrxsmb - ok
18:40:37.0033 3544 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:40:37.0054 3544 mrxsmb10 - ok
18:40:37.0118 3544 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:40:37.0133 3544 mrxsmb20 - ok
18:40:37.0193 3544 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
18:40:37.0203 3544 msahci - ok
18:40:37.0224 3544 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
18:40:37.0239 3544 msdsm - ok
18:40:37.0256 3544 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
18:40:37.0274 3544 MSDTC - ok
18:40:37.0314 3544 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
18:40:37.0324 3544 Msfs - ok
18:40:37.0345 3544 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
18:40:37.0354 3544 mshidkmdf - ok
18:40:37.0362 3544 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
18:40:37.0371 3544 msisadrv - ok
18:40:37.0403 3544 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
18:40:37.0419 3544 MSiSCSI - ok
18:40:37.0422 3544 msiserver - ok
18:40:37.0455 3544 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
18:40:37.0464 3544 MSKSSRV - ok
18:40:37.0474 3544 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
18:40:37.0483 3544 MSPCLOCK - ok
18:40:37.0494 3544 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
18:40:37.0503 3544 MSPQM - ok
18:40:37.0567 3544 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
18:40:37.0588 3544 MsRPC - ok
18:40:37.0643 3544 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
18:40:37.0653 3544 mssmbios - ok
18:40:37.0672 3544 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
18:40:37.0680 3544 MSTEE - ok
18:40:37.0699 3544 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
18:40:37.0707 3544 MTConfig - ok
18:40:37.0727 3544 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
18:40:37.0739 3544 Mup - ok
18:40:37.0808 3544 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
18:40:37.0834 3544 napagent - ok
18:40:37.0887 3544 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
18:40:37.0909 3544 NativeWifiP - ok
18:40:37.0956 3544 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
18:40:37.0982 3544 NDIS - ok
18:40:38.0005 3544 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
18:40:38.0017 3544 NdisCap - ok
18:40:38.0047 3544 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
18:40:38.0059 3544 NdisTapi - ok
18:40:38.0120 3544 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
18:40:38.0132 3544 Ndisuio - ok
18:40:38.0188 3544 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
18:40:38.0206 3544 NdisWan - ok
18:40:38.0268 3544 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
18:40:38.0279 3544 NDProxy - ok
18:40:38.0290 3544 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
18:40:38.0301 3544 NetBIOS - ok
18:40:38.0359 3544 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
18:40:38.0378 3544 NetBT - ok
18:40:38.0408 3544 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
18:40:38.0409 3544 Netlogon - ok
18:40:38.0433 3544 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
18:40:38.0453 3544 Netman - ok
18:40:38.0584 3544 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
18:40:38.0630 3544 NetMsmqActivator - ok
18:40:38.0637 3544 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
18:40:38.0638 3544 NetPipeActivator - ok
18:40:38.0693 3544 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
18:40:38.0716 3544 netprofm - ok
18:40:38.0721 3544 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
18:40:38.0723 3544 NetTcpActivator - ok
18:40:38.0726 3544 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
18:40:38.0728 3544 NetTcpPortSharing - ok
18:40:38.0754 3544 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
18:40:38.0764 3544 nfrd960 - ok
18:40:38.0825 3544 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
18:40:38.0844 3544 NlaSvc - ok
18:40:38.0852 3544 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
18:40:38.0864 3544 Npfs - ok
18:40:38.0887 3544 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
18:40:38.0896 3544 nsi - ok
18:40:38.0900 3544 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
18:40:38.0909 3544 nsiproxy - ok
18:40:39.0002 3544 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
18:40:39.0101 3544 Ntfs - ok
18:40:39.0142 3544 [ 6FD534EDE2905D3C3257CFDD881F9705 ] NTI IScheduleSvc C:\Program Files (x86)\NewTech Infosystems\Gateway MyBackup\IScheduleSvc.exe
18:40:39.0186 3544 NTI IScheduleSvc - ok
18:40:39.0228 3544 [ 64DDD0DEE976302F4BD93E5EFCC2F013 ] NTIDrvr C:\Windows\system32\drivers\NTIDrvr.sys
18:40:39.0237 3544 NTIDrvr - ok
18:40:39.0243 3544 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
18:40:39.0250 3544 Null - ok
18:40:39.0312 3544 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
18:40:39.0330 3544 nvraid - ok
18:40:39.0377 3544 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
18:40:39.0394 3544 nvstor - ok
18:40:39.0450 3544 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
18:40:39.0464 3544 nv_agp - ok
18:40:39.0632 3544 [ 71C97F97A909A990C7F60C77908BAFF9 ] OfficeSvc C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
18:40:39.0641 3544 OfficeSvc - ok
18:40:39.0657 3544 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
18:40:39.0670 3544 ohci1394 - ok
18:40:39.0758 3544 [ FF93D67903FDEABCD4470CD82F44ACFA ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:40:39.0779 3544 ose - ok
18:40:39.0996 3544 [ 31DC8D825D2C4EB0FF7ED021BB92C541 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
18:40:40.0205 3544 osppsvc - ok
18:40:40.0245 3544 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
18:40:40.0250 3544 p2pimsvc - ok
18:40:40.0269 3544 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
18:40:40.0277 3544 p2psvc - ok
18:40:40.0309 3544 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
18:40:40.0324 3544 Parport - ok
18:40:40.0380 3544 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
18:40:40.0392 3544 partmgr - ok
18:40:40.0424 3544 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
18:40:40.0429 3544 PcaSvc - ok
18:40:40.0479 3544 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
18:40:40.0496 3544 pci - ok
18:40:40.0514 3544 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
18:40:40.0523 3544 pciide - ok
18:40:40.0545 3544 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
18:40:40.0575 3544 pcmcia - ok
18:40:40.0598 3544 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
18:40:40.0609 3544 pcw - ok
18:40:40.0632 3544 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
18:40:40.0659 3544 PEAUTH - ok
18:40:40.0735 3544 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
18:40:40.0749 3544 PerfHost - ok
18:40:40.0841 3544 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
18:40:40.0904 3544 pla - ok
18:40:40.0965 3544 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
18:40:40.0987 3544 PlugPlay - ok
18:40:41.0009 3544 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
18:40:41.0018 3544 PNRPAutoReg - ok
18:40:41.0038 3544 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
18:40:41.0041 3544 PNRPsvc - ok
18:40:41.0099 3544 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
18:40:41.0124 3544 PolicyAgent - ok
18:40:41.0160 3544 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
18:40:41.0172 3544 Power - ok
18:40:41.0238 3544 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
18:40:41.0252 3544 PptpMiniport - ok
18:40:41.0285 3544 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
18:40:41.0295 3544 Processor - ok
18:40:41.0352 3544 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
18:40:41.0367 3544 ProfSvc - ok
18:40:41.0380 3544 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
18:40:41.0381 3544 ProtectedStorage - ok
18:40:41.0439 3544 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
18:40:41.0453 3544 Psched - ok
18:40:41.0480 3544 [ 4712CC14E720ECCCC0AA16949D18AAF1 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys
18:40:41.0492 3544 PxHlpa64 - ok
18:40:41.0570 3544 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
18:40:41.0668 3544 ql2300 - ok
18:40:41.0702 3544 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
18:40:41.0715 3544 ql40xx - ok
18:40:41.0741 3544 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
18:40:41.0758 3544 QWAVE - ok
18:40:41.0775 3544 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
18:40:41.0791 3544 QWAVEdrv - ok
18:40:42.0035 3544 [ F98487B25828441B1C6488C642C2AC10 ] RapportCerberus_43926 C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\43926\RapportCerberus64_43926.sys
18:40:42.0056 3544 RapportCerberus_43926 - ok
18:40:42.0142 3544 [ EAE1BB44F17EB3F439367AAC6B829D55 ] RapportEI64 C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys
18:40:42.0155 3544 RapportEI64 - ok
18:40:42.0217 3544 [ 428ABD0B5D771284F393356C6729074F ] RapportKE64 C:\Windows\system32\Drivers\RapportKE64.sys
18:40:42.0229 3544 RapportKE64 - ok
18:40:42.0338 3544 [ 35468625105F5B10FCF43E5D58659924 ] RapportMgmtService C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
18:40:42.0396 3544 RapportMgmtService - ok
18:40:42.0422 3544 [ 4CCFCED21C81C0C1D2BE6CB3ABF8A217 ] RapportPG64 C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys
18:40:42.0440 3544 RapportPG64 - ok
18:40:42.0466 3544 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
18:40:42.0476 3544 RasAcd - ok
18:40:42.0517 3544 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
18:40:42.0528 3544 RasAgileVpn - ok
18:40:42.0560 3544 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
18:40:42.0576 3544 RasAuto - ok
18:40:42.0624 3544 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
18:40:42.0641 3544 Rasl2tp - ok
18:40:42.0716 3544 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
18:40:42.0735 3544 RasMan - ok
18:40:42.0750 3544 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
18:40:42.0762 3544 RasPppoe - ok
18:40:42.0781 3544 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
18:40:42.0798 3544 RasSstp - ok
18:40:42.0876 3544 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
18:40:42.0900 3544 rdbss - ok
18:40:42.0917 3544 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
18:40:42.0930 3544 rdpbus - ok
18:40:42.0951 3544 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
18:40:42.0961 3544 RDPCDD - ok
18:40:42.0995 3544 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
18:40:43.0005 3544 RDPENCDD - ok
18:40:43.0018 3544 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
18:40:43.0027 3544 RDPREFMP - ok
18:40:43.0083 3544 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
18:40:43.0102 3544 RDPWD - ok
18:40:43.0175 3544 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
18:40:43.0193 3544 rdyboost - ok
18:40:43.0231 3544 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
18:40:43.0243 3544 RemoteAccess - ok
18:40:43.0267 3544 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
18:40:43.0280 3544 RemoteRegistry - ok
18:40:43.0294 3544 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
18:40:43.0305 3544 RpcEptMapper - ok
18:40:43.0313 3544 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
18:40:43.0322 3544 RpcLocator - ok
18:40:43.0380 3544 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\System32\rpcss.dll
18:40:43.0384 3544 RpcSs - ok
18:40:43.0417 3544 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
18:40:43.0430 3544 rspndr - ok
18:40:43.0467 3544 [ DB30AA4DAA0D492FA5D7717D8181FFA1 ] RSUSBSTOR C:\Windows\system32\Drivers\RtsUStor.sys
18:40:43.0485 3544 RSUSBSTOR - ok
18:40:43.0524 3544 [ 7421A35C45484B95E83B5E9E107CEFC2 ] RTHDMIAzAudService C:\Windows\system32\drivers\RtHDMIVX.sys
18:40:43.0541 3544 RTHDMIAzAudService - ok
18:40:43.0559 3544 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
18:40:43.0560 3544 SamSs - ok
18:40:43.0611 3544 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
18:40:43.0624 3544 sbp2port - ok
18:40:43.0736 3544 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
18:40:43.0859 3544 SBSDWSCService - ok
18:40:43.0906 3544 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
18:40:43.0922 3544 SCardSvr - ok
18:40:43.0973 3544 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
18:40:43.0981 3544 scfilter - ok
18:40:44.0050 3544 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
18:40:44.0130 3544 Schedule - ok
18:40:44.0190 3544 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
18:40:44.0191 3544 SCPolicySvc - ok
18:40:44.0240 3544 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
18:40:44.0254 3544 SDRSVC - ok
18:40:44.0389 3544 [ CC781378E7EDA615D2CDCA3B17829FA4 ] SeaPort C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
18:40:44.0420 3544 SeaPort - ok
18:40:44.0454 3544 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
18:40:44.0466 3544 secdrv - ok
18:40:44.0522 3544 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
18:40:44.0533 3544 seclogon - ok
18:40:44.0563 3544 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll
18:40:44.0564 3544 SENS - ok
18:40:44.0572 3544 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
18:40:44.0581 3544 SensrSvc - ok
18:40:44.0602 3544 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
18:40:44.0612 3544 Serenum - ok
18:40:44.0643 3544 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
18:40:44.0661 3544 Serial - ok
18:40:44.0766 3544 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
18:40:44.0776 3544 sermouse - ok
18:40:44.0860 3544 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
18:40:44.0873 3544 SessionEnv - ok
18:40:44.0962 3544 [ 3CF4EF98FE72422ADF72F1A4589C2499 ] SfCtlCom C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
18:40:44.0985 3544 SfCtlCom - ok
18:40:45.0042 3544 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
18:40:45.0050 3544 sffdisk - ok
18:40:45.0063 3544 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
18:40:45.0071 3544 sffp_mmc - ok
18:40:45.0089 3544 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
18:40:45.0099 3544 sffp_sd - ok
18:40:45.0129 3544 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
18:40:45.0138 3544 sfloppy - ok
18:40:45.0198 3544 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
18:40:45.0218 3544 SharedAccess - ok
18:40:45.0277 3544 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:40:45.0296 3544 ShellHWDetection - ok
18:40:45.0315 3544 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
18:40:45.0324 3544 SiSRaid2 - ok
18:40:45.0346 3544 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
18:40:45.0356 3544 SiSRaid4 - ok
18:40:45.0487 3544 [ 3740B83AEC21D981065D7E819BD7E878 ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
18:40:46.0142 3544 Skype C2C Service - ok
18:40:46.0226 3544 [ FF0DB4D9A08864A5C7B67477CD8E3B2A ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
18:40:46.0543 3544 SkypeUpdate - ok
18:40:46.0690 3544 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
18:40:46.0703 3544 Smb - ok
18:40:46.0742 3544 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
18:40:46.0751 3544 SNMPTRAP - ok
18:40:46.0775 3544 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
18:40:46.0784 3544 spldr - ok
18:40:46.0846 3544 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
18:40:46.0889 3544 Spooler - ok
18:40:47.0015 3544 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
18:40:47.0104 3544 sppsvc - ok
18:40:47.0126 3544 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
18:40:47.0136 3544 sppuinotify - ok
18:40:47.0195 3544 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
18:40:47.0220 3544 srv - ok
18:40:47.0262 3544 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
18:40:47.0287 3544 srv2 - ok
18:40:47.0327 3544 [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL6.SYS
18:40:47.0349 3544 SrvHsfHDA - ok
18:40:47.0393 3544 [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV6.SYS
18:40:47.0482 3544 SrvHsfV92 - ok
18:40:47.0517 3544 [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT6.SYS
18:40:47.0563 3544 SrvHsfWinac - ok
18:40:47.0635 3544 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
18:40:47.0652 3544 srvnet - ok
18:40:47.0701 3544 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
18:40:47.0717 3544 SSDPSRV - ok
18:40:47.0733 3544 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
18:40:47.0744 3544 SstpSvc - ok
18:40:47.0770 3544 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
18:40:47.0780 3544 stexstor - ok
18:40:47.0868 3544 [ DECACB6921DED1A38642642685D77DAC ] StillCam C:\Windows\system32\DRIVERS\serscan.sys
18:40:47.0877 3544 StillCam - ok
18:40:47.0938 3544 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
18:40:47.0961 3544 stisvc - ok
18:40:48.0034 3544 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
18:40:48.0043 3544 swenum - ok
18:40:48.0086 3544 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
18:40:48.0110 3544 swprv - ok
18:40:48.0169 3544 [ ECB9097C86DB32BF3940590E0E1792C3 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
18:40:48.0187 3544 SynTP - ok
18:40:48.0272 3544 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
18:40:48.0381 3544 SysMain - ok
18:40:48.0428 3544 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:40:48.0442 3544 TabletInputService - ok
18:40:48.0515 3544 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
18:40:48.0534 3544 TapiSrv - ok
18:40:48.0555 3544 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
18:40:48.0564 3544 TBS - ok
18:40:48.0656 3544 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
18:40:48.0795 3544 Tcpip - ok
18:40:48.0854 3544 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
18:40:48.0864 3544 TCPIP6 - ok
18:40:48.0942 3544 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
18:40:48.0955 3544 tcpipreg - ok
18:40:48.0998 3544 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
18:40:49.0007 3544 TDPIPE - ok
18:40:49.0066 3544 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
18:40:49.0076 3544 TDTCP - ok
18:40:49.0131 3544 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
18:40:49.0146 3544 tdx - ok
18:40:49.0207 3544 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
18:40:49.0218 3544 TermDD - ok
18:40:49.0253 3544 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
18:40:49.0298 3544 TermService - ok
18:40:49.0334 3544 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
18:40:49.0344 3544 Themes - ok
18:40:49.0370 3544 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
18:40:49.0371 3544 THREADORDER - ok
18:40:49.0451 3544 [ 963C903E5176C5CDCAE321D48635B21F ] TMBMServer C:\Program Files\Trend Micro\BM\TMBMSRV.exe
18:40:49.0459 3544 TMBMServer - ok
18:40:49.0505 3544 [ 1889F49A828B1CF0E2866CDD325875B0 ] tmpreflt C:\Windows\system32\DRIVERS\tmpreflt.sys
18:40:49.0515 3544 tmpreflt - ok
18:40:49.0564 3544 [ 3AE913B4FBF06EE49831FF9DB2330830 ] TmProxy C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
18:40:49.0598 3544 TmProxy - ok
18:40:49.0640 3544 [ 21CC12B7F8B44E91D03EAD5B17AAF0B2 ] tmtdi C:\Windows\system32\DRIVERS\tmtdi.sys
18:40:49.0654 3544 tmtdi - ok
18:40:49.0731 3544 [ 8B97BA7E28BD39A2BC4A2BB66A83FEC0 ] tmxpflt C:\Windows\system32\DRIVERS\tmxpflt.sys
18:40:49.0753 3544 tmxpflt - ok
18:40:49.0781 3544 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
18:40:49.0793 3544 TrkWks - ok
18:40:49.0876 3544 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:40:49.0877 3544 TrustedInstaller - ok
18:40:49.0941 3544 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
18:40:49.0956 3544 tssecsrv - ok
18:40:50.0060 3544 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
18:40:50.0074 3544 TsUsbFlt - ok
18:40:50.0155 3544 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
18:40:50.0174 3544 tunnel - ok
18:40:50.0258 3544 [ 825E7A1F48FB8BCFBA27C178AAB4E275 ] TurboB C:\Windows\system32\DRIVERS\TurboB.sys
18:40:50.0267 3544 TurboB - ok
18:40:50.0309 3544 [ B206BE1174D5964D49A56BB6C4E0524A ] TurboBoost C:\Program Files\Intel\TurboBoost\TurboBoost.exe
18:40:50.0323 3544 TurboBoost - ok
18:40:50.0345 3544 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
18:40:50.0356 3544 uagp35 - ok
18:40:50.0381 3544 [ 2E22C1FD397A5A9FFEF55E9D1FC96C00 ] UBHelper C:\Windows\system32\drivers\UBHelper.sys
18:40:50.0390 3544 UBHelper - ok
18:40:50.0442 3544 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
18:40:50.0464 3544 udfs - ok
18:40:50.0497 3544 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
18:40:50.0508 3544 UI0Detect - ok
18:40:50.0584 3544 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
18:40:50.0595 3544 uliagpkx - ok
18:40:50.0655 3544 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
18:40:50.0665 3544 umbus - ok
18:40:50.0701 3544 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
18:40:50.0709 3544 UmPass - ok
18:40:50.0831 3544 [ 765F2DD351BA064F657751D8D75E58C0 ] UNS C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
18:40:50.0897 3544 UNS - ok
18:40:50.0951 3544 [ 70DDE3A86DBEB1D6C3C30AD687B1877A ] Updater Service C:\Program Files\Gateway\Gateway Updater\UpdaterService.exe
18:40:50.0997 3544 Updater Service - ok
18:40:51.0062 3544 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
18:40:51.0082 3544 upnphost - ok
18:40:51.0153 3544 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
18:40:51.0169 3544 usbaudio - ok
18:40:51.0279 3544 [ 5FCC71487888589A9244AF54CFEFAB29 ] usbbus C:\Windows\system32\DRIVERS\lgx64bus.sys
18:40:51.0289 3544 usbbus - ok
18:40:51.0348 3544 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
18:40:51.0361 3544 usbccgp - ok
18:40:51.0466 3544 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
18:40:51.0479 3544 usbcir - ok
18:40:51.0553 3544 [ 3FB6E423F7567C92C32EA786F5FD0C69 ] UsbDiag C:\Windows\system32\DRIVERS\lgx64diag.sys
18:40:51.0564 3544 UsbDiag - ok
18:40:51.0627 3544 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
18:40:51.0638 3544 usbehci - ok
18:40:51.0707 3544 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
18:40:51.0731 3544 usbhub - ok
18:40:51.0786 3544 [ 78D551F5B93488B4666F5FC8DD4815F3 ] USBModem C:\Windows\system32\DRIVERS\lgx64modem.sys
18:40:51.0798 3544 USBModem - ok
18:40:51.0872 3544 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
18:40:51.0882 3544 usbohci - ok
18:40:51.0919 3544 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
18:40:51.0929 3544 usbprint - ok
18:40:51.0990 3544 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:40:52.0004 3544 USBSTOR - ok
18:40:52.0022 3544 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
18:40:52.0033 3544 usbuhci - ok
18:40:52.0116 3544 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys
18:40:52.0133 3544 usbvideo - ok
18:40:52.0154 3544 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
18:40:52.0166 3544 UxSms - ok
18:40:52.0186 3544 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
18:40:52.0187 3544 VaultSvc - ok
18:40:52.0231 3544 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
18:40:52.0241 3544 vdrvroot - ok
18:40:52.0303 3544 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
18:40:52.0329 3544 vds - ok
18:40:52.0359 3544 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
18:40:52.0369 3544 vga - ok
18:40:52.0383 3544 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
18:40:52.0393 3544 VgaSave - ok
18:40:52.0416 3544 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
18:40:52.0434 3544 vhdmp - ok
18:40:52.0448 3544 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
18:40:52.0456 3544 viaide - ok
18:40:52.0479 3544 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
18:40:52.0491 3544 volmgr - ok
18:40:52.0557 3544 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
18:40:52.0578 3544 volmgrx - ok
18:40:52.0597 3544 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
18:40:52.0619 3544 volsnap - ok
18:40:52.0707 3544 [ 3A5862D9A4FE4BBB2FFA1700E2B21B9B ] vsapint C:\Windows\system32\DRIVERS\vsapint.sys
18:40:52.0803 3544 vsapint - ok
18:40:52.0827 3544 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
18:40:52.0843 3544 vsmraid - ok
18:40:52.0926 3544 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
18:40:53.0030 3544 VSS - ok
18:40:53.0057 3544 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
18:40:53.0066 3544 vwifibus - ok
18:40:53.0085 3544 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
18:40:53.0096 3544 vwififlt - ok
18:40:53.0122 3544 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
18:40:53.0130 3544 vwifimp - ok
18:40:53.0229 3544 [ E13B31E0ADA64CF1513D993F436CA39D ] VX3000 C:\Windows\system32\DRIVERS\VX3000.sys
18:40:53.0372 3544 VX3000 - ok
18:40:53.0428 3544 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
18:40:53.0447 3544 W32Time - ok
18:40:53.0471 3544 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
18:40:53.0482 3544 WacomPen - ok
18:40:53.0578 3544 [ 4AA2CC5979AFF984227364F2C23B04F3 ] WajamUpdater C:\Program Files\Wajam\Updater\WajamUpdater.exe
18:40:53.0598 3544 WajamUpdater - ok
18:40:53.0678 3544 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
18:40:53.0691 3544 WANARP - ok
18:40:53.0696 3544 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
18:40:53.0698 3544 Wanarpv6 - ok
18:40:53.0788 3544 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
18:40:53.0851 3544 WatAdminSvc - ok
18:40:53.0937 3544 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
18:40:53.0993 3544 wbengine - ok
18:40:54.0041 3544 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
18:40:54.0058 3544 WbioSrvc - ok
18:40:54.0121 3544 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
18:40:54.0126 3544 wcncsvc - ok
18:40:54.0144 3544 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
18:40:54.0155 3544 WcsPlugInService - ok
18:40:54.0186 3544 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
18:40:54.0195 3544 Wd - ok
18:40:54.0255 3544 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
18:40:54.0303 3544 Wdf01000 - ok
18:40:54.0321 3544 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
18:40:54.0332 3544 WdiServiceHost - ok
18:40:54.0337 3544 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
18:40:54.0339 3544 WdiSystemHost - ok
18:40:54.0403 3544 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
18:40:54.0422 3544 WebClient - ok
18:40:54.0442 3544 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
18:40:54.0460 3544 Wecsvc - ok
18:40:54.0473 3544 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
18:40:54.0485 3544 wercplsupport - ok
18:40:54.0517 3544 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
18:40:54.0519 3544 WerSvc - ok
18:40:54.0553 3544 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
18:40:54.0564 3544 WfpLwf - ok
18:40:54.0575 3544 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
18:40:54.0584 3544 WIMMount - ok
18:40:54.0620 3544 [ A6EA7A3FC4B00F48535B506DB1E86EFD ] winachsf C:\Windows\system32\DRIVERS\CAX_CNXT.sys
18:40:54.0666 3544 winachsf - ok
18:40:54.0720 3544 WinDefend - ok
18:40:54.0728 3544 WinHttpAutoProxySvc - ok
18:40:54.0774 3544 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
18:40:54.0790 3544 Winmgmt - ok
18:40:54.0887 3544 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
18:40:55.0062 3544 WinRM - ok
18:40:55.0157 3544 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
18:40:55.0166 3544 WinUsb - ok
18:40:55.0208 3544 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
18:40:55.0228 3544 Wlansvc - ok
18:40:55.0365 3544 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
18:40:55.0377 3544 wlcrasvc - ok
18:40:55.0564 3544 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
18:40:55.0683 3544 wlidsvc - ok
18:40:55.0746 3544 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
18:40:55.0756 3544 WmiAcpi - ok
18:40:55.0815 3544 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
18:40:55.0836 3544 wmiApSrv - ok
18:40:55.0880 3544 WMPNetworkSvc - ok
18:40:55.0896 3544 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
18:40:55.0905 3544 WPCSvc - ok
18:40:55.0962 3544 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
18:40:55.0975 3544 WPDBusEnum - ok
18:40:56.0001 3544 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
18:40:56.0010 3544 ws2ifsl - ok
18:40:56.0039 3544 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll
18:40:56.0053 3544 wscsvc - ok
18:40:56.0057 3544 WSearch - ok
18:40:56.0162 3544 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
18:40:56.0220 3544 wuauserv - ok
18:40:56.0281 3544 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
18:40:56.0294 3544 WudfPf - ok
18:40:56.0338 3544 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
18:40:56.0357 3544 WUDFRd - ok
18:40:56.0421 3544 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
18:40:56.0432 3544 wudfsvc - ok
18:40:56.0464 3544 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
18:40:56.0481 3544 WwanSvc - ok
18:40:56.0502 3544 [ E8F3FA126A06F8E7088F63757112A186 ] XAudio C:\Windows\system32\DRIVERS\XAudio64.sys
18:40:56.0510 3544 XAudio - ok
18:40:56.0604 3544 [ DD0042F0C3B606A6A8B92D49AFB18AD6 ] YahooAUService C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
18:40:56.0640 3544 YahooAUService - ok
18:40:56.0672 3544 ================ Scan global ===============================
18:40:56.0692 3544 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
18:40:56.0756 3544 [ 9E479C2B605C25DA4971ABA36250FAEF ] C:\Windows\system32\winsrv.dll
18:40:56.0777 3544 [ 9E479C2B605C25DA4971ABA36250FAEF ] C:\Windows\system32\winsrv.dll
18:40:56.0804 3544 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
18:40:56.0874 3544 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
18:40:56.0877 3544 [Global] - ok
18:40:56.0877 3544 ================ Scan MBR ==================================
18:40:56.0899 3544 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
18:40:57.0113 3544 \Device\Harddisk0\DR0 - ok
18:40:57.0113 3544 ================ Scan VBR ==================================
18:40:57.0117 3544 [ 648F24EDC4E279A391E402B38B79C85E ] \Device\Harddisk0\DR0\Partition1
18:40:57.0120 3544 \Device\Harddisk0\DR0\Partition1 - ok
18:40:57.0137 3544 [ 1BCEB9BAD10FB7CB0B078C21417C21DB ] \Device\Harddisk0\DR0\Partition2
18:40:57.0139 3544 \Device\Harddisk0\DR0\Partition2 - ok
18:40:57.0140 3544 ============================================================
18:40:57.0140 3544 Scan finished
18:40:57.0140 3544 ============================================================
18:40:57.0151 6700 Detected object count: 0
18:40:57.0151 6700 Actual detected object count: 0



dar

In addition to my previous post, I would also like for you to do the following:

Go to your Desktop and delete your ComboFix icon by dragging it to the Recycle Bin.
Once done, please Empty Your Recycle Bin.

Let me know when this is done.



Good Evening Jeff!!

ComboFix was sent to the recycle bin and the bin was emptied. All is well with the world…but why does my laptop make that beeping sound? As of this writing, it has not done that..but this morning it did.

Let me know what the next step is.

dar

but why does my laptop make that beeping sound?

When is this happening?

You may need to do a clean install of your Word and Excel programs as they may have gotten corrupted.

but why does my laptop make that beeping sound?

When is this happening?

You may need to do a clean install of your Word and Excel programs as they may have gotten corrupted.


Jeff

the beeping sound happens at random, sometimes while I am sitting here, other times when I am in the the other room. It has not happened yet today, but it did happen last evening. have no clue.

I looked in the control panel and tried to find Office 2010 - ther was no icon to REPAIR as there is on other programs.

Can you tell me what exactly was wrong with this laptop? why names of viruses/trojans/malware/adware did I have besides the ZeroAccess Root Kit? Are they gone for now?

dar
Jeff I found the sound! i went to the control panel under sounds - the sound scheme is: Windows Default - then I went down the list and "tested" each sound till I found the one that sounds like what I hear randomly. It's called - Device Connect It hasn't done it since I came home from work today… dar

Can you tell me what exactly was wrong with this laptop?

Well the biggest problem was that you had the ZeroAccess infection on your system. It effects every computer differently in how it attacks and messes up systems. Normally a complete reinstall is what is recommended (and what I would do with my own system) due to the severity of the infection. Even though we can usually fix it, there are times when a reinstall is just what is actually best for the system to function properly again.

Any other malware related problems?

Can you tell me what exactly was wrong with this laptop?

Well the biggest problem was that you had the ZeroAccess infection on your system. It effects every computer differently in how it attacks and messes up systems. Normally a complete reinstall is what is recommended (and what I would do with my own system) due to the severity of the infection. Even though we can usually fix it, there are times when a reinstall is just what is actually best for the system to function properly again.

Any other malware related problems?


Good Morning!

After I posted the DDS txt file and removed combo fix - what is the next step?

As far as I know nothing else is going on that I'm aware of…but you know, the user is the last to know until disaster strikes!!

dar
Providing there are no other malware related problems…

IT APPEARS THAT YOUR LOGS ARE NOW CLEAN :D SO LETS DO A COUPLE OF THINGS TO WRAP THIS UP!! :D

This infection appears to have been cleaned, but I can not give you any absolute guarantees. As a precaution, I would go ahead and change all of your passwords as this is especially important after an infection.
———-

The following will implement some cleanup procedures as well as reset System Restore points:

Press the Windows key + R and this will open the Run text box. Copy/paste the following text into the Run box as shown and click OK.
Combofix /Uninstall
(Note: There is a space between the ..X and the /U that needs to be there.)

[external image: Posted Image]
———-

Clean up with OTL:
  • Right-click and Run as Administrator OTL.exe to start the program.
  • Close all other programs apart from OTL as this step will require a reboot
  • On the OTL main screen, press the CLEANUP button
  • Say Yes to the prompt and then allow the program to reboot your computer.
———-

Any of the logs that you created for use in the forums or remaining tools that have not yet been removed can be deleted so they aren't cluttering up your desktop. If you did not have Malwarebytes Antimalware before, I would keep it and run it weekly.
———-

Here are some tips to reduce the potential for spyware infection in the future:

1. Make your Internet Explorer more secure - This can be done by following these simple instructions:
  • From within Internet Explorer click on the Tools menu and then click on Options.
  • Click once on the Security tab
  • Click once on the Internet icon so it becomes highlighted.
  • Click once on the Custom Level button.
  • Change the Download signed ActiveX controls to Prompt
  • Change the Download unsigned ActiveX controls to Disable
  • Change the Initialize and script ActiveX controls not marked as safe to Disable
  • Change the Installation of desktop items to Prompt
  • Change the Launching programs and files in an IFRAME to Prompt
  • Change the Navigate sub-frames across different domains to Prompt
  • When all these settings have been made, click on the OK button.
  • If it prompts you as to whether or not you want to save the settings, press the Yes button.
  • Next press the Apply button and then the OK to exit the Internet Properties page.
2. FireFox If you use Firefox, I recommend installing the following add-ons to help make your Firefox browser more secure:
NoScript
AdBlock Plus

3. Use and update an anti-virus software - I can not overemphasize the need for you to use and update your anti-virus application on a regular basis. With the ever increasing number of new variants of malware arriving on the scene daily, you become very susceptible to an attack without updated protection.

4. Firewall
Using a third-party firewall will allow you to give/deny access for applications that want to go online. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a firewall in its default configuration can lower your risk greatly. **There are firewalls that could be downloaded and used but I would personally only recommend using one of the following two below:
Online Armor Free
Agnitum Outpost Firewall Free

5. Make sure you keep your Windows OS current. Windows XP users can visit Windows update regularly to download and install any critical updates and service packs. Windows Vista/7 users can open the Start menu > All Programs > Windows Update > Check for Updates (in left hand task pane) to update these systems. Without these you are leaving the back door open.

6. WOT (Web of Trust) As "Googling" is such an integral part of internet life, this free browser add on warns you about risky websites that try to scam visitors, deliver malware or send spam. It is especially helpful when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites. WOT has an add-on available for Firefox, Internet Explorer as well as Google Chrome.

7. Finally, I strongly recommend that you read Miekiemoes' great advice How to prevent malware.

Please reply to this thread once more if you are satisfied so that we can mark the problem as resolved.
Good Evening Jeff! Thanks for all your help this past week or so. You've been a life saver!! I did all the things you recommended, and they were already checked. I do keep everything updates, seems this laptop is always updating……and I installed WOT on this laptop and my hubby's tower fromt he last time you suggested it! Keep up the great work! Darlene

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI