Spyware / Malware / Virus Removal

Win32/Small.CA Infection, Appreciate Help W/ Removal [Closed]

69 min read

Looking for the outcome? Ask AI

V. Rowan Topic Starter

Post #1February 14, 2013, 4:21 PM UTC

Hello All!

New user with a nasty infection.

I first noticed the issue a week or so ago when during startup my computer would ask me to chose an OS. It would quickly begin to beep and reboot if I didn't promptly press "enter" to chose Windows 7. If I pressed enter quickly enough I could get to the menu option that allowed me to select "Start Windows Normally". However, my computer has gotten slower and buggier since then and typical malware and antivirus scans gave me few results. It wasn't until I logged in with Safe Mode that the Windows Action Center finally suggested that I'd been infected with Win32 Small.CA. I will need some help in removing this virus since my standard software has little effect.

Here is my DDS log. I genuinely appreciate the help of this forum. Thank you in advance!

.
DDS (Ver_11-03-05.01) - NTFS_AMD64 NETWORK
Run by [removed] at 10:16:37.95 on Thu 02/14/2013
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_37
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4056.2878 [GMT -6:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k NetworkService
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe
C:\Windows\helppane.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\notepad.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe
C:\Users\Ariel Anderson\Downloads\dds.scr
C:\Windows\system32\conhost.exe
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: Evernote extension: {92ef2ead-a7ce-4424-b0db-499cf856608e} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: NJStarBHO Class: {e74f179f-f6cc-4be0-9638-dea49583953f} - C:\Program Files (x86)\NJStar Communicator\NJStarBHO32.dll
BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
uRun: [Google Update] "C:\Users\Ariel Anderson\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
uRun: [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
uRun: [Adobe Acrobat Synchronizer] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\AdobeCollabSync.exe"
uRunOnce: [Report] C:\AdwCleaner[S1].txt
mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
mRun: []
mRun: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
mRun: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [HTC Sync Loader] "C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
mRunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
StartupFolder: C:\Users\ARIELA~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Ariel Anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe
StartupFolder: C:\Users\ARIELA~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\EVERNO~1.LNK - C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
StartupFolder: C:\Users\ARIELA~1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\PDANET~1.LNK - C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Evernote 4 - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
IE: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html
IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab
DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://juniper.net/dana-cached/sc/JuniperSetupClient.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
BHO-X64: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
BHO-X64: NJStarBHO Class: {E74F179F-F6CC-4BE0-9638-DEA49583953F} - C:\Program Files (x86)\NJStar Communicator\x64\NJStarBHO64.dll
BHO-X64: NJStarBHO - No File
TB-X64: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
mRun-x64: [Apoint] C:\Program Files\DellTPad\Apoint.exe
mRun-x64: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
mRun-x64: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\ARIELA~1\AppData\Roaming\Mozilla\Firefox\Profiles\o30xoycl.default\
FF - plugin: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll
FF - plugin: C:\Users\Ariel Anderson\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: C:\Users\Ariel Anderson\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
FF - plugin: C:\Users\Ariel Anderson\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll
FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll
FF - plugin: C:\Windows\SysWOW64\npmproxy.dll
.
============= SERVICES / DRIVERS ===============
.
R0 pxscan;pxscan;C:\Windows\System32\drivers\pxscan.sys [2013-2-14 36384]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\System32\drivers\dtsoftbus01.sys [2012-1-30 271424]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-13 59904]
R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2011-8-11 140672]
R3 pxkbf;pxkbf;C:\Windows\System32\drivers\pxkbf.sys [2013-2-14 24024]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-6-10 389120]
S0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2012-8-30 228768]
S1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2011-9-29 591192]
S1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2011-9-29 304472]
S1 pxrts;pxrts;C:\Windows\System32\drivers\pxrts.sys [2013-2-14 65736]
S1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]
S1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]
S2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-7-27 63960]
S2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2011-9-29 24408]
S2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2011-9-29 66904]
S2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-12-26 44768]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 CSIScanner;CSIScanner;C:\Program Files\Prevx\prevx.exe [2013-2-14 6746280]
S2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-2-14 398184]
S2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-2-14 682344]
S2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2011-4-27 128456]
S2 PassThru Service;Internet Pass-Through Service;C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-4-13 88576]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-11-9 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-7 251248]
S3 Andbus;LGE Android Platform Composite USB Device;C:\Windows\System32\drivers\lgandbus64.sys [2011-12-25 19456]
S3 HTCAND64;HTC Device Driver;C:\Windows\System32\drivers\ANDROIDUSB.sys [2009-11-2 33736]
S3 htcnprot;HTC NDIS Protocol Driver;C:\Windows\System32\drivers\htcnprot.sys [2010-6-25 36928]
S3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-2-14 24176]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-10-5 115608]
S3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2012-9-12 368896]
S3 pneteth;PdaNet Broadband;C:\Windows\System32\drivers\pneteth.sys [2011-12-25 15360]
S3 pnetmdm;PdaNet Modem;C:\Windows\System32\drivers\pnetmdm64.sys [2012-10-16 17920]
S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-10-2 59392]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-7-9 52736]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-10-2 1255736]
S3 WDC_SAM;WD SCSI Pass Thru driver;C:\Windows\System32\drivers\wdcsam64.sys [2008-5-6 14464]
.
=============== Created Last 30 ================
.
2013-02-14 15:31:06 62976 —-a-w- C:\Windows\SysWow64\PxSecure.dll
2013-02-14 15:31:05 65736 —-a-w- C:\Windows\System32\drivers\pxrts.sys
2013-02-14 15:31:05 36384 —-a-w- C:\Windows\System32\drivers\pxscan.sys
2013-02-14 15:31:04 24024 —-a-w- C:\Windows\System32\drivers\pxkbf.sys
2013-02-14 15:31:04 ——– d—–w- C:\Program Files\Prevx
2013-02-14 15:30:55 ——– d—–w- C:\PROGRA~3\PrevxCSI
2013-02-14 15:25:58 ——– d—–w- C:\Users\ARIELA~1\AppData\Roaming\Malwarebytes
2013-02-14 15:25:44 24176 —-a-w- C:\Windows\System32\drivers\mbam.sys
2013-02-14 15:25:44 ——– d—–w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-02-14 15:25:44 ——– d—–w- C:\PROGRA~3\Malwarebytes
2013-02-14 15:25:25 ——– d—–w- C:\Users\ARIELA~1\AppData\Local\Programs
2013-02-14 00:34:35 972264 —-a-w- C:\PROGRA~3\Microsoft\Microsoft Antimalware\Definition Updates\{7CBFC1D3-E84D-4A49-8C0E-E8EE2A496D87}\gapaengine.dll
2013-02-12 23:53:08 996352 —-a-w- C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-12 23:53:08 768000 —-a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-12 23:50:30 3153408 —-a-w- C:\Windows\System32\win32k.sys
2013-02-12 23:50:10 1913192 —-a-w- C:\Windows\System32\drivers\tcpip.sys
2013-02-12 23:50:09 288088 —-a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS
2013-02-12 23:50:03 215040 —-a-w- C:\Windows\System32\winsrv.dll
2013-02-12 23:50:00 25600 —-a-w- C:\Windows\SysWow64\setup16.exe
2013-02-12 23:50:00 14336 —-a-w- C:\Windows\SysWow64\ntvdm64.dll
2013-02-12 23:49:59 7680 —-a-w- C:\Windows\SysWow64\instnm.exe
2013-02-12 23:49:59 5120 —-a-w- C:\Windows\SysWow64\wow32.dll
2013-02-12 23:49:55 2048 —-a-w- C:\Windows\SysWow64\user.exe
2013-02-12 15:12:35 9161176 —-a-w- C:\PROGRA~3\Microsoft\Microsoft Antimalware\Definition Updates\{DA2977FB-BE78-4418-BEE5-E07B79F05119}\mpengine.dll
2013-02-11 14:13:29 9161176 —-a-w- C:\PROGRA~3\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-01-22 22:44:43 ——– d—–r- C:\Program Files (x86)\Skype
.
==================== Find3M ====================
.
2013-02-08 03:07:57 74096 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2013-02-08 03:07:57 697712 —-a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2013-01-30 10:53:22 273840 ——w- C:\Windows\System32\MpSigStub.exe
2013-01-09 01:19:09 2312704 —-a-w- C:\Windows\System32\jscript9.dll
2013-01-09 01:12:03 1392128 —-a-w- C:\Windows\System32\wininet.dll
2013-01-09 01:11:06 1494528 —-a-w- C:\Windows\System32\inetcpl.cpl
2013-01-09 01:07:51 173056 —-a-w- C:\Windows\System32\ieUnatt.exe
2013-01-09 01:07:47 599040 —-a-w- C:\Windows\System32\vbscript.dll
2013-01-09 01:04:42 2382848 —-a-w- C:\Windows\System32\mshtml.tlb
2013-01-08 22:11:21 1800704 —-a-w- C:\Windows\SysWow64\jscript9.dll
2013-01-08 22:03:20 1129472 —-a-w- C:\Windows\SysWow64\wininet.dll
2013-01-08 22:03:12 1427968 —-a-w- C:\Windows\SysWow64\inetcpl.cpl
2013-01-08 21:59:02 142848 —-a-w- C:\Windows\SysWow64\ieUnatt.exe
2013-01-08 21:58:29 420864 —-a-w- C:\Windows\SysWow64\vbscript.dll
2013-01-08 21:56:23 2382848 —-a-w- C:\Windows\SysWow64\mshtml.tlb
2013-01-05 05:53:43 5553512 —-a-w- C:\Windows\System32\ntoskrnl.exe
2013-01-05 05:00:15 3967848 —-a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2013-01-05 05:00:11 3913064 —-a-w- C:\Windows\SysWow64\ntoskrnl.exe
2013-01-04 04:43:21 44032 —-a-w- C:\Windows\apppatch\acwow64.dll
2012-12-16 17:11:22 46080 —-a-w- C:\Windows\System32\atmlib.dll
2012-12-16 14:45:03 367616 —-a-w- C:\Windows\System32\atmfd.dll
2012-12-16 14:13:28 295424 —-a-w- C:\Windows\SysWow64\atmfd.dll
2012-12-16 14:13:20 34304 —-a-w- C:\Windows\SysWow64\atmlib.dll
2012-12-07 13:20:16 441856 —-a-w- C:\Windows\System32\Wpc.dll
2012-12-07 13:15:31 2746368 —-a-w- C:\Windows\System32\gameux.dll
2012-12-07 12:26:17 308736 —-a-w- C:\Windows\SysWow64\Wpc.dll
2012-12-07 12:20:43 2576384 —-a-w- C:\Windows\SysWow64\gameux.dll
2012-12-07 11:20:04 30720 —-a-w- C:\Windows\System32\usk.rs
2012-12-07 11:20:03 43520 —-a-w- C:\Windows\System32\csrr.rs
2012-12-07 11:20:03 23552 —-a-w- C:\Windows\System32\oflc.rs
2012-12-07 11:20:01 45568 —-a-w- C:\Windows\System32\oflc-nz.rs
2012-12-07 11:20:01 44544 —-a-w- C:\Windows\System32\pegibbfc.rs
2012-12-07 11:20:01 20480 —-a-w- C:\Windows\System32\pegi-fi.rs
2012-12-07 11:20:00 20480 —-a-w- C:\Windows\System32\pegi-pt.rs
2012-12-07 11:19:59 20480 —-a-w- C:\Windows\System32\pegi.rs
2012-12-07 11:19:58 46592 —-a-w- C:\Windows\System32\fpb.rs
2012-12-07 11:19:57 40960 —-a-w- C:\Windows\System32\cob-au.rs
2012-12-07 11:19:57 21504 —-a-w- C:\Windows\System32\grb.rs
2012-12-07 11:19:57 15360 —-a-w- C:\Windows\System32\djctq.rs
2012-12-07 11:19:56 55296 —-a-w- C:\Windows\System32\cero.rs
2012-12-07 11:19:55 51712 —-a-w- C:\Windows\System32\esrb.rs
2012-11-30 05:45:35 362496 —-a-w- C:\Windows\System32\wow64win.dll
2012-11-30 05:45:35 243200 —-a-w- C:\Windows\System32\wow64.dll
2012-11-30 05:45:35 13312 —-a-w- C:\Windows\System32\wow64cpu.dll
2012-11-30 05:43:12 16384 —-a-w- C:\Windows\System32\ntvdm64.dll
2012-11-30 05:41:07 424448 —-a-w- C:\Windows\System32\KernelBase.dll
2012-11-30 04:53:59 274944 —-a-w- C:\Windows\SysWow64\KernelBase.dll
2012-11-30 03:23:48 338432 —-a-w- C:\Windows\System32\conhost.exe
2012-11-30 02:38:59 6144 —ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2012-11-30 02:38:59 4608 —ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2012-11-30 02:38:59 3584 —ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2012-11-30 02:38:59 3072 —ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2012-11-23 03:13:57 68608 —-a-w- C:\Windows\System32\taskhost.exe
2012-11-22 05:44:23 800768 —-a-w- C:\Windows\System32\usp10.dll
2012-11-22 04:45:03 626688 —-a-w- C:\Windows\SysWow64\usp10.dll
2012-11-20 05:48:49 307200 —-a-w- C:\Windows\System32\ncrypt.dll
2012-11-20 04:51:09 220160 —-a-w- C:\Windows\SysWow64\ncrypt.dll
.
============= FINISH: 10:17:30.98 ===============

MrCharlie

Post #2February 16, 2013, 10:41 PM UTC last edited February 16, 2013, 10:41 PM UTC

Sorry for the delay, do you still need help??

If so…….

Please remove any usb or external drives from the computer before you run this scan!

Please download and run RogueKiller to your desktop.

http://tigzy.geekstogo.com/Tools/RogueKillerX64.exe <—use this one for 64 bit systems

Quit all running programs.

For Windows XP, double-click to start.
For Vista or Windows 7-8, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Click Scan to scan the system.
When the scan completes > Close out the program > Don't Fix anything!

Don't run any other options, they're not all bad!!!!!!!

Post back the report which should be located on your desktop.

MrC

V. Rowan

Post #3February 16, 2013, 11:00 PM UTC

Yes please! I still need help.

I had to run this scan in Safe Mode since regular Windows is slow and buggy. Hope these results are useful:

RogueKiller V8.5.1 _x64_ [Feb 12 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Website : http://tigzy.geekstogo.com/roguekiller.php
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Safe mode with network support
User : Ariel Anderson [Admin rights]
Mode : Scan – Date : 02/16/2013 16:56:35
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 2 ¤¤¤
[HJ DESK] HKLM\[…]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
–> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: TOSHIBA MK3261GSYN ATA Device +++++
— User —
[MBR] da6adfafab852054b649b47921ae8d25
[BSP] b0c99e056631234007ce242b564e5c5b : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 305143 Mo
User = LL1 … OK!
User = LL2 … OK!

Finished : << RKreport[1]_S_02162013_02d1656.txt >>
RKreport[1]_S_02162013_02d1656.txt

MrCharlie

Post #4February 17, 2013, 12:19 PM UTC

OK, lets run some scans:

Please read the directions carefully so you don't end up deleting something that is good!!

If in doubt about an entry….please ask or choose Skip!!!!

If you get the warning about a file UnsignedFile.Multi.Generic or LockedFile.Multi.Generic please choose
Skip and click on Continue

If a suspicious object is detected, the default action will be Skip, click on Continue

Please note that TDSSKiller can be run in safe mode if needed.

Here's a video that explains how to run it if needed:
How To Run TDSSKiller

Please download the latest version of TDSSKiller from here and save it to your Desktop.

Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.

[external image: Posted Image]
Put a checkmark beside loaded modules.

[external image: Posted Image]
A reboot will be needed to apply the changes. Do it.
TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs.
Then click on Change parameters in TDSSKiller.
Check all boxes then click OK.

[external image: Posted Image]
Click the Start Scan button.

[external image: Posted Image]
The scan should take no longer than 2 minutes.
If a suspicious object is detected, the default action will be Skip, click on Continue.

[external image: Posted Image]

Any entries like this: \Device\Harddisk0\DR0 ( TDSS File System ) - please choose Skip.

If in doubt about an entry….please ask or choose Skip
If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.

[external image: Posted Image]

Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here. There may be 3 logs > so post or attach all of them.
Sometimes these logs can be very large, in that case please attach it or zip it up and attach it.

Here's a summary of what to do if you would like to print it out:

If in doubt about an entry….please ask or choose Skip

If a suspicious object is detected, the default action will be Skip, click on Continue

If you get the warning about a file UnsignedFile.Multi.Generic or LockedFile.Multi.Generic please choose
Skip and click on Continue

Any entries like this: \Device\Harddisk0\DR0 ( TDSS File System ) - please choose Skip.

If malicious objects are found, they will show in the Scan results and offer three (3) options.

Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.
Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.

MrC

V. Rowan

Post #5February 17, 2013, 3:50 PM UTC

Great! Here are the results: 09:49:16.0028 2832 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 09:49:16.0356 2832 ============================================================ 09:49:16.0356 2832 Current date / time: 2013/02/17 09:49:16.0356 09:49:16.0356 2832 SystemInfo: 09:49:16.0356 2832 09:49:16.0356 2832 OS Version: 6.1.7601 ServicePack: 1.0 09:49:16.0356 2832 Product type: Workstation 09:49:16.0356 2832 ComputerName: CELESTE 09:49:16.0356 2832 UserName: Ariel Anderson 09:49:16.0356 2832 Windows directory: C:\Windows 09:49:16.0356 2832 System windows directory: C:\Windows 09:49:16.0356 2832 Running under WOW64 09:49:16.0356 2832 Processor architecture: Intel x64 09:49:16.0356 2832 Number of processors: 2 09:49:16.0356 2832 Page size: 0x1000 09:49:16.0356 2832 Boot type: Safe boot with network 09:49:16.0356 2832 ============================================================ 09:49:17.0011 2832 BG loaded 09:49:17.0276 2832 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 09:49:17.0276 2832 ============================================================ 09:49:17.0276 2832 \Device\Harddisk0\DR0: 09:49:17.0276 2832 MBR partitions: 09:49:17.0276 2832 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000 09:49:17.0276 2832 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x253FB800 09:49:17.0276 2832 ============================================================ 09:49:17.0339 2832 C: <-> \Device\Harddisk0\DR0\Partition2 09:49:17.0339 2832 ============================================================ 09:49:17.0339 2832 Initialize success 09:49:17.0339 2832 ============================================================ 09:49:24.0359 2864 ============================================================ 09:49:24.0359 2864 Scan started 09:49:24.0359 2864 Mode: Manual; SigCheck; TDLFS; 09:49:24.0359 2864 ============================================================ 09:49:25.0139 2864 ================ Scan system memory ======================== 09:49:25.0139 2864 System memory - ok 09:49:25.0139 2864 ================ Scan services ============================= 09:49:25.0217 2864 [ 581D88B25C4D4121824FED2CA38E562F ] !SASCORE C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE 09:49:25.0263 2864 !SASCORE - ok 09:49:25.0373 2864 05154916 - ok 09:49:25.0404 2864 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 09:49:25.0419 2864 1394ohci - ok 09:49:25.0466 2864 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys 09:49:25.0482 2864 ACPI - ok 09:49:25.0513 2864 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 09:49:25.0513 2864 AcpiPmi - ok 09:49:25.0638 2864 [ D19C4EE2AC7C47B8F5F84FFF1A789D8A ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 09:49:25.0653 2864 AdobeARMservice - ok 09:49:25.0763 2864 [ EC807244904FA170C299AB06D87FBDBE ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 09:49:25.0778 2864 AdobeFlashPlayerUpdateSvc - ok 09:49:25.0809 2864 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys 09:49:25.0825 2864 adp94xx - ok 09:49:25.0841 2864 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys 09:49:25.0856 2864 adpahci - ok 09:49:25.0872 2864 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys 09:49:25.0887 2864 adpu320 - ok 09:49:25.0919 2864 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 09:49:25.0950 2864 AeLookupSvc - ok 09:49:25.0997 2864 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys 09:49:26.0012 2864 AFD - ok 09:49:26.0043 2864 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys 09:49:26.0059 2864 agp440 - ok 09:49:26.0075 2864 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe 09:49:26.0090 2864 ALG - ok 09:49:26.0106 2864 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys 09:49:26.0121 2864 aliide - ok 09:49:26.0137 2864 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys 09:49:26.0153 2864 amdide - ok 09:49:26.0168 2864 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 09:49:26.0184 2864 AmdK8 - ok 09:49:26.0184 2864 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 09:49:26.0199 2864 AmdPPM - ok 09:49:26.0231 2864 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys 09:49:26.0231 2864 amdsata - ok 09:49:26.0262 2864 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys 09:49:26.0262 2864 amdsbs - ok 09:49:26.0277 2864 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys 09:49:26.0293 2864 amdxata - ok 09:49:26.0324 2864 [ 60257F0A7ED9781719A6B7B6F661A5B6 ] Andbus C:\Windows\system32\DRIVERS\lgandbus64.sys 09:49:26.0340 2864 Andbus - ok 09:49:26.0371 2864 [ 98449A2957778A6F025C418438A380F4 ] ApfiltrService C:\Windows\system32\DRIVERS\Apfiltr.sys 09:49:26.0387 2864 ApfiltrService - ok 09:49:26.0418 2864 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys 09:49:26.0449 2864 AppID - ok 09:49:26.0465 2864 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll 09:49:26.0511 2864 AppIDSvc - ok 09:49:26.0543 2864 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll 09:49:26.0574 2864 Appinfo - ok 09:49:26.0621 2864 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 09:49:26.0636 2864 Apple Mobile Device - ok 09:49:26.0652 2864 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys 09:49:26.0667 2864 arc - ok 09:49:26.0683 2864 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys 09:49:26.0699 2864 arcsas - ok 09:49:26.0714 2864 [ CE6D8BCC4787704EA4FEEB92B0D0CAF8 ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys 09:49:26.0730 2864 aswFsBlk - ok 09:49:26.0745 2864 [ 0DEBEB2E3FBD0BF5343125CCE617F105 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys 09:49:26.0745 2864 aswMonFlt - ok 09:49:26.0761 2864 [ 952EDC2E81F85D1781958D4128BF59F8 ] aswRdr C:\Windows\system32\drivers\aswRdr.sys 09:49:26.0761 2864 aswRdr - ok 09:49:26.0792 2864 [ DD383E2AC941C545A85AB72503DA6C12 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys 09:49:26.0808 2864 aswSnx - ok 09:49:26.0823 2864 [ EF5403FB8B2DCB791EC365FDF6040A4A ] aswSP C:\Windows\system32\drivers\aswSP.sys 09:49:26.0839 2864 aswSP - ok 09:49:26.0855 2864 [ 34165DA5C6B30C0F9D61246BF8A28040 ] aswTdi C:\Windows\system32\drivers\aswTdi.sys 09:49:26.0870 2864 aswTdi - ok 09:49:26.0901 2864 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 09:49:26.0933 2864 AsyncMac - ok 09:49:26.0964 2864 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys 09:49:26.0979 2864 atapi - ok 09:49:27.0026 2864 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 09:49:27.0073 2864 AudioEndpointBuilder - ok 09:49:27.0073 2864 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll 09:49:27.0120 2864 AudioSrv - ok 09:49:27.0167 2864 [ 996E6D052438E8D8DFD501F31560B2E0 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe 09:49:27.0182 2864 avast! Antivirus - ok 09:49:27.0213 2864 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll 09:49:27.0229 2864 AxInstSV - ok 09:49:27.0245 2864 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys 09:49:27.0260 2864 b06bdrv - ok 09:49:27.0291 2864 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 09:49:27.0307 2864 b57nd60a - ok 09:49:27.0354 2864 [ 9E84A931DBEE0292E38ED672F6293A99 ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys 09:49:27.0385 2864 BCM43XX - ok 09:49:27.0416 2864 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll 09:49:27.0432 2864 BDESVC - ok 09:49:27.0432 2864 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys 09:49:27.0479 2864 Beep - ok 09:49:27.0510 2864 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll 09:49:27.0557 2864 BFE - ok 09:49:27.0588 2864 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll 09:49:27.0619 2864 BITS - ok 09:49:27.0650 2864 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 09:49:27.0666 2864 blbdrive - ok 09:49:27.0713 2864 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 09:49:27.0728 2864 Bonjour Service - ok 09:49:27.0759 2864 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 09:49:27.0775 2864 bowser - ok 09:49:27.0791 2864 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys 09:49:27.0806 2864 BrFiltLo - ok 09:49:27.0822 2864 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys 09:49:27.0837 2864 BrFiltUp - ok 09:49:27.0869 2864 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll 09:49:27.0884 2864 Browser - ok 09:49:27.0915 2864 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys 09:49:27.0915 2864 Brserid - ok 09:49:27.0931 2864 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 09:49:27.0947 2864 BrSerWdm - ok 09:49:27.0962 2864 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 09:49:27.0978 2864 BrUsbMdm - ok 09:49:27.0978 2864 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 09:49:27.0993 2864 BrUsbSer - ok 09:49:27.0993 2864 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys 09:49:28.0009 2864 BTHMODEM - ok 09:49:28.0040 2864 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll 09:49:28.0071 2864 bthserv - ok 09:49:28.0087 2864 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 09:49:28.0118 2864 cdfs - ok 09:49:28.0165 2864 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\drivers\cdrom.sys 09:49:28.0181 2864 cdrom - ok 09:49:28.0196 2864 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll 09:49:28.0227 2864 CertPropSvc - ok 09:49:28.0243 2864 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys 09:49:28.0259 2864 circlass - ok 09:49:28.0274 2864 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys 09:49:28.0290 2864 CLFS - ok 09:49:28.0352 2864 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 09:49:28.0352 2864 clr_optimization_v2.0.50727_32 - ok 09:49:28.0399 2864 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 09:49:28.0399 2864 clr_optimization_v2.0.50727_64 - ok 09:49:28.0461 2864 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 09:49:28.0477 2864 clr_optimization_v4.0.30319_32 - ok 09:49:28.0508 2864 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 09:49:28.0524 2864 clr_optimization_v4.0.30319_64 - ok 09:49:28.0555 2864 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 09:49:28.0555 2864 CmBatt - ok 09:49:28.0602 2864 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys 09:49:28.0617 2864 cmdide - ok 09:49:28.0649 2864 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys 09:49:28.0680 2864 CNG - ok 09:49:28.0680 2864 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 09:49:28.0695 2864 Compbatt - ok 09:49:28.0727 2864 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 09:49:28.0742 2864 CompositeBus - ok 09:49:28.0992 2864 COMSysApp - ok 09:49:29.0007 2864 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys 09:49:29.0023 2864 crcdisk - ok 09:49:29.0054 2864 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll 09:49:29.0070 2864 CryptSvc - ok 09:49:29.0210 2864 [ 5131D2469B6B19DC20B446EBE43EBB79 ] CSIScanner C:\Program Files\Prevx\prevx.exe 09:49:29.0335 2864 CSIScanner - ok 09:49:29.0351 2864 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll 09:49:29.0397 2864 DcomLaunch - ok 09:49:29.0413 2864 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll 09:49:29.0460 2864 defragsvc - ok 09:49:29.0491 2864 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 09:49:29.0522 2864 DfsC - ok 09:49:29.0569 2864 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll 09:49:29.0569 2864 Dhcp - ok 09:49:29.0600 2864 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys 09:49:29.0631 2864 discache - ok 09:49:29.0647 2864 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys 09:49:29.0663 2864 Disk - ok 09:49:29.0727 2864 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll 09:49:29.0750 2864 Dnscache - ok 09:49:29.0820 2864 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll 09:49:29.0864 2864 dot3svc - ok 09:49:29.0902 2864 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll 09:49:29.0949 2864 DPS - ok 09:49:30.0097 2864 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 09:49:30.0117 2864 drmkaud - ok 09:49:30.0190 2864 [ 0040A0132AAC1004E50055F8FBB14C08 ] dsNcAdpt C:\Windows\system32\DRIVERS\dsNcAdpt.sys 09:49:30.0199 2864 dsNcAdpt - ok 09:49:30.0251 2864 [ CE235D0AF501D4A622B0B8CFE7963B32 ] dsNcService C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe 09:49:30.0269 2864 dsNcService - ok 09:49:30.0308 2864 [ 821BF177A24172F5F0EE9B322F58516C ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys 09:49:30.0319 2864 dtsoftbus01 - ok 09:49:30.0366 2864 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 09:49:30.0391 2864 DXGKrnl - ok 09:49:30.0417 2864 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll 09:49:30.0453 2864 EapHost - ok 09:49:30.0524 2864 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys 09:49:30.0569 2864 ebdrv - ok 09:49:30.0594 2864 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe 09:49:30.0606 2864 EFS - ok 09:49:30.0675 2864 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 09:49:30.0694 2864 ehRecvr - ok 09:49:30.0717 2864 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe 09:49:30.0730 2864 ehSched - ok 09:49:30.0762 2864 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys 09:49:30.0781 2864 elxstor - ok 09:49:30.0794 2864 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys 09:49:30.0805 2864 ErrDev - ok 09:49:30.0840 2864 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll 09:49:30.0881 2864 EventSystem - ok 09:49:30.0911 2864 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys 09:49:30.0958 2864 exfat - ok 09:49:31.0005 2864 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys 09:49:31.0036 2864 fastfat - ok 09:49:31.0114 2864 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe 09:49:31.0130 2864 Fax - ok 09:49:31.0145 2864 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys 09:49:31.0161 2864 fdc - ok 09:49:31.0192 2864 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll 09:49:31.0223 2864 fdPHost - ok 09:49:31.0254 2864 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll 09:49:31.0286 2864 FDResPub - ok 09:49:31.0348 2864 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 09:49:31.0348 2864 FileInfo - ok 09:49:31.0379 2864 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 09:49:31.0410 2864 Filetrace - ok 09:49:31.0426 2864 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 09:49:31.0442 2864 flpydisk - ok 09:49:31.0520 2864 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 09:49:31.0520 2864 FltMgr - ok 09:49:31.0660 2864 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll 09:49:31.0691 2864 FontCache - ok 09:49:31.0816 2864 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 09:49:31.0816 2864 FontCache3.0.0.0 - ok 09:49:31.0863 2864 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 09:49:31.0878 2864 FsDepends - ok 09:49:31.0925 2864 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 09:49:31.0925 2864 Fs_Rec - ok 09:49:32.0019 2864 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 09:49:32.0034 2864 fvevol - ok 09:49:32.0050 2864 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys 09:49:32.0066 2864 gagp30kx - ok 09:49:32.0097 2864 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 09:49:32.0112 2864 GEARAspiWDM - ok 09:49:32.0237 2864 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll 09:49:32.0284 2864 gpsvc - ok 09:49:32.0346 2864 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 09:49:32.0346 2864 hcw85cir - ok 09:49:32.0424 2864 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 09:49:32.0456 2864 HdAudAddService - ok 09:49:32.0487 2864 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys 09:49:32.0502 2864 HDAudBus - ok 09:49:32.0502 2864 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys 09:49:32.0518 2864 HidBatt - ok 09:49:32.0534 2864 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys 09:49:32.0549 2864 HidBth - ok 09:49:32.0565 2864 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys 09:49:32.0580 2864 HidIr - ok 09:49:32.0612 2864 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll 09:49:32.0643 2864 hidserv - ok 09:49:32.0674 2864 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 09:49:32.0674 2864 HidUsb - ok 09:49:32.0736 2864 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll 09:49:32.0783 2864 hkmsvc - ok 09:49:32.0846 2864 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll 09:49:32.0861 2864 HomeGroupListener - ok 09:49:32.0928 2864 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 09:49:32.0942 2864 HomeGroupProvider - ok 09:49:33.0021 2864 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 09:49:33.0032 2864 HpSAMD - ok 09:49:33.0103 2864 [ F47CEC45FB85791D4AB237563AD0FA8F ] HTCAND64 C:\Windows\system32\Drivers\ANDROIDUSB.sys 09:49:33.0115 2864 HTCAND64 - ok 09:49:33.0188 2864 [ B8B1B284362E1D8135112573395D5DA5 ] htcnprot C:\Windows\system32\DRIVERS\htcnprot.sys 09:49:33.0196 2864 htcnprot - ok 09:49:33.0262 2864 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys 09:49:33.0303 2864 HTTP - ok 09:49:33.0348 2864 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 09:49:33.0359 2864 hwpolicy - ok 09:49:33.0401 2864 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys 09:49:33.0414 2864 i8042prt - ok 09:49:33.0455 2864 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 09:49:33.0471 2864 iaStorV - ok 09:49:33.0628 2864 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 09:49:33.0649 2864 idsvc - ok 09:49:34.0143 2864 [ A87261EF1546325B559374F5689CF5BC ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys 09:49:34.0227 2864 igfx - ok 09:49:34.0288 2864 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys 09:49:34.0299 2864 iirsp - ok 09:49:34.0396 2864 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll 09:49:34.0442 2864 IKEEXT - ok 09:49:34.0475 2864 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys 09:49:34.0486 2864 intelide - ok 09:49:34.0510 2864 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 09:49:34.0522 2864 intelppm - ok 09:49:34.0571 2864 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll 09:49:34.0606 2864 IPBusEnum - ok 09:49:34.0637 2864 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 09:49:34.0679 2864 IpFilterDriver - ok 09:49:34.0720 2864 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 09:49:34.0737 2864 iphlpsvc - ok 09:49:34.0770 2864 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 09:49:34.0782 2864 IPMIDRV - ok 09:49:34.0809 2864 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 09:49:34.0843 2864 IPNAT - ok 09:49:34.0891 2864 [ 6E50CFA46527B39015B750AAD161C5CC ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 09:49:34.0912 2864 iPod Service - ok 09:49:34.0928 2864 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 09:49:34.0943 2864 IRENUM - ok 09:49:34.0957 2864 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys 09:49:34.0968 2864 isapnp - ok 09:49:34.0989 2864 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 09:49:35.0003 2864 iScsiPrt - ok 09:49:35.0019 2864 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys 09:49:35.0030 2864 kbdclass - ok 09:49:35.0042 2864 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys 09:49:35.0054 2864 kbdhid - ok 09:49:35.0069 2864 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe 09:49:35.0080 2864 KeyIso - ok 09:49:35.0119 2864 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 09:49:35.0131 2864 KSecDD - ok 09:49:35.0168 2864 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 09:49:35.0181 2864 KSecPkg - ok 09:49:35.0210 2864 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 09:49:35.0244 2864 ksthunk - ok 09:49:35.0276 2864 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll 09:49:35.0314 2864 KtmRm - ok 09:49:35.0363 2864 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll 09:49:35.0400 2864 LanmanServer - ok 09:49:35.0441 2864 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 09:49:35.0476 2864 LanmanWorkstation - ok 09:49:35.0492 2864 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 09:49:35.0526 2864 lltdio - ok 09:49:35.0550 2864 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll 09:49:35.0587 2864 lltdsvc - ok 09:49:35.0598 2864 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll 09:49:35.0633 2864 lmhosts - ok 09:49:35.0662 2864 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys 09:49:35.0674 2864 LSI_FC - ok 09:49:35.0683 2864 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys 09:49:35.0692 2864 LSI_SAS - ok 09:49:35.0708 2864 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys 09:49:35.0708 2864 LSI_SAS2 - ok 09:49:35.0723 2864 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys 09:49:35.0739 2864 LSI_SCSI - ok 09:49:35.0755 2864 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys 09:49:35.0786 2864 luafv - ok 09:49:35.0833 2864 [ 92EB844D90615CB266F84C3202B8786E ] MBAMProtector C:\Windows\system32\drivers\mbam.sys 09:49:35.0833 2864 MBAMProtector - ok 09:49:35.0895 2864 [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe 09:49:35.0911 2864 MBAMScheduler - ok 09:49:35.0942 2864 [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe 09:49:35.0957 2864 MBAMService - ok 09:49:35.0989 2864 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 09:49:36.0004 2864 Mcx2Svc - ok 09:49:36.0020 2864 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys 09:49:36.0020 2864 megasas - ok 09:49:36.0035 2864 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys 09:49:36.0051 2864 MegaSR - ok 09:49:36.0145 2864 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe 09:49:36.0160 2864 Microsoft Office Groove Audit Service - ok 09:49:36.0191 2864 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll 09:49:36.0223 2864 MMCSS - ok 09:49:36.0223 2864 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys 09:49:36.0269 2864 Modem - ok 09:49:36.0269 2864 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys 09:49:36.0285 2864 monitor - ok 09:49:36.0316 2864 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 09:49:36.0342 2864 mouclass - ok 09:49:36.0370 2864 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 09:49:36.0382 2864 mouhid - ok 09:49:36.0418 2864 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 09:49:36.0430 2864 mountmgr - ok 09:49:36.0496 2864 [ 9C3758018DED02F4AE53CCA1C5F084A2 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 09:49:36.0506 2864 MozillaMaintenance - ok 09:49:36.0538 2864 [ 05BF204EC0E82CC4A054DB189C8A3D84 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys 09:49:36.0555 2864 MpFilter - ok 09:49:36.0587 2864 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys 09:49:36.0600 2864 mpio - ok 09:49:36.0628 2864 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 09:49:36.0662 2864 mpsdrv - ok 09:49:36.0708 2864 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll 09:49:36.0750 2864 MpsSvc - ok 09:49:36.0782 2864 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 09:49:36.0799 2864 MRxDAV - ok 09:49:36.0827 2864 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 09:49:36.0839 2864 mrxsmb - ok 09:49:36.0860 2864 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 09:49:36.0873 2864 mrxsmb10 - ok 09:49:36.0888 2864 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 09:49:36.0900 2864 mrxsmb20 - ok 09:49:36.0928 2864 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys 09:49:36.0939 2864 msahci - ok 09:49:36.0972 2864 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys 09:49:36.0984 2864 msdsm - ok 09:49:37.0007 2864 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe 09:49:37.0021 2864 MSDTC - ok 09:49:37.0048 2864 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys 09:49:37.0082 2864 Msfs - ok 09:49:37.0090 2864 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 09:49:37.0124 2864 mshidkmdf - ok 09:49:37.0169 2864 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 09:49:37.0180 2864 msisadrv - ok 09:49:37.0205 2864 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 09:49:37.0241 2864 MSiSCSI - ok 09:49:37.0245 2864 msiserver - ok 09:49:37.0260 2864 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 09:49:37.0295 2864 MSKSSRV - ok 09:49:37.0346 2864 [ CC8E4F72F21340A4D3A3D4DB50313EF5 ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe 09:49:37.0362 2864 MsMpSvc - ok 09:49:37.0377 2864 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 09:49:37.0408 2864 MSPCLOCK - ok 09:49:37.0424 2864 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 09:49:37.0455 2864 MSPQM - ok 09:49:37.0502 2864 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 09:49:37.0518 2864 MsRPC - ok 09:49:37.0549 2864 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 09:49:37.0564 2864 mssmbios - ok 09:49:37.0580 2864 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 09:49:37.0611 2864 MSTEE - ok 09:49:37.0627 2864 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys 09:49:37.0642 2864 MTConfig - ok 09:49:37.0658 2864 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys 09:49:37.0658 2864 Mup - ok 09:49:37.0705 2864 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll 09:49:37.0752 2864 napagent - ok 09:49:37.0767 2864 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 09:49:37.0783 2864 NativeWifiP - ok 09:49:37.0830 2864 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys 09:49:37.0861 2864 NDIS - ok 09:49:37.0861 2864 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 09:49:37.0908 2864 NdisCap - ok 09:49:37.0923 2864 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 09:49:37.0970 2864 NdisTapi - ok 09:49:38.0001 2864 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 09:49:38.0032 2864 Ndisuio - ok 09:49:38.0064 2864 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 09:49:38.0110 2864 NdisWan - ok 09:49:38.0142 2864 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 09:49:38.0173 2864 NDProxy - ok 09:49:38.0188 2864 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 09:49:38.0220 2864 NetBIOS - ok 09:49:38.0251 2864 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 09:49:38.0298 2864 NetBT - ok 09:49:38.0298 2864 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe 09:49:38.0313 2864 Netlogon - ok 09:49:38.0344 2864 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll 09:49:38.0376 2864 Netman - ok 09:49:38.0391 2864 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll 09:49:38.0438 2864 netprofm - ok 09:49:38.0469 2864 [ 3E5A36127E201DDF663176B66828FAFE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\SMSvcHost.exe 09:49:38.0469 2864 NetTcpPortSharing - ok 09:49:38.0500 2864 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys 09:49:38.0516 2864 nfrd960 - ok 09:49:38.0563 2864 [ 5FF89F20317309D28AC1EDEB0CD1BA72 ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys 09:49:38.0578 2864 NisDrv - ok 09:49:38.0594 2864 [ 79E80B10FE8F6662E0C9162A68C43444 ] NisSrv c:\Program Files\Microsoft Security Client\NisSrv.exe 09:49:38.0625 2864 NisSrv - ok 09:49:38.0641 2864 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll 09:49:38.0656 2864 NlaSvc - ok 09:49:38.0672 2864 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys 09:49:38.0703 2864 Npfs - ok 09:49:38.0734 2864 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll 09:49:38.0766 2864 nsi - ok 09:49:38.0781 2864 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 09:49:38.0812 2864 nsiproxy - ok 09:49:38.0875 2864 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 09:49:38.0906 2864 Ntfs - ok 09:49:38.0953 2864 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys 09:49:39.0000 2864 Null - ok 09:49:39.0062 2864 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys 09:49:39.0078 2864 nvraid - ok 09:49:39.0109 2864 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys 09:49:39.0124 2864 nvstor - ok 09:49:39.0156 2864 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 09:49:39.0171 2864 nv_agp - ok 09:49:39.0249 2864 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 09:49:39.0265 2864 odserv - ok 09:49:39.0296 2864 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 09:49:39.0312 2864 ohci1394 - ok 09:49:39.0343 2864 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 09:49:39.0343 2864 ose - ok 09:49:39.0390 2864 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 09:49:39.0405 2864 p2pimsvc - ok 09:49:39.0436 2864 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll 09:49:39.0452 2864 p2psvc - ok 09:49:39.0483 2864 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys 09:49:39.0483 2864 Parport - ok 09:49:39.0514 2864 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys 09:49:39.0530 2864 partmgr - ok 09:49:39.0592 2864 [ 9987ABA0E5DD0D46C95076B157B38C06 ] PassThru Service C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe 09:49:39.0592 2864 PassThru Service ( UnsignedFile.Multi.Generic ) - warning 09:49:39.0592 2864 PassThru Service - detected UnsignedFile.Multi.Generic (1) 09:49:39.0624 2864 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll 09:49:39.0639 2864 PcaSvc - ok 09:49:39.0670 2864 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys 09:49:39.0686 2864 pci - ok 09:49:39.0717 2864 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys 09:49:39.0717 2864 pciide - ok 09:49:39.0733 2864 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys 09:49:39.0748 2864 pcmcia - ok 09:49:39.0764 2864 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys 09:49:39.0780 2864 pcw - ok 09:49:39.0795 2864 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys 09:49:39.0842 2864 PEAUTH - ok 09:49:39.0920 2864 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe 09:49:39.0936 2864 PerfHost - ok 09:49:39.0998 2864 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll 09:49:40.0045 2864 pla - ok 09:49:40.0076 2864 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 09:49:40.0092 2864 PlugPlay - ok 09:49:40.0138 2864 [ A010F13D27C1033A8BE09D5FA9BF348B ] pneteth C:\Windows\system32\DRIVERS\pneteth.sys 09:49:40.0138 2864 pneteth - ok 09:49:40.0185 2864 [ 06841F5CD8410B6BDC0B5A631B8F8787 ] pnetmdm C:\Windows\system32\DRIVERS\pnetmdm64.sys 09:49:40.0185 2864 pnetmdm - ok 09:49:40.0216 2864 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 09:49:40.0216 2864 PNRPAutoReg - ok 09:49:40.0232 2864 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 09:49:40.0248 2864 PNRPsvc - ok 09:49:40.0294 2864 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 09:49:40.0341 2864 PolicyAgent - ok 09:49:40.0372 2864 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll 09:49:40.0404 2864 Power - ok 09:49:40.0435 2864 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 09:49:40.0466 2864 PptpMiniport - ok 09:49:40.0482 2864 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys 09:49:40.0497 2864 Processor - ok 09:49:40.0528 2864 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll 09:49:40.0544 2864 ProfSvc - ok 09:49:40.0560 2864 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe 09:49:40.0575 2864 ProtectedStorage - ok 09:49:40.0606 2864 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys 09:49:40.0638 2864 Psched - ok 09:49:40.0684 2864 [ BA5F7C107EACE67973B4B798832A74C7 ] pxkbf C:\Windows\system32\drivers\pxkbf.sys 09:49:40.0700 2864 pxkbf - ok 09:49:40.0716 2864 [ 007E57428802F587D0D6737AE7A9D989 ] pxrts C:\Windows\system32\drivers\pxrts.sys 09:49:40.0731 2864 pxrts - ok 09:49:40.0747 2864 [ 66D4D00C8908888A68B749D91F1E6789 ] pxscan C:\Windows\system32\drivers\pxscan.sys 09:49:40.0747 2864 pxscan - ok 09:49:40.0794 2864 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys 09:49:40.0825 2864 ql2300 - ok 09:49:40.0840 2864 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys 09:49:40.0840 2864 ql40xx - ok 09:49:40.0887 2864 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll 09:49:40.0918 2864 QWAVE - ok 09:49:40.0934 2864 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 09:49:40.0950 2864 QWAVEdrv - ok 09:49:40.0965 2864 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 09:49:40.0996 2864 RasAcd - ok 09:49:41.0012 2864 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 09:49:41.0043 2864 RasAgileVpn - ok 09:49:41.0074 2864 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll 09:49:41.0106 2864 RasAuto - ok 09:49:41.0137 2864 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 09:49:41.0168 2864 Rasl2tp - ok 09:49:41.0230 2864 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll 09:49:41.0262 2864 RasMan - ok 09:49:41.0293 2864 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 09:49:41.0324 2864 RasPppoe - ok 09:49:41.0340 2864 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 09:49:41.0371 2864 RasSstp - ok 09:49:41.0402 2864 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 09:49:41.0433 2864 rdbss - ok 09:49:41.0449 2864 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys 09:49:41.0464 2864 rdpbus - ok 09:49:41.0480 2864 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 09:49:41.0511 2864 RDPCDD - ok 09:49:41.0527 2864 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 09:49:41.0558 2864 RDPENCDD - ok 09:49:41.0574 2864 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 09:49:41.0605 2864 RDPREFMP - ok 09:49:41.0636 2864 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 09:49:41.0652 2864 RDPWD - ok 09:49:41.0698 2864 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 09:49:41.0714 2864 rdyboost - ok 09:49:41.0745 2864 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll 09:49:41.0776 2864 RemoteAccess - ok 09:49:41.0792 2864 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll 09:49:41.0839 2864 RemoteRegistry - ok 09:49:41.0886 2864 [ 388D3DD1A6457280F3BADBA9F3ACD6B1 ] ROOTMODEM C:\Windows\system32\Drivers\RootMdm.sys 09:49:41.0917 2864 ROOTMODEM - ok 09:49:41.0932 2864 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 09:49:41.0964 2864 RpcEptMapper - ok 09:49:41.0995 2864 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe 09:49:42.0010 2864 RpcLocator - ok 09:49:42.0042 2864 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll 09:49:42.0088 2864 RpcSs - ok 09:49:42.0104 2864 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 09:49:42.0135 2864 rspndr - ok 09:49:42.0151 2864 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe 09:49:42.0151 2864 SamSs - ok 09:49:42.0182 2864 [ 3289766038DB2CB14D07DC84392138D5 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS 09:49:42.0182 2864 SASDIFSV - ok 09:49:42.0198 2864 [ 58A38E75F3316A83C23DF6173D41F2B5 ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS 09:49:42.0198 2864 SASKUTIL - ok 09:49:42.0244 2864 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 09:49:42.0260 2864 sbp2port - ok 09:49:42.0276 2864 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll 09:49:42.0322 2864 SCardSvr - ok 09:49:42.0354 2864 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 09:49:42.0385 2864 scfilter - ok 09:49:42.0432 2864 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll 09:49:42.0463 2864 Schedule - ok 09:49:42.0494 2864 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll 09:49:42.0541 2864 SCPolicySvc - ok 09:49:42.0572 2864 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll 09:49:42.0588 2864 SDRSVC - ok 09:49:42.0619 2864 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 09:49:42.0650 2864 secdrv - ok 09:49:42.0681 2864 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll 09:49:42.0712 2864 seclogon - ok 09:49:42.0754 2864 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll 09:49:42.0789 2864 SENS - ok 09:49:42.0805 2864 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll 09:49:42.0817 2864 SensrSvc - ok 09:49:42.0836 2864 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 09:49:42.0848 2864 Serenum - ok 09:49:42.0860 2864 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys 09:49:42.0873 2864 Serial - ok 09:49:42.0884 2864 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys 09:49:42.0895 2864 sermouse - ok 09:49:42.0936 2864 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll 09:49:42.0970 2864 SessionEnv - ok 09:49:43.0004 2864 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 09:49:43.0019 2864 sffdisk - ok 09:49:43.0033 2864 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 09:49:43.0047 2864 sffp_mmc - ok 09:49:43.0060 2864 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 09:49:43.0074 2864 sffp_sd - ok 09:49:43.0099 2864 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys 09:49:43.0111 2864 sfloppy - ok 09:49:43.0137 2864 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll 09:49:43.0175 2864 SharedAccess - ok 09:49:43.0214 2864 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll 09:49:43.0251 2864 ShellHWDetection - ok 09:49:43.0269 2864 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys 09:49:43.0280 2864 SiSRaid2 - ok 09:49:43.0292 2864 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys 09:49:43.0304 2864 SiSRaid4 - ok 09:49:43.0368 2864 [ D0C0B700152B1F610F10B356483B3401 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 09:49:43.0378 2864 SkypeUpdate - ok 09:49:43.0399 2864 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys 09:49:43.0434 2864 Smb - ok 09:49:43.0484 2864 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 09:49:43.0497 2864 SNMPTRAP - ok 09:49:43.0523 2864 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys 09:49:43.0534 2864 spldr - ok 09:49:43.0576 2864 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe 09:49:43.0594 2864 Spooler - ok 09:49:43.0685 2864 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe 09:49:43.0756 2864 sppsvc - ok 09:49:43.0780 2864 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll 09:49:43.0826 2864 sppuinotify - ok 09:49:43.0842 2864 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys 09:49:43.0858 2864 srv - ok 09:49:43.0889 2864 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 09:49:43.0904 2864 srv2 - ok 09:49:43.0920 2864 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 09:49:43.0920 2864 srvnet - ok 09:49:43.0951 2864 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 09:49:43.0982 2864 SSDPSRV - ok 09:49:43.0998 2864 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll 09:49:44.0029 2864 SstpSvc - ok 09:49:44.0060 2864 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys 09:49:44.0076 2864 stexstor - ok 09:49:44.0107 2864 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll 09:49:44.0138 2864 stisvc - ok 09:49:44.0170 2864 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys 09:49:44.0185 2864 swenum - ok 09:49:44.0263 2864 [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe 09:49:44.0279 2864 SwitchBoard ( UnsignedFile.Multi.Generic ) - warning 09:49:44.0279 2864 SwitchBoard - detected UnsignedFile.Multi.Generic (1) 09:49:44.0310 2864 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll 09:49:44.0357 2864 swprv - ok 09:49:44.0684 2864 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll 09:49:44.0731 2864 SysMain - ok 09:49:44.0762 2864 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll 09:49:44.0778 2864 TabletInputService - ok 09:49:44.0794 2864 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll 09:49:44.0840 2864 TapiSrv - ok 09:49:44.0872 2864 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll 09:49:44.0918 2864 TBS - ok 09:49:44.0981 2864 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 09:49:45.0012 2864 Tcpip - ok 09:49:45.0043 2864 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 09:49:45.0074 2864 TCPIP6 - ok 09:49:45.0106 2864 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 09:49:45.0121 2864 tcpipreg - ok 09:49:45.0137 2864 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 09:49:45.0152 2864 TDPIPE - ok 09:49:45.0184 2864 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 09:49:45.0184 2864 TDTCP - ok 09:49:45.0215 2864 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 09:49:45.0262 2864 tdx - ok 09:49:45.0293 2864 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys 09:49:45.0308 2864 TermDD - ok 09:49:45.0324 2864 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll 09:49:45.0371 2864 TermService - ok 09:49:45.0386 2864 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll 09:49:45.0402 2864 Themes - ok 09:49:45.0418 2864 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll 09:49:45.0449 2864 THREADORDER - ok 09:49:45.0464 2864 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll 09:49:45.0496 2864 TrkWks - ok 09:49:45.0558 2864 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 09:49:45.0589 2864 TrustedInstaller - ok 09:49:45.0636 2864 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 09:49:45.0667 2864 tssecsrv - ok 09:49:45.0714 2864 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 09:49:45.0730 2864 TsUsbFlt - ok 09:49:45.0745 2864 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 09:49:45.0792 2864 tunnel - ok 09:49:45.0808 2864 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys 09:49:45.0823 2864 uagp35 - ok 09:49:45.0839 2864 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 09:49:45.0886 2864 udfs - ok 09:49:45.0917 2864 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe 09:49:45.0917 2864 UI0Detect - ok 09:49:45.0948 2864 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 09:49:45.0948 2864 uliagpkx - ok 09:49:45.0979 2864 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys 09:49:45.0995 2864 umbus - ok 09:49:46.0010 2864 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 09:49:46.0026 2864 UmPass - ok 09:49:46.0042 2864 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll 09:49:46.0088 2864 upnphost - ok 09:49:46.0120 2864 [ AF1B9474D67897D0C2CFF58E0ACEACCC ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys 09:49:46.0120 2864 USBAAPL64 - ok 09:49:46.0151 2864 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys 09:49:46.0166 2864 usbaudio - ok 09:49:46.0182 2864 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 09:49:46.0198 2864 usbccgp - ok 09:49:46.0198 2864 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys 09:49:46.0213 2864 usbcir - ok 09:49:46.0229 2864 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 09:49:46.0244 2864 usbehci - ok 09:49:46.0291 2864 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 09:49:46.0307 2864 usbhub - ok 09:49:46.0322 2864 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys 09:49:46.0322 2864 usbohci - ok 09:49:46.0354 2864 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 09:49:46.0369 2864 usbprint - ok 09:49:46.0400 2864 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 09:49:46.0400 2864 usbscan - ok 09:49:46.0416 2864 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 09:49:46.0432 2864 USBSTOR - ok 09:49:46.0447 2864 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys 09:49:46.0447 2864 usbuhci - ok 09:49:46.0463 2864 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys 09:49:46.0478 2864 usbvideo - ok 09:49:46.0510 2864 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll 09:49:46.0541 2864 UxSms - ok 09:49:46.0556 2864 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe 09:49:46.0572 2864 VaultSvc - ok 09:49:46.0588 2864 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 09:49:46.0588 2864 vdrvroot - ok 09:49:46.0634 2864 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe 09:49:46.0666 2864 vds - ok 09:49:46.0931 2864 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 09:49:46.0946 2864 vga - ok 09:49:46.0962 2864 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys 09:49:46.0993 2864 VgaSave - ok 09:49:47.0024 2864 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 09:49:47.0040 2864 vhdmp - ok 09:49:47.0056 2864 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys 09:49:47.0071 2864 viaide - ok 09:49:47.0087 2864 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys 09:49:47.0102 2864 volmgr - ok 09:49:47.0134 2864 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 09:49:47.0149 2864 volmgrx - ok 09:49:47.0165 2864 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys 09:49:47.0180 2864 volsnap - ok 09:49:47.0196 2864 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys 09:49:47.0212 2864 vsmraid - ok 09:49:47.0258 2864 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe 09:49:47.0305 2864 VSS - ok 09:49:47.0321 2864 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 09:49:47.0336 2864 vwifibus - ok 09:49:47.0352 2864 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 09:49:47.0368 2864 vwififlt - ok 09:49:47.0414 2864 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll 09:49:47.0446 2864 W32Time - ok 09:49:47.0461 2864 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys 09:49:47.0461 2864 WacomPen - ok 09:49:47.0508 2864 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 09:49:47.0539 2864 WANARP - ok 09:49:47.0539 2864 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 09:49:47.0570 2864 Wanarpv6 - ok 09:49:47.0633 2864 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe 09:49:47.0648 2864 WatAdminSvc - ok 09:49:47.0711 2864 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe 09:49:47.0742 2864 wbengine - ok 09:49:47.0758 2864 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 09:49:47.0773 2864 WbioSrvc - ok 09:49:47.0804 2864 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll 09:49:47.0836 2864 wcncsvc - ok 09:49:47.0851 2864 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 09:49:47.0867 2864 WcsPlugInService - ok 09:49:47.0898 2864 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys 09:49:47.0898 2864 Wd - ok 09:49:47.0929 2864 [ A3D04EBF5227886029B4532F20D026F7 ] WDC_SAM C:\Windows\system32\DRIVERS\wdcsam64.sys 09:49:47.0945 2864 WDC_SAM - ok 09:49:47.0992 2864 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 09:49:48.0007 2864 Wdf01000 - ok 09:49:48.0023 2864 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll 09:49:48.0054 2864 WdiServiceHost - ok 09:49:48.0054 2864 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll 09:49:48.0070 2864 WdiSystemHost - ok 09:49:48.0101 2864 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll 09:49:48.0132 2864 WebClient - ok 09:49:48.0163 2864 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll 09:49:48.0194 2864 Wecsvc - ok 09:49:48.0210 2864 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll 09:49:48.0241 2864 wercplsupport - ok 09:49:48.0257 2864 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll 09:49:48.0288 2864 WerSvc - ok 09:49:48.0319 2864 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 09:49:48.0350 2864 WfpLwf - ok 09:49:48.0616 2864 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys 09:49:48.0616 2864 WIMMount - ok 09:49:48.0631 2864 WinDefend - ok 09:49:48.0647 2864 WinHttpAutoProxySvc - ok 09:49:48.0694 2864 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 09:49:48.0725 2864 Winmgmt - ok 09:49:48.0803 2864 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll 09:49:48.0865 2864 WinRM - ok 09:49:48.0912 2864 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys 09:49:48.0928 2864 WinUsb - ok 09:49:48.0959 2864 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll 09:49:48.0974 2864 Wlansvc - ok 09:49:48.0990 2864 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 09:49:49.0006 2864 WmiAcpi - ok 09:49:49.0021 2864 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 09:49:49.0037 2864 wmiApSrv - ok 09:49:49.0084 2864 WMPNetworkSvc - ok 09:49:49.0084 2864 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll 09:49:49.0099 2864 WPCSvc - ok 09:49:49.0115 2864 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 09:49:49.0130 2864 WPDBusEnum - ok 09:49:49.0146 2864 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 09:49:49.0193 2864 ws2ifsl - ok 09:49:49.0208 2864 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll 09:49:49.0224 2864 wscsvc - ok 09:49:49.0224 2864 WSearch - ok 09:49:49.0302 2864 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll 09:49:49.0349 2864 wuauserv - ok 09:49:49.0380 2864 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 09:49:49.0396 2864 WudfPf - ok 09:49:49.0411 2864 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 09:49:49.0411 2864 WUDFRd - ok 09:49:49.0458 2864 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 09:49:49.0474 2864 wudfsvc - ok 09:49:49.0770 2864 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll 09:49:49.0786 2864 WwanSvc - ok 09:49:49.0817 2864 [ B3EEACF62445E24FBB2CD4B0FB4DB026 ] yukonw7 C:\Windows\system32\DRIVERS\yk62x64.sys 09:49:49.0833 2864 yukonw7 - ok 09:49:49.0848 2864 ================ Scan global =============================== 09:49:49.0879 2864 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll 09:49:49.0911 2864 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 09:49:49.0911 2864 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 09:49:49.0942 2864 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll 09:49:49.0973 2864 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe 09:49:49.0973 2864 [Global] - ok 09:49:49.0973 2864 ================ Scan MBR ================================== 09:49:49.0973 2864 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 09:49:50.0753 2864 \Device\Harddisk0\DR0 - ok 09:49:50.0753 2864 ================ Scan VBR ================================== 09:49:50.0784 2864 [ FF534CC0E6A5D7D5BBBBCFCCAD5004D1 ] \Device\Harddisk0\DR0\Partition1 09:49:50.0784 2864 \Device\Harddisk0\DR0\Partition1 - ok 09:49:50.0800 2864 [ BD5300AA075641C04FD1F17152C61BEC ] \Device\Harddisk0\DR0\Partition2 09:49:50.0800 2864 \Device\Harddisk0\DR0\Partition2 - ok 09:49:50.0800 2864 ================ Scan active images ======================== 09:49:50.0800 2864 [ 3E588B60EC061686BA05D33574A344C6 ] C:\Windows\System32\drivers\crashdmp.sys 09:49:50.0800 2864 C:\Windows\System32\drivers\crashdmp.sys - ok 09:49:50.0800 2864 [ 839B5FE3D48E9F35B22C21A3D5103F6C ] C:\Windows\System32\drivers\Dumpata.sys 09:49:50.0800 2864 C:\Windows\System32\drivers\Dumpata.sys - ok 09:49:50.0815 2864 [ 814DB88F2641691575A455CF25354098 ] C:\Windows\System32\drivers\dumpfve.sys 09:49:50.0815 2864 C:\Windows\System32\drivers\dumpfve.sys - ok 09:49:50.0815 2864 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] C:\Windows\System32\drivers\msahci.sys 09:49:50.0815 2864 C:\Windows\System32\drivers\msahci.sys - ok 09:49:50.0815 2864 [ 9899284589F75FA8724FF3D16AED75C1 ] C:\Windows\System32\drivers\null.sys 09:49:50.0815 2864 C:\Windows\System32\drivers\null.sys - ok 09:49:50.0831 2864 [ 16A47CE2DECC9B099349A5F840654746 ] C:\Windows\System32\drivers\beep.sys 09:49:50.0831 2864 C:\Windows\System32\drivers\beep.sys - ok 09:49:50.0831 2864 [ 53E92A310193CB3C03BEA963DE7D9CFC ] C:\Windows\System32\drivers\vga.sys 09:49:50.0831 2864 C:\Windows\System32\drivers\vga.sys - ok 09:49:50.0847 2864 [ E7353D59C9842BC7299FAEB7E7E09340 ] C:\Windows\System32\drivers\videoprt.sys 09:49:50.0847 2864 C:\Windows\System32\drivers\videoprt.sys - ok 09:49:50.0847 2864 [ FC438D1430B28618E2D0C7C332A710AD ] C:\Windows\System32\drivers\watchdog.sys 09:49:50.0847 2864 C:\Windows\System32\drivers\watchdog.sys - ok 09:49:50.0847 2864 [ BB5971A4F00659529A5C44831AF22365 ] C:\Windows\System32\drivers\RDPENCDD.sys 09:49:50.0847 2864 C:\Windows\System32\drivers\RDPENCDD.sys - ok 09:49:50.0862 2864 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] C:\Windows\System32\drivers\msfs.sys 09:49:50.0862 2864 C:\Windows\System32\drivers\msfs.sys - ok 09:49:50.0862 2864 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] C:\Windows\System32\drivers\npfs.sys 09:49:50.0862 2864 C:\Windows\System32\drivers\npfs.sys - ok 09:49:50.0862 2864 [ 6F020A220388ECA0AB6062DC27BD16B6 ] C:\Windows\System32\drivers\tdi.sys 09:49:50.0862 2864 C:\Windows\System32\drivers\tdi.sys - ok 09:49:50.0878 2864 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] C:\Windows\System32\drivers\tdx.sys 09:49:50.0878 2864 C:\Windows\System32\drivers\tdx.sys - ok 09:49:50.0878 2864 [ 34165DA5C6B30C0F9D61246BF8A28040 ] C:\Windows\System32\drivers\aswTdi.sys 09:49:50.0878 2864 C:\Windows\System32\drivers\aswTdi.sys - ok 09:49:50.0878 2864 [ 1C7857B62DE5994A75B054A9FD4C3825 ] C:\Windows\System32\drivers\afd.sys 09:49:50.0878 2864 C:\Windows\System32\drivers\afd.sys - ok 09:49:50.0893 2864 [ 952EDC2E81F85D1781958D4128BF59F8 ] C:\Windows\System32\drivers\aswRdr.sys 09:49:50.0893 2864 C:\Windows\System32\drivers\aswRdr.sys - ok 09:49:50.0893 2864 [ 09594D1089C523423B32A4229263F068 ] C:\Windows\System32\drivers\netbt.sys 09:49:50.0893 2864 C:\Windows\System32\drivers\netbt.sys - ok 09:49:50.0909 2864 [ 611B23304BF067451A9FDEE01FBDD725 ] C:\Windows\System32\drivers\wfplwf.sys 09:49:50.0909 2864 C:\Windows\System32\drivers\wfplwf.sys - ok 09:49:50.0909 2864 [ 0557CF5A2556BD58E26384169D72438D ] C:\Windows\System32\drivers\pacer.sys 09:49:50.0909 2864 C:\Windows\System32\drivers\pacer.sys - ok 09:49:50.0909 2864 [ 6A3D66263414FF0D6FA754C646612F3F ] C:\Windows\System32\drivers\vwififlt.sys 09:49:50.0909 2864 C:\Windows\System32\drivers\vwififlt.sys - ok 09:49:50.0925 2864 [ 86743D9F5D2B1048062B14B1D84501C4 ] C:\Windows\System32\drivers\netbios.sys 09:49:50.0925 2864 C:\Windows\System32\drivers\netbios.sys - ok 09:49:50.0925 2864 [ 77F665941019A1594D887A74F301FA2F ] C:\Windows\System32\drivers\rdbss.sys 09:49:50.0925 2864 C:\Windows\System32\drivers\rdbss.sys - ok 09:49:50.0925 2864 [ E7F5AE18AF4168178A642A9247C63001 ] C:\Windows\System32\drivers\nsiproxy.sys 09:49:50.0925 2864 C:\Windows\System32\drivers\nsiproxy.sys - ok 09:49:50.0940 2864 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] C:\Windows\System32\drivers\dfsc.sys 09:49:50.0940 2864 C:\Windows\System32\drivers\dfsc.sys - ok 09:49:50.0956 2864 [ 3566A8DAAFA27AF944F5D705EAA64894 ] C:\Windows\System32\drivers\tunnel.sys 09:49:50.0956 2864 C:\Windows\System32\drivers\tunnel.sys - ok 09:49:50.0956 2864 [ AE259C75F9A0B057B6BF9E9695632B09 ] C:\Windows\System32\drivers\usbport.sys 09:49:50.0956 2864 C:\Windows\System32\drivers\usbport.sys - ok 09:49:50.0956 2864 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] C:\Windows\System32\drivers\usbuhci.sys 09:49:50.0956 2864 C:\Windows\System32\drivers\usbuhci.sys - ok 09:49:50.0971 2864 [ CF95B85FF8D128385ABD411C8CA74DED ] C:\Windows\System32\ntdll.dll 09:49:50.0971 2864 C:\Windows\System32\ntdll.dll - ok 09:49:50.0971 2864 [ 1911A3356FA3F77CCC825CCBAC038C2A ] C:\Windows\System32\smss.exe 09:49:50.0971 2864 C:\Windows\System32\smss.exe - ok 09:49:50.0971 2864 [ C025055FE7B87701EB042095DF1A2D7B ] C:\Windows\System32\drivers\usbehci.sys 09:49:50.0971 2864 C:\Windows\System32\drivers\usbehci.sys - ok 09:49:50.0987 2864 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] C:\Windows\System32\drivers\hdaudbus.sys 09:49:50.0987 2864 C:\Windows\System32\drivers\hdaudbus.sys - ok 09:49:50.0987 2864 [ 3B536A8BEC3B4F23FFDFD78B11A2AB93 ] C:\Windows\System32\autochk.exe 09:49:50.0987 2864 C:\Windows\System32\autochk.exe - ok 09:49:50.0987 2864 [ 9E84A931DBEE0292E38ED672F6293A99 ] C:\Windows\System32\drivers\BCMWL664.SYS 09:49:50.0987 2864 C:\Windows\System32\drivers\BCMWL664.SYS - ok 09:49:51.0003 2864 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] C:\Windows\System32\drivers\vwifibus.sys 09:49:51.0003 2864 C:\Windows\System32\drivers\vwifibus.sys - ok 09:49:51.0003 2864 [ B3EEACF62445E24FBB2CD4B0FB4DB026 ] C:\Windows\System32\drivers\yk62x64.sys 09:49:51.0003 2864 C:\Windows\System32\drivers\yk62x64.sys - ok 09:49:51.0018 2864 [ EAF32CB8C1F810E4715B4DFBE785C7FF ] C:\Windows\System32\shlwapi.dll 09:49:51.0018 2864 C:\Windows\System32\shlwapi.dll - ok 09:49:51.0018 2864 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] C:\Windows\System32\drivers\i8042prt.sys 09:49:51.0018 2864 C:\Windows\System32\drivers\i8042prt.sys - ok 09:49:51.0018 2864 [ C391FC68282A000CDF953F8B6B55D2EF ] C:\Windows\System32\msvcrt.dll 09:49:51.0018 2864 C:\Windows\System32\msvcrt.dll - ok 09:49:51.0034 2864 [ 98449A2957778A6F025C418438A380F4 ] C:\Windows\System32\drivers\Apfiltr.sys 09:49:51.0034 2864 C:\Windows\System32\drivers\Apfiltr.sys - ok 09:49:51.0034 2864 [ 25983DE69B57142039AC8D95E71CD9C9 ] C:\Windows\System32\clbcatq.dll 09:49:51.0034 2864 C:\Windows\System32\clbcatq.dll - ok 09:49:51.0034 2864 [ 7D27EA49F3C1F687D357E77A470AEA99 ] C:\Windows\System32\drivers\mouclass.sys 09:49:51.0034 2864 C:\Windows\System32\drivers\mouclass.sys - ok 09:49:51.0049 2864 [ 4BBFA57F594F7E8A8EDC8F377184C3F0 ] C:\Windows\System32\ws2_32.dll 09:49:51.0049 2864 C:\Windows\System32\ws2_32.dll - ok 09:49:51.0049 2864 [ BA5F7C107EACE67973B4B798832A74C7 ] C:\Windows\System32\drivers\pxkbf.sys 09:49:51.0049 2864 C:\Windows\System32\drivers\pxkbf.sys - ok 09:49:51.0049 2864 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] C:\Windows\System32\drivers\kbdclass.sys 09:49:51.0049 2864 C:\Windows\System32\drivers\kbdclass.sys - ok 09:49:51.0065 2864 [ F036CE71586E93D94DAB220D7BDF4416 ] C:\Windows\System32\drivers\cdrom.sys 09:49:51.0065 2864 C:\Windows\System32\drivers\cdrom.sys - ok 09:49:51.0065 2864 [ 6C60B5ACA7442EFB794082CDACFC001C ] C:\Windows\System32\ole32.dll 09:49:51.0065 2864 C:\Windows\System32\ole32.dll - ok 09:49:51.0081 2864 [ 8E98D21EE06192492A5671A6144D092F ] C:\Windows\System32\drivers\GEARAspiWDM.sys 09:49:51.0081 2864 C:\Windows\System32\drivers\GEARAspiWDM.sys - ok 09:49:51.0081 2864 [ F6FF8944478594D0E414D3F048F0D778 ] C:\Windows\System32\drivers\wmiacpi.sys 09:49:51.0081 2864 C:\Windows\System32\drivers\wmiacpi.sys - ok 09:49:51.0081 2864 [ 61583EE3C3A17003C4ACD0475646B4D3 ] C:\Windows\System32\drivers\blbdrive.sys 09:49:51.0081 2864 C:\Windows\System32\drivers\blbdrive.sys - ok 09:49:51.0096 2864 [ 03EDB043586CCEBA243D689BDDA370A8 ] C:\Windows\System32\drivers\CompositeBus.sys 09:49:51.0096 2864 C:\Windows\System32\drivers\CompositeBus.sys - ok 09:49:51.0096 2864 [ 0040A0132AAC1004E50055F8FBB14C08 ] C:\Windows\System32\drivers\dsNcAdpt.sys 09:49:51.0096 2864 C:\Windows\System32\drivers\dsNcAdpt.sys - ok 09:49:51.0112 2864 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] C:\Windows\System32\drivers\mssmbios.sys 09:49:51.0112 2864 C:\Windows\System32\drivers\mssmbios.sys - ok 09:49:51.0112 2864 [ D202223587518B13D72D68937B7E3F70 ] C:\Windows\System32\lpk.dll 09:49:51.0112 2864 C:\Windows\System32\lpk.dll - ok 09:49:51.0112 2864 [ 7ECFF9B22276B73F43A99A15A6094E90 ] C:\Windows\System32\drivers\agilevpn.sys 09:49:51.0112 2864 C:\Windows\System32\drivers\agilevpn.sys - ok 09:49:51.0127 2864 [ 471815800AE33E6F1C32FB1B97C490CA ] C:\Windows\System32\drivers\rasl2tp.sys 09:49:51.0127 2864 C:\Windows\System32\drivers\rasl2tp.sys - ok 09:49:51.0127 2864 [ 1084AA52CCC324EA54C7121FA24C2221 ] C:\Windows\System32\gdi32.dll 09:49:51.0127 2864 C:\Windows\System32\gdi32.dll - ok 09:49:51.0127 2864 [ 0611473C1AD9E2D991CD9482068417F7 ] C:\Windows\System32\rpcrt4.dll 09:49:51.0127 2864 C:\Windows\System32\rpcrt4.dll - ok 09:49:51.0143 2864 [ 30639C932D9FEF22B31268FE25A1B6E5 ] C:\Windows\System32\drivers\ndistapi.sys 09:49:51.0143 2864 C:\Windows\System32\drivers\ndistapi.sys - ok 09:49:51.0143 2864 [ F7CE0C81C545364020ED8203CF0A633E ] C:\Windows\System32\difxapi.dll 09:49:51.0143 2864 C:\Windows\System32\difxapi.dll - ok 09:49:51.0159 2864 [ 53F7305169863F0A2BDDC49E116C2E11 ] C:\Windows\System32\drivers\ndiswan.sys 09:49:51.0159 2864 C:\Windows\System32\drivers\ndiswan.sys - ok 09:49:51.0159 2864 [ 435E9C764E1EF70058580996452BE6A2 ] C:\Windows\System32\wininet.dll 09:49:51.0159 2864 C:\Windows\System32\wininet.dll - ok 09:49:51.0159 2864 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] C:\Windows\System32\drivers\raspppoe.sys 09:49:51.0159 2864 C:\Windows\System32\drivers\raspppoe.sys - ok 09:49:51.0174 2864 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] C:\Windows\System32\drivers\raspptp.sys 09:49:51.0174 2864 C:\Windows\System32\drivers\raspptp.sys - ok 09:49:51.0174 2864 [ E8B1E447B008D07FF47D016C2B0EEECB ] C:\Windows\System32\drivers\rassstp.sys 09:49:51.0174 2864 C:\Windows\System32\drivers\rassstp.sys - ok 09:49:51.0174 2864 [ 044FE45FFD6AD40E3BBBE60B7F41BABE ] C:\Windows\System32\nsi.dll 09:49:51.0174 2864 C:\Windows\System32\nsi.dll - ok 09:49:51.0190 2864 [ 83404DCBCE4925B6A5A77C5170F46D86 ] C:\Windows\System32\sechost.dll 09:49:51.0190 2864 C:\Windows\System32\sechost.dll - ok 09:49:51.0190 2864 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] C:\Windows\System32\drivers\termdd.sys 09:49:51.0190 2864 C:\Windows\System32\drivers\termdd.sys - ok 09:49:51.0190 2864 [ A1BE6A720D02E37F72E9CD89AE9CB3CF ] C:\Windows\System32\imagehlp.dll 09:49:51.0190 2864 C:\Windows\System32\imagehlp.dll - ok 09:49:51.0205 2864 [ 4E4FFB09D895AA000DD56D1404F69A7E ] C:\Windows\System32\Wldap32.dll 09:49:51.0205 2864 C:\Windows\System32\Wldap32.dll - ok 09:49:51.0205 2864 [ 24FBF5CC5C04150073C315A7C83521EE ] C:\Windows\System32\drivers\ks.sys 09:49:51.0205 2864 C:\Windows\System32\drivers\ks.sys - ok 09:49:51.0221 2864 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] C:\Windows\System32\drivers\swenum.sys 09:49:51.0221 2864 C:\Windows\System32\drivers\swenum.sys - ok 09:49:51.0221 2864 [ DBF99FD9CAF75CA66D042BD8D050FF71 ] C:\Windows\System32\usp10.dll 09:49:51.0221 2864 C:\Windows\System32\usp10.dll - ok 09:49:51.0221 2864 [ 821BF177A24172F5F0EE9B322F58516C ] C:\Windows\System32\drivers\dtsoftbus01.sys 09:49:51.0221 2864 C:\Windows\System32\drivers\dtsoftbus01.sys - ok 09:49:51.0237 2864 [ DC54A574663A895C8763AF0FA1FF7561 ] C:\Windows\System32\drivers\umbus.sys 09:49:51.0237 2864 C:\Windows\System32\drivers\umbus.sys - ok 09:49:51.0237 2864 [ C6689007B3A749C49A5438DCF36E0CE4 ] C:\Windows\System32\shell32.dll 09:49:51.0237 2864 C:\Windows\System32\shell32.dll - ok 09:49:51.0237 2864 [ 287C6C9410B111B68B52CA298F7B8C24 ] C:\Windows\System32\drivers\usbhub.sys 09:49:51.0237 2864 C:\Windows\System32\drivers\usbhub.sys - ok 09:49:51.0252 2864 [ 9835E63E09F824D22B689D2BB789BAB9 ] C:\Windows\System32\comdlg32.dll 09:49:51.0252 2864 C:\Windows\System32\comdlg32.dll - ok 09:49:51.0252 2864 [ C431EAF5CAA1C82CAC2534A2EAB348A3 ] C:\Windows\System32\msctf.dll 09:49:51.0252 2864 C:\Windows\System32\msctf.dll - ok 09:49:51.0252 2864 [ F431C3C86FCCC1C53814F043A6CAD825 ] C:\Windows\System32\iertutil.dll 09:49:51.0252 2864 C:\Windows\System32\iertutil.dll - ok 09:49:51.0268 2864 [ FE70103391A64039A921DBFFF9C7AB1B ] C:\Windows\System32\user32.dll 09:49:51.0268 2864 C:\Windows\System32\user32.dll - ok 09:49:51.0268 2864 [ 87BEA2616EFDEC6A1CB3BFCFB09D816A ] C:\Windows\System32\urlmon.dll 09:49:51.0268 2864 C:\Windows\System32\urlmon.dll - ok 09:49:51.0283 2864 [ 65C113214F7B05820F6D8A65B1485196 ] C:\Windows\System32\kernel32.dll 09:49:51.0283 2864 C:\Windows\System32\kernel32.dll - ok 09:49:51.0283 2864 [ AA2C08CE85653B1A0D2E4AB407FA176C ] C:\Windows\System32\imm32.dll 09:49:51.0283 2864 C:\Windows\System32\imm32.dll - ok 09:49:51.0283 2864 [ D87E1E59C73C1F98D5DED5B3850C40F5 ] C:\Windows\System32\psapi.dll 09:49:51.0283 2864 C:\Windows\System32\psapi.dll - ok 09:49:51.0299 2864 [ C06B32165E23A72A898B7A89679AD754 ] C:\Windows\System32\oleaut32.dll 09:49:51.0299 2864 C:\Windows\System32\oleaut32.dll - ok 09:49:51.0299 2864 [ 6DF46D2BD74E3DA1B45F08F10D172732 ] C:\Windows\System32\advapi32.dll 09:49:51.0299 2864 C:\Windows\System32\advapi32.dll - ok 09:49:51.0299 2864 [ 28C0B5024F5C5A438E78B188CFC81B7F ] C:\Windows\System32\normaliz.dll 09:49:51.0299 2864 C:\Windows\System32\normaliz.dll - ok 09:49:51.0315 2864 [ 5D8E6C95156ED1F79A63D1EADE6F9ED5 ] C:\Windows\System32\setupapi.dll 09:49:51.0315 2864 C:\Windows\System32\setupapi.dll - ok 09:49:51.0315 2864 [ AA06902362B1422D7A7DA7061E07C624 ] C:\Windows\System32\wintrust.dll 09:49:51.0315 2864 C:\Windows\System32\wintrust.dll - ok 09:49:51.0315 2864 [ 06FEC9E8117103BB1141A560E98077DA ] C:\Windows\System32\devobj.dll 09:49:51.0315 2864 C:\Windows\System32\devobj.dll - ok 09:49:51.0330 2864 [ 2477A28081BDAEE622CF045ACF8EE124 ] C:\Windows\System32\cfgmgr32.dll 09:49:51.0330 2864 C:\Windows\System32\cfgmgr32.dll - ok 09:49:51.0330 2864 [ 12EE6FE9268CEE6D90FDCCBF89236C65 ] C:\Windows\System32\crypt32.dll 09:49:51.0330 2864 C:\Windows\System32\crypt32.dll - ok 09:49:51.0346 2864 [ 14DFDEAF4E589ED3F1FF187A86B9408C ] C:\Windows\System32\comctl32.dll 09:49:51.0346 2864 C:\Windows\System32\comctl32.dll - ok 09:49:51.0346 2864 [ 1F56F209585F350A5666E3CC7931FD67 ] C:\Windows\System32\KernelBase.dll 09:49:51.0346 2864 C:\Windows\System32\KernelBase.dll - ok 09:49:51.0346 2864 [ 884415BD4269C02EAF8E2613BF85500D ] C:\Windows\System32\msasn1.dll 09:49:51.0346 2864 C:\Windows\System32\msasn1.dll - ok 09:49:51.0361 2864 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] C:\Windows\System32\drivers\ndproxy.sys 09:49:51.0361 2864 C:\Windows\System32\drivers\ndproxy.sys - ok 09:49:51.0361 2864 [ 9C278785347BCC991F8EA2999D90F58D ] C:\Windows\SysWOW64\normaliz.dll 09:49:51.0361 2864 C:\Windows\SysWOW64\normaliz.dll - ok 09:49:51.0361 2864 [ CCA2AB1752A61F29C3C941CD79D78CEA ] C:\Windows\System32\drivers\usbd.sys 09:49:51.0361 2864 C:\Windows\System32\drivers\usbd.sys - ok 09:49:51.0377 2864 [ FED648B01349A3C8395A5169DB5FB7D6 ] C:\Windows\System32\drivers\USBSTOR.SYS 09:49:51.0377 2864 C:\Windows\System32\drivers\USBSTOR.SYS - ok 09:49:51.0377 2864 [ BF24D6F2ED97FE830BFD52B246F98E67 ] C:\Windows\System32\drivers\dxapi.sys 09:49:51.0377 2864 C:\Windows\System32\drivers\dxapi.sys - ok 09:49:51.0393 2864 [ 59E21156113E438D1D91AF4FC0C3B19F ] C:\Windows\System32\win32k.sys 09:49:51.0393 2864 C:\Windows\System32\win32k.sys - ok 09:49:51.0393 2864 [ 60C2862B4BF0FD9F582EF344C2B1EC72 ] C:\Windows\System32\csrss.exe 09:49:51.0393 2864 C:\Windows\System32\csrss.exe - ok 09:49:51.0393 2864 [ 96F587CA26A6AA894BD8CACE4540CFFC ] C:\Windows\System32\csrsrv.dll 09:49:51.0393 2864 C:\Windows\System32\csrsrv.dll - ok 09:49:51.0408 2864 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\System32\basesrv.dll 09:49:51.0408 2864 C:\Windows\System32\basesrv.dll - ok 09:49:51.0408 2864 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\System32\winsrv.dll 09:49:51.0408 2864 C:\Windows\System32\winsrv.dll - ok 09:49:51.0408 2864 [ 6F1A3157A1C89435352CEB543CDB359C ] C:\Windows\System32\drivers\usbccgp.sys 09:49:51.0424 2864 C:\Windows\System32\drivers\usbccgp.sys - ok 09:49:51.0424 2864 [ FEDE0629ECB23650D48989517D4914DA ] C:\Windows\System32\drivers\dxg.sys 09:49:51.0424 2864 C:\Windows\System32\drivers\dxg.sys - ok 09:49:51.0424 2864 [ F29FE765E1448EF371CFE05BFAC74ADB ] C:\Windows\System32\tsddd.dll 09:49:51.0424 2864 C:\Windows\System32\tsddd.dll - ok 09:49:51.0439 2864 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\System32\sxssrv.dll 09:49:51.0439 2864 C:\Windows\System32\sxssrv.dll - ok 09:49:51.0439 2864 [ 94355C28C1970635A31B3FE52EB7CEBA ] C:\Windows\System32\wininit.exe 09:49:51.0439 2864 C:\Windows\System32\wininit.exe - ok 09:49:51.0455 2864 [ 2C942733A5983DD4502219FF37C7EBC7 ] C:\Windows\System32\profapi.dll 09:49:51.0455 2864 C:\Windows\System32\profapi.dll - ok 09:49:51.0455 2864 [ 8BEC4D6AD2864EDF68D9AD0C6AA6C6D1 ] C:\Windows\System32\vga.dll 09:49:51.0455 2864 C:\Windows\System32\vga.dll - ok 09:49:51.0455 2864 [ E30B04A8FE665C52162D70233ABEA9A3 ] C:\Windows\System32\framebuf.dll 09:49:51.0455 2864 C:\Windows\System32\framebuf.dll - ok 09:49:51.0471 2864 [ C2A8CB1275ECB85D246A9ECC02A728E3 ] C:\Windows\System32\RpcRtRemote.dll 09:49:51.0471 2864 C:\Windows\System32\RpcRtRemote.dll - ok 09:49:51.0471 2864 [ 78523A26F5604C0568FE9D1CE86E36F4 ] C:\Windows\System32\KBDUS.DLL 09:49:51.0471 2864 C:\Windows\System32\KBDUS.DLL - ok 09:49:51.0486 2864 [ 1151B1BAA6F350B1DB6598E0FEA7C457 ] C:\Windows\System32\winlogon.exe 09:49:51.0486 2864 C:\Windows\System32\winlogon.exe - ok 09:49:51.0486 2864 [ 0D9764D58C5EFD672B7184854B152E5E ] C:\Windows\System32\winsta.dll 09:49:51.0486 2864 C:\Windows\System32\winsta.dll - ok 09:49:51.0486 2864 [ FF4232A1A64012BAA1FD97C7B67DF593 ] C:\Windows\System32\drivers\udfs.sys 09:49:51.0486 2864 C:\Windows\System32\drivers\udfs.sys - ok 09:49:51.0502 2864 [ B26B1801356760841C3BC69F9F91537F ] C:\Windows\System32\WlS0WndH.dll 09:49:51.0502 2864 C:\Windows\System32\WlS0WndH.dll - ok 09:49:51.0502 2864 [ 9CEAD32E79A62150FE9F8557E58E008B ] C:\Windows\System32\sxs.dll 09:49:51.0502 2864 C:\Windows\System32\sxs.dll - ok 09:49:51.0502 2864 [ 784FA3DF338E2E8F5F0389D6FAC428AF ] C:\Windows\System32\cryptbase.dll 09:49:51.0502 2864 C:\Windows\System32\cryptbase.dll - ok 09:49:51.0517 2864 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\System32\services.exe 09:49:51.0517 2864 C:\Windows\System32\services.exe - ok 09:49:51.0517 2864 [ C118A82CD78818C29AB228366EBF81C3 ] C:\Windows\System32\lsass.exe 09:49:51.0517 2864 C:\Windows\System32\lsass.exe - ok 09:49:51.0533 2864 [ 9662EE182644511439F1C53745DC1C88 ] C:\Windows\System32\lsm.exe 09:49:51.0533 2864 C:\Windows\System32\lsm.exe - ok 09:49:51.0533 2864 [ B66BC8B20B7F33975865B1DF99783FD8 ] C:\Windows\System32\sspicli.dll 09:49:51.0533 2864 C:\Windows\System32\sspicli.dll - ok 09:49:51.0533 2864 [ E914A50A151DFFE63D3935226DB5E2C1 ] C:\Windows\System32\scext.dll 09:49:51.0533 2864 C:\Windows\System32\scext.dll - ok 09:49:51.0549 2864 [ 0144D8D75A0B12938AEEE859E3310A46 ] C:\Windows\System32\secur32.dll 09:49:51.0549 2864 C:\Windows\System32\secur32.dll - ok 09:49:51.0549 2864 [ 3A0CE5FE781708CD6ABD55313607EC8B ] C:\Windows\System32\sspisrv.dll 09:49:51.0549 2864 C:\Windows\System32\sspisrv.dll - ok 09:49:51.0549 2864 [ 68083118797CAF30FB2EA3E71494D67E ] C:\Windows\System32\sysntfy.dll 09:49:51.0549 2864 C:\Windows\System32\sysntfy.dll - ok 09:49:51.0564 2864 [ DEE7267C5D232A3B816866872CE199E6 ] C:\Windows\System32\wmsgapi.dll 09:49:51.0564 2864 C:\Windows\System32\wmsgapi.dll - ok 09:49:51.0564 2864 [ 66A6063D0BAAD3F7B2B9868859E0743B ] C:\Windows\System32\lsasrv.dll 09:49:51.0564 2864 C:\Windows\System32\lsasrv.dll - ok 09:49:51.0564 2864 [ BBCDF350817BA86416C0F06B6981BE8D ] C:\Windows\System32\scesrv.dll 09:49:51.0564 2864 C:\Windows\System32\scesrv.dll - ok 09:49:51.0580 2864 [ 3A9C9BAF610B0DD4967086040B3B62A9 ] C:\Windows\System32\srvcli.dll 09:49:51.0580 2864 C:\Windows\System32\srvcli.dll - ok 09:49:51.0580 2864 [ A744BA6E04C8AA4592818178DBF89521 ] C:\Windows\System32\samsrv.dll 09:49:51.0580 2864 C:\Windows\System32\samsrv.dll - ok 09:49:51.0595 2864 [ 3A061472B38233BAFF9CFEFF2E49C46B ] C:\Windows\System32\cryptdll.dll 09:49:51.0595 2864 C:\Windows\System32\cryptdll.dll - ok 09:49:51.0595 2864 [ 3C073B0C596A0AF84933E7406766B040 ] C:\Windows\System32\wevtapi.dll 09:49:51.0595 2864 C:\Windows\System32\wevtapi.dll - ok 09:49:51.0595 2864 [ 86FE1B1F8FD42CD0DB641AB1CDB13093 ] C:\Windows\System32\cngaudit.dll 09:49:51.0595 2864 C:\Windows\System32\cngaudit.dll - ok 09:49:51.0611 2864 [ 7FBEBD2229EA5FD48D41B199EC2D541C ] C:\Windows\System32\authz.dll 09:49:51.0611 2864 C:\Windows\System32\authz.dll - ok 09:49:51.0611 2864 [ 5F3307352216618221A17CFEF273EEE2 ] C:\Windows\System32\ncrypt.dll 09:49:51.0611 2864 C:\Windows\System32\ncrypt.dll - ok 09:49:51.0611 2864 [ B9A95365E52F421A20E1501935FADDA5 ] C:\Windows\System32\bcrypt.dll 09:49:51.0611 2864 C:\Windows\System32\bcrypt.dll - ok 09:49:51.0627 2864 [ 02B64609F865A39365FF88580DF11738 ] C:\Windows\System32\msprivs.dll 09:49:51.0627 2864 C:\Windows\System32\msprivs.dll - ok 09:49:51.0627 2864 [ C6505DE3561537BA1004D638C2F93F2F ] C:\Windows\System32\netjoin.dll 09:49:51.0627 2864 C:\Windows\System32\netjoin.dll - ok 09:49:51.0627 2864 [ 50532FCD7ECF02DD169CE5C485F02534 ] C:\Windows\System32\negoexts.dll 09:49:51.0627 2864 C:\Windows\System32\negoexts.dll - ok 09:49:51.0642 2864 [ 44E1A196DFCB53B01FE4B855C3B56A15 ] C:\Windows\System32\kerberos.dll 09:49:51.0642 2864 C:\Windows\System32\kerberos.dll - ok 09:49:51.0642 2864 [ D0C2FBB6D97416B0166478FC7AE2B212 ] C:\Windows\System32\cryptsp.dll 09:49:51.0642 2864 C:\Windows\System32\cryptsp.dll - ok 09:49:51.0658 2864 [ 1D5185A4C7E6695431AE4B55C3D7D333 ] C:\Windows\System32\mswsock.dll 09:49:51.0658 2864 C:\Windows\System32\mswsock.dll - ok 09:49:51.0658 2864 [ EC7CBFF96B05ECF3D366355B3C64ADCF ] C:\Windows\System32\wship6.dll 09:49:51.0658 2864 C:\Windows\System32\wship6.dll - ok 09:49:51.0658 2864 [ EF12B8385AA2849999008A977918F96B ] C:\Windows\System32\msv1_0.dll 09:49:51.0658 2864 C:\Windows\System32\msv1_0.dll - ok 09:49:51.0673 2864 [ AA339DD8BB128EF66660DFBBB59043D3 ] C:\Windows\System32\netlogon.dll 09:49:51.0673 2864 C:\Windows\System32\netlogon.dll - ok 09:49:51.0673 2864 [ 492D07D79E7024CA310867B526D9636D ] C:\Windows\System32\dnsapi.dll 09:49:51.0673 2864 C:\Windows\System32\dnsapi.dll - ok 09:49:51.0673 2864 [ 8FFE297B8449386E7B6851458B6E474E ] C:\Windows\System32\logoncli.dll 09:49:51.0673 2864 C:\Windows\System32\logoncli.dll - ok 09:49:51.0689 2864 [ 1573C45E65DE32B1BC3572634F8F1E8E ] C:\Windows\System32\schannel.dll 09:49:51.0689 2864 C:\Windows\System32\schannel.dll - ok 09:49:51.0689 2864 [ 95FB6CA4374E343DDD653FCC43F9D26B ] C:\Windows\System32\wdigest.dll 09:49:51.0689 2864 C:\Windows\System32\wdigest.dll - ok 09:49:51.0689 2864 [ CB2ABB2DA1E9C977302A78D86D4AE3B0 ] C:\Windows\System32\atmfd.dll 09:49:51.0705 2864 C:\Windows\System32\atmfd.dll - ok 09:49:51.0705 2864 [ 5D8874A8C11DDDDE29E12DE0E2013493 ] C:\Windows\System32\rsaenh.dll 09:49:51.0705 2864 C:\Windows\System32\rsaenh.dll - ok 09:49:51.0720 2864 [ 8A25506B6948EFBD5A7F37E53CCD36D9 ] C:\Windows\System32\TSpkg.dll 09:49:51.0720 2864 C:\Windows\System32\TSpkg.dll - ok 09:49:51.0720 2864 [ E08088A97F95345E181C3DFCE2C615EF ] C:\Windows\System32\pku2u.dll 09:49:51.0720 2864 C:\Windows\System32\pku2u.dll - ok 09:49:51.0720 2864 [ D6C7780A364C6BBACFA796BAB9F1B374 ] C:\Windows\System32\bcryptprimitives.dll 09:49:51.0720 2864 C:\Windows\System32\bcryptprimitives.dll - ok 09:49:51.0736 2864 [ 90BDEFC5DF334E5100EAA781D798DE1A ] C:\Windows\System32\efslsaext.dll 09:49:51.0736 2864 C:\Windows\System32\efslsaext.dll - ok 09:49:51.0736 2864 [ 52D3D5E3586988D4D9E34ACAAC33105C ] C:\Windows\System32\credssp.dll 09:49:51.0736 2864 C:\Windows\System32\credssp.dll - ok 09:49:51.0736 2864 [ ED78427259134C63ED69804D2132B86C ] C:\Windows\System32\scecli.dll 09:49:51.0736 2864 C:\Windows\System32\scecli.dll - ok 09:49:51.0751 2864 [ 7CC7DF5B654DA579613F811D8C637E29 ] C:\Windows\System32\ubpm.dll 09:49:51.0751 2864 C:\Windows\System32\ubpm.dll - ok 09:49:51.0751 2864 [ C78655BC80301D76ED4FEF1C1EA40A7D ] C:\Windows\System32\svchost.exe 09:49:51.0751 2864 C:\Windows\System32\svchost.exe - ok 09:49:51.0751 2864 [ 25FBDEF06C4D92815B353F6E792C8129 ] C:\Windows\System32\umpnpmgr.dll 09:49:51.0751 2864 C:\Windows\System32\umpnpmgr.dll - ok 09:49:51.0767 2864 [ E6EB44ABAAF1F330119F854856C53EBE ] C:\Windows\System32\SPInf.dll 09:49:51.0767 2864 C:\Windows\System32\SPInf.dll - ok 09:49:51.0767 2864 [ CD1B5AD07E5F7FEF30E055DCC9E96180 ] C:\Windows\System32\devrtl.dll 09:49:51.0767 2864 C:\Windows\System32\devrtl.dll - ok 09:49:51.0783 2864 [ 7A17485DC7D8A7AC81321A42CD034519 ] C:\Windows\System32\userenv.dll 09:49:51.0783 2864 C:\Windows\System32\userenv.dll - ok 09:49:51.0783 2864 [ 9C9307C95671AC962F3D6EB3A4A89BAE ] C:\Windows\System32\gpapi.dll 09:49:51.0783 2864 C:\Windows\System32\gpapi.dll - ok 09:49:51.0783 2864 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] C:\Windows\System32\umpo.dll 09:49:51.0783 2864 C:\Windows\System32\umpo.dll - ok 09:49:51.0798 2864 [ F6C011B46FAEEF33536B2E80F48B5CBE ] C:\Windows\System32\pcwum.dll 09:49:51.0798 2864 C:\Windows\System32\pcwum.dll - ok 09:49:51.0798 2864 [ 716175021BDA290504CE434273F666BC ] C:\Windows\System32\powrprof.dll 09:49:51.0798 2864 C:\Windows\System32\powrprof.dll - ok 09:49:51.0798 2864 [ 5C627D1B1138676C0A7AB2C2C190D123 ] C:\Windows\System32\rpcss.dll 09:49:51.0798 2864 C:\Windows\System32\rpcss.dll - ok 09:49:51.0814 2864 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] C:\Windows\System32\RpcEpMap.dll 09:49:51.0814 2864 C:\Windows\System32\RpcEpMap.dll - ok 09:49:51.0814 2864 [ 31559F3244C6BC00A52030CAA83B6B91 ] C:\Windows\System32\WSHTCPIP.DLL 09:49:51.0814 2864 C:\Windows\System32\WSHTCPIP.DLL - ok 09:49:51.0814 2864 [ 16E964ABF6D1E0F0CC7822FCA9BA754D ] C:\Windows\System32\wshqos.dll 09:49:51.0814 2864 C:\Windows\System32\wshqos.dll - ok 09:49:51.0829 2864 [ 9AD9E06F8656F296D91FAE8EE5B95A27 ] C:\Windows\System32\FirewallAPI.dll 09:49:51.0829 2864 C:\Windows\System32\FirewallAPI.dll - ok 09:49:51.0829 2864 [ 94E026870A55AAEAFF7853C1754091E9 ] C:\Windows\System32\version.dll 09:49:51.0829 2864 C:\Windows\System32\version.dll - ok 09:49:51.0845 2864 [ CC8E4F72F21340A4D3A3D4DB50313EF5 ] C:\Program Files\Microsoft Security Client\MsMpEng.exe 09:49:51.0845 2864 C:\Program Files\Microsoft Security Client\MsMpEng.exe - ok 09:49:51.0845 2864 [ 715F03B4C7223349768013EA95D9E5B7 ] C:\Windows\System32\LogonUI.exe 09:49:51.0845 2864 C:\Windows\System32\LogonUI.exe - ok 09:49:51.0861 2864 [ 0BEE002C68E28CE6DA161DCF1376D7D7 ] C:\Windows\System32\authui.dll 09:49:51.0861 2864 C:\Windows\System32\authui.dll - ok 09:49:51.0861 2864 [ BCF8F2758AA5C451F8E366C66A98BBFE ] C:\Program Files\Microsoft Security Client\MpSvc.dll 09:49:51.0861 2864 C:\Program Files\Microsoft Security Client\MpSvc.dll - ok 09:49:51.0861 2864 [ B3BFBD758506ECB50C5804AAA76318F9 ] C:\Windows\System32\cryptui.dll 09:49:51.0861 2864 C:\Windows\System32\cryptui.dll - ok 09:49:51.0876 2864 [ BD3674BE7FC9D8D3732C83E8499576ED ] C:\Windows\System32\wtsapi32.dll 09:49:51.0876 2864 C:\Windows\System32\wtsapi32.dll - ok 09:49:51.0876 2864 [ 2F67DEE6452EBC9F4A6C97A1CCC232FE ] C:\Program Files\Microsoft Security Client\MpClient.dll 09:49:51.0876 2864 C:\Program Files\Microsoft Security Client\MpClient.dll - ok 09:49:51.0876 2864 [ 7FA8FDC2C2A27817FD0F624E78D3B50C ] C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll 09:49:51.0876 2864 C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll - ok 09:49:51.0892 2864 [ 1F4492FE41767CDB8B89D17655847CDD ] C:\Windows\System32\ntmarta.dll 09:49:51.0892 2864 C:\Windows\System32\ntmarta.dll - ok 09:49:51.0892 2864 [ 4E9C2DB10F7E6AE91BF761139D4B745B ] C:\Windows\System32\shacct.dll 09:49:51.0892 2864 C:\Windows\System32\shacct.dll - ok 09:49:51.0907 2864 [ 5B3EBFC3DA142324B388DDCC4465E1FF ] C:\Windows\System32\samlib.dll 09:49:51.0907 2864 C:\Windows\System32\samlib.dll - ok 09:49:51.0907 2864 [ F06BB4E336EA57511FDBAFAFCC47DE62 ] C:\Windows\System32\propsys.dll 09:49:51.0907 2864 C:\Windows\System32\propsys.dll - ok 09:49:51.0907 2864 [ D29E998E8277666982B4F0303BF4E7AF ] C:\Windows\System32\uxtheme.dll 09:49:51.0907 2864 C:\Windows\System32\uxtheme.dll - ok 09:49:51.0923 2864 [ 5F10310A5A9273475AA04930DFE16742 ] C:\Program Files\Microsoft Security Client\EppManifest.dll 09:49:51.0923 2864 C:\Program Files\Microsoft Security Client\EppManifest.dll - ok 09:49:51.0923 2864 [ 179E8401224D557ECFF3695F2016EA5B ] C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c 8271ec7765\GdiPlus.dll 09:49:51.0923 2864 C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c 8271ec7765\GdiPlus.dll - ok 09:49:51.0923 2864 [ 6011714C8C5C55CBFFAD24D61E879FBD ] C:\Windows\System32\wevtsvc.dll 09:49:51.0923 2864 C:\Windows\System32\wevtsvc.dll - ok 09:49:51.0939 2864 [ 3CB6A7286422C72C34DAB54A5DFF1A34 ] C:\Windows\System32\dui70.dll 09:49:51.0939 2864 C:\Windows\System32\dui70.dll - ok 09:49:51.0939 2864 [ 8CCDE014A4CDF84564E03ACE064CA753 ] C:\Windows\System32\duser.dll 09:49:51.0939 2864 C:\Windows\System32\duser.dll - ok 09:49:51.0954 2864 [ D7F1EF374A90709B31591823B002F918 ] C:\Windows\System32\SndVolSSO.dll 09:49:51.0954 2864 C:\Windows\System32\SndVolSSO.dll - ok 09:49:51.0954 2864 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] C:\Windows\System32\profsvc.dll 09:49:51.0954 2864 C:\Windows\System32\profsvc.dll - ok 09:49:51.0954 2864 [ 896F15A6434D93EDB42519D5E18E6B50 ] C:\Windows\System32\hid.dll 09:49:51.0954 2864 C:\Windows\System32\hid.dll - ok 09:49:51.0970 2864 [ 58775492FFD419248B08325E583C527F ] C:\Windows\System32\atl.dll 09:49:51.0970 2864 C:\Windows\System32\atl.dll - ok 09:49:51.0970 2864 [ 227E2C382A1E02F8D4965E664D3BBE43 ] C:\Windows\System32\MMDevAPI.dll 09:49:51.0970 2864 C:\Windows\System32\MMDevAPI.dll - ok 09:49:51.0985 2864 [ DA1B7075260F3872585BFCDD668C648B ] C:\Windows\System32\dwmapi.dll 09:49:51.0985 2864 C:\Windows\System32\dwmapi.dll - ok 09:49:51.0985 2864 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] C:\Windows\System32\wlansvc.dll 09:49:51.0985 2864 C:\Windows\System32\wlansvc.dll - ok 09:49:51.0985 2864 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] C:\Windows\System32\drivers\nwifi.sys 09:49:51.0985 2864 C:\Windows\System32\drivers\nwifi.sys - ok 09:49:52.0001 2864 [ 6F8B48F3D343E4B186AB6A9E302B7E16 ] C:\Windows\System32\xmllite.dll 09:49:52.0001 2864 C:\Windows\System32\xmllite.dll - ok 09:49:52.0001 2864 [ 136185F9FB2CC61E573E676AA5402356 ] C:\Windows\System32\drivers\ndisuio.sys 09:49:52.0001 2864 C:\Windows\System32\drivers\ndisuio.sys - ok 09:49:52.0001 2864 [ D54BFDF3E0C953F823B3D0BFE4732528 ] C:\Windows\System32\nsisvc.dll 09:49:52.0001 2864 C:\Windows\System32\nsisvc.dll - ok 09:49:52.0017 2864 [ F993A32249B66C9D622EA5592A8B76B8 ] C:\Windows\System32\lmhsvc.dll 09:49:52.0017 2864 C:\Windows\System32\lmhsvc.dll - ok 09:49:52.0017 2864 [ F9EC845C5EECF20E9A67F9F805F2EF1F ] C:\Windows\System32\keyiso.dll 09:49:52.0017 2864 C:\Windows\System32\keyiso.dll - ok 09:49:52.0032 2864 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] C:\Windows\System32\eapsvc.dll 09:49:52.0032 2864 C:\Windows\System32\eapsvc.dll - ok 09:49:52.0032 2864 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] C:\Windows\System32\dnsrslvr.dll 09:49:52.0032 2864 C:\Windows\System32\dnsrslvr.dll - ok 09:49:52.0032 2864 [ 26B73A85855681500BCC25C7CD9FF5B1 ] C:\Windows\System32\WindowsCodecs.dll 09:49:52.0032 2864 C:\Windows\System32\WindowsCodecs.dll - ok 09:49:52.0048 2864 [ 87356377F31DA5F20A833811CD59499C ] C:\Windows\System32\eapphost.dll 09:49:52.0048 2864 C:\Windows\System32\eapphost.dll - ok 09:49:52.0048 2864 [ 2B81776DA02017A37FE26C662827470E ] C:\Windows\System32\IPHLPAPI.DLL 09:49:52.0048 2864 C:\Windows\System32\IPHLPAPI.DLL - ok 09:49:52.0048 2864 [ BF62F3BC1BE0700804EC394BB77F02C4 ] C:\Program Files\Microsoft Security Client\MpRTP.dll 09:49:52.0048 2864 C:\Program Files\Microsoft Security Client\MpRTP.dll - ok 09:49:52.0063 2864 [ 4C9210E8F4E052F6A4EB87716DA0C24C ] C:\Windows\System32\winnsi.dll 09:49:52.0063 2864 C:\Windows\System32\winnsi.dll - ok 09:49:52.0063 2864 [ F3D202F53A222D5F6944D459B73CF967 ] C:\Windows\System32\fltLib.dll 09:49:52.0063 2864 C:\Windows\System32\fltLib.dll - ok 09:49:52.0063 2864 [ B73A6E4B319AFFE64582AC5C1801BB3F ] C:\Windows\System32\nrpsrv.dll 09:49:52.0063 2864 C:\Windows\System32\nrpsrv.dll - ok 09:49:52.0079 2864 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] C:\Windows\System32\dhcpcore.dll 09:49:52.0079 2864 C:\Windows\System32\dhcpcore.dll - ok 09:49:52.0095 2864 [ 0040C486584A8E582C861CFB57AB5387 ] C:\Windows\System32\FWPUCLNT.DLL 09:49:52.0095 2864 C:\Windows\System32\FWPUCLNT.DLL - ok 09:49:52.0095 2864 [ 588CD0C78A7FAAE4186B5EEA0AF3ED67 ] C:\Windows\System32\adtschema.dll 09:49:52.0095 2864 C:\Windows\System32\adtschema.dll - ok 09:49:52.0095 2864 [ 885D0942E0F28DB90919BE3129ECF279 ] C:\Windows\System32\dnsext.dll 09:49:52.0095 2864 C:\Windows\System32\dnsext.dll - ok 09:49:52.0095 2864 [ 9F2BACD5E1776A4BB7CC0EC3C3A4F96D ] C:\Windows\System32\winbrand.dll 09:49:52.0095 2864 C:\Windows\System32\winbrand.dll - ok 09:49:52.0110 2864 [ 3CC16A849E6092E43909F48EF0E60306 ] C:\Windows\System32\dhcpcore6.dll 09:49:52.0110 2864 C:\Windows\System32\dhcpcore6.dll - ok 09:49:52.0110 2864 [ F568F7C08458D69E4FCD8675BBB107E4 ] C:\Windows\System32\dhcpcsvc.dll 09:49:52.0110 2864 C:\Windows\System32\dhcpcsvc.dll - ok 09:49:52.0126 2864 [ 9FCA3A84338ADEF2AFF67CDA46EF8539 ] C:\Windows\System32\umb.dll 09:49:52.0126 2864 C:\Windows\System32\umb.dll - ok 09:49:52.0126 2864 [ 3C06D5A929B798D0B13F6481242A0FD2 ] C:\Windows\System32\dhcpcsvc6.dll 09:49:52.0126 2864 C:\Windows\System32\dhcpcsvc6.dll - ok 09:49:52.0126 2864 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] C:\Windows\System32\netprofm.dll 09:49:52.0126 2864 C:\Windows\System32\netprofm.dll - ok 09:49:52.0141 2864 [ A77BE7CB3222B4FB0AC6C71D1C2698D4 ] C:\Windows\System32\dsrole.dll 09:49:52.0141 2864 C:\Windows\System32\dsrole.dll - ok 09:49:52.0141 2864 [ 30042487E83BF3B518DD9B92A2F52F42 ] C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BECC845A-C707-4257-A474-DD03206F3235}\mpengine.dll 09:49:52.0141 2864 C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{BECC845A-C707-4257-A474-DD03206F3235}\mpengine.dll - ok 09:49:52.0157 2864 [ 50544D04AD845C43130B70212EC05CCD ] C:\Windows\System32\microsoft-windows-kernel-power-events.dll 09:49:52.0157 2864 C:\Windows\System32\microsoft-windows-kernel-power-events.dll - ok 09:49:52.0157 2864 [ DA6B67270FD9DB3697B20FCE94950741 ] C:\Windows\System32\drivers\fltMgr.sys 09:49:52.0157 2864 C:\Windows\System32\drivers\fltMgr.sys - ok 09:49:52.0157 2864 [ A648C4A06DE367065B24056D067B4460 ] C:\Windows\System32\wlanmsm.dll 09:49:52.0157 2864 C:\Windows\System32\wlanmsm.dll - ok 09:49:52.0173 2864 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] C:\Windows\System32\MPSSVC.dll 09:49:52.0173 2864 C:\Windows\System32\MPSSVC.dll - ok 09:49:52.0173 2864 [ 06A1386B6E3A0CBC368665C1840906F4 ] C:\Windows\System32\wlansec.dll 09:49:52.0173 2864 C:\Windows\System32\wlansec.dll - ok 09:49:52.0173 2864 [ 73FCB7919DEE80EE556F2E498594EBAE ] C:\Windows\System32\onex.dll 09:49:52.0173 2864 C:\Windows\System32\onex.dll - ok 09:49:52.0188 2864 [ CA2985996BB49924B677113DF95CFEA7 ] C:\Windows\System32\SmartcardCredentialProvider.dll 09:49:52.0188 2864 C:\Windows\System32\SmartcardCredentialProvider.dll - ok 09:49:52.0188 2864 [ A3DB3C17EE6CAE65D53602B4E80BCCBC ] C:\Windows\System32\PSHED.DLL 09:49:52.0188 2864 C:\Windows\System32\PSHED.DLL - ok 09:49:52.0188 2864 [ 65522E77A1360DBC8D199DA3BF5EFFE4 ] C:\Windows\System32\eappprxy.dll 09:49:52.0188 2864 C:\Windows\System32\eappprxy.dll - ok 09:49:52.0204 2864 [ 0D753307D274F3688BD21C377B616700 ] C:\Windows\System32\eappcfg.dll 09:49:52.0204 2864 C:\Windows\System32\eappcfg.dll - ok 09:49:52.0204 2864 [ C2762A57DF0EE85E63CE4893C5215313 ] C:\Windows\System32\VaultCredProvider.dll 09:49:52.0204 2864 C:\Windows\System32\VaultCredProvider.dll - ok 09:49:52.0219 2864 [ 730BF204A595D5B6D7DC57A247CC741C ] C:\Windows\System32\wlgpclnt.dll 09:49:52.0219 2864 C:\Windows\System32\wlgpclnt.dll - ok 09:49:52.0219 2864 [ 97E43F324BE1503CB2FFB058534688DA ] C:\Windows\System32\l2gpstore.dll 09:49:52.0219 2864 C:\Windows\System32\l2gpstore.dll - ok 09:49:52.0219 2864 [ 7F1B4C6FF3B85F9ADF74055187B8A22C ] C:\Windows\System32\wlanutil.dll 09:49:52.0219 2864 C:\Windows\System32\wlanutil.dll - ok 09:49:52.0235 2864 [ 7D5645EE0EA77D539828433D9B95F5EB ] C:\Windows\System32\WinSCard.dll 09:49:52.0235 2864 C:\Windows\System32\WinSCard.dll - ok 09:49:52.0235 2864 [ 9BC8610C32C96A2983A65DC21CAFA921 ] C:\Windows\System32\UXInit.dll 09:49:52.0235 2864 C:\Windows\System32\UXInit.dll - ok 09:49:52.0235 2864 [ 99B91C5D2FCEF218CAD3600ECB62A799 ] C:\Windows\System32\msxml6.dll 09:49:52.0235 2864 C:\Windows\System32\msxml6.dll - ok 09:49:52.0251 2864 [ FF7E814CBFEC3C27922C13BB94667416 ] C:\Program Files\Microsoft Security Client\MsMpLics.dll 09:49:52.0251 2864 C:\Program Files\Microsoft Security Client\MsMpLics.dll - ok 09:49:52.0251 2864 [ 05BF204EC0E82CC4A054DB189C8A3D84 ] C:\Windows\System32\drivers\MpFilter.sys 09:49:52.0251 2864 C:\Windows\System32\drivers\MpFilter.sys - ok 09:49:52.0266 2864 [ 82974D6A2FD19445CC5171FC378668A4 ] C:\Windows\System32\BFE.DLL 09:49:52.0266 2864 C:\Windows\System32\BFE.DLL - ok 09:49:52.0266 2864 [ BE097F5BB10F9079FCEB2DC4E7E20F02 ] C:\Windows\System32\slc.dll 09:49:52.0266 2864 C:\Windows\System32\slc.dll - ok 09:49:52.0266 2864 [ 3C91392D448F6E5D525A85B7550D8BA9 ] C:\Windows\System32\wkscli.dll 09:49:52.0266 2864 C:\Windows\System32\wkscli.dll - ok 09:49:52.0282 2864 [ 6CECA4C6A489C9B2E6073AFDAAE3F607 ] C:\Windows\System32\netutils.dll 09:49:52.0282 2864 C:\Windows\System32\netutils.dll - ok 09:49:52.0282 2864 [ 6C02A83164F5CC0A262F4199F0871CF5 ] C:\Windows\System32\drivers\bowser.sys 09:49:52.0282 2864 C:\Windows\System32\drivers\bowser.sys - ok 09:49:52.0282 2864 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] C:\Windows\System32\drivers\mpsdrv.sys 09:49:52.0282 2864 C:\Windows\System32\drivers\mpsdrv.sys - ok 09:49:52.0297 2864 [ FC51229C7D4AFA0D6F186133728B95AB ] C:\Windows\System32\samcli.dll 09:49:52.0297 2864 C:\Windows\System32\samcli.dll - ok 09:49:52.0297 2864 [ A5D9106A73DC88564C825D317CAC68AC ] C:\Windows\System32\drivers\mrxsmb.sys 09:49:52.0297 2864 C:\Windows\System32\drivers\mrxsmb.sys - ok 09:49:52.0297 2864 [ D711B3C1D5F42C0C2415687BE09FC163 ] C:\Windows\System32\drivers\mrxsmb10.sys 09:49:52.0313 2864 C:\Windows\System32\drivers\mrxsmb10.sys - ok 09:49:52.0313 2864 [ 5AA945234E9D4CCE4F715276B9AA712C ] C:\Windows\System32\imageres.dll 09:49:52.0313 2864 C:\Windows\System32\imageres.dll - ok 09:49:52.0313 2864 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] C:\Windows\System32\drivers\mrxsmb20.sys 09:49:52.0313 2864 C:\Windows\System32\drivers\mrxsmb20.sys - ok 09:49:52.0329 2864 [ C67F8A962B2534224D5908D16D2AD3CE ] C:\Windows\System32\wfapigp.dll 09:49:52.0329 2864 C:\Windows\System32\wfapigp.dll - ok 09:49:52.0344 2864 [ 851A1382EED3E3A7476DB004F4EE3E1A ] C:\Windows\System32\wkssvc.dll 09:49:52.0344 2864 C:\Windows\System32\wkssvc.dll - ok 09:49:52.0344 2864 [ 1834B31C749B86DAC233BBBA1C03BC48 ] C:\Windows\System32\mscms.dll 09:49:52.0344 2864 C:\Windows\System32\mscms.dll - ok 09:49:52.0344 2864 [ 581D88B25C4D4121824FED2CA38E562F ] C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE 09:49:52.0344 2864 C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE - ok 09:49:52.0360 2864 [ 0C043B0ABBB5E14E68906AB80365395B ] C:\Windows\System32\efssvc.dll 09:49:52.0360 2864 C:\Windows\System32\efssvc.dll - ok 09:49:52.0360 2864 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] C:\Windows\System32\cryptsvc.dll 09:49:52.0360 2864 C:\Windows\System32\cryptsvc.dll - ok 09:49:52.0360 2864 [ 19B07E7E8915D701225DA41CB3877306 ] C:\Windows\System32\wbem\WMIsvc.dll 09:49:52.0360 2864 C:\Windows\System32\wbem\WMIsvc.dll - ok 09:49:52.0375 2864 [ 3AEAA8B561E63452C655DC0584922257 ] C:\Windows\System32\pcasvc.dll 09:49:52.0375 2864 C:\Windows\System32\pcasvc.dll - ok 09:49:52.0375 2864 [ 7DB5AA22A8A8E5C2D335F44853C1F6DE ] C:\Windows\System32\wbemcomn.dll 09:49:52.0375 2864 C:\Windows\System32\wbemcomn.dll - ok 09:49:52.0375 2864 [ 8792BAB371B4B1589E015B6FD1ED3B15 ] C:\Windows\System32\cryptnet.dll 09:49:52.0375 2864 C:\Windows\System32\cryptnet.dll - ok 09:49:52.0391 2864 [ 8AD77806D336673F270DB31645267293 ] C:\Windows\System32\nlasvc.dll 09:49:52.0391 2864 C:\Windows\System32\nlasvc.dll - ok 09:49:52.0391 2864 [ 7F8E83B9466A0A002D4AB15C104062A7 ] C:\Windows\System32\efscore.dll 09:49:52.0391 2864 C:\Windows\System32\efscore.dll - ok 09:49:52.0407 2864 [ 6313F223E817CC09AA41811DAA7F541D ] C:\Windows\System32\snmptrap.exe 09:49:52.0407 2864 C:\Windows\System32\snmptrap.exe - ok 09:49:52.0407 2864 [ D4FAC263861BAE06971C7F7D0A8EBF15 ] C:\Windows\System32\ncsi.dll 09:49:52.0407 2864 C:\Windows\System32\ncsi.dll - ok 09:49:52.0407 2864 [ 0255C22D99602534F15CBB8D9B6F152F ] C:\Windows\System32\wbem\WinMgmtR.dll 09:49:52.0407 2864 C:\Windows\System32\wbem\WinMgmtR.dll - ok 09:49:52.0422 2864 [ 0C52762C606BCF6A377D5E4688191A6B ] C:\Windows\System32\wbem\WmiDcPrv.dll 09:49:52.0422 2864 C:\Windows\System32\wbem\WmiDcPrv.dll - ok 09:49:52.0422 2864 [ 58283053C781AD3A579C95D7765C1FA0 ] C:\Windows\System32\efsutil.dll 09:49:52.0422 2864 C:\Windows\System32\efsutil.dll - ok 09:49:52.0422 2864 [ A3F5E8EC1316C3E2562B82694A251C9E ] C:\Windows\System32\wbem\fastprox.dll 09:49:52.0422 2864 C:\Windows\System32\wbem\fastprox.dll - ok 09:49:52.0438 2864 [ EE26D130808D16C0E417BBBED0451B34 ] C:\Windows\System32\ntdsapi.dll 09:49:52.0438 2864 C:\Windows\System32\ntdsapi.dll - ok 09:49:52.0438 2864 [ 666A60F6F5E719856FF6254E0966EFF7 ] C:\Windows\System32\wbem\wbemprox.dll 09:49:52.0438 2864 C:\Windows\System32\wbem\wbemprox.dll - ok 09:49:52.0438 2864 [ 58F4493BF748A3A89689997B7BD00E95 ] C:\Windows\System32\winhttp.dll 09:49:52.0438 2864 C:\Windows\System32\winhttp.dll - ok 09:49:52.0453 2864 [ 0E2F58F6E698EDCB9E58FAD0CBCD0567 ] C:\Windows\System32\vssapi.dll 09:49:52.0453 2864 C:\Windows\System32\vssapi.dll - ok 09:49:52.0453 2864 [ 603EBD34E216C5654A2D774EAC98D278 ] C:\Windows\System32\webio.dll 09:49:52.0453 2864 C:\Windows\System32\webio.dll - ok 09:49:52.0469 2864 [ 7373DE70D405FF08DC53336B83989138 ] C:\Windows\System32\rastls.dll 09:49:52.0469 2864 C:\Windows\System32\rastls.dll - ok 09:49:52.0485 2864 [ 14DFDEAF4E589ED3F1FF187A86B9408C ] C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll 09:49:52.0485 2864 C:\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll - ok 09:49:52.0485 2864 [ 908ACB1F594274965A53926B10C81E89 ] C:\Windows\System32\provsvc.dll 09:49:52.0485 2864 C:\Windows\System32\provsvc.dll - ok 09:49:52.0485 2864 [ 2BBF3FDB70B8965DFA0258CBAB41ECCE ] C:\Windows\System32\ssdpapi.dll 09:49:52.0485 2864 C:\Windows\System32\ssdpapi.dll - ok 09:49:52.0500 2864 [ B53C4B69B695EDA1B7E41D35CA4244E2 ] C:\Windows\System32\rtutils.dll 09:49:52.0500 2864 C:\Windows\System32\rtutils.dll - ok 09:49:52.0500 2864 [ 287923557447D7E4BDD7E65B1F0F5428 ] C:\Windows\System32\vsstrace.dll 09:49:52.0500 2864 C:\Windows\System32\vsstrace.dll - ok 09:49:52.0500 2864 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] C:\Windows\System32\sstpsvc.dll 09:49:52.0500 2864 C:\Windows\System32\sstpsvc.dll - ok 09:49:52.0516 2864 [ 5EB55F661DEBF156E126160BCD4D89F8 ] C:\Windows\System32\wbem\wbemcore.dll 09:49:52.0516 2864 C:\Windows\System32\wbem\wbemcore.dll - ok 09:49:52.0516 2864 [ 087D8668C71634A3A3761135ABF16EEE ] C:\Windows\System32\wbem\esscli.dll 09:49:52.0516 2864 C:\Windows\System32\wbem\esscli.dll - ok 09:49:52.0531 2864 [ 6A84E68B538B8B04608BF2F0D426CE6F ] C:\Windows\System32\raschap.dll 09:49:52.0531 2864 C:\Windows\System32\raschap.dll - ok 09:49:52.0531 2864 [ 718B6F51AB7F6FE2988A36868F9AD3AB ] C:\Windows\System32\wbem\wbemsvc.dll 09:49:52.0531 2864 C:\Windows\System32\wbem\wbemsvc.dll - ok 09:49:52.0531 2864 [ 0143DB80DACFB7C2B5B7009ED9063353 ] C:\Windows\System32\wbem\wmiutils.dll 09:49:52.0531 2864 C:\Windows\System32\wbem\wmiutils.dll - ok 09:49:52.0547 2864 [ CC0AB40F02D2C2A12209715A3C1B07B8 ] C:\Windows\System32\credui.dll 09:49:52.0547 2864 C:\Windows\System32\credui.dll - ok 09:49:52.0547 2864 [ 0AB34456654C283DAA13B8D2BA21439B ] C:\Windows\System32\wbem\repdrvfs.dll 09:49:52.0547 2864 C:\Windows\System32\wbem\repdrvfs.dll - ok 09:49:52.0547 2864 [ 019CD868461B646E09BDF04474C19341 ] C:\Windows\System32\rasapi32.dll 09:49:52.0547 2864 C:\Windows\System32\rasapi32.dll - ok 09:49:52.0563 2864 [ B28DEEC597C8DEB70C744C7CF9210E3E ] C:\Windows\System32\rasman.dll 09:49:52.0563 2864 C:\Windows\System32\rasman.dll - ok 09:49:52.0563 2864 [ 03706015DB44368375AEBE6339490E66 ] C:\Windows\System32\netcfgx.dll 09:49:52.0563 2864 C:\Windows\System32\netcfgx.dll - ok 09:49:52.0563 2864 [ DDD0357A92FA843EFF8915ED17253D6C ] C:\Windows\System32\wbem\WmiPrvSD.dll 09:49:52.0563 2864 C:\Windows\System32\wbem\WmiPrvSD.dll - ok 09:49:52.0578 2864 [ D41FEBD098234F02485A4EA98D4730A4 ] C:\Windows\System32\ncobjapi.dll 09:49:52.0578 2864 C:\Windows\System32\ncobjapi.dll - ok 09:49:52.0578 2864 [ 6F40D6FB05E0C1E5402812B426971AF0 ] C:\Windows\System32\wbem\wbemess.dll 09:49:52.0578 2864 C:\Windows\System32\wbem\wbemess.dll - ok 09:49:52.0594 2864 [ 20C7F2ADAE249D6708941BC8CDD9735F ] C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7CBFC1D3-E84D-4A49-8C0E-E8EE2A496D87}\gapaengine.dll 09:49:52.0594 2864 C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7CBFC1D3-E84D-4A49-8C0E-E8EE2A496D87}\gapaengine.dll - ok 09:49:52.0594 2864 [ 672D92F79961A7E7634DF61A8A6105DD ] C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7CBFC1D3-E84D-4A49-8C0E-E8EE2A496D87}\nisbase.vdm 09:49:52.0594 2864 C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7CBFC1D3-E84D-4A49-8C0E-E8EE2A496D87}\nisbase.vdm - ok 09:49:52.0609 2864 [ D729084195C952B7ED14AA6DA4B44DCA ] C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7CBFC1D3-E84D-4A49-8C0E-E8EE2A496D87}\nisfull.vdm 09:49:52.0609 2864 C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7CBFC1D3-E84D-4A49-8C0E-E8EE2A496D87}\nisfull.vdm - ok 09:49:52.0609 2864 [ 5B8580B819BE32EEC18CE1FEC52A4BCE ] C:\Program Files\Microsoft Security Client\MpCmdRun.exe 09:49:52.0609 2864 C:\Program Files\Microsoft Security Client\MpCmdRun.exe - ok 09:49:52.0609 2864 [ 0E7045E24F78351E021D3C01566DBBA3 ] C:\Program Files\Microsoft Security Client\MpAsDesc.dll 09:49:52.0609 2864 C:\Program Files\Microsoft Security Client\MpAsDesc.dll - ok 09:49:52.0625 2864 [ 1BCDB508143B517F21BBDAC10F5777BF ] C:\Windows\System32\conhost.exe 09:49:52.0625 2864 C:\Windows\System32\conhost.exe - ok 09:49:52.0625 2864 [ FA43D418BC945D27D0625B697B8442B5 ] C:\Windows\System32\cabinet.dll 09:49:52.0625 2864 C:\Windows\System32\cabinet.dll - ok 09:49:52.0625 2864 [ 218A400108F280428FA22282D3268BBC ] C:\Windows\System32\wscapi.dll 09:49:52.0625 2864 C:\Windows\System32\wscapi.dll - ok 09:49:52.0641 2864 [ 92E0508D924512F63FFEEFE498CBD11F ] C:\Windows\System32\p2pcollab.dll 09:49:52.0641 2864 C:\Windows\System32\p2pcollab.dll - ok 09:49:52.0641 2864 [ 582AC6D9873E31DFA28A4547270862DD ] C:\Windows\System32\QAGENTRT.DLL 09:49:52.0641 2864 C:\Windows\System32\QAGENTRT.DLL - ok 09:49:52.0656 2864 [ 506A83A3BEEE9FCA09F0170DE9FC7D1B ] C:\Windows\System32\fveui.dll 09:49:52.0656 2864 C:\Windows\System32\fveui.dll - ok 09:49:52.0656 2864 [ CA9E3BD4752FA2C084F5CD35FD8D0025 ] C:\Program Files\Microsoft Security Client\MsseWat.dll 09:49:52.0656 2864 C:\Program Files\Microsoft Security Client\MsseWat.dll - ok 09:49:52.0656 2864 [ B6D6886149573278CBA6ABD44C4317F5 ] C:\Windows\System32\slwga.dll 09:49:52.0656 2864 C:\Windows\System32\slwga.dll - ok 09:49:52.0672 2864 [ DB76DB15EFC6E4D1153A6C5BC895948D ] C:\Windows\System32\sppc.dll 09:49:52.0672 2864 C:\Windows\System32\sppc.dll - ok 09:49:52.0672 2864 [ A8EDB86FC2A4D6D1285E4C70384AC35A ] C:\Windows\System32\dllhost.exe 09:49:52.0672 2864 C:\Windows\System32\dllhost.exe - ok 09:49:52.0672 2864 [ A0A2C1D812C231C9BFE119FDC68E341B ] C:\Windows\System32\IDStore.dll 09:49:52.0672 2864 C:\Windows\System32\IDStore.dll - ok 09:49:52.0687 2864 [ 6CEF7856A3EFAC59470F6208F0F585CE ] C:\Windows\System32\mpr.dll 09:49:52.0687 2864 C:\Windows\System32\mpr.dll - ok 09:49:52.0687 2864 [ BAFE84E637BF7388C96EF48D4D3FDD53 ] C:\Windows\System32\userinit.exe 09:49:52.0687 2864 C:\Windows\System32\userinit.exe - ok 09:49:52.0687 2864 [ 332FEAB1435662FC6C672E25BEB37BE3 ] C:\Windows\explorer.exe 09:49:52.0687 2864 C:\Windows\explorer.exe - ok 09:49:52.0703 2864 [ EED05D42D91835064703E2318552ED25 ] C:\Windows\System32\ExplorerFrame.dll 09:49:52.0703 2864 C:\Windows\System32\ExplorerFrame.dll - ok 09:49:52.0703 2864 [ 90499F3163A9F815CF196A205EA3CD5D ] C:\Windows\System32\apphelp.dll 09:49:52.0703 2864 C:\Windows\System32\apphelp.dll - ok 09:49:52.0719 2864 [ 0FB2130038B64F3EA23C6D8104E3E2C2 ] C:\Program Files\AVAST Software\Avast\ashShA64.dll 09:49:52.0719 2864 C:\Program Files\AVAST Software\Avast\ashShA64.dll - ok 09:49:52.0719 2864 [ 5877A3341AA7DF58789294CEBA38AE2B ] C:\Users\Ariel Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll 09:49:52.0719 2864 C:\Users\Ariel Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll - ok 09:49:52.0719 2864 [ A7A8CA53D9C9FD90C07AB0EB38E5316B ] C:\Windows\System32\dbghelp.dll 09:49:52.0719 2864 C:\Windows\System32\dbghelp.dll - ok 09:49:52.0734 2864 [ 241AF87821FDA0F5792037B779F49BE0 ] C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc 251\msvcp90.dll 09:49:52.0734 2864 C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc 251\msvcp90.dll - ok 09:49:52.0750 2864 [ D233C7FEAE3FAA25F93A9E6B46815ADC ] C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc 251\msvcr90.dll 09:49:52.0750 2864 C:\Windows\winsxs\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc 251\msvcr90.dll - ok 09:49:52.0750 2864 [ 024352FEEC9042260BB4CFB4D79A206B ] C:\Windows\System32\EhStorShell.dll 09:49:52.0750 2864 C:\Windows\System32\EhStorShell.dll - ok 09:49:52.0750 2864 [ 037A719DAD50603202C978CD802623E4 ] C:\Windows\System32\ntshrui.dll 09:49:52.0750 2864 C:\Windows\System32\ntshrui.dll - ok 09:49:52.0765 2864 [ 1BF0CB861A48FEB1638228760750F3CB ] C:\Windows\System32\cscapi.dll 09:49:52.0765 2864 C:\Windows\System32\cscapi.dll - ok 09:49:52.0765 2864 [ 1D63F4366288B8A7595397E27010FD44 ] C:\Windows\System32\IconCodecService.dll 09:49:52.0765 2864 C:\Windows\System32\IconCodecService.dll - ok 09:49:52.0781 2864 [ 025E7DBDB98866ED3CB2D4DDA70B364D ] C:\Windows\System32\runonce.exe 09:49:52.0781 2864 C:\Windows\System32\runonce.exe - ok 09:49:52.0781 2864 [ E73B0F1819602CB6EF176FB78D76A47B ] C:\Windows\SysWOW64\ntdll.dll 09:49:52.0781 2864 C:\Windows\SysWOW64\ntdll.dll - ok 09:49:52.0781 2864 [ D44741F65A1D71F65814A12CF6E2400A ] C:\Windows\SysWOW64\runonce.exe 09:49:52.0781 2864 C:\Windows\SysWOW64\runonce.exe - ok 09:49:52.0797 2864 [ 259EB5F7D95A29842B476C5B3EB6E186 ] C:\Windows\System32\wow64.dll 09:49:52.0797 2864 C:\Windows\System32\wow64.dll - ok 09:49:52.0797 2864 [ 5674E21E82CFBEA36DDAD5DB285D6DBC ] C:\Windows\System32\wow64win.dll 09:49:52.0797 2864 C:\Windows\System32\wow64win.dll - ok 09:49:52.0797 2864 [ 3EE3AA76D8AB6D5644C4C8F34471CEB3 ] C:\Windows\System32\wow64cpu.dll 09:49:52.0797 2864 C:\Windows\System32\wow64cpu.dll - ok 09:49:52.0812 2864 [ AC0B6F41882FC6ED186962D770EBF1D2 ] C:\Windows\SysWOW64\kernel32.dll 09:49:52.0812 2864 C:\Windows\SysWOW64\kernel32.dll - ok 09:49:52.0812 2864 [ E954A79D6A754A5475582CACED1565E6 ] C:\Windows\SysWOW64\KernelBase.dll 09:49:52.0812 2864 C:\Windows\SysWOW64\KernelBase.dll - ok 09:49:52.0812 2864 [ 95E2376B3323F062EB562B8586D0F14A ] C:\Windows\SysWOW64\advapi32.dll 09:49:52.0812 2864 C:\Windows\SysWOW64\advapi32.dll - ok 09:49:52.0828 2864 [ 9DC80A8AAAAAC397BDAB3C67165A824E ] C:\Windows\SysWOW64\msvcrt.dll 09:49:52.0828 2864 C:\Windows\SysWOW64\msvcrt.dll - ok 09:49:52.0828 2864 [ CFC97F07904067A1E5FAE195D534DA3A ] C:\Windows\SysWOW64\sechost.dll 09:49:52.0828 2864 C:\Windows\SysWOW64\sechost.dll - ok 09:49:52.0843 2864 [ C5AD8083CF94201F1F8084ECC696A8B7 ] C:\Windows\SysWOW64\rpcrt4.dll 09:49:52.0843 2864 C:\Windows\SysWOW64\rpcrt4.dll - ok 09:49:52.0843 2864 [ EDA7AD21DF8945528F01F0A86D69E524 ] C:\Windows\SysWOW64\sspicli.dll 09:49:52.0843 2864 C:\Windows\SysWOW64\sspicli.dll - ok 09:49:52.0843 2864 [ F08F6FCD09F9BE94C37ACC1B344685FF ] C:\Windows\SysWOW64\cryptbase.dll 09:49:52.0843 2864 C:\Windows\SysWOW64\cryptbase.dll - ok 09:49:52.0859 2864 [ D6D3AD7BF1D6F6CE9547613ED5E170A2 ] C:\Windows\SysWOW64\gdi32.dll 09:49:52.0859 2864 C:\Windows\SysWOW64\gdi32.dll - ok 09:49:52.0875 2864 [ 5E0DB2D8B2750543CD2EBB9EA8E6CDD3 ] C:\Windows\SysWOW64\user32.dll 09:49:52.0875 2864 C:\Windows\SysWOW64\user32.dll - ok 09:49:52.0875 2864 [ 384721EF4024890092625E20CADFAF85 ] C:\Windows\SysWOW64\lpk.dll 09:49:52.0875 2864 C:\Windows\SysWOW64\lpk.dll - ok 09:49:52.0875 2864 [ B7230010D97787AF3D25E4C82F2B06B9 ] C:\Windows\SysWOW64\usp10.dll 09:49:52.0875 2864 C:\Windows\SysWOW64\usp10.dll - ok 09:49:52.0890 2864 [ 8CC3C111D653E96F3EA1590891491D71 ] C:\Windows\SysWOW64\shlwapi.dll 09:49:52.0890 2864 C:\Windows\SysWOW64\shlwapi.dll - ok 09:49:52.0890 2864 [ 928CF7268086631F54C3D8E17238C6DD ] C:\Windows\SysWOW64\ole32.dll 09:49:52.0890 2864 C:\Windows\SysWOW64\ole32.dll - ok 09:49:52.0890 2864 [ 352B3DC62A0D259A82A052238425C872 ] C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll 09:49:52.0890 2864 C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll - ok 09:49:52.0906 2864 [ 29E9794708DF51DB5DC89FB2E903A0F6 ] C:\Windows\SysWOW64\shell32.dll 09:49:52.0906 2864 C:\Windows\SysWOW64\shell32.dll - ok 09:49:52.0906 2864 [ A6F09E5669D9A19035F6D942CAA15882 ] C:\Windows\SysWOW64\imm32.dll 09:49:52.0906 2864 C:\Windows\SysWOW64\imm32.dll - ok 09:49:52.0906 2864 [ C9618BC9B2B0FD7C1138D8774795A79B ] C:\Windows\SysWOW64\msctf.dll 09:49:52.0906 2864 C:\Windows\SysWOW64\msctf.dll - ok 09:49:52.0921 2864 [ 42B6A94DD747DF2B5F628A2752E62A98 ] C:\Windows\System32\ctfmon.exe 09:49:52.0921 2864 C:\Windows\System32\ctfmon.exe - ok 09:49:52.0921 2864 [ FB10715E4099AF9FA389C71873245226 ] C:\Windows\System32\timedate.cpl 09:49:52.0921 2864 C:\Windows\System32\timedate.cpl - ok 09:49:52.0921 2864 [ 1F1CA9E99DD5BF918BE0BF30B5A42FDA ] C:\Windows\System32\MsCtfMonitor.dll 09:49:52.0921 2864 C:\Windows\System32\MsCtfMonitor.dll - ok 09:49:52.0937 2864 [ F09A9A1AD21FE618C4C8B0A0D830C886 ] C:\Windows\System32\msutb.dll 09:49:52.0937 2864 C:\Windows\System32\msutb.dll - ok 09:49:52.0937 2864 [ 732E668096B1A37B7BFD4B9021E69A8E ] C:\Windows\System32\oleres.dll 09:49:52.0937 2864 C:\Windows\System32\oleres.dll - ok 09:49:52.0953 2864 [ C4F40F6CACD796A8E16671D0E9A2F319 ] C:\Windows\System32\shdocvw.dll 09:49:52.0953 2864 C:\Windows\System32\shdocvw.dll - ok 09:49:52.0953 2864 [ A0A65D306A5490D2EB8E7DE66898ECFD ] C:\Windows\System32\linkinfo.dll 09:49:52.0953 2864 C:\Windows\System32\linkinfo.dll - ok 09:49:52.0953 2864 [ 2BCBA6052374959A30BD7948444DBB79 ] C:\Windows\System32\gameux.dll 09:49:52.0953 2864 C:\Windows\System32\gameux.dll - ok 09:49:52.0968 2864 [ 9689A9C7F7C2A1A423CDA2C3B43FFF65 ] C:\Windows\System32\wer.dll 09:49:52.0968 2864 C:\Windows\System32\wer.dll - ok 09:49:52.0968 2864 [ 1EAC1A8CA6874BF5B15E2EFB9A9A7B86 ] C:\Windows\System32\msftedit.dll 09:49:52.0968 2864 C:\Windows\System32\msftedit.dll - ok 09:49:52.0968 2864 [ 7DBA84667DC18877AEF693E3543DFAD7 ] C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll 09:49:52.0968 2864 C:\Program Files\Common Files\Microsoft Shared\ink\tiptsf.dll - ok 09:49:52.0984 2864 [ 7FCAB194F01E3403C300EB034E480B36 ] C:\Windows\System32\msls31.dll 09:49:52.0984 2864 C:\Windows\System32\msls31.dll - ok 09:49:52.0999 2864 [ 4C2C4640BF23AAFCF90519E0F34436CE ] C:\Windows\System32\DeviceCenter.dll 09:49:52.0999 2864 C:\Windows\System32\DeviceCenter.dll - ok 09:49:52.0999 2864 [ 24F4B480F335A6C724AF352253C5D98B ] C:\Windows\System32\thumbcache.dll 09:49:52.0999 2864 C:\Windows\System32\thumbcache.dll - ok 09:49:52.0999 2864 [ 405F4D32D2185F1F1BD753D8EEAFFB3A ] C:\Windows\System32\networkexplorer.dll 09:49:52.0999 2864 C:\Windows\System32\networkexplorer.dll - ok 09:49:53.0015 2864 [ C4D86DCFAB07EA80EAD9CE45850FB357 ] C:\Program Files (x86)\DAEMON Tools Pro\DTShl64.dll 09:49:53.0015 2864 C:\Program Files (x86)\DAEMON Tools Pro\DTShl64.dll - ok 09:49:53.0015 2864 [ F5143A7CA66EB913B5463BED3D3DD8D2 ] C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe 09:49:53.0015 2864 C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe - ok 09:49:53.0031 2864 [ C7EB0013347B89145754D7576B9FC8C8 ] C:\Program Files (x86)\DAEMON Tools Pro\DTCommonRes.dll 09:49:53.0031 2864 C:\Program Files (x86)\DAEMON Tools Pro\DTCommonRes.dll - ok 09:49:53.0031 2864 [ 69754747274B76E7FAF287239333D7E6 ] C:\Windows\System32\msiltcfg.dll 09:49:53.0031 2864 C:\Windows\System32\msiltcfg.dll - ok 09:49:53.0031 2864 [ 5EB6E9C8BE1ACC5830780E0F9A846255 ] C:\Windows\System32\msi.dll 09:49:53.0031 2864 C:\Windows\System32\msi.dll - ok 09:49:53.0046 2864 [ 18AB2E5A40064ED5F7791AC5946A90F3 ] C:\Windows\SysWOW64\msimg32.dll 09:49:53.0046 2864 C:\Windows\SysWOW64\msimg32.dll - ok 09:49:53.0046 2864 [ D1DE1EAFDE97BE41CF6585027FF3E732 ] C:\Windows\SysWOW64\comdlg32.dll 09:49:53.0046 2864 C:\Windows\SysWOW64\comdlg32.dll - ok 09:49:53.0046 2864 [ 9E4B0E7472B4CEBA9E17F440B8CB0AB8 ] C:\Windows\SysWOW64\winspool.drv 09:49:53.0046 2864 C:\Windows\SysWOW64\winspool.drv - ok 09:49:53.0062 2864 [ 6C765E82B57F2E66CE9C54AC238471D9 ] C:\Windows\SysWOW64\oleaut32.dll 09:49:53.0062 2864 C:\Windows\SysWOW64\oleaut32.dll - ok 09:49:53.0062 2864 [ 8E01332CC4B68BC6B5B7EFFE374442AA ] C:\Windows\SysWOW64\oleacc.dll 09:49:53.0062 2864 C:\Windows\SysWOW64\oleacc.dll - ok 09:49:53.0077 2864 [ 7717F84F483002815490033BF069DABD ] C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d27359 8668a06b\GdiPlus.dll 09:49:53.0077 2864 C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d27359 8668a06b\GdiPlus.dll - ok 09:49:53.0077 2864 [ D5AEFAD57C08349A4393D987DF7C715D ] C:\Windows\SysWOW64\winmm.dll 09:49:53.0077 2864 C:\Windows\SysWOW64\winmm.dll - ok 09:49:53.0077 2864 [ 43964FA89CCF97BA6BE34D69455AC65F ] C:\Windows\SysWOW64\uxtheme.dll 09:49:53.0077 2864 C:\Windows\SysWOW64\uxtheme.dll - ok 09:49:53.0093 2864 [ 39C5F32747B3414D1BB216FDB1DEFC58 ] C:\Windows\SysWOW64\dwmapi.dll 09:49:53.0093 2864 C:\Windows\SysWOW64\dwmapi.dll - ok 09:49:53.0093 2864 [ 25D9F29E3A5C6B07166193701C40952C ] C:\Program Files (x86)\DAEMON Tools Pro\Engine.dll 09:49:53.0093 2864 C:\Program Files (x86)\DAEMON Tools Pro\Engine.dll - ok 09:49:53.0109 2864 [ 21EF4BB2A6FF4116FD83FAEE52D4A416 ] C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe 09:49:53.0109 2864 C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe - ok 09:49:53.0109 2864 [ 10FB16B50AFFDA6D44588F3C445DC273 ] C:\Windows\SysWOW64\setupapi.dll 09:49:53.0109 2864 C:\Windows\SysWOW64\setupapi.dll - ok 09:49:53.0109 2864 [ 10E4A1D2132CCB5C6759F038CDB6F3C9 ] C:\Windows\System32\calc.exe 09:49:53.0109 2864 C:\Windows\System32\calc.exe - ok 09:49:53.0124 2864 [ F436E847FA799ECD75AD8C313673F450 ] C:\Windows\SysWOW64\cfgmgr32.dll 09:49:53.0124 2864 C:\Windows\SysWOW64\cfgmgr32.dll - ok 09:49:53.0124 2864 [ 2EEFF4502F5E13B1BED4A04CCAD64C08 ] C:\Windows\SysWOW64\devobj.dll 09:49:53.0124 2864 C:\Windows\SysWOW64\devobj.dll - ok 09:49:53.0140 2864 [ 60D21799A4AF4EDCE65FB98830E4B0C8 ] C:\Windows\SysWOW64\crypt32.dll 09:49:53.0140 2864 C:\Windows\SysWOW64\crypt32.dll - ok 09:49:53.0140 2864 [ 702254574E7E52052DE39408457B7149 ] C:\Windows\SysWOW64\version.dll 09:49:53.0140 2864 C:\Windows\SysWOW64\version.dll - ok 09:49:53.0140 2864 [ 938F39B50BAFE13D6F58C7790682C010 ] C:\Windows\SysWOW64\msasn1.dll 09:49:53.0140 2864 C:\Windows\SysWOW64\msasn1.dll - ok 09:49:53.0155 2864 [ 484ACF6AF85A29AC52F3CF054DFDE9D3 ] C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe 09:49:53.0155 2864 C:\Windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe - ok 09:49:53.0155 2864 [ F2C7BB8ACC97F92E987A2D4087D021B1 ] C:\Windows\System32\notepad.exe 09:49:53.0155 2864 C:\Windows\System32\notepad.exe - ok 09:49:53.0155 2864 [ C733D233B623B7FFCE5031E4B756EE26 ] C:\Windows\SysWOW64\profapi.dll 09:49:53.0155 2864 C:\Windows\SysWOW64\profapi.dll - ok 09:49:53.0171 2864 [ D6CD851869A9A3FBEB2254D3766A9ABA ] C:\Program Files (x86)\DAEMON Tools Pro\imgengine.dll 09:49:53.0171 2864 C:\Program Files (x86)\DAEMON Tools Pro\imgengine.dll - ok 09:49:53.0171 2864 [ 3FD15B4611D9BDA3F8013548C0ECAECA ] C:\Windows\SysWOW64\ntmarta.dll 09:49:53.0171 2864 C:\Windows\SysWOW64\ntmarta.dll - ok 09:49:53.0171 2864 [ A8BB45F9ECAD993461E0FEF8E2A99152 ] C:\Windows\SysWOW64\Wldap32.dll 09:49:53.0171 2864 C:\Windows\SysWOW64\Wldap32.dll - ok 09:49:53.0187 2864 [ 371948BC5911ABA06168FAC91ED25F06 ] C:\Windows\System32\msxml3.dll 09:49:53.0187 2864 C:\Windows\System32\msxml3.dll - ok 09:49:53.0187 2864 [ B79515AFF098E5A56DFBD316152534DE ] C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL 09:49:53.0187 2864 C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL - ok 09:49:53.0202 2864 [ 06A754FE28A06F780A099703CFCAAA22 ] C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0 bf6\msvcr80.dll 09:49:53.0202 2864 C:\Windows\winsxs\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0 bf6\msvcr80.dll - ok 09:49:53.0202 2864 [ EF2AE43BCD46ABB13FC3E5B2B1935C73 ] C:\Windows\System32\winmm.dll 09:49:53.0202 2864 C:\Windows\System32\winmm.dll - ok 09:49:53.0202 2864 [ 1473768973453DE50DC738C2955FC4DD ] C:\Windows\System32\wdmaud.drv 09:49:53.0202 2864 C:\Windows\System32\wdmaud.drv - ok 09:49:53.0218 2864 [ 78A1E65207484B7F8D3217507745F47C ] C:\Windows\System32\avrt.dll 09:49:53.0218 2864 C:\Windows\System32\avrt.dll - ok 09:49:53.0218 2864 [ 8560FFFC8EB3A806DCD4F82252CFC8C6 ] C:\Windows\System32\ksuser.dll 09:49:53.0218 2864 C:\Windows\System32\ksuser.dll - ok 09:49:53.0233 2864 [ C3761661C17C2248A9379A8FB89E3DE1 ] C:\Windows\System32\stobject.dll 09:49:53.0233 2864 C:\Windows\System32\stobject.dll - ok 09:49:53.0233 2864 [ F832EEEA97CDDA1AF577E721F652A0D1 ] C:\Windows\System32\batmeter.dll 09:49:53.0233 2864 C:\Windows\System32\batmeter.dll - ok 09:49:53.0233 2864 [ 2D2A6EC8EAD30EC3ACE2FD6FB1B3E122 ] C:\Windows\System32\prnfldr.dll 09:49:53.0233 2864 C:\Windows\System32\prnfldr.dll - ok 09:49:53.0249 2864 [ 0015ACFBBDD164A8A730009908868CA7 ] C:\Windows\System32\winspool.drv 09:49:53.0249 2864 C:\Windows\System32\winspool.drv - ok 09:49:53.0249 2864 [ 4166F82BE4D24938977DD1746BE9B8A0 ] C:\Windows\System32\es.dll 09:49:53.0249 2864 C:\Windows\System32\es.dll - ok 09:49:53.0265 2864 [ CF4D5F7A9DBFCDEA27D2CC10FE3BF9C3 ] C:\Users\Ariel Anderson\Desktop\RogueKillerX64.exe 09:49:53.0265 2864 C:\Users\Ariel Anderson\Desktop\RogueKillerX64.exe - ok 09:49:53.0265 2864 [ 42A9CB6906D9A8BEDC83B57163E62924 ] C:\Windows\System32\DXP.dll 09:49:53.0265 2864 C:\Windows\System32\DXP.dll - ok 09:49:53.0265 2864 [ 2BC7C9FD0A9F2C9AFC373F3AD1EE3891 ] C:\Windows\System32\Syncreg.dll 09:49:53.0265 2864 C:\Windows\System32\Syncreg.dll - ok 09:49:53.0280 2864 [ DB70FE36AC8F594E9E69479C076BADB8 ] C:\Windows\System32\HelpPaneProxy.dll 09:49:53.0280 2864 C:\Windows\System32\HelpPaneProxy.dll - ok 09:49:53.0280 2864 [ CD47548A52B02D254BF6D7F7A5F2BFD3 ] C:\Windows\HelpPane.exe 09:49:53.0280 2864 C:\Windows\HelpPane.exe - ok 09:49:53.0296 2864 [ 86F1F949DD51FB5A044F1BD34CBE4AA8 ] C:\Windows\System32\apds.dll 09:49:53.0296 2864 C:\Windows\System32\apds.dll - ok 09:49:53.0296 2864 [ 35126DDDE8241C4C4A5F15F6CDDF4434 ] C:\Windows\System32\ieframe.dll 09:49:53.0296 2864 C:\Windows\System32\ieframe.dll - ok 09:49:53.0296 2864 [ CF636C92B762B26F0B39B38E92380A09 ] C:\Windows\System32\oleacc.dll 09:49:53.0296 2864 C:\Windows\System32\oleacc.dll - ok 09:49:53.0311 2864 [ E7368F0A8D19445EAF5C5D0DBB8B8DAB ] C:\Windows\System32\AltTab.dll 09:49:53.0311 2864 C:\Windows\System32\AltTab.dll - ok 09:49:53.0311 2864 [ 3819AD4329303EAC88480CA16A650735 ] C:\Windows\System32\UIAnimation.dll 09:49:53.0311 2864 C:\Windows\System32\UIAnimation.dll - ok 09:49:53.0311 2864 [ 46BB91A169B9B31FF44EB04C48EC1D41 ] C:\Windows\System32\nlaapi.dll 09:49:53.0311 2864 C:\Windows\System32\nlaapi.dll - ok 09:49:53.0327 2864 [ 88351B29B622B30962D2FEB6CA8D860B ] C:\Windows\System32\rasadhlp.dll 09:49:53.0327 2864 C:\Windows\System32\rasadhlp.dll - ok 09:49:53.0327 2864 [ 14DEB733ACB08A71CC0783ED02FF1F8D ] C:\Windows\System32\mshtml.dll 09:49:53.0327 2864 C:\Windows\System32\mshtml.dll - ok 09:49:53.0343 2864 [ 10F815BE90A66AAFC6C713D1BD626064 ] C:\Windows\System32\pnidui.dll 09:49:53.0343 2864 C:\Windows\System32\pnidui.dll - ok 09:49:53.0343 2864 [ B9F0A4020AA98B7A20287BF7FE99A1FD ] C:\Windows\System32\QUTIL.DLL 09:49:53.0343 2864 C:\Windows\System32\QUTIL.DLL - ok 09:49:53.0343 2864 [ F7A256EC899C72B4ECDD2C02CB592EFD ] C:\Windows\System32\bthprops.cpl 09:49:53.0343 2864 C:\Windows\System32\bthprops.cpl - ok 09:49:53.0358 2864 [ 847D3AE376C0817161A14A82C8922A9E ] C:\Windows\System32\netman.dll 09:49:53.0358 2864 C:\Windows\System32\netman.dll - ok 09:49:53.0358 2864 [ 92DBF0A4C9239169010FC6E07859C82E ] C:\Windows\System32\ActionCenter.dll 09:49:53.0358 2864 C:\Windows\System32\ActionCenter.dll - ok 09:49:53.0358 2864 [ A42F2C1EB3B66C54FB3C7B79D30C1A6D ] C:\Windows\System32\netshell.dll 09:49:53.0358 2864 C:\Windows\System32\netshell.dll - ok 09:49:53.0374 2864 [ F7073C962C4FB7C415565DDE109DE49F ] C:\Windows\System32\npmproxy.dll 09:49:53.0374 2864 C:\Windows\System32\npmproxy.dll - ok 09:49:53.0374 2864 [ D2155709E336C3BC15729EB87FEC6064 ] C:\Windows\System32\rasdlg.dll 09:49:53.0374 2864 C:\Windows\System32\rasdlg.dll - ok 09:49:53.0374 2864 [ 2DF29664ED261F0FC448E58F338F0671 ] C:\Windows\System32\mprapi.dll 09:49:53.0374 2864 C:\Windows\System32\mprapi.dll - ok 09:49:53.0389 2864 [ F9AFD12BB4B1CFA5FCC0A5B37C604FD2 ] C:\Windows\System32\dot3api.dll 09:49:53.0389 2864 C:\Windows\System32\dot3api.dll - ok 09:49:53.0405 2864 [ E4FCA0F99A41E460C84016DEFD31E6EF ] C:\Windows\System32\wlanhlp.dll 09:49:53.0405 2864 C:\Windows\System32\wlanhlp.dll - ok 09:49:53.0405 2864 [ 357BE883C5236BFC7341CB9E82308908 ] C:\Windows\System32\wlanapi.dll 09:49:53.0405 2864 C:\Windows\System32\wlanapi.dll - ok 09:49:53.0405 2864 [ 3B367397320C26DBA890B260F80D1B1B ] C:\Windows\System32\hnetcfg.dll 09:49:53.0405 2864 C:\Windows\System32\hnetcfg.dll - ok 09:49:53.0421 2864 [ 6699A112A3BDC9B52338512894EBA9D6 ] C:\Program Files\Windows Media Player\wmpnscfg.exe 09:49:53.0421 2864 C:\Program Files\Windows Media Player\wmpnscfg.exe - ok 09:49:53.0421 2864 [ 5DA219F57A9076FB6FBD3C9C3713A672 ] C:\Windows\System32\WWanAPI.dll 09:49:53.0421 2864 C:\Windows\System32\WWanAPI.dll - ok 09:49:53.0421 2864 [ C7494C67A6BF6FE914808E42F8265FEF ] C:\Program Files\Windows Media Player\wmpnssci.dll 09:49:53.0421 2864 C:\Program Files\Windows Media Player\wmpnssci.dll - ok 09:49:53.0436 2864 [ 62C7AACC746C9723468A8F2169ED3E85 ] C:\Windows\System32\wwapi.dll 09:49:53.0436 2864 C:\Windows\System32\wwapi.dll - ok 09:49:53.0436 2864 [ 6B851E682A36453E1B1EE297FFB6E2AB ] C:\Windows\System32\QAGENT.DLL 09:49:53.0436 2864 C:\Windows\System32\QAGENT.DLL - ok 09:49:53.0436 2864 [ F9D908DE6B166DAC9B89BF62FA291CE8 ] C:\Program Files\Bonjour\mdnsNSP.dll 09:49:53.0436 2864 C:\Program Files\Bonjour\mdnsNSP.dll - ok 09:49:53.0452 2864 [ C836175870E00ACC546066632E15BD10 ] C:\Windows\ehome\ehSSO.dll 09:49:53.0452 2864 C:\Windows\ehome\ehSSO.dll - ok 09:49:53.0452 2864 [ 58A0CDABEA255616827B1C22C9994466 ] C:\Windows\System32\NapiNSP.dll 09:49:53.0452 2864 C:\Windows\System32\NapiNSP.dll - ok 09:49:53.0467 2864 [ 613C8CE10A5FDE582BA5FA64C4D56AAA ] C:\Windows\System32\pnrpnsp.dll 09:49:53.0467 2864 C:\Windows\System32\pnrpnsp.dll - ok 09:49:53.0467 2864 [ C8FDF0FA9E97E2FAAF3F814716AAA881 ] C:\Windows\System32\WPDShServiceObj.dll 09:49:53.0467 2864 C:\Windows\System32\WPDShServiceObj.dll - ok 09:49:53.0467 2864 [ 2E2072EB48238FCA8FBB7A9F5FABAC45 ] C:\Windows\System32\winrnr.dll 09:49:53.0467 2864 C:\Windows\System32\winrnr.dll - ok 09:49:53.0483 2864 [ 4F3CD1C59EA71401E155C432BCECE180 ] C:\Windows\System32\PortableDeviceTypes.dll 09:49:53.0483 2864 C:\Windows\System32\PortableDeviceTypes.dll - ok 09:49:53.0483 2864 [ E64D9EC8018C55873B40FDEE9DBEF5B3 ] C:\Windows\System32\PortableDeviceApi.dll 09:49:53.0483 2864 C:\Windows\System32\PortableDeviceApi.dll - ok 09:49:53.0483 2864 [ 8569E35D00F45972E506502EEE622BA4 ] C:\Windows\System32\srchadmin.dll 09:49:53.0483 2864 C:\Windows\System32\srchadmin.dll - ok 09:49:53.0499 2864 [ BAAFAF9CEAEC0B73C2A3550A01F6CECB ] C:\Windows\System32\taskschd.dll 09:49:53.0499 2864 C:\Windows\System32\taskschd.dll - ok 09:49:53.0499 2864 [ 862596399AAFD2A21DB2AF9270CD4F70 ] C:\Windows\System32\mstask.dll 09:49:53.0499 2864 C:\Windows\System32\mstask.dll - ok 09:49:53.0499 2864 [ D7CEAEDD5F75D2C8A2E80887D7C114CE ] C:\Windows\System32\webcheck.dll 09:49:53.0499 2864 C:\Windows\System32\webcheck.dll - ok 09:49:53.0514 2864 [ 8494E126F0B10180F3293AF861CE1F7A ] C:\Windows\System32\mlang.dll 09:49:53.0514 2864 C:\Windows\System32\mlang.dll - ok 09:49:53.0514 2864 [ 101797BA603D227946B4B5109867EB19 ] C:\Windows\System32\SyncCenter.dll 09:49:53.0514 2864 C:\Windows\System32\SyncCenter.dll - ok 09:49:53.0530 2864 [ 8130391F82D52D36C0441F714136957F ] C:\Windows\System32\imapi2.dll 09:49:53.0530 2864 C:\Windows\System32\imapi2.dll - ok 09:49:53.0530 2864 [ 1F04E809409A9B5FFD510B5FD89A1155 ] C:\Windows\System32\d2d1.dll 09:49:53.0530 2864 C:\Windows\System32\d2d1.dll - ok 09:49:53.0545 2864 [ 7426279D625196393EABBEFE1C60A0C2 ] C:\Windows\System32\DWrite.dll 09:49:53.0545 2864 C:\Windows\System32\DWrite.dll - ok 09:49:53.0545 2864 [ F404E59DB6A0F122AB26BF4F3E2FD0FA ] C:\Windows\System32\dxgi.dll 09:49:53.0545 2864 C:\Windows\System32\dxgi.dll - ok 09:49:53.0545 2864 [ E1374D37477322D4956604711008C69D ] C:\Windows\System32\d3d10_1.dll 09:49:53.0545 2864 C:\Windows\System32\d3d10_1.dll - ok 09:49:53.0561 2864 [ 426BA4E737A7988FD1202AF2F2B2F4A6 ] C:\Windows\System32\d3d10_1core.dll 09:49:53.0561 2864 C:\Windows\System32\d3d10_1core.dll - ok 09:49:53.0561 2864 [ 64ABE1250EC1A1CFD1442E7C8800216E ] C:\Windows\System32\d3d10warp.dll 09:49:53.0561 2864 C:\Windows\System32\d3d10warp.dll - ok 09:49:53.0561 2864 [ 6A5C1A8AC0B572679361026D0E900420 ] C:\Windows\System32\hgcpl.dll 09:49:53.0561 2864 C:\Windows\System32\hgcpl.dll - ok 09:49:53.0577 2864 [ E6F0F82788E8BD0F7A616350EFA0761C ] C:\Windows\System32\actxprxy.dll 09:49:53.0577 2864 C:\Windows\System32\actxprxy.dll - ok 09:49:53.0577 2864 [ C746F3BF98E92FB137B5BD2B8B5925BD ] C:\Windows\System32\FXSST.dll 09:49:53.0577 2864 C:\Windows\System32\FXSST.dll - ok 09:49:53.0592 2864 [ 650CAEA856943E29F25A25D31E004B18 ] C:\Windows\System32\FXSAPI.dll 09:49:53.0592 2864 C:\Windows\System32\FXSAPI.dll - ok 09:49:53.0592 2864 [ C8E8B8239FCF17BEA10E751BE5854631 ] C:\Windows\System32\FXSRESM.dll 09:49:53.0592 2864 C:\Windows\System32\FXSRESM.dll - ok 09:49:53.0592 2864 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] C:\Windows\System32\FXSSVC.exe 09:49:53.0592 2864 C:\Windows\System32\FXSSVC.exe - ok 09:49:53.0608 2864 [ B3CE0951E3C1EA3C733573C472EE85F9 ] C:\Windows\System32\msimtf.dll 09:49:53.0608 2864 C:\Windows\System32\msimtf.dll - ok 09:49:53.0608 2864 [ BD66ECA9479C688412DDDA9F2CCD2C69 ] C:\Windows\System32\d3d10.dll 09:49:53.0608 2864 C:\Windows\System32\d3d10.dll - ok 09:49:53.0608 2864 [ B628DA8B548E6D11A35B86799714CB22 ] C:\Windows\System32\d3d10core.dll 09:49:53.0608 2864 C:\Windows\System32\d3d10core.dll - ok 09:49:53.0623 2864 [ 66E4246FEF8C364611F9782AA0809F42 ] C:\Program Files\Internet Explorer\ieproxy.dll 09:49:53.0623 2864 C:\Program Files\Internet Explorer\ieproxy.dll - ok 09:49:53.0623 2864 [ B837D1528CE2E3CB79F09496BC08DDC6 ] C:\Windows\System32\SensApi.dll 09:49:53.0623 2864 C:\Windows\System32\SensApi.dll - ok 09:49:53.0623 2864 [ C6DCD1D11ED6827F05C00773C3E7053C ] C:\Windows\System32\sfc.dll 09:49:53.0623 2864 C:\Windows\System32\sfc.dll - ok 09:49:53.0639 2864 [ 178A34E5554DCE485E1262DDF027960C ] C:\Users\Ariel Anderson\Desktop\tdsskiller.exe 09:49:53.0639 2864 C:\Users\Ariel Anderson\Desktop\tdsskiller.exe - ok 09:49:53.0639 2864 [ 895C9AB0A855547445C4181195230757 ] C:\Windows\System32\sfc_os.dll 09:49:53.0639 2864 C:\Windows\System32\sfc_os.dll - ok 09:49:53.0655 2864 [ CA9F7888B524D8100B977C81F44C3234 ] C:\Windows\SysWOW64\winhttp.dll 09:49:53.0655 2864 C:\Windows\SysWOW64\winhttp.dll - ok 09:49:53.0655 2864 [ FB19FC5951A88F3C523E35C2C98D23C0 ] C:\Windows\SysWOW64\webio.dll 09:49:53.0655 2864 C:\Windows\SysWOW64\webio.dll - ok 09:49:53.0670 2864 [ 17448AF0BBA9E7AB5EC955AF93F271BD ] C:\Windows\SysWOW64\wintrust.dll 09:49:53.0670 2864 C:\Windows\SysWOW64\wintrust.dll - ok 09:49:53.0670 2864 [ 7FF15A4F092CD4A96055BA69F903E3E9 ] C:\Windows\SysWOW64\ws2_32.dll 09:49:53.0670 2864 C:\Windows\SysWOW64\ws2_32.dll - ok 09:49:53.0670 2864 [ 6377051C63D5552A311935C67E9FDFDC ] C:\Windows\SysWOW64\nsi.dll 09:49:53.0670 2864 C:\Windows\SysWOW64\nsi.dll - ok 09:49:53.0686 2864 [ 7321F18D1F820612ED0E9F2D4B578A7E ] C:\Windows\SysWOW64\cryptsp.dll 09:49:53.0686 2864 C:\Windows\SysWOW64\cryptsp.dll - ok 09:49:53.0686 2864 [ 4E5FE39C1076D115EC8BFCFE14D75B80 ] C:\Windows\SysWOW64\credssp.dll 09:49:53.0686 2864 C:\Windows\SysWOW64\credssp.dll - ok 09:49:53.0686 2864 [ 8999B8631C7FD9F7F9EC3CAFD953BA24 ] C:\Windows\SysWOW64\mswsock.dll 09:49:53.0686 2864 C:\Windows\SysWOW64\mswsock.dll - ok 09:49:53.0686 2864 [ 73E8667A19FEEDD856DF2695E9E511D4 ] C:\Windows\SysWOW64\wship6.dll 09:49:53.0686 2864 C:\Windows\SysWOW64\wship6.dll - ok 09:49:53.0701 2864 [ EE5C8E27C37B79CB54A2FCEEED2DC262 ] C:\Windows\SysWOW64\WSHTCPIP.DLL 09:49:53.0701 2864 C:\Windows\SysWOW64\WSHTCPIP.DLL - ok 09:49:53.0701 2864 [ B40420876B9288E0A1C8CCA8A84E5DC9 ] C:\Windows\SysWOW64\dnsapi.dll 09:49:53.0701 2864 C:\Windows\SysWOW64\dnsapi.dll - ok 09:49:53.0717 2864 [ 40947436A70E0034E41123DF5A0A7702 ] C:\Program Files (x86)\Bonjour\mdnsNSP.dll 09:49:53.0717 2864 C:\Program Files (x86)\Bonjour\mdnsNSP.dll - ok 09:49:53.0717 2864 [ A90DC9ABD65DB1A8902F361103029952 ] C:\Windows\SysWOW64\IPHLPAPI.DLL 09:49:53.0717 2864 C:\Windows\SysWOW64\IPHLPAPI.DLL - ok 09:49:53.0717 2864 [ CFF35B879D1618D42C86644C717BA947 ] C:\Windows\SysWOW64\winnsi.dll 09:49:53.0717 2864 C:\Windows\SysWOW64\winnsi.dll - ok 09:49:53.0733 2864 [ ED6EE83D61EBC683C2CD8E899EA6FEBE ] C:\Windows\SysWOW64\rasadhlp.dll 09:49:53.0733 2864 C:\Windows\SysWOW64\rasadhlp.dll - ok 09:49:53.0733 2864 [ 03A03A453F1AAAE0C73AAAF895321C7A ] C:\Windows\SysWOW64\FWPUCLNT.DLL 09:49:53.0733 2864 C:\Windows\SysWOW64\FWPUCLNT.DLL - ok 09:49:53.0733 2864 [ F146E2BA475893DD77B2370DC1211FC6 ] C:\Windows\System32\drivers\74315700.sys 09:49:53.0733 2864 C:\Windows\System32\drivers\74315700.sys - ok 09:49:53.0748 2864 [ A6C29DB53ECA94FA8591C5388D604B82 ] C:\Windows\SysWOW64\msi.dll 09:49:53.0748 2864 C:\Windows\SysWOW64\msi.dll - ok 09:49:53.0748 2864 [ D15618A0FF8DBC2C5BF3726BACC75A0B ] C:\Windows\SysWOW64\userenv.dll 09:49:53.0748 2864 C:\Windows\SysWOW64\userenv.dll - ok 09:49:53.0764 2864 [ FF5688D309347F2720911D8796912834 ] C:\Windows\SysWOW64\clbcatq.dll 09:49:53.0764 2864 C:\Windows\SysWOW64\clbcatq.dll - ok 09:49:53.0764 2864 [ 102CF6879887BBE846A00C459E6D4ABC ] C:\Windows\SysWOW64\riched20.dll 09:49:53.0764 2864 C:\Windows\SysWOW64\riched20.dll - ok 09:49:53.0779 2864 [ E2A17BCC08D92F42E08AF6BA2F93ABA7 ] C:\Windows\SysWOW64\ExplorerFrame.dll 09:49:53.0779 2864 C:\Windows\SysWOW64\ExplorerFrame.dll - ok 09:49:53.0779 2864 [ 6E1F8165C365D35C8E3C045AF0CDD481 ] C:\Windows\SysWOW64\duser.dll 09:49:53.0779 2864 C:\Windows\SysWOW64\duser.dll - ok 09:49:53.0779 2864 [ EE06B85BC69F18826302348A2AD089E0 ] C:\Windows\SysWOW64\dui70.dll 09:49:53.0779 2864 C:\Windows\SysWOW64\dui70.dll - ok 09:49:53.0795 2864 [ 1EB82516F21F27EED1833B4F9FD9614E ] C:\Windows\System32\wmp.dll 09:49:53.0795 2864 C:\Windows\System32\wmp.dll - ok 09:49:53.0795 2864 [ E19AD0D49BFF5938B3E374873AC174DE ] C:\Windows\System32\wmploc.DLL 09:49:53.0795 2864 C:\Windows\System32\wmploc.DLL - ok 09:49:53.0795 2864 [ 0654E4C1F597FC07D6FC7443D4F94840 ] C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe 09:49:53.0795 2864 C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\chrome.exe - ok 09:49:53.0811 2864 [ 6A6B2EE4565A178035BE2A4FF6F2C968 ] C:\Windows\SysWOW64\wtsapi32.dll 09:49:53.0811 2864 C:\Windows\SysWOW64\wtsapi32.dll - ok 09:49:53.0811 2864 [ 6B97B815716415E0B5DD1A1D4C8B8521 ] C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\chrome.dll 09:49:53.0811 2864 C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\chrome.dll - ok 09:49:53.0826 2864 [ A543AC1F7138376D778D630A35FCBC4C ] C:\Windows\SysWOW64\psapi.dll 09:49:53.0826 2864 C:\Windows\SysWOW64\psapi.dll - ok 09:49:53.0826 2864 [ F93674263F6B07C77956E966953242D9 ] C:\Windows\SysWOW64\secur32.dll 09:49:53.0826 2864 C:\Windows\SysWOW64\secur32.dll - ok 09:49:53.0826 2864 [ 53223B673A3FA2F9A4D1C31C8D3F6CD8 ] C:\Windows\SysWOW64\dbghelp.dll 09:49:53.0826 2864 C:\Windows\SysWOW64\dbghelp.dll - ok 09:49:53.0842 2864 [ 56C546924ACCEF03EAF101FA2B0B4061 ] C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\icudt.dll 09:49:53.0842 2864 C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\icudt.dll - ok 09:49:53.0842 2864 [ 71C4F42DC8DB668E826DA79462EA741E ] C:\Windows\SysWOW64\KBDUS.DLL 09:49:53.0842 2864 C:\Windows\SysWOW64\KBDUS.DLL - ok 09:49:53.0857 2864 [ 0BA65122FFA7E37564EE86422DBF7AE8 ] C:\Windows\SysWOW64\nlaapi.dll 09:49:53.0857 2864 C:\Windows\SysWOW64\nlaapi.dll - ok 09:49:53.0857 2864 [ 9A85ABCE0FDD1AF8E79E731EB0B679F3 ] C:\Windows\SysWOW64\dhcpcsvc.dll 09:49:53.0857 2864 C:\Windows\SysWOW64\dhcpcsvc.dll - ok 09:49:53.0857 2864 [ 81F6C1AE23B1C493D9E996C3103915D7 ] C:\Windows\SysWOW64\dhcpcsvc6.dll 09:49:53.0857 2864 C:\Windows\SysWOW64\dhcpcsvc6.dll - ok 09:49:53.0873 2864 [ 243974EC02F7AE49E4179C54624143AB ] C:\Windows\SysWOW64\MMDevAPI.dll 09:49:53.0873 2864 C:\Windows\SysWOW64\MMDevAPI.dll - ok 09:49:53.0873 2864 [ 12C45E3CB6D65F73209549E2D02ECA7A ] C:\Windows\SysWOW64\propsys.dll 09:49:53.0873 2864 C:\Windows\SysWOW64\propsys.dll - ok 09:49:53.0873 2864 [ 1097F3035BAF46CED8B332B3564C5108 ] C:\Windows\SysWOW64\gpapi.dll 09:49:53.0873 2864 C:\Windows\SysWOW64\gpapi.dll - ok 09:49:53.0889 2864 [ ED8EC63F7522DF4852147C84EC62C36A ] C:\Windows\SysWOW64\rsaenh.dll 09:49:53.0889 2864 C:\Windows\SysWOW64\rsaenh.dll - ok 09:49:53.0889 2864 [ 5997D769CDB108390DCFAEBF442BF816 ] C:\Windows\SysWOW64\RpcRtRemote.dll 09:49:53.0889 2864 C:\Windows\SysWOW64\RpcRtRemote.dll - ok 09:49:53.0904 2864 [ 7F8678C59F188528D60104E697C2361E ] C:\Windows\SysWOW64\mscms.dll 09:49:53.0904 2864 C:\Windows\SysWOW64\mscms.dll - ok 09:49:53.0904 2864 [ 43C9CF6825CEA58F1815B7C3DBBB385C ] C:\Windows\SysWOW64\Wpc.dll 09:49:53.0904 2864 C:\Windows\SysWOW64\Wpc.dll - ok 09:49:53.0920 2864 [ 82C089EA2A3EEFADF3588EA71E8BDADA ] C:\Windows\SysWOW64\wevtapi.dll 09:49:53.0920 2864 C:\Windows\SysWOW64\wevtapi.dll - ok 09:49:53.0920 2864 [ 68ECCA523ED760AAFC03C5D587569859 ] C:\Windows\SysWOW64\samcli.dll 09:49:53.0920 2864 C:\Windows\SysWOW64\samcli.dll - ok 09:49:53.0920 2864 [ C30A3E5DEEEBA22E782AC54C5AF5F352 ] C:\Windows\SysWOW64\samlib.dll 09:49:53.0920 2864 C:\Windows\SysWOW64\samlib.dll - ok 09:49:53.0935 2864 [ 20B3934DB73EABA2B49B7177873CB81F ] C:\Windows\SysWOW64\netutils.dll 09:49:53.0935 2864 C:\Windows\SysWOW64\netutils.dll - ok 09:49:53.0935 2864 [ 3A16EA01FCFAAB40882DB5BFEE632322 ] C:\Windows\SysWOW64\msftedit.dll 09:49:53.0935 2864 C:\Windows\SysWOW64\msftedit.dll - ok 09:49:53.0935 2864 [ 94097D7604CCC99982D13D945D875F94 ] C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\pdf.dll 09:49:53.0935 2864 C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\pdf.dll - ok 09:49:53.0951 2864 [ 1C9B45E87528B8BB8CFA884EA0099A85 ] C:\Windows\SysWOW64\D3DCompiler_43.dll 09:49:53.0951 2864 C:\Windows\SysWOW64\D3DCompiler_43.dll - ok 09:49:53.0951 2864 [ 10921A9733A6DEE90F98B059E278FBFE ] C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\ppgooglenaclpluginchrome.dll 09:49:53.0951 2864 C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\ppgooglenaclpluginchrome.dll - ok 09:49:53.0951 2864 [ A5B66F56D5994FCA083DE44DFDA3C038 ] C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll 09:49:53.0951 2864 C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll - ok 09:49:53.0967 2864 [ 86E39E9161C3D930D93822F1563C280D ] C:\Windows\SysWOW64\D3DX9_43.dll 09:49:53.0967 2864 C:\Windows\SysWOW64\D3DX9_43.dll - ok 09:49:53.0967 2864 [ BF6D6ED5FADCEEE885BD0144ECF1BA27 ] C:\Windows\SysWOW64\ncrypt.dll 09:49:53.0967 2864 C:\Windows\SysWOW64\ncrypt.dll - ok 09:49:53.0982 2864 [ CE71B9119A258EDD0A05B37D7B0F92E3 ] C:\Windows\SysWOW64\bcrypt.dll 09:49:53.0982 2864 C:\Windows\SysWOW64\bcrypt.dll - ok 09:49:53.0982 2864 [ E8449FE262D7406BCB2AC2A45C53EC5F ] C:\Windows\SysWOW64\bcryptprimitives.dll 09:49:53.0982 2864 C:\Windows\SysWOW64\bcryptprimitives.dll - ok 09:49:53.0982 2864 [ CA79539D3D4C0BA66F0F051A5EE5E923 ] C:\Windows\SysWOW64\cryptnet.dll 09:49:53.0982 2864 C:\Windows\SysWOW64\cryptnet.dll - ok 09:49:53.0998 2864 [ 7EBB572149DE6FF2AE529DE1D4044884 ] C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\libglesv2.dll 09:49:53.0998 2864 C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\libglesv2.dll - ok 09:49:53.0998 2864 [ 6EF5F3F18413C367195F06E503AB86A6 ] C:\Windows\SysWOW64\d3d9.dll 09:49:53.0998 2864 C:\Windows\SysWOW64\d3d9.dll - ok 09:49:53.0998 2864 [ 77B1471A490B53B24EFE136F09F76550 ] C:\Windows\SysWOW64\d3d8thk.dll 09:49:53.0998 2864 C:\Windows\SysWOW64\d3d8thk.dll - ok 09:49:54.0013 2864 [ B12F5EED5B2C59DF9FC1466F458F939C ] C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\libegl.dll 09:49:54.0013 2864 C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\Application\24.0.1312.57\libegl.dll - ok 09:49:54.0013 2864 [ 1F27643C4C626457FCE8F047AE1CD7E1 ] C:\Windows\SysWOW64\dxva2.dll 09:49:54.0013 2864 C:\Windows\SysWOW64\dxva2.dll - ok 09:49:54.0029 2864 [ FDBA1DEC4F9BE4274A00B9B850C63484 ] C:\Windows\SysWOW64\mf.dll 09:49:54.0029 2864 C:\Windows\SysWOW64\mf.dll - ok 09:49:54.0029 2864 [ D2958325C1AE1AE37A83334C6229E3BC ] C:\Windows\SysWOW64\actxprxy.dll 09:49:54.0029 2864 C:\Windows\SysWOW64\actxprxy.dll - ok 09:49:54.0029 2864 [ F10E5311E5093FA3C00FF88C54C32FCA ] C:\Windows\SysWOW64\atl.dll 09:49:54.0029 2864 C:\Windows\SysWOW64\atl.dll - ok 09:49:54.0045 2864 [ 40B82688907A7DBA4DB3B5ADDE3EAB3B ] C:\Windows\SysWOW64\mfplat.dll 09:49:54.0045 2864 C:\Windows\SysWOW64\mfplat.dll - ok 09:49:54.0045 2864 [ 139D3AB6AA920C34C50CBFFB9EB7D222 ] C:\Windows\SysWOW64\avrt.dll 09:49:54.0045 2864 C:\Windows\SysWOW64\avrt.dll - ok 09:49:54.0060 2864 [ 9C67F6BBDA3881CFD02095160CF91576 ] C:\Windows\SysWOW64\ksuser.dll 09:49:54.0060 2864 C:\Windows\SysWOW64\ksuser.dll - ok 09:49:54.0060 2864 [ 3DE43BFDAF3F8979699650202AA18B12 ] C:\Windows\SysWOW64\msmpeg2vdec.dll 09:49:54.0060 2864 C:\Windows\SysWOW64\msmpeg2vdec.dll - ok 09:49:54.0060 2864 [ 53AF1750FD45DDD705C9B68C7DC58827 ] C:\Windows\SysWOW64\evr.dll 09:49:54.0060 2864 C:\Windows\SysWOW64\evr.dll - ok 09:49:54.0076 2864 [ 08DFDBD2FD4EA951DC46B1C7661ED35A ] C:\Windows\SysWOW64\powrprof.dll 09:49:54.0076 2864 C:\Windows\SysWOW64\powrprof.dll - ok 09:49:54.0076 2864 [ 8B74CEC6980D4816B0037AE9A27E538F ] C:\Windows\SysWOW64\slc.dll 09:49:54.0076 2864 C:\Windows\SysWOW64\slc.dll - ok 09:49:54.0091 2864 [ CE292C4C10B8DB6070F262EA2733F0DC ] C:\Windows\SysWOW64\sqmapi.dll 09:49:54.0091 2864 C:\Windows\SysWOW64\sqmapi.dll - ok 09:49:54.0091 2864 [ 418E881201583A3039D81F43E39E6C78 ] C:\Windows\SysWOW64\winsta.dll 09:49:54.0091 2864 C:\Windows\SysWOW64\winsta.dll - ok 09:49:54.0091 2864 [ 863F793D15B4026B1A5FDECA873D4D84 ] C:\Windows\SysWOW64\apphelp.dll 09:49:54.0091 2864 C:\Windows\SysWOW64\apphelp.dll - ok 09:49:54.0107 2864 [ BE247AE996A9FDE007A27B51413A6C79 ] C:\Windows\SysWOW64\shdocvw.dll 09:49:54.0107 2864 C:\Windows\SysWOW64\shdocvw.dll - ok 09:49:54.0107 2864 [ 5987EA8A82C53359BCD2C29D6588583E ] C:\Windows\SysWOW64\linkinfo.dll 09:49:54.0107 2864 C:\Windows\SysWOW64\linkinfo.dll - ok 09:49:54.0107 2864 [ 03F3B770DFBED6131653CEDA8CA780F0 ] C:\Windows\SysWOW64\ntshrui.dll 09:49:54.0107 2864 C:\Windows\SysWOW64\ntshrui.dll - ok 09:49:54.0123 2864 [ 5CCDCD40E732D54E0F7451AC66AC1C87 ] C:\Windows\SysWOW64\srvcli.dll 09:49:54.0123 2864 C:\Windows\SysWOW64\srvcli.dll - ok 09:49:54.0123 2864 [ 465BEA35F7ED4A4A57686DEA7EA10F47 ] C:\Windows\SysWOW64\cscapi.dll 09:49:54.0123 2864 C:\Windows\SysWOW64\cscapi.dll - ok 09:49:54.0123 2864 [ 522B0466ED967A0762E9AF5B37D8F40A ] C:\Windows\System32\esent.dll 09:49:54.0123 2864 C:\Windows\System32\esent.dll - ok 09:49:54.0138 2864 [ 220159496484D34009DE71CA1A68E0D4 ] C:\Windows\System32\wbem\NCProv.dll 09:49:54.0138 2864 C:\Windows\System32\wbem\NCProv.dll - ok 09:49:54.0138 2864 [ B2DB6ABA2E292235749B80A9C3DFA867 ] C:\Windows\SysWOW64\imagehlp.dll 09:49:54.0138 2864 C:\Windows\SysWOW64\imagehlp.dll - ok 09:49:54.0154 2864 [ 6F8E3B7B70E1BBA871212940C1FBDF60 ] C:\Windows\SysWOW64\SensApi.dll 09:49:54.0154 2864 C:\Windows\SysWOW64\SensApi.dll - ok 09:49:54.0154 2864 [ 81252AA3B13743020BCF2089A5A0D911 ] C:\Windows\System32\wscinterop.dll 09:49:54.0154 2864 C:\Windows\System32\wscinterop.dll - ok 09:49:54.0169 2864 [ DF50DAE4C547285E4997A0C61063B632 ] C:\Windows\System32\wscui.cpl 09:49:54.0169 2864 C:\Windows\System32\wscui.cpl - ok 09:49:54.0169 2864 [ F9959237F106F2B2609E61A290C0652E ] C:\Windows\System32\werconcpl.dll 09:49:54.0169 2864 C:\Windows\System32\werconcpl.dll - ok 09:49:54.0169 2864 [ 1484B9EBF567346582DE571B0E164AE0 ] C:\Windows\System32\framedynos.dll 09:49:54.0169 2864 C:\Windows\System32\framedynos.dll - ok 09:49:54.0185 2864 [ 7E591867422DC788B9E5BD337A669A08 ] C:\Windows\System32\wercplsupport.dll 09:49:54.0185 2864 C:\Windows\System32\wercplsupport.dll - ok 09:49:54.0185 2864 [ 809AE7D4ACE06BBCF621E5C504BF6FC8 ] C:\Windows\System32\hcproviders.dll 09:49:54.0185 2864 C:\Windows\System32\hcproviders.dll - ok 09:49:54.0185 2864 [ 005247E3057BC5D5C3F8C6F886FFC10C ] C:\Windows\System32\wbem\WMIADAP.exe 09:49:54.0185 2864 C:\Windows\System32\wbem\WMIADAP.exe - ok 09:49:54.0201 2864 [ 9FE3ED67345F0FF829A4A53B90E09672 ] C:\Windows\System32\loadperf.dll 09:49:54.0201 2864 C:\Windows\System32\loadperf.dll - ok 09:49:54.0201 2864 [ F146E2BA475893DD77B2370DC1211FC6 ] C:\Windows\System32\drivers\75196326.sys 09:49:54.0201 2864 C:\Windows\System32\drivers\75196326.sys - ok 09:49:54.0216 2864 [ 458F4590F80563EB2A0A72709BFC2BD9 ] C:\Windows\System32\mspaint.exe 09:49:54.0216 2864 C:\Windows\System32\mspaint.exe - ok 09:49:54.0216 2864 [ FD3F34830C39F4B554106ADA19924F4E ] C:\Windows\System32\control.exe 09:49:54.0216 2864 C:\Windows\System32\control.exe - ok 09:49:54.0216 2864 [ 314C76642049DD4E9B964BC333A620B1 ] C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe 09:49:54.0216 2864 C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\AppleSoftwareUpdateIco.exe - ok 09:49:54.0232 2864 [ E3BF29CED96790CDAAFA981FFDDF53A3 ] C:\Program Files\Windows Sidebar\sidebar.exe 09:49:54.0232 2864 C:\Program Files\Windows Sidebar\sidebar.exe - ok 09:49:54.0232 2864 [ 0100BCF23941C83462E4A70F94C3392E ] C:\Program Files\Internet Explorer\iexplore.exe 09:49:54.0232 2864 C:\Program Files\Internet Explorer\iexplore.exe - ok 09:49:54.0232 2864 [ 0DC6669BC2B552C0ECC905B6B761F508 ] C:\Program Files\Microsoft Security Client\msseces.exe 09:49:54.0232 2864 C:\Program Files\Microsoft Security Client\msseces.exe - ok 09:49:54.0247 2864 [ A943D670747778C7597987A4B5B9A679 ] C:\Windows\System32\WFS.exe 09:49:54.0247 2864 C:\Windows\System32\WFS.exe - ok 09:49:54.0247 2864 [ E83D2495D5867E224FBF42EF40D8856C ] C:\Program Files\DVD Maker\DVDMaker.exe 09:49:54.0247 2864 C:\Program Files\DVD Maker\DVDMaker.exe - ok 09:49:54.0247 2864 [ FDA49D1D0C201F6C76BD2593F562BF80 ] C:\Windows\System32\WindowsAnytimeUpgradeui.exe 09:49:54.0247 2864 C:\Windows\System32\WindowsAnytimeUpgradeui.exe - ok 09:49:54.0263 2864 [ 21B62252D283FBF75A5F67849EBD9B2E ] C:\Windows\System32\WFSR.dll 09:49:54.0263 2864 C:\Windows\System32\WFSR.dll - ok 09:49:54.0263 2864 [ BD4C1D83353BFB80F6BA019F6D0BA95B ] C:\Windows\ehome\ehshell.exe 09:49:54.0263 2864 C:\Windows\ehome\ehshell.exe - ok 09:49:54.0279 2864 [ FF0729002E081668620A681182D63FE6 ] C:\Windows\System32\wuapp.exe 09:49:54.0279 2864 C:\Windows\System32\wuapp.exe - ok 09:49:54.0294 2864 [ 50EBD31C3527366FAFA468BD609F7352 ] C:\Windows\System32\wucltux.dll 09:49:54.0294 2864 C:\Windows\System32\wucltux.dll - ok 09:49:54.0294 2864 [ 492CB6A624D5DAD73EE0294B5DB37DD6 ] C:\Windows\System32\xpsrchvw.exe 09:49:54.0294 2864 C:\Windows\System32\xpsrchvw.exe - ok 09:49:54.0294 2864 [ B0F69B9DE0AEBFD7E4CEADE6758DF627 ] C:\Windows\System32\SearchFolder.dll 09:49:54.0294 2864 C:\Windows\System32\SearchFolder.dll - ok 09:49:54.0310 2864 [ 4E81439902079C348B61D7FF027FE147 ] C:\Windows\System32\StructuredQuery.dll 09:49:54.0310 2864 C:\Windows\System32\StructuredQuery.dll - ok 09:49:54.0310 2864 [ B5055B51BAA0FD0A736A88653DA3C1C0 ] C:\Windows\System32\fundisc.dll 09:49:54.0310 2864 C:\Windows\System32\fundisc.dll - ok 09:49:54.0310 2864 [ 2A436796758BF2555A26C770FE8A6FEE ] C:\Windows\System32\fdProxy.dll 09:49:54.0310 2864 C:\Windows\System32\fdProxy.dll - ok 09:49:54.0325 2864 [ 5F639198C4137075DA50E61C23963C11 ] C:\Windows\System32\drprov.dll 09:49:54.0325 2864 C:\Windows\System32\drprov.dll - ok 09:49:54.0325 2864 [ BC566D17914B07ABAAB3A5A385CC3300 ] C:\Windows\System32\ntlanman.dll 09:49:54.0325 2864 C:\Windows\System32\ntlanman.dll - ok 09:49:54.0341 2864 [ B3A33600DCDFB84D7FBE09ADEB1C9B8A ] C:\Windows\System32\davclnt.dll 09:49:54.0341 2864 C:\Windows\System32\davclnt.dll - ok 09:49:54.0341 2864 [ 45B24A357C801CE62052FE0CDC8BD4D2 ] C:\Windows\System32\davhlpr.dll 09:49:54.0341 2864 C:\Windows\System32\davhlpr.dll - ok 09:49:54.0341 2864 [ 4715F8F8CDBFFF2728BA38B789A1D7C7 ] C:\Windows\System32\wpdshext.dll 09:49:54.0341 2864 C:\Windows\System32\wpdshext.dll - ok 09:49:54.0357 2864 [ 03AB2A2E426C2AD400AC8315226347F8 ] C:\Windows\System32\EhStorAPI.dll 09:49:54.0357 2864 C:\Windows\System32\EhStorAPI.dll - ok 09:49:54.0357 2864 [ F146E2BA475893DD77B2370DC1211FC6 ] C:\Windows\System32\drivers\02303418.sys 09:49:54.0357 2864 C:\Windows\System32\drivers\02303418.sys - ok 09:49:54.0357 2864 ============================================================ 09:49:54.0357 2864 Scan finished 09:49:54.0357 2864 ============================================================ 09:49:54.0372 2856 Detected object count: 2 09:49:54.0372 2856 Actual detected object count: 2 09:50:06.0634 2856 PassThru Service ( UnsignedFile.Multi.Generic ) - skipped by user 09:50:06.0649 2856 PassThru Service ( UnsignedFile.Multi.Generic ) - User select action: Skip 09:50:06.0649 2856 SwitchBoard ( UnsignedFile.Multi.Generic ) - skipped by user 09:50:06.0649 2856 SwitchBoard ( UnsignedFile.Multi.Generic ) - User select action: Skip

V. Rowan

Post #6February 17, 2013, 3:50 PM UTC last edited February 17, 2013, 3:52 PM UTC

Sorry— double post D:

MrCharlie

Post #7February 17, 2013, 4:04 PM UTC

That scan was clean….next:

Please download and run ComboFix.

The most important things to remember when running it is to disable all your malware programs and run Combofix from your desktop.

Please visit this webpage for download links, and instructions for running ComboFix

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Information on disabling your malware programs can be found Here.

Make sure you run ComboFix from your desktop.

Give it at least 30-45 minutes to finish if needed.

Please include the C:\ComboFix.txt in your next reply for further review.

———->NOTE<———-

If you get the message Illegal operation attempted on registry key that has been marked for deletion after you run ComboFix….please reboot the computer, this should resolve the problem. You may have to do this several times if needed.

MrC

V. Rowan

Post #8February 17, 2013, 4:27 PM UTC

Okay, I'm going to run the scan now. Please note, Combofix has repeatedly warned me that Microsoft Security Essentials is still running. This after I disabled real-time protection (and double-checked w/ the instructions above), restarted the computer, and then went into the Task Manager to confirm that the MSE process was not active. I'm not sure why I'm getting this warning. I'll be browsing this topic on my phone in case you ping me with further instructions on this. Thanks!

MrCharlie

Post #9February 17, 2013, 4:36 PM UTC

As long as it's disabled you can run ComboFix. MrC

V. Rowan

Post #10February 17, 2013, 4:42 PM UTC

Cool… here are Combofix results: ComboFix 13-02-15.01 - Ariel Anderson 02/17/2013 10:30:16.1.2 - x64 NETWORK Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4056.3297 [GMT -6:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C} SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21} SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\wininit.ini . . ((((((((((((((((((((((((( Files Created from 2013-01-17 to 2013-02-17 ))))))))))))))))))))))))))))))) . . 2013-02-17 16:36 . 2013-02-17 16:36 ——– d—–w- c:\users\Default\AppData\Local\temp 2013-02-14 23:32 . 2013-01-08 05:32 9161176 ——w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BECC845A-C707-4257-A474-DD03206F3235}\mpengine.dll 2013-02-14 16:32 . 2013-02-14 16:32 ——– d—–w- c:\users\Ariel Anderson\AppData\Local\ElevatedDiagnostics 2013-02-14 15:31 . 2013-02-14 15:31 62976 —-a-w- c:\windows\SysWow64\PxSecure.dll 2013-02-14 15:31 . 2013-02-14 15:31 65736 —-a-w- c:\windows\system32\drivers\pxrts.sys 2013-02-14 15:31 . 2013-02-14 15:31 36384 —-a-w- c:\windows\system32\drivers\pxscan.sys 2013-02-14 15:31 . 2013-02-14 15:31 24024 —-a-w- c:\windows\system32\drivers\pxkbf.sys 2013-02-14 15:31 . 2013-02-14 15:31 ——– d—–w- c:\program files\Prevx 2013-02-14 15:30 . 2013-02-14 15:31 ——– d—–w- c:\programdata\PrevxCSI 2013-02-14 15:25 . 2013-02-14 15:25 ——– d—–w- c:\users\Ariel Anderson\AppData\Roaming\Malwarebytes 2013-02-14 15:25 . 2013-02-14 15:25 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware 2013-02-14 15:25 . 2013-02-14 15:25 ——– d—–w- c:\programdata\Malwarebytes 2013-02-14 15:25 . 2012-12-14 22:49 24176 —-a-w- c:\windows\system32\drivers\mbam.sys 2013-02-14 15:25 . 2013-02-14 15:25 ——– d—–w- c:\users\Ariel Anderson\AppData\Local\Programs 2013-02-14 00:34 . 2012-11-28 15:32 972264 ——w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{7CBFC1D3-E84D-4A49-8C0E-E8EE2A496D87}\gapaengine.dll 2013-02-12 23:53 . 2013-01-09 01:10 996352 —-a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll 2013-02-12 23:53 . 2013-01-08 22:01 768000 —-a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll 2013-02-12 23:50 . 2013-01-04 03:26 3153408 —-a-w- c:\windows\system32\win32k.sys 2013-02-12 23:50 . 2013-01-03 06:00 1913192 —-a-w- c:\windows\system32\drivers\tcpip.sys 2013-02-12 23:50 . 2013-01-03 06:00 288088 —-a-w- c:\windows\system32\drivers\FWPKCLNT.SYS 2013-02-12 23:50 . 2013-01-04 05:46 215040 —-a-w- c:\windows\system32\winsrv.dll 2013-02-12 23:50 . 2013-01-04 02:47 25600 —-a-w- c:\windows\SysWow64\setup16.exe 2013-02-12 23:50 . 2013-01-04 02:47 14336 —-a-w- c:\windows\SysWow64\ntvdm64.dll 2013-02-12 23:49 . 2013-01-04 04:51 5120 —-a-w- c:\windows\SysWow64\wow32.dll 2013-02-12 23:49 . 2013-01-04 02:47 7680 —-a-w- c:\windows\SysWow64\instnm.exe 2013-02-12 23:49 . 2013-01-04 02:47 2048 —-a-w- c:\windows\SysWow64\user.exe 2013-02-12 15:12 . 2013-01-08 05:32 9161176 ——w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2013-01-22 22:44 . 2013-01-22 22:44 ——– d—–w- c:\program files (x86)\Common Files\Skype 2013-01-22 22:44 . 2013-01-22 22:44 ——– d—–r- c:\program files (x86)\Skype . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-02-12 23:56 . 2012-05-17 21:41 70004024 —-a-w- c:\windows\system32\MRT.exe 2013-02-08 03:07 . 2012-11-07 21:15 74096 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-02-08 03:07 . 2012-11-07 21:15 697712 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-01-17 07:28 . 2011-09-29 22:28 273840 ——w- c:\windows\system32\MpSigStub.exe 2013-01-04 04:43 . 2013-02-12 23:50 44032 —-a-w- c:\windows\apppatch\acwow64.dll 2012-12-16 17:11 . 2012-12-25 09:01 46080 —-a-w- c:\windows\system32\atmlib.dll 2012-12-16 14:45 . 2012-12-25 09:01 367616 —-a-w- c:\windows\system32\atmfd.dll 2012-12-16 14:13 . 2012-12-25 09:01 295424 —-a-w- c:\windows\SysWow64\atmfd.dll 2012-12-16 14:13 . 2012-12-25 09:01 34304 —-a-w- c:\windows\SysWow64\atmlib.dll 2012-12-07 13:20 . 2013-01-09 18:55 441856 —-a-w- c:\windows\system32\Wpc.dll 2012-12-07 13:15 . 2013-01-09 18:55 2746368 —-a-w- c:\windows\system32\gameux.dll 2012-12-07 12:26 . 2013-01-09 18:55 308736 —-a-w- c:\windows\SysWow64\Wpc.dll 2012-12-07 12:20 . 2013-01-09 18:55 2576384 —-a-w- c:\windows\SysWow64\gameux.dll 2012-12-07 11:20 . 2013-01-09 18:55 30720 —-a-w- c:\windows\system32\usk.rs 2012-12-07 11:20 . 2013-01-09 18:55 43520 —-a-w- c:\windows\system32\csrr.rs 2012-12-07 11:20 . 2013-01-09 18:55 23552 —-a-w- c:\windows\system32\oflc.rs 2012-12-07 11:20 . 2013-01-09 18:55 45568 —-a-w- c:\windows\system32\oflc-nz.rs 2012-12-07 11:20 . 2013-01-09 18:55 44544 —-a-w- c:\windows\system32\pegibbfc.rs 2012-12-07 11:20 . 2013-01-09 18:55 20480 —-a-w- c:\windows\system32\pegi-fi.rs 2012-12-07 11:20 . 2013-01-09 18:55 20480 —-a-w- c:\windows\system32\pegi-pt.rs 2012-12-07 11:19 . 2013-01-09 18:55 20480 —-a-w- c:\windows\system32\pegi.rs 2012-12-07 11:19 . 2013-01-09 18:55 46592 —-a-w- c:\windows\system32\fpb.rs 2012-12-07 11:19 . 2013-01-09 18:55 40960 —-a-w- c:\windows\system32\cob-au.rs 2012-12-07 11:19 . 2013-01-09 18:55 15360 —-a-w- c:\windows\system32\djctq.rs 2012-12-07 11:19 . 2013-01-09 18:55 21504 —-a-w- c:\windows\system32\grb.rs 2012-12-07 11:19 . 2013-01-09 18:55 55296 —-a-w- c:\windows\system32\cero.rs 2012-12-07 11:19 . 2013-01-09 18:55 51712 —-a-w- c:\windows\system32\esrb.rs 2012-12-07 10:46 . 2013-01-09 18:55 43520 —-a-w- c:\windows\SysWow64\csrr.rs 2012-12-07 10:46 . 2013-01-09 18:55 30720 —-a-w- c:\windows\SysWow64\usk.rs 2012-12-07 10:46 . 2013-01-09 18:55 45568 —-a-w- c:\windows\SysWow64\oflc-nz.rs 2012-12-07 10:46 . 2013-01-09 18:55 44544 —-a-w- c:\windows\SysWow64\pegibbfc.rs 2012-12-07 10:46 . 2013-01-09 18:55 20480 —-a-w- c:\windows\SysWow64\pegi-pt.rs 2012-12-07 10:46 . 2013-01-09 18:55 23552 —-a-w- c:\windows\SysWow64\oflc.rs 2012-12-07 10:46 . 2013-01-09 18:55 20480 —-a-w- c:\windows\SysWow64\pegi-fi.rs 2012-12-07 10:46 . 2013-01-09 18:55 46592 —-a-w- c:\windows\SysWow64\fpb.rs 2012-12-07 10:46 . 2013-01-09 18:55 20480 —-a-w- c:\windows\SysWow64\pegi.rs 2012-12-07 10:46 . 2013-01-09 18:55 21504 —-a-w- c:\windows\SysWow64\grb.rs 2012-12-07 10:46 . 2013-01-09 18:55 40960 —-a-w- c:\windows\SysWow64\cob-au.rs 2012-12-07 10:46 . 2013-01-09 18:55 15360 —-a-w- c:\windows\SysWow64\djctq.rs 2012-12-07 10:46 . 2013-01-09 18:55 51712 —-a-w- c:\windows\SysWow64\esrb.rs 2012-12-07 10:46 . 2013-01-09 18:55 55296 —-a-w- c:\windows\SysWow64\cero.rs 2012-11-30 05:45 . 2013-01-09 18:53 362496 —-a-w- c:\windows\system32\wow64win.dll 2012-11-30 05:45 . 2013-01-09 18:53 243200 —-a-w- c:\windows\system32\wow64.dll 2012-11-30 05:45 . 2013-01-09 18:53 13312 —-a-w- c:\windows\system32\wow64cpu.dll 2012-11-30 05:43 . 2013-01-09 18:53 16384 —-a-w- c:\windows\system32\ntvdm64.dll 2012-11-30 05:41 . 2013-01-09 18:53 424448 —-a-w- c:\windows\system32\KernelBase.dll 2012-11-30 05:41 . 2013-01-09 18:53 1161216 —-a-w- c:\windows\system32\kernel32.dll 2012-11-30 05:38 . 2013-01-09 18:53 3072 —ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 6144 —ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3072 —ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3072 —ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 4608 —ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 4096 —ha-w- c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 4096 —ha-w- c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 4608 —ha-w- c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3584 —ha-w- c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3072 —ha-w- c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3584 —ha-w- c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3584 —ha-w- c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3584 —ha-w- c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 5120 —ha-w- c:\windows\system32\api-ms-win-core-file-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3072 —ha-w- c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 4096 —ha-w- c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3584 —ha-w- c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3584 —ha-w- c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3584 —ha-w- c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3072 —ha-w- c:\windows\system32\api-ms-win-core-io-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3072 —ha-w- c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3072 —ha-w- c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3072 —ha-w- c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3072 —ha-w- c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3072 —ha-w- c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3072 —ha-w- c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 4096 —ha-w- c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 18:53 3072 —ha-w- c:\windows\system32\api-ms-win-core-console-l1-1-0.dll 2012-11-30 04:53 . 2013-01-09 18:53 274944 —-a-w- c:\windows\SysWow64\KernelBase.dll 2012-11-30 04:45 . 2013-01-09 18:53 4096 —ha-w- c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 4096 —ha-w- c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 4608 —ha-w- c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3584 —ha-w- c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3072 —ha-w- c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3072 —ha-w- c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 4096 —ha-w- c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3584 —ha-w- c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3584 —ha-w- c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 4096 —ha-w- c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3584 —ha-w- c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3584 —ha-w- c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3584 —ha-w- c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3072 —ha-w- c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3072 —ha-w- c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 4096 —ha-w- c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 5120 —ha-w- c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3072 —ha-w- c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3072 —ha-w- c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3072 —ha-w- c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3072 —ha-w- c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3072 —ha-w- c:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3072 —ha-w- c:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 18:53 3072 —ha-w- c:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{E74F179F-F6CC-4BE0-9638-DEA49583953F}] 2011-05-26 01:01 38672 —-a-w- c:\program files (x86)\NJStar Communicator\NJStarBHO32.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2012-11-13 23:32 129272 —-a-w- c:\users\Ariel Anderson\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2012-11-13 23:32 129272 —-a-w- c:\users\Ariel Anderson\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2012-11-13 23:32 129272 —-a-w- c:\users\Ariel Anderson\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2013-02-12 5629312] "DAEMON Tools Pro Agent"="c:\program files (x86)\DAEMON Tools Pro\DTAgent.exe" [2011-08-17 4527424] "Adobe Acrobat Synchronizer"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\AdobeCollabSync.exe" [2012-07-27 1261512] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352] "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040] "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096] "AdobeCS5.5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" [2011-01-12 1523360] "Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2012-07-27 36800] "Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2012-07-27 823224] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-28 59280] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-09-10 421776] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-09-17 254896] "HTC Sync Loader"="c:\program files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2012-09-25 655360] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] "C9B92D05-335B-436D-BDBF-4B00E1CE4C52"="start" [X] "01EDBC85-DD8E-45AF-B61D-40FA53BBE82B"="start" [X] . c:\users\Ariel Anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\Ariel Anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe [2013-1-20 28539272] EvernoteClipper.lnk - c:\program files (x86)\Evernote\Evernote\EvernoteClipper.exe [2013-1-29 1078624] PdaNet Desktop.lnk - c:\program files (x86)\PdaNet for Android\PdaNetPC.exe [2012-10-16 447952] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" . R1 aswSnx;aswSnx; [x] R1 aswSP;aswSP; [x] R1 pxrts;pxrts;c:\windows\system32\drivers\pxrts.sys [2013-02-14 65736] R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928] R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368] R2 aswFsBlk;aswFsBlk; [x] R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-11-28 66904] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 CSIScanner;CSIScanner;c:\program files\Prevx\prevx.exe [2013-02-14 6746280] R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-12-14 398184] R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344] R2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-31 128456] R2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-04-13 88576] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944] R3 05154916;05154916;c:\windows\system32\drivers\07967462.sys [x] R3 Andbus;LGE Android Platform Composite USB Device;c:\windows\system32\DRIVERS\lgandbus64.sys [2010-08-06 19456] R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-11-02 33736] R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-25 36928] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-14 24176] R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2012-09-13 368896] R3 pneteth;PdaNet Broadband;c:\windows\system32\DRIVERS\pneteth.sys [2011-11-25 15360] R3 pnetmdm;PdaNet Modem;c:\windows\system32\DRIVERS\pnetmdm64.sys [2007-03-07 17920] R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-07-09 52736] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-10-02 1255736] R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys [2008-05-06 14464] S0 pxscan;pxscan;c:\windows\System32\drivers\pxscan.sys [2013-02-14 36384] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-01-30 271424] S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [2012-09-27 140672] S3 pxkbf;pxkbf;c:\windows\system32\drivers\pxkbf.sys [2013-02-14 24024] S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2009-06-10 389120] . . — Other Services/Drivers In Memory — . *NewlyCreated* - WS2IFSL . Contents of the 'Scheduled Tasks' folder . 2013-02-14 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-07 03:07] . 2013-02-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1795083608-3936439143-1215187567-1000Core.job - c:\users\Ariel Anderson\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-29 22:40] . 2013-02-14 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1795083608-3936439143-1215187567-1000UA.job - c:\users\Ariel Anderson\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-29 22:40] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E74F179F-F6CC-4BE0-9638-DEA49583953F}] 2011-05-26 01:01 42768 —-a-w- c:\program files (x86)\NJStar Communicator\X64\NJStarBHO64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2011-11-28 18:01 134384 —-a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2012-11-13 23:32 162552 —-a-w- c:\users\Ariel Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2012-11-13 23:32 162552 —-a-w- c:\users\Ariel Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2012-11-13 23:32 162552 —-a-w- c:\users\Ariel Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2012-11-13 23:32 162552 —-a-w- c:\users\Ariel Anderson\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Apoint"="c:\program files\DellTPad\Apoint.exe" [2010-04-05 384296] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-03-30 499608] "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-09-13 1289704] . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: Add to Evernote 4 - c:\program files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000 IE: New Note - c:\program files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html TCP: DhcpNameServer = 192.168.2.1 FF - ProfilePath - c:\users\Ariel Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\o30xoycl.default\ . - - - - ORPHANS REMOVED - - - - . Wow6432Node-HKLM-Run- - (no file) SafeBoot-00564730.sys SafeBoot-05154916.sys SafeBoot-46318111.sys . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9e.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.9" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9e.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9e.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9e.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil9e.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\LocalServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil9e.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}] @Denied: (A 2) (Everyone) @="IFlashBroker" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2013-02-17 10:38:18 ComboFix-quarantined-files.txt 2013-02-17 16:38 . Pre-Run: 258,054,156,288 bytes free Post-Run: 259,212,644,352 bytes free . - - End Of File - - F70ADC7CF48CEC472E0265F1F39C650D

MrCharlie

Post #11February 17, 2013, 5:37 PM UTC

Please download AdwCleaner from here and save it on your Desktop.

AdwCleaner is a reliable removal tool for Adware, Foistware, toolbars and potentially unwanted programs.

AdwCleaner is a tool that deletes :
· Adwares (software ads)
· PUP/LPI (Potentially Undesirable Program)
· Toolbars
· Hijacker (Hijack of the browser's homepage)

It works with a Search and Deletion methode. It can be easily uninstalled using the "Uninstall" mode.

Right-click on adwcleaner.exe and select Run As Administrator (for XP just double click) to launch the application.
Now click on the Search tab.
Please post the contents of the log-file created in your next post.

Note: The log can also be located at C:\ >> AdwCleaner[XX].txt >> XX <– Denotes the number of times the application has been ran, so in this should be something like R1.

Please look over what was found, we're going to delete it all in the next step….if there's something you may want to keep…please let me know and I'll explain to why it shouldn't be on your system.

MrC

V. Rowan

Post #12February 17, 2013, 6:00 PM UTC

Here is the log. I actually ran ADWCleaner a few days ago in an independent attempt to deal w/ this, so the log might not show much. # AdwCleaner v2.112 - Logfile created 02/17/2013 at 11:58:52 # Updated 10/02/2013 by Xplode # Operating system : Windows 7 Home Premium Service Pack 1 (64 bits) # User : Ariel Anderson - CELESTE # Boot Mode : Safe mode with networking # Running from : C:\Users\Ariel Anderson\Desktop\adwcleaner0.exe # Option [Search] ***** [Services] ***** ***** [Files / Folders] ***** ***** [Registry] ***** ***** [Internet Browsers] ***** -\\ Internet Explorer v9.0.8112.16464 [OK] Registry is clean. -\\ Mozilla Firefox v18.0.1 (en-US) File : C:\Users\Ariel Anderson\AppData\Roaming\Mozilla\Firefox\Profiles\o30xoycl.default\prefs.js [OK] File is clean. -\\ Google Chrome v24.0.1312.57 File : C:\Users\Ariel Anderson\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] File is clean. ************************* AdwCleaner[R1].txt - [865 octets] - [17/02/2013 11:58:52] AdwCleaner[S1].txt - [1048 octets] - [14/02/2013 09:07:02] ########## EOF - C:\AdwCleaner[R1].txt - [984 octets] ##########

MrCharlie

Post #13February 17, 2013, 6:25 PM UTC

OK………….

Download TFC to your desktop
Close any open windows.
Double click the TFC icon to run the program
TFC will close all open programs itself in order to run,
Click the Start button to begin the process.
Allow TFC to run uninterrupted.
The program should not take long to finish it's job
Once its finished it should automatically reboot your machine,
if it doesn't, manually reboot to ensure a complete clean

—————————————

Then…………

Please Update and run a Quick Scan with Malwarebytes Anti-Malware, post the report.

Make sure that everything is checked, and click Remove Selected.

Please let me know how computer is running now, MrC

V. Rowan

Post #14February 17, 2013, 7:15 PM UTC last edited February 17, 2013, 7:16 PM UTC

The report is pasted below. I was not prompted to delete anything.

However, I was unable to run this scan in normal Windows mode. I rebooted my computer after running a scan in safe mode to see how it was. The beeping sound during startup persists and I have to quickly press ENTER or F8 to get through a screen that asks me to chose an OS (Windows 7 is obviously the only option for this since I have no other OS installed).

Secondly, when I start the computer in normal mode I get a black command screen: C:\Windows\System32\cmd.exe. A dialog box appears reading Windows cannot find: C9B92D05-335B-436D-BDBF-4B00E1CE4C52.exe. After I click through that another box appears reading Windows cannot find: 01EDBC85-DD83-45AF-B61D-40FA53BB82B.exe

The computer is still very slow, I was barely able to open Chrome and load Google. I couldn't run the Malware program so I switched back to safe mode. I wasn't able to do a screencap of these boxes so what is posted is from my handwritten notes. It's possible that I am off a letter or number.

Malwarebytes report

Malwarebytes Anti-Malware (Trial) 1.70.0.1100
www.malwarebytes.org

Database version: v2013.02.17.06

Windows 7 Service Pack 1 x64 NTFS (Safe Mode/Networking)
Internet Explorer 9.0.8112.16421
Ariel Anderson :: CELESTE [administrator]

Protection: Disabled

2/17/2013 1:04:35 PM
mbam-log-2013-02-17 (13-04-35).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 208657
Time elapsed: 2 minute(s), 29 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

MrCharlie

Post #15February 17, 2013, 8:18 PM UTC

Please download OTL from one of the links below:
http://oldtimer.geekstogo.com/OTL.exe
http://www.itxassociates.com/OT-Tools/OTL.exe
http://oldtimer.geekstogo.com/OTL.com (<—renamed version)

Save it to your desktop.
Double click on the icon on your desktop.
Click the Scan All Users checkbox.
Push the Quick Scan button.

The scan will take about 10 minutes…depends on your hard drive size.

Two reports will open, copy and paste them in a reply here: (or attach them as .txt files)
OTL.txt <– Will be opened
Extra.txt <– Will be minimized

MrC

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Win32/Small.CA Infection, Appreciate Help W/ Removal [Closed]

✨ Ask AI

Ask AI