Help removing Win32/small.ca Virus [Solved]

Sorry about the inactivity on my last post, Valentine's day, and seeing family got in the way :/

So I turned on my laptop two days ago and it gave an alert that I was infected with the Win32/small.CA virus, now I'm not sure how serious this is, but I would like to remove it ASAP. Please and thank you

Following are the files from OTL, hoping I did them right.

Here's OTL.txt

OTL logfile created on: 12/02/2013 20:50:10 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Kyle\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

5.48 Gb Total Physical Memory | 3.47 Gb Available Physical Memory | 63.35% Memory free
10.96 Gb Paging File | 8.76 Gb Available in Paging File | 79.98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 578.61 Gb Total Space | 369.25 Gb Free Space | 63.82% Space Free | Partition Type: NTFS
Drive D: | 17.27 Gb Total Space | 1.89 Gb Free Space | 10.93% Space Free | Partition Type: NTFS

Computer Name: KYLE-HP | User Name: Kyle | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/02/11 22:31:42 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\Kyle\Desktop\OTL.exe
PRC - [2012/12/24 18:09:41 | 000,205,824 | RHS- | M] () – C:\Users\Kyle\msdata\services.exe
PRC - [2012/12/10 17:29:46 | 002,254,768 | —- | M] (LogMeIn Inc.) – C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2012/11/26 14:36:41 | 001,199,576 | —- | M] (Spotify Ltd) – C:\Users\Kyle\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
PRC - [2012/10/14 11:25:30 | 000,008,704 | RH– | M] (Microsoft Corporation) – C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Templates\spsreng.exe
PRC - [2012/10/12 19:12:24 | 000,212,432 | —- | M] (Google Inc.) – C:\Users\Kyle\AppData\Local\Google\Update\1.3.21.123\GoogleCrashHandler.exe
PRC - [2012/08/20 14:45:27 | 000,491,520 | RHS- | M] (TESTING) – C:\Users\Kyle\olepsxss.exe
PRC - [2012/07/09 14:59:45 | 000,076,888 | —- | M] () – C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2012/03/14 16:38:14 | 000,913,752 | —- | M] (IObit) – C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
PRC - [2012/02/15 11:58:00 | 000,577,408 | —- | M] (Hewlett-Packard Development Company, L.P.) – C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
PRC - [2012/02/15 11:58:00 | 000,034,872 | —- | M] (Hewlett-Packard Development Company, L.P.) – C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
PRC - [2011/10/01 08:30:22 | 000,219,496 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2011/10/01 08:30:18 | 000,508,776 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2011/08/19 14:48:44 | 000,379,960 | —- | M] (Hewlett-Packard Development Company, L.P.) – C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
PRC - [2011/04/16 19:45:11 | 000,130,008 | R— | M] (Symantec Corporation) – C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccsvchst.exe
PRC - [2011/02/18 01:48:24 | 000,265,544 | —- | M] (HP) – C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
PRC - [2011/02/18 01:48:12 | 000,642,888 | —- | M] (HP) – C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
PRC - [2011/02/18 01:47:58 | 000,142,664 | —- | M] (HP) – C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
PRC - [2011/02/15 18:48:52 | 001,071,160 | —- | M] (Hewlett-Packard Development Company L.P.) – C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
PRC - [2010/11/26 09:09:12 | 000,399,344 | —- | M] (Roxio) – C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
PRC - [2010/04/23 14:00:00 | 000,514,232 | —- | M] (EasyBits Software AS) – C:\Windows\SysWOW64\ezSharedSvcHost.exe
PRC - [2010/04/23 14:00:00 | 000,514,232 | —- | M] (EasyBits Software AS) – C:\Windows\SysWOW64\ezSharedSvcHost.exe
PRC - [2010/04/23 14:00:00 | 000,514,232 | —- | M] (EasyBits Software AS) – C:\Windows\SysWOW64\ezSharedSvcHost.exe
PRC - [2010/04/23 14:00:00 | 000,514,232 | —- | M] (EasyBits Software AS) – C:\Windows\SysWOW64\ezSharedSvcHost.exe


========== Modules (No Company Name) ==========

MOD - [2011/11/01 23:26:32 | 000,087,912 | —- | M] () – C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/11/01 23:26:12 | 001,242,472 | —- | M] () – C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll


========== Services (SafeList) ==========

SRV:64bit: - [2012/10/14 15:15:07 | 000,311,808 | —- | M] (IDT, Inc.) [Auto | Running] – C:\Program Files\IDT\WDM\stacsv64.exe – (STacSV)
SRV:64bit: - [2012/10/14 15:15:02 | 000,089,600 | —- | M] (Andrea Electronics Corporation) [Auto | Running] – C:\Program Files\IDT\WDM\AESTSr64.exe – (AESTFilters)
SRV:64bit: - [2012/04/25 13:02:52 | 000,031,000 | —- | M] (Hewlett-Packard Company) [Auto | Running] – C:\Windows\SysNative\hpservice.exe – (hpsrv)
SRV:64bit: - [2011/09/15 18:12:12 | 000,204,288 | —- | M] (AMD) [Auto | Running] – C:\Windows\SysNative\atiesrxx.exe – (AMD External Events Utility)
SRV:64bit: - [2011/04/02 02:06:22 | 000,365,568 | —- | M] (Advanced Micro Devices, Inc.) [Auto | Running] – C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe – (AMD FUEL Service)
SRV:64bit: - [2010/10/11 04:48:14 | 000,346,168 | —- | M] (Hewlett-Packard Company) [Auto | Running] – C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe – (HPClientSvc)
SRV:64bit: - [2010/09/22 20:10:10 | 000,057,184 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Program Files\Windows Live\Mesh\wlcrasvc.exe – (wlcrasvc)
SRV:64bit: - [2010/07/29 22:39:24 | 000,951,584 | —- | M] (Broadcom Corporation.) [Auto | Running] – C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe – (btwdins)
SRV:64bit: - [2009/07/13 20:41:27 | 001,011,712 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV - [2013/02/09 23:34:19 | 000,251,248 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2013/02/08 14:56:00 | 000,541,760 | —- | M] (Valve Corporation) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Steam\SteamService.exe – (Steam Client Service)
SRV - [2012/12/10 17:29:46 | 002,465,712 | —- | M] (LogMeIn Inc.) [Auto | Running] – C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe – (Hamachi2Svc)
SRV - [2012/09/27 11:55:16 | 000,086,528 | —- | M] (Hewlett-Packard Company) [Auto | Running] – C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe – (HP Support Assistant Service)
SRV - [2012/07/13 12:28:36 | 000,160,944 | R— | M] (Skype Technologies) [Auto | Stopped] – C:\Program Files (x86)\Skype\Updater\Updater.exe – (SkypeUpdate)
SRV - [2012/07/09 14:59:45 | 000,076,888 | —- | M] () [Auto | Running] – C:\Windows\SysWOW64\PnkBstrA.exe – (PnkBstrA)
SRV - [2012/03/14 16:38:14 | 000,913,752 | —- | M] (IObit) [Auto | Running] – C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe – (AdvancedSystemCareService5)
SRV - [2012/02/24 18:54:17 | 002,413,056 | —- | M] (Realsil Microelectronics Inc.) [Auto | Running] – C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe – (IconMan_R)
SRV - [2012/02/15 11:58:00 | 000,034,872 | —- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] – C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe – (HPWMISVC)
SRV - [2011/10/01 08:30:22 | 000,219,496 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe – (sftvsa)
SRV - [2011/10/01 08:30:18 | 000,508,776 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe – (sftlist)
SRV - [2011/08/07 07:40:00 | 003,804,120 | —- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] – C:\Windows\SysWOW64\GameMon.des – (npggsvc)
SRV - [2011/04/16 19:45:11 | 000,130,008 | R— | M] (Symantec Corporation) [Auto | Running] – C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe – (NIS)
SRV - [2011/02/18 01:48:24 | 000,265,544 | —- | M] (HP) [Auto | Running] – C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe – (FPLService)
SRV - [2011/02/15 18:48:52 | 001,071,160 | —- | M] (Hewlett-Packard Development Company L.P.) [On_Demand | Running] – C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe – (hpCMSrv)
SRV - [2010/11/26 09:09:12 | 000,399,344 | —- | M] (Roxio) [Auto | Running] – C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe – (RoxioNow Service)
SRV - [2010/03/18 13:16:28 | 000,130,384 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 16:23:09 | 000,066,384 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/10/14 15:15:10 | 000,535,552 | —- | M] (IDT, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\stwrt64.sys – (STHDA)
DRV:64bit: - [2012/10/14 15:13:37 | 004,747,840 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\BCMWL664.SYS – (BCM43XX)
DRV:64bit: - [2012/09/28 10:32:56 | 000,053,760 | —- | M] (Apple, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\usbaapl64.sys – (USBAAPL64)
DRV:64bit: - [2012/08/23 09:10:20 | 000,019,456 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\rdpvideominiport.sys – (RdpVideoMiniport)
DRV:64bit: - [2012/08/23 09:08:26 | 000,030,208 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\TsUsbGD.sys – (TsUsbGD)
DRV:64bit: - [2012/08/23 09:07:35 | 000,057,856 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\TsUsbFlt.sys – (TsUsbFlt)
DRV:64bit: - [2012/08/21 12:01:20 | 000,033,240 | —- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\GEARAspiWDM.sys – (GEARAspiWDM)
DRV:64bit: - [2012/04/25 13:02:52 | 000,043,800 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Accelerometer.sys – (Accelerometer)
DRV:64bit: - [2012/04/25 13:02:52 | 000,030,488 | —- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\hpdskflt.sys – (hpdskflt)
DRV:64bit: - [2012/03/01 01:46:16 | 000,023,408 | —- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] – C:\Windows\SysNative\drivers\fs_rec.sys – (Fs_Rec)
DRV:64bit: - [2012/02/24 18:54:17 | 000,338,536 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\RtsPStor.sys – (RSPCIESTOR)
DRV:64bit: - [2012/01/19 18:21:38 | 000,174,200 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS – (SymEvent)
DRV:64bit: - [2011/10/14 04:37:44 | 000,396,848 | —- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\SynTP.sys – (SynTP)
DRV:64bit: - [2011/10/01 08:30:22 | 000,022,376 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Sftvollh.sys – (Sftvol)
DRV:64bit: - [2011/10/01 08:30:18 | 000,268,648 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Sftplaylh.sys – (Sftplay)
DRV:64bit: - [2011/10/01 08:30:18 | 000,025,960 | —- | M] (Microsoft Corporation) [File_System | On_Demand | Running] – C:\Windows\SysNative\drivers\Sftredirlh.sys – (Sftredir)
DRV:64bit: - [2011/10/01 08:30:10 | 000,764,264 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Sftfslh.sys – (Sftfs)
DRV:64bit: - [2011/09/15 18:51:12 | 010,206,208 | —- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\atikmdag.sys – (amdkmdag)
DRV:64bit: - [2011/09/15 17:38:42 | 000,317,952 | —- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\atikmpag.sys – (amdkmdap)
DRV:64bit: - [2011/08/24 23:28:28 | 000,107,904 | —- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsata.sys – (amdsata)
DRV:64bit: - [2011/08/24 23:28:28 | 000,027,008 | —- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\amdxata.sys – (amdxata)
DRV:64bit: - [2011/06/23 01:43:04 | 001,071,032 | —- | M] (Windows ® Win 7 DDK provider) [Kernel | Auto | Stopped] – C:\Windows\SysNative\drivers\wcmvcam64.sys – (WCMVCAM)
DRV:64bit: - [2011/04/20 20:37:49 | 000,386,168 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\Windows\SysNative\drivers\NISx64\1207020.003\symnets.sys – (SymNetS)
DRV:64bit: - [2011/04/15 16:37:50 | 000,079,488 | —- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\amd_sata.sys – (amd_sata)
DRV:64bit: - [2011/04/15 16:37:50 | 000,040,064 | —- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\amd_xata.sys – (amd_xata)
DRV:64bit: - [2011/03/30 22:04:12 | 000,043,640 | R— | M] (Symantec Corporation) [Kernel | System | Running] – C:\Windows\SysNative\drivers\SymIMV.sys – (SymIM)
DRV:64bit: - [2011/03/30 22:00:09 | 000,744,568 | —- | M] (Symantec Corporation) [File_System | On_Demand | Running] – C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.sys – (SRTSP)
DRV:64bit: - [2011/03/30 22:00:09 | 000,040,568 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.sys – (SRTSPX)
DRV:64bit: - [2011/03/18 00:04:20 | 000,188,544 | —- | M] (Advanced Micro Devices, INC.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\amdxhc.sys – (amdxhc)
DRV:64bit: - [2011/03/18 00:04:18 | 000,087,168 | —- | M] (Advanced Micro Devices, INC.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\amdhub30.sys – (amdhub30)
DRV:64bit: - [2011/03/14 21:31:23 | 000,912,504 | —- | M] (Symantec Corporation) [File_System | Boot | Running] – C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa64.sys – (SymEFA)
DRV:64bit: - [2011/02/16 20:11:08 | 000,428,136 | —- | M] (Realtek ) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Rt64win7.sys – (RTL8167)
DRV:64bit: - [2011/01/27 01:47:10 | 000,450,680 | —- | M] (Symantec Corporation) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\NISx64\1207020.003\symds64.sys – (SymDS)
DRV:64bit: - [2011/01/27 00:07:06 | 000,171,128 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\Windows\SysNative\drivers\NISx64\1207020.003\ironx64.sys – (SymIRON)
DRV:64bit: - [2010/12/16 03:06:46 | 000,047,232 | —- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\usbfilter.sys – (usbfilter)
DRV:64bit: - [2010/11/26 17:02:18 | 000,017,720 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\SmartDefragDriver.sys – (SmartDefragDriver)
DRV:64bit: - [2010/11/20 22:23:47 | 000,109,056 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\sdbus.sys – (sdbus)
DRV:64bit: - [2010/11/20 22:23:47 | 000,078,720 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\HpSAMD.sys – (HpSAMD)
DRV:64bit: - [2010/11/17 12:04:32 | 000,115,216 | —- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\AtihdW76.sys – (AtiHDAudioService)
DRV:64bit: - [2010/07/20 16:26:42 | 000,102,952 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwaudio.sys – (btwaudio)
DRV:64bit: - [2010/07/20 16:26:38 | 000,135,720 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwavdt.sys – (btwavdt)
DRV:64bit: - [2010/07/20 16:26:34 | 000,021,544 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwrchid.sys – (btwrchid)
DRV:64bit: - [2010/07/14 09:25:38 | 000,344,616 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwampfl.sys – (btwampfl)
DRV:64bit: - [2010/03/02 17:37:40 | 000,039,464 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwl2cap.sys – (btwl2cap)
DRV:64bit: - [2010/02/18 12:18:24 | 000,046,136 | —- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\amdiox64.sys – (amdiox64)
DRV:64bit: - [2009/12/01 14:49:52 | 000,038,992 | —- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\ScreamingBAudio64.sys – (ScreamBAudioSvc)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | —- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsbs.sys – (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | —- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\lsi_sas2.sys – (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | —- | M] (Promise Technology) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\stexstor.sys – (stexstor)
DRV:64bit: - [2009/06/10 16:01:11 | 001,485,312 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\VSTDPV6.SYS – (SrvHsfV92)
DRV:64bit: - [2009/06/10 16:01:11 | 000,740,864 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\VSTCNXT6.SYS – (SrvHsfWinac)
DRV:64bit: - [2009/06/10 16:01:11 | 000,292,864 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\VSTAZL6.SYS – (SrvHsfHDA)
DRV:64bit: - [2009/06/10 15:35:35 | 000,408,960 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\nvm62x64.sys – (NVENETFD)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\evbda.sys – (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\bxvbda.sys – (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\b57nd60a.sys – (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | —- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\hcw85cir.sys – (hcw85cir)
DRV:64bit: - [2009/03/18 17:35:42 | 000,033,856 | -H– | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\hamachi.sys – (hamachi)
DRV - [2013/02/08 14:35:07 | 002,087,664 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20130211.019\ex64.sys – (NAVEX15)
DRV - [2013/02/08 14:35:07 | 000,126,192 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20130211.019\eng64.sys – (NAVENG)
DRV - [2013/02/07 16:44:52 | 000,513,184 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20130209.002\IDSviA64.sys – (IDSVia64)
DRV - [2013/01/15 21:51:11 | 001,388,120 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20130116.013\BHDrvx64.sys – (BHDrvx64)
DRV - [2012/08/08 23:36:40 | 000,484,512 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys – (eeCtrl)
DRV - [2012/08/08 23:36:40 | 000,138,912 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys – (EraserUtilRebootDrv)
DRV - [2010/11/01 05:08:46 | 000,014,544 | —- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] – C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys – (WinRing0_1_2_0)
DRV - [2009/07/13 20:19:10 | 000,019,008 | —- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] – C:\Windows\SysWOW64\drivers\wimmount.sys – (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{1BCD95F3-2B84-45B8-B3B7-95EBC2FD672E}: "URL" = http://www.amazon.com/s/ref=azs_osd_iea?ie…s={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.com/web?q={searchterms}&…is&o;=HPNTDF
IE:64bit: - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo.com/search?p={searchTe…amp;type=HPNTDF
IE:64bit: - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia.org/wiki/Special:Searc…h={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/711-30572-11…w={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{1BCD95F3-2B84-45B8-B3B7-95EBC2FD672E}: "URL" = http://www.amazon.com/s/ref=azs_osd_iea?ie…s={searchTerms}
IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.com/web?q={searchterms}&…is&o;=HPNTDF
IE - HKLM\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo.com/search?p={searchTe…amp;type=HPNTDF
IE - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia.org/wiki/Special:Searc…h={searchTerms}
IE - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/711-30572-11…w={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.avg.com/?cid={44DB4149-5F82…mp;d=2012-02-03 22:04:52&v;=10.0.0.7&sap;=hp
IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE - HKCU\..\SearchScopes\{1BCD95F3-2B84-45B8-B3B7-95EBC2FD672E}: "URL" = http://www.amazon.com/s/ref=azs_osd_iea?ie…s={searchTerms}
IE - HKCU\..\SearchScopes\{231C010E-ACCD-402A-885B-B12FAE026E6C}: "URL" = http://websearch.ask.com/redirect?client=i…83-ACC60CB1E7F9
IE - HKCU\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://search.ask.com/web?q={searchterms}&…is&o;=HPNTDF
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={44DB414…mp;d=2012-02-03 22:04:52&v;=9.0.0.23&sap;=dsp&q;={searchTerms}
IE - HKCU\..\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671}: "URL" = http://search.yahoo.com/search?p={searchTe…amp;type=HPNTDF
IE - HKCU\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://en.wikipedia.org/wiki/Special:Searc…h={searchTerms}
IE - HKCU\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: "URL" = http://rover.ebay.com/rover/1/711-30572-11…w={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Google"
FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "AVG Secure Search"
FF - prefs.js..browser.startup.homepage: "http://isearch.avg.com?cid=%7Be49ca92c-e8ba-472e-a3b3-bfa25e89e906%7D∣=238fc3f340e747d18c719165b2c245a5-14f68081414f1777257dae7cafb45675871ccf0e&ds;=ins10&v;=10.2.0.3⟨=en≺=sa&d;=2012-02-03%2022%3A04%3A52"
FF - prefs.js..extensions.enabledAddons: [removed]:5.0
FF - prefs.js..extensions.enabledAddons: [removed]:1.5.0


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_149.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.3.1: C:\Windows\system32\npDeployJava1.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.3.1: C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Kyle\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Kyle\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Kyle\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Kyle\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\IPSFFPlgn\ [2012/05/28 00:54:36 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\coFFPlgn_2011_7_13_2 [2013/02/12 20:44:46 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/01/20 15:28:59 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/06/12 23:21:55 | 000,000,000 | —D | M]

[2012/06/21 00:14:18 | 000,000,000 | —D | M] (No name found) – C:\Users\Kyle\AppData\Roaming\Mozilla\Extensions
[2012/06/21 00:14:18 | 000,000,000 | —D | M] (No name found) – C:\Users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions
[2012/03/25 19:42:30 | 000,000,000 | —D | M] (Funmoods.com) – C:\Users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]
[2012/01/03 16:27:44 | 000,002,333 | —- | M] () – C:\Users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\searchplugins\askcom.xml
[2012/02/27 17:51:43 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/02/27 17:51:43 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
[2012/01/21 00:49:09 | 000,000,000 | —D | M] (TrueSuite Website Logon) – C:\Program Files (x86)\Mozilla Firefox\extensions\[removed]
[2011/12/21 02:24:52 | 000,121,816 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/02/27 17:51:18 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2012/03/13 16:26:35 | 000,003,768 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
[2011/12/20 23:30:41 | 000,002,252 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011/12/20 23:30:41 | 000,002,040 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - homepage: http://www.ask.com/?l=dis&o;=15434cr
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{g
oogle:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie;={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl;={language}&q;={searchTerms}&sugkey;={google:suggestAPIKeyParameter},
CHR - homepage: http://www.ask.com/?l=dis&o;=15434cr
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Kyle\AppData\Local\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Kyle\AppData\Local\Google\Chrome\Application\24.0.1312.57\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Kyle\AppData\Local\Google\Chrome\Application\24.0.1312.57\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Simple Pass 2011 (Enabled) = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\aepeildmfnnehghlknddebgjghlompfe\1.0_0\npwebsitelogon.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: downloadUpdater (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll
CHR - plugin: downloadUpdater2 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Kyle\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Kyle\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Facebook Desktop (Enabled) = C:\Users\Kyle\AppData\Local\Facebook\Messenger\2.1.4520.0\npFbDesktopPlugin.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Kyle\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - Extension: Website Logon = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\aepeildmfnnehghlknddebgjghlompfe\1.0_0\
CHR - Extension: Angry Birds = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\
CHR - Extension: Google Drive = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Adblock Plus = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.3.4_0\
CHR - Extension: Crimson Night = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjkplgpgpjobdcbfniompdbkiejfkckd\2.2_0\
CHR - Extension: Google Search = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Privacy SafeGuard = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\geggofhlfbcmanadhknllmlajiafopoh\1.1_0\
CHR - Extension: Click&Clean; = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod\8.0.1_0\
CHR - Extension: Minecraft Wiki Searcher = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\kffllhckohamkhicfkcncgjekbbfmbji\0.3_0\
CHR - Extension: Google Mail Checker = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_1\
CHR - Extension: Readability = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\oknpjjbmpnndlpmnhmekjpocelpnlfdi\1.13_0\
CHR - Extension: Gmail = C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2009/06/10 16:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Privacy Safeguard BHO) - {1036AD63-AEAC-460B-9060-C96005D4DC86} - C:\Program Files\PrivacySafeGuard\PrivacySafeGuard-x64.dll (PrivaceySafeguard)
O2:64bit: - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {1036AD63-AEAC-460B-9060-C96005D4DC86} - No CLSID value found.
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
O2 - BHO: (Privacy Safeguard BHO) - {A42D2EB4-DD31-4BB5-8AA5-8D4E04806DBE} - C:\Program Files\PrivacySafeGuard\PrivacySafeGuard.dll (PrivaceySafeguard)
O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coieplg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coieplg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS)
O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe (Hewlett-Packard Development Company L.P.)
O4 - HKLM..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [Activex Application Updater] C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Templates\spsreng.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Java] C:\Users\Kyle\AppData\Roaming\Faded.exe ()
O4 - HKCU..\Run: [RDY2OTkzMjBGMDZFREU2Rk] C:\Users\Kyle\olepsxss.exe (TESTING)
O4 - HKCU..\Run: [Services and Controller App] C:\Users\Kyle\msdata\service.exe ()
O4 - HKCU..\Run: [Spotify Web Helper] C:\Users\Kyle\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
F3:64bit: - HKCU WinNT: Load - (C:\Users\Kyle\olepsxss.exe) - C:\Users\Kyle\olepsxss.exe (TESTING)
F3 - HKCU WinNT: Load - (C:\Users\Kyle\olepsxss.exe) - C:\Users\Kyle\olepsxss.exe (TESTING)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Send image to &Bluetooth; Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Send page to &Bluetooth; Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Send image to &Bluetooth; Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth; Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth; Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 10.3.1)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16:64bit: - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0_03)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0_03)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 4.2.2.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{18886D6B-E65C-40B0-AF4A-A85C8770F5E3}: DhcpNameServer = 192.168.1.1 4.2.2.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6A5BD8B4-FDF7-40FF-8EA0-ABE1D157E92B}: DhcpNameServer = [removed]
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012/12/24 18:09:48 | 000,000,051 | -H– | M] () - C:\autorun.inf – [ NTFS ]
O32 - AutoRun File - [2012/12/24 18:09:48 | 000,000,051 | -H– | M] () - D:\autorun.inf – [ NTFS ]
O33 - MountPoints2\{09ebfa60-479b-11e1-8527-402cf426ac56}\Shell - "" = AutoRun
O33 - MountPoints2\{09ebfa60-479b-11e1-8527-402cf426ac56}\Shell\AutoRun\command - "" = F:\SETUP.EXE /adminfile IU.MSP
O33 - MountPoints2\{09ebfa60-479b-11e1-8527-402cf426ac56}\Shell\configure\command - "" = F:\SETUP.EXE
O33 - MountPoints2\{09ebfa60-479b-11e1-8527-402cf426ac56}\Shell\install\command - "" = F:\SETUP.EXE
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)


Drivers32:64bit: msacm.bdmpeg - bdmpega64.acm ()
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32:64bit: vidc.mjpg - bdmjpeg64.dll ()
Drivers32:64bit: vidc.mpeg - bdmpegv64.dll ()
Drivers32: msacm.bdmpeg - C:\Windows\SysWow64\bdmpega.acm ()
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
Drivers32: vidc.mjpg - C:\Windows\SysWow64\bdmjpeg.dll ()
Drivers32: vidc.mpeg - C:\Windows\SysWow64\bdmpegv.dll ()

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2013/02/11 22:31:50 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Users\Kyle\Desktop\OTL.exe
[2013/02/11 22:10:30 | 086,137,416 | —- | C] (Microsoft Corporation) – C:\Users\Kyle\Desktop\msert.exe
[2013/02/11 21:36:40 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/02/11 21:35:52 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2013/02/11 21:35:52 | 000,000,000 | —D | C] – C:\Program Files (x86)\iTunes
[2013/02/11 21:35:52 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2013/02/11 21:35:52 | 000,000,000 | —D | C] – C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013/02/09 13:34:31 | 000,000,000 | —D | C] – C:\2d2cbca6cd90233720548e81ea04
[2013/02/08 14:58:44 | 000,000,000 | —D | C] – C:\008bbd452bcf08085a
[2013/02/08 14:15:19 | 000,750,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\win32spl.dll
[2013/02/08 14:15:19 | 000,492,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\win32spl.dll
[2013/02/08 14:14:47 | 000,307,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncrypt.dll
[2013/02/08 14:14:23 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskhost.exe
[2012/08/20 14:54:08 | 000,491,520 | RHS- | C] (TESTING) – C:\Users\Kyle\WINuc.exe
[2012/08/20 14:45:26 | 000,491,520 | RHS- | C] (TESTING) – C:\Users\Kyle\olepsxss.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/02/12 20:53:00 | 000,032,064 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/02/12 20:53:00 | 000,032,064 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/02/12 20:51:45 | 000,779,724 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2013/02/12 20:51:45 | 000,660,770 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2013/02/12 20:51:45 | 000,121,408 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2013/02/12 20:45:11 | 000,004,096 | —- | M] () – C:\Users\Kyle\AppData\Roaming\MneFXFkSo.exe
[2013/02/12 20:44:46 | 000,000,890 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/02/12 20:44:23 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2013/02/12 20:44:13 | 116,842,495 | -HS- | M] () – C:\hiberfil.sys
[2013/02/12 01:19:01 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/02/12 00:28:05 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/02/12 00:21:24 | 000,000,904 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3059046161-287070921-57097081-1002UA.job
[2013/02/11 22:36:57 | 000,000,576 | —- | M] () – C:\Users\Kyle\Desktop\Instructions.lnk
[2013/02/11 22:31:42 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\Kyle\Desktop\OTL.exe
[2013/02/11 22:08:11 | 086,137,416 | —- | M] (Microsoft Corporation) – C:\Users\Kyle\Desktop\msert.exe
[2013/02/11 20:19:00 | 000,000,852 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3059046161-287070921-57097081-1002Core.job
[2013/02/10 14:30:41 | 000,773,940 | —- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2013/02/09 23:34:19 | 000,697,712 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2013/02/09 23:34:19 | 000,074,096 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/02/09 22:07:19 | 000,437,776 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2013/02/08 20:12:34 | 000,000,328 | —- | M] () – C:\Windows\tasks\HPCeeScheduleForKyle.job
[2013/02/08 18:59:02 | 000,000,340 | —- | M] () – C:\Windows\tasks\HPCeeScheduleForKYLE-HP$.job
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/02/11 22:36:57 | 000,000,576 | —- | C] () – C:\Users\Kyle\Desktop\Instructions.lnk
[2013/01/06 17:38:44 | 000,060,248 | —- | C] () – C:\Users\Kyle\AppData\Roaming\cyAOSR2Uo5ucNeH.exe
[2013/01/03 19:13:02 | 000,206,927 | —- | C] () – C:\Users\Kyle\AppData\Roaming\Nigger.jar
[2012/12/24 18:09:42 | 000,004,096 | —- | C] () – C:\Users\Kyle\AppData\Roaming\MneFXFkSo.exe
[2012/12/24 18:09:30 | 000,205,824 | —- | C] () – C:\Users\Kyle\AppData\Roaming\Faded.exe
[2012/12/15 16:45:56 | 001,074,703 | —- | C] () – C:\Users\Kyle\AppData\Roaming\RNRJHTIWVFJEsvchost.exe
[2012/12/15 16:43:20 | 001,074,695 | —- | C] () – C:\Users\Kyle\AppData\Roaming\FGKO3svchost.exe
[2012/12/15 16:42:33 | 000,004,096 | —- | C] () – C:\Users\Kyle\AppData\Roaming\MicbxoiWo.exe
[2012/12/15 16:42:31 | 001,074,695 | —- | C] () – C:\Users\Kyle\AppData\Roaming\6WU0Bsvchost.exe
[2012/12/15 16:42:12 | 001,074,962 | —- | C] () – C:\Users\Kyle\AppData\Roaming\DKIQHU4svchost.exe
[2012/12/15 16:40:42 | 000,004,096 | —- | C] () – C:\Users\Kyle\AppData\Roaming\MYVmVIWWo.exe
[2012/12/15 16:40:09 | 001,464,185 | —- | C] () – C:\Users\Kyle\AppData\Roaming\Java.exe
[2012/12/15 14:44:51 | 000,004,096 | —- | C] () – C:\Users\Kyle\AppData\Roaming\MCCzDxCzo.exe
[2012/12/15 14:44:22 | 001,236,480 | —- | C] () – C:\Users\Kyle\AppData\Roaming\javaa.exe
[2012/12/09 20:49:44 | 000,001,206 | —- | C] () – C:\Windows\SysWow64\mail.dat
[2012/12/09 20:49:38 | 000,000,790 | —- | C] () – C:\Windows\SysWow64\mess.dat
[2012/12/09 20:49:38 | 000,000,002 | —- | C] () – C:\Windows\SysWow64\ffpw.dat
[2012/12/09 20:49:38 | 000,000,002 | —- | C] () – C:\Windows\SysWow64\chro.dat
[2012/12/09 19:52:26 | 000,000,561 | —- | C] () – C:\Users\Kyle\AppData\Roaming\Java
[2012/12/09 19:51:53 | 000,004,096 | —- | C] () – C:\Users\Kyle\AppData\Roaming\MGAKaXYSo.exe
[2012/07/10 13:31:09 | 000,000,262 | —- | C] () – C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2012/06/29 09:41:08 | 000,000,331 | —- | C] () – C:\Windows\game.ini
[2012/06/19 00:03:45 | 000,199,656 | -H– | C] () – C:\Windows\SysWow64\mlfcache.dat
[2012/06/16 20:37:53 | 000,000,112 | —- | C] () – C:\Windows\wininit.ini
[2012/06/09 14:14:10 | 000,085,504 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2012/05/17 17:56:35 | 000,298,016 | —- | C] () – C:\Windows\SysWow64\PnkBstrB.exe
[2012/05/17 17:56:30 | 000,076,888 | —- | C] () – C:\Windows\SysWow64\PnkBstrA.exe
[2012/05/17 17:56:29 | 003,130,440 | —- | C] () – C:\Windows\SysWow64\pbsvc_blr.exe
[2012/05/08 21:50:35 | 000,000,258 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2012/03/18 20:31:00 | 000,175,616 | —- | C] () – C:\Windows\SysWow64\unrar.dll
[2012/03/11 13:49:49 | 000,000,023 | —- | C] () – C:\Windows\BlendSettings.ini
[2012/03/01 16:30:52 | 000,074,372 | —- | C] () – C:\Users\Kyle\AppData\Roaming\icarus-dxdiag.xml
[2012/01/28 01:22:05 | 000,000,023 | —- | C] () – C:\Users\Kyle\jagexappletviewer.preferences
[2012/01/28 01:04:56 | 000,000,043 | —- | C] () – C:\Users\Kyle\jagex_cl_runescape_LIVE.dat
[2012/01/13 02:51:55 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2012/01/13 02:40:40 | 000,773,940 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2012/01/13 02:29:29 | 000,000,056 | -H– | C] () – C:\Windows\SysWow64\ezsidmv.dat
[2011/09/28 16:44:14 | 000,179,271 | —- | C] () – C:\Windows\SysWow64\xlive.dll.cat
[2011/09/19 02:07:46 | 000,015,360 | —- | C] () – C:\Windows\SysWow64\bdmjpeg.dll
[2011/09/19 02:07:32 | 000,058,368 | —- | C] () – C:\Windows\SysWow64\bdmpegv.dll
[2011/08/24 23:57:46 | 000,000,068 | —- | C] () – C:\Windows\SysWow64\ezdigsgn.dat
[2011/03/21 22:56:22 | 000,059,904 | —- | C] () – C:\Windows\SysWow64\OVDecode.dll
[2011/03/17 17:51:46 | 000,003,929 | —- | C] () – C:\Windows\SysWow64\atipblag.dat
[2011/03/04 00:04:58 | 000,007,736 | —- | C] () – C:\Windows\hpDSTRES.DLL

========== ZeroAccess Check ==========

[2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll – [2012/06/09 00:43:10 | 014,172,672 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2012/06/08 23:41:00 | 012,873,728 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll – [2009/07/13 20:40:51 | 000,909,312 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2010/11/20 22:24:25 | 000,606,208 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll – [2009/07/13 20:41:56 | 000,505,856 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2012/06/10 15:31:47 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\.Alteracraftlauncher
[2013/01/06 17:26:48 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\.minecraft
[2012/02/20 14:18:09 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\.Nitrous
[2012/12/05 17:07:00 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\.techniclauncher
[2012/01/20 19:23:47 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\acccore
[2012/09/19 15:34:21 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\Audacity
[2012/05/31 23:45:59 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\Auslogics
[2012/04/05 17:39:37 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\Avnex
[2012/01/22 10:51:00 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\BANDISOFT
[2012/01/19 17:51:43 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\Blio
[2012/07/09 11:46:39 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\Carbon
[2012/01/28 16:23:00 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\DAEMON Tools Lite
[2013/02/11 18:08:50 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\dclogs
[2012/03/12 16:34:18 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\DiskAid
[2012/07/07 22:41:10 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\DVDVideoSoft
[2012/03/03 16:45:53 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\Firefly Studios
[2012/02/18 12:33:47 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\IDT
[2012/05/04 22:57:30 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\IObit
[2012/03/18 20:32:29 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\Leawo
[2012/01/27 17:09:09 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\LolClient
[2012/06/19 22:55:01 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\LolClient2
[2012/03/10 21:36:09 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\LOVE
[2012/02/17 00:55:32 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\Mount&Blade; Warband
[2012/08/13 23:51:46 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\Naturalsoft
[2012/01/31 21:10:03 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\ooVoo Details
[2012/05/04 23:01:20 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\RIFT
[2012/02/26 17:08:16 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\RotMG.Production
[2012/04/05 17:34:51 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\Screaming Bee
[2013/01/03 23:25:21 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\SoftGrid Client
[2012/12/24 19:30:06 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\Spotify
[2012/01/19 16:26:00 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\Synaptics
[2012/03/18 20:33:31 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\tiger-k
[2012/01/19 16:55:05 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\TP
[2012/03/03 01:00:22 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\Trine2
[2012/07/28 17:33:49 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\TS3Client
[2012/01/22 16:16:04 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\ts3overlay
[2012/02/11 20:38:38 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\WebcamMax
[2012/05/15 22:08:35 | 000,000,000 | —D | M] – C:\Users\Kyle\AppData\Roaming\WildTangent

========== Purity Check ==========



========== Custom Scans ==========

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< %temp%\smtmp\*.* /s > >

< MD5 for: EXPLORER.ADML >
[2010/11/21 02:06:30 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ef5713984067904\Explorer.adml

< MD5 for: EXPLORER.ADMX >
[2009/06/10 15:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\winsxs\amd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_71af9b5b0a86e6b7\Explorer.admx

< MD5 for: EXPLORER.EXE >
[2011/08/24 23:25:55 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2011/08/24 23:25:55 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\explorer.exe
[2011/08/24 23:25:55 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/08/24 23:25:55 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 22:24:25 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011/08/24 23:25:55 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\SysWOW64\explorer.exe
[2011/08/24 23:25:55 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/11/20 22:24:11 | 002,872,320 | —- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2012/11/24 22:41:00 | 000,973,824 | -H– | M] (Compania Mea) MD5=D3B8DA8347D2BB192B89E4CE1D2BD8AC – C:\Documents and Settings\Kyle\AppData\Roaming\Microsoft\Windows\Templates\explorer.exe
[2012/11/24 22:41:00 | 000,973,824 | -H– | M] (Compania Mea) MD5=D3B8DA8347D2BB192B89E4CE1D2BD8AC – C:\Users\Kyle\AppData\Roaming\Microsoft\Windows\Templates\explorer.exe

< MD5 for: EXPLORER.EXE.MUI >
[2010/11/21 02:06:17 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\en-US\explorer.exe.mui
[2010/11/21 02:06:17 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_61e778c48d52d19b\explorer.exe.mui
[2010/11/21 02:06:19 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\SysWOW64\en-US\explorer.exe.mui
[2010/11/21 02:06:19 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3c2316c1b39396\explorer.exe.mui

< MD5 for: EXPLORER.ZIP >
[2009/06/03 21:15:06 | 000,020,394 | —- | M] () MD5=B469409C2B2A33C542190B720E11BD79 – C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Explorer.zip

< MD5 for: IEXPLORE.EXE >
[2012/06/02 06:47:54 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=004640AB259C1572EBD5FB0A32F63686 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20553_none_0dbfc836999db0ca\iexplore.exe
[2012/05/17 18:21:54 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=0129BB16161C2FD9A6B19111AB047198 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16446_none_1798a687b4d6030f\iexplore.exe
[2012/11/13 21:56:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=0D286C0FE561D1A7EB30E83A0FF305B2 – C:\Program Files (x86)\Internet Explorer\iexplore.exe
[2012/11/13 21:56:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=0D286C0FE561D1A7EB30E83A0FF305B2 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16457_none_178ed6e5b4dd3857\iexplore.exe
[2012/06/29 00:02:52 | 000,754,784 | —- | M] (Microsoft Corporation) MD5=1223ACBFC1093852DFF039E189599BBD – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16448_none_0d45fcc9807373c2\iexplore.exe
[2012/08/24 02:34:41 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=22CC6CDBA678790046693654C3B212E4 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16450_none_1787d4dfb4e386f6\iexplore.exe
[2012/05/17 17:59:46 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=268982F1FD671A077C6A2AF41E351436 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20551_none_181271f4ce004017\iexplore.exe
[2012/10/08 03:37:24 | 000,748,704 | —- | M] (Microsoft Corporation) MD5=270A1342BD5AF95CA25A586B4C2F1522 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16455_none_178cd651b4df05a9\iexplore.exe
[2012/08/24 06:23:44 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=2D53C5F71653EF94E7829846405D4ED2 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16450_none_0d332a8d8082c4fb\iexplore.exe
[2012/06/02 04:08:27 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=34B01BBD8F00B6B9C9248DC4F1E3CD01 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16447_none_1799a6d1b4d51c66\iexplore.exe
[2012/10/08 07:29:46 | 000,754,848 | —- | M] (Microsoft Corporation) MD5=49442BA6DCE4B4E3C1CB0AB193FE29AD – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16455_none_0d382bff807e43ae\iexplore.exe
[2012/05/17 21:51:05 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=4E99F42504A99D5024C2EFA015001937 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16446_none_0d43fc3580754114\iexplore.exe
[2012/08/24 05:49:07 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=5A150AFABB25BEA50CEDC8650A7B8A9E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20557_none_0dc3c95e999a1626\iexplore.exe
[2012/06/28 21:45:31 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=5D03518409F37D1483C98869D86E23FF – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20554_none_0dc0c880999cca21\iexplore.exe
[2012/06/02 07:52:21 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=610F6596921C4BAA8834ADBB9BE272EE – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16447_none_0d44fc7f80745a6b\iexplore.exe
[2012/08/24 02:49:25 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=62188720CE27B982B4285C03163C9FB3 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20557_none_181873b0cdfad821\iexplore.exe
[2010/11/20 22:24:43 | 000,695,056 | —- | M] (Microsoft Corporation) MD5=86257731DDB311FBC283534CC0091634 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1196a9003b674a92\iexplore.exe
[2012/01/13 02:49:50 | 000,748,336 | —- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_17a944edb4ca4c7a\iexplore.exe
[2012/06/28 20:00:47 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=93569D46D79F9756ED077156496AFE23 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16448_none_179aa71bb4d435bd\iexplore.exe
[2012/11/15 22:08:58 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=AC4957E154F750DF54F36ADC8E3E040D – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20565_none_0db6f8de99a3ff69\iexplore.exe
[2012/06/02 03:51:58 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=BE967C74B89577B78FB57C061E12B04C – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20553_none_18147288cdfe72c5\iexplore.exe
[2010/11/20 22:25:08 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1beb53526fc80c8d\iexplore.exe
[2012/10/08 03:22:05 | 000,748,704 | —- | M] (Microsoft Corporation) MD5=CECB15F834FC2B4B150449717ADE18DD – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20562_none_1808a252ce07755f\iexplore.exe
[2012/06/28 18:35:27 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=EB4105348272018D096FEB655CD1608C – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20554_none_181572d2cdfd8c1c\iexplore.exe
[2012/01/13 02:49:50 | 000,754,480 | —- | M] (Microsoft Corporation) MD5=F1424C1B9B1813BF825E45DF3790BC8A – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_0d549a9b80698a7f\iexplore.exe
[2012/10/08 06:09:10 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=F61714ABCF9BF0CEF0A6249AD4FD490B – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20562_none_0db3f80099a6b364\iexplore.exe
[2012/11/13 21:19:28 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=F691418EE9A6344AEB5C1B0518FBF8AE – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20565_none_180ba330ce04c164\iexplore.exe
[2012/05/17 20:37:57 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=F8B2D47ED17C1D087D14EC747E5AC57A – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20551_none_0dbdc7a2999f7e1c\iexplore.exe
[2012/11/14 02:11:18 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=FD0D2E1FAEBAE5031BE2EB8000D973F1 – C:\Program Files\Internet Explorer\iexplore.exe
[2012/11/14 02:11:18 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=FD0D2E1FAEBAE5031BE2EB8000D973F1 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16457_none_0d3a2c93807c765c\iexplore.exe

< MD5 for: IEXPLORE.EXE.MUI >
[2012/01/13 02:49:50 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2012/01/13 02:49:50 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_07013012b816cb66\iexplore.exe.mui
[2012/01/13 02:49:50 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui
[2012/01/13 02:49:50 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_1155da64ec778d61\iexplore.exe.mui
[2009/07/13 21:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_0b433e7773148b79\iexplore.exe.mui
[2009/07/13 21:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_1597e8c9a7754d74\iexplore.exe.mui

< MD5 for: SERVICES >
[2009/06/10 16:00:26 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services

< MD5 for: SERVICES.ASFX >
[2010/11/15 23:02:36 | 000,000,264 | —- | M] () MD5=0652D24D4E2799851A6DF1705E2BFFDA – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\uk_UA\Services\Services.asfx
[2010/11/15 23:02:26 | 000,000,225 | —- | M] () MD5=0A27F1D6595A69800A43CDE155B1E4A0 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Services\Services.asfx
[2010/11/15 23:02:34 | 000,000,245 | —- | M] () MD5=0B82FAB8FF5F988C5311DF1144A7D740 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ru_RU\Services\Services.asfx
[2010/11/15 23:02:26 | 000,000,225 | —- | M] () MD5=0E89BE53F56B22390CF61584B649CE01 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\Services\Services.asfx
[2010/11/15 23:02:26 | 000,000,228 | —- | M] () MD5=14DA84ECAF57B5ADA36B9093FF04CF32 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ja_JP\Services\Services.asfx
[2010/11/15 23:02:24 | 000,000,230 | —- | M] () MD5=2577B66F38E0DEA25F328DA4A0FED322 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\Services\Services.asfx
[2010/11/15 23:02:34 | 000,000,233 | —- | M] () MD5=3382FAB54FC906B0E40269D903A8D690 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\pl_PL\Services\Services.asfx
[2010/11/15 23:02:34 | 000,000,231 | —- | M] () MD5=5226417D3C8206000A8983BDC1243075 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ro_RO\Services\Services.asfx
[2010/11/15 23:02:34 | 000,000,230 | —- | M] () MD5=545E97C4F4CEA743A8D86B685EE2EDBB – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\hr_HR\Services\Services.asfx
[2010/11/15 23:02:26 | 000,000,226 | —- | M] () MD5=55EA57D90AE22BDF0132597EF0D7C9C7 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sv_SE\Services\Services.asfx
[2010/11/15 23:02:36 | 000,000,232 | —- | M] () MD5=611CB9CC21D2DDAD711690671F70EF39 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Services\Services.asfx
[2010/11/15 23:02:34 | 000,000,233 | —- | M] () MD5=846C265B751189E88B74F0155DB6B828 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sl_SI\Services\Services.asfx
[2010/11/15 23:02:36 | 000,000,231 | —- | M] () MD5=89BD37C4118540FD5AA8CDD0C24D6C0A – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK\Services\Services.asfx
[2010/11/15 23:02:26 | 000,000,231 | —- | M] () MD5=8C95C0528EA7049A1DFC7A7342461D75 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\Services\Services.asfx
[2010/11/15 23:02:30 | 000,000,225 | —- | M] () MD5=9287C7268CC0F37F1DDE18CEBB128685 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nb_NO\Services\Services.asfx
[2010/11/15 23:02:30 | 000,000,228 | —- | M] () MD5=95326C46AC2654AFF5C8543DFE22CCB3 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ko_KR\Services\Services.asfx
[2010/11/15 23:02:24 | 000,000,231 | —- | M] () MD5=9F2731666F5771CC5C1E4EEDC8FB8607 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\Services\Services.asfx
[2010/11/15 23:02:32 | 000,000,228 | —- | M] () MD5=A7B7A4CC1A717292474115CD3A4AC121 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Services\Services.asfx
[2010/11/15 23:02:34 | 000,000,232 | —- | M] () MD5=B6E63D87C73CED2D6B433C542C5C3965 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\hu_HU\Services\Services.asfx
[2010/11/15 23:02:38 | 000,000,231 | —- | M] () MD5=C85F2519DC6AECF93F67AA613A320136 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Services\Services.asfx
[2010/11/15 23:02:26 | 000,000,231 | —- | M] () MD5=CF94F061685A38BABE0BBD463191EDE7 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\it_IT\Services\Services.asfx
[2010/11/15 23:02:32 | 000,000,228 | —- | M] () MD5=E09422BE0C7636A7B63A1527C4C1372D – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_TW\Services\Services.asfx
[2010/11/15 23:02:32 | 000,000,229 | —- | M] () MD5=E57594DB9B9D78AB4B53D34CAFEB8497 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\cs_CZ\Services\Services.asfx
[2010/11/15 23:02:30 | 000,000,234 | —- | M] () MD5=EBD8D036504F2935675F5F432F076DBA – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\pt_BR\Services\Services.asfx
[2010/11/15 23:02:26 | 000,000,227 | —- | M] () MD5=F36865AB3B9813962B7EDBE66FA1C28A – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Services\Services.asfx
[2010/11/15 23:02:34 | 000,000,229 | —- | M] () MD5=F9824728970AC8199BABDC9CBA5E038C – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\tr_TR\Services\Services.asfx

< MD5 for: SERVICES.CFG >
[2010/11/15 23:02:22 | 000,032,633 | —- | M] () MD5=EA1C35DD541D60819D55482130BD585D – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\Services.cfg

< MD5 for: SERVICES.EXE >
[2009/07/13 20:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\SysNative\services.exe
[2009/07/13 20:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe
[2012/12/24 18:09:41 | 000,205,824 | RHS- | M] () MD5=F42A6FADD31BBD40B20061EA6FBE81A4 – C:\Documents and Settings\Kyle\msdata\services.exe
[2012/12/24 18:09:41 | 000,205,824 | RHS- | M] () MD5=F42A6FADD31BBD40B20061EA6FBE81A4 – C:\Users\Kyle\msdata\services.exe

< MD5 for: SERVICES.EXE.MUI >
[2010/11/21 02:06:16 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\Windows\SysNative\en-US\services.exe.mui
[2010/11/21 02:06:16 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui

< MD5 for: SERVICES.LNK >
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Application Data\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Start Menu\Programs\Administrative Tools\services.lnk
File not found Unable to obtain MD5 – C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
File not found Unable to obtain MD5 – C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

< MD5 for: SERVICES.MOF >
[2009/06/10 15:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\SysNative\wbem\services.mof
[2009/06/10 15:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof

< MD5 for: SERVICES.MSC >
[2010/11/21 02:06:14 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\en-US\services.msc
[2009/06/10 15:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\services.msc
[2010/11/21 02:06:17 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\en-US\services.msc
[2009/06/10 16:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\services.msc
[2010/11/21 02:06:14 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc
[2009/06/10 15:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc
[2010/11/21 02:06:17 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc
[2009/06/10 16:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc

< MD5 for: SERVICES.PNG >
[2013/01/03 20:37:18 | 000,000,653 | —- | M] () MD5=F4FFE88C8F84EE82D9EB026D42F449D4 – C:\Documents and Settings\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod\8.0.1_0\i\menu\services.png
[2013/01/03 20:37:18 | 000,000,653 | —- | M] () MD5=F4FFE88C8F84EE82D9EB026D42F449D4 – C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod\8.0.1_0\i\menu\services.png

< MD5 for: SERVICES.PTXML >
[2009/07/13 15:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\SysNative\wdi\perftrack\Services.ptxml
[2009/07/13 15:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml

< MD5 for: SERVICES.RDB >
[2011/01/17 18:52:22 | 000,237,568 | —- | M] () MD5=507957679AE4579C15D57FA741EA6FFA – C:\Program Files (x86)\OpenOffice.org 3\URE\misc\services.rdb
[2011/01/17 18:51:48 | 005,539,328 | —- | M] () MD5=F2B666905F7FDAA80C86A101A7DE62F9 – C:\Program Files (x86)\OpenOffice.org 3\Basis\program\services.rdb

< MD5 for: WINLOGON.ADML >
[2010/11/21 02:06:30 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f0f9032ef6930070\WinLogon.adml

< MD5 for: WINLOGON.ADMX >
[2009/06/10 16:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_d7024e6992f3424d\WinLogon.admx

< MD5 for: WINLOGON.EXE >
[2010/11/20 22:24:29 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\SysNative\winlogon.exe
[2010/11/20 22:24:29 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe

< MD5 for: WINLOGON.EXE.MUI >
[2010/11/21 02:06:14 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F – C:\Windows\SysNative\en-US\winlogon.exe.mui
[2010/11/21 02:06:14 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_291e96fa1ab5fc7b\winlogon.exe.mui

< MD5 for: WINLOGON.MFL >
[2010/11/21 02:06:15 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\SysNative\wbem\en-US\winlogon.mfl
[2010/11/21 02:06:15 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84afd4fd38ffd276\winlogon.mfl

< MD5 for: WINLOGON.MOF >
[2009/07/13 15:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\SysNative\wbem\winlogon.mof
[2009/07/13 15:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_dc2dbb778f98e40f\winlogon.mof

< %SYSTEMDRIVE%\*.* >
[2012/12/24 18:09:48 | 000,000,051 | -H– | M] () – C:\autorun.inf
[2010/11/20 22:23:51 | 000,383,786 | RHS- | M] () – C:\bootmgr
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007/11/07 07:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007/11/07 07:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2007/11/07 07:00:40 | 000,001,110 | —- | M] () – C:\globdata.ini
[2013/02/12 20:44:13 | 116,842,495 | -HS- | M] () – C:\hiberfil.sys
[2007/11/07 07:03:18 | 000,562,688 | —- | M] (Microsoft Corporation) – C:\install.exe
[2007/11/07 07:00:40 | 000,000,843 | —- | M] () – C:\install.ini
[2007/11/07 07:03:18 | 000,076,304 | —- | M] (Microsoft Corporation) – C:\install.res.1028.dll
[2007/11/07 07:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.1031.dll
[2007/11/07 07:03:18 | 000,091,152 | —- | M] (Microsoft Corporation) – C:\install.res.1033.dll
[2007/11/07 07:03:18 | 000,097,296 | —- | M] (Microsoft Corporation) – C:\install.res.1036.dll
[2007/11/07 07:03:18 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.1040.dll
[2007/11/07 07:03:18 | 000,081,424 | —- | M] (Microsoft Corporation) – C:\install.res.1041.dll
[2007/11/07 07:03:18 | 000,079,888 | —- | M] (Microsoft Corporation) – C:\install.res.1042.dll
[2007/11/07 07:03:18 | 000,075,792 | —- | M] (Microsoft Corporation) – C:\install.res.2052.dll
[2007/11/07 07:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.3082.dll
[2012/01/20 19:23:26 | 000,000,374 | -H– | M] () – C:\IPH.PH
[2013/02/12 20:44:17 | 1587,445,759 | -HS- | M] () – C:\pagefile.sys
[2012/12/24 18:09:41 | 000,205,824 | RHS- | M] () – C:\setup.exe
[2012/03/25 18:50:16 | 000,000,050 | —- | M] () – C:\user.js
[2007/11/07 07:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007/11/07 07:09:22 | 001,442,522 | —- | M] () – C:\VC_RED.cab
[2007/11/07 07:12:28 | 000,232,960 | —- | M] () – C:\VC_RED.MSI
[2012/07/22 13:22:42 | 000,003,136 | —- | M] () – C:\{0A418637-3F0F-4C0B-A30C-7F572AD3B06E}
[2012/07/05 19:29:50 | 000,002,960 | —- | M] () – C:\{3C6556E9-AB46-42E3-A10D-A1EB2F17C311}
[2012/07/05 19:24:51 | 000,002,896 | —- | M] () – C:\{B348269D-C50D-472B-BCE1-92AD70A919AD}
[2012/07/05 19:28:12 | 000,002,448 | —- | M] () – C:\{B85F549C-1D1F-4710-AF6D-B453BC481262}
[2012/07/22 15:24:45 | 000,002,856 | —- | M] () – C:\{C6463B35-6A12-436E-AEDE-A3BBC7C35BB3}

< %systemroot%\Fonts\*.com >
[2009/07/14 00:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 00:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 00:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 00:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 15:49:50 | 000,000,065 | -H– | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2012/03/08 17:37:20 | 000,302,448 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/13 23:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2009/07/14 00:01:14 | 000,000,442 | -HS- | M] () – C:\ProgramData\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2012/01/19 16:26:17 | 000,000,221 | -HS- | M] () – C:\Users\Kyle\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2013/02/11 22:08:11 | 086,137,416 | —- | M] (Microsoft Corporation) – C:\Users\Kyle\Desktop\msert.exe
[2013/02/11 22:31:42 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\Kyle\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Alternate Data Streams ==========

@Alternate Data Stream - 139 bytes -> C:\ProgramData\Temp:07BF512B

< End of report >

Here is the Extra.txt

OTL Extras logfile created on: 12/02/2013 20:50:10 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Kyle\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

5.48 Gb Total Physical Memory | 3.47 Gb Available Physical Memory | 63.35% Memory free
10.96 Gb Paging File | 8.76 Gb Available in Paging File | 79.98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 578.61 Gb Total Space | 369.25 Gb Free Space | 63.82% Space Free | Partition Type: NTFS
Drive D: | 17.27 Gb Total Space | 1.89 Gb Free Space | 10.93% Space Free | Partition Type: NTFS

Computer Name: KYLE-HP | User Name: Kyle | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.inf [@ = inffile] – %SystemRoot%\system32\NOTEPAD.EXE %1
.ini [@ = inifile] – %SystemRoot%\system32\NOTEPAD.EXE %1
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
.txt [@ = txtfile] – %SystemRoot%\system32\NOTEPAD.EXE %1

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile – %SystemRoot%\System32\NOTEPAD.EXE %1
batfile [open] – "%1" %*
batfile [print] – %SystemRoot%\System32\NOTEPAD.EXE /p %1
cmdfile – %SystemRoot%\System32\NOTEPAD.EXE %1
cmdfile [open] – "%1" %*
cmdfile [print] – %SystemRoot%\System32\NOTEPAD.EXE /p %1
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
inffile [open] – %SystemRoot%\system32\NOTEPAD.EXE %1
inffile [print] – %SystemRoot%\system32\NOTEPAD.EXE /p %1
inifile [open] – %SystemRoot%\system32\NOTEPAD.EXE %1
inifile [print] – %SystemRoot%\system32\NOTEPAD.EXE /p %1
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile – C:\Windows\System32\Notepad.exe %1
jsfile [print] – C:\Windows\System32\Notepad.exe /p %1
jsefile – C:\Windows\System32\Notepad.exe %1
jsefile [print] – C:\Windows\System32\Notepad.exe /p %1
piffile [open] – "%1" %*
regfile – %SystemRoot%\system32\notepad.exe "%1"
regfile [merge] – Reg Error: Key error.
regfile [print] – %SystemRoot%\system32\notepad.exe /p "%1"
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
txtfile [open] – %SystemRoot%\system32\NOTEPAD.EXE %1
txtfile [print] – %SystemRoot%\system32\NOTEPAD.EXE /p %1
txtfile [printto] – %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4"
vbefile – "%SystemRoot%\System32\Notepad.exe" %1
vbefile [print] – "%SystemRoot%\System32\Notepad.exe" /p %1
vbsfile – "%SystemRoot%\System32\Notepad.exe" %1
vbsfile [print] – "%SystemRoot%\System32\Notepad.exe" /p %1
wsffile – "%SystemRoot%\System32\Notepad.exe" %1
wsffile [print] – "%SystemRoot%\System32\Notepad.exe" /p %1
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0146CC43-2B64-403E-8CBE-B7B512E28DFB}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{01A70400-36DD-47B7-8C03-2C5006553E9D}" = lport=2869 | protocol=6 | dir=in | app=system |
"{0308D765-1351-4A9E-8B99-55AE10EB2F42}" = lport=3390 | protocol=6 | dir=in | app=system |
"{0729DBC3-D03B-43F4-99B6-4397C147CD21}" = lport=137 | protocol=17 | dir=in | app=system |
"{0BAE2685-E7B5-49DB-A710-57CF09F9460D}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{0E6B29DC-D4C8-470D-BCA3-CBED95FAAF24}" = lport=10244 | protocol=6 | dir=in | app=system |
"{15EEA08C-0C6C-456C-AD87-02CF88742C2C}" = lport=37674 | protocol=6 | dir=in | name=oovoo tcp port 37674 |
"{181E4CC7-F766-40A3-89D8-D73000ED77C7}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{197A0D8A-7AC1-4307-9011-07D832D29907}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{206B4AC7-6C58-46EA-8E92-C8FF5CD0BE0C}" = rport=137 | protocol=17 | dir=out | app=system |
"{25218D65-4079-454B-975C-C74634C76823}" = rport=445 | protocol=6 | dir=out | app=system |
"{255F1E8B-D442-4E8F-B2F7-F417A02A92E8}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{27035E4E-2000-430D-A0CA-EB7DD808B4F2}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{2BC6DA4C-9A20-4C90-AE0D-DB3B395B2B9E}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{2DDEDF9E-824A-4544-BC61-7D4395D386C3}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{30A1C47D-0734-4929-A2D8-B68C7223B5F0}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe |
"{35EBA09C-3042-43D1-806F-12D9DA37437D}" = lport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{363E9357-9571-484B-AE6B-F69A5FD4D540}" = lport=2869 | protocol=6 | dir=in | app=system |
"{3B2374A3-BFA3-4678-9ADD-766ADD2AB2D5}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{464B0D38-F65D-4F9B-B757-2362FE738DBD}" = lport=37674 | protocol=17 | dir=in | name=oovoo udp port 37674 |
"{5023F7EC-FBC1-4D62-940A-5625CDEE814F}" = lport=443 | protocol=6 | dir=in | name=oovoo tcp port 443 |
"{54A235D4-7EF6-4CE1-B6D4-D5918F7D35B0}" = lport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{587BFA1E-FA5D-4DD2-9CD5-3D3DBFB8594C}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |
"{59EA7C97-CA17-427B-A7F4-97500F5BC19D}" = lport=2869 | protocol=6 | dir=in | app=system |
"{61237A42-EDC3-407F-8640-0393627AA652}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{771B6F74-CA35-46D5-BA14-003CAF665773}" = lport=37675 | protocol=17 | dir=in | name=oovoo udp port 37675 |
"{7C7D10A8-0CB6-45FE-81F0-C5187FC3CDD2}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{7E7D31C9-B95D-4657-9ADB-F8EE10A2860C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{7EF7114D-14F1-4D56-B563-A60D2C51BD3A}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{8756CBC1-4D97-4CF7-B752-F42D3A964DF9}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{892F236D-1DEE-449F-A3F8-6A577FE8D71B}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{8B5723B6-57E2-4B31-BEB9-F580E284DF5A}" = lport=139 | protocol=6 | dir=in | app=system |
"{8E2B184A-03BF-4E5B-8487-A278601F0360}" = lport=443 | protocol=17 | dir=in | name=oovoo udp port 443 |
"{94D6F703-4DD7-4229-A80A-753153836D2C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9576DB08-8CE7-42E9-B1C9-6BFD203E6031}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{98705997-C853-42FA-9E56-829CF4CDE995}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{A4831167-C276-424F-804C-A79B8C2290FC}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{A597849A-5DE4-4CA8-8284-3AB89BFC7062}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A5DDCBDD-DA78-468C-8D23-1073E1DE8FDA}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A90EFBA8-AA55-4AC2-8209-564C22806D11}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{B2249A53-5119-4C11-A06D-315D8B2FEA4F}" = lport=445 | protocol=6 | dir=in | app=system |
"{C394F0AC-5251-4A0F-8795-6767D715E03B}" = lport=10244 | protocol=6 | dir=in | app=system |
"{C49A0270-35A4-4703-B631-6F7CB2ED7931}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{C5A22B89-F70B-485B-83B8-29787D54D1D0}" = lport=138 | protocol=17 | dir=in | app=system |
"{C7630F7C-3CCF-46B9-99EC-189DF0502B66}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{CD53849E-574B-436C-98C9-1E01357106D2}" = lport=10243 | protocol=6 | dir=in | app=system |
"{CDCF6F4C-687A-4F16-9B2F-AF7F92BC67A0}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{D6FE6587-BDA4-439B-A87E-62BFBAB4AF61}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{E0F36CDF-1551-4E83-B9CF-6460AECE0C00}" = rport=139 | protocol=6 | dir=out | app=system |
"{F02ABFFC-72DE-4092-92FE-494ED967A816}" = rport=138 | protocol=17 | dir=out | app=system |
"{F2E9D819-D2B3-4AD3-A744-A860929E248A}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{FAD0122B-5D9B-40FB-AFAA-D6E636C2FA43}" = lport=3390 | protocol=6 | dir=in | app=system |
"{FBEDCA1B-2672-43DF-89FC-A18B802F3EB6}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{FE201346-361C-490C-9D74-184A35AA4795}" = rport=10243 | protocol=6 | dir=out | app=system |
"{FE259760-0783-403C-B9FD-8F91AD053BAE}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{FEA743C2-440B-446F-AEC3-30ABD324E3D7}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01624E40-8E00-47AC-B488-76E17D8F4BF5}" = dir=in | app=c:\brickforce\bflauncher.exe |
"{029D3B98-6175-4C49-8865-0284D7ABFC05}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{02A7D4F9-6D2F-4EB4-B4D3-328E16164771}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{03E2151D-D8C7-43D7-9BB6-CE7DDEF96560}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{08F1C1AF-57C8-4F0F-B9CB-F04B8442D1C1}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{09E9DE14-9710-45DB-90C0-E7E9907F7C28}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{0C7BBE4A-9A39-47DE-9267-C317A3B19B63}" = protocol=17 | dir=in | app=c:\users\kyle\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{0D32DDB7-FF97-4B9E-9C4D-747EDD56CA05}" = protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{0F4E5DCD-7403-4613-98DE-7AE2E9082BFA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{0FDC8D71-FFE6-4271-8320-66BE745B9C18}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{11E3B2E4-523F-4C18-AA87-3C2482389218}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{1921B1BB-3104-45B2-B296-85C51FFDBB17}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{19630712-51B3-4D4A-8F61-A6967E36F97F}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{1BA7FD2D-75F3-4FC6-90A7-8B5672983615}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\morrowind\morrowind launcher.exe |
"{1BAD75A1-007D-4C79-B194-9AD7785F9B33}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{1C065A84-FD74-4D41-A173-DB8E2D8B62F4}" = protocol=6 | dir=in | app=c:\program files (x86)\hewlett-packard\mediasmart\roxionow\rnow.exe |
"{1D91FAB9-EF2E-471E-812D-BD88776FCD14}" = protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{1DB05548-4FC0-4F80-9F6A-D76224ABD637}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{1DC7CAC7-AA6C-452C-A637-4FB37B2CA415}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{2055EF70-97C0-4FC4-A200-929A697BCD1A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe |
"{239F096E-6FA2-4C99-8E29-07B9DAF2C2ED}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{259F1CCB-3C95-4D58-BAB4-3EBC144C1CE3}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{2A658FA4-0EFF-471F-8426-C5061CB1D3AD}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\oblivion\oblivionlauncher.exe |
"{2E7E7840-7CEB-4DAA-AA21-7555184D0DBA}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{30089AFA-E045-4614-9E2A-93AFECB09785}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe |
"{33380CC4-2962-4BBF-9385-BEA0CFB82F0D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe |
"{33F92030-0E68-4B22-A30C-125112FF72DD}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\skyrim\skyrimlauncher.exe |
"{34355B8C-BC33-44A4-87EF-CA9A8990A494}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{3470E70F-41D8-481C-A183-2616A5AD274E}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{34CE99C4-676E-42E2-A378-738828D70CDA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{363ACE0E-E57E-45C8-B95E-A1C151A0D817}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{36D77E5F-547F-4E75-ACB9-677431E7FB60}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{4094966E-0D5B-4A06-8370-594EC12FAE58}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe |
"{42089889-1B18-4644-9883-4E2560102A51}" = dir=in | app=c:\program files (x86)\easybits for kids\ezdesktop.exe |
"{42752620-81E0-4029-B0A8-F90872855609}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\realm of the mad god\realm of the mad god.exe |
"{42B70137-75F2-4117-A9CC-6F1125AB8C9A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{42FD7CF6-3ECD-4950-8B7C-482B5011D602}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{46021D4C-8461-4C26-8EFA-5A48425C7ACC}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{463D206D-8550-4D55-8C00-A90C0DC6068A}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{486888C9-C5A9-4AEF-A072-6D7F8F39FD6C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 test\dota.exe |
"{4D81560C-05AB-40FE-BEEF-5A92EDBDB6CD}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{4F6EEDA4-7E7C-44C0-853C-9E551D9E18F1}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{5323371F-D89F-41E0-8B02-0A541B641769}" = protocol=17 | dir=in | app=c:\program files (x86)\roxio\roxionow player\rnowshell.exe |
"{5370FE70-4398-4407-970F-6B53FE2C4403}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{56E5E541-1D45-4FEC-9B22-8FBF52D3C4B5}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcrmgr.exe |
"{5911910F-6111-4BB8-843C-F9BB1D3A1B09}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\oblivion\oblivionlauncher.exe |
"{6169D34A-04B3-45E7-BF26-DC4DE3BF730D}" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"{628B7E93-084A-4F46-A1CF-01C8C5F32E78}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mountblade warband\mb_warband.exe |
"{64646465-80F1-4A27-BF96-704F5B2774F5}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{64A82DD8-BEF0-4BEB-B349-18190E937EE1}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\midgetman96\the ship\ship.exe |
"{65323045-BA46-4B7A-8620-9A4930EB18D5}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{67CCF477-7B17-4E00-86D9-B59730E4D71D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\realm of the mad god\realm of the mad god.exe |
"{720B5C23-D006-4732-A870-87471C156E70}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{741B1B86-B6BF-448C-A666-5E8D8DD611C9}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tribes\binaries\win32\hirezbridge.exe |
"{7810FA61-DAA5-4670-9FBA-386BCD03D139}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\supermnc\binaries\win32\supermncgameclient.exe |
"{7975C64F-833D-4CAB-A12F-D60462CD362E}" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"{7A448A9A-B564-42A4-9587-C751C5E32796}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{7E9FEF92-57CB-4DC8-9D28-3173E1A38EFB}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{81AF4716-54EF-445B-BBD5-AAFF903E7A5F}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{84C33E06-0BC4-497F-95B1-BC7C85B73910}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{851CD54B-B6FA-4282-B4B7-139DEDD10CD1}" = protocol=17 | dir=in | app=c:\program files\ventrilo\ventrilo.exe |
"{87E5E041-6A5F-46EB-93B8-73F6ECDE104C}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{886F9E6F-25F7-4BEB-BB9F-D3E808E77567}" = protocol=58 | dir=in | app=system |
"{89CB67F2-D729-4BD3-9808-9B04A64327D7}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{8A6D4E86-0AF9-4E39-B100-C29ECBB76340}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{8D92D611-BD3A-439D-95A8-EE22ACE88354}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 test\dota.exe |
"{8DCC24A3-775D-49B2-8989-DF60925FB98B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{8DE6C34B-D3E1-4E5F-AB30-058BE95E84FF}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{8FB23D75-976A-4A87-896F-48CB93108EA0}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mountblade warband\mb_warband.exe |
"{90F0BA98-1DAE-4CE4-8F50-3650D1F4AD56}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe |
"{93B32C55-8110-4B5A-AD19-FC5999378F7E}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{94B7C4B9-0B3C-4BCA-8C7F-78C00E25314B}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{9ACAA7F9-E28C-4346-A659-63AC934C17E8}" = protocol=6 | dir=in | app=c:\users\kyle\appdata\local\teamspeak 3 client\ts3client_win64.exe |
"{9D86E627-8188-4F3C-88F1-F9DEA41AED0C}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{A1220CB3-AF11-4735-B52B-75E645508185}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{A5156285-A7FB-4BDA-B548-FC108AB0E1E3}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{AF99BE54-D437-445C-AE7D-343D23196D33}" = protocol=17 | dir=in | app=c:\program files (x86)\hewlett-packard\mediasmart\roxionow\rnow.exe |
"{B2C00E6E-9F8F-4C68-9BC1-B8F0DCC17C00}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\portal 2\portal2.exe |
"{B3F12409-8624-409B-B4E2-F409EA8C65F3}" = protocol=6 | dir=in | app=c:\program files (x86)\aim\aim.exe |
"{B69B6610-0E60-4940-94CA-4C93E7D004A3}" = protocol=6 | dir=in | app=c:\program files\ventrilo\ventrilo.exe |
"{BC6DBF4B-50EA-450B-AC5D-5DDF56F08659}" = protocol=6 | dir=in | app=c:\users\kyle\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{BCB08B3E-80C1-412E-B7B4-891781305B34}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{BD315224-C84D-4855-88A5-4BAC980565EE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe |
"{C28A9A23-E160-4C91-BC66-AF0BCFDB8172}" = protocol=17 | dir=in | app=c:\program files (x86)\logmein hamachi\hamachi-2-ui.exe |
"{C787D64F-733B-4F6D-9FB5-297D2E39793F}" = protocol=6 | dir=out | app=system |
"{C8856991-31DB-4A2C-B0C1-AEDFB83DDA84}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{C9E7107F-5D7A-4B92-A1B7-7CAB94AA4FF6}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{CCA5AA6B-FC2E-4BFF-AF65-2A595797B532}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{CFE2C91F-AC99-4DBA-9F8E-DE84E3B56730}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tribes\binaries\win32\hirezbridge.exe |
"{D6E64025-407F-4BBA-A36A-8B13230175D4}" = dir=in | app=c:\windows\system32\ezsharedsvchost.exe |
"{D7D2630F-9F19-46F1-B70D-9C5923E85607}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\morrowind\morrowind launcher.exe |
"{E0CCFCA7-6D22-4C2A-A2E6-D47D7A33C000}" = protocol=6 | dir=in | app=c:\program files (x86)\roxio\roxionow player\rnowshell.exe |
"{E1123ECE-7972-4912-A4EA-1A867A8555C9}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"{E1222123-DE60-4233-B537-716D80447DC4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\supermnc\binaries\win32\supermncgameclient.exe |
"{E6FAEF2F-C5DB-49B8-85E8-9B63FB73BF3A}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcrmgr.exe |
"{E720A571-95A3-4719-A95A-91A9F69DD014}" = protocol=17 | dir=in | app=c:\program files (x86)\aim\aim.exe |
"{E8241024-FDF6-42AB-898A-643C60337F47}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"{ECE75B4A-90BF-4CCE-9FDB-566F8F0415EA}" = protocol=6 | dir=in | app=c:\program files (x86)\logmein hamachi\hamachi-2-ui.exe |
"{F26C7772-A16B-46B8-B1C3-63AD7F673234}" = protocol=17 | dir=in | app=c:\users\kyle\appdata\local\teamspeak 3 client\ts3client_win64.exe |
"{F2C535C8-272A-42DB-B679-0F0504CBDE2E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{F324BCF7-7C9B-48F0-ADEF-B72A6B0A3078}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\midgetman96\the ship\ship.exe |
"{FAC49C08-FEEB-46E1-B30C-4E2B4F4C3013}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{FB82E05D-A259-4D2A-B849-DB3FA77C019D}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{FC162D53-987C-47C4-9365-A8A9AC484967}" = dir=in | app=c:\brickforce\brickforce.exe |
"{FF173352-668E-456B-9109-AE083D94C502}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{FF96C392-A22E-4048-A3A8-60599EF54C1B}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"TCP Query User{877CD130-B4C8-454B-83CA-6BC714810D51}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{34B74D9D-D01A-471F-B365-3FDE644E5799}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{054EF02F-95D8-48F4-9EEB-2F9CE3072ED8}" = AuthenTec TrueAPI
"{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp 1.0 RC3
"{0E5D76AD-A3FB-48D5-8400-8903B10317D3}" = iTunes
"{1111706F-666A-4037-7777-203648764D10}" = JavaFX 2.0.3 (64-bit)
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{2222706F-666A-4037-7777-203648764D10}" = JavaFX 2.0.3 SDK (64-bit)
"{26A24AE4-039D-4CA4-87B4-2F86416024FF}" = Java™ 6 Update 24 (64-bit)
"{26A24AE4-039D-4CA4-87B4-2F86417003FF}" = Java™ 7 Update 3 (64-bit)
"{26AF7BC7-DB35-B7C5-3169-29BC62835C48}" = AMD Fuel
"{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}" = HP Client Services
"{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}" = Broadcom 2070 Bluetooth 3.0
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{64A3A4F4-B792-11D6-A78A-00B0D0170030}" = Java™ SE Development Kit 7 Update 3 (64-bit)
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{71F13BA8-96D0-F281-6473-196A5842C6CF}" = ccc-utility64
"{7C54D017-21BB-43AE-9746-33E78AF4A425}" = Validity WBF DDK
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-006D-0409-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{942836D4-5395-652B-F1E8-A7C5B039910C}" = ATI Catalyst Install Manager
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{B820C985-D9F1-45B5-A7F5-0C5863CBEA04}_is1" = Privacy SafeGuard version 1.0
"{CB1A2FE6-2BDF-DECC-C91B-4E5FFD59C5D6}" = WMV9/VC-1 Video Playback
"{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto
"{D70884EA-E2CE-4539-91DB-4766CC1E5F5F}" = Apple Mobile Device Support
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{DFB497E0-CE3F-40FC-9596-FC7A48775DE4}" = HP 3D DriveGuard
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}" = Ventrilo Client for Windows x64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Broadcom 802.11 Wireless LAN Adapter" = Broadcom 802.11 Wireless LAN Adapter
"CCleaner" = CCleaner
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"SynTPDeinstKey" = Synaptics TouchPad Driver
"WinRAR archiver" = WinRAR 4.10 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00A42832-B21A-4296-B5F4-D296D0BC4A3E}" = HP Quick Launch
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D1B9D71-7EB6-70DA-DB23-E14F59A14E1D}" = AMD VISION Engine Control Center
"{0DC33570-D9E6-9189-7143-612F34DC317B}" = CCC Help Danish
"{0EDEB615-1A60-425E-8306-0E10519C7B55}" = RoxioNow Player
"{0F69006A-CD2F-4C12-A786-C659C8F98423}" = Catalyst Control Center - Branding
"{106B4413-ACBB-4CDE-8707-587DB9BD77EC}" = LogMeIn Hamachi
"{120262A6-7A4B-4889-AE85-F5E5688D3683}" = HP MovieStore
"{15822027-43D3-C69F-40EF-2AF83AA781AA}" = CCC Help English
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1D04A14D-6C97-19C1-CA9D-FDDE5EAE1026}" = CCC Help Chinese Standard
"{1DFA0C99-6E2E-46F4-B242-51C7CF41DDE5}" = HP Software Framework
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{210A03F5-B2ED-4947-B27E-516F50CBB292}" = HP Setup
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java™ 6 Update 31
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{2B37E43D-10AB-9D24-7234-31929A3A7D11}" = CCC Help German
"{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}" = Microsoft XNA Framework Redistributable 4.0
"{33286280-8617-11E1-8FF6-B8AC6F97B88E}" = Google Earth Plug-in
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33530062-0419-71CE-3BD3-13D7D5E4C7DE}" = CCC Help French
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{388A15E4-7507-CD40-4DBA-F78B4BBEB56E}" = CCC Help Japanese
"{3E171899-0175-47CC-84C4-562ACDD4C021}" = OpenOffice.org 3.3
"{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX
"{448B78CF-4A52-191D-1436-54D039B382DB}" = CCC Help Spanish
"{47FA2C44-D148-4DBC-AF60-B91934AA4842}" = Adobe AIR
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{521FA973-C4C9-249D-5CF6-0A6F7B18F7DC}" = CCC Help Greek
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5ED3BAF3-DA06-038D-F21E-AB35404626D4}" = CCC Help Dutch
"{60C44315-A107-D3F6-B868-52AC0481ED6B}" = CCC Help Finnish
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{6522241B-09FE-B16D-0E23-9485424507EB}" = CCC Help Korean
"{66D6F3BD-CA23-41A4-9FA3-96B26B32528C}" = Command & Conquer The First Decade
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A061262-C2B2-78E2-9BF8-32D3BDD68C43}" = Catalyst Control Center InstallProxy
"{6B075E9F-4D23-0883-F66C-C698E949CD90}" = Catalyst Control Center Graphics Previews Common
"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.2.1.1
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{794A3AB9-DB12-1115-33B2-29C5DDD1DCD4}" = CCC Help Chinese Traditional
"{795AADBF-58C2-42D0-B779-E730702A247E}" = HP Connection Manager
"{7D42B43A-EA63-4234-B00A-757C15B2B185}_is1" = Leawo AVI Converter version 5.0.0.0
"{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1" = iExplorer [removed]
"{803E2C5C-E39B-BEBA-4046-6C0CF7695DA4}" = CCC Help Hungarian
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{9008D736-35CA-40DB-A2BE-5F32D954E5AA}" = HP MovieStore
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{7C5B1ECD-FE93-4FB2-A51A-06451BA49969}" =
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUS_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0409-1000-0000000FF1CE}_Office14.PROPLUS_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUS_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0116-0409-1000-0000000FF1CE}_Office14.PROPLUS_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140011-0066-0409-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - English
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{9325A80A-C2B4-141E-952E-30589770A79B}" = CCC Help Turkish
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A7393DB5-6CAB-70A7-4A5E-C96AF518858A}" = Catalyst Control Center Localization All
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X MUI
"{AE856388-AFAD-4753-81DF-D96B19D0A17C}" = HP Setup Manager
"{AEDA8713-5521-4600-9AC2-81674A9EDC4F}" = Blio
"{BCFAA37D-A6DB-43BF-A351-43F183E52D07}" = HP SimplePass 2011
"{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}" = Energy Star Digital Logo
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{C1C43BC8-2460-4E01-9628-332E04523BDC}" = HP Documentation
"{C1C82DC9-1547-4038-8F0A-C069F0B7F2ED}" = AMD System Monitor
"{C3579810-5AC8-545D-089D-6735792490B5}" = CCC Help Thai
"{C5E7BF75-007E-44AD-8962-627ED44CB63B}" = NaturalReaderFree
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C915103C-F9E5-8989-233C-367DCFB07652}" = CCC Help Italian
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{CCE825DB-347A-4004-A186-5F4A6FDD8547}" = Apple Application Support
"{CE8EF688-BD0E-29E2-3472-E23CC6AB0C98}" = CCC Help Polish
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D811186E-06BC-F7D3-E10B-4C7450F88611}" = CCC Help Swedish
"{D952C4F9-2488-3723-84BE-1BFA907DCAC9}" = Google Talk Plugin
"{DBCD5E64-7379-4648-9444-8A6558DCB614}" = Recovery Manager
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E45832B8-C3E6-C26B-A038-4599DCAC1F17}" = CCC Help Norwegian
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{ED1BD69A-07E3-418C-91F1-D856582581BF}" = HP On Screen Display
"{EE202411-2C26-49E8-9784-1BC1DBF7DE96}" = HP Support Assistant
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F023440E-6D03-1AB2-1414-27A62074556C}" = CCC Help Portuguese
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F761359C-9CED-45AE-9A51-9D6605CD55C4}" = Evernote v. 4.2.2
"{F7A9EFFB-F905-FA4D-A431-06B1E0A5EE5A}" = CCC Help Czech
"{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}" = ooVoo
"{FD8966E8-8227-9180-51D2-F1C75D3222B8}" = CCC Help Russian
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Advanced SystemCare 5_is1" = Advanced SystemCare 5
"AIM_7" = AIM 7
"Audacity_is1" = Audacity 2.0
"BandiMPEG1" = Bandisoft MPEG-1 Decoder
"BrickForce" = BrickForce 1.4.40
"EasyBits Magic Desktop" = Magic Desktop
"ffdshow_is1" = ffdshow [rev 3154] [2009-12-09]
"Fraps" = Fraps (remove only)
"Game Booster_is1" = Game Booster 3
"hon" = Heroes of Newerth
"HP DVB-T TV Tuner" = HP DVB-T TV Tuner 8.0.64.43
"LogMeIn Hamachi" = LogMeIn Hamachi
"Mozilla Firefox 9.0.1 (x86 en-US)" = Mozilla Firefox 9.0.1 (x86 en-US)
"NIS" = Norton Internet Security
"Oblivion mod manager_is1" = Oblivion mod manager 1.1.12
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"PunkBusterSvc" = PunkBuster Services
"Smart Defrag 2_is1" = Smart Defrag 2
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"Steam App 104700" = Super Monday Night Combat
"Steam App 105600" = Terraria
"Steam App 17080" = Tribes: Ascend
"Steam App 200210" = Realm of the Mad God
"Steam App 205790" = Dota 2 Test
"Steam App 22320" = The Elder Scrolls III: Morrowind
"Steam App 22330" = The Elder Scrolls IV: Oblivion
"Steam App 2400" = The Ship
"Steam App 2420" = The Ship Single Player
"Steam App 2430" = The Ship Tutorial
"Steam App 440" = Team Fortress 2
"Steam App 48700" = Mount & Blade: Warband
"Steam App 570" = Dota 2
"Steam App 620" = Portal 2
"Steam App 644" = Portal 2 Publishing Tool
"Steam App 65800" = Dungeon Defenders
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Steam App 91600" = Sanctum
"Unofficial Oblivion Patch_is1" = Unofficial Oblivion Patch v3.2.0
"WinLiveSuite" = Windows Live Essentials

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"Spotify" = Spotify
"TeamSpeak 3 Client" = TeamSpeak 3 Client

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 18/08/2012 01:43:13 | Computer Name = Kyle-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

Error - 18/08/2012 01:43:13 | Computer Name = Kyle-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

Error - 18/08/2012 01:43:13 | Computer Name = Kyle-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

Error - 18/08/2012 01:43:13 | Computer Name = Kyle-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

Error - 18/08/2012 01:43:13 | Computer Name = Kyle-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

Error - 18/08/2012 12:47:24 | Computer Name = Kyle-HP | Source = WinMgmt | ID = 10
Description =

Error - 18/08/2012 15:11:36 | Computer Name = Kyle-HP | Source = Customer Experience Improvement Program | ID = 1008
Description =

Error - 18/08/2012 16:52:14 | Computer Name = Kyle-HP | Source = Customer Experience Improvement Program | ID = 1008
Description =

Error - 18/08/2012 19:30:28 | Computer Name = Kyle-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

Error - 18/08/2012 19:30:28 | Computer Name = Kyle-HP | Source = ATIeRecord | ID = 16398
Description = ATI EEU failed to post message to CCC

[ Hewlett-Packard Events ]
Error - 18/05/2012 13:27:09 | Computer Name = Kyle-HP | Source = HPSF.exe | ID = 4000
Description =

Error - 28/05/2012 02:00:11 | Computer Name = Kyle-HP | Source = HPSF.exe | ID = 2000
Description = HP Error ID: -2147467261 at HP.SupportAssistant.Common.CustomerExperience.HPSASession.AddNavigationPropertie
s()
Message:
Object reference not set to an instance of an object. StackTrace: at HP.SupportAssistant.Common.CustomerExperience.HPSASession.AddNavigationPropertie
s()
Source:
HP.SupportAssistant.Common Name: HPSF.exe Version: 06.00.01.01 Path: C:\Program Files
(x86)\Hewlett-Packard\HP Support Framework\HPSF.exe Format: en-US RAM: 5609 Ram Utilization:
30 TargetSite: HP.SupportFramework.HPSFReporting._Property[] AddNavigationProperties()


Error - 20/07/2012 12:32:31 | Computer Name = Kyle-HP | Source = HPSF.exe | ID = 4000
Description =

Error - 17/08/2012 12:44:42 | Computer Name = Kyle-HP | Source = hpsa_service.exe | ID = 2000
Description = HP Error ID: -2146233088 at HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateDetail(String
category) at HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetectCore()

at HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
Boolean localScan) Message: Failed to perform update. StackTrace: at HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateDetail(String
category) at HP.ActiveCheckLocalMode.SessionManager.ActiveCheckManager.UpdateAndDetectCore()

at HP.SupportAssistant.Service.ACLM.ActiveCheck.LaunchActiveCheck(Boolean singleScan,
Boolean localScan) Source: HP.ActiveCheckLocalMode.SessionManager InnerException.Message:
Object '/4084320d_7ce3_49e3_ab8d_c00d8987f8f2/rmklblzj93p98q88oyukewno_5.rem' has
been disconnected or does not exist at the server. Name: hpsa_service.exe Version:
06.00.01.01 Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
Format:
en-US RAM: 5609 Ram Utilization: 30 TargetSite: Void UpdateDetail(System.String)

Error - 19/09/2012 16:39:12 | Computer Name = Kyle-HP | Source = HPSF.exe | ID = 4000
Description =

Error - 19/09/2012 17:09:53 | Computer Name = Kyle-HP | Source = HPSF.exe | ID = 4000
Description =

Error - 09/12/2012 00:12:33 | Computer Name = Kyle-HP | Source = HPSF.exe | ID = 2000
Description = HP Error ID: -2147467261 at HP.SupportFramework.Utilities.CustomerExperience.HPSASession.AddNavigationProper
ties()
Message:
Object reference not set to an instance of an object. StackTrace: at HP.SupportFramework.Utilities.CustomerExperience.HPSASession.AddNavigationProper
ties()
Source:
HP.SupportFramework.Utilities Name: HPSF.exe Version: 07.00.01.01 Path: C:\Program
Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe Format: en-US RAM: 5609
Ram
Utilization: 40 TargetSite: HP.SupportFramework.HPSFReporting._Property[] AddNavigationProperties()


Error - 09/12/2012 00:13:37 | Computer Name = Kyle-HP | Source = HPSF.exe | ID = 2000
Description = HP Error ID: -2147467261 at HP.SupportFramework.Utilities.CustomerExperience.HPSASession.AddNavigationProper
ties()
Message:
Object reference not set to an instance of an object. StackTrace: at HP.SupportFramework.Utilities.CustomerExperience.HPSASession.AddNavigationProper
ties()
Source:
HP.SupportFramework.Utilities Name: HPSF.exe Version: 07.00.01.01 Path: C:\Program
Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe Format: en-US RAM: 5609
Ram
Utilization: 40 TargetSite: HP.SupportFramework.HPSFReporting._Property[] AddNavigationProperties()


Error - 09/12/2012 01:19:10 | Computer Name = Kyle-HP | Source = HPSF.exe | ID = 2000
Description = HP Error ID: -2147467261 at HP.SupportFramework.Utilities.CustomerExperience.HPSASession.AddNavigationProper
ties()
Message:
Object reference not set to an instance of an object. StackTrace: at HP.SupportFramework.Utilities.CustomerExperience.HPSASession.AddNavigationProper
ties()
Source:
HP.SupportFramework.Utilities Name: HPSF.exe Version: 07.00.01.01 Path: C:\Program
Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe Format: en-US RAM: 5609
Ram
Utilization: 30 TargetSite: HP.SupportFramework.HPSFReporting._Property[] AddNavigationProperties()


Error - 09/12/2012 02:26:33 | Computer Name = Kyle-HP | Source = HPSF.exe | ID = 2000
Description = HP Error ID: -2147467261 at HP.SupportFramework.Utilities.CustomerExperience.HPSASession.AddNavigationProper
ties()
Message:
Object reference not set to an instance of an object. StackTrace: at HP.SupportFramework.Utilities.CustomerExperience.HPSASession.AddNavigationProper
ties()
Source:
HP.SupportFramework.Utilities Name: HPSF.exe Version: 07.00.01.01 Path: C:\Program
Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe Format: en-US RAM: 5609
Ram
Utilization: 40 TargetSite: HP.SupportFramework.HPSFReporting._Property[] AddNavigationProperties()


[ HP Connection Manager Events ]
Error - 11/02/2013 23:59:01 | Computer Name = Kyle-HP | Source = hpCMSrv | ID = 5
Description = 2013/02/11 22:59:01.551|00001A8C|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
failed [hr:0x800706BA]

Error - 11/02/2013 23:59:11 | Computer Name = Kyle-HP | Source = hpCMSrv | ID = 5
Description = 2013/02/11 22:59:11.551|00001A8C|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
failed [hr:0x800706BA]

Error - 11/02/2013 23:59:21 | Computer Name = Kyle-HP | Source = hpCMSrv | ID = 5
Description = 2013/02/11 22:59:21.550|00001A8C|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
failed [hr:0x800706BA]

Error - 11/02/2013 23:59:24 | Computer Name = Kyle-HP | Source = hpCMSrv | ID = 5
Description = 2013/02/11 22:59:24.233|00001A8C|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
failed [hr:0x800706BA]

Error - 11/02/2013 23:59:31 | Computer Name = Kyle-HP | Source = hpCMSrv | ID = 5
Description = 2013/02/11 22:59:31.550|00001A8C|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
failed [hr:0x800706BA]

Error - 12/02/2013 00:00:11 | Computer Name = Kyle-HP | Source = hpCMSrv | ID = 5
Description = 2013/02/11 23:00:11.548|00001A8C|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
failed [hr:0x800706BA]

Error - 12/02/2013 00:00:21 | Computer Name = Kyle-HP | Source = hpCMSrv | ID = 5
Description = 2013/02/11 23:00:21.548|00001A8C|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
failed [hr:0x800706BA]

Error - 12/02/2013 00:00:24 | Computer Name = Kyle-HP | Source = hpCMSrv | ID = 5
Description = 2013/02/11 23:00:24.231|00001A8C|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
failed [hr:0x800706BA]

Error - 12/02/2013 02:19:08 | Computer Name = Kyle-HP | Source = hpCMSrv | ID = 5
Description = 2013/02/12 01:19:08.879|00001198|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
failed [hr:0x800706BA]

Error - 12/02/2013 02:19:10 | Computer Name = Kyle-HP | Source = hpCMSrv | ID = 5
Description = 2013/02/12 01:19:10.798|00001198|Error |CWLAN::SignalStrengthChanged|Fire_SignalStrengthChanged
failed [hr:0x800706BA]

[ HP Software Framework Events ]
Error - 15/07/2012 17:58:34 | Computer Name = Kyle-HP | Source = CaslWmi | ID = 5
Description = 2012/07/15 17:58:34.839|000004BC|Error |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state

Error - 16/07/2012 19:32:23 | Computer Name = Kyle-HP | Source = CaslWmi | ID = 5
Description = 2012/07/16 19:32:23.470|00001694|Error |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state

Error - 17/07/2012 11:21:13 | Computer Name = Kyle-HP | Source = CaslWmi | ID = 5
Description = 2012/07/17 11:21:13.514|00000414|Error |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state

Error - 18/07/2012 00:32:04 | Computer Name = Kyle-HP | Source = CaslWmi | ID = 5
Description = 2012/07/18 00:32:04.023|00001D8C|Error |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state

Error - 18/07/2012 16:06:07 | Computer Name = Kyle-HP | Source = CaslWmi | ID = 5
Description = 2012/07/18 16:06:07.685|00001A38|Error |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state

Error - 19/07/2012 12:15:03 | Computer Name = Kyle-HP | Source = CaslWmi | ID = 5
Description = 2012/07/19 12:15:03.481|00001AEC|Error |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state

Error - 19/07/2012 15:35:24 | Computer Name = Kyle-HP | Source = CaslWmi | ID = 5
Description = 2012/07/19 15:35:24.167|00000678|Error |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state

Error - 20/07/2012 12:19:52 | Computer Name = Kyle-HP | Source = CaslWmi | ID = 5
Description = 2012/07/20 12:19:52.549|000010C8|Error |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state

Error - 20/07/2012 12:30:44 | Computer Name = Kyle-HP | Source = CaslWmi | ID = 5
Description = 2012/07/20 12:30:44.972|00000384|Error |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state

Error - 20/07/2012 12:30:46 | Computer Name = Kyle-HP | Source = CaslWmi | ID = 5
Description = 2012/07/20 12:30:46.914|0000105C|Error |[CaslWmi]CommandFolio::A{hpCasl.enReturnCode(int&)}|Error
0xe_BIOS_INVALID_COMMAND_TYPE from BIOS WMI call Read/2Eh while getting Folio state

[ Media Center Events ]
Error - 03/07/2012 04:02:24 | Computer Name = Kyle-HP | Source = MCUpdate | ID = 0
Description = 4:02:22 AM - Failed to retrieve Broadband (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 04/07/2012 04:00:17 | Computer Name = Kyle-HP | Source = MCUpdate | ID = 0
Description = 4:00:17 AM - Failed to retrieve MCESpotlight (Error: The underlying
connection was closed: Could not establish trust relationship for the SSL/TLS secure
channel.)

Error - 04/07/2012 04:01:29 | Computer Name = Kyle-HP | Source = MCUpdate | ID = 0
Description = 4:01:26 AM - Failed to retrieve Broadband (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 04/07/2012 16:38:59 | Computer Name = Kyle-HP | Source = MCUpdate | ID = 0
Description = 4:38:56 PM - Failed to retrieve Broadband (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 04/07/2012 18:02:24 | Computer Name = Kyle-HP | Source = MCUpdate | ID = 0
Description = 5:49:33 PM - Failed to retrieve Broadband (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 04/07/2012 19:04:56 | Computer Name = Kyle-HP | Source = MCUpdate | ID = 0
Description = 7:04:44 PM - Failed to retrieve Broadband (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 05/07/2012 03:34:28 | Computer Name = Kyle-HP | Source = MCUpdate | ID = 0
Description = 3:34:28 AM - Failed to retrieve NetTV (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 05/07/2012 03:35:35 | Computer Name = Kyle-HP | Source = MCUpdate | ID = 0
Description = 3:35:35 AM - Failed to retrieve Broadband (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 06/07/2012 04:37:19 | Computer Name = Kyle-HP | Source = MCUpdate | ID = 0
Description = 4:37:19 AM - Failed to retrieve NetTV (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 07/07/2012 03:18:43 | Computer Name = Kyle-HP | Source = MCUpdate | ID = 0
Description = 3:18:43 AM - Failed to retrieve NetTV (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


[ System Events ]
Error - 11/02/2013 22:41:53 | Computer Name = Kyle-HP | Source = Service Control Manager | ID = 7000
Description = The WebcamMax, WDM Video Capture service failed to start due to the
following error: %%1058

Error - 11/02/2013 23:42:50 | Computer Name = Kyle-HP | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Windows
Error Reporting Service service to connect.

Error - 11/02/2013 23:58:20 | Computer Name = Kyle-HP | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the AdvancedSystemCareService5 service.

Error - 12/02/2013 00:00:35 | Computer Name = Kyle-HP | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Windows
Modules Installer service to connect.

Error - 12/02/2013 00:00:35 | Computer Name = Kyle-HP | Source = Service Control Manager | ID = 7000
Description = The Windows Modules Installer service failed to start due to the following
error: %%1053

Error - 12/02/2013 00:00:38 | Computer Name = Kyle-HP | Source = Service Control Manager | ID = 7043
Description = The Windows Update service did not shut down properly after receiving
a preshutdown control.

Error - 12/02/2013 00:00:45 | Computer Name = Kyle-HP | Source = DCOM | ID = 10005
Description =

Error - 12/02/2013 00:01:53 | Computer Name = Kyle-HP | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the NIS service.

Error - 12/02/2013 00:39:42 | Computer Name = Kyle-HP | Source = Service Control Manager | ID = 7000
Description = The WebcamMax, WDM Video Capture service failed to start due to the
following error: %%1058

Error - 12/02/2013 21:44:41 | Computer Name = Kyle-HP | Source = Service Control Manager | ID = 7000
Description = The WebcamMax, WDM Video Capture service failed to start due to the
following error: %%1058


< End of report >

Please run these in the order requested.

Run TDSSKiller

Please download TDSSKiller.zip

• extract it to your desktop
• double click TDSSKiller.exe
• press Start Scan

  only if Malicious objects are found then ensure Cure is selected. Do not change it to Delete or Quarantine as it may delete infected files that are required for Windows to operate properly.

• click Continue > Reboot now

• copy and paste the log in your next reply
• a copy of the log will be saved automatically to the root of the drive (typically C:\) called TDSSKiller_*** (*** denotes version & date)

======================================================

Download and run ComboFix

Download Combofix from either of the links below, and save it to your desktop.

Link 1
Link 2

**Note: It MUST be saved directly to your desktop. Choose save as and then make sure you choose Desktop

——————————————————————–

IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

——————————————————————–

Double click on ComboFix.exe & follow the prompts.

• when finished, it will produce a report for you.
• please post the C:\ComboFix.txt for further review.

Logs to include with next post:

TDSSKiller log
ComboFix.txt

Thanks

Satchfan

TDSSKI\iller.log 22:31:23.0527 5732 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 22:31:25.0150 5732 ============================================================ 22:31:25.0150 5732 Current date / time: 2013/02/23 22:31:25.0150 22:31:25.0150 5732 SystemInfo: 22:31:25.0150 5732 22:31:25.0150 5732 OS Version: 6.1.7601 ServicePack: 1.0 22:31:25.0150 5732 Product type: Workstation 22:31:25.0150 5732 ComputerName: KYLE-HP 22:31:25.0150 5732 UserName: Kyle 22:31:25.0150 5732 Windows directory: C:\Windows 22:31:25.0150 5732 System windows directory: C:\Windows 22:31:25.0150 5732 Running under WOW64 22:31:25.0150 5732 Processor architecture: Intel x64 22:31:25.0150 5732 Number of processors: 4 22:31:25.0150 5732 Page size: 0x1000 22:31:25.0150 5732 Boot type: Normal boot 22:31:25.0150 5732 ============================================================ 22:31:26.0195 5732 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 22:31:26.0195 5732 ============================================================ 22:31:26.0195 5732 \Device\Harddisk0\DR0: 22:31:26.0195 5732 MBR partitions: 22:31:26.0195 5732 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800 22:31:26.0195 5732 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x48536000 22:31:26.0195 5732 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x4859A000, BlocksNum 0x228A000 22:31:26.0195 5732 \Device\Harddisk0\DR0\Partition4: MBR, Type 0xC, StartLBA 0x4A824000, BlocksNum 0x33AB0 22:31:26.0195 5732 ============================================================ 22:31:26.0226 5732 C: <-> \Device\Harddisk0\DR0\Partition2 22:31:26.0273 5732 D: <-> \Device\Harddisk0\DR0\Partition3 22:31:26.0273 5732 ============================================================ 22:31:26.0273 5732 Initialize success 22:31:26.0273 5732 ============================================================ 22:31:32.0326 5820 ============================================================ 22:31:32.0326 5820 Scan started 22:31:32.0326 5820 Mode: Manual; 22:31:32.0326 5820 ============================================================ 22:31:33.0121 5820 ================ Scan system memory ======================== 22:31:33.0121 5820 System memory - ok 22:31:33.0121 5820 ================ Scan services ============================= 22:31:33.0449 5820 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 22:31:33.0449 5820 1394ohci - ok 22:31:33.0511 5820 [ 733CA4DF8BE48A1009B86FA442551CA4 ] Accelerometer C:\Windows\system32\DRIVERS\Accelerometer.sys 22:31:33.0527 5820 Accelerometer - ok 22:31:33.0574 5820 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys 22:31:33.0574 5820 ACPI - ok 22:31:33.0667 5820 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 22:31:33.0667 5820 AcpiPmi - ok 22:31:33.0933 5820 [ EC807244904FA170C299AB06D87FBDBE ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 22:31:33.0933 5820 AdobeFlashPlayerUpdateSvc - ok 22:31:33.0979 5820 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys 22:31:33.0979 5820 adp94xx - ok 22:31:34.0026 5820 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys 22:31:34.0026 5820 adpahci - ok 22:31:34.0057 5820 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys 22:31:34.0057 5820 adpu320 - ok 22:31:34.0182 5820 [ B11C71B29FA69E4586F9B65560E6604D ] AdvancedSystemCareService5 C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe 22:31:34.0182 5820 AdvancedSystemCareService5 - ok 22:31:34.0213 5820 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 22:31:34.0213 5820 AeLookupSvc - ok 22:31:34.0385 5820 [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters C:\Program Files\IDT\WDM\AESTSr64.exe 22:31:34.0385 5820 AESTFilters - ok 22:31:34.0432 5820 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys 22:31:34.0447 5820 AFD - ok 22:31:34.0479 5820 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys 22:31:34.0479 5820 agp440 - ok 22:31:34.0525 5820 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe 22:31:34.0525 5820 ALG - ok 22:31:34.0541 5820 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys 22:31:34.0541 5820 aliide - ok 22:31:34.0681 5820 ALSysIO - ok 22:31:34.0728 5820 [ 3DE8DC285540733818588CC94E7FC96E ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 22:31:34.0728 5820 AMD External Events Utility - ok 22:31:34.0791 5820 AMD FUEL Service - ok 22:31:34.0806 5820 [ 30BFEEE0DFFD5BD79D29157CF080DEED ] amdhub30 C:\Windows\system32\DRIVERS\amdhub30.sys 22:31:34.0806 5820 amdhub30 - ok 22:31:34.0837 5820 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys 22:31:34.0853 5820 amdide - ok 22:31:34.0884 5820 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64 C:\Windows\system32\DRIVERS\amdiox64.sys 22:31:34.0900 5820 amdiox64 - ok 22:31:34.0947 5820 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys 22:31:34.0947 5820 AmdK8 - ok 22:31:35.0259 5820 [ 42D53DAF85F948C39CE1351A8F5B5808 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys 22:31:35.0446 5820 amdkmdag - ok 22:31:35.0524 5820 [ 75182B5784015B271932088551616A96 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys 22:31:35.0524 5820 amdkmdap - ok 22:31:35.0555 5820 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 22:31:35.0555 5820 AmdPPM - ok 22:31:35.0586 5820 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys 22:31:35.0586 5820 amdsata - ok 22:31:35.0617 5820 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys 22:31:35.0633 5820 amdsbs - ok 22:31:35.0649 5820 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys 22:31:35.0649 5820 amdxata - ok 22:31:35.0695 5820 [ 321533578132C811EC834A1B741C994C ] amdxhc C:\Windows\system32\DRIVERS\amdxhc.sys 22:31:35.0695 5820 amdxhc - ok 22:31:35.0711 5820 [ F9D46B6B322708BD5AFCC8767EBDC901 ] amd_sata C:\Windows\system32\DRIVERS\amd_sata.sys 22:31:35.0727 5820 amd_sata - ok 22:31:35.0727 5820 [ 329CC9C7E20DEEBCD4CD10816193EF14 ] amd_xata C:\Windows\system32\DRIVERS\amd_xata.sys 22:31:35.0727 5820 amd_xata - ok 22:31:35.0758 5820 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys 22:31:35.0758 5820 AppID - ok 22:31:35.0789 5820 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll 22:31:35.0789 5820 AppIDSvc - ok 22:31:35.0805 5820 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll 22:31:35.0805 5820 Appinfo - ok 22:31:35.0898 5820 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 22:31:35.0898 5820 Apple Mobile Device - ok 22:31:35.0929 5820 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys 22:31:35.0929 5820 arc - ok 22:31:35.0961 5820 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys 22:31:35.0961 5820 arcsas - ok 22:31:36.0070 5820 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 22:31:36.0085 5820 aspnet_state - ok 22:31:36.0117 5820 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 22:31:36.0117 5820 AsyncMac - ok 22:31:36.0148 5820 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys 22:31:36.0148 5820 atapi - ok 22:31:36.0195 5820 [ 4BF5BCA6E2608CD8A00BC4A6673A9F47 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys 22:31:36.0195 5820 AtiHDAudioService - ok 22:31:36.0273 5820 atillk64 - ok 22:31:36.0319 5820 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 22:31:36.0319 5820 AudioEndpointBuilder - ok 22:31:36.0335 5820 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll 22:31:36.0335 5820 AudioSrv - ok 22:31:36.0366 5820 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll 22:31:36.0366 5820 AxInstSV - ok 22:31:36.0429 5820 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys 22:31:36.0429 5820 b06bdrv - ok 22:31:36.0460 5820 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 22:31:36.0475 5820 b57nd60a - ok 22:31:36.0600 5820 [ D41E6CCB9752F551049D2E0C437DD03D ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys 22:31:36.0647 5820 BCM43XX - ok 22:31:36.0678 5820 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll 22:31:36.0678 5820 BDESVC - ok 22:31:36.0709 5820 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys 22:31:36.0709 5820 Beep - ok 22:31:36.0756 5820 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll 22:31:36.0772 5820 BFE - ok 22:31:36.0959 5820 [ 866335C9C0E6733C753FB472C539A6B9 ] BHDrvx64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20130208.001\BHDrvx64.sys 22:31:36.0959 5820 BHDrvx64 - ok 22:31:37.0006 5820 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll 22:31:37.0021 5820 BITS - ok 22:31:37.0053 5820 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys 22:31:37.0053 5820 blbdrive - ok 22:31:37.0084 5820 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 22:31:37.0084 5820 Bonjour Service - ok 22:31:37.0115 5820 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 22:31:37.0115 5820 bowser - ok 22:31:37.0146 5820 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys 22:31:37.0146 5820 BrFiltLo - ok 22:31:37.0162 5820 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys 22:31:37.0162 5820 BrFiltUp - ok 22:31:37.0209 5820 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll 22:31:37.0209 5820 Browser - ok 22:31:37.0255 5820 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys 22:31:37.0255 5820 Brserid - ok 22:31:37.0287 5820 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 22:31:37.0287 5820 BrSerWdm - ok 22:31:37.0287 5820 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 22:31:37.0302 5820 BrUsbMdm - ok 22:31:37.0318 5820 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 22:31:37.0318 5820 BrUsbSer - ok 22:31:37.0380 5820 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys 22:31:37.0380 5820 BthEnum - ok 22:31:37.0411 5820 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys 22:31:37.0427 5820 BTHMODEM - ok 22:31:37.0474 5820 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys 22:31:37.0474 5820 BthPan - ok 22:31:37.0521 5820 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys 22:31:37.0521 5820 BTHPORT - ok 22:31:37.0567 5820 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll 22:31:37.0567 5820 bthserv - ok 22:31:37.0599 5820 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys 22:31:37.0599 5820 BTHUSB - ok 22:31:37.0645 5820 [ 7A2CE8C1BF4DAA1F2766E21E9CA11078 ] btwampfl C:\Windows\system32\drivers\btwampfl.sys 22:31:37.0661 5820 btwampfl - ok 22:31:37.0708 5820 [ A75BF6802A967F5AACECC3C67FEBDF55 ] btwaudio C:\Windows\system32\drivers\btwaudio.sys 22:31:37.0723 5820 btwaudio - ok 22:31:37.0755 5820 [ D895DC213EDBDA5FCC53AAD1F1E0E63B ] btwavdt C:\Windows\system32\DRIVERS\btwavdt.sys 22:31:37.0755 5820 btwavdt - ok 22:31:37.0833 5820 [ 692F8648D7686D91E34A65AC698019D8 ] btwdins C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe 22:31:37.0848 5820 btwdins - ok 22:31:37.0864 5820 [ 07096D2BC22CCB6CEA5A532DF0BE8A75 ] btwl2cap C:\Windows\system32\DRIVERS\btwl2cap.sys 22:31:37.0879 5820 btwl2cap - ok 22:31:37.0911 5820 [ 6D7AA2BDE0135599C5F230D69DB3B420 ] btwrchid C:\Windows\system32\DRIVERS\btwrchid.sys 22:31:37.0926 5820 btwrchid - ok 22:31:37.0957 5820 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 22:31:37.0957 5820 cdfs - ok 22:31:37.0989 5820 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 22:31:37.0989 5820 cdrom - ok 22:31:38.0035 5820 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll 22:31:38.0035 5820 CertPropSvc - ok 22:31:38.0051 5820 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys 22:31:38.0051 5820 circlass - ok 22:31:38.0082 5820 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys 22:31:38.0082 5820 CLFS - ok 22:31:38.0145 5820 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 22:31:38.0145 5820 clr_optimization_v2.0.50727_32 - ok 22:31:38.0207 5820 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 22:31:38.0207 5820 clr_optimization_v2.0.50727_64 - ok 22:31:38.0269 5820 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 22:31:38.0269 5820 clr_optimization_v4.0.30319_32 - ok 22:31:38.0285 5820 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 22:31:38.0285 5820 clr_optimization_v4.0.30319_64 - ok 22:31:38.0316 5820 clwvd - ok 22:31:38.0332 5820 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys 22:31:38.0332 5820 CmBatt - ok 22:31:38.0363 5820 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys 22:31:38.0363 5820 cmdide - ok 22:31:38.0394 5820 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys 22:31:38.0425 5820 CNG - ok 22:31:38.0472 5820 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys 22:31:38.0472 5820 Compbatt - ok 22:31:38.0503 5820 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 22:31:38.0503 5820 CompositeBus - ok 22:31:38.0503 5820 COMSysApp - ok 22:31:38.0550 5820 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys 22:31:38.0550 5820 crcdisk - ok 22:31:38.0597 5820 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll 22:31:38.0597 5820 CryptSvc - ok 22:31:38.0691 5820 [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE 22:31:38.0691 5820 cvhsvc - ok 22:31:38.0737 5820 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll 22:31:38.0737 5820 DcomLaunch - ok 22:31:38.0769 5820 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll 22:31:38.0800 5820 defragsvc - ok 22:31:38.0815 5820 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 22:31:38.0815 5820 DfsC - ok 22:31:38.0847 5820 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll 22:31:38.0847 5820 Dhcp - ok 22:31:38.0862 5820 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys 22:31:38.0862 5820 discache - ok 22:31:38.0909 5820 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys 22:31:38.0925 5820 Disk - ok 22:31:38.0940 5820 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll 22:31:38.0940 5820 Dnscache - ok 22:31:38.0971 5820 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll 22:31:38.0971 5820 dot3svc - ok 22:31:38.0987 5820 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll 22:31:38.0987 5820 DPS - ok 22:31:39.0003 5820 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 22:31:39.0003 5820 drmkaud - ok 22:31:39.0049 5820 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 22:31:39.0049 5820 DXGKrnl - ok 22:31:39.0112 5820 EagleX64 - ok 22:31:39.0143 5820 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll 22:31:39.0143 5820 EapHost - ok 22:31:39.0221 5820 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys 22:31:39.0299 5820 ebdrv - ok 22:31:39.0346 5820 [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys 22:31:39.0361 5820 eeCtrl - ok 22:31:39.0393 5820 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe 22:31:39.0393 5820 EFS - ok 22:31:39.0564 5820 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 22:31:39.0611 5820 ehRecvr - ok 22:31:39.0611 5820 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe 22:31:39.0627 5820 ehSched - ok 22:31:39.0658 5820 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys 22:31:39.0658 5820 elxstor - ok 22:31:39.0736 5820 [ C5BCCB378D0A896304A3E71BE7215983 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 22:31:39.0736 5820 EraserUtilRebootDrv - ok 22:31:39.0751 5820 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys 22:31:39.0751 5820 ErrDev - ok 22:31:39.0814 5820 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll 22:31:39.0829 5820 EventSystem - ok 22:31:39.0829 5820 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys 22:31:39.0845 5820 exfat - ok 22:31:39.0876 5820 ezSharedSvc - ok 22:31:39.0907 5820 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys 22:31:39.0907 5820 fastfat - ok 22:31:39.0970 5820 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe 22:31:39.0970 5820 Fax - ok 22:31:39.0985 5820 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys 22:31:40.0001 5820 fdc - ok 22:31:40.0017 5820 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll 22:31:40.0017 5820 fdPHost - ok 22:31:40.0032 5820 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll 22:31:40.0032 5820 FDResPub - ok 22:31:40.0063 5820 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 22:31:40.0063 5820 FileInfo - ok 22:31:40.0063 5820 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 22:31:40.0079 5820 Filetrace - ok 22:31:40.0095 5820 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys 22:31:40.0110 5820 flpydisk - ok 22:31:40.0141 5820 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 22:31:40.0141 5820 FltMgr - ok 22:31:40.0188 5820 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll 22:31:40.0204 5820 FontCache - ok 22:31:40.0235 5820 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 22:31:40.0235 5820 FontCache3.0.0.0 - ok 22:31:40.0282 5820 [ 2074A85A6B8F84A5A9C60B915B465FAF ] FPLService C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe 22:31:40.0282 5820 FPLService - ok 22:31:40.0313 5820 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 22:31:40.0313 5820 FsDepends - ok 22:31:40.0329 5820 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 22:31:40.0329 5820 Fs_Rec - ok 22:31:40.0375 5820 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 22:31:40.0375 5820 fvevol - ok 22:31:40.0407 5820 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys 22:31:40.0407 5820 gagp30kx - ok 22:31:40.0469 5820 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 22:31:40.0469 5820 GEARAspiWDM - ok 22:31:40.0516 5820 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll 22:31:40.0516 5820 gpsvc - ok 22:31:40.0641 5820 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 22:31:40.0641 5820 gupdate - ok 22:31:40.0672 5820 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 22:31:40.0672 5820 gupdatem - ok 22:31:40.0703 5820 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys 22:31:40.0719 5820 hamachi - ok 22:31:40.0843 5820 [ 785FD63B74B30986A9F2C7D965CA509F ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe 22:31:40.0859 5820 Hamachi2Svc - ok 22:31:40.0890 5820 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 22:31:40.0890 5820 hcw85cir - ok 22:31:40.0921 5820 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 22:31:40.0937 5820 HdAudAddService - ok 22:31:40.0968 5820 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys 22:31:40.0984 5820 HDAudBus - ok 22:31:41.0015 5820 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys 22:31:41.0015 5820 HidBatt - ok 22:31:41.0015 5820 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys 22:31:41.0015 5820 HidBth - ok 22:31:41.0046 5820 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys 22:31:41.0046 5820 HidIr - ok 22:31:41.0062 5820 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll 22:31:41.0062 5820 hidserv - ok 22:31:41.0093 5820 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 22:31:41.0109 5820 HidUsb - ok 22:31:41.0140 5820 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll 22:31:41.0140 5820 hkmsvc - ok 22:31:41.0155 5820 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll 22:31:41.0155 5820 HomeGroupListener - ok 22:31:41.0187 5820 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 22:31:41.0187 5820 HomeGroupProvider - ok 22:31:41.0296 5820 [ BB1FC298BE53AAB1E110F6E786BD8AC5 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe 22:31:41.0296 5820 HP Support Assistant Service - ok 22:31:41.0358 5820 [ 6A181452D4E240B8ECC7614B9A19BDE9 ] HPClientSvc C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe 22:31:41.0358 5820 HPClientSvc - ok 22:31:41.0452 5820 [ E040F0064D39F73BB4995D494F3DCBB8 ] hpCMSrv C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe 22:31:41.0467 5820 hpCMSrv - ok 22:31:41.0561 5820 [ BDFE112FA2F3422842E83DA631065B37 ] hpdskflt C:\Windows\system32\DRIVERS\hpdskflt.sys 22:31:41.0561 5820 hpdskflt - ok 22:31:41.0670 5820 [ 9B7EDD3FE7C211C36E921D34D18A3A0A ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe 22:31:41.0686 5820 hpqwmiex - ok 22:31:41.0717 5820 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 22:31:41.0733 5820 HpSAMD - ok 22:31:41.0764 5820 [ A92D6DE158BC0671D9336580F6414044 ] hpsrv C:\Windows\system32\Hpservice.exe 22:31:41.0764 5820 hpsrv - ok 22:31:41.0811 5820 [ 77C15D7E8F002A173EEBFF0B20CD697D ] HPWMISVC C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe 22:31:41.0811 5820 HPWMISVC - ok 22:31:41.0842 5820 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys 22:31:41.0857 5820 HTTP - ok 22:31:41.0873 5820 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 22:31:41.0873 5820 hwpolicy - ok 22:31:41.0904 5820 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys 22:31:41.0904 5820 i8042prt - ok 22:31:41.0935 5820 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 22:31:41.0951 5820 iaStorV - ok 22:31:42.0045 5820 [ D72BF0AE484F88399E8343E821C10D6A ] IconMan_R C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe 22:31:42.0076 5820 IconMan_R - ok 22:31:42.0138 5820 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 22:31:42.0138 5820 idsvc - ok 22:31:42.0247 5820 [ A48928D4CCA6F8B731989DB08CF2C0AB ] IDSVia64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20130221.001\IDSvia64.sys 22:31:42.0263 5820 IDSVia64 - ok 22:31:42.0294 5820 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys 22:31:42.0310 5820 iirsp - ok 22:31:42.0341 5820 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll 22:31:42.0357 5820 IKEEXT - ok 22:31:42.0388 5820 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys 22:31:42.0388 5820 intelide - ok 22:31:42.0403 5820 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\drivers\intelppm.sys 22:31:42.0403 5820 intelppm - ok 22:31:42.0435 5820 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll 22:31:42.0435 5820 IPBusEnum - ok 22:31:42.0450 5820 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 22:31:42.0450 5820 IpFilterDriver - ok 22:31:42.0497 5820 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 22:31:42.0513 5820 iphlpsvc - ok 22:31:42.0528 5820 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 22:31:42.0528 5820 IPMIDRV - ok 22:31:42.0559 5820 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 22:31:42.0559 5820 IPNAT - ok 22:31:42.0637 5820 [ 0F261EC4F514926177C70C1832374231 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 22:31:42.0653 5820 iPod Service - ok 22:31:42.0684 5820 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 22:31:42.0700 5820 IRENUM - ok 22:31:42.0731 5820 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys 22:31:42.0731 5820 isapnp - ok 22:31:42.0762 5820 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 22:31:42.0778 5820 iScsiPrt - ok 22:31:42.0793 5820 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 22:31:42.0793 5820 kbdclass - ok 22:31:42.0809 5820 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 22:31:42.0809 5820 kbdhid - ok 22:31:42.0825 5820 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe 22:31:42.0825 5820 KeyIso - ok 22:31:42.0871 5820 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 22:31:42.0887 5820 KSecDD - ok 22:31:42.0903 5820 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 22:31:42.0903 5820 KSecPkg - ok 22:31:42.0934 5820 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 22:31:42.0934 5820 ksthunk - ok 22:31:42.0965 5820 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll 22:31:42.0965 5820 KtmRm - ok 22:31:43.0012 5820 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll 22:31:43.0027 5820 LanmanServer - ok 22:31:43.0043 5820 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 22:31:43.0043 5820 LanmanWorkstation - ok 22:31:43.0074 5820 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 22:31:43.0074 5820 lltdio - ok 22:31:43.0105 5820 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll 22:31:43.0105 5820 lltdsvc - ok 22:31:43.0121 5820 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll 22:31:43.0121 5820 lmhosts - ok 22:31:43.0152 5820 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys 22:31:43.0152 5820 LSI_FC - ok 22:31:43.0168 5820 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys 22:31:43.0168 5820 LSI_SAS - ok 22:31:43.0183 5820 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys 22:31:43.0199 5820 LSI_SAS2 - ok 22:31:43.0215 5820 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys 22:31:43.0230 5820 LSI_SCSI - ok 22:31:43.0246 5820 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys 22:31:43.0261 5820 luafv - ok 22:31:43.0308 5820 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 22:31:43.0308 5820 Mcx2Svc - ok 22:31:43.0324 5820 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys 22:31:43.0324 5820 megasas - ok 22:31:43.0355 5820 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys 22:31:43.0355 5820 MegaSR - ok 22:31:43.0433 5820 Microsoft SharePoint Workspace Audit Service - ok 22:31:43.0480 5820 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll 22:31:43.0480 5820 MMCSS - ok 22:31:43.0495 5820 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys 22:31:43.0511 5820 Modem - ok 22:31:43.0527 5820 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys 22:31:43.0542 5820 monitor - ok 22:31:43.0573 5820 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 22:31:43.0573 5820 mouclass - ok 22:31:43.0589 5820 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 22:31:43.0589 5820 mouhid - ok 22:31:43.0605 5820 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 22:31:43.0605 5820 mountmgr - ok 22:31:43.0636 5820 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys 22:31:43.0636 5820 mpio - ok 22:31:43.0667 5820 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 22:31:43.0667 5820 mpsdrv - ok 22:31:43.0714 5820 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll 22:31:43.0714 5820 MpsSvc - ok 22:31:43.0729 5820 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 22:31:43.0729 5820 MRxDAV - ok 22:31:43.0761 5820 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 22:31:43.0761 5820 mrxsmb - ok 22:31:43.0792 5820 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 22:31:43.0792 5820 mrxsmb10 - ok 22:31:43.0807 5820 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 22:31:43.0823 5820 mrxsmb20 - ok 22:31:43.0839 5820 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys 22:31:43.0839 5820 msahci - ok 22:31:43.0854 5820 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys 22:31:43.0854 5820 msdsm - ok 22:31:43.0885 5820 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe 22:31:43.0885 5820 MSDTC - ok 22:31:43.0917 5820 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys 22:31:43.0917 5820 Msfs - ok 22:31:43.0917 5820 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 22:31:43.0917 5820 mshidkmdf - ok 22:31:43.0932 5820 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 22:31:43.0948 5820 msisadrv - ok 22:31:43.0979 5820 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 22:31:43.0979 5820 MSiSCSI - ok 22:31:43.0995 5820 msiserver - ok 22:31:44.0010 5820 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 22:31:44.0010 5820 MSKSSRV - ok 22:31:44.0026 5820 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 22:31:44.0026 5820 MSPCLOCK - ok 22:31:44.0026 5820 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 22:31:44.0041 5820 MSPQM - ok 22:31:44.0057 5820 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 22:31:44.0073 5820 MsRPC - ok 22:31:44.0088 5820 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 22:31:44.0088 5820 mssmbios - ok 22:31:44.0135 5820 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 22:31:44.0135 5820 MSTEE - ok 22:31:44.0135 5820 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys 22:31:44.0151 5820 MTConfig - ok 22:31:44.0182 5820 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys 22:31:44.0182 5820 Mup - ok 22:31:44.0213 5820 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll 22:31:44.0229 5820 napagent - ok 22:31:44.0275 5820 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 22:31:44.0275 5820 NativeWifiP - ok 22:31:44.0369 5820 [ 88A2F45CE66B904285978D6BB13AFEB2 ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20130221.019\ENG64.SYS 22:31:44.0369 5820 NAVENG - ok 22:31:44.0431 5820 [ D2A545DA3A90BBFA40E020C23F1B7A48 ] NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20130221.019\EX64.SYS 22:31:44.0447 5820 NAVEX15 - ok 22:31:44.0494 5820 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys 22:31:44.0509 5820 NDIS - ok 22:31:44.0541 5820 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 22:31:44.0556 5820 NdisCap - ok 22:31:44.0572 5820 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 22:31:44.0572 5820 NdisTapi - ok 22:31:44.0603 5820 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 22:31:44.0603 5820 Ndisuio - ok 22:31:44.0619 5820 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 22:31:44.0634 5820 NdisWan - ok 22:31:44.0665 5820 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 22:31:44.0665 5820 NDProxy - ok 22:31:44.0697 5820 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 22:31:44.0712 5820 NetBIOS - ok 22:31:44.0728 5820 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 22:31:44.0728 5820 NetBT - ok 22:31:44.0743 5820 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe 22:31:44.0743 5820 Netlogon - ok 22:31:44.0759 5820 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll 22:31:44.0775 5820 Netman - ok 22:31:44.0806 5820 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 22:31:44.0806 5820 NetMsmqActivator - ok 22:31:44.0806 5820 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 22:31:44.0806 5820 NetPipeActivator - ok 22:31:44.0853 5820 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll 22:31:44.0853 5820 netprofm - ok 22:31:44.0868 5820 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 22:31:44.0868 5820 NetTcpActivator - ok 22:31:44.0868 5820 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 22:31:44.0868 5820 NetTcpPortSharing - ok 22:31:44.0899 5820 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys 22:31:44.0899 5820 nfrd960 - ok 22:31:44.0977 5820 [ E78A365CC3E0FBFC018A33DCE01909F8 ] NIS C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe 22:31:44.0977 5820 NIS - ok 22:31:45.0024 5820 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll 22:31:45.0024 5820 NlaSvc - ok 22:31:45.0040 5820 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys 22:31:45.0040 5820 Npfs - ok 22:31:45.0055 5820 npggsvc - ok 22:31:45.0071 5820 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll 22:31:45.0071 5820 nsi - ok 22:31:45.0102 5820 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 22:31:45.0102 5820 nsiproxy - ok 22:31:45.0180 5820 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 22:31:45.0196 5820 Ntfs - ok 22:31:45.0211 5820 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys 22:31:45.0211 5820 Null - ok 22:31:45.0243 5820 [ A85B4F2EF3A7304A5399EF0526423040 ] NVENETFD C:\Windows\system32\DRIVERS\nvm62x64.sys 22:31:45.0243 5820 NVENETFD - ok 22:31:45.0274 5820 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys 22:31:45.0274 5820 nvraid - ok 22:31:45.0289 5820 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys 22:31:45.0289 5820 nvstor - ok 22:31:45.0321 5820 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 22:31:45.0321 5820 nv_agp - ok 22:31:45.0352 5820 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 22:31:45.0352 5820 ohci1394 - ok 22:31:45.0383 5820 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 22:31:45.0399 5820 ose - ok 22:31:45.0570 5820 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 22:31:45.0679 5820 osppsvc - ok 22:31:45.0726 5820 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 22:31:45.0742 5820 p2pimsvc - ok 22:31:45.0773 5820 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll 22:31:45.0773 5820 p2psvc - ok 22:31:45.0804 5820 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys 22:31:45.0804 5820 Parport - ok 22:31:45.0851 5820 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys 22:31:45.0851 5820 partmgr - ok 22:31:45.0867 5820 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll 22:31:45.0882 5820 PcaSvc - ok 22:31:45.0913 5820 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys 22:31:45.0913 5820 pci - ok 22:31:45.0929 5820 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys 22:31:45.0929 5820 pciide - ok 22:31:45.0945 5820 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys 22:31:45.0960 5820 pcmcia - ok 22:31:45.0976 5820 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys 22:31:45.0991 5820 pcw - ok 22:31:46.0007 5820 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys 22:31:46.0023 5820 PEAUTH - ok 22:31:46.0116 5820 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe 22:31:46.0116 5820 PerfHost - ok 22:31:46.0179 5820 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll 22:31:46.0194 5820 pla - ok 22:31:46.0225 5820 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 22:31:46.0241 5820 PlugPlay - ok 22:31:46.0257 5820 PnkBstrA - ok 22:31:46.0288 5820 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 22:31:46.0288 5820 PNRPAutoReg - ok 22:31:46.0303 5820 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 22:31:46.0319 5820 PNRPsvc - ok 22:31:46.0335 5820 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 22:31:46.0350 5820 PolicyAgent - ok 22:31:46.0381 5820 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll 22:31:46.0381 5820 Power - ok 22:31:46.0413 5820 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 22:31:46.0413 5820 PptpMiniport - ok 22:31:46.0444 5820 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys 22:31:46.0444 5820 Processor - ok 22:31:46.0491 5820 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll 22:31:46.0491 5820 ProfSvc - ok 22:31:46.0506 5820 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe 22:31:46.0506 5820 ProtectedStorage - ok 22:31:46.0537 5820 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys 22:31:46.0537 5820 Psched - ok 22:31:46.0600 5820 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys 22:31:46.0615 5820 ql2300 - ok 22:31:46.0631 5820 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys 22:31:46.0631 5820 ql40xx - ok 22:31:46.0662 5820 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll 22:31:46.0678 5820 QWAVE - ok 22:31:46.0693 5820 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 22:31:46.0693 5820 QWAVEdrv - ok 22:31:46.0709 5820 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 22:31:46.0709 5820 RasAcd - ok 22:31:46.0740 5820 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 22:31:46.0740 5820 RasAgileVpn - ok 22:31:46.0771 5820 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll 22:31:46.0771 5820 RasAuto - ok 22:31:46.0803 5820 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 22:31:46.0803 5820 Rasl2tp - ok 22:31:46.0834 5820 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll 22:31:46.0834 5820 RasMan - ok 22:31:46.0865 5820 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 22:31:46.0881 5820 RasPppoe - ok 22:31:46.0881 5820 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 22:31:46.0881 5820 RasSstp - ok 22:31:46.0927 5820 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 22:31:46.0927 5820 rdbss - ok 22:31:46.0943 5820 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys 22:31:46.0943 5820 rdpbus - ok 22:31:46.0974 5820 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 22:31:46.0974 5820 RDPCDD - ok 22:31:46.0990 5820 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 22:31:46.0990 5820 RDPENCDD - ok 22:31:47.0021 5820 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 22:31:47.0021 5820 RDPREFMP - ok 22:31:47.0083 5820 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys 22:31:47.0083 5820 RdpVideoMiniport - ok 22:31:47.0130 5820 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 22:31:47.0146 5820 RDPWD - ok 22:31:47.0177 5820 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 22:31:47.0177 5820 rdyboost - ok 22:31:47.0208 5820 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll 22:31:47.0208 5820 RemoteAccess - ok 22:31:47.0239 5820 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll 22:31:47.0255 5820 RemoteRegistry - ok 22:31:47.0286 5820 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys 22:31:47.0302 5820 RFCOMM - ok 22:31:47.0349 5820 [ 085D18C71AB2611A3D61528132B6501E ] RoxioNow Service C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe 22:31:47.0349 5820 RoxioNow Service - ok 22:31:47.0380 5820 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 22:31:47.0395 5820 RpcEptMapper - ok 22:31:47.0427 5820 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe 22:31:47.0427 5820 RpcLocator - ok 22:31:47.0442 5820 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll 22:31:47.0458 5820 RpcSs - ok 22:31:47.0505 5820 [ 1F5E7AF59B390261A85F5BEDB1BB88B3 ] RSPCIESTOR C:\Windows\system32\DRIVERS\RtsPStor.sys 22:31:47.0505 5820 RSPCIESTOR - ok 22:31:47.0536 5820 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 22:31:47.0536 5820 rspndr - ok 22:31:47.0567 5820 [ ED5873F7DFB2F96D37F13322211B6BDC ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys 22:31:47.0583 5820 RTL8167 - ok 22:31:47.0598 5820 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe 22:31:47.0614 5820 SamSs - ok 22:31:47.0629 5820 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 22:31:47.0629 5820 sbp2port - ok 22:31:47.0692 5820 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll 22:31:47.0692 5820 SCardSvr - ok 22:31:47.0707 5820 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 22:31:47.0707 5820 scfilter - ok 22:31:47.0754 5820 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll 22:31:47.0770 5820 Schedule - ok 22:31:47.0785 5820 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll 22:31:47.0785 5820 SCPolicySvc - ok 22:31:47.0832 5820 [ 490B0B68BB938D5C628EC4A67277BE75 ] ScreamBAudioSvc C:\Windows\system32\drivers\ScreamingBAudio64.sys 22:31:47.0848 5820 ScreamBAudioSvc - ok 22:31:47.0863 5820 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys 22:31:47.0863 5820 sdbus - ok 22:31:47.0895 5820 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll 22:31:47.0895 5820 SDRSVC - ok 22:31:47.0910 5820 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 22:31:47.0926 5820 secdrv - ok 22:31:47.0926 5820 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll 22:31:47.0926 5820 seclogon - ok 22:31:47.0957 5820 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll 22:31:47.0957 5820 SENS - ok 22:31:47.0988 5820 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll 22:31:48.0004 5820 SensrSvc - ok 22:31:48.0019 5820 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys 22:31:48.0035 5820 Serenum - ok 22:31:48.0051 5820 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys 22:31:48.0051 5820 Serial - ok 22:31:48.0066 5820 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys 22:31:48.0066 5820 sermouse - ok 22:31:48.0113 5820 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll 22:31:48.0113 5820 SessionEnv - ok 22:31:48.0129 5820 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 22:31:48.0129 5820 sffdisk - ok 22:31:48.0144 5820 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 22:31:48.0160 5820 sffp_mmc - ok 22:31:48.0175 5820 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 22:31:48.0175 5820 sffp_sd - ok 22:31:48.0207 5820 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys 22:31:48.0207 5820 sfloppy - ok 22:31:48.0316 5820 [ C6CC9297BD53E5229653303E556AA539 ] Sftfs C:\Windows\system32\DRIVERS\Sftfslh.sys 22:31:48.0347 5820 Sftfs - ok 22:31:48.0456 5820 [ 13693B6354DD6E72DC5131DA7D764B90 ] sftlist C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe 22:31:48.0472 5820 sftlist - ok 22:31:48.0487 5820 [ 390AA7BC52CEE43F6790CDEA1E776703 ] Sftplay C:\Windows\system32\DRIVERS\Sftplaylh.sys 22:31:48.0487 5820 Sftplay - ok 22:31:48.0503 5820 [ 617E29A0B0A2807466560D4C4E338D3E ] Sftredir C:\Windows\system32\DRIVERS\Sftredirlh.sys 22:31:48.0519 5820 Sftredir - ok 22:31:48.0550 5820 [ 8F571F016FA1976F445147E9E6C8AE9B ] Sftvol C:\Windows\system32\DRIVERS\Sftvollh.sys 22:31:48.0565 5820 Sftvol - ok 22:31:48.0597 5820 [ C3CDDD18F43D44AB713CF8C4916F7696 ] sftvsa C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe 22:31:48.0597 5820 sftvsa - ok 22:31:48.0628 5820 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll 22:31:48.0643 5820 SharedAccess - ok 22:31:48.0675 5820 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll 22:31:48.0690 5820 ShellHWDetection - ok 22:31:48.0706 5820 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys 22:31:48.0706 5820 SiSRaid2 - ok 22:31:48.0737 5820 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys 22:31:48.0753 5820 SiSRaid4 - ok 22:31:48.0799 5820 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 22:31:48.0815 5820 SkypeUpdate - ok 22:31:48.0877 5820 [ DD0443BC6CC78A19FD399817F8C51401 ] SmartDefragDriver C:\Windows\system32\Drivers\SmartDefragDriver.sys 22:31:48.0893 5820 SmartDefragDriver - ok 22:31:48.0909 5820 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys 22:31:48.0924 5820 Smb - ok 22:31:48.0955 5820 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 22:31:48.0955 5820 SNMPTRAP - ok 22:31:48.0971 5820 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys 22:31:48.0971 5820 spldr - ok 22:31:49.0002 5820 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe 22:31:49.0018 5820 Spooler - ok 22:31:49.0096 5820 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe 22:31:49.0158 5820 sppsvc - ok 22:31:49.0189 5820 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll 22:31:49.0205 5820 sppuinotify - ok 22:31:49.0314 5820 [ 90EF30C3867BCDE4579C01A6D6E75A7A ] SRTSP C:\Windows\System32\Drivers\NISx64\1207020.003\SRTSP64.SYS 22:31:49.0314 5820 SRTSP - ok 22:31:49.0330 5820 [ C513E8A5E7978DA49077F5484344EE1B ] SRTSPX C:\Windows\system32\drivers\NISx64\1207020.003\SRTSPX64.SYS 22:31:49.0345 5820 SRTSPX - ok 22:31:49.0377 5820 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys 22:31:49.0377 5820 srv - ok 22:31:49.0392 5820 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 22:31:49.0408 5820 srv2 - ok 22:31:49.0470 5820 [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL6.SYS 22:31:49.0486 5820 SrvHsfHDA - ok 22:31:49.0533 5820 [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV6.SYS 22:31:49.0548 5820 SrvHsfV92 - ok 22:31:49.0579 5820 [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT6.SYS 22:31:49.0595 5820 SrvHsfWinac - ok 22:31:49.0626 5820 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 22:31:49.0626 5820 srvnet - ok 22:31:49.0689 5820 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 22:31:49.0704 5820 SSDPSRV - ok 22:31:49.0704 5820 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll 22:31:49.0704 5820 SstpSvc - ok 22:31:49.0876 5820 [ D30FE3ECF1D6D521365FAE307B500BC0 ] STacSV C:\Program Files\IDT\WDM\STacSV64.exe 22:31:49.0876 5820 STacSV - ok 22:31:49.0891 5820 Steam Client Service - ok 22:31:49.0923 5820 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys 22:31:49.0923 5820 stexstor - ok 22:31:49.0969 5820 [ 6F69D75F50E8FAF1003AA6CFB18B91EC ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys 22:31:49.0985 5820 STHDA - ok 22:31:50.0032 5820 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll 22:31:50.0047 5820 stisvc - ok 22:31:50.0047 5820 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys 22:31:50.0047 5820 swenum - ok 22:31:50.0079 5820 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll 22:31:50.0094 5820 swprv - ok 22:31:50.0110 5820 [ 6160145C7A87FC7672E8E3B886888176 ] SymDS C:\Windows\system32\drivers\NISx64\1207020.003\SYMDS64.SYS 22:31:50.0125 5820 SymDS - ok 22:31:50.0172 5820 [ 96AEED40D4D3521568B42027687E69E0 ] SymEFA C:\Windows\system32\drivers\NISx64\1207020.003\SYMEFA64.SYS 22:31:50.0172 5820 SymEFA - ok 22:31:50.0203 5820 [ 21A1C2D694C3CF962D31F5E873AB3D6F ] SymEvent C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 22:31:50.0235 5820 SymEvent - ok 22:31:50.0250 5820 [ 3AA3B2DF451DA88C38AB00B19FA3562E ] SymIM C:\Windows\system32\DRIVERS\SymIMv.sys 22:31:50.0266 5820 SymIM - ok 22:31:50.0313 5820 [ BD0D711D8CBFCAA19CA123306EAF53A5 ] SymIRON C:\Windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS 22:31:50.0313 5820 SymIRON - ok 22:31:50.0328 5820 [ A6ADB3D83023F8DAA0F7B6FDA785D83B ] SymNetS C:\Windows\System32\Drivers\NISx64\1207020.003\SYMNETS.SYS 22:31:50.0328 5820 SymNetS - ok 22:31:50.0391 5820 [ AC3CC98B1BDB6540021D3FFB105AC2B9 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys 22:31:50.0391 5820 SynTP - ok 22:31:50.0453 5820 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll 22:31:50.0469 5820 SysMain - ok 22:31:50.0484 5820 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll 22:31:50.0500 5820 TabletInputService - ok 22:31:50.0531 5820 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll 22:31:50.0531 5820 TapiSrv - ok 22:31:50.0547 5820 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll 22:31:50.0562 5820 TBS - ok 22:31:50.0625 5820 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 22:31:50.0640 5820 Tcpip - ok 22:31:50.0671 5820 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 22:31:50.0687 5820 TCPIP6 - ok 22:31:50.0734 5820 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 22:31:50.0749 5820 tcpipreg - ok 22:31:50.0781 5820 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 22:31:50.0781 5820 TDPIPE - ok 22:31:50.0812 5820 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 22:31:50.0843 5820 TDTCP - ok 22:31:50.0874 5820 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 22:31:50.0874 5820 tdx - ok 22:31:50.0890 5820 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys 22:31:50.0890 5820 TermDD - ok 22:31:50.0937 5820 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll 22:31:50.0952 5820 TermService - ok 22:31:50.0968 5820 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll 22:31:50.0968 5820 Themes - ok 22:31:50.0999 5820 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll 22:31:50.0999 5820 THREADORDER - ok 22:31:51.0030 5820 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll 22:31:51.0030 5820 TrkWks - ok 22:31:51.0077 5820 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 22:31:51.0093 5820 TrustedInstaller - ok 22:31:51.0124 5820 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 22:31:51.0124 5820 tssecsrv - ok 22:31:51.0155 5820 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 22:31:51.0155 5820 TsUsbFlt - ok 22:31:51.0186 5820 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys 22:31:51.0217 5820 TsUsbGD - ok 22:31:51.0233 5820 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 22:31:51.0233 5820 tunnel - ok 22:31:51.0264 5820 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys 22:31:51.0264 5820 uagp35 - ok 22:31:51.0295 5820 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 22:31:51.0295 5820 udfs - ok 22:31:51.0327 5820 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe 22:31:51.0327 5820 UI0Detect - ok 22:31:51.0342 5820 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 22:31:51.0358 5820 uliagpkx - ok 22:31:51.0373 5820 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys 22:31:51.0389 5820 umbus - ok 22:31:51.0467 5820 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 22:31:51.0467 5820 UmPass - ok 22:31:51.0514 5820 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll 22:31:51.0529 5820 upnphost - ok 22:31:51.0576 5820 [ 43228F8EDD1B0BCDD3145AD246E63D39 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys 22:31:51.0592 5820 USBAAPL64 - ok 22:31:51.0623 5820 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys 22:31:51.0623 5820 usbaudio - ok 22:31:51.0685 5820 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 22:31:51.0685 5820 usbccgp - ok 22:31:51.0701 5820 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys 22:31:51.0701 5820 usbcir - ok 22:31:51.0717 5820 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys 22:31:51.0732 5820 usbehci - ok 22:31:51.0748 5820 [ 573D192E268F0C5B486B7E96F661E538 ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys 22:31:51.0779 5820 usbfilter - ok 22:31:51.0795 5820 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\drivers\usbhub.sys 22:31:51.0810 5820 usbhub - ok 22:31:51.0826 5820 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys 22:31:51.0826 5820 usbohci - ok 22:31:51.0857 5820 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 22:31:51.0857 5820 usbprint - ok 22:31:51.0888 5820 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 22:31:51.0888 5820 usbscan - ok 22:31:51.0919 5820 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 22:31:51.0935 5820 USBSTOR - ok 22:31:51.0951 5820 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 22:31:51.0951 5820 usbuhci - ok 22:31:51.0982 5820 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys 22:31:51.0982 5820 usbvideo - ok 22:31:52.0013 5820 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll 22:31:52.0013 5820 UxSms - ok 22:31:52.0044 5820 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe 22:31:52.0044 5820 VaultSvc - ok 22:31:52.0044 5820 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 22:31:52.0044 5820 vdrvroot - ok 22:31:52.0075 5820 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe 22:31:52.0107 5820 vds - ok 22:31:52.0138 5820 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 22:31:52.0138 5820 vga - ok 22:31:52.0153 5820 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys 22:31:52.0153 5820 VgaSave - ok 22:31:52.0185 5820 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 22:31:52.0185 5820 vhdmp - ok 22:31:52.0200 5820 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys 22:31:52.0200 5820 viaide - ok 22:31:52.0231 5820 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys 22:31:52.0231 5820 volmgr - ok 22:31:52.0247 5820 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 22:31:52.0263 5820 volmgrx - ok 22:31:52.0278 5820 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys 22:31:52.0278 5820 volsnap - ok 22:31:52.0309 5820 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys 22:31:52.0309 5820 vsmraid - ok 22:31:52.0372 5820 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe 22:31:52.0387 5820 VSS - ok 22:31:52.0419 5820 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 22:31:52.0419 5820 vwifibus - ok 22:31:52.0434 5820 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 22:31:52.0434 5820 vwififlt - ok 22:31:52.0450 5820 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys 22:31:52.0465 5820 vwifimp - ok 22:31:52.0481 5820 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll 22:31:52.0481 5820 W32Time - ok 22:31:52.0512 5820 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys 22:31:52.0512 5820 WacomPen - ok 22:31:52.0528 5820 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 22:31:52.0528 5820 WANARP - ok 22:31:52.0543 5820 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 22:31:52.0543 5820 Wanarpv6 - ok 22:31:52.0606 5820 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe 22:31:52.0684 5820 WatAdminSvc - ok 22:31:52.0731 5820 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe 22:31:52.0746 5820 wbengine - ok 22:31:52.0762 5820 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 22:31:52.0777 5820 WbioSrvc - ok 22:31:52.0824 5820 [ 3A2D452C40162823B79867040B46D4A8 ] WCMVCAM C:\Windows\system32\DRIVERS\wcmvcam64.sys 22:31:52.0855 5820 WCMVCAM - ok 22:31:52.0887 5820 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll 22:31:52.0902 5820 wcncsvc - ok 22:31:52.0918 5820 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 22:31:52.0918 5820 WcsPlugInService - ok 22:31:52.0933 5820 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys 22:31:52.0949 5820 Wd - ok 22:31:52.0980 5820 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 22:31:52.0996 5820 Wdf01000 - ok 22:31:53.0027 5820 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll 22:31:53.0043 5820 WdiServiceHost - ok 22:31:53.0043 5820 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll 22:31:53.0043 5820 WdiSystemHost - ok 22:31:53.0058 5820 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll 22:31:53.0058 5820 WebClient - ok 22:31:53.0089 5820 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll 22:31:53.0089 5820 Wecsvc - ok 22:31:53.0121 5820 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll 22:31:53.0121 5820 wercplsupport - ok 22:31:53.0136 5820 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll 22:31:53.0136 5820 WerSvc - ok 22:31:53.0167 5820 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 22:31:53.0167 5820 WfpLwf - ok 22:31:53.0183 5820 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys 22:31:53.0199 5820 WIMMount - ok 22:31:53.0214 5820 WinDefend - ok 22:31:53.0214 5820 WinHttpAutoProxySvc - ok 22:31:53.0261 5820 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 22:31:53.0277 5820 Winmgmt - ok 22:31:53.0355 5820 [ 0C0195C48B6B8582FA6F6373032118DA ] WinRing0_1_2_0 C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys 22:31:53.0370 5820 WinRing0_1_2_0 - ok 22:31:53.0433 5820 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll 22:31:53.0448 5820 WinRM - ok 22:31:53.0495 5820 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUSB.sys 22:31:53.0495 5820 WinUsb - ok 22:31:53.0557 5820 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll 22:31:53.0557 5820 Wlansvc - ok 22:31:53.0604 5820 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 22:31:53.0635 5820 wlcrasvc - ok 22:31:53.0776 5820 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 22:31:53.0791 5820 wlidsvc - ok 22:31:53.0823 5820 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 22:31:53.0823 5820 WmiAcpi - ok 22:31:53.0854 5820 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 22:31:53.0854 5820 wmiApSrv - ok 22:31:53.0901 5820 WMPNetworkSvc - ok 22:31:53.0932 5820 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll 22:31:53.0932 5820 WPCSvc - ok 22:31:53.0947 5820 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 22:31:53.0947 5820 WPDBusEnum - ok 22:31:53.0963 5820 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 22:31:53.0963 5820 ws2ifsl - ok 22:31:53.0979 5820 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll 22:31:53.0979 5820 wscsvc - ok 22:31:53.0979 5820 WSearch - ok 22:31:54.0072 5820 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll 22:31:54.0103 5820 wuauserv - ok 22:31:54.0135 5820 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 22:31:54.0135 5820 WudfPf - ok 22:31:54.0150 5820 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 22:31:54.0150 5820 WUDFRd - ok 22:31:54.0197 5820 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 22:31:54.0197 5820 wudfsvc - ok 22:31:54.0228 5820 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll 22:31:54.0228 5820 WwanSvc - ok 22:31:54.0369 5820 X6va007 - ok 22:31:54.0493 5820 X6va008 - ok 22:31:54.0525 5820 ================ Scan global =============================== 22:31:54.0540 5820 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll 22:31:54.0587 5820 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 22:31:54.0587 5820 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 22:31:54.0618 5820 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll 22:31:54.0696 5820 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe 22:31:54.0696 5820 [Global] - ok 22:31:54.0712 5820 ================ Scan MBR ================================== 22:31:54.0712 5820 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 22:31:55.0024 5820 \Device\Harddisk0\DR0 - ok 22:31:55.0024 5820 ================ Scan VBR ================================== 22:31:55.0024 5820 [ 7BB3186AC593EC23B7CA3C03653D3990 ] \Device\Harddisk0\DR0\Partition1 22:31:55.0039 5820 \Device\Harddisk0\DR0\Partition1 - ok 22:31:55.0039 5820 [ 5C18451FAB99BEA8C2852C76EBC5684F ] \Device\Harddisk0\DR0\Partition2 22:31:55.0039 5820 \Device\Harddisk0\DR0\Partition2 - ok 22:31:55.0071 5820 [ 85672FA59A7AD0C271A01293FF11EBEA ] \Device\Harddisk0\DR0\Partition3 22:31:55.0086 5820 \Device\Harddisk0\DR0\Partition3 - ok 22:31:55.0086 5820 [ 077DDB72F1292D176DC50935A7E0031C ] \Device\Harddisk0\DR0\Partition4 22:31:55.0102 5820 \Device\Harddisk0\DR0\Partition4 - ok 22:31:55.0102 5820 ============================================================ 22:31:55.0102 5820 Scan finished 22:31:55.0102 5820 ============================================================ 22:31:55.0102 3400 Detected object count: 0 22:31:55.0102 3400 Actual detected object count: 0 22:32:51.0121 4288 ============================================================ 22:32:51.0121 4288 Scan started 22:32:51.0121 4288 Mode: Manual; 22:32:51.0121 4288 ============================================================ 22:32:51.0433 4288 ================ Scan system memory ======================== 22:32:51.0433 4288 System memory - ok 22:32:51.0449 4288 ================ Scan services ============================= 22:32:51.0636 4288 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 22:32:51.0636 4288 1394ohci - ok 22:32:51.0683 4288 [ 733CA4DF8BE48A1009B86FA442551CA4 ] Accelerometer C:\Windows\system32\DRIVERS\Accelerometer.sys 22:32:51.0683 4288 Accelerometer - ok 22:32:51.0699 4288 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys 22:32:51.0714 4288 ACPI - ok 22:32:51.0745 4288 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 22:32:51.0745 4288 AcpiPmi - ok 22:32:51.0886 4288 [ EC807244904FA170C299AB06D87FBDBE ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 22:32:51.0886 4288 AdobeFlashPlayerUpdateSvc - ok 22:32:51.0917 4288 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys 22:32:51.0917 4288 adp94xx - ok 22:32:51.0933 4288 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys 22:32:51.0948 4288 adpahci - ok 22:32:51.0964 4288 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys 22:32:51.0964 4288 adpu320 - ok 22:32:52.0089 4288 [ B11C71B29FA69E4586F9B65560E6604D ] AdvancedSystemCareService5 C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe 22:32:52.0089 4288 AdvancedSystemCareService5 - ok 22:32:52.0104 4288 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 22:32:52.0104 4288 AeLookupSvc - ok 22:32:52.0276 4288 [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters C:\Program Files\IDT\WDM\AESTSr64.exe 22:32:52.0291 4288 AESTFilters - ok 22:32:52.0323 4288 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys 22:32:52.0323 4288 AFD - ok 22:32:52.0354 4288 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys 22:32:52.0354 4288 agp440 - ok 22:32:52.0385 4288 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe 22:32:52.0385 4288 ALG - ok 22:32:52.0385 4288 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys 22:32:52.0385 4288 aliide - ok 22:32:52.0494 4288 ALSysIO - ok 22:32:52.0525 4288 [ 3DE8DC285540733818588CC94E7FC96E ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 22:32:52.0525 4288 AMD External Events Utility - ok 22:32:52.0572 4288 AMD FUEL Service - ok 22:32:52.0588 4288 [ 30BFEEE0DFFD5BD79D29157CF080DEED ] amdhub30 C:\Windows\system32\DRIVERS\amdhub30.sys 22:32:52.0588 4288 amdhub30 - ok 22:32:52.0619 4288 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys 22:32:52.0619 4288 amdide - ok 22:32:52.0635 4288 [ 6A2EEB0C4133B20773BB3DD0B7B377B4 ] amdiox64 C:\Windows\system32\DRIVERS\amdiox64.sys 22:32:52.0635 4288 amdiox64 - ok 22:32:52.0650 4288 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys 22:32:52.0650 4288 AmdK8 - ok 22:32:52.0853 4288 [ 42D53DAF85F948C39CE1351A8F5B5808 ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys 22:32:52.0931 4288 amdkmdag - ok 22:32:52.0978 4288 [ 75182B5784015B271932088551616A96 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys 22:32:52.0978 4288 amdkmdap - ok 22:32:52.0993 4288 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 22:32:52.0993 4288 AmdPPM - ok 22:32:53.0009 4288 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys 22:32:53.0009 4288 amdsata - ok 22:32:53.0040 4288 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys 22:32:53.0056 4288 amdsbs - ok 22:32:53.0071 4288 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys 22:32:53.0071 4288 amdxata - ok 22:32:53.0103 4288 [ 321533578132C811EC834A1B741C994C ] amdxhc C:\Windows\system32\DRIVERS\amdxhc.sys 22:32:53.0103 4288 amdxhc - ok 22:32:53.0103 4288 [ F9D46B6B322708BD5AFCC8767EBDC901 ] amd_sata C:\Windows\system32\DRIVERS\amd_sata.sys 22:32:53.0118 4288 amd_sata - ok 22:32:53.0118 4288 [ 329CC9C7E20DEEBCD4CD10816193EF14 ] amd_xata C:\Windows\system32\DRIVERS\amd_xata.sys 22:32:53.0118 4288 amd_xata - ok 22:32:53.0149 4288 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys 22:32:53.0149 4288 AppID - ok 22:32:53.0165 4288 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll 22:32:53.0165 4288 AppIDSvc - ok 22:32:53.0181 4288 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll 22:32:53.0181 4288 Appinfo - ok 22:32:53.0259 4288 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 22:32:53.0259 4288 Apple Mobile Device - ok 22:32:53.0274 4288 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys 22:32:53.0290 4288 arc - ok 22:32:53.0321 4288 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys 22:32:53.0321 4288 arcsas - ok 22:32:53.0430 4288 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 22:32:53.0430 4288 aspnet_state - ok 22:32:53.0430 4288 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 22:32:53.0430 4288 AsyncMac - ok 22:32:53.0461 4288 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys 22:32:53.0461 4288 atapi - ok 22:32:53.0477 4288 [ 4BF5BCA6E2608CD8A00BC4A6673A9F47 ] AtiHDAudioService C:\Windows\system32\drivers\AtihdW76.sys 22:32:53.0477 4288 AtiHDAudioService - ok 22:32:53.0508 4288 atillk64 - ok 22:32:53.0555 4288 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 22:32:53.0555 4288 AudioEndpointBuilder - ok 22:32:53.0571 4288 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll 22:32:53.0571 4288 AudioSrv - ok 22:32:53.0586 4288 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll 22:32:53.0586 4288 AxInstSV - ok 22:32:53.0633 4288 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys 22:32:53.0633 4288 b06bdrv - ok 22:32:53.0649 4288 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 22:32:53.0649 4288 b57nd60a - ok 22:32:53.0773 4288 [ D41E6CCB9752F551049D2E0C437DD03D ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys 22:32:53.0805 4288 BCM43XX - ok 22:32:53.0820 4288 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll 22:32:53.0820 4288 BDESVC - ok 22:32:53.0836 4288 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys 22:32:53.0836 4288 Beep - ok 22:32:53.0867 4288 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll 22:32:53.0867 4288 BFE - ok 22:32:54.0039 4288 [ 866335C9C0E6733C753FB472C539A6B9 ] BHDrvx64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20130208.001\BHDrvx64.sys 22:32:54.0054 4288 BHDrvx64 - ok 22:32:54.0101 4288 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll 22:32:54.0101 4288 BITS - ok 22:32:54.0132 4288 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys 22:32:54.0132 4288 blbdrive - ok 22:32:54.0148 4288 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 22:32:54.0148 4288 Bonjour Service - ok 22:32:54.0163 4288 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 22:32:54.0163 4288 bowser - ok 22:32:54.0179 4288 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys 22:32:54.0179 4288 BrFiltLo - ok 22:32:54.0195 4288 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys 22:32:54.0195 4288 BrFiltUp - ok 22:32:54.0241 4288 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll 22:32:54.0241 4288 Browser - ok 22:32:54.0273 4288 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys 22:32:54.0273 4288 Brserid - ok 22:32:54.0288 4288 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 22:32:54.0288 4288 BrSerWdm - ok 22:32:54.0304 4288 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 22:32:54.0304 4288 BrUsbMdm - ok 22:32:54.0335 4288 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 22:32:54.0335 4288 BrUsbSer - ok 22:32:54.0366 4288 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys 22:32:54.0366 4288 BthEnum - ok 22:32:54.0382 4288 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys 22:32:54.0382 4288 BTHMODEM - ok 22:32:54.0397 4288 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys 22:32:54.0397 4288 BthPan - ok 22:32:54.0444 4288 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys 22:32:54.0444 4288 BTHPORT - ok 22:32:54.0475 4288 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll 22:32:54.0475 4288 bthserv - ok 22:32:54.0491 4288 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys 22:32:54.0491 4288 BTHUSB - ok 22:32:54.0538 4288 [ 7A2CE8C1BF4DAA1F2766E21E9CA11078 ] btwampfl C:\Windows\system32\drivers\btwampfl.sys 22:32:54.0538 4288 btwampfl - ok 22:32:54.0553 4288 [ A75BF6802A967F5AACECC3C67FEBDF55 ] btwaudio C:\Windows\system32\drivers\btwaudio.sys 22:32:54.0569 4288 btwaudio - ok 22:32:54.0569 4288 [ D895DC213EDBDA5FCC53AAD1F1E0E63B ] btwavdt C:\Windows\system32\DRIVERS\btwavdt.sys 22:32:54.0569 4288 btwavdt - ok 22:32:54.0631 4288 [ 692F8648D7686D91E34A65AC698019D8 ] btwdins C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe 22:32:54.0647 4288 btwdins - ok 22:32:54.0647 4288 [ 07096D2BC22CCB6CEA5A532DF0BE8A75 ] btwl2cap C:\Windows\system32\DRIVERS\btwl2cap.sys 22:32:54.0647 4288 btwl2cap - ok 22:32:54.0678 4288 [ 6D7AA2BDE0135599C5F230D69DB3B420 ] btwrchid C:\Windows\system32\DRIVERS\btwrchid.sys 22:32:54.0678 4288 btwrchid - ok 22:32:54.0709 4288 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 22:32:54.0709 4288 cdfs - ok 22:32:54.0741 4288 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 22:32:54.0741 4288 cdrom - ok 22:32:54.0787 4288 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll 22:32:54.0787 4288 CertPropSvc - ok 22:32:54.0803 4288 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys 22:32:54.0803 4288 circlass - ok 22:32:54.0819 4288 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys 22:32:54.0834 4288 CLFS - ok 22:32:54.0881 4288 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 22:32:54.0897 4288 clr_optimization_v2.0.50727_32 - ok 22:32:54.0943 4288 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 22:32:54.0943 4288 clr_optimization_v2.0.50727_64 - ok 22:32:55.0006 4288 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 22:32:55.0006 4288 clr_optimization_v4.0.30319_32 - ok 22:32:55.0021 4288 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 22:32:55.0021 4288 clr_optimization_v4.0.30319_64 - ok 22:32:55.0037 4288 clwvd - ok 22:32:55.0037 4288 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys 22:32:55.0037 4288 CmBatt - ok 22:32:55.0068 4288 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys 22:32:55.0068 4288 cmdide - ok 22:32:55.0115 4288 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys 22:32:55.0115 4288 CNG - ok 22:32:55.0131 4288 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys 22:32:55.0131 4288 Compbatt - ok 22:32:55.0146 4288 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 22:32:55.0146 4288 CompositeBus - ok 22:32:55.0146 4288 COMSysApp - ok 22:32:55.0193 4288 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys 22:32:55.0193 4288 crcdisk - ok 22:32:55.0224 4288 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll 22:32:55.0224 4288 CryptSvc - ok 22:32:55.0318 4288 [ 72794D112CBAFF3BC0C29BF7350D4741 ] cvhsvc C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE 22:32:55.0318 4288 cvhsvc - ok 22:32:55.0349 4288 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll 22:32:55.0365 4288 DcomLaunch - ok 22:32:55.0396 4288 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll 22:32:55.0396 4288 defragsvc - ok 22:32:55.0396 4288 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 22:32:55.0411 4288 DfsC - ok 22:32:55.0443 4288 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll 22:32:55.0443 4288 Dhcp - ok 22:32:55.0458 4288 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys 22:32:55.0458 4288 discache - ok 22:32:55.0489 4288 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys 22:32:55.0489 4288 Disk - ok 22:32:55.0521 4288 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll 22:32:55.0521 4288 Dnscache - ok 22:32:55.0536 4288 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll 22:32:55.0536 4288 dot3svc - ok 22:32:55.0552 4288 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll 22:32:55.0552 4288 DPS - ok 22:32:55.0567 4288 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 22:32:55.0567 4288 drmkaud - ok 22:32:55.0599 4288 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 22:32:55.0614 4288 DXGKrnl - ok 22:32:55.0614 4288 EagleX64 - ok 22:32:55.0645 4288 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll 22:32:55.0645 4288 EapHost - ok 22:32:55.0723 4288 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys 22:32:55.0755 4288 ebdrv - ok 22:32:55.0801 4288 [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] eeCtrl C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys 22:32:55.0801 4288 eeCtrl - ok 22:32:55.0817 4288 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe 22:32:55.0817 4288 EFS - ok 22:32:55.0879 4288 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 22:32:55.0895 4288 ehRecvr - ok 22:32:55.0911 4288 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe 22:32:55.0911 4288 ehSched - ok 22:32:55.0942 4288 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys 22:32:55.0942 4288 elxstor - ok 22:32:55.0973 4288 [ C5BCCB378D0A896304A3E71BE7215983 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 22:32:55.0989 4288 EraserUtilRebootDrv - ok 22:32:56.0004 4288 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys 22:32:56.0004 4288 ErrDev - ok 22:32:56.0051 4288 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll 22:32:56.0051 4288 EventSystem - ok 22:32:56.0067 4288 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys 22:32:56.0067 4288 exfat - ok 22:32:56.0067 4288 ezSharedSvc - ok 22:32:56.0098 4288 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys 22:32:56.0098 4288 fastfat - ok 22:32:56.0129 4288 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe 22:32:56.0145 4288 Fax - ok 22:32:56.0145 4288 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys 22:32:56.0145 4288 fdc - ok 22:32:56.0176 4288 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll 22:32:56.0176 4288 fdPHost - ok 22:32:56.0191 4288 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll 22:32:56.0191 4288 FDResPub - ok 22:32:56.0223 4288 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 22:32:56.0223 4288 FileInfo - ok 22:32:56.0223 4288 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 22:32:56.0223 4288 Filetrace - ok 22:32:56.0254 4288 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys 22:32:56.0254 4288 flpydisk - ok 22:32:56.0269 4288 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 22:32:56.0269 4288 FltMgr - ok 22:32:56.0316 4288 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll 22:32:56.0332 4288 FontCache - ok 22:32:56.0363 4288 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 22:32:56.0363 4288 FontCache3.0.0.0 - ok 22:32:56.0410 4288 [ 2074A85A6B8F84A5A9C60B915B465FAF ] FPLService C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe 22:32:56.0410 4288 FPLService - ok 22:32:56.0425 4288 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 22:32:56.0425 4288 FsDepends - ok 22:32:56.0457 4288 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 22:32:56.0457 4288 Fs_Rec - ok 22:32:56.0488 4288 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 22:32:56.0488 4288 fvevol - ok 22:32:56.0519 4288 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys 22:32:56.0519 4288 gagp30kx - ok 22:32:56.0550 4288 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 22:32:56.0550 4288 GEARAspiWDM - ok 22:32:56.0597 4288 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll 22:32:56.0597 4288 gpsvc - ok 22:32:56.0675 4288 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 22:32:56.0675 4288 gupdate - ok 22:32:56.0675 4288 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 22:32:56.0691 4288 gupdatem - ok 22:32:56.0706 4288 [ 1E6438D4EA6E1174A3B3B1EDC4DE660B ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys 22:32:56.0706 4288 hamachi - ok 22:32:56.0815 4288 [ 785FD63B74B30986A9F2C7D965CA509F ] Hamachi2Svc C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe 22:32:56.0831 4288 Hamachi2Svc - ok 22:32:56.0862 4288 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 22:32:56.0862 4288 hcw85cir - ok 22:32:56.0893 4288 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 22:32:56.0893 4288 HdAudAddService - ok 22:32:56.0909 4288 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys 22:32:56.0909 4288 HDAudBus - ok 22:32:56.0940 4288 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys 22:32:56.0940 4288 HidBatt - ok 22:32:56.0956 4288 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys 22:32:56.0956 4288 HidBth - ok 22:32:56.0971 4288 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys 22:32:56.0971 4288 HidIr - ok 22:32:56.0987 4288 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll 22:32:56.0987 4288 hidserv - ok 22:32:57.0018 4288 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 22:32:57.0018 4288 HidUsb - ok 22:32:57.0049 4288 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll 22:32:57.0049 4288 hkmsvc - ok 22:32:57.0065 4288 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll 22:32:57.0065 4288 HomeGroupListener - ok 22:32:57.0096 4288 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 22:32:57.0112 4288 HomeGroupProvider - ok 22:32:57.0174 4288 [ BB1FC298BE53AAB1E110F6E786BD8AC5 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe 22:32:57.0174 4288 HP Support Assistant Service - ok 22:32:57.0221 4288 [ 6A181452D4E240B8ECC7614B9A19BDE9 ] HPClientSvc C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe 22:32:57.0221 4288 HPClientSvc - ok 22:32:57.0299 4288 [ E040F0064D39F73BB4995D494F3DCBB8 ] hpCMSrv C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe 22:32:57.0315 4288 hpCMSrv - ok 22:32:57.0346 4288 [ BDFE112FA2F3422842E83DA631065B37 ] hpdskflt C:\Windows\system32\DRIVERS\hpdskflt.sys 22:32:57.0346 4288 hpdskflt - ok 22:32:57.0424 4288 [ 9B7EDD3FE7C211C36E921D34D18A3A0A ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe 22:32:57.0424 4288 hpqwmiex - ok 22:32:57.0455 4288 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 22:32:57.0455 4288 HpSAMD - ok 22:32:57.0502 4288 [ A92D6DE158BC0671D9336580F6414044 ] hpsrv C:\Windows\system32\Hpservice.exe 22:32:57.0502 4288 hpsrv - ok 22:32:57.0549 4288 [ 77C15D7E8F002A173EEBFF0B20CD697D ] HPWMISVC C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe 22:32:57.0549 4288 HPWMISVC - ok 22:32:57.0580 4288 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys 22:32:57.0580 4288 HTTP - ok 22:32:57.0595 4288 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 22:32:57.0595 4288 hwpolicy - ok 22:32:57.0611 4288 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys 22:32:57.0611 4288 i8042prt - ok 22:32:57.0642 4288 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 22:32:57.0642 4288 iaStorV - ok 22:32:57.0720 4288 [ D72BF0AE484F88399E8343E821C10D6A ] IconMan_R C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe 22:32:57.0751 4288 IconMan_R - ok 22:32:57.0798 4288 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 22:32:57.0814 4288 idsvc - ok 22:32:57.0892 4288 [ A48928D4CCA6F8B731989DB08CF2C0AB ] IDSVia64 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20130221.001\IDSvia64.sys 22:32:57.0892 4288 IDSVia64 - ok 22:32:57.0907 4288 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys 22:32:57.0923 4288 iirsp - ok 22:32:57.0954 4288 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll 22:32:57.0954 4288 IKEEXT - ok 22:32:57.0985 4288 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys 22:32:57.0985 4288 intelide - ok 22:32:58.0001 4288 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\drivers\intelppm.sys 22:32:58.0001 4288 intelppm - ok 22:32:58.0032 4288 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll 22:32:58.0032 4288 IPBusEnum - ok 22:32:58.0048 4288 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 22:32:58.0048 4288 IpFilterDriver - ok 22:32:58.0079 4288 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 22:32:58.0095 4288 iphlpsvc - ok 22:32:58.0110 4288 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 22:32:58.0110 4288 IPMIDRV - ok 22:32:58.0126 4288 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 22:32:58.0126 4288 IPNAT - ok 22:32:58.0173 4288 [ 0F261EC4F514926177C70C1832374231 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 22:32:58.0173 4288 iPod Service - ok 22:32:58.0204 4288 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 22:32:58.0204 4288 IRENUM - ok 22:32:58.0219 4288 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys 22:32:58.0219 4288 isapnp - ok 22:32:58.0266 4288 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 22:32:58.0266 4288 iScsiPrt - ok 22:32:58.0282 4288 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 22:32:58.0282 4288 kbdclass - ok 22:32:58.0297 4288 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 22:32:58.0297 4288 kbdhid - ok 22:32:58.0313 4288 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe 22:32:58.0329 4288 KeyIso - ok 22:32:58.0360 4288 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 22:32:58.0360 4288 KSecDD - ok 22:32:58.0391 4288 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 22:32:58.0391 4288 KSecPkg - ok 22:32:58.0422 4288 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 22:32:58.0422 4288 ksthunk - ok 22:32:58.0438 4288 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll 22:32:58.0453 4288 KtmRm - ok 22:32:58.0485 4288 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll 22:32:58.0485 4288 LanmanServer - ok 22:32:58.0516 4288 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 22:32:58.0516 4288 LanmanWorkstation - ok 22:32:58.0531 4288 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 22:32:58.0531 4288 lltdio - ok 22:32:58.0563 4288 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll 22:32:58.0578 4288 lltdsvc - ok 22:32:58.0594 4288 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll 22:32:58.0594 4288 lmhosts - ok 22:32:58.0625 4288 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys 22:32:58.0625 4288 LSI_FC - ok 22:32:58.0641 4288 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys 22:32:58.0641 4288 LSI_SAS - ok 22:32:58.0656 4288 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys 22:32:58.0656 4288 LSI_SAS2 - ok 22:32:58.0672 4288 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys 22:32:58.0672 4288 LSI_SCSI - ok 22:32:58.0672 4288 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys 22:32:58.0687 4288 luafv - ok 22:32:58.0703 4288 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 22:32:58.0703 4288 Mcx2Svc - ok 22:32:58.0734 4288 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys 22:32:58.0734 4288 megasas - ok 22:32:58.0750 4288 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys 22:32:58.0765 4288 MegaSR - ok 22:32:58.0812 4288 Microsoft SharePoint Workspace Audit Service - ok 22:32:58.0843 4288 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll 22:32:58.0843 4288 MMCSS - ok 22:32:58.0859 4288 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys 22:32:58.0859 4288 Modem - ok 22:32:58.0875 4288 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys 22:32:58.0875 4288 monitor - ok 22:32:58.0890 4288 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 22:32:58.0890 4288 mouclass - ok 22:32:58.0906 4288 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 22:32:58.0906 4288 mouhid - ok 22:32:58.0921 4288 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 22:32:58.0921 4288 mountmgr - ok 22:32:58.0937 4288 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys 22:32:58.0937 4288 mpio - ok 22:32:58.0953 4288 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 22:32:58.0953 4288 mpsdrv - ok 22:32:58.0984 4288 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll 22:32:58.0999 4288 MpsSvc - ok 22:32:59.0015 4288 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 22:32:59.0015 4288 MRxDAV - ok 22:32:59.0031 4288 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 22:32:59.0031 4288 mrxsmb - ok 22:32:59.0062 4288 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 22:32:59.0062 4288 mrxsmb10 - ok 22:32:59.0077 4288 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 22:32:59.0077 4288 mrxsmb20 - ok 22:32:59.0109 4288 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys 22:32:59.0109 4288 msahci - ok 22:32:59.0124 4288 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys 22:32:59.0124 4288 msdsm - ok 22:32:59.0155 4288 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe 22:32:59.0155 4288 MSDTC - ok 22:32:59.0187 4288 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys 22:32:59.0187 4288 Msfs - ok 22:32:59.0187 4288 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 22:32:59.0187 4288 mshidkmdf - ok 22:32:59.0202 4288 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 22:32:59.0202 4288 msisadrv - ok 22:32:59.0233 4288 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 22:32:59.0233 4288 MSiSCSI - ok 22:32:59.0233 4288 msiserver - ok 22:32:59.0249 4288 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 22:32:59.0249 4288 MSKSSRV - ok 22:32:59.0265 4288 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 22:32:59.0265 4288 MSPCLOCK - ok 22:32:59.0265 4288 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 22:32:59.0265 4288 MSPQM - ok 22:32:59.0296 4288 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 22:32:59.0296 4288 MsRPC - ok 22:32:59.0311 4288 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 22:32:59.0311 4288 mssmbios - ok 22:32:59.0327 4288 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 22:32:59.0327 4288 MSTEE - ok 22:32:59.0343 4288 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys 22:32:59.0343 4288 MTConfig - ok 22:32:59.0374 4288 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys 22:32:59.0374 4288 Mup - ok 22:32:59.0405 4288 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll 22:32:59.0405 4288 napagent - ok 22:32:59.0483 4288 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 22:32:59.0483 4288 NativeWifiP - ok 22:32:59.0577 4288 [ 88A2F45CE66B904285978D6BB13AFEB2 ] NAVENG C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20130221.019\ENG64.SYS 22:32:59.0592 4288 NAVENG - ok 22:32:59.0639 4288 [ D2A545DA3A90BBFA40E020C23F1B7A48 ] NAVEX15 C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20130221.019\EX64.SYS 22:32:59.0655 4288 NAVEX15 - ok 22:32:59.0686 4288 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys 22:32:59.0701 4288 NDIS - ok 22:32:59.0717 4288 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 22:32:59.0717 4288 NdisCap - ok 22:32:59.0733 4288 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 22:32:59.0733 4288 NdisTapi - ok 22:32:59.0764 4288 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 22:32:59.0764 4288 Ndisuio - ok 22:32:59.0779 4288 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 22:32:59.0779 4288 NdisWan - ok 22:32:59.0795 4288 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 22:32:59.0795 4288 NDProxy - ok 22:32:59.0811 4288 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 22:32:59.0826 4288 NetBIOS - ok 22:32:59.0842 4288 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 22:32:59.0842 4288 NetBT - ok 22:32:59.0857 4288 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe 22:32:59.0857 4288 Netlogon - ok 22:32:59.0873 4288 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll 22:32:59.0889 4288 Netman - ok 22:32:59.0920 4288 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 22:32:59.0920 4288 NetMsmqActivator - ok 22:32:59.0920 4288 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 22:32:59.0920 4288 NetPipeActivator - ok 22:32:59.0967 4288 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll 22:32:59.0967 4288 netprofm - ok 22:32:59.0967 4288 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 22:32:59.0967 4288 NetTcpActivator - ok 22:32:59.0982 4288 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 22:32:59.0982 4288 NetTcpPortSharing - ok 22:32:59.0998 4288 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys 22:32:59.0998 4288 nfrd960 - ok 22:33:00.0076 4288 [ E78A365CC3E0FBFC018A33DCE01909F8 ] NIS C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe 22:33:00.0076 4288 NIS - ok 22:33:00.0107 4288 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll 22:33:00.0123 4288 NlaSvc - ok 22:33:00.0123 4288 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys 22:33:00.0123 4288 Npfs - ok 22:33:00.0138 4288 npggsvc - ok 22:33:00.0169 4288 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll 22:33:00.0169 4288 nsi - ok 22:33:00.0201 4288 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 22:33:00.0201 4288 nsiproxy - ok 22:33:00.0263 4288 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 22:33:00.0279 4288 Ntfs - ok 22:33:00.0294 4288 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys 22:33:00.0294 4288 Null - ok 22:33:00.0310 4288 [ A85B4F2EF3A7304A5399EF0526423040 ] NVENETFD C:\Windows\system32\DRIVERS\nvm62x64.sys 22:33:00.0325 4288 NVENETFD - ok 22:33:00.0341 4288 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys 22:33:00.0341 4288 nvraid - ok 22:33:00.0357 4288 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys 22:33:00.0357 4288 nvstor - ok 22:33:00.0372 4288 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 22:33:00.0372 4288 nv_agp - ok 22:33:00.0388 4288 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 22:33:00.0403 4288 ohci1394 - ok 22:33:00.0419 4288 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 22:33:00.0419 4288 ose - ok 22:33:00.0591 4288 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 22:33:00.0622 4288 osppsvc - ok 22:33:00.0669 4288 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 22:33:00.0669 4288 p2pimsvc - ok 22:33:00.0684 4288 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll 22:33:00.0700 4288 p2psvc - ok 22:33:00.0715 4288 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys 22:33:00.0715 4288 Parport - ok 22:33:00.0747 4288 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys 22:33:00.0747 4288 partmgr - ok 22:33:00.0778 4288 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll 22:33:00.0778 4288 PcaSvc - ok 22:33:00.0809 4288 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys 22:33:00.0809 4288 pci - ok 22:33:00.0825 4288 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys 22:33:00.0825 4288 pciide - ok 22:33:00.0840 4288 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys 22:33:00.0840 4288 pcmcia - ok 22:33:00.0871 4288 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys 22:33:00.0871 4288 pcw - ok 22:33:00.0887 4288 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys 22:33:00.0903 4288 PEAUTH - ok 22:33:00.0996 4288 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe 22:33:00.0996 4288 PerfHost - ok 22:33:01.0043 4288 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll 22:33:01.0059 4288 pla - ok 22:33:01.0090 4288 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 22:33:01.0105 4288 PlugPlay - ok 22:33:01.0105 4288 PnkBstrA - ok 22:33:01.0137 4288 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 22:33:01.0137 4288 PNRPAutoReg - ok 22:33:01.0152 4288 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 22:33:01.0152 4288 PNRPsvc - ok 22:33:01.0183 4288 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 22:33:01.0199 4288 PolicyAgent - ok 22:33:01.0230 4288 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll 22:33:01.0230 4288 Power - ok 22:33:01.0246 4288 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 22:33:01.0246 4288 PptpMiniport - ok 22:33:01.0261 4288 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys 22:33:01.0261 4288 Processor - ok 22:33:01.0308 4288 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll 22:33:01.0308 4288 ProfSvc - ok 22:33:01.0324 4288 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe 22:33:01.0324 4288 ProtectedStorage - ok 22:33:01.0339 4288 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys 22:33:01.0339 4288 Psched - ok 22:33:01.0386 4288 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys 22:33:01.0402 4288 ql2300 - ok 22:33:01.0433 4288 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys 22:33:01.0433 4288 ql40xx - ok 22:33:01.0480 4288 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll 22:33:01.0480 4288 QWAVE - ok 22:33:01.0495 4288 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 22:33:01.0511 4288 QWAVEdrv - ok 22:33:01.0527 4288 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 22:33:01.0527 4288 RasAcd - ok 22:33:01.0542 4288 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 22:33:01.0558 4288 RasAgileVpn - ok 22:33:01.0589 4288 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll 22:33:01.0589 4288 RasAuto - ok 22:33:01.0605 4288 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 22:33:01.0605 4288 Rasl2tp - ok 22:33:01.0620 4288 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll 22:33:01.0620 4288 RasMan - ok 22:33:01.0636 4288 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 22:33:01.0636 4288 RasPppoe - ok 22:33:01.0651 4288 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 22:33:01.0651 4288 RasSstp - ok 22:33:01.0698 4288 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 22:33:01.0698 4288 rdbss - ok 22:33:01.0714 4288 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys 22:33:01.0714 4288 rdpbus - ok 22:33:01.0729 4288 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 22:33:01.0729 4288 RDPCDD - ok 22:33:01.0761 4288 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 22:33:01.0761 4288 RDPENCDD - ok 22:33:01.0792 4288 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 22:33:01.0792 4288 RDPREFMP - ok 22:33:01.0823 4288 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys 22:33:01.0823 4288 RdpVideoMiniport - ok 22:33:01.0870 4288 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 22:33:01.0870 4288 RDPWD - ok 22:33:01.0870 4288 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 22:33:01.0885 4288 rdyboost - ok 22:33:01.0917 4288 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll 22:33:01.0917 4288 RemoteAccess - ok 22:33:01.0932 4288 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll 22:33:01.0948 4288 RemoteRegistry - ok 22:33:01.0963 4288 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys 22:33:01.0979 4288 RFCOMM - ok 22:33:02.0026 4288 [ 085D18C71AB2611A3D61528132B6501E ] RoxioNow Service C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe 22:33:02.0041 4288 RoxioNow Service - ok 22:33:02.0057 4288 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 22:33:02.0057 4288 RpcEptMapper - ok 22:33:02.0088 4288 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe 22:33:02.0088 4288 RpcLocator - ok 22:33:02.0119 4288 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll 22:33:02.0119 4288 RpcSs - ok 22:33:02.0151 4288 [ 1F5E7AF59B390261A85F5BEDB1BB88B3 ] RSPCIESTOR C:\Windows\system32\DRIVERS\RtsPStor.sys 22:33:02.0151 4288 RSPCIESTOR - ok 22:33:02.0182 4288 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 22:33:02.0182 4288 rspndr - ok 22:33:02.0213 4288 [ ED5873F7DFB2F96D37F13322211B6BDC ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys 22:33:02.0213 4288 RTL8167 - ok 22:33:02.0213 4288 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe 22:33:02.0229 4288 SamSs - ok 22:33:02.0229 4288 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 22:33:02.0244 4288 sbp2port - ok 22:33:02.0260 4288 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll 22:33:02.0260 4288 SCardSvr - ok 22:33:02.0275 4288 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 22:33:02.0275 4288 scfilter - ok 22:33:02.0322 4288 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll 22:33:02.0322 4288 Schedule - ok 22:33:02.0353 4288 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll 22:33:02.0353 4288 SCPolicySvc - ok 22:33:02.0385 4288 [ 490B0B68BB938D5C628EC4A67277BE75 ] ScreamBAudioSvc C:\Windows\system32\drivers\ScreamingBAudio64.sys 22:33:02.0385 4288 ScreamBAudioSvc - ok 22:33:02.0400 4288 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys 22:33:02.0400 4288 sdbus - ok 22:33:02.0431 4288 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll 22:33:02.0431 4288 SDRSVC - ok 22:33:02.0447 4288 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 22:33:02.0447 4288 secdrv - ok 22:33:02.0447 4288 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll 22:33:02.0447 4288 seclogon - ok 22:33:02.0463 4288 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll 22:33:02.0478 4288 SENS - ok 22:33:02.0494 4288 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll 22:33:02.0494 4288 SensrSvc - ok 22:33:02.0525 4288 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys 22:33:02.0525 4288 Serenum - ok 22:33:02.0541 4288 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys 22:33:02.0541 4288 Serial - ok 22:33:02.0556 4288 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys 22:33:02.0556 4288 sermouse - ok 22:33:02.0587 4288 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll 22:33:02.0587 4288 SessionEnv - ok 22:33:02.0603 4288 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 22:33:02.0603 4288 sffdisk - ok 22:33:02.0619 4288 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 22:33:02.0619 4288 sffp_mmc - ok 22:33:02.0634 4288 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 22:33:02.0634 4288 sffp_sd - ok 22:33:02.0650 4288 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys 22:33:02.0650 4288 sfloppy - ok 22:33:02.0697 4288 [ C6CC9297BD53E5229653303E556AA539 ] Sftfs C:\Windows\system32\DRIVERS\Sftfslh.sys 22:33:02.0697 4288 Sftfs - ok 22:33:02.0759 4288 [ 13693B6354DD6E72DC5131DA7D764B90 ] sftlist C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe 22:33:02.0759 4288 sftlist - ok 22:33:02.0775 4288 [ 390AA7BC52CEE43F6790CDEA1E776703 ] Sftplay C:\Windows\system32\DRIVERS\Sftplaylh.sys 22:33:02.0775 4288 Sftplay - ok 22:33:02.0806 4288 [ 617E29A0B0A2807466560D4C4E338D3E ] Sftredir C:\Windows\system32\DRIVERS\Sftredirlh.sys 22:33:02.0806 4288 Sftredir - ok 22:33:02.0821 4288 [ 8F571F016FA1976F445147E9E6C8AE9B ] Sftvol C:\Windows\system32\DRIVERS\Sftvollh.sys 22:33:02.0821 4288 Sftvol - ok 22:33:02.0853 4288 [ C3CDDD18F43D44AB713CF8C4916F7696 ] sftvsa C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe 22:33:02.0853 4288 sftvsa - ok 22:33:02.0884 4288 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll 22:33:02.0884 4288 SharedAccess - ok 22:33:02.0899 4288 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll 22:33:02.0915 4288 ShellHWDetection - ok 22:33:02.0931 4288 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys 22:33:02.0931 4288 SiSRaid2 - ok 22:33:02.0962 4288 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys 22:33:02.0962 4288 SiSRaid4 - ok 22:33:02.0993 4288 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 22:33:02.0993 4288 SkypeUpdate - ok 22:33:03.0024 4288 [ DD0443BC6CC78A19FD399817F8C51401 ] SmartDefragDriver C:\Windows\system32\Drivers\SmartDefragDriver.sys 22:33:03.0024 4288 SmartDefragDriver - ok 22:33:03.0040 4288 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys 22:33:03.0040 4288 Smb - ok 22:33:03.0071 4288 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 22:33:03.0087 4288 SNMPTRAP - ok 22:33:03.0102 4288 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys 22:33:03.0102 4288 spldr - ok 22:33:03.0133 4288 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe 22:33:03.0133 4288 Spooler - ok 22:33:03.0227 4288 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe 22:33:03.0243 4288 sppsvc - ok 22:33:03.0274 4288 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll 22:33:03.0274 4288 sppuinotify - ok 22:33:03.0367 4288 [ 90EF30C3867BCDE4579C01A6D6E75A7A ] SRTSP C:\Windows\System32\Drivers\NISx64\1207020.003\SRTSP64.SYS 22:33:03.0383 4288 SRTSP - ok 22:33:03.0383 4288 [ C513E8A5E7978DA49077F5484344EE1B ] SRTSPX C:\Windows\system32\drivers\NISx64\1207020.003\SRTSPX64.SYS 22:33:03.0383 4288 SRTSPX - ok 22:33:03.0445 4288 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys 22:33:03.0445 4288 srv - ok 22:33:03.0477 4288 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 22:33:03.0477 4288 srv2 - ok 22:33:03.0508 4288 [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL6.SYS 22:33:03.0508 4288 SrvHsfHDA - ok 22:33:03.0539 4288 [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV6.SYS 22:33:03.0539 4288 SrvHsfV92 - ok 22:33:03.0555 4288 [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT6.SYS 22:33:03.0570 4288 SrvHsfWinac - ok 22:33:03.0586 4288 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 22:33:03.0586 4288 srvnet - ok 22:33:03.0617 4288 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 22:33:03.0617 4288 SSDPSRV - ok 22:33:03.0648 4288 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll 22:33:03.0648 4288 SstpSvc - ok 22:33:03.0820 4288 [ D30FE3ECF1D6D521365FAE307B500BC0 ] STacSV C:\Program Files\IDT\WDM\STacSV64.exe 22:33:03.0820 4288 STacSV - ok 22:33:03.0835 4288 Steam Client Service - ok 22:33:03.0867 4288 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys 22:33:03.0867 4288 stexstor - ok 22:33:03.0913 4288 [ 6F69D75F50E8FAF1003AA6CFB18B91EC ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys 22:33:03.0913 4288 STHDA - ok 22:33:03.0945 4288 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll 22:33:03.0960 4288 stisvc - ok 22:33:03.0960 4288 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys 22:33:03.0960 4288 swenum - ok 22:33:03.0991 4288 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll 22:33:03.0991 4288 swprv - ok 22:33:04.0023 4288 [ 6160145C7A87FC7672E8E3B886888176 ] SymDS C:\Windows\system32\drivers\NISx64\1207020.003\SYMDS64.SYS 22:33:04.0023 4288 SymDS - ok 22:33:04.0069 4288 [ 96AEED40D4D3521568B42027687E69E0 ] SymEFA C:\Windows\system32\drivers\NISx64\1207020.003\SYMEFA64.SYS 22:33:04.0069 4288 SymEFA - ok 22:33:04.0101 4288 [ 21A1C2D694C3CF962D31F5E873AB3D6F ] SymEvent C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 22:33:04.0101 4288 SymEvent - ok 22:33:04.0116 4288 [ 3AA3B2DF451DA88C38AB00B19FA3562E ] SymIM C:\Windows\system32\DRIVERS\SymIMv.sys 22:33:04.0116 4288 SymIM - ok 22:33:04.0163 4288 [ BD0D711D8CBFCAA19CA123306EAF53A5 ] SymIRON C:\Windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS 22:33:04.0163 4288 SymIRON - ok 22:33:04.0179 4288 [ A6ADB3D83023F8DAA0F7B6FDA785D83B ] SymNetS C:\Windows\System32\Drivers\NISx64\1207020.003\SYMNETS.SYS 22:33:04.0194 4288 SymNetS - ok 22:33:04.0225 4288 [ AC3CC98B1BDB6540021D3FFB105AC2B9 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys 22:33:04.0225 4288 SynTP - ok 22:33:04.0288 4288 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll 22:33:04.0303 4288 SysMain - ok 22:33:04.0319 4288 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll 22:33:04.0319 4288 TabletInputService - ok 22:33:04.0350 4288 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll 22:33:04.0350 4288 TapiSrv - ok 22:33:04.0366 4288 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll 22:33:04.0366 4288 TBS - ok 22:33:04.0444 4288 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 22:33:04.0459 4288 Tcpip - ok 22:33:04.0491 4288 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 22:33:04.0506 4288 TCPIP6 - ok 22:33:04.0553 4288 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 22:33:04.0553 4288 tcpipreg - ok 22:33:04.0584 4288 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 22:33:04.0584 4288 TDPIPE - ok 22:33:04.0615 4288 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 22:33:04.0615 4288 TDTCP - ok 22:33:04.0631 4288 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 22:33:04.0631 4288 tdx - ok 22:33:04.0647 4288 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys 22:33:04.0647 4288 TermDD - ok 22:33:04.0693 4288 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll 22:33:04.0709 4288 TermService - ok 22:33:04.0725 4288 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll 22:33:04.0725 4288 Themes - ok 22:33:04.0756 4288 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll 22:33:04.0756 4288 THREADORDER - ok 22:33:04.0787 4288 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll 22:33:04.0787 4288 TrkWks - ok 22:33:04.0834 4288 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 22:33:04.0834 4288 TrustedInstaller - ok 22:33:04.0865 4288 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 22:33:04.0865 4288 tssecsrv - ok 22:33:04.0912 4288 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 22:33:04.0912 4288 TsUsbFlt - ok 22:33:04.0943 4288 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys 22:33:04.0943 4288 TsUsbGD - ok 22:33:04.0959 4288 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 22:33:04.0959 4288 tunnel - ok 22:33:04.0990 4288 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys 22:33:04.0990 4288 uagp35 - ok 22:33:05.0021 4288 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 22:33:05.0021 4288 udfs - ok 22:33:05.0052 4288 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe 22:33:05.0052 4288 UI0Detect - ok 22:33:05.0068 4288 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 22:33:05.0068 4288 uliagpkx - ok 22:33:05.0083 4288 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys 22:33:05.0083 4288 umbus - ok 22:33:05.0099 4288 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 22:33:05.0099 4288 UmPass - ok 22:33:05.0115 4288 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll 22:33:05.0130 4288 upnphost - ok 22:33:05.0161 4288 [ 43228F8EDD1B0BCDD3145AD246E63D39 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys 22:33:05.0161 4288 USBAAPL64 - ok 22:33:05.0193 4288 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys 22:33:05.0208 4288 usbaudio - ok 22:33:05.0224 4288 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 22:33:05.0224 4288 usbccgp - ok 22:33:05.0239 4288 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys 22:33:05.0239 4288 usbcir - ok 22:33:05.0255 4288 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys 22:33:05.0255 4288 usbehci - ok 22:33:05.0286 4288 [ 573D192E268F0C5B486B7E96F661E538 ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys 22:33:05.0286 4288 usbfilter - ok 22:33:05.0302 4288 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\drivers\usbhub.sys 22:33:05.0302 4288 usbhub - ok 22:33:05.0317 4288 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys 22:33:05.0317 4288 usbohci - ok 22:33:05.0349 4288 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 22:33:05.0349 4288 usbprint - ok 22:33:05.0364 4288 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 22:33:05.0364 4288 usbscan - ok 22:33:05.0395 4288 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 22:33:05.0395 4288 USBSTOR - ok 22:33:05.0411 4288 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 22:33:05.0411 4288 usbuhci - ok 22:33:05.0442 4288 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys 22:33:05.0442 4288 usbvideo - ok 22:33:05.0489 4288 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll 22:33:05.0505 4288 UxSms - ok 22:33:05.0505 4288 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe 22:33:05.0505 4288 VaultSvc - ok 22:33:05.0520 4288 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 22:33:05.0520 4288 vdrvroot - ok 22:33:05.0551 4288 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe 22:33:05.0551 4288 vds - ok 22:33:05.0598 4288 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 22:33:05.0598 4288 vga - ok 22:33:05.0598 4288 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys 22:33:05.0598 4288 VgaSave - ok 22:33:05.0614 4288 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 22:33:05.0629 4288 vhdmp - ok 22:33:05.0629 4288 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys 22:33:05.0645 4288 viaide - ok 22:33:05.0661 4288 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys 22:33:05.0661 4288 volmgr - ok 22:33:05.0676 4288 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 22:33:05.0676 4288 volmgrx - ok 22:33:05.0692 4288 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys 22:33:05.0692 4288 volsnap - ok 22:33:05.0723 4288 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys 22:33:05.0723 4288 vsmraid - ok 22:33:05.0785 4288 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe 22:33:05.0801 4288 VSS - ok 22:33:05.0817 4288 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 22:33:05.0817 4288 vwifibus - ok 22:33:05.0832 4288 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 22:33:05.0832 4288 vwififlt - ok 22:33:05.0848 4288 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys 22:33:05.0848 4288 vwifimp - ok 22:33:05.0863 4288 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll 22:33:05.0879 4288 W32Time - ok 22:33:05.0895 4288 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys 22:33:05.0895 4288 WacomPen - ok 22:33:05.0910 4288 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 22:33:05.0910 4288 WANARP - ok 22:33:05.0926 4288 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 22:33:05.0926 4288 Wanarpv6 - ok 22:33:05.0973 4288 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe 22:33:05.0988 4288 WatAdminSvc - ok 22:33:06.0035 4288 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe 22:33:06.0051 4288 wbengine - ok 22:33:06.0066 4288 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 22:33:06.0082 4288 WbioSrvc - ok 22:33:06.0113 4288 [ 3A2D452C40162823B79867040B46D4A8 ] WCMVCAM C:\Windows\system32\DRIVERS\wcmvcam64.sys 22:33:06.0129 4288 WCMVCAM - ok 22:33:06.0160 4288 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll 22:33:06.0175 4288 wcncsvc - ok 22:33:06.0191 4288 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 22:33:06.0191 4288 WcsPlugInService - ok 22:33:06.0207 4288 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys 22:33:06.0207 4288 Wd - ok 22:33:06.0253 4288 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 22:33:06.0269 4288 Wdf01000 - ok 22:33:06.0285 4288 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll 22:33:06.0300 4288 WdiServiceHost - ok 22:33:06.0300 4288 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll 22:33:06.0300 4288 WdiSystemHost - ok 22:33:06.0316 4288 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll 22:33:06.0316 4288 WebClient - ok 22:33:06.0347 4288 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll 22:33:06.0347 4288 Wecsvc - ok 22:33:06.0378 4288 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll 22:33:06.0378 4288 wercplsupport - ok 22:33:06.0394 4288 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll 22:33:06.0394 4288 WerSvc - ok 22:33:06.0409 4288 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 22:33:06.0409 4288 WfpLwf - ok 22:33:06.0441 4288 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys 22:33:06.0441 4288 WIMMount - ok 22:33:06.0456 4288 WinDefend - ok 22:33:06.0456 4288 WinHttpAutoProxySvc - ok 22:33:06.0519 4288 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 22:33:06.0519 4288 Winmgmt - ok 22:33:06.0581 4288 [ 0C0195C48B6B8582FA6F6373032118DA ] WinRing0_1_2_0 C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys 22:33:06.0581 4288 WinRing0_1_2_0 - ok 22:33:06.0643 4288 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll 22:33:06.0659 4288 WinRM - ok 22:33:06.0690 4288 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUSB.sys 22:33:06.0690 4288 WinUsb - ok 22:33:06.0721 4288 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll 22:33:06.0721 4288 Wlansvc - ok 22:33:06.0768 4288 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 22:33:06.0768 4288 wlcrasvc - ok 22:33:06.0877 4288 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 22:33:06.0893 4288 wlidsvc - ok 22:33:06.0909 4288 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 22:33:06.0909 4288 WmiAcpi - ok 22:33:06.0940 4288 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 22:33:06.0940 4288 wmiApSrv - ok 22:33:06.0971 4288 WMPNetworkSvc - ok 22:33:07.0002 4288 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll 22:33:07.0002 4288 WPCSvc - ok 22:33:07.0018 4288 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 22:33:07.0018 4288 WPDBusEnum - ok 22:33:07.0033 4288 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 22:33:07.0033 4288 ws2ifsl - ok 22:33:07.0049 4288 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll 22:33:07.0049 4288 wscsvc - ok 22:33:07.0049 4288 WSearch - ok 22:33:07.0143 4288 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll 22:33:07.0158 4288 wuauserv - ok 22:33:07.0189 4288 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 22:33:07.0189 4288 WudfPf - ok 22:33:07.0205 4288 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 22:33:07.0205 4288 WUDFRd - ok 22:33:07.0236 4288 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 22:33:07.0236 4288 wudfsvc - ok 22:33:07.0267 4288 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll 22:33:07.0283 4288 WwanSvc - ok 22:33:07.0377 4288 X6va007 - ok 22:33:07.0470 4288 X6va008 - ok 22:33:07.0486 4288 ================ Scan global =============================== 22:33:07.0517 4288 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll 22:33:07.0548 4288 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 22:33:07.0564 4288 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 22:33:07.0595 4288 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll 22:33:07.0626 4288 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe 22:33:07.0626 4288 [Global] - ok 22:33:07.0626 4288 ================ Scan MBR ================================== 22:33:07.0642 4288 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 22:33:07.0938 4288 \Device\Harddisk0\DR0 - ok 22:33:07.0938 4288 ================ Scan VBR ================================== 22:33:07.0938 4288 [ 7BB3186AC593EC23B7CA3C03653D3990 ] \Device\Harddisk0\DR0\Partition1 22:33:07.0954 4288 \Device\Harddisk0\DR0\Partition1 - ok 22:33:07.0954 4288 [ 5C18451FAB99BEA8C2852C76EBC5684F ] \Device\Harddisk0\DR0\Partition2 22:33:07.0954 4288 \Device\Harddisk0\DR0\Partition2 - ok 22:33:07.0985 4288 [ 85672FA59A7AD0C271A01293FF11EBEA ] \Device\Harddisk0\DR0\Partition3 22:33:08.0001 4288 \Device\Harddisk0\DR0\Partition3 - ok 22:33:08.0001 4288 [ 077DDB72F1292D176DC50935A7E0031C ] \Device\Harddisk0\DR0\Partition4 22:33:08.0001 4288 \Device\Harddisk0\DR0\Partition4 - ok 22:33:08.0016 4288 ============================================================ 22:33:08.0016 4288 Scan finished 22:33:08.0016 4288 ============================================================ 22:33:08.0016 5780 Detected object count: 0 22:33:08.0016 5780 Actual detected object count: 0 22:35:29.0712 3148 Deinitialize success ComboFix.txt ComboFix 13-02-23.01 - Kyle 23/02/2013 22:40:28.1.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.5610.3731 [GMT -5:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . C:\autorun.inf C:\Install.exe c:\program files\PrivacySafeGuard\PrIVacysafeguard.dll C:\setup.exe c:\users\Kyle\AppData\Roaming\cyAOSR2Uo5ucNeH.exe c:\users\Kyle\AppData\Roaming\dclogs c:\users\Kyle\AppData\Roaming\dclogs\2012-08-18-7.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-08-19-1.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-08-20-2.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-08-21-3.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-08-22-4.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-08-23-5.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-09-19-4.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-10-12-6.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-10-14-1.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-10-16-3.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-11-10-7.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-11-11-1.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-11-20-3.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-11-22-5.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-11-23-6.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-11-24-7.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-11-25-1.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-11-26-2.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-11-30-6.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-12-01-7.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-12-02-1.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-12-04-3.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-12-05-4.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-12-06-5.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-12-07-6.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-12-08-7.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-12-09-1.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-12-11-3.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-12-15-7.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-12-21-6.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-12-22-7.dc c:\users\Kyle\AppData\Roaming\dclogs\2012-12-24-2.dc c:\users\Kyle\AppData\Roaming\dclogs\2013-01-02-4.dc c:\users\Kyle\AppData\Roaming\dclogs\2013-01-03-5.dc c:\users\Kyle\AppData\Roaming\dclogs\2013-01-06-1.dc c:\users\Kyle\AppData\Roaming\dclogs\2013-02-08-6.dc c:\users\Kyle\AppData\Roaming\dclogs\2013-02-09-7.dc c:\users\Kyle\AppData\Roaming\dclogs\2013-02-10-1.dc c:\users\Kyle\AppData\Roaming\dclogs\2013-02-11-2.dc c:\users\Kyle\AppData\Roaming\java c:\users\Kyle\AppData\Roaming\java.exe c:\users\Kyle\AppData\Roaming\Love c:\users\Kyle\AppData\Roaming\Love\mari0\options.txt c:\users\Kyle\AppData\Roaming\Love\not_tetris_2\highscoresA.txt c:\users\Kyle\AppData\Roaming\Love\not_tetris_2\highscoresB.txt c:\users\Kyle\AppData\Roaming\Love\not_tetris_2\options.txt c:\users\Kyle\AppData\Roaming\Love\ortho_robot\save.txt c:\users\Kyle\AppData\Roaming\Microsoft\Windows\Templates\explorer.exe c:\users\Kyle\AppData\Roaming\Microsoft\Windows\Templates\MsCtfMonitor.exe c:\users\Kyle\AppData\Roaming\Microsoft\Windows\Templates\spsreng.exe c:\users\Kyle\AppData\Roaming\MneFXFkSo.exe c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed] c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\chrome.manifest c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\funmoods.css c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\funmoods.xul c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\arwDwn.gif c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\ae.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\bg.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\ch.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\cn.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\cz.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\de.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\eg.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\en.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\es.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\fr.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\gr.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\he.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\il.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\it.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\ja.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\jp.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\nl.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\no.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\pl.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\pt.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\ro.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\ru.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\sa.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\se.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\sv.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\tr.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\ua.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\flgs\us.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\help_16.gif c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\home.gif c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\logo.png c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\privecy_16_hot.gif c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\imgs\tellafriend.gif c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\loader.xul c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\mtstart.js c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\tmplt.js c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\content\uninsthk.js c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\extensions\[removed]\install.rdf c:\users\Kyle\msdata c:\users\Kyle\msdata\service.exe c:\users\Kyle\msdata\services.exe c:\users\Kyle\olepsxss.exe c:\users\Kyle\WINuc.exe c:\windows\wininit.ini D:\autorun.inf D:\setup.exe . . ((((((((((((((((((((((((( Files Created from 2013-01-24 to 2013-02-24 ))))))))))))))))))))))))))))))) . . 2013-02-24 03:54 . 2013-02-24 03:54 ——– d—–w- c:\users\Mcx1-KYLE-HP\AppData\Local\temp 2013-02-24 03:54 . 2013-02-24 03:54 ——– d—–w- c:\users\Default\AppData\Local\temp 2013-02-24 03:36 . 2013-02-24 03:55 ——– d—–w- C:\32788R22FWJFW 2013-02-24 03:27 . 2013-02-08 00:28 9162192 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B8A064BF-C81C-49BB-8CE9-49B8055C2310}\mpengine.dll 2013-02-24 03:27 . 2013-02-24 03:27 ——– d—–w- C:\1c724813c3d177ef4340655942 2013-02-20 21:55 . 2013-01-08 22:01 768000 —-a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll 2013-02-20 21:55 . 2013-01-09 01:10 996352 —-a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll 2013-02-20 21:48 . 2013-01-09 01:13 499200 —-a-w- c:\program files\Internet Explorer\jsdbgui.dll 2013-02-20 21:48 . 2013-01-09 01:05 2147840 —-a-w- c:\windows\system32\iertutil.dll 2013-02-20 21:48 . 2013-01-08 22:05 678912 —-a-w- c:\program files (x86)\Internet Explorer\iedvtool.dll 2013-02-20 21:48 . 2013-01-08 22:04 387584 —-a-w- c:\program files (x86)\Internet Explorer\jsdbgui.dll 2013-02-20 21:48 . 2013-01-09 01:14 887808 —-a-w- c:\program files\Internet Explorer\iedvtool.dll 2013-02-20 21:48 . 2013-01-09 01:48 17812992 —-a-w- c:\windows\system32\mshtml.dll 2013-02-20 21:48 . 2013-01-09 01:22 10925568 —-a-w- c:\windows\system32\ieframe.dll 2013-02-20 01:32 . 2013-01-05 05:53 5553512 —-a-w- c:\windows\system32\ntoskrnl.exe 2013-02-20 01:32 . 2013-01-05 05:00 3967848 —-a-w- c:\windows\SysWow64\ntkrnlpa.exe 2013-02-20 01:32 . 2013-01-05 05:00 3913064 —-a-w- c:\windows\SysWow64\ntoskrnl.exe 2013-02-20 01:31 . 2013-01-04 03:26 3153408 —-a-w- c:\windows\system32\win32k.sys 2013-02-20 01:31 . 2013-01-04 05:46 215040 —-a-w- c:\windows\system32\winsrv.dll 2013-02-20 01:31 . 2013-01-04 04:51 5120 —-a-w- c:\windows\SysWow64\wow32.dll 2013-02-20 01:31 . 2013-01-04 02:47 25600 —-a-w- c:\windows\SysWow64\setup16.exe 2013-02-20 01:31 . 2013-01-04 02:47 7680 —-a-w- c:\windows\SysWow64\instnm.exe 2013-02-20 01:31 . 2013-01-04 02:47 2048 —-a-w- c:\windows\SysWow64\user.exe 2013-02-20 01:31 . 2013-01-04 02:47 14336 —-a-w- c:\windows\SysWow64\ntvdm64.dll 2013-02-20 01:31 . 2013-01-03 06:00 1913192 —-a-w- c:\windows\system32\drivers\tcpip.sys 2013-02-20 01:31 . 2013-01-03 06:00 288088 —-a-w- c:\windows\system32\drivers\FWPKCLNT.SYS 2013-02-12 02:35 . 2013-02-12 02:36 ——– d—–w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-02-12 02:35 . 2013-02-12 02:36 ——– d—–w- c:\program files\iTunes 2013-02-12 02:35 . 2013-02-12 02:36 ——– d—–w- c:\program files (x86)\iTunes 2013-02-12 02:35 . 2013-02-12 02:35 ——– d—–w- c:\program files\iPod 2013-02-09 18:34 . 2013-02-09 18:34 ——– d—–w- C:\2d2cbca6cd90233720548e81ea04 2013-02-08 19:58 . 2013-02-08 19:58 ——– d—–w- C:\008bbd452bcf08085a 2013-02-08 19:15 . 2012-11-09 05:45 750592 —-a-w- c:\windows\system32\win32spl.dll 2013-02-08 19:15 . 2012-11-09 04:43 492032 —-a-w- c:\windows\SysWow64\win32spl.dll 2013-02-08 19:14 . 2012-11-01 05:43 2002432 —-a-w- c:\windows\system32\msxml6.dll 2013-02-08 19:14 . 2012-11-01 05:43 1882624 —-a-w- c:\windows\system32\msxml3.dll 2013-02-08 19:14 . 2012-11-01 04:47 1389568 —-a-w- c:\windows\SysWow64\msxml6.dll 2013-02-08 19:14 . 2012-11-01 04:47 1236992 —-a-w- c:\windows\SysWow64\msxml3.dll 2013-02-08 19:14 . 2012-11-20 05:48 307200 —-a-w- c:\windows\system32\ncrypt.dll 2013-02-08 19:14 . 2012-11-20 04:51 220160 —-a-w- c:\windows\SysWow64\ncrypt.dll 2013-02-08 19:14 . 2012-11-23 03:13 68608 —-a-w- c:\windows\system32\taskhost.exe . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-02-22 04:41 . 2012-01-26 02:42 70004024 —-a-w- c:\windows\system32\MRT.exe 2013-02-10 04:34 . 2012-05-05 16:07 697712 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-02-10 04:34 . 2012-01-25 23:27 74096 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-01-17 06:28 . 2010-11-21 03:27 273840 ——w- c:\windows\system32\MpSigStub.exe 2013-01-04 04:43 . 2013-02-20 01:31 44032 —-a-w- c:\windows\apppatch\acwow64.dll 2012-12-24 23:09 . 2012-12-24 23:09 205824 —-a-w- c:\users\Kyle\AppData\Roaming\Faded.exe 2012-12-16 17:11 . 2012-12-21 23:37 46080 —-a-w- c:\windows\system32\atmlib.dll 2012-12-16 14:45 . 2012-12-21 23:37 367616 —-a-w- c:\windows\system32\atmfd.dll 2012-12-16 14:13 . 2012-12-21 23:37 295424 —-a-w- c:\windows\SysWow64\atmfd.dll 2012-12-16 14:13 . 2012-12-21 23:37 34304 —-a-w- c:\windows\SysWow64\atmlib.dll 2012-12-15 21:46 . 2012-12-15 21:42 4096 —-a-w- c:\users\Kyle\AppData\Roaming\MicbxoiWo.exe 2012-12-15 21:46 . 2012-12-15 21:45 1074703 —-a-w- c:\users\Kyle\AppData\Roaming\RNRJHTIWVFJEsvchost.exe 2012-12-15 21:43 . 2012-12-15 21:43 1074695 —-a-w- c:\users\Kyle\AppData\Roaming\FGKO3svchost.exe 2012-12-15 21:42 . 2012-12-15 21:42 1074695 —-a-w- c:\users\Kyle\AppData\Roaming\6WU0Bsvchost.exe 2012-12-15 21:42 . 2012-12-15 21:42 1074962 —-a-w- c:\users\Kyle\AppData\Roaming\DKIQHU4svchost.exe 2012-12-15 21:40 . 2012-12-15 21:40 4096 —-a-w- c:\users\Kyle\AppData\Roaming\MYVmVIWWo.exe 2012-12-15 19:46 . 2012-12-15 19:44 4096 —-a-w- c:\users\Kyle\AppData\Roaming\MCCzDxCzo.exe 2012-12-15 19:44 . 2012-12-15 19:44 1236480 —-a-w- c:\users\Kyle\AppData\Roaming\javaa.exe 2012-12-10 01:55 . 2012-12-10 00:51 4096 —-a-w- c:\users\Kyle\AppData\Roaming\MGAKaXYSo.exe . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="c:\users\Kyle\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-11-26 1199576] "Java"="c:\users\Kyle\AppData\Roaming\Faded.exe" [2012-12-24 205824] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-04-02 336384] "HPConnectionManager"="c:\program files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe" [2011-02-15 94264] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2010-11-16 35736] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-16 932288] "Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2011-03-16 61112] "HPOSD"="c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" [2011-08-19 379960] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280] "HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2012-02-15 577408] "LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-12-10 2254768] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-12-12 152544] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "EnableShellExecuteHooks"= 1 (0x1) . [hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks] . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944] R2 WCMVCAM;WebcamMax, WDM Video Capture;c:\windows\system32\DRIVERS\wcmvcam64.sys [2011-06-23 1071032] R3 ALSysIO;ALSysIO;c:\users\Kyle\AppData\Local\Temp\ALSysIO64.sys [x] R3 atillk64;atillk64;c:\program files (x86)\AMD\System Monitor\atillk64.sys [x] R3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [x] R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x] R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456] R3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [2009-12-01 38992] R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864] R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312] R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-09-28 53760] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-01-21 1255736] R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544] R3 X6va007;X6va007;c:\users\Kyle\AppData\Local\Temp\0073005.tmp [x] R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184] S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys [2011-04-15 79488] S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys [2011-04-15 40064] S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 17720] S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1207020.003\SYMDS64.SYS [2011-01-27 450680] S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1207020.003\SYMEFA64.SYS [2011-03-15 912504] S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20130208.001\BHDrvx64.sys [2013-01-16 1388120] S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20130221.001\IDSvia64.sys [2013-02-07 513184] S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS [2011-01-27 171128] S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1207020.003\SYMNETS.SYS [2011-04-21 386168] S2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [2012-03-14 913752] S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2012-10-14 89600] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-09-15 204288] S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-04-02 365568] S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624] S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe [x] S2 FPLService;TrueSuiteService;c:\program files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-02-18 265544] S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-12-10 2465712] S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528] S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168] S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2012-04-25 31000] S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2012-02-15 34872] S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-02-24 2413056] S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe [2011-04-17 130008] S2 RoxioNow Service;RoxioNow Service;c:\program files (x86)\Roxio\RoxioNow Player\RNowSvc.exe [2010-11-26 399344] S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776] S3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\amdhub30.sys [2011-03-18 87168] S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136] S3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\amdxhc.sys [2011-03-18 188544] S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2010-11-17 115216] S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-07-14 344616] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-03-02 39464] S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-08-09 138912] S3 hpCMSrv;HP Connection Manager 4.0 Service;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2011-02-15 1071160] S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2012-02-24 338536] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-02-17 428136] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376] S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2010-12-16 47232] . . — Other Services/Drivers In Memory — . *NewlyCreated* - 81143567 *Deregistered* - 81143567 . Contents of the 'Scheduled Tasks' folder . 2013-02-24 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-05 04:34] . 2013-02-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-28 00:46] . 2013-02-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-28 00:46] . 2013-02-22 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3059046161-287070921-57097081-1002Core.job - c:\users\Kyle\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-19 21:27] . 2013-02-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3059046161-287070921-57097081-1002UA.job - c:\users\Kyle\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-19 21:27] . 2013-02-08 c:\windows\Tasks\HPCeeScheduleForKYLE-HP$.job - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15] . 2013-02-09 c:\windows\Tasks\HPCeeScheduleForKyle.job - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2012-10-14 1425408] . ——- Supplementary Scan ——- . uStart Page = hxxp://isearch.avg.com/?cid={44DB4149-5F82-4D25-8DFD-E20A27957B6D}&mid=238fc3f340e747d18c719165b2c245a5-14f68081414f1777257dae7cafb45675871ccf0e&lang=en&ds=ins10&pr=sa&d=2012-02-03 22:04&v=10.0.0.7&sap=hp uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000 IE: Se&nd to OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105 IE: Send image to &Bluetooth Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm Trusted Zone: clonewarsadventures.com Trusted Zone: freerealms.com Trusted Zone: soe.com Trusted Zone: sony.com FF - ProfilePath - c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\ FF - prefs.js: browser.search.selectedEngine - AVG Secure Search FF - prefs.js: browser.startup.homepage - hxxp://isearch.avg.com?cid=%7Be49ca92c-e8ba-472e-a3b3-bfa25e89e906%7D&mid=238fc3f340e747d18c719165b2c245a5-14f68081414f1777257dae7cafb45675871ccf0e&ds=ins10&v=10.2.0.3&lang=en&pr=sa&d=2012-02-03%2022%3A04%3A52 FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(extensions.funmoods_i.newTab, false FF - user.js: extensions.funmoods_i.tlbrSrchUrl - hxxp://start.funmoods.com/results.php?f=3&a=adknlg&q= FF - user.js: extensions.funmoods_i.id - 7a318cf4000000000000402cf43c16d4 FF - user.js: extensions.funmoods_i.instlDay - 15424 FF - user.js: extensions.funmoods_i.vrsn - [removed] FF - user.js: extensions.funmoods_i.vrsni - [removed] FF - user.js: extensions.funmoods_i.vrsnTs - 1.5.11.1619:50 FF - user.js: extensions.funmoods_i.prtnrId - funmoods FF - user.js: extensions.funmoods_i.prdct - funmoods FF - user.js: extensions.funmoods_i.aflt - adknlg FF - user.js: extensions.funmoods_i.smplGrp - none FF - user.js: extensions.funmoods_i.tlbrId - base FF - user.js: extensions.funmoods_i.instlRef - FF - user.js: extensions.funmoods_i.dfltLng - FF - user.js: extensions.funmoods_i.excTlbr - false . - - - - ORPHANS REMOVED - - - - . URLSearchHooks-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file) BHO-{1036AD63-AEAC-460B-9060-C96005D4DC86} - (no file) BHO-{A42D2EB4-DD31-4BB5-8AA5-8D4E04806DBE} - c:\program files\PrivacySafeGuard\PrivacySafeGuard.dll Wow6432Node-HKCU-Run-RDY2OTkzMjBGMDZFREU2Rk - c:\users\Kyle\olepsxss.exe Wow6432Node-HKCU-Run-Services and Controller App - c:\users\Kyle\msdata\service.exe WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc_blr.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS] "ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\diMaster.dll\" /prefetch:1" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc] "ImagePath"="c:\windows\system32\GameMon.des -service" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va007] "ImagePath"="\??\c:\users\Kyle\AppData\Local\Temp\0073005.tmp" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va008] "ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008" . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2013-02-23 22:59:18 ComboFix-quarantined-files.txt 2013-02-24 03:59 . Pre-Run: 394,063,331,328 bytes free Post-Run: 393,564,299,264 bytes free . - - End Of File - - D59189CBD2C615B252B5BE458A9A3263 There you go

Disable Windows firewall

You have 2 firewalls running. As Noron Internet Security is your antivirus and firewall, you need to disable Windows firewall as you cannot have two running at once,

• click on Start, Control Pane, Windows Firewall
• on the left, click on Turn Windows Firewall on or off
• click Turn off Windows Firewall (not recommended) and then click OK

===================================================

I also recommend that you uninstall IObit. It is has been proved to be untrustworthy in its programming and is pretty ineffective now that it can no longer be propped up by MBAM

See:

http://forums.malwarebytes.org/index.php?showtopic=29681
http://forums.malwarebytes.org/index.php?showtopic=30989
http://forums.malwarebytes.org/index.php?showtopic=33217

===================================================

Open ComboFix

Please do the following:

• close any open browsers.
• close/disable all anti virus and anti malware programs so that they do not interfere with the running of ComboFix.
• open notepad and copy/paste the text in the codebox below into it:

Firefox::
FF - ProfilePath - c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\
FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(extensions.funmoods_i.newTab, false
FF - user.js: extensions.funmoods_i.tlbrSrchUrl - hxxp://start.funmoods.com/results.php?f=3&a=adknlg&q=
FF - user.js: extensions.funmoods_i.id - 7a318cf4000000000000402cf43c16d4
FF - user.js: extensions.funmoods_i.instlDay - 15424
FF - user.js: extensions.funmoods_i.vrsn - [removed]
FF - user.js: extensions.funmoods_i.vrsni - [removed]
FF - user.js: extensions.funmoods_i.vrsnTs - 1.5.11.1619:50
FF - user.js: extensions.funmoods_i.prtnrId - funmoods
FF - user.js: extensions.funmoods_i.prdct - funmoods
FF - user.js: extensions.funmoods_i.aflt - adknlg
FF - user.js: extensions.funmoods_i.smplGrp - none
FF - user.js: extensions.funmoods_i.tlbrId - base
FF - user.js: extensions.funmoods_i.instlRef - 
FF - user.js: extensions.funmoods_i.dfltLng - 
FF - user.js: extensions.funmoods_i.excTlbr - false

Save this as "CFScript.txt", and as Type: All Files (*.*) in the same location as ComboFix.exe

[external image: Posted Image]

Referring to the picture above, drag CFScript into ComboFix.exe

When finished, it produces a log at C:\ComboFix.txt. Post the contents of Combofix.txt in your next reply.

===================================================

Download and run AdwCleaner

Download AdwCleaner from here and save it to your desktop.

• run AdwCleaner and select Delete
• when it has finished it will ask to reboot - allow the reboot
• on reboot a log will be produced; please attach the content of the log to your next reply

===================================================

Download and run Junkware Removal Tool

[external image: Posted Image] Please download Junkware Removal Tool to your desktop.

• shut down your protection software now to avoid potential conflicts.
• run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator"
• the tool will open and start scanning your system
• please be patient as this can take a while to complete depending on your system's specifications
• on completion, a log (JRT.txt) is saved to your desktop and will automatically open
• post the contents of JRT.txt into your next message.

Logs to include in the next post:

ComboFix.txt
AdwCleaner log
JRT.txt

Can you tell me how your computer is running.

Thanks

Satchfan

ComboFix ComboFix 13-02-23.01 - Kyle 26/02/2013 16:10:11.2.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.5610.3789 [GMT -5:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe Command switches used :: c:\users\Kyle\Desktop\CFScript.txt AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . C:\autorun.inf C:\setup.exe c:\users\Kyle\AppData\Roaming\MneFXFkSo.exe c:\users\Kyle\msdata c:\users\Kyle\msdata\service.exe c:\users\Kyle\msdata\services.exe D:\autorun.inf D:\setup.exe . . ((((((((((((((((((((((((( Files Created from 2013-01-26 to 2013-02-26 ))))))))))))))))))))))))))))))) . . 2013-02-26 21:23 . 2013-02-26 21:23 ——– d—–w- c:\users\Mcx1-KYLE-HP\AppData\Local\temp 2013-02-26 21:23 . 2013-02-26 21:23 ——– d—–w- c:\users\Guest\AppData\Local\temp 2013-02-26 21:23 . 2013-02-26 21:23 ——– d—–w- c:\users\Friends\AppData\Local\temp 2013-02-26 21:23 . 2013-02-26 21:23 ——– d—–w- c:\users\Default\AppData\Local\temp 2013-02-26 20:57 . 2013-02-08 00:28 9162192 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{AE06D6BE-8BFA-4568-853C-85F018068D09}\mpengine.dll 2013-02-26 20:57 . 2013-02-26 20:57 ——– d—–w- C:\ed21489b7ed2bf3310653d0ac799 2013-02-20 21:55 . 2013-01-08 22:01 768000 —-a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll 2013-02-20 21:55 . 2013-01-09 01:10 996352 —-a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll 2013-02-20 21:48 . 2013-01-09 01:13 499200 —-a-w- c:\program files\Internet Explorer\jsdbgui.dll 2013-02-20 21:48 . 2013-01-09 01:05 2147840 —-a-w- c:\windows\system32\iertutil.dll 2013-02-20 21:48 . 2013-01-08 22:05 678912 —-a-w- c:\program files (x86)\Internet Explorer\iedvtool.dll 2013-02-20 21:48 . 2013-01-08 22:04 387584 —-a-w- c:\program files (x86)\Internet Explorer\jsdbgui.dll 2013-02-20 21:48 . 2013-01-09 01:14 887808 —-a-w- c:\program files\Internet Explorer\iedvtool.dll 2013-02-20 21:48 . 2013-01-09 01:48 17812992 —-a-w- c:\windows\system32\mshtml.dll 2013-02-20 21:48 . 2013-01-09 01:22 10925568 —-a-w- c:\windows\system32\ieframe.dll 2013-02-20 01:32 . 2013-01-05 05:53 5553512 —-a-w- c:\windows\system32\ntoskrnl.exe 2013-02-20 01:32 . 2013-01-05 05:00 3967848 —-a-w- c:\windows\SysWow64\ntkrnlpa.exe 2013-02-20 01:32 . 2013-01-05 05:00 3913064 —-a-w- c:\windows\SysWow64\ntoskrnl.exe 2013-02-20 01:31 . 2013-01-04 03:26 3153408 —-a-w- c:\windows\system32\win32k.sys 2013-02-20 01:31 . 2013-01-04 05:46 215040 —-a-w- c:\windows\system32\winsrv.dll 2013-02-20 01:31 . 2013-01-04 04:51 5120 —-a-w- c:\windows\SysWow64\wow32.dll 2013-02-20 01:31 . 2013-01-04 02:47 25600 —-a-w- c:\windows\SysWow64\setup16.exe 2013-02-20 01:31 . 2013-01-04 02:47 7680 —-a-w- c:\windows\SysWow64\instnm.exe 2013-02-20 01:31 . 2013-01-04 02:47 2048 —-a-w- c:\windows\SysWow64\user.exe 2013-02-20 01:31 . 2013-01-04 02:47 14336 —-a-w- c:\windows\SysWow64\ntvdm64.dll 2013-02-20 01:31 . 2013-01-03 06:00 1913192 —-a-w- c:\windows\system32\drivers\tcpip.sys 2013-02-20 01:31 . 2013-01-03 06:00 288088 —-a-w- c:\windows\system32\drivers\FWPKCLNT.SYS 2013-02-12 02:35 . 2013-02-12 02:36 ——– d—–w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-02-12 02:35 . 2013-02-12 02:36 ——– d—–w- c:\program files\iTunes 2013-02-12 02:35 . 2013-02-12 02:36 ——– d—–w- c:\program files (x86)\iTunes 2013-02-12 02:35 . 2013-02-12 02:35 ——– d—–w- c:\program files\iPod 2013-02-09 18:34 . 2013-02-09 18:34 ——– d—–w- C:\2d2cbca6cd90233720548e81ea04 2013-02-08 19:58 . 2013-02-08 19:58 ——– d—–w- C:\008bbd452bcf08085a 2013-02-08 19:15 . 2012-11-09 05:45 750592 —-a-w- c:\windows\system32\win32spl.dll 2013-02-08 19:15 . 2012-11-09 04:43 492032 —-a-w- c:\windows\SysWow64\win32spl.dll 2013-02-08 19:14 . 2012-11-01 05:43 2002432 —-a-w- c:\windows\system32\msxml6.dll 2013-02-08 19:14 . 2012-11-01 05:43 1882624 —-a-w- c:\windows\system32\msxml3.dll 2013-02-08 19:14 . 2012-11-01 04:47 1389568 —-a-w- c:\windows\SysWow64\msxml6.dll 2013-02-08 19:14 . 2012-11-01 04:47 1236992 —-a-w- c:\windows\SysWow64\msxml3.dll 2013-02-08 19:14 . 2012-11-20 05:48 307200 —-a-w- c:\windows\system32\ncrypt.dll 2013-02-08 19:14 . 2012-11-20 04:51 220160 —-a-w- c:\windows\SysWow64\ncrypt.dll 2013-02-08 19:14 . 2012-11-23 03:13 68608 —-a-w- c:\windows\system32\taskhost.exe . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-02-22 04:41 . 2012-01-26 02:42 70004024 —-a-w- c:\windows\system32\MRT.exe 2013-02-10 04:34 . 2012-05-05 16:07 697712 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-02-10 04:34 . 2012-01-25 23:27 74096 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-01-17 06:28 . 2010-11-21 03:27 273840 ——w- c:\windows\system32\MpSigStub.exe 2013-01-04 04:43 . 2013-02-20 01:31 44032 —-a-w- c:\windows\apppatch\acwow64.dll 2012-12-24 23:09 . 2012-12-24 23:09 205824 —-a-w- c:\users\Kyle\AppData\Roaming\Faded.exe 2012-12-16 17:11 . 2012-12-21 23:37 46080 —-a-w- c:\windows\system32\atmlib.dll 2012-12-16 14:45 . 2012-12-21 23:37 367616 —-a-w- c:\windows\system32\atmfd.dll 2012-12-16 14:13 . 2012-12-21 23:37 295424 —-a-w- c:\windows\SysWow64\atmfd.dll 2012-12-16 14:13 . 2012-12-21 23:37 34304 —-a-w- c:\windows\SysWow64\atmlib.dll 2012-12-15 21:46 . 2012-12-15 21:42 4096 —-a-w- c:\users\Kyle\AppData\Roaming\MicbxoiWo.exe 2012-12-15 21:46 . 2012-12-15 21:45 1074703 —-a-w- c:\users\Kyle\AppData\Roaming\RNRJHTIWVFJEsvchost.exe 2012-12-15 21:43 . 2012-12-15 21:43 1074695 —-a-w- c:\users\Kyle\AppData\Roaming\FGKO3svchost.exe 2012-12-15 21:42 . 2012-12-15 21:42 1074695 —-a-w- c:\users\Kyle\AppData\Roaming\6WU0Bsvchost.exe 2012-12-15 21:42 . 2012-12-15 21:42 1074962 —-a-w- c:\users\Kyle\AppData\Roaming\DKIQHU4svchost.exe 2012-12-15 21:40 . 2012-12-15 21:40 4096 —-a-w- c:\users\Kyle\AppData\Roaming\MYVmVIWWo.exe 2012-12-15 19:46 . 2012-12-15 19:44 4096 —-a-w- c:\users\Kyle\AppData\Roaming\MCCzDxCzo.exe 2012-12-15 19:44 . 2012-12-15 19:44 1236480 —-a-w- c:\users\Kyle\AppData\Roaming\javaa.exe 2012-12-10 01:55 . 2012-12-10 00:51 4096 —-a-w- c:\users\Kyle\AppData\Roaming\MGAKaXYSo.exe . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{A42D2EB4-DD31-4BB5-8AA5-8D4E04806DBE}] c:\program files\PrivacySafeGuard\PrivacySafeGuard.dll [BU] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="c:\users\Kyle\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-11-26 1199576] "Java"="c:\users\Kyle\AppData\Roaming\Faded.exe" [2012-12-24 205824] "Services and Controller App"="c:\users\Kyle\msdata\service.exe" [BU] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-04-02 336384] "HPConnectionManager"="c:\program files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe" [2011-02-15 94264] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2010-11-16 35736] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-16 932288] "Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2011-03-16 61112] "HPOSD"="c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" [2011-08-19 379960] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280] "HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2012-02-15 577408] "LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-12-10 2254768] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-12-12 152544] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "EnableShellExecuteHooks"= 1 (0x1) . [hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks] . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944] R2 WCMVCAM;WebcamMax, WDM Video Capture;c:\windows\system32\DRIVERS\wcmvcam64.sys [2011-06-23 1071032] R3 ALSysIO;ALSysIO;c:\users\Kyle\AppData\Local\Temp\ALSysIO64.sys [x] R3 atillk64;atillk64;c:\program files (x86)\AMD\System Monitor\atillk64.sys [x] R3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [x] R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x] R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456] R3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys [2009-12-01 38992] R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864] R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312] R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-09-28 53760] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-01-21 1255736] R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [x] R3 X6va007;X6va007;c:\users\Kyle\AppData\Local\Temp\0073005.tmp [x] R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184] S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys [2011-04-15 79488] S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys [2011-04-15 40064] S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1207020.003\SYMDS64.SYS [2011-01-27 450680] S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1207020.003\SYMEFA64.SYS [2011-03-15 912504] S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20130208.001\BHDrvx64.sys [2013-01-16 1388120] S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20130222.001\IDSvia64.sys [2013-02-07 513184] S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS [2011-01-27 171128] S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1207020.003\SYMNETS.SYS [2011-04-21 386168] S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2012-10-14 89600] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-09-15 204288] S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-04-02 365568] S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624] S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe [x] S2 FPLService;TrueSuiteService;c:\program files (x86)\HP SimplePass 2011\TrueSuiteService.exe [2011-02-18 265544] S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-12-10 2465712] S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528] S2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-10-11 346168] S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2012-04-25 31000] S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2012-02-15 34872] S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-02-24 2413056] S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe [2011-04-17 130008] S2 RoxioNow Service;RoxioNow Service;c:\program files (x86)\Roxio\RoxioNow Player\RNowSvc.exe [2010-11-26 399344] S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776] S3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\amdhub30.sys [2011-03-18 87168] S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136] S3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\amdxhc.sys [2011-03-18 188544] S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2010-11-17 115216] S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-07-14 344616] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-03-02 39464] S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-08-09 138912] S3 hpCMSrv;HP Connection Manager 4.0 Service;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2011-02-15 1071160] S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2012-02-24 338536] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-02-17 428136] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376] S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2010-12-16 47232] . . — Other Services/Drivers In Memory — . *Deregistered* - SmartDefragDriver . Contents of the 'Scheduled Tasks' folder . 2013-02-25 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-05 04:34] . 2013-02-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-28 00:46] . 2013-02-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-28 00:46] . 2013-02-22 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3059046161-287070921-57097081-1002Core.job - c:\users\Kyle\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-19 21:27] . 2013-02-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3059046161-287070921-57097081-1002UA.job - c:\users\Kyle\AppData\Local\Google\Update\GoogleUpdate.exe [2012-01-19 21:27] . 2013-02-08 c:\windows\Tasks\HPCeeScheduleForKYLE-HP$.job - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15] . 2013-02-09 c:\windows\Tasks\HPCeeScheduleForKyle.job - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2012-10-14 1425408] . ——- Supplementary Scan ——- . uStart Page = hxxp://isearch.avg.com/?cid={44DB4149-5F82-4D25-8DFD-E20A27957B6D}&mid=238fc3f340e747d18c719165b2c245a5-14f68081414f1777257dae7cafb45675871ccf0e&lang=en&ds=ins10&pr=sa&d=2012-02-03 22:04&v=10.0.0.7&sap=hp uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000 IE: Se&nd to OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105 IE: Send image to &Bluetooth Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm Trusted Zone: clonewarsadventures.com Trusted Zone: freerealms.com Trusted Zone: soe.com Trusted Zone: sony.com TCP: DhcpNameServer = 192.168.1.1 4.2.2.2 FF - ProfilePath - c:\users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\ FF - prefs.js: browser.search.selectedEngine - AVG Secure Search FF - prefs.js: browser.startup.homepage - hxxp://isearch.avg.com?cid=%7Be49ca92c-e8ba-472e-a3b3-bfa25e89e906%7D&mid=238fc3f340e747d18c719165b2c245a5-14f68081414f1777257dae7cafb45675871ccf0e&ds=ins10&v=10.2.0.3&lang=en&pr=sa&d=2012-02-03%2022%3A04%3A52 . - - - - ORPHANS REMOVED - - - - . BHO-{1036AD63-AEAC-460B-9060-C96005D4DC86} - (no file) AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc_blr.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS] "ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\diMaster.dll\" /prefetch:1" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc] "ImagePath"="c:\windows\system32\GameMon.des -service" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va007] "ImagePath"="\??\c:\users\Kyle\AppData\Local\Temp\0073005.tmp" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va008] "ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008" . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2013-02-26 16:26:41 ComboFix-quarantined-files.txt 2013-02-26 21:26 . Pre-Run: 395,433,844,736 bytes free Post-Run: 394,640,490,496 bytes free . - - End Of File - - 402E83F13A9E2B49DBAF508F9D14462F The AdwCleaner didn't seem to have a log appear? JRT ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 4.6.5 (02.18.2013:1) OS: Windows 7 Home Premium x64 Ran by [removed] on 26/02/2013 at 16:49:32.91 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{1036ad63-aeac-460b-9060-c96005d4dc86} Successfully deleted: [Registry Key] hkey_classes_root\clsid\{a42d2eb4-dd31-4bb5-8aa5-8d4e04806dbe} Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{a42d2eb4-dd31-4bb5-8aa5-8d4e04806dbe} Successfully deleted: [Registry Key] hkey_current_user\software\microsoft\internet explorer\searchscopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671} Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\internet explorer\searchscopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671} ~~~ Files Successfully deleted: [File] C:\eula.1028.txt Successfully deleted: [File] C:\eula.1031.txt Successfully deleted: [File] C:\eula.1033.txt Successfully deleted: [File] C:\eula.1036.txt Successfully deleted: [File] C:\eula.1040.txt Successfully deleted: [File] C:\eula.1041.txt Successfully deleted: [File] C:\eula.1042.txt Successfully deleted: [File] C:\eula.2052.txt Successfully deleted: [File] C:\install.res.1028.dll Successfully deleted: [File] C:\install.res.1031.dll Successfully deleted: [File] C:\install.res.1033.dll Successfully deleted: [File] C:\install.res.1036.dll Successfully deleted: [File] C:\install.res.1040.dll Successfully deleted: [File] C:\install.res.1041.dll Successfully deleted: [File] C:\install.res.1042.dll Successfully deleted: [File] C:\install.res.2052.dll Successfully deleted: [File] C:\install.res.3082.dll ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\privacy safeguard" Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" ~~~ Chrome Successfully deleted: [Folder] C:\Users\Kyle\appdata\local\Google\Chrome\User Data\Default\Extensions\geggofhlfbcmanadhknllmlajiafopoh Successfully deleted: [Registry Key] hkey_local_machine\software\google\chrome\extensions\geggofhlfbcmanadhknllmlajiafopoh ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 26/02/2013 at 17:02:09.69 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ The computer seems to be running fine, although I've seen a few errors pop up saying "services.exe has stopped working" and other errors with "insert word here.exe has stopped working"

Adw

# AdwCleaner v2.113 - Logfile created 02/26/2013 at 16:35:29
# Updated 23/02/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Kyle - KYLE-HP
# Boot Mode : Normal
# Running from : C:\Users\Kyle\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll
File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.xpt
File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll
File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.xpt
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Deleted : C:\user.js
File Deleted : C:\Users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\searchplugins\Askcom.xml
Folder Deleted : C:\Program Files (x86)\Common Files\Software Update Utility
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Users\Kyle\AppData\Local\APN
Folder Deleted : C:\Users\Kyle\AppData\Local\Conduit
Folder Deleted : C:\Users\Kyle\AppData\Local\Ilivid Player
Folder Deleted : C:\Users\Kyle\AppData\LocalLow\Conduit

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\Freeze.com
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16464

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://isearch.avg.com/?cid={44DB4149-5F82-4D25-8DFD-E20A27957B6D}∣=238fc3f340e747d18c719165b2c245a5-14f68081414f1777257dae7cafb45675871ccf0e⟨=en&ds;=ins10≺=sa&d;=2012-02-03 22:04:52&v;=10.0.0.7&sap;=hp –> hxxp://www.google.com

-\\ Mozilla Firefox v9.0.1 (en-US)

File : C:\Users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\prefs.js

C:\Users\Kyle\AppData\Roaming\Mozilla\Firefox\Profiles\o588cxb6.default\user.js … Deleted !

Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Deleted : user_pref("browser.search.order.1", "Ask.com");
Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Deleted : user_pref("browser.startup.homepage", "hxxp://isearch.avg.com?cid=%7Be49ca92c-e8ba-472e-a3b3-bfa25e8[…]
Deleted : user_pref("extensions.enabledAddons", "[removed]:5.0,[removed]:1.5.0,{97[…]
Deleted : user_pref("extensions.funmoods.admin", false);
Deleted : user_pref("extensions.funmoods.aflt", "adknlg");
Deleted : user_pref("extensions.funmoods.cntry", "US");
Deleted : user_pref("extensions.funmoods.dfltLng", "");
Deleted : user_pref("extensions.funmoods.dfltSrch", false);
Deleted : user_pref("extensions.funmoods.excTlbr", false);
Deleted : user_pref("extensions.funmoods.hdrMd5", "DF5A8672A7134F67F18E47733B1F640A");
Deleted : user_pref("extensions.funmoods.hmpg", false);
Deleted : user_pref("extensions.funmoods.id", "7a318cf4000000000000402cf43c16d4");
Deleted : user_pref("extensions.funmoods.instlDay", "15424");
Deleted : user_pref("extensions.funmoods.instlRef", "");
Deleted : user_pref("extensions.funmoods.lastVrsnTs", "1.5.11.1619:50:13");
Deleted : user_pref("extensions.funmoods.newTab", false);
Deleted : user_pref("extensions.funmoods.noFFXTlbr", false);
Deleted : user_pref("extensions.funmoods.prdct", "funmoods");
Deleted : user_pref("extensions.funmoods.prtnrId", "funmoods");
Deleted : user_pref("extensions.funmoods.sg", "none");
Deleted : user_pref("extensions.funmoods.smplGrp", "none");
Deleted : user_pref("extensions.funmoods.tlbrId", "base");
Deleted : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://start.funmoods.com/results.php?f=3&a;=adknlg&q;="[…]
Deleted : user_pref("extensions.funmoods.vrsn", "1.5.11.16");
Deleted : user_pref("extensions.funmoods.vrsnTs", "1.5.11.1619:50:13");
Deleted : user_pref("extensions.funmoods.vrsni", "1.5.11.16");
Deleted : user_pref("extensions.funmoods_i.newTab", false);

-\\ Google Chrome v24.0.1312.57

File : C:\Users\Kyle\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted [l.15] : homepage = "hxxp://www.ask.com/?l=dis&o;=15434cr",
Deleted [l.2213] : homepage = "hxxp://www.ask.com/?l=dis&o;=15434cr",

*************************

AdwCleaner[S1].txt - [7881 octets] - [26/02/2013 16:35:29]

########## EOF - C:\AdwCleaner[S1].txt - [7941 octets] ##########


Mbam.txt

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Database version: v2013.02.27.11

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Kyle :: KYLE-HP [administrator]

27/02/2013 17:28:58
mbam-log-2013-02-27 (17-28-58).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 272104
Time elapsed: 30 minute(s), 59 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Services and Controller App (Trojan.Agent) -> Data: C:\Users\Kyle\msdata\service.exe -> Quarantined and deleted successfully.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 18
C:\Users\Kyle\AppData\Roaming\MGAKaXYSo.exe (Trojan.MSIL.NGen) -> Quarantined and deleted successfully.
C:\Users\Kyle\AppData\Roaming\MYVmVIWWo.exe (Trojan.MSIL) -> Quarantined and deleted successfully.
C:\Users\Kyle\Downloads\ADLSoft_UnCompressor_triple_2nd_offer_0412_s.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Users\Kyle\Downloads\All_CPU_Meter.exe (PUP.Adbundler) -> Quarantined and deleted successfully.
C:\Users\Kyle\Downloads\Downloader.exe (PUP.BundleInstaller.VG) -> Quarantined and deleted successfully.
C:\Users\Kyle\Downloads\DownloadManager_Setup (1).exe (PUP.Bundle.Installer.OI) -> Quarantined and deleted successfully.
C:\Users\Kyle\Downloads\DownloadManager_Setup.exe (PUP.Bundle.Installer.OI) -> Quarantined and deleted successfully.
C:\Users\Kyle\Downloads\Impress_Setup.exe (PUP.Bundle.Installer.OI) -> Quarantined and deleted successfully.
C:\Users\Kyle\Downloads\installer_adobe_photoshop_cs5.exe (PUP.BundleInstaller.BT) -> Quarantined and deleted successfully.
C:\Users\Kyle\Downloads\Klite_Setup.exe (PUP.Bundle.Installer.OI) -> Quarantined and deleted successfully.
C:\Users\Kyle\Downloads\setup_PlayPickle_v2.exe (PUP.BundleInstaller.OI) -> Quarantined and deleted successfully.
C:\Users\Kyle\Downloads\VideoPerformerSetup.exe (PUP.BundleInstaller.IB) -> Quarantined and deleted successfully.
C:\Users\Kyle\AppData\Roaming\6WU0Bsvchost.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
C:\Users\Kyle\AppData\Roaming\DKIQHU4svchost.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
C:\Users\Kyle\AppData\Roaming\FGKO3svchost.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
C:\Users\Kyle\AppData\Roaming\RNRJHTIWVFJEsvchost.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
C:\Users\Kyle\AppData\Roaming\javaa.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
C:\Users\Kyle\msdata\service.exe (Trojan.Agent) -> Quarantined and deleted successfully.

(end)

checkup.txt

Results of screen317's Security Check version 0.99.60
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 9
``````````````Antivirus/Firewall Check:``````````````
Windows Security Center service is not running! This report may not be accurate!
Windows Firewall Disabled!
Norton Internet Security
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.70.0.1100
Java™ 6 Update 31
Java version out of Date!
Adobe Flash Player 11.6.602.171
Mozilla Firefox (9.0.1)
Google Chrome 24.0.1312.57
Google Chrome 25.0.1364.97
````````Process Check: objlist.exe by Laurent````````
Norton ccSvcHst.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 1%
````````````````````End of Log``````````````````````


Other than seeing a "Faded.exe" has stopped working nothing seems wrong