What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Email Virus? [Closed]

60 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I have a godaddy domain for email. I have it set up via POP on my Blackberry , this laptop and two desktops in my office. About a week ago I noticed emails were sitting in my outbox (Outlook 2007) and never sending. Logged into godaddy to determine all of my smtp relays were being used up. Apparently my email address is sending out mass emails to complete strangers (ED, Refi,etc spam). Apparently, my email is spoofed and I am trying to isolate the infection source (ie, Blackberry, Laptop (this computer) or the two desktops.
I have run a bunch of antivirus on all to no avail.

Thanks in advance for looking.

Here is a log from HijackThis:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:57:59 PM, on 3/10/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE
C:\Program Files (x86)\PFConfig\pfconfig.exe
C:\Users\Rich Ideapad\AppData\Local\Workspace\WorkspaceStatus.exe
C:\Users\Rich Ideapad\AppData\Local\Workspace\WorkspaceUpdate.exe
C:\Users\Rich Ideapad\AppData\Local\Workspace\wben.exe
C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_168.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_168.exe
C:\Users\Rich Ideapad\Downloads\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll
O2 - BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Starfield Updater] "C:\Users\Rich Ideapad\AppData\Local\Workspace\WorkspaceUpdate.exe"
O4 - HKCU\..\Run: [wben] "C:\Users\Rich Ideapad\AppData\Local\Workspace\wben.exe"
O4 - HKCU\..\Run: [Workspace Status] "C:\Users\Rich Ideapad\AppData\Local\Workspace\WorkspaceStatus.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device… - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device… - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: @C:\windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: ivs.bxohio.com
O15 - Trusted Zone: www.bxohio.com
O15 - Trusted Zone: *.bxwa.com
O15 - Trusted Zone: www.ipinviewer.com
O15 - Trusted Zone: http://consumersupport.lenovo.com
O15 - Trusted Zone: http://edrivers.lenovo.com.cn
O15 - Trusted Zone: http://support4.lenovo.com.cn
O15 - Trusted Zone: http://think.lenovo.com.cn
O15 - Trusted Zone: www.pbe.org
O15 - Trusted Zone: http://www.pghbx.org
O16 - DPF: {9E2CD2C3-4DDA-4473-B904-B8E6D0DBAB86} (ElevatedCreater Class) - http://consumersupport.lenovo.com/us/en/Sm…cab/npdueng.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: CyberLink Product - 2011/09/06 19:49:18 (CLKMSVC10_3A60B698) - CyberLink - C:\Program Files (x86)\Lenovo\PowerDVD10\NavFilter\kmsvc.exe
O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: File Backup Service (File Backup) - Starfield Technologies - C:\Program Files (x86)\Workspace\offSyncService.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\windows\SysWOW64\nlssrv32.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: RtLedService Installer (RtLedService) - Realtek Semiconductor Corp. - C:\Program Files\Realtek\RtLED\RtLEDService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: WD Backup (WDBackup) - Western Digital - C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
O23 - Service: WD Drive Manager (WDDriveService) - Western Digital - C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
O23 - Service: WD Rules (WDRulesService) - Western Digital - C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 13859 bytes
Post #2
Hello and Posted Image

My name is patndoris. I will be glad to take a look at your log and help you with solving any malware problems. It will be very helpful if you follow these guidelines:
  • Malware logs are often lengthy and can take a lot of time to research and interpret. Please be patient while I review your logs.
  • Please note that there is no "Quick Fix" to modern malware infections and we may need to use several different approaches to get your system clean.
  • Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
  • Please follow my instructions carefully and in the order they are posted. You may also find it helpful to print out the instructions you receive.
  • Please do not run any scans or install/uninstall any applications or delete anything without being directed to do so.
  • Remember, absence of symptoms does not mean the infection is all gone. Please stick with me till you're given the "all clear".
  • Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.
  • Please reply within 3 days. If I do not hear back from you in that time frame, I will post a reminder for you. Topics with no reply in 4 days are closed!



P2P - I see you have P2P software ( uTorrent ) installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It likely contributed to your current situation. This page will give you further information.
Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.
Please see this topic for more information:
Perils of P2P File Sharing.
I would strongly recommend that you uninstall these now. You can do so via Control Panel >> Programs and Features.

If you choose to leave them on the machine, please refrain from using them while we are cleaning the machine to prevent further infection.



IOBit based in China has stolen and incorporated proprietary databases and intellectual property into their software in the past. This calls into question the reliability and safety of this program. I would suggest you use uninstall this program, but the decision is yours. You can read more about it here



As to your email issue, it is most likely that your login and password have been compromised. This can happen in a number of different ways. It can happen inadvertantly if you (or someone else) accidentally enters your user information and password on a less than credible website. In such cases, the remote source then logs into your account from somewhere usually far away (in this case probably right on the GoDaddy server) and sends the emails directly from there. Or you could have a rootkit or trojan on your machine allowing backdoor access to your machine, allowing a remote source access to your machine (and your information) when you don't know about it. In this type of instance, your other personal infromation including banking and credit card information could be compromised as well.

I would immediately log into your email account from a known clean computer and change your login to your email account. If this is a simple case where your password has been compromised, that will take care of the problem. But we will go ahead and run a couple other diagnostic tools to ensure there is nothing else lurking on your machine.


HijackThis has largely been replaced by other tools. Since being acquired by TrendMicro, HijackThis has not been regularly updated. Many infections are now able to hide partly, or completely from a HijackThis scan. DDS includes all the scan locations of HijackThis and more.


Download and Run DDS by sUBs

We need to see some information about what is happening in your machine. Please perform the following scan:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
    • DDS.com
    • DDS.pif
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explaination about the tool. No input is needed, the scan is running.
  • Notepad will open with the results.
  • Follow the instructions that pop up for posting the results.
  • Close the program window, and delete the program from your desktop.
Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE



Please read carefully and follow these steps. There is a difference between what you see in one of the images below and what I need you to do.
We are only creating a log - I do NOT want you to "cure" or try to fix anything in this step. It is very important that you don't choose Cure when presented with that option.
  • Download TDSSKiller and save it to your Desktop.
  • Extract its contents to your desktop.
  • Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.


    🖼Click to load external image (Posted Image)

  • If an infected file is detected, the default action will be Cure but I want you to choose SKIP instead , click on Continue.


    🖼Click to load external image (Posted Image)

  • If a suspicious file is detected, the default action will be Skip, click on Continue.


    🖼Click to load external image (Posted Image)

  • It may ask you to reboot the computer to complete the process. Click on Reboot Now.


    🖼Click to load external image (Posted Image)

  • If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  • If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
Post #3
DDS (Ver_2012-11-20.01) - NTFS_AMD64 Internet Explorer: 9.0.8112.16464 BrowserJavaVersion: 10.17.2 Run by [removed] at 23:26:54 on 2013-03-12 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8106.5944 [GMT -4:00] . AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5} SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D} SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508} . ============== Running Processes =============== . C:\windows\system32\lsm.exe C:\windows\system32\svchost.exe -k DcomLaunch C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe C:\windows\system32\svchost.exe -k RPCSS c:\Program Files\Microsoft Security Client\MsMpEng.exe C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\windows\system32\svchost.exe -k LocalService C:\windows\system32\svchost.exe -k netsvcs C:\windows\system32\svchost.exe -k GPSvcGroup C:\windows\system32\svchost.exe -k NetworkService C:\windows\system32\WLANExt.exe C:\windows\System32\spoolsv.exe C:\windows\system32\svchost.exe -k LocalServiceNoNetwork C:\windows\system32\taskhost.exe C:\windows\system32\Dwm.exe C:\windows\Explorer.EXE C:\windows\system32\taskeng.exe C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe C:\Users\Rich Ideapad\AppData\Local\Workspace\workspaceupdate.exe C:\windows\system32\taskeng.exe C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE C:\Program Files\Intel\WiFi\bin\EvtEng.exe C:\Program Files (x86)\Workspace\offSyncService.exe C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe C:\windows\System32\svchost.exe -k HPZ12 C:\windows\SysWOW64\nlssrv32.exe C:\windows\System32\svchost.exe -k HPZ12 C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\windows\system32\svchost.exe -k imgsvc C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe C:\windows\system32\wbem\unsecapp.exe C:\windows\system32\wbem\wmiprvse.exe C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation c:\Program Files\Microsoft Security Client\NisSrv.exe C:\windows\system32\SearchIndexer.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Google\Update\GoogleUpdate.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe C:\windows\system32\svchost.exe -k WindowsMobile C:\Program Files\Realtek\RtLED\RtLEDService.exe C:\Program Files\Realtek\RtLED\RtLED.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe C:\Program Files (x86)\AVG\AVG2013\avgui.exe C:\Program Files (x86)\AVG\AVG2013\avgcfgex.exe C:\windows\system32\SearchProtocolHost.exe C:\windows\system32\SearchFilterHost.exe C:\windows\system32\wbem\wmiprvse.exe C:\windows\System32\cscript.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.com/ mStart Page = hxxp://lenovo.msn.com uURLSearchHooks: IObit Apps Toolbar: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll BHO: IObit Apps Toolbar: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll TB: IObit Apps Toolbar: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\6.9\iobitappsToolbarIE.dll uRun: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe uRun: [Starfield Updater] "C:\Users\Rich Ideapad\AppData\Local\Workspace\WorkspaceUpdate.exe" uRun: [wben] "C:\Users\Rich Ideapad\AppData\Local\Workspace\wben.exe" uRun: [Workspace Status] "C:\Users\Rich Ideapad\AppData\Local\Workspace\workspacestatus.exe" uRun: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" uPolicies-Explorer: NoDrives = dword:0 mPolicies-Explorer: NoDrives = dword:0 mPolicies-System: ConsentPromptBehaviorAdmin = dword:5 mPolicies-System: ConsentPromptBehaviorUser = dword:3 mPolicies-System: EnableUIADesktopToggle = dword:0 mPolicies-System: PromptOnSecureDesktop = dword:0 IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 IE: Send image to &Bluetooth Device… - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device… - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll . INFO: HKCU has more than 50 listed domains. If you wish to scan all of them, select the 'Force scan all domains' option. . . INFO: HKLM has more than 50 listed domains. If you wish to scan all of them, select the 'Force scan all domains' option. . DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: {9E2CD2C3-4DDA-4473-B904-B8E6D0DBAB86} - hxxp://consumersupport.lenovo.com/us/en/SmartDownloading/cab/npdueng.cab TCP: NameServer = 192.168.1.1 TCP: Interfaces\{8EA4E141-9FC0-4A9F-A0B1-F3F5D08D17C1} : DHCPNameServer = 192.168.1.1 TCP: Interfaces\{8EA4E141-9FC0-4A9F-A0B1-F3F5D08D17C1}\2656C6B696E6E2432603 : DHCPNameServer = 192.168.2.1 TCP: Interfaces\{8EA4E141-9FC0-4A9F-A0B1-F3F5D08D17C1}\64C6F6F627373616075637 : DHCPNameServer = 10.1.10.1 192.168.1.1 Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll SSODL: WebCheck - SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll x64-mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0409&m=aspire_5742z&r=27360211v065l0474z165v47i21488 x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm . INFO: x64-HKLM has more than 50 listed domains. If you wish to scan all of them, select the 'Force scan all domains' option. . x64-DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc64.cab x64-Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - x64-Notify: igfxcui - igfxdev.dll x64-SSODL: WebCheck - Hosts: 127.0.0.1 www.spywareinfo.com . ================= FIREFOX =================== . FF - ProfilePath - C:\Users\Rich Ideapad\AppData\Roaming\Mozilla\Firefox\Profiles\0di3cijd.default\ FF - prefs.js: browser.search.selectedEngine - Yahoo FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p= FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrlui.dll FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll FF - plugin: C:\Users\Rich Ideapad\AppData\Local\Citrix\Plugins\92\npappdetector.dll FF - plugin: C:\Users\Rich Ideapad\AppData\Roaming\Mozilla\Plugins\npoff.dll FF - plugin: C:\Users\Rich Ideapad\AppData\Roaming\Mozilla\plugins\npoff.dll FF - plugin: C:\Users\Rich Ideapad\AppData\Roaming\Mozilla\Plugins\npoff64.dll FF - plugin: C:\Users\Rich Ideapad\AppData\Roaming\Mozilla\plugins\npoff64.dll FF - plugin: C:\Users\Rich Ideapad\AppData\Roaming\Mozilla\plugins\npwbe.dll FF - plugin: C:\Users\Rich Ideapad\AppData\Roaming\Mozilla\Plugins\npwbe.dll FF - plugin: C:\Users\Rich Ideapad\AppData\Roaming\Mozilla\Plugins\npwbe64.dll FF - plugin: C:\Users\Rich Ideapad\AppData\Roaming\Mozilla\plugins\npwbe64.dll FF - plugin: C:\windows\System32\lenovo\update\npdueng.dll FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_168.dll FF - plugin: C:\windows\SysWOW64\npDeployJava1.dll FF - plugin: C:\windows\SysWOW64\npmproxy.dll FF - ExtSQL: 2013-02-16 08:07; [removed]; C:\Program Files (x86)\IObit Apps Toolbar\FF FF - ExtSQL: 2013-03-04 21:18; {11f349ad-067f-4254-8341-d7af23eecd99}; C:\Users\Rich Ideapad\AppData\Roaming\Mozilla\Firefox\Profiles\0di3cijd.default\extensions\{11f349ad-067f-4254-8341-d7af23eecd99} FF - ExtSQL: 2013-03-09 12:10; wbepaste@starfield; C:\Users\Rich Ideapad\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\wbepaste@starfield FF - ExtSQL: 2013-03-09 12:10; zoomext@starfield; C:\Users\Rich Ideapad\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\zoomext@starfield . ============= SERVICES / DRIVERS =============== . R0 AVGIDSHA;AVGIDSHA;C:\windows\System32\drivers\avgidsha.sys [2012-10-15 63328] R0 Avgloga;AVG Logging Driver;C:\windows\System32\drivers\avgloga.sys [2012-9-21 225120] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\windows\System32\drivers\avgmfx64.sys [2012-11-16 111968] R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\windows\System32\drivers\avgrkx64.sys [2012-9-14 40800] R0 fbfmon;fbfmon;C:\windows\System32\drivers\fbfmon.sys [2011-9-6 57952] R0 LHDmgr;LHDmgr;C:\windows\System32\drivers\LhdX64.sys [2011-9-6 39008] R0 MpFilter;Microsoft Malware Protection Driver;C:\windows\System32\drivers\MpFilter.sys [2013-1-20 230320] R0 SmartDefragDriver;SmartDefragDriver;C:\windows\System32\drivers\SmartDefragDriver.sys [2013-2-16 17720] R1 AVGIDSDriver;AVGIDSDriver;C:\windows\System32\drivers\avgidsdrivera.sys [2012-10-22 154464] R1 Avgldx64;AVG AVI Loader Driver;C:\windows\System32\drivers\avgldx64.sys [2012-10-2 185696] R1 Avgtdia;AVG TDI Driver;C:\windows\System32\drivers\avgtdia.sys [2012-9-21 200032] R1 BPntDrv;BPntDrv;C:\windows\System32\drivers\BPntDrv.sys [2011-9-6 13408] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\windows\System32\drivers\dtsoftbus01.sys [2012-4-3 283200] R2 AdvancedSystemCareService6;Advanced SystemCare Service 6;C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [2013-2-16 465216] R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664] R2 File Backup;File Backup Service;C:\Program Files (x86)\Workspace\offSyncService.exe [2013-2-28 1183456] R2 MSSQL$MYMOVIES;SQL Server (MYMOVIES);C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408] R2 NisDrv;Microsoft Network Inspection System;C:\windows\System32\drivers\NisDrvWFP.sys [2012-8-30 130008] R2 nlsX86cc;Nalpeiron Licensing Service;C:\Windows\SysWOW64\nlssrv32.exe [2012-3-9 66560] R2 RtLedService;RtLedService Installer;C:\Program Files\Realtek\RtLED\RtLEDService.exe [2010-9-30 311296] R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2013-3-9 1153368] R2 UNS;Intel® Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-9-6 2656280] R2 WDBackup;WD Backup;C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [2012-9-19 1157056] R2 WDDriveService;WD Drive Manager;C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [2012-9-19 248248] R2 WDRulesService;WD Rules;C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe [2012-9-19 1177536] R3 ACPIVPC;Lenovo Virtual Power Controller Driver;C:\windows\System32\drivers\AcpiVpc.sys [2010-10-25 29792] R3 clwvd;CyberLink WebCam Virtual Driver;C:\windows\System32\drivers\clwvd.sys [2010-12-4 31088] R3 IntcDAud;Intel® Display Audio;C:\windows\System32\drivers\IntcDAud.sys [2011-4-13 317440] R3 NisSrv;Microsoft Network Inspection;C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-1-27 379360] R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;C:\windows\System32\drivers\rtsuvstor.sys [2011-9-6 307304] R3 RTL8167;Realtek 8167 NT Driver;C:\windows\System32\drivers\Rt64win7.sys [2011-6-10 539240] R3 S6000KNT;S6000KNT_WebCam Driver;C:\windows\System32\drivers\S6000KNT.sys [2011-9-6 3293272] R3 wdkmd;Intel WiDi KMD;C:\windows\System32\drivers\WDKMD.sys [2010-12-1 42392] R3 WSDScan;WSD Scan Support via UMB;C:\windows\System32\drivers\WSDScan.sys [2009-7-13 25088] S2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-16 5814904] S2 CLKMSVC10_3A60B698;CyberLink Product - 2011/09/06 19:49:18;C:\Program Files (x86)\Lenovo\PowerDVD10\NavFilter\kmsvc.exe [2011-2-24 241648] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S2 IMFservice;IMF Service;C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2013-2-16 821592] S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-11-9 160944] S3 BTWAMPFL;BTWAMPFL;C:\windows\System32\drivers\btwampfl.sys [2011-9-6 349736] S3 btwl2cap;Bluetooth L2CAP Service;C:\windows\System32\drivers\btwl2cap.sys [2011-9-6 39464] S3 FileMonitor;FileMonitor;C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [2013-2-16 21384] S3 mbamchameleon;mbamchameleon;C:\windows\System32\drivers\mbamchameleon.sys [2013-1-20 36680] S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2010-11-2 340240] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\windows\System32\drivers\rdpvideominiport.sys [2012-10-27 19456] S3 RegFilter;RegFilter;C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\RegFilter.sys [2013-2-16 33224] S3 RemoteControl-USBLAN;RemoteControl-USBLAN;C:\windows\System32\drivers\rcblan.sys [2012-12-17 46616] S3 TsUsbFlt;TsUsbFlt;C:\windows\System32\drivers\TsUsbFlt.sys [2012-10-27 57856] S3 TsUsbGD;Remote Desktop Generic USB Device;C:\windows\System32\drivers\TsUsbGD.sys [2012-10-27 30208] S3 UrlFilter;UrlFilter;C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\UrlFilter.sys [2013-2-16 21904] S3 USBAAPL64;Apple Mobile USB Driver;C:\windows\System32\drivers\usbaapl64.sys [2012-9-28 53760] S3 WatAdminSvc;Windows Activation Technologies Service;C:\windows\System32\Wat\WatAdminSvc.exe [2012-3-10 1255736] S3 wsvd;wsvd;C:\windows\System32\drivers\wsvd.sys [2009-7-21 121840] S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184] . =============== Created Last 30 ================ . 2013-03-12 11:31:23 76232 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{AF74A166-D8EE-4368-B98F-C8D67ED64325}\offreg.dll 2013-03-12 11:25:58 972264 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{3DC92507-FE68-40A3-943B-2D61EB8E1F79}\gapaengine.dll 2013-03-12 11:25:45 9162192 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{AF74A166-D8EE-4368-B98F-C8D67ED64325}\mpengine.dll 2013-03-12 11:25:27 9162192 —-a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2013-03-12 11:22:25 381440 —-a-w- C:\windows\System32\mfds.dll 2013-03-12 11:20:52 95648 —-a-w- C:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-03-11 03:29:31 ——– d—–w- C:\Program Files (x86)\ESET 2013-03-09 17:51:22 ——– d—–w- C:\Users\Rich Ideapad\AppData\Local\offsync 2013-03-09 17:10:39 ——– d—–w- C:\windows\Workspace Logs 2013-03-09 17:10:35 ——– d—–w- C:\Program Files (x86)\Workspace 2013-03-09 17:09:40 ——– d—–w- C:\Users\Rich Ideapad\AppData\Local\Workspace 2013-03-09 16:14:29 ——– d—–w- C:\windows\ERUNT 2013-03-09 16:14:15 ——– d—–w- C:\JRT 2013-03-09 15:49:01 ——– d-sh–w- C:\$RECYCLE.BIN 2013-03-09 12:09:35 ——– d—–w- C:\ProgramData\Spybot - Search & Destroy 2013-03-09 12:09:35 ——– d—–w- C:\Program Files (x86)\Spybot - Search & Destroy 2013-03-08 00:08:31 ——– d—–w- C:\ProgramData\Kaspersky Lab 2013-03-05 01:11:30 ——– d—–w- C:\Users\Rich Ideapad\AppData\Local\{5018DA99-BD4A-41CB-A2E3-448E2BA21016} 2013-03-04 00:20:39 ——– d—–w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-03-04 00:20:39 ——– d—–w- C:\Program Files\iTunes 2013-03-04 00:20:39 ——– d—–w- C:\Program Files\iPod 2013-03-04 00:20:39 ——– d—–w- C:\Program Files (x86)\iTunes 2013-02-27 12:59:56 ——– d—–w- C:\Users\Rich Ideapad\AppData\Local\{ADE1542D-60B3-4BE4-B3AD-DE50E87395F3} 2013-02-23 01:19:43 26432 —-a-w- C:\windows\System32\RegistryDefragBootTime.exe 2013-02-21 11:12:06 428544 —-a-w- C:\windows\System32\igfxrchs.lrc 2013-02-18 15:55:10 ——– d—–w- C:\Users\Rich Ideapad\AppData\Local\Macromedia 2013-02-16 13:22:38 ——– d—–w- C:\Users\Rich Ideapad\AppData\Local\{47CD8CE0-B3CC-4A24-9F83-860DA89B1087} 2013-02-16 13:08:38 32600 —-a-w- C:\windows\System32\SmartDefragBootTime.exe 2013-02-16 13:08:35 17720 —-a-w- C:\windows\System32\drivers\SmartDefragDriver.sys 2013-02-16 13:07:42 ——– d—–w- C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} 2013-02-16 13:07:40 ——– d—–w- C:\ProgramData\IObit 2013-02-16 13:07:38 ——– d—–w- C:\Users\Rich Ideapad\AppData\Roaming\IObit 2013-02-16 13:07:28 ——– d—–w- C:\Program Files (x86)\IObit 2013-02-16 13:07:24 ——– d—–w- C:\Program Files (x86)\IObit Apps Toolbar 2013-02-16 06:40:46 ——– d—–w- C:\Program Files (x86)\PIONEER CORPORATION 2013-02-14 11:43:52 ——– d—–w- C:\Users\Rich Ideapad\AppData\Local\{21FFE264-2E1E-45D5-AF82-2EBBE5784C71} 2013-02-14 08:02:31 996352 —-a-w- C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll 2013-02-14 08:02:31 768000 —-a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll 2013-02-14 01:08:34 ——– d—–w- C:\Users\Rich Ideapad\AppData\Local\GHISLER 2013-02-14 00:55:23 ——– d—–w- C:\Program Files\Western Digital 2013-02-14 00:54:42 ——– d—–w- C:\Users\Rich Ideapad\AppData\Roaming\GHISLER 2013-02-14 00:54:42 ——– d—–w- C:\totalcmd 2013-02-14 00:46:51 ——– d—–w- C:\Users\Rich Ideapad\AppData\Local\IsolatedStorage 2013-02-14 00:44:10 ——– d—–w- C:\Program Files (x86)\Western Digital 2013-02-14 00:43:56 ——– d—–w- C:\ProgramData\Western Digital 2013-02-14 00:43:34 ——– d—–w- C:\Users\Rich Ideapad\AppData\Roaming\WDC 2013-02-14 00:38:39 ——– d—–w- C:\Users\Rich Ideapad\AppData\Local\Western Digital 2013-02-12 22:47:08 5553512 —-a-w- C:\windows\System32\ntoskrnl.exe 2013-02-12 22:47:08 3967848 —-a-w- C:\windows\SysWow64\ntkrnlpa.exe 2013-02-12 22:47:06 3913064 —-a-w- C:\windows\SysWow64\ntoskrnl.exe 2013-02-12 22:46:57 3153408 —-a-w- C:\windows\System32\win32k.sys 2013-02-12 22:46:55 7680 —-a-w- C:\windows\SysWow64\instnm.exe 2013-02-12 22:46:55 5120 —-a-w- C:\windows\SysWow64\wow32.dll 2013-02-12 22:46:55 25600 —-a-w- C:\windows\SysWow64\setup16.exe 2013-02-12 22:46:55 215040 —-a-w- C:\windows\System32\winsrv.dll 2013-02-12 22:46:55 14336 —-a-w- C:\windows\SysWow64\ntvdm64.dll 2013-02-12 22:46:54 2048 —-a-w- C:\windows\SysWow64\user.exe 2013-02-12 22:46:52 288088 —-a-w- C:\windows\System32\drivers\FWPKCLNT.SYS 2013-02-12 22:46:52 1913192 —-a-w- C:\windows\System32\drivers\tcpip.sys 2013-02-12 04:42:22 ——– d—–w- C:\Users\Rich Ideapad\AppData\Local\{205DC6D1-BA9C-4158-B931-B9F76F6E9A7B} . ==================== Find3M ==================== . 2013-03-12 11:20:50 861088 —-a-w- C:\windows\SysWow64\npDeployJava1.dll 2013-03-12 11:20:50 782240 —-a-w- C:\windows\SysWow64\deployJava1.dll 2013-03-04 13:02:43 71024 —-a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-03-04 13:02:43 691568 —-a-w- C:\windows\SysWow64\FlashPlayerApp.exe 2013-01-30 10:53:22 273840 ——w- C:\windows\System32\MpSigStub.exe 2013-01-23 03:31:15 960416 —-a-w- C:\windows\System32\deployJava1.dll 2013-01-23 03:31:15 1081760 —-a-w- C:\windows\System32\npDeployJava1.dll 2013-01-21 03:12:24 36680 —-a-w- C:\windows\System32\drivers\mbamchameleon.sys 2013-01-20 20:59:04 230320 —-a-w- C:\windows\System32\drivers\MpFilter.sys 2013-01-20 20:59:04 130008 —-a-w- C:\windows\System32\drivers\NisDrvWFP.sys 2013-01-13 21:17:03 9728 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-01-13 21:17:02 2560 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-01-13 21:16:42 10752 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-01-13 21:12:46 3584 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-01-13 21:11:21 4096 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-01-13 21:11:08 5632 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-01-13 21:11:07 5632 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-01-13 21:11:07 3072 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll 2013-01-13 21:11:07 3072 —ha-w- C:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-01-13 20:35:31 9728 —ha-w- C:\windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-01-13 20:35:31 2560 —ha-w- C:\windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-01-13 20:35:18 10752 —ha-w- C:\windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-01-13 20:32:07 3584 —ha-w- C:\windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-01-13 20:31:48 4096 —ha-w- C:\windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-01-13 20:31:41 5632 —ha-w- C:\windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-01-13 20:31:40 5632 —ha-w- C:\windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-01-13 20:31:40 3072 —ha-w- C:\windows\System32\api-ms-win-downlevel-version-l1-1-0.dll 2013-01-13 20:31:40 3072 —ha-w- C:\windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-01-13 20:31:00 1247744 —-a-w- C:\windows\SysWow64\DWrite.dll 2013-01-13 20:22:22 1988096 —-a-w- C:\windows\SysWow64\d3d10warp.dll 2013-01-13 20:20:31 293376 —-a-w- C:\windows\SysWow64\dxgi.dll 2013-01-13 20:09:00 249856 —-a-w- C:\windows\SysWow64\d3d10_1core.dll 2013-01-13 20:08:43 220160 —-a-w- C:\windows\SysWow64\d3d10core.dll 2013-01-13 20:08:35 1504768 —-a-w- C:\windows\SysWow64\d3d11.dll 2013-01-13 19:59:04 1643520 —-a-w- C:\windows\System32\DWrite.dll 2013-01-13 19:58:28 1175552 —-a-w- C:\windows\System32\FntCache.dll 2013-01-13 19:54:01 604160 —-a-w- C:\windows\SysWow64\d3d10level9.dll 2013-01-13 19:53:58 207872 —-a-w- C:\windows\SysWow64\WindowsCodecsExt.dll 2013-01-13 19:53:14 187392 —-a-w- C:\windows\SysWow64\UIAnimation.dll 2013-01-13 19:51:30 2565120 —-a-w- C:\windows\System32\d3d10warp.dll 2013-01-13 19:49:17 363008 —-a-w- C:\windows\System32\dxgi.dll 2013-01-13 19:48:47 161792 —-a-w- C:\windows\SysWow64\d3d10_1.dll 2013-01-13 19:46:25 1080832 —-a-w- C:\windows\SysWow64\d3d10.dll 2013-01-13 19:43:21 1230336 —-a-w- C:\windows\SysWow64\WindowsCodecs.dll 2013-01-13 19:38:39 333312 —-a-w- C:\windows\System32\d3d10_1core.dll 2013-01-13 19:38:32 1887232 —-a-w- C:\windows\System32\d3d11.dll 2013-01-13 19:38:21 296960 —-a-w- C:\windows\System32\d3d10core.dll 2013-01-13 19:37:57 3419136 —-a-w- C:\windows\SysWow64\d2d1.dll 2013-01-13 19:25:04 245248 —-a-w- C:\windows\System32\WindowsCodecsExt.dll 2013-01-13 19:24:33 648192 —-a-w- C:\windows\System32\d3d10level9.dll 2013-01-13 19:24:30 221184 —-a-w- C:\windows\System32\UIAnimation.dll 2013-01-13 19:20:42 194560 —-a-w- C:\windows\System32\d3d10_1.dll 2013-01-13 19:20:04 1238528 —-a-w- C:\windows\System32\d3d10.dll 2013-01-13 19:15:40 1424384 —-a-w- C:\windows\System32\WindowsCodecs.dll 2013-01-13 19:10:36 3928064 —-a-w- C:\windows\System32\d2d1.dll 2013-01-13 19:02:06 417792 —-a-w- C:\windows\SysWow64\WMPhoto.dll 2013-01-13 18:34:58 364544 —-a-w- C:\windows\SysWow64\XpsGdiConverter.dll 2013-01-13 18:32:43 465920 —-a-w- C:\windows\System32\WMPhoto.dll 2013-01-13 18:09:52 522752 —-a-w- C:\windows\System32\XpsGdiConverter.dll 2013-01-13 17:26:42 1158144 —-a-w- C:\windows\SysWow64\XpsPrint.dll 2013-01-13 17:05:09 1682432 —-a-w- C:\windows\System32\XpsPrint.dll 2013-01-09 01:19:09 2312704 —-a-w- C:\windows\System32\jscript9.dll 2013-01-09 01:12:03 1392128 —-a-w- C:\windows\System32\wininet.dll 2013-01-09 01:11:06 1494528 —-a-w- C:\windows\System32\inetcpl.cpl 2013-01-09 01:07:51 173056 —-a-w- C:\windows\System32\ieUnatt.exe 2013-01-09 01:07:47 599040 —-a-w- C:\windows\System32\vbscript.dll 2013-01-09 01:04:42 2382848 —-a-w- C:\windows\System32\mshtml.tlb 2013-01-08 22:11:21 1800704 —-a-w- C:\windows\SysWow64\jscript9.dll 2013-01-08 22:03:20 1129472 —-a-w- C:\windows\SysWow64\wininet.dll 2013-01-08 22:03:12 1427968 —-a-w- C:\windows\SysWow64\inetcpl.cpl 2013-01-08 21:59:02 142848 —-a-w- C:\windows\SysWow64\ieUnatt.exe 2013-01-08 21:58:29 420864 —-a-w- C:\windows\SysWow64\vbscript.dll 2013-01-08 21:56:23 2382848 —-a-w- C:\windows\SysWow64\mshtml.tlb 2013-01-04 06:11:21 2284544 —-a-w- C:\windows\SysWow64\msmpeg2vdec.dll 2013-01-04 06:11:13 2776576 —-a-w- C:\windows\System32\msmpeg2vdec.dll 2013-01-04 04:43:21 44032 —-a-w- C:\windows\apppatch\acwow64.dll 2012-12-16 17:11:22 46080 —-a-w- C:\windows\System32\atmlib.dll 2012-12-16 14:45:03 367616 —-a-w- C:\windows\System32\atmfd.dll 2012-12-16 14:13:28 295424 —-a-w- C:\windows\SysWow64\atmfd.dll 2012-12-16 14:13:20 34304 —-a-w- C:\windows\SysWow64\atmlib.dll 2012-12-14 21:49:28 24176 —-a-w- C:\windows\System32\drivers\mbam.sys . ============= FINISH: 23:27:22.34 ===============

Attachments:

Post #5
oops… found it 00:18:47.0857 5916 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 00:18:48.0147 5916 ============================================================ 00:18:48.0147 5916 Current date / time: 2013/03/13 00:18:48.0147 00:18:48.0147 5916 SystemInfo: 00:18:48.0147 5916 00:18:48.0147 5916 OS Version: 6.1.7601 ServicePack: 1.0 00:18:48.0147 5916 Product type: Workstation 00:18:48.0147 5916 ComputerName: RICHIDEAPAD-PC 00:18:48.0147 5916 UserName: Rich Ideapad 00:18:48.0147 5916 Windows directory: C:\windows 00:18:48.0147 5916 System windows directory: C:\windows 00:18:48.0147 5916 Running under WOW64 00:18:48.0147 5916 Processor architecture: Intel x64 00:18:48.0147 5916 Number of processors: 4 00:18:48.0147 5916 Page size: 0x1000 00:18:48.0147 5916 Boot type: Normal boot 00:18:48.0147 5916 ============================================================ 00:18:48.0781 5916 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x162DD1, SectorsPerTrack: 0x3F, TracksPerCylinder: 0x10, Type 'K0', Flags 0x00000040 00:18:48.0781 5916 ============================================================ 00:18:48.0781 5916 \Device\Harddisk0\DR0: 00:18:48.0781 5916 MBR partitions: 00:18:48.0781 5916 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x64000 00:18:48.0781 5916 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64800, BlocksNum 0x51D62800 00:18:48.0811 5916 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x51DC7800, BlocksNum 0x3A00800 00:18:48.0811 5916 ============================================================ 00:18:48.0881 5916 C: <-> \Device\Harddisk0\DR0\Partition2 00:18:49.0031 5916 D: <-> \Device\Harddisk0\DR0\Partition3 00:18:49.0031 5916 ============================================================ 00:18:49.0031 5916 Initialize success 00:18:49.0031 5916 ============================================================ 00:18:51.0431 7292 ============================================================ 00:18:51.0431 7292 Scan started 00:18:51.0431 7292 Mode: Manual; 00:18:51.0431 7292 ============================================================ 00:18:51.0721 7292 ================ Scan system memory ======================== 00:18:51.0721 7292 System memory - ok 00:18:51.0721 7292 ================ Scan services ============================= 00:18:51.0901 7292 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\windows\system32\drivers\1394ohci.sys 00:18:51.0911 7292 1394ohci - ok 00:18:51.0931 7292 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\windows\system32\drivers\ACPI.sys 00:18:51.0931 7292 ACPI - ok 00:18:51.0941 7292 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\windows\system32\drivers\acpipmi.sys 00:18:51.0941 7292 AcpiPmi - ok 00:18:51.0981 7292 [ 5BBFF8B826EC38D32C26334E079C7EFC ] ACPIVPC C:\windows\system32\DRIVERS\AcpiVpc.sys 00:18:52.0011 7292 ACPIVPC - ok 00:18:52.0141 7292 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 00:18:52.0141 7292 AdobeARMservice - ok 00:18:52.0351 7292 [ 9942DC4CC265CDA00486504444EF521D ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 00:18:52.0351 7292 AdobeFlashPlayerUpdateSvc - ok 00:18:52.0391 7292 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\windows\system32\drivers\adp94xx.sys 00:18:52.0401 7292 adp94xx - ok 00:18:52.0451 7292 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\windows\system32\drivers\adpahci.sys 00:18:52.0451 7292 adpahci - ok 00:18:52.0491 7292 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\windows\system32\drivers\adpu320.sys 00:18:52.0491 7292 adpu320 - ok 00:18:52.0621 7292 [ CBFAA333EBA2E402A0439A3A0E5413F3 ] AdvancedSystemCareService6 C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe 00:18:52.0631 7292 AdvancedSystemCareService6 - ok 00:18:52.0651 7292 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\windows\System32\aelupsvc.dll 00:18:52.0651 7292 AeLookupSvc - ok 00:18:52.0701 7292 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\windows\system32\drivers\afd.sys 00:18:52.0701 7292 AFD - ok 00:18:52.0741 7292 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\windows\system32\drivers\agp440.sys 00:18:52.0741 7292 agp440 - ok 00:18:52.0751 7292 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\windows\System32\alg.exe 00:18:52.0751 7292 ALG - ok 00:18:52.0791 7292 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\windows\system32\drivers\aliide.sys 00:18:52.0791 7292 aliide - ok 00:18:52.0801 7292 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\windows\system32\drivers\amdide.sys 00:18:52.0801 7292 amdide - ok 00:18:52.0821 7292 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\windows\system32\drivers\amdk8.sys 00:18:52.0821 7292 AmdK8 - ok 00:18:52.0841 7292 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\windows\system32\drivers\amdppm.sys 00:18:52.0841 7292 AmdPPM - ok 00:18:52.0871 7292 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\windows\system32\drivers\amdsata.sys 00:18:52.0871 7292 amdsata - ok 00:18:52.0881 7292 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\windows\system32\drivers\amdsbs.sys 00:18:52.0891 7292 amdsbs - ok 00:18:52.0901 7292 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\windows\system32\drivers\amdxata.sys 00:18:52.0901 7292 amdxata - ok 00:18:52.0941 7292 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\windows\system32\drivers\appid.sys 00:18:52.0941 7292 AppID - ok 00:18:52.0961 7292 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\windows\System32\appidsvc.dll 00:18:52.0961 7292 AppIDSvc - ok 00:18:52.0981 7292 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\windows\System32\appinfo.dll 00:18:52.0981 7292 Appinfo - ok 00:18:53.0101 7292 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 00:18:53.0101 7292 Apple Mobile Device - ok 00:18:53.0141 7292 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\windows\system32\drivers\arc.sys 00:18:53.0141 7292 arc - ok 00:18:53.0151 7292 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\windows\system32\drivers\arcsas.sys 00:18:53.0151 7292 arcsas - ok 00:18:53.0291 7292 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 00:18:53.0291 7292 aspnet_state - ok 00:18:53.0321 7292 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\windows\system32\DRIVERS\asyncmac.sys 00:18:53.0321 7292 AsyncMac - ok 00:18:53.0341 7292 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\windows\system32\drivers\atapi.sys 00:18:53.0341 7292 atapi - ok 00:18:53.0381 7292 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll 00:18:53.0391 7292 AudioEndpointBuilder - ok 00:18:53.0401 7292 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\windows\System32\Audiosrv.dll 00:18:53.0411 7292 AudioSrv - ok 00:18:53.0631 7292 [ 4AFC14AFA58878FAA1D249E7E90EA54B ] AVGIDSAgent C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe 00:18:53.0661 7292 AVGIDSAgent - ok 00:18:53.0711 7292 [ 388056EBD5FE6718FE669078DBE37897 ] AVGIDSDriver C:\windows\system32\DRIVERS\avgidsdrivera.sys 00:18:53.0711 7292 AVGIDSDriver - ok 00:18:53.0751 7292 [ 550E981747D6A6C55078C77346FFC2C6 ] AVGIDSHA C:\windows\system32\DRIVERS\avgidsha.sys 00:18:53.0751 7292 AVGIDSHA - ok 00:18:53.0811 7292 [ 5989592A91A17587799792A81E1541D4 ] Avgldx64 C:\windows\system32\DRIVERS\avgldx64.sys 00:18:53.0811 7292 Avgldx64 - ok 00:18:53.0901 7292 [ 3FC43AA02545FCDDC22817829114DEC8 ] Avgloga C:\windows\system32\DRIVERS\avgloga.sys 00:18:53.0901 7292 Avgloga - ok 00:18:53.0951 7292 [ 841C40C193889730848849AC220D9242 ] Avgmfx64 C:\windows\system32\DRIVERS\avgmfx64.sys 00:18:53.0951 7292 Avgmfx64 - ok 00:18:53.0981 7292 [ FE4F444DBE4BBBDFD8FECF49398DEFC7 ] Avgrkx64 C:\windows\system32\DRIVERS\avgrkx64.sys 00:18:53.0981 7292 Avgrkx64 - ok 00:18:54.0001 7292 [ 6E634525613D48A1D1657FB21F21F3B2 ] Avgtdia C:\windows\system32\DRIVERS\avgtdia.sys 00:18:54.0001 7292 Avgtdia - ok 00:18:54.0031 7292 [ 6B72E1E329C4E98C6B6FDD2D265E3BA3 ] avgwd C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe 00:18:54.0031 7292 avgwd - ok 00:18:54.0061 7292 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\windows\System32\AxInstSV.dll 00:18:54.0061 7292 AxInstSV - ok 00:18:54.0101 7292 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\windows\system32\drivers\bxvbda.sys 00:18:54.0101 7292 b06bdrv - ok 00:18:54.0131 7292 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\windows\system32\DRIVERS\b57nd60a.sys 00:18:54.0131 7292 b57nd60a - ok 00:18:54.0161 7292 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\windows\System32\bdesvc.dll 00:18:54.0171 7292 BDESVC - ok 00:18:54.0181 7292 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\windows\system32\drivers\Beep.sys 00:18:54.0181 7292 Beep - ok 00:18:54.0231 7292 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\windows\System32\bfe.dll 00:18:54.0231 7292 BFE - ok 00:18:54.0261 7292 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\windows\system32\qmgr.dll 00:18:54.0271 7292 BITS - ok 00:18:54.0291 7292 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\windows\system32\DRIVERS\blbdrive.sys 00:18:54.0291 7292 blbdrive - ok 00:18:54.0401 7292 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 00:18:54.0401 7292 Bonjour Service - ok 00:18:54.0461 7292 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\windows\system32\DRIVERS\bowser.sys 00:18:54.0461 7292 bowser - ok 00:18:54.0481 7292 [ AAA4F992F879977A000FE8B8C730CD2C ] BPntDrv C:\windows\system32\drivers\BPntDrv.sys 00:18:54.0481 7292 BPntDrv - ok 00:18:54.0511 7292 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\windows\system32\drivers\BrFiltLo.sys 00:18:54.0511 7292 BrFiltLo - ok 00:18:54.0541 7292 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\windows\system32\drivers\BrFiltUp.sys 00:18:54.0541 7292 BrFiltUp - ok 00:18:54.0581 7292 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\windows\system32\DRIVERS\bridge.sys 00:18:54.0581 7292 BridgeMP - ok 00:18:54.0631 7292 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\windows\System32\browser.dll 00:18:54.0631 7292 Browser - ok 00:18:54.0651 7292 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\windows\System32\Drivers\Brserid.sys 00:18:54.0651 7292 Brserid - ok 00:18:54.0661 7292 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\windows\System32\Drivers\BrSerWdm.sys 00:18:54.0661 7292 BrSerWdm - ok 00:18:54.0671 7292 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\windows\System32\Drivers\BrUsbMdm.sys 00:18:54.0671 7292 BrUsbMdm - ok 00:18:54.0681 7292 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\windows\System32\Drivers\BrUsbSer.sys 00:18:54.0681 7292 BrUsbSer - ok 00:18:54.0711 7292 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\windows\system32\drivers\BthEnum.sys 00:18:54.0711 7292 BthEnum - ok 00:18:54.0731 7292 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\windows\system32\DRIVERS\bthmodem.sys 00:18:54.0731 7292 BTHMODEM - ok 00:18:54.0751 7292 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\windows\system32\DRIVERS\bthpan.sys 00:18:54.0751 7292 BthPan - ok 00:18:54.0771 7292 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\windows\System32\Drivers\BTHport.sys 00:18:54.0781 7292 BTHPORT - ok 00:18:54.0821 7292 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\windows\system32\bthserv.dll 00:18:54.0821 7292 bthserv - ok 00:18:54.0841 7292 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\windows\System32\Drivers\BTHUSB.sys 00:18:54.0841 7292 BTHUSB - ok 00:18:54.0881 7292 [ A0DFB69ADE3444C78B17636FCF28E898 ] BTWAMPFL C:\windows\system32\DRIVERS\btwampfl.sys 00:18:54.0891 7292 BTWAMPFL - ok 00:18:54.0911 7292 [ 7CF028CE78696882B327FF13D2DFA534 ] btwaudio C:\windows\system32\drivers\btwaudio.sys 00:18:54.0911 7292 btwaudio - ok 00:18:54.0931 7292 [ 3DEF2370E414B4E299673558BA171A51 ] btwavdt C:\windows\system32\DRIVERS\btwavdt.sys 00:18:54.0941 7292 btwavdt - ok 00:18:55.0011 7292 [ 3D5E7FB2CB69A6186C7954C0859173F4 ] btwdins C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe 00:18:55.0011 7292 btwdins - ok 00:18:55.0021 7292 [ 346B4051B3D7FF70E8F027869B8ECA6E ] btwl2cap C:\windows\system32\DRIVERS\btwl2cap.sys 00:18:55.0021 7292 btwl2cap - ok 00:18:55.0041 7292 [ 9937E0E4DFC0030560A6DFE9D3A94B39 ] btwrchid C:\windows\system32\DRIVERS\btwrchid.sys 00:18:55.0041 7292 btwrchid - ok 00:18:55.0061 7292 catchme - ok 00:18:55.0091 7292 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\windows\system32\DRIVERS\cdfs.sys 00:18:55.0091 7292 cdfs - ok 00:18:55.0131 7292 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\windows\system32\DRIVERS\cdrom.sys 00:18:55.0131 7292 cdrom - ok 00:18:55.0161 7292 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\windows\System32\certprop.dll 00:18:55.0171 7292 CertPropSvc - ok 00:18:55.0211 7292 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\windows\system32\drivers\circlass.sys 00:18:55.0211 7292 circlass - ok 00:18:55.0231 7292 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\windows\system32\CLFS.sys 00:18:55.0231 7292 CLFS - ok 00:18:55.0351 7292 [ 524DC3807CB1746225F9D26ADD19C319 ] CLKMSVC10_3A60B698 C:\Program Files (x86)\Lenovo\PowerDVD10\NavFilter\kmsvc.exe 00:18:55.0351 7292 CLKMSVC10_3A60B698 - ok 00:18:55.0431 7292 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 00:18:55.0461 7292 clr_optimization_v2.0.50727_32 - ok 00:18:55.0491 7292 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 00:18:55.0491 7292 clr_optimization_v2.0.50727_64 - ok 00:18:55.0591 7292 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 00:18:55.0591 7292 clr_optimization_v4.0.30319_32 - ok 00:18:55.0601 7292 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 00:18:55.0601 7292 clr_optimization_v4.0.30319_64 - ok 00:18:55.0651 7292 [ 50F92C943F18B070F166D019DFAB3D9A ] clwvd C:\windows\system32\DRIVERS\clwvd.sys 00:18:55.0651 7292 clwvd - ok 00:18:55.0681 7292 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\windows\system32\DRIVERS\CmBatt.sys 00:18:55.0681 7292 CmBatt - ok 00:18:55.0691 7292 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\windows\system32\drivers\cmdide.sys 00:18:55.0691 7292 cmdide - ok 00:18:55.0741 7292 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\windows\system32\Drivers\cng.sys 00:18:55.0751 7292 CNG - ok 00:18:55.0771 7292 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\windows\system32\drivers\compbatt.sys 00:18:55.0771 7292 Compbatt - ok 00:18:55.0781 7292 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\windows\system32\DRIVERS\CompositeBus.sys 00:18:55.0781 7292 CompositeBus - ok 00:18:55.0791 7292 COMSysApp - ok 00:18:55.0981 7292 [ 815F3180B5117E42E422188E9CCC89C6 ] cphs C:\windows\SysWow64\IntelCpHeciSvc.exe 00:18:55.0981 7292 cphs - ok 00:18:55.0991 7292 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\windows\system32\drivers\crcdisk.sys 00:18:55.0991 7292 crcdisk - ok 00:18:56.0051 7292 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\windows\system32\cryptsvc.dll 00:18:56.0051 7292 CryptSvc - ok 00:18:56.0111 7292 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\windows\system32\rpcss.dll 00:18:56.0111 7292 DcomLaunch - ok 00:18:56.0141 7292 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\windows\System32\defragsvc.dll 00:18:56.0141 7292 defragsvc - ok 00:18:56.0161 7292 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\windows\system32\Drivers\dfsc.sys 00:18:56.0161 7292 DfsC - ok 00:18:56.0181 7292 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\windows\system32\dhcpcore.dll 00:18:56.0181 7292 Dhcp - ok 00:18:56.0211 7292 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\windows\system32\drivers\discache.sys 00:18:56.0211 7292 discache - ok 00:18:56.0241 7292 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\windows\system32\drivers\disk.sys 00:18:56.0241 7292 Disk - ok 00:18:56.0271 7292 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\windows\System32\dnsrslvr.dll 00:18:56.0271 7292 Dnscache - ok 00:18:56.0281 7292 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\windows\System32\dot3svc.dll 00:18:56.0291 7292 dot3svc - ok 00:18:56.0301 7292 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\windows\system32\dps.dll 00:18:56.0301 7292 DPS - ok 00:18:56.0331 7292 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\windows\system32\drivers\drmkaud.sys 00:18:56.0331 7292 drmkaud - ok 00:18:56.0371 7292 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\windows\system32\DRIVERS\dtsoftbus01.sys 00:18:56.0371 7292 dtsoftbus01 - ok 00:18:56.0401 7292 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\windows\System32\drivers\dxgkrnl.sys 00:18:56.0401 7292 DXGKrnl - ok 00:18:56.0431 7292 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\windows\System32\eapsvc.dll 00:18:56.0431 7292 EapHost - ok 00:18:56.0521 7292 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\windows\system32\drivers\evbda.sys 00:18:56.0541 7292 ebdrv - ok 00:18:56.0591 7292 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\windows\System32\lsass.exe 00:18:56.0591 7292 EFS - ok 00:18:56.0641 7292 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\windows\ehome\ehRecvr.exe 00:18:56.0641 7292 ehRecvr - ok 00:18:56.0651 7292 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\windows\ehome\ehsched.exe 00:18:56.0651 7292 ehSched - ok 00:18:56.0701 7292 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\windows\system32\drivers\elxstor.sys 00:18:56.0701 7292 elxstor - ok 00:18:56.0781 7292 [ ABDD5AD016AFFD34AD40E944CE94BF59 ] EpsonBidirectionalService C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe 00:18:56.0791 7292 EpsonBidirectionalService - ok 00:18:56.0921 7292 [ B5581646636759D0DAFA8B008881C079 ] EPSON_EB_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE 00:18:56.0931 7292 EPSON_EB_RPCV4_01 - ok 00:18:56.0951 7292 [ 1E345F2A2D95DA3190596E691CDE9342 ] EPSON_PM_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE 00:18:56.0951 7292 EPSON_PM_RPCV4_01 - ok 00:18:56.0961 7292 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\windows\system32\drivers\errdev.sys 00:18:56.0971 7292 ErrDev - ok 00:18:57.0011 7292 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\windows\system32\es.dll 00:18:57.0011 7292 EventSystem - ok 00:18:57.0101 7292 [ F8F610093E1D7FDFA477FC34D15D5C60 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe 00:18:57.0111 7292 EvtEng - ok 00:18:57.0151 7292 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\windows\system32\drivers\exfat.sys 00:18:57.0151 7292 exfat - ok 00:18:57.0181 7292 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\windows\system32\drivers\fastfat.sys 00:18:57.0181 7292 fastfat - ok 00:18:57.0211 7292 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\windows\system32\fxssvc.exe 00:18:57.0221 7292 Fax - ok 00:18:57.0251 7292 [ 3191ACA33088EE2481044FC0DB736442 ] fbfmon C:\windows\system32\drivers\fbfmon.sys 00:18:57.0261 7292 fbfmon - ok 00:18:57.0271 7292 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\windows\system32\drivers\fdc.sys 00:18:57.0271 7292 fdc - ok 00:18:57.0301 7292 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\windows\system32\fdPHost.dll 00:18:57.0301 7292 fdPHost - ok 00:18:57.0331 7292 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\windows\system32\fdrespub.dll 00:18:57.0331 7292 FDResPub - ok 00:18:57.0471 7292 [ 654A537CF7FE15A41373E85D1167040B ] File Backup C:\Program Files (x86)\Workspace\offSyncService.exe 00:18:57.0471 7292 File Backup - ok 00:18:57.0521 7292 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\windows\system32\drivers\fileinfo.sys 00:18:57.0521 7292 FileInfo - ok 00:18:57.0541 7292 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\windows\system32\drivers\filetrace.sys 00:18:57.0541 7292 Filetrace - ok 00:18:57.0631 7292 [ 7E76EED28B8B8696B7F7ED5F757AA304 ] FileZilla Server C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe 00:18:57.0631 7292 FileZilla Server - ok 00:18:57.0651 7292 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\windows\system32\drivers\flpydisk.sys 00:18:57.0651 7292 flpydisk - ok 00:18:57.0671 7292 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\windows\system32\drivers\fltmgr.sys 00:18:57.0671 7292 FltMgr - ok 00:18:57.0731 7292 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\windows\system32\FntCache.dll 00:18:57.0731 7292 FontCache - ok 00:18:57.0791 7292 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 00:18:57.0801 7292 FontCache3.0.0.0 - ok 00:18:57.0811 7292 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\windows\system32\drivers\FsDepends.sys 00:18:57.0811 7292 FsDepends - ok 00:18:57.0841 7292 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\windows\system32\drivers\Fs_Rec.sys 00:18:57.0841 7292 Fs_Rec - ok 00:18:57.0891 7292 [ ED07200CFF78FACFB66EBB0B89F503A4 ] FTDIBUS C:\windows\system32\drivers\ftdibus.sys 00:18:57.0891 7292 FTDIBUS - ok 00:18:57.0931 7292 [ 9980E7584484A009E77E9BFA14C0C18A ] FTSER2K C:\windows\system32\drivers\ftser2k.sys 00:18:57.0951 7292 FTSER2K - ok 00:18:58.0031 7292 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\windows\system32\DRIVERS\fvevol.sys 00:18:58.0031 7292 fvevol - ok 00:18:58.0061 7292 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\windows\system32\drivers\gagp30kx.sys 00:18:58.0061 7292 gagp30kx - ok 00:18:58.0101 7292 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\windows\system32\DRIVERS\GEARAspiWDM.sys 00:18:58.0111 7292 GEARAspiWDM - ok 00:18:58.0141 7292 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\windows\System32\gpsvc.dll 00:18:58.0151 7292 gpsvc - ok 00:18:58.0241 7292 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 00:18:58.0241 7292 gupdate - ok 00:18:58.0241 7292 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 00:18:58.0241 7292 gupdatem - ok 00:18:58.0251 7292 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\windows\system32\drivers\hcw85cir.sys 00:18:58.0251 7292 hcw85cir - ok 00:18:58.0281 7292 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys 00:18:58.0291 7292 HdAudAddService - ok 00:18:58.0311 7292 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\windows\system32\DRIVERS\HDAudBus.sys 00:18:58.0311 7292 HDAudBus - ok 00:18:58.0321 7292 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\windows\system32\drivers\HidBatt.sys 00:18:58.0321 7292 HidBatt - ok 00:18:58.0341 7292 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\windows\system32\drivers\hidbth.sys 00:18:58.0341 7292 HidBth - ok 00:18:58.0361 7292 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\windows\system32\drivers\hidir.sys 00:18:58.0371 7292 HidIr - ok 00:18:58.0391 7292 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\windows\System32\hidserv.dll 00:18:58.0391 7292 hidserv - ok 00:18:58.0411 7292 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\windows\system32\DRIVERS\hidusb.sys 00:18:58.0411 7292 HidUsb - ok 00:18:58.0431 7292 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\windows\system32\kmsvc.dll 00:18:58.0431 7292 hkmsvc - ok 00:18:58.0451 7292 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\windows\system32\ListSvc.dll 00:18:58.0451 7292 HomeGroupListener - ok 00:18:58.0481 7292 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\windows\system32\provsvc.dll 00:18:58.0481 7292 HomeGroupProvider - ok 00:18:58.0501 7292 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\windows\system32\drivers\HpSAMD.sys 00:18:58.0501 7292 HpSAMD - ok 00:18:58.0521 7292 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\windows\system32\drivers\HTTP.sys 00:18:58.0521 7292 HTTP - ok 00:18:58.0541 7292 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\windows\system32\drivers\hwpolicy.sys 00:18:58.0541 7292 hwpolicy - ok 00:18:58.0561 7292 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\windows\system32\DRIVERS\i8042prt.sys 00:18:58.0561 7292 i8042prt - ok 00:18:58.0581 7292 [ 53CC5BF8B5A219119953C7ABB19A7705 ] iaStor C:\windows\system32\DRIVERS\iaStor.sys 00:18:58.0581 7292 iaStor - ok 00:18:58.0621 7292 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\windows\system32\drivers\iaStorV.sys 00:18:58.0621 7292 iaStorV - ok 00:18:58.0701 7292 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 00:18:58.0701 7292 idsvc - ok 00:18:58.0821 7292 [ 348214F96642FD4FEF630DE021BA3540 ] igfx C:\windows\system32\DRIVERS\igdkmd64.sys 00:18:58.0861 7292 igfx - ok 00:18:58.0911 7292 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\windows\system32\drivers\iirsp.sys 00:18:58.0911 7292 iirsp - ok 00:18:58.0951 7292 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\windows\System32\ikeext.dll 00:18:58.0951 7292 IKEEXT - ok 00:18:59.0041 7292 [ A9853214CC97796579D75B1F59C51DCD ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHD64.sys 00:18:59.0061 7292 IntcAzAudAddService - ok 00:18:59.0141 7292 [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud C:\windows\system32\DRIVERS\IntcDAud.sys 00:18:59.0141 7292 IntcDAud - ok 00:18:59.0161 7292 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\windows\system32\drivers\intelide.sys 00:18:59.0161 7292 intelide - ok 00:18:59.0181 7292 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\windows\system32\DRIVERS\intelppm.sys 00:18:59.0181 7292 intelppm - ok 00:18:59.0221 7292 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\windows\system32\ipbusenum.dll 00:18:59.0221 7292 IPBusEnum - ok 00:18:59.0251 7292 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\windows\system32\DRIVERS\ipfltdrv.sys 00:18:59.0251 7292 IpFilterDriver - ok 00:18:59.0301 7292 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\windows\System32\iphlpsvc.dll 00:18:59.0301 7292 iphlpsvc - ok 00:18:59.0311 7292 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\windows\system32\drivers\IPMIDrv.sys 00:18:59.0311 7292 IPMIDRV - ok 00:18:59.0311 7292 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\windows\system32\drivers\ipnat.sys 00:18:59.0311 7292 IPNAT - ok 00:18:59.0382 7292 [ 4EFFC8FF6D349E971E94B1C670C0C66A ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 00:18:59.0402 7292 iPod Service - ok 00:18:59.0462 7292 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\windows\system32\drivers\irenum.sys 00:18:59.0462 7292 IRENUM - ok 00:18:59.0482 7292 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\windows\system32\drivers\isapnp.sys 00:18:59.0482 7292 isapnp - ok 00:18:59.0502 7292 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\windows\system32\drivers\msiscsi.sys 00:18:59.0502 7292 iScsiPrt - ok 00:18:59.0512 7292 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\windows\system32\DRIVERS\kbdclass.sys 00:18:59.0522 7292 kbdclass - ok 00:18:59.0552 7292 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\windows\system32\drivers\kbdhid.sys 00:18:59.0552 7292 kbdhid - ok 00:18:59.0562 7292 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\windows\system32\lsass.exe 00:18:59.0562 7292 KeyIso - ok 00:18:59.0592 7292 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\windows\system32\Drivers\ksecdd.sys 00:18:59.0592 7292 KSecDD - ok 00:18:59.0622 7292 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\windows\system32\Drivers\ksecpkg.sys 00:18:59.0622 7292 KSecPkg - ok 00:18:59.0632 7292 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\windows\system32\drivers\ksthunk.sys 00:18:59.0632 7292 ksthunk - ok 00:18:59.0662 7292 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\windows\system32\msdtckrm.dll 00:18:59.0662 7292 KtmRm - ok 00:18:59.0712 7292 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\windows\System32\srvsvc.dll 00:18:59.0712 7292 LanmanServer - ok 00:18:59.0742 7292 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\windows\System32\wkssvc.dll 00:18:59.0742 7292 LanmanWorkstation - ok 00:18:59.0782 7292 [ BE166935083F9C38EDFDC21B9A7A679B ] LHDmgr C:\windows\system32\DRIVERS\LhdX64.sys 00:18:59.0782 7292 LHDmgr - ok 00:18:59.0812 7292 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\windows\system32\DRIVERS\lltdio.sys 00:18:59.0812 7292 lltdio - ok 00:18:59.0852 7292 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\windows\System32\lltdsvc.dll 00:18:59.0852 7292 lltdsvc - ok 00:18:59.0872 7292 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\windows\System32\lmhsvc.dll 00:18:59.0872 7292 lmhosts - ok 00:18:59.0932 7292 [ 2ED1786B7542CDA261029F6B526EDF44 ] LMS C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe 00:18:59.0932 7292 LMS - ok 00:18:59.0982 7292 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\windows\system32\drivers\lsi_fc.sys 00:18:59.0982 7292 LSI_FC - ok 00:19:00.0002 7292 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\windows\system32\drivers\lsi_sas.sys 00:19:00.0002 7292 LSI_SAS - ok 00:19:00.0002 7292 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\windows\system32\drivers\lsi_sas2.sys 00:19:00.0012 7292 LSI_SAS2 - ok 00:19:00.0012 7292 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\windows\system32\drivers\lsi_scsi.sys 00:19:00.0012 7292 LSI_SCSI - ok 00:19:00.0032 7292 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\windows\system32\drivers\luafv.sys 00:19:00.0032 7292 luafv - ok 00:19:00.0112 7292 [ 31C6AFFFAD7C733A65F888929548BC22 ] mbamchameleon C:\windows\system32\drivers\mbamchameleon.sys 00:19:00.0112 7292 mbamchameleon - ok 00:19:00.0142 7292 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\windows\system32\Mcx2Svc.dll 00:19:00.0152 7292 Mcx2Svc - ok 00:19:00.0162 7292 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\windows\system32\drivers\megasas.sys 00:19:00.0162 7292 megasas - ok 00:19:00.0202 7292 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\windows\system32\drivers\MegaSR.sys 00:19:00.0202 7292 MegaSR - ok 00:19:00.0232 7292 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\windows\system32\DRIVERS\HECIx64.sys 00:19:00.0232 7292 MEIx64 - ok 00:19:00.0352 7292 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe 00:19:00.0362 7292 Microsoft Office Groove Audit Service - ok 00:19:00.0382 7292 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\windows\system32\mmcss.dll 00:19:00.0382 7292 MMCSS - ok 00:19:00.0402 7292 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\windows\system32\drivers\modem.sys 00:19:00.0402 7292 Modem - ok 00:19:00.0442 7292 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\windows\system32\DRIVERS\monitor.sys 00:19:00.0442 7292 monitor - ok 00:19:00.0472 7292 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\windows\system32\DRIVERS\mouclass.sys 00:19:00.0472 7292 mouclass - ok 00:19:00.0502 7292 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\windows\system32\DRIVERS\mouhid.sys 00:19:00.0502 7292 mouhid - ok 00:19:00.0512 7292 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\windows\system32\drivers\mountmgr.sys 00:19:00.0512 7292 mountmgr - ok 00:19:00.0582 7292 [ 8A7C8F4C713E70D73946833D76B77035 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 00:19:00.0592 7292 MozillaMaintenance - ok 00:19:00.0682 7292 [ F8A10560B35C66F9DE212F03DAD5BFA7 ] MpFilter C:\windows\system32\DRIVERS\MpFilter.sys 00:19:00.0682 7292 MpFilter - ok 00:19:00.0712 7292 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\windows\system32\drivers\mpio.sys 00:19:00.0722 7292 mpio - ok 00:19:00.0732 7292 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\windows\system32\drivers\mpsdrv.sys 00:19:00.0732 7292 mpsdrv - ok 00:19:00.0762 7292 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\windows\system32\mpssvc.dll 00:19:00.0772 7292 MpsSvc - ok 00:19:00.0782 7292 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\windows\system32\drivers\mrxdav.sys 00:19:00.0782 7292 MRxDAV - ok 00:19:00.0792 7292 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\windows\system32\DRIVERS\mrxsmb.sys 00:19:00.0792 7292 mrxsmb - ok 00:19:00.0832 7292 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\windows\system32\DRIVERS\mrxsmb10.sys 00:19:00.0832 7292 mrxsmb10 - ok 00:19:00.0842 7292 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\windows\system32\DRIVERS\mrxsmb20.sys 00:19:00.0852 7292 mrxsmb20 - ok 00:19:00.0862 7292 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\windows\system32\drivers\msahci.sys 00:19:00.0862 7292 msahci - ok 00:19:00.0882 7292 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\windows\system32\drivers\msdsm.sys 00:19:00.0882 7292 msdsm - ok 00:19:00.0902 7292 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\windows\System32\msdtc.exe 00:19:00.0902 7292 MSDTC - ok 00:19:00.0932 7292 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\windows\system32\drivers\Msfs.sys 00:19:00.0932 7292 Msfs - ok 00:19:00.0932 7292 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\windows\System32\drivers\mshidkmdf.sys 00:19:00.0932 7292 mshidkmdf - ok 00:19:00.0942 7292 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\windows\system32\drivers\msisadrv.sys 00:19:00.0942 7292 msisadrv - ok 00:19:00.0972 7292 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\windows\system32\iscsiexe.dll 00:19:00.0972 7292 MSiSCSI - ok 00:19:00.0982 7292 msiserver - ok 00:19:01.0002 7292 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\windows\system32\drivers\MSKSSRV.sys 00:19:01.0002 7292 MSKSSRV - ok 00:19:01.0102 7292 [ E07DEC52FF801841BA9B6878A60304FB ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe 00:19:01.0102 7292 MsMpSvc - ok 00:19:01.0112 7292 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\windows\system32\drivers\MSPCLOCK.sys 00:19:01.0112 7292 MSPCLOCK - ok 00:19:01.0122 7292 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\windows\system32\drivers\MSPQM.sys 00:19:01.0122 7292 MSPQM - ok 00:19:01.0142 7292 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\windows\system32\drivers\MsRPC.sys 00:19:01.0142 7292 MsRPC - ok 00:19:01.0162 7292 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\windows\system32\DRIVERS\mssmbios.sys 00:19:01.0162 7292 mssmbios - ok 00:19:01.0252 7292 MSSQL$MYMOVIES - ok 00:19:01.0322 7292 [ 1D89EB4E2A99CABD4E81225F4F4C4B25 ] MSSQLServerADHelper c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqladhlp90.exe 00:19:01.0332 7292 MSSQLServerADHelper - ok 00:19:01.0352 7292 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\windows\system32\drivers\MSTEE.sys 00:19:01.0352 7292 MSTEE - ok 00:19:01.0362 7292 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\windows\system32\drivers\MTConfig.sys 00:19:01.0362 7292 MTConfig - ok 00:19:01.0382 7292 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\windows\system32\Drivers\mup.sys 00:19:01.0382 7292 Mup - ok 00:19:01.0412 7292 [ F6EA50DBC391F04CA49427010657CCB3 ] MyWiFiDHCPDNS C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe 00:19:01.0432 7292 MyWiFiDHCPDNS - ok 00:19:01.0472 7292 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\windows\system32\qagentRT.dll 00:19:01.0472 7292 napagent - ok 00:19:01.0512 7292 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\windows\system32\DRIVERS\nwifi.sys 00:19:01.0512 7292 NativeWifiP - ok 00:19:01.0572 7292 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\windows\system32\drivers\ndis.sys 00:19:01.0572 7292 NDIS - ok 00:19:01.0592 7292 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\windows\system32\DRIVERS\ndiscap.sys 00:19:01.0592 7292 NdisCap - ok 00:19:01.0622 7292 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\windows\system32\DRIVERS\ndistapi.sys 00:19:01.0622 7292 NdisTapi - ok 00:19:01.0632 7292 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\windows\system32\DRIVERS\ndisuio.sys 00:19:01.0632 7292 Ndisuio - ok 00:19:01.0642 7292 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\windows\system32\DRIVERS\ndiswan.sys 00:19:01.0652 7292 NdisWan - ok 00:19:01.0672 7292 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\windows\system32\drivers\NDProxy.sys 00:19:01.0672 7292 NDProxy - ok 00:19:01.0712 7292 [ D4F51E88C71BF8F06EA1BE320B0BB75B ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll 00:19:01.0712 7292 Net Driver HPZ12 - ok 00:19:01.0722 7292 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\windows\system32\DRIVERS\netbios.sys 00:19:01.0722 7292 NetBIOS - ok 00:19:01.0732 7292 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\windows\system32\DRIVERS\netbt.sys 00:19:01.0732 7292 NetBT - ok 00:19:01.0752 7292 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\windows\system32\lsass.exe 00:19:01.0752 7292 Netlogon - ok 00:19:01.0782 7292 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\windows\System32\netman.dll 00:19:01.0782 7292 Netman - ok 00:19:01.0872 7292 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 00:19:01.0872 7292 NetMsmqActivator - ok 00:19:01.0892 7292 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 00:19:01.0892 7292 NetPipeActivator - ok 00:19:01.0922 7292 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\windows\System32\netprofm.dll 00:19:01.0932 7292 netprofm - ok 00:19:01.0942 7292 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 00:19:01.0942 7292 NetTcpActivator - ok 00:19:01.0942 7292 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 00:19:01.0952 7292 NetTcpPortSharing - ok 00:19:02.0182 7292 [ 98CF53F7B23F77D082805D5DBBD99A4E ] NETwNs64 C:\windows\system32\DRIVERS\Netwsw00.sys 00:19:02.0272 7292 NETwNs64 - ok 00:19:02.0302 7292 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\windows\system32\drivers\nfrd960.sys 00:19:02.0302 7292 nfrd960 - ok 00:19:02.0362 7292 [ 162100E0BC8377710F9D170631921C03 ] NisDrv C:\windows\system32\DRIVERS\NisDrvWFP.sys 00:19:02.0362 7292 NisDrv - ok 00:19:02.0402 7292 [ C6E15F2F95F9C0A6098D43510B604E52 ] NisSrv c:\Program Files\Microsoft Security Client\NisSrv.exe 00:19:02.0402 7292 NisSrv - ok 00:19:02.0482 7292 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\windows\System32\nlasvc.dll 00:19:02.0482 7292 NlaSvc - ok 00:19:02.0622 7292 [ B1EF4686961986DFFB7FE8F18E6FCB5B ] nlsX86cc C:\windows\SysWOW64\nlssrv32.exe 00:19:02.0622 7292 nlsX86cc - ok 00:19:02.0652 7292 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\windows\system32\drivers\Npfs.sys 00:19:02.0652 7292 Npfs - ok 00:19:02.0692 7292 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\windows\system32\nsisvc.dll 00:19:02.0702 7292 nsi - ok 00:19:02.0712 7292 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\windows\system32\drivers\nsiproxy.sys 00:19:02.0712 7292 nsiproxy - ok 00:19:02.0762 7292 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\windows\system32\drivers\Ntfs.sys 00:19:02.0772 7292 Ntfs - ok 00:19:02.0792 7292 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\windows\system32\drivers\Null.sys 00:19:02.0792 7292 Null - ok 00:19:02.0812 7292 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\windows\system32\drivers\nvraid.sys 00:19:02.0812 7292 nvraid - ok 00:19:02.0822 7292 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\windows\system32\drivers\nvstor.sys 00:19:02.0832 7292 nvstor - ok 00:19:02.0852 7292 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\windows\system32\drivers\nv_agp.sys 00:19:02.0852 7292 nv_agp - ok 00:19:02.0992 7292 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 00:19:03.0022 7292 odserv - ok 00:19:03.0042 7292 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\windows\system32\drivers\ohci1394.sys 00:19:03.0052 7292 ohci1394 - ok 00:19:03.0102 7292 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 00:19:03.0132 7292 ose - ok 00:19:03.0162 7292 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\windows\system32\pnrpsvc.dll 00:19:03.0172 7292 p2pimsvc - ok 00:19:03.0182 7292 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\windows\system32\p2psvc.dll 00:19:03.0192 7292 p2psvc - ok 00:19:03.0202 7292 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\windows\system32\drivers\parport.sys 00:19:03.0202 7292 Parport - ok 00:19:03.0242 7292 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\windows\system32\drivers\partmgr.sys 00:19:03.0242 7292 partmgr - ok 00:19:03.0262 7292 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\windows\System32\pcasvc.dll 00:19:03.0262 7292 PcaSvc - ok 00:19:03.0292 7292 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\windows\system32\drivers\pci.sys 00:19:03.0292 7292 pci - ok 00:19:03.0312 7292 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\windows\system32\drivers\pciide.sys 00:19:03.0312 7292 pciide - ok 00:19:03.0332 7292 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\windows\system32\drivers\pcmcia.sys 00:19:03.0332 7292 pcmcia - ok 00:19:03.0342 7292 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\windows\system32\drivers\pcw.sys 00:19:03.0342 7292 pcw - ok 00:19:03.0382 7292 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\windows\system32\drivers\peauth.sys 00:19:03.0382 7292 PEAUTH - ok 00:19:03.0412 7292 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\windows\SysWow64\perfhost.exe 00:19:03.0412 7292 PerfHost - ok 00:19:03.0462 7292 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\windows\system32\pla.dll 00:19:03.0472 7292 pla - ok 00:19:03.0522 7292 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\windows\system32\umpnpmgr.dll 00:19:03.0522 7292 PlugPlay - ok 00:19:03.0542 7292 [ 9A80707D8B6C1806531BFD7399B3CC76 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll 00:19:03.0542 7292 Pml Driver HPZ12 - ok 00:19:03.0552 7292 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\windows\system32\pnrpauto.dll 00:19:03.0552 7292 PNRPAutoReg - ok 00:19:03.0572 7292 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\windows\system32\pnrpsvc.dll 00:19:03.0582 7292 PNRPsvc - ok 00:19:03.0622 7292 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\windows\System32\ipsecsvc.dll 00:19:03.0622 7292 PolicyAgent - ok 00:19:03.0652 7292 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\windows\system32\umpo.dll 00:19:03.0652 7292 Power - ok 00:19:03.0682 7292 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\windows\system32\DRIVERS\raspptp.sys 00:19:03.0682 7292 PptpMiniport - ok 00:19:03.0702 7292 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\windows\system32\drivers\processr.sys 00:19:03.0702 7292 Processor - ok 00:19:03.0742 7292 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\windows\system32\profsvc.dll 00:19:03.0742 7292 ProfSvc - ok 00:19:03.0752 7292 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\windows\system32\lsass.exe 00:19:03.0752 7292 ProtectedStorage - ok 00:19:03.0782 7292 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\windows\system32\DRIVERS\pacer.sys 00:19:03.0782 7292 Psched - ok 00:19:03.0842 7292 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\windows\system32\drivers\ql2300.sys 00:19:03.0842 7292 ql2300 - ok 00:19:03.0872 7292 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\windows\system32\drivers\ql40xx.sys 00:19:03.0872 7292 ql40xx - ok 00:19:03.0892 7292 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\windows\system32\qwave.dll 00:19:03.0902 7292 QWAVE - ok 00:19:03.0902 7292 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\windows\system32\drivers\qwavedrv.sys 00:19:03.0902 7292 QWAVEdrv - ok 00:19:03.0982 7292 [ A55E7D0D873B2C97585B3B5926AC6ADE ] RapiMgr C:\windows\WindowsMobile\rapimgr.dll 00:19:03.0982 7292 RapiMgr - ok 00:19:04.0002 7292 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\windows\system32\DRIVERS\rasacd.sys 00:19:04.0002 7292 RasAcd - ok 00:19:04.0042 7292 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\windows\system32\DRIVERS\AgileVpn.sys 00:19:04.0052 7292 RasAgileVpn - ok 00:19:04.0062 7292 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\windows\System32\rasauto.dll 00:19:04.0062 7292 RasAuto - ok 00:19:04.0082 7292 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\windows\system32\DRIVERS\rasl2tp.sys 00:19:04.0082 7292 Rasl2tp - ok 00:19:04.0102 7292 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\windows\System32\rasmans.dll 00:19:04.0102 7292 RasMan - ok 00:19:04.0122 7292 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\windows\system32\DRIVERS\raspppoe.sys 00:19:04.0122 7292 RasPppoe - ok 00:19:04.0142 7292 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\windows\system32\DRIVERS\rassstp.sys 00:19:04.0142 7292 RasSstp - ok 00:19:04.0162 7292 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\windows\system32\DRIVERS\rdbss.sys 00:19:04.0172 7292 rdbss - ok 00:19:04.0182 7292 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\windows\system32\drivers\rdpbus.sys 00:19:04.0192 7292 rdpbus - ok 00:19:04.0212 7292 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\windows\system32\DRIVERS\RDPCDD.sys 00:19:04.0212 7292 RDPCDD - ok 00:19:04.0232 7292 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\windows\system32\drivers\rdpencdd.sys 00:19:04.0242 7292 RDPENCDD - ok 00:19:04.0242 7292 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\windows\system32\drivers\rdprefmp.sys 00:19:04.0252 7292 RDPREFMP - ok 00:19:04.0302 7292 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\windows\system32\drivers\rdpvideominiport.sys 00:19:04.0302 7292 RdpVideoMiniport - ok 00:19:04.0352 7292 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\windows\system32\drivers\RDPWD.sys 00:19:04.0352 7292 RDPWD - ok 00:19:04.0382 7292 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\windows\system32\drivers\rdyboost.sys 00:19:04.0382 7292 rdyboost - ok 00:19:04.0462 7292 [ 9276F4D4109FC349925D28E00E533146 ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe 00:19:04.0472 7292 RegSrvc - ok 00:19:04.0502 7292 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\windows\System32\mprdim.dll 00:19:04.0502 7292 RemoteAccess - ok 00:19:04.0552 7292 [ BFA4873CD96D7144DC0059A70E1E358F ] RemoteControl-USBLAN C:\windows\system32\DRIVERS\rcblan.sys 00:19:04.0552 7292 RemoteControl-USBLAN - ok 00:19:04.0572 7292 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\windows\system32\regsvc.dll 00:19:04.0572 7292 RemoteRegistry - ok 00:19:04.0612 7292 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\windows\system32\DRIVERS\rfcomm.sys 00:19:04.0612 7292 RFCOMM - ok 00:19:04.0662 7292 [ 7B04C9843921AB1F695FB395422C5360 ] RimUsb C:\windows\system32\Drivers\RimUsb_AMD64.sys 00:19:04.0662 7292 RimUsb - ok 00:19:04.0682 7292 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\windows\System32\RpcEpMap.dll 00:19:04.0682 7292 RpcEptMapper - ok 00:19:04.0702 7292 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\windows\system32\locator.exe 00:19:04.0702 7292 RpcLocator - ok 00:19:04.0732 7292 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\windows\system32\rpcss.dll 00:19:04.0732 7292 RpcSs - ok 00:19:04.0762 7292 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\windows\system32\DRIVERS\rspndr.sys 00:19:04.0762 7292 rspndr - ok 00:19:04.0812 7292 [ E54A5586A28D0630A79A68BBAB84BFCF ] RSUSBVSTOR C:\windows\system32\Drivers\RtsUVStor.sys 00:19:04.0812 7292 RSUSBVSTOR - ok 00:19:04.0852 7292 [ EE082E06A82FF630351D1E0EBBD3D8D0 ] RTL8167 C:\windows\system32\DRIVERS\Rt64win7.sys 00:19:04.0852 7292 RTL8167 - ok 00:19:04.0902 7292 [ A11AB0AF5C7C2724D493F837C51F1575 ] RtLedService C:\Program Files\Realtek\RtLED\RtLEDService.exe 00:19:04.0902 7292 RtLedService - ok 00:19:04.0982 7292 [ 8E5297D5747A90636D5EFAEC8E466623 ] S6000KNT C:\windows\system32\Drivers\S6000KNT.sys 00:19:05.0002 7292 S6000KNT - ok 00:19:05.0012 7292 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\windows\system32\lsass.exe 00:19:05.0012 7292 SamSs - ok 00:19:05.0032 7292 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\windows\system32\drivers\sbp2port.sys 00:19:05.0042 7292 sbp2port - ok 00:19:05.0142 7292 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe 00:19:05.0152 7292 SBSDWSCService - ok 00:19:05.0182 7292 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\windows\System32\SCardSvr.dll 00:19:05.0182 7292 SCardSvr - ok 00:19:05.0192 7292 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\windows\system32\DRIVERS\scfilter.sys 00:19:05.0192 7292 scfilter - ok 00:19:05.0212 7292 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\windows\system32\schedsvc.dll 00:19:05.0222 7292 Schedule - ok 00:19:05.0242 7292 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\windows\System32\certprop.dll 00:19:05.0242 7292 SCPolicySvc - ok 00:19:05.0262 7292 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\windows\System32\SDRSVC.dll 00:19:05.0262 7292 SDRSVC - ok 00:19:05.0302 7292 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\windows\system32\drivers\secdrv.sys 00:19:05.0302 7292 secdrv - ok 00:19:05.0322 7292 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\windows\system32\seclogon.dll 00:19:05.0322 7292 seclogon - ok 00:19:05.0332 7292 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\windows\system32\sens.dll 00:19:05.0332 7292 SENS - ok 00:19:05.0362 7292 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\windows\system32\sensrsvc.dll 00:19:05.0362 7292 SensrSvc - ok 00:19:05.0402 7292 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\windows\system32\DRIVERS\serenum.sys 00:19:05.0402 7292 Serenum - ok 00:19:05.0422 7292 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\windows\system32\drivers\serial.sys 00:19:05.0422 7292 Serial - ok 00:19:05.0432 7292 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\windows\system32\drivers\sermouse.sys 00:19:05.0432 7292 sermouse - ok 00:19:05.0452 7292 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\windows\system32\sessenv.dll 00:19:05.0462 7292 SessionEnv - ok 00:19:05.0462 7292 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\windows\system32\drivers\sffdisk.sys 00:19:05.0462 7292 sffdisk - ok 00:19:05.0462 7292 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\windows\system32\drivers\sffp_mmc.sys 00:19:05.0462 7292 sffp_mmc - ok 00:19:05.0482 7292 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\windows\system32\drivers\sffp_sd.sys 00:19:05.0482 7292 sffp_sd - ok 00:19:05.0502 7292 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\windows\system32\drivers\sfloppy.sys 00:19:05.0502 7292 sfloppy - ok 00:19:05.0542 7292 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\windows\System32\ipnathlp.dll 00:19:05.0552 7292 SharedAccess - ok 00:19:05.0572 7292 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\windows\System32\shsvcs.dll 00:19:05.0572 7292 ShellHWDetection - ok 00:19:05.0582 7292 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\windows\system32\drivers\SiSRaid2.sys 00:19:05.0582 7292 SiSRaid2 - ok 00:19:05.0602 7292 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\windows\system32\drivers\sisraid4.sys 00:19:05.0602 7292 SiSRaid4 - ok 00:19:05.0662 7292 [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 00:19:05.0662 7292 SkypeUpdate - ok 00:19:05.0722 7292 [ DD0443BC6CC78A19FD399817F8C51401 ] SmartDefragDriver C:\windows\system32\Drivers\SmartDefragDriver.sys 00:19:05.0722 7292 SmartDefragDriver - ok 00:19:05.0752 7292 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\windows\system32\DRIVERS\smb.sys 00:19:05.0752 7292 Smb - ok 00:19:05.0782 7292 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\windows\System32\snmptrap.exe 00:19:05.0792 7292 SNMPTRAP - ok 00:19:05.0802 7292 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\windows\system32\drivers\spldr.sys 00:19:05.0802 7292 spldr - ok 00:19:05.0842 7292 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\windows\System32\spoolsv.exe 00:19:05.0852 7292 Spooler - ok 00:19:05.0902 7292 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\windows\system32\sppsvc.exe 00:19:05.0922 7292 sppsvc - ok 00:19:05.0952 7292 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\windows\system32\sppuinotify.dll 00:19:05.0952 7292 sppuinotify - ok 00:19:06.0102 7292 [ 86EBD8B1F23E743AAD21F4D5B4D40985 ] SQLBrowser c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe 00:19:06.0102 7292 SQLBrowser - ok 00:19:06.0202 7292 [ 3C432A96363097870995E2A3C8B66ABD ] SQLWriter c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 00:19:06.0202 7292 SQLWriter - ok 00:19:06.0222 7292 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\windows\system32\DRIVERS\srv.sys 00:19:06.0222 7292 srv - ok 00:19:06.0252 7292 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\windows\system32\DRIVERS\srv2.sys 00:19:06.0252 7292 srv2 - ok 00:19:06.0272 7292 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\windows\system32\DRIVERS\srvnet.sys 00:19:06.0272 7292 srvnet - ok 00:19:06.0312 7292 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\windows\System32\ssdpsrv.dll 00:19:06.0312 7292 SSDPSRV - ok 00:19:06.0322 7292 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\windows\system32\sstpsvc.dll 00:19:06.0332 7292 SstpSvc - ok 00:19:06.0342 7292 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\windows\system32\drivers\stexstor.sys 00:19:06.0352 7292 stexstor - ok 00:19:06.0402 7292 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\windows\System32\wiaservc.dll 00:19:06.0412 7292 stisvc - ok 00:19:06.0432 7292 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\windows\system32\DRIVERS\swenum.sys 00:19:06.0432 7292 swenum - ok 00:19:06.0452 7292 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\windows\System32\swprv.dll 00:19:06.0452 7292 swprv - ok 00:19:06.0502 7292 [ 08425CD92972C6430F350A9697F4A553 ] SynTP C:\windows\system32\DRIVERS\SynTP.sys 00:19:06.0512 7292 SynTP - ok 00:19:06.0552 7292 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\windows\system32\sysmain.dll 00:19:06.0562 7292 SysMain - ok 00:19:06.0582 7292 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\windows\System32\TabSvc.dll 00:19:06.0582 7292 TabletInputService - ok 00:19:06.0592 7292 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\windows\System32\tapisrv.dll 00:19:06.0592 7292 TapiSrv - ok 00:19:06.0612 7292 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\windows\System32\tbssvc.dll 00:19:06.0612 7292 TBS - ok 00:19:06.0752 7292 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\windows\system32\drivers\tcpip.sys 00:19:06.0762 7292 Tcpip - ok 00:19:06.0812 7292 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\windows\system32\DRIVERS\tcpip.sys 00:19:06.0822 7292 TCPIP6 - ok 00:19:06.0862 7292 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\windows\system32\drivers\tcpipreg.sys 00:19:06.0862 7292 tcpipreg - ok 00:19:06.0892 7292 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\windows\system32\drivers\tdpipe.sys 00:19:06.0902 7292 TDPIPE - ok 00:19:06.0942 7292 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\windows\system32\drivers\tdtcp.sys 00:19:06.0942 7292 TDTCP - ok 00:19:06.0962 7292 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\windows\system32\DRIVERS\tdx.sys 00:19:06.0962 7292 tdx - ok 00:19:06.0972 7292 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\windows\system32\DRIVERS\termdd.sys 00:19:06.0982 7292 TermDD - ok 00:19:07.0012 7292 [ 2E648163254233755035B46DD7B89123 ] TermService C:\windows\System32\termsrv.dll 00:19:07.0012 7292 TermService - ok 00:19:07.0022 7292 [ F0344071948D1A1FA732231785A0664C ] Themes C:\windows\system32\themeservice.dll 00:19:07.0022 7292 Themes - ok 00:19:07.0042 7292 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\windows\system32\mmcss.dll 00:19:07.0042 7292 THREADORDER - ok 00:19:07.0052 7292 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\windows\System32\trkwks.dll 00:19:07.0062 7292 TrkWks - ok 00:19:07.0102 7292 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe 00:19:07.0112 7292 TrustedInstaller - ok 00:19:07.0122 7292 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\windows\system32\DRIVERS\tssecsrv.sys 00:19:07.0122 7292 tssecsrv - ok 00:19:07.0172 7292 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\windows\system32\drivers\tsusbflt.sys 00:19:07.0182 7292 TsUsbFlt - ok 00:19:07.0212 7292 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\windows\system32\drivers\TsUsbGD.sys 00:19:07.0212 7292 TsUsbGD - ok 00:19:07.0252 7292 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\windows\system32\DRIVERS\tunnel.sys 00:19:07.0252 7292 tunnel - ok 00:19:07.0262 7292 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\windows\system32\drivers\uagp35.sys 00:19:07.0262 7292 uagp35 - ok 00:19:07.0282 7292 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\windows\system32\DRIVERS\udfs.sys 00:19:07.0282 7292 udfs - ok 00:19:07.0312 7292 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\windows\system32\UI0Detect.exe 00:19:07.0312 7292 UI0Detect - ok 00:19:07.0322 7292 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\windows\system32\drivers\uliagpkx.sys 00:19:07.0322 7292 uliagpkx - ok 00:19:07.0352 7292 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\windows\system32\DRIVERS\umbus.sys 00:19:07.0352 7292 umbus - ok 00:19:07.0382 7292 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\windows\system32\DRIVERS\umpass.sys 00:19:07.0382 7292 UmPass - ok 00:19:07.0482 7292 [ 7E5E1603D0FF2D240AE70295C5C3FEFC ] UNS C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe 00:19:07.0502 7292 UNS - ok 00:19:07.0512 7292 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\windows\System32\upnphost.dll 00:19:07.0522 7292 upnphost - ok 00:19:07.0572 7292 [ 43228F8EDD1B0BCDD3145AD246E63D39 ] USBAAPL64 C:\windows\system32\Drivers\usbaapl64.sys 00:19:07.0582 7292 USBAAPL64 - ok 00:19:07.0592 7292 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\windows\system32\DRIVERS\usbccgp.sys 00:19:07.0602 7292 usbccgp - ok 00:19:07.0622 7292 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\windows\system32\drivers\usbcir.sys 00:19:07.0622 7292 usbcir - ok 00:19:07.0642 7292 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\windows\system32\DRIVERS\usbehci.sys 00:19:07.0642 7292 usbehci - ok 00:19:07.0672 7292 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\windows\system32\DRIVERS\usbhub.sys 00:19:07.0672 7292 usbhub - ok 00:19:07.0682 7292 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\windows\system32\drivers\usbohci.sys 00:19:07.0682 7292 usbohci - ok 00:19:07.0692 7292 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\windows\system32\drivers\usbprint.sys 00:19:07.0692 7292 usbprint - ok 00:19:07.0702 7292 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\windows\system32\DRIVERS\USBSTOR.SYS 00:19:07.0702 7292 USBSTOR - ok 00:19:07.0712 7292 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\windows\system32\drivers\usbuhci.sys 00:19:07.0712 7292 usbuhci - ok 00:19:07.0722 7292 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\windows\system32\Drivers\usbvideo.sys 00:19:07.0722 7292 usbvideo - ok 00:19:07.0762 7292 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\windows\System32\uxsms.dll 00:19:07.0762 7292 UxSms - ok 00:19:07.0772 7292 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\windows\system32\lsass.exe 00:19:07.0772 7292 VaultSvc - ok 00:19:07.0802 7292 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\windows\system32\drivers\vdrvroot.sys 00:19:07.0802 7292 vdrvroot - ok 00:19:07.0812 7292 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\windows\System32\vds.exe 00:19:07.0822 7292 vds - ok 00:19:07.0842 7292 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\windows\system32\DRIVERS\vgapnp.sys 00:19:07.0842 7292 vga - ok 00:19:07.0862 7292 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\windows\System32\drivers\vga.sys 00:19:07.0862 7292 VgaSave - ok 00:19:07.0882 7292 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\windows\system32\drivers\vhdmp.sys 00:19:07.0882 7292 vhdmp - ok 00:19:07.0882 7292 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\windows\system32\drivers\viaide.sys 00:19:07.0882 7292 viaide - ok 00:19:07.0902 7292 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\windows\system32\drivers\volmgr.sys 00:19:07.0902 7292 volmgr - ok 00:19:07.0922 7292 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\windows\system32\drivers\volmgrx.sys 00:19:07.0922 7292 volmgrx - ok 00:19:07.0942 7292 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\windows\system32\drivers\volsnap.sys 00:19:07.0942 7292 volsnap - ok 00:19:07.0962 7292 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\windows\system32\drivers\vsmraid.sys 00:19:07.0962 7292 vsmraid - ok 00:19:08.0032 7292 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\windows\system32\vssvc.exe 00:19:08.0042 7292 VSS - ok 00:19:08.0052 7292 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\windows\system32\DRIVERS\vwifibus.sys 00:19:08.0052 7292 vwifibus - ok 00:19:08.0072 7292 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\windows\system32\DRIVERS\vwififlt.sys 00:19:08.0072 7292 vwififlt - ok 00:19:08.0092 7292 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\windows\system32\DRIVERS\vwifimp.sys 00:19:08.0092 7292 vwifimp - ok 00:19:08.0102 7292 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\windows\system32\w32time.dll 00:19:08.0112 7292 W32Time - ok 00:19:08.0122 7292 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\windows\system32\drivers\wacompen.sys 00:19:08.0122 7292 WacomPen - ok 00:19:08.0152 7292 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\windows\system32\DRIVERS\wanarp.sys 00:19:08.0162 7292 WANARP - ok 00:19:08.0162 7292 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\windows\system32\DRIVERS\wanarp.sys 00:19:08.0162 7292 Wanarpv6 - ok 00:19:08.0252 7292 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\windows\system32\Wat\WatAdminSvc.exe 00:19:08.0262 7292 WatAdminSvc - ok 00:19:08.0312 7292 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\windows\system32\wbengine.exe 00:19:08.0322 7292 wbengine - ok 00:19:08.0332 7292 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\windows\System32\wbiosrvc.dll 00:19:08.0332 7292 WbioSrvc - ok 00:19:08.0362 7292 [ 8BDA6DB43AA54E8BB5E0794541DDC209 ] WcesComm C:\windows\WindowsMobile\wcescomm.dll 00:19:08.0372 7292 WcesComm - ok 00:19:08.0392 7292 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\windows\System32\wcncsvc.dll 00:19:08.0392 7292 wcncsvc - ok 00:19:08.0412 7292 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll 00:19:08.0412 7292 WcsPlugInService - ok 00:19:08.0432 7292 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\windows\system32\drivers\wd.sys 00:19:08.0432 7292 Wd - ok 00:19:08.0542 7292 [ 96C4C98FE4866C16FC64E4578A0AA975 ] WDBackup C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe 00:19:08.0552 7292 WDBackup - ok 00:19:08.0612 7292 [ 80F8944EA183004D6EDCBBDCEC166404 ] WDDriveService C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe 00:19:08.0612 7292 WDDriveService - ok 00:19:08.0672 7292 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\windows\system32\drivers\Wdf01000.sys 00:19:08.0672 7292 Wdf01000 - ok 00:19:08.0682 7292 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\windows\system32\wdi.dll 00:19:08.0692 7292 WdiServiceHost - ok 00:19:08.0692 7292 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\windows\system32\wdi.dll 00:19:08.0692 7292 WdiSystemHost - ok 00:19:08.0732 7292 [ 94DC2BF6CBAAA95E369C3756D3115A76 ] wdkmd C:\windows\system32\DRIVERS\WDKMD.sys 00:19:08.0742 7292 wdkmd - ok 00:19:08.0792 7292 [ FD2D1C60CDBDFAB63EF182539D8FFC2D ] WDRulesService C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe 00:19:08.0802 7292 WDRulesService - ok 00:19:08.0812 7292 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\windows\System32\webclnt.dll 00:19:08.0822 7292 WebClient - ok 00:19:08.0832 7292 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\windows\system32\wecsvc.dll 00:19:08.0832 7292 Wecsvc - ok 00:19:08.0842 7292 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\windows\System32\wercplsupport.dll 00:19:08.0842 7292 wercplsupport - ok 00:19:08.0872 7292 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\windows\System32\WerSvc.dll 00:19:08.0872 7292 WerSvc - ok 00:19:08.0902 7292 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\windows\system32\DRIVERS\wfplwf.sys 00:19:08.0902 7292 WfpLwf - ok 00:19:08.0912 7292 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\windows\system32\drivers\wimmount.sys 00:19:08.0912 7292 WIMMount - ok 00:19:08.0942 7292 WinDefend - ok 00:19:08.0952 7292 WinHttpAutoProxySvc - ok 00:19:09.0012 7292 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\windows\system32\wbem\WMIsvc.dll 00:19:09.0012 7292 Winmgmt - ok 00:19:09.0102 7292 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\windows\system32\WsmSvc.dll 00:19:09.0112 7292 WinRM - ok 00:19:09.0192 7292 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\windows\system32\DRIVERS\WinUsb.sys 00:19:09.0192 7292 WinUsb - ok 00:19:09.0232 7292 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\windows\System32\wlansvc.dll 00:19:09.0232 7292 Wlansvc - ok 00:19:09.0312 7292 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 00:19:09.0312 7292 wlcrasvc - ok 00:19:09.0402 7292 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 00:19:09.0422 7292 wlidsvc - ok 00:19:09.0462 7292 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\windows\system32\DRIVERS\wmiacpi.sys 00:19:09.0462 7292 WmiAcpi - ok 00:19:09.0492 7292 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\windows\system32\wbem\WmiApSrv.exe 00:19:09.0492 7292 wmiApSrv - ok 00:19:09.0532 7292 WMPNetworkSvc - ok 00:19:09.0602 7292 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\windows\System32\wpcsvc.dll 00:19:09.0602 7292 WPCSvc - ok 00:19:09.0612 7292 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\windows\system32\wpdbusenum.dll 00:19:09.0612 7292 WPDBusEnum - ok 00:19:09.0632 7292 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\windows\system32\drivers\ws2ifsl.sys 00:19:09.0632 7292 ws2ifsl - ok 00:19:09.0652 7292 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\windows\system32\wscsvc.dll 00:19:09.0652 7292 wscsvc - ok 00:19:09.0692 7292 [ 8D918B1DB190A4D9B1753A66FA8C96E8 ] WSDPrintDevice C:\windows\system32\DRIVERS\WSDPrint.sys 00:19:09.0692 7292 WSDPrintDevice - ok 00:19:09.0702 7292 [ 4A2A5C50DD1A63577D3ACA94269FBC7F ] WSDScan C:\windows\system32\DRIVERS\WSDScan.sys 00:19:09.0702 7292 WSDScan - ok 00:19:09.0702 7292 WSearch - ok 00:19:09.0732 7292 [ 83575C43B2BFE9AB0661A7F957E843C0 ] wsvd C:\windows\system32\DRIVERS\wsvd.sys 00:19:09.0732 7292 wsvd - ok 00:19:09.0822 7292 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\windows\system32\wuaueng.dll 00:19:09.0832 7292 wuauserv - ok 00:19:09.0882 7292 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\windows\system32\drivers\WudfPf.sys 00:19:09.0882 7292 WudfPf - ok 00:19:09.0912 7292 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\windows\system32\DRIVERS\WUDFRd.sys 00:19:09.0912 7292 WUDFRd - ok 00:19:09.0942 7292 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\windows\System32\WUDFSvc.dll 00:19:09.0942 7292 wudfsvc - ok 00:19:09.0982 7292 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\windows\System32\wwansvc.dll 00:19:09.0982 7292 WwanSvc - ok 00:19:10.0042 7292 ================ Scan global =============================== 00:19:10.0072 7292 [ BA0CD8C393E8C9F83354106093832C7B ] C:\windows\system32\basesrv.dll 00:19:10.0102 7292 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\windows\system32\winsrv.dll 00:19:10.0112 7292 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\windows\system32\winsrv.dll 00:19:10.0132 7292 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\windows\system32\sxssrv.dll 00:19:10.0162 7292 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\windows\system32\services.exe 00:19:10.0162 7292 [Global] - ok 00:19:10.0162 7292 ================ Scan MBR ================================== 00:19:10.0182 7292 [ D7AD5AA31A559120C3BA48FD0A1B1636 ] \Device\Harddisk0\DR0 00:19:10.0483 7292 \Device\Harddisk0\DR0 - ok 00:19:10.0483 7292 ================ Scan VBR ================================== 00:19:10.0483 7292 [ 6F39386A1BBD6968327EC29E426DA4F4 ] \Device\Harddisk0\DR0\Partition1 00:19:10.0483 7292 \Device\Harddisk0\DR0\Partition1 - ok 00:19:10.0493 7292 [ AC6D73A827F27D4A615BCF2FF34B9051 ] \Device\Harddisk0\DR0\Partition2 00:19:10.0493 7292 \Device\Harddisk0\DR0\Partition2 - ok 00:19:10.0523 7292 [ 69B5FC3C06143015CAB9779A8068730C ] \Device\Harddisk0\DR0\Partition3 00:19:10.0523 7292 \Device\Harddisk0\DR0\Partition3 - ok 00:19:10.0523 7292 ============================================================ 00:19:10.0523 7292 Scan finished 00:19:10.0523 7292 ============================================================ 00:19:10.0533 5220 Detected object count: 0 00:19:10.0533 5220 Actual detected object count: 0 00:19:18.0973 7372 ============================================================ 00:19:18.0973 7372 Scan started 00:19:18.0973 7372 Mode: Manual; 00:19:18.0973 7372 ============================================================ 00:19:19.0353 7372 ================ Scan services ============================= 00:19:19.0563 7372 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\windows\system32\drivers\1394ohci.sys 00:19:19.0563 7372 1394ohci - ok 00:19:19.0583 7372 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\windows\system32\drivers\ACPI.sys 00:19:19.0583 7372 ACPI - ok 00:19:19.0593 7372 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\windows\system32\drivers\acpipmi.sys 00:19:19.0593 7372 AcpiPmi - ok 00:19:19.0623 7372 [ 5BBFF8B826EC38D32C26334E079C7EFC ] ACPIVPC C:\windows\system32\DRIVERS\AcpiVpc.sys 00:19:19.0623 7372 ACPIVPC - ok 00:19:19.0733 7372 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 00:19:19.0733 7372 AdobeARMservice - ok 00:19:19.0903 7372 [ 9942DC4CC265CDA00486504444EF521D ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 00:19:19.0903 7372 AdobeFlashPlayerUpdateSvc - ok 00:19:19.0923 7372 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\windows\system32\drivers\adp94xx.sys 00:19:19.0933 7372 adp94xx - ok 00:19:19.0983 7372 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\windows\system32\drivers\adpahci.sys 00:19:19.0983 7372 adpahci - ok 00:19:20.0003 7372 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\windows\system32\drivers\adpu320.sys 00:19:20.0003 7372 adpu320 - ok 00:19:20.0093 7372 [ CBFAA333EBA2E402A0439A3A0E5413F3 ] AdvancedSystemCareService6 C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe 00:19:20.0093 7372 AdvancedSystemCareService6 - ok 00:19:20.0123 7372 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\windows\System32\aelupsvc.dll 00:19:20.0123 7372 AeLookupSvc - ok 00:19:20.0153 7372 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\windows\system32\drivers\afd.sys 00:19:20.0163 7372 AFD - ok 00:19:20.0193 7372 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\windows\system32\drivers\agp440.sys 00:19:20.0193 7372 agp440 - ok 00:19:20.0203 7372 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\windows\System32\alg.exe 00:19:20.0203 7372 ALG - ok 00:19:20.0223 7372 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\windows\system32\drivers\aliide.sys 00:19:20.0223 7372 aliide - ok 00:19:20.0233 7372 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\windows\system32\drivers\amdide.sys 00:19:20.0233 7372 amdide - ok 00:19:20.0243 7372 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\windows\system32\drivers\amdk8.sys 00:19:20.0243 7372 AmdK8 - ok 00:19:20.0263 7372 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\windows\system32\drivers\amdppm.sys 00:19:20.0263 7372 AmdPPM - ok 00:19:20.0273 7372 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\windows\system32\drivers\amdsata.sys 00:19:20.0273 7372 amdsata - ok 00:19:20.0293 7372 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\windows\system32\drivers\amdsbs.sys 00:19:20.0293 7372 amdsbs - ok 00:19:20.0313 7372 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\windows\system32\drivers\amdxata.sys 00:19:20.0313 7372 amdxata - ok 00:19:20.0323 7372 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\windows\system32\drivers\appid.sys 00:19:20.0323 7372 AppID - ok 00:19:20.0353 7372 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\windows\System32\appidsvc.dll 00:19:20.0353 7372 AppIDSvc - ok 00:19:20.0373 7372 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\windows\System32\appinfo.dll 00:19:20.0373 7372 Appinfo - ok 00:19:20.0463 7372 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 00:19:20.0463 7372 Apple Mobile Device - ok 00:19:20.0483 7372 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\windows\system32\drivers\arc.sys 00:19:20.0483 7372 arc - ok 00:19:20.0493 7372 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\windows\system32\drivers\arcsas.sys 00:19:20.0503 7372 arcsas - ok 00:19:20.0613 7372 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 00:19:20.0613 7372 aspnet_state - ok 00:19:20.0633 7372 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\windows\system32\DRIVERS\asyncmac.sys 00:19:20.0633 7372 AsyncMac - ok 00:19:20.0643 7372 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\windows\system32\drivers\atapi.sys 00:19:20.0643 7372 atapi - ok 00:19:20.0673 7372 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\windows\System32\Audiosrv.dll 00:19:20.0673 7372 AudioEndpointBuilder - ok 00:19:20.0693 7372 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\windows\System32\Audiosrv.dll 00:19:20.0693 7372 AudioSrv - ok 00:19:20.0933 7372 [ 4AFC14AFA58878FAA1D249E7E90EA54B ] AVGIDSAgent C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe 00:19:20.0963 7372 AVGIDSAgent - ok 00:19:21.0003 7372 [ 388056EBD5FE6718FE669078DBE37897 ] AVGIDSDriver C:\windows\system32\DRIVERS\avgidsdrivera.sys 00:19:21.0003 7372 AVGIDSDriver - ok 00:19:21.0033 7372 [ 550E981747D6A6C55078C77346FFC2C6 ] AVGIDSHA C:\windows\system32\DRIVERS\avgidsha.sys 00:19:21.0033 7372 AVGIDSHA - ok 00:19:21.0083 7372 [ 5989592A91A17587799792A81E1541D4 ] Avgldx64 C:\windows\system32\DRIVERS\avgldx64.sys 00:19:21.0083 7372 Avgldx64 - ok 00:19:21.0123 7372 [ 3FC43AA02545FCDDC22817829114DEC8 ] Avgloga C:\windows\system32\DRIVERS\avgloga.sys 00:19:21.0123 7372 Avgloga - ok 00:19:21.0133 7372 [ 841C40C193889730848849AC220D9242 ] Avgmfx64 C:\windows\system32\DRIVERS\avgmfx64.sys 00:19:21.0133 7372 Avgmfx64 - ok 00:19:21.0143 7372 [ FE4F444DBE4BBBDFD8FECF49398DEFC7 ] Avgrkx64 C:\windows\system32\DRIVERS\avgrkx64.sys 00:19:21.0143 7372 Avgrkx64 - ok 00:19:21.0163 7372 [ 6E634525613D48A1D1657FB21F21F3B2 ] Avgtdia C:\windows\system32\DRIVERS\avgtdia.sys 00:19:21.0163 7372 Avgtdia - ok 00:19:21.0193 7372 [ 6B72E1E329C4E98C6B6FDD2D265E3BA3 ] avgwd C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe 00:19:21.0203 7372 avgwd - ok 00:19:21.0233 7372 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\windows\System32\AxInstSV.dll 00:19:21.0233 7372 AxInstSV - ok 00:19:21.0263 7372 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\windows\system32\drivers\bxvbda.sys 00:19:21.0263 7372 b06bdrv - ok 00:19:21.0283 7372 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\windows\system32\DRIVERS\b57nd60a.sys 00:19:21.0283 7372 b57nd60a - ok 00:19:21.0313 7372 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\windows\System32\bdesvc.dll 00:19:21.0313 7372 BDESVC - ok 00:19:21.0323 7372 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\windows\system32\drivers\Beep.sys 00:19:21.0323 7372 Beep - ok 00:19:21.0344 7372 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\windows\System32\bfe.dll 00:19:21.0354 7372 BFE - ok 00:19:21.0384 7372 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\windows\system32\qmgr.dll 00:19:21.0394 7372 BITS - ok 00:19:21.0404 7372 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\windows\system32\DRIVERS\blbdrive.sys 00:19:21.0404 7372 blbdrive - ok 00:19:21.0474 7372 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 00:19:21.0474 7372 Bonjour Service - ok 00:19:21.0524 7372 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\windows\system32\DRIVERS\bowser.sys 00:19:21.0524 7372 bowser - ok 00:19:21.0544 7372 [ AAA4F992F879977A000FE8B8C730CD2C ] BPntDrv C:\windows\system32\drivers\BPntDrv.sys 00:19:21.0544 7372 BPntDrv - ok 00:19:21.0564 7372 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\windows\system32\drivers\BrFiltLo.sys 00:19:21.0564 7372 BrFiltLo - ok 00:19:21.0584 7372 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\windows\system32\drivers\BrFiltUp.sys 00:19:21.0584 7372 BrFiltUp - ok 00:19:21.0594 7372 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\windows\system32\DRIVERS\bridge.sys 00:19:21.0594 7372 BridgeMP - ok 00:19:21.0634 7372 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\windows\System32\browser.dll 00:19:21.0634 7372 Browser - ok 00:19:21.0654 7372 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\windows\System32\Drivers\Brserid.sys 00:19:21.0654 7372 Brserid - ok 00:19:21.0664 7372 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\windows\System32\Drivers\BrSerWdm.sys 00:19:21.0664 7372 BrSerWdm - ok 00:19:21.0664 7372 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\windows\System32\Drivers\BrUsbMdm.sys 00:19:21.0664 7372 BrUsbMdm - ok 00:19:21.0684 7372 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\windows\System32\Drivers\BrUsbSer.sys 00:19:21.0684 7372 BrUsbSer - ok 00:19:21.0714 7372 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\windows\system32\drivers\BthEnum.sys 00:19:21.0714 7372 BthEnum - ok 00:19:21.0734 7372 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\windows\system32\DRIVERS\bthmodem.sys 00:19:21.0734 7372 BTHMODEM - ok 00:19:21.0744 7372 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\windows\system32\DRIVERS\bthpan.sys 00:19:21.0744 7372 BthPan - ok 00:19:21.0794 7372 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\windows\System32\Drivers\BTHport.sys 00:19:21.0804 7372 BTHPORT - ok 00:19:21.0834 7372 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\windows\system32\bthserv.dll 00:19:21.0834 7372 bthserv - ok 00:19:21.0844 7372 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\windows\System32\Drivers\BTHUSB.sys 00:19:21.0844 7372 BTHUSB - ok 00:19:21.0874 7372 [ A0DFB69ADE3444C78B17636FCF28E898 ] BTWAMPFL C:\windows\system32\DRIVERS\btwampfl.sys 00:19:21.0874 7372 BTWAMPFL - ok 00:19:21.0884 7372 [ 7CF028CE78696882B327FF13D2DFA534 ] btwaudio C:\windows\system32\drivers\btwaudio.sys 00:19:21.0894 7372 btwaudio - ok 00:19:21.0904 7372 [ 3DEF2370E414B4E299673558BA171A51 ] btwavdt C:\windows\system32\DRIVERS\btwavdt.sys 00:19:21.0904 7372 btwavdt - ok 00:19:21.0984 7372 [ 3D5E7FB2CB69A6186C7954C0859173F4 ] btwdins C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe 00:19:21.0994 7372 btwdins - ok 00:19:22.0004 7372 [ 346B4051B3D7FF70E8F027869B8ECA6E ] btwl2cap C:\windows\system32\DRIVERS\btwl2cap.sys 00:19:22.0004 7372 btwl2cap - ok 00:19:22.0014 7372 [ 9937E0E4DFC0030560A6DFE9D3A94B39 ] btwrchid C:\windows\system32\DRIVERS\btwrchid.sys 00:19:22.0014 7372 btwrchid - ok 00:19:22.0024 7372 catchme - ok 00:19:22.0044 7372 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\windows\system32\DRIVERS\cdfs.sys 00:19:22.0044 7372 cdfs - ok 00:19:22.0064 7372 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\windows\system32\DRIVERS\cdrom.sys 00:19:22.0064 7372 cdrom - ok 00:19:22.0084 7372 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\windows\System32\certprop.dll 00:19:22.0084 7372 CertPropSvc - ok 00:19:22.0104 7372 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\windows\system32\drivers\circlass.sys 00:19:22.0104 7372 circlass - ok 00:19:22.0134 7372 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\windows\system32\CLFS.sys 00:19:22.0134 7372 CLFS - ok 00:19:22.0204 7372 [ 524DC3807CB1746225F9D26ADD19C319 ] CLKMSVC10_3A60B698 C:\Program Files (x86)\Lenovo\PowerDVD10\NavFilter\kmsvc.exe 00:19:22.0214 7372 CLKMSVC10_3A60B698 - ok 00:19:22.0264 7372 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 00:19:22.0264 7372 clr_optimization_v2.0.50727_32 - ok 00:19:22.0304 7372 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 00:19:22.0304 7372 clr_optimization_v2.0.50727_64 - ok 00:19:22.0364 7372 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 00:19:22.0364 7372 clr_optimization_v4.0.30319_32 - ok 00:19:22.0384 7372 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 00:19:22.0394 7372 clr_optimization_v4.0.30319_64 - ok 00:19:22.0424 7372 [ 50F92C943F18B070F166D019DFAB3D9A ] clwvd C:\windows\system32\DRIVERS\clwvd.sys 00:19:22.0424 7372 clwvd - ok 00:19:22.0444 7372 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\windows\system32\DRIVERS\CmBatt.sys 00:19:22.0444 7372 CmBatt - ok 00:19:22.0454 7372 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\windows\system32\drivers\cmdide.sys 00:19:22.0454 7372 cmdide - ok 00:19:22.0494 7372 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\windows\system32\Drivers\cng.sys 00:19:22.0504 7372 CNG - ok 00:19:22.0514 7372 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\windows\system32\drivers\compbatt.sys 00:19:22.0514 7372 Compbatt - ok 00:19:22.0524 7372 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\windows\system32\DRIVERS\CompositeBus.sys 00:19:22.0524 7372 CompositeBus - ok 00:19:22.0524 7372 COMSysApp - ok 00:19:22.0694 7372 [ 815F3180B5117E42E422188E9CCC89C6 ] cphs C:\windows\SysWow64\IntelCpHeciSvc.exe 00:19:22.0694 7372 cphs - ok 00:19:22.0704 7372 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\windows\system32\drivers\crcdisk.sys 00:19:22.0704 7372 crcdisk - ok 00:19:22.0744 7372 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\windows\system32\cryptsvc.dll 00:19:22.0744 7372 CryptSvc - ok 00:19:22.0784 7372 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\windows\system32\rpcss.dll 00:19:22.0784 7372 DcomLaunch - ok 00:19:22.0814 7372 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\windows\System32\defragsvc.dll 00:19:22.0814 7372 defragsvc - ok 00:19:22.0844 7372 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\windows\system32\Drivers\dfsc.sys 00:19:22.0844 7372 DfsC - ok 00:19:22.0854 7372 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\windows\system32\dhcpcore.dll 00:19:22.0854 7372 Dhcp - ok 00:19:22.0864 7372 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\windows\system32\drivers\discache.sys 00:19:22.0864 7372 discache - ok 00:19:22.0874 7372 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\windows\system32\drivers\disk.sys 00:19:22.0874 7372 Disk - ok 00:19:22.0894 7372 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\windows\System32\dnsrslvr.dll 00:19:22.0894 7372 Dnscache - ok 00:19:22.0904 7372 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\windows\System32\dot3svc.dll 00:19:22.0904 7372 dot3svc - ok 00:19:22.0924 7372 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\windows\system32\dps.dll 00:19:22.0924 7372 DPS - ok 00:19:22.0944 7372 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\windows\system32\drivers\drmkaud.sys 00:19:22.0944 7372 drmkaud - ok 00:19:22.0994 7372 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\windows\system32\DRIVERS\dtsoftbus01.sys 00:19:22.0994 7372 dtsoftbus01 - ok 00:19:23.0014 7372 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\windows\System32\drivers\dxgkrnl.sys 00:19:23.0024 7372 DXGKrnl - ok 00:19:23.0054 7372 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\windows\System32\eapsvc.dll 00:19:23.0054 7372 EapHost - ok 00:19:23.0124 7372 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\windows\system32\drivers\evbda.sys 00:19:23.0144 7372 ebdrv - ok 00:19:23.0224 7372 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\windows\System32\lsass.exe 00:19:23.0224 7372 EFS - ok 00:19:23.0274 7372 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\windows\ehome\ehRecvr.exe 00:19:23.0274 7372 ehRecvr - ok 00:19:23.0284 7372 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\windows\ehome\ehsched.exe 00:19:23.0284 7372 ehSched - ok 00:19:23.0314 7372 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\windows\system32\drivers\elxstor.sys 00:19:23.0314 7372 elxstor - ok 00:19:23.0394 7372 [ ABDD5AD016AFFD34AD40E944CE94BF59 ] EpsonBidirectionalService C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe 00:19:23.0394 7372 EpsonBidirectionalService - ok 00:19:23.0484 7372 [ B5581646636759D0DAFA8B008881C079 ] EPSON_EB_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE 00:19:23.0484 7372 EPSON_EB_RPCV4_01 - ok 00:19:23.0494 7372 [ 1E345F2A2D95DA3190596E691CDE9342 ] EPSON_PM_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE 00:19:23.0494 7372 EPSON_PM_RPCV4_01 - ok 00:19:23.0514 7372 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\windows\system32\drivers\errdev.sys 00:19:23.0514 7372 ErrDev - ok 00:19:23.0544 7372 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\windows\system32\es.dll 00:19:23.0544 7372 EventSystem - ok 00:19:23.0624 7372 [ F8F610093E1D7FDFA477FC34D15D5C60 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe 00:19:23.0634 7372 EvtEng - ok 00:19:23.0654 7372 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\windows\system32\drivers\exfat.sys 00:19:23.0654 7372 exfat - ok 00:19:23.0674 7372 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\windows\system32\drivers\fastfat.sys 00:19:23.0674 7372 fastfat - ok 00:19:23.0704 7372 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\windows\system32\fxssvc.exe 00:19:23.0704 7372 Fax - ok 00:19:23.0734 7372 [ 3191ACA33088EE2481044FC0DB736442 ] fbfmon C:\windows\system32\drivers\fbfmon.sys 00:19:23.0734 7372 fbfmon - ok 00:19:23.0754 7372 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\windows\system32\drivers\fdc.sys 00:19:23.0754 7372 fdc - ok 00:19:23.0764 7372 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\windows\system32\fdPHost.dll 00:19:23.0764 7372 fdPHost - ok 00:19:23.0794 7372 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\windows\system32\fdrespub.dll 00:19:23.0794 7372 FDResPub - ok 00:19:23.0944 7372 [ 654A537CF7FE15A41373E85D1167040B ] File Backup C:\Program Files (x86)\Workspace\offSyncService.exe 00:19:23.0954 7372 File Backup - ok 00:19:23.0984 7372 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\windows\system32\drivers\fileinfo.sys 00:19:23.0984 7372 FileInfo - ok 00:19:24.0004 7372 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\windows\system32\drivers\filetrace.sys 00:19:24.0004 7372 Filetrace - ok 00:19:24.0054 7372 [ 7E76EED28B8B8696B7F7ED5F757AA304 ] FileZilla Server C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe 00:19:24.0054 7372 FileZilla Server - ok 00:19:24.0064 7372 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\windows\system32\drivers\flpydisk.sys 00:19:24.0064 7372 flpydisk - ok 00:19:24.0074 7372 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\windows\system32\drivers\fltmgr.sys 00:19:24.0074 7372 FltMgr - ok 00:19:24.0134 7372 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\windows\system32\FntCache.dll 00:19:24.0134 7372 FontCache - ok 00:19:24.0184 7372 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 00:19:24.0184 7372 FontCache3.0.0.0 - ok 00:19:24.0194 7372 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\windows\system32\drivers\FsDepends.sys 00:19:24.0194 7372 FsDepends - ok 00:19:24.0224 7372 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\windows\system32\drivers\Fs_Rec.sys 00:19:24.0224 7372 Fs_Rec - ok 00:19:24.0264 7372 [ ED07200CFF78FACFB66EBB0B89F503A4 ] FTDIBUS C:\windows\system32\drivers\ftdibus.sys 00:19:24.0264 7372 FTDIBUS - ok 00:19:24.0314 7372 [ 9980E7584484A009E77E9BFA14C0C18A ] FTSER2K C:\windows\system32\drivers\ftser2k.sys 00:19:24.0314 7372 FTSER2K - ok 00:19:24.0334 7372 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\windows\system32\DRIVERS\fvevol.sys 00:19:24.0334 7372 fvevol - ok 00:19:24.0344 7372 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\windows\system32\drivers\gagp30kx.sys 00:19:24.0344 7372 gagp30kx - ok 00:19:24.0374 7372 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\windows\system32\DRIVERS\GEARAspiWDM.sys 00:19:24.0374 7372 GEARAspiWDM - ok 00:19:24.0414 7372 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\windows\System32\gpsvc.dll 00:19:24.0414 7372 gpsvc - ok 00:19:24.0504 7372 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 00:19:24.0504 7372 gupdate - ok 00:19:24.0504 7372 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 00:19:24.0504 7372 gupdatem - ok 00:19:24.0514 7372 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\windows\system32\drivers\hcw85cir.sys 00:19:24.0524 7372 hcw85cir - ok 00:19:24.0554 7372 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys 00:19:24.0554 7372 HdAudAddService - ok 00:19:24.0564 7372 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\windows\system32\DRIVERS\HDAudBus.sys 00:19:24.0564 7372 HDAudBus - ok 00:19:24.0574 7372 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\windows\system32\drivers\HidBatt.sys 00:19:24.0574 7372 HidBatt - ok 00:19:24.0594 7372 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\windows\system32\drivers\hidbth.sys 00:19:24.0594 7372 HidBth - ok 00:19:24.0614 7372 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\windows\system32\drivers\hidir.sys 00:19:24.0614 7372 HidIr - ok 00:19:24.0634 7372 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\windows\System32\hidserv.dll 00:19:24.0634 7372 hidserv - ok 00:19:24.0644 7372 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\windows\system32\DRIVERS\hidusb.sys 00:19:24.0644 7372 HidUsb - ok 00:19:24.0664 7372 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\windows\system32\kmsvc.dll 00:19:24.0664 7372 hkmsvc - ok 00:19:24.0684 7372 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\windows\system32\ListSvc.dll 00:19:24.0684 7372 HomeGroupListener - ok 00:19:24.0714 7372 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\windows\system32\provsvc.dll 00:19:24.0714 7372 HomeGroupProvider - ok 00:19:24.0734 7372 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\windows\system32\drivers\HpSAMD.sys 00:19:24.0734 7372 HpSAMD - ok 00:19:24.0764 7372 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\windows\system32\drivers\HTTP.sys 00:19:24.0774 7372 HTTP - ok 00:19:24.0784 7372 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\windows\system32\drivers\hwpolicy.sys 00:19:24.0784 7372 hwpolicy - ok 00:19:24.0804 7372 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\windows\system32\DRIVERS\i8042prt.sys 00:19:24.0804 7372 i8042prt - ok 00:19:24.0824 7372 [ 53CC5BF8B5A219119953C7ABB19A7705 ] iaStor C:\windows\system32\DRIVERS\iaStor.sys 00:19:24.0824 7372 iaStor - ok 00:19:24.0854 7372 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\windows\system32\drivers\iaStorV.sys 00:19:24.0854 7372 iaStorV - ok 00:19:24.0894 7372 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 00:19:24.0904 7372 idsvc - ok 00:19:25.0034 7372 [ 348214F96642FD4FEF630DE021BA3540 ] igfx C:\windows\system32\DRIVERS\igdkmd64.sys 00:19:25.0064 7372 igfx - ok 00:19:25.0094 7372 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\windows\system32\drivers\iirsp.sys 00:19:25.0094 7372 iirsp - ok 00:19:25.0124 7372 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\windows\System32\ikeext.dll 00:19:25.0134 7372 IKEEXT - ok 00:19:25.0214 7372 [ A9853214CC97796579D75B1F59C51DCD ] IntcAzAudAddService C:\windows\system32\drivers\RTKVHD64.sys 00:19:25.0224 7372 IntcAzAudAddService - ok 00:19:25.0234 7372 [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud C:\windows\system32\DRIVERS\IntcDAud.sys 00:19:25.0234 7372 IntcDAud - ok 00:19:25.0254 7372 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\windows\system32\drivers\intelide.sys 00:19:25.0254 7372 intelide - ok 00:19:25.0264 7372 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\windows\system32\DRIVERS\intelppm.sys 00:19:25.0274 7372 intelppm - ok 00:19:25.0274 7372 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\windows\system32\ipbusenum.dll 00:19:25.0284 7372 IPBusEnum - ok 00:19:25.0294 7372 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\windows\system32\DRIVERS\ipfltdrv.sys 00:19:25.0294 7372 IpFilterDriver - ok 00:19:25.0344 7372 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\windows\System32\iphlpsvc.dll 00:19:25.0344 7372 iphlpsvc - ok 00:19:25.0354 7372 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\windows\system32\drivers\IPMIDrv.sys 00:19:25.0354 7372 IPMIDRV - ok 00:19:25.0354 7372 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\windows\system32\drivers\ipnat.sys 00:19:25.0354 7372 IPNAT - ok 00:19:25.0404 7372 [ 4EFFC8FF6D349E971E94B1C670C0C66A ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 00:19:25.0404 7372 iPod Service - ok 00:19:25.0414 7372 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\windows\system32\drivers\irenum.sys 00:19:25.0414 7372 IRENUM - ok 00:19:25.0434 7372 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\windows\system32\drivers\isapnp.sys 00:19:25.0434 7372 isapnp - ok 00:19:25.0454 7372 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\windows\system32\drivers\msiscsi.sys 00:19:25.0454 7372 iScsiPrt - ok 00:19:25.0474 7372 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\windows\system32\DRIVERS\kbdclass.sys 00:19:25.0474 7372 kbdclass - ok 00:19:25.0484 7372 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\windows\system32\drivers\kbdhid.sys 00:19:25.0484 7372 kbdhid - ok 00:19:25.0494 7372 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\windows\system32\lsass.exe 00:19:25.0494 7372 KeyIso - ok 00:19:25.0524 7372 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\windows\system32\Drivers\ksecdd.sys 00:19:25.0524 7372 KSecDD - ok 00:19:25.0554 7372 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\windows\system32\Drivers\ksecpkg.sys 00:19:25.0554 7372 KSecPkg - ok 00:19:25.0564 7372 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\windows\system32\drivers\ksthunk.sys 00:19:25.0564 7372 ksthunk - ok 00:19:25.0634 7372 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\windows\system32\msdtckrm.dll 00:19:25.0634 7372 KtmRm - ok 00:19:25.0674 7372 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\windows\System32\srvsvc.dll 00:19:25.0674 7372 LanmanServer - ok 00:19:25.0694 7372 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\windows\System32\wkssvc.dll 00:19:25.0694 7372 LanmanWorkstation - ok 00:19:25.0714 7372 [ BE166935083F9C38EDFDC21B9A7A679B ] LHDmgr C:\windows\system32\DRIVERS\LhdX64.sys 00:19:25.0714 7372 LHDmgr - ok 00:19:25.0734 7372 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\windows\system32\DRIVERS\lltdio.sys 00:19:25.0734 7372 lltdio - ok 00:19:25.0764 7372 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\windows\System32\lltdsvc.dll 00:19:25.0764 7372 lltdsvc - ok 00:19:25.0784 7372 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\windows\System32\lmhsvc.dll 00:19:25.0784 7372 lmhosts - ok 00:19:25.0824 7372 [ 2ED1786B7542CDA261029F6B526EDF44 ] LMS C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe 00:19:25.0834 7372 LMS - ok 00:19:25.0854 7372 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\windows\system32\drivers\lsi_fc.sys 00:19:25.0864 7372 LSI_FC - ok 00:19:25.0874 7372 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\windows\system32\drivers\lsi_sas.sys 00:19:25.0874 7372 LSI_SAS - ok 00:19:25.0884 7372 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\windows\system32\drivers\lsi_sas2.sys 00:19:25.0884 7372 LSI_SAS2 - ok 00:19:25.0884 7372 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\windows\system32\drivers\lsi_scsi.sys 00:19:25.0894 7372 LSI_SCSI - ok 00:19:25.0904 7372 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\windows\system32\drivers\luafv.sys 00:19:25.0914 7372 luafv - ok 00:19:25.0944 7372 [ 31C6AFFFAD7C733A65F888929548BC22 ] mbamchameleon C:\windows\system32\drivers\mbamchameleon.sys 00:19:25.0954 7372 mbamchameleon - ok 00:19:25.0974 7372 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\windows\system32\Mcx2Svc.dll 00:19:25.0984 7372 Mcx2Svc - ok 00:19:25.0994 7372 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\windows\system32\drivers\megasas.sys 00:19:25.0994 7372 megasas - ok 00:19:26.0004 7372 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\windows\system32\drivers\MegaSR.sys 00:19:26.0004 7372 MegaSR - ok 00:19:26.0024 7372 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\windows\system32\DRIVERS\HECIx64.sys 00:19:26.0034 7372 MEIx64 - ok 00:19:26.0144 7372 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe 00:19:26.0144 7372 Microsoft Office Groove Audit Service - ok 00:19:26.0154 7372 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\windows\system32\mmcss.dll 00:19:26.0154 7372 MMCSS - ok 00:19:26.0174 7372 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\windows\system32\drivers\modem.sys 00:19:26.0174 7372 Modem - ok 00:19:26.0214 7372 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\windows\system32\DRIVERS\monitor.sys 00:19:26.0214 7372 monitor - ok 00:19:26.0224 7372 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\windows\system32\DRIVERS\mouclass.sys 00:19:26.0224 7372 mouclass - ok 00:19:26.0234 7372 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\windows\system32\DRIVERS\mouhid.sys 00:19:26.0234 7372 mouhid - ok 00:19:26.0244 7372 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\windows\system32\drivers\mountmgr.sys 00:19:26.0244 7372 mountmgr - ok 00:19:26.0304 7372 [ 8A7C8F4C713E70D73946833D76B77035 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 00:19:26.0304 7372 MozillaMaintenance - ok 00:19:26.0344 7372 [ F8A10560B35C66F9DE212F03DAD5BFA7 ] MpFilter C:\windows\system32\DRIVERS\MpFilter.sys 00:19:26.0344 7372 MpFilter - ok 00:19:26.0355 7372 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\windows\system32\drivers\mpio.sys 00:19:26.0365 7372 mpio - ok 00:19:26.0375 7372 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\windows\system32\drivers\mpsdrv.sys 00:19:26.0375 7372 mpsdrv - ok 00:19:26.0415 7372 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\windows\system32\mpssvc.dll 00:19:26.0425 7372 MpsSvc - ok 00:19:26.0435 7372 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\windows\system32\drivers\mrxdav.sys 00:19:26.0435 7372 MRxDAV - ok 00:19:26.0445 7372 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\windows\system32\DRIVERS\mrxsmb.sys 00:19:26.0455 7372 mrxsmb - ok 00:19:26.0495 7372 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\windows\system32\DRIVERS\mrxsmb10.sys 00:19:26.0505 7372 mrxsmb10 - ok 00:19:26.0515 7372 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\windows\system32\DRIVERS\mrxsmb20.sys 00:19:26.0515 7372 mrxsmb20 - ok 00:19:26.0535 7372 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\windows\system32\drivers\msahci.sys 00:19:26.0535 7372 msahci - ok 00:19:26.0545 7372 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\windows\system32\drivers\msdsm.sys 00:19:26.0545 7372 msdsm - ok 00:19:26.0565 7372 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\windows\System32\msdtc.exe 00:19:26.0575 7372 MSDTC - ok 00:19:26.0585 7372 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\windows\system32\drivers\Msfs.sys 00:19:26.0585 7372 Msfs - ok 00:19:26.0585 7372 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\windows\System32\drivers\mshidkmdf.sys 00:19:26.0585 7372 mshidkmdf - ok 00:19:26.0605 7372 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\windows\system32\drivers\msisadrv.sys 00:19:26.0605 7372 msisadrv - ok 00:19:26.0625 7372 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\windows\system32\iscsiexe.dll 00:19:26.0635 7372 MSiSCSI - ok 00:19:26.0635 7372 msiserver - ok 00:19:26.0645 7372 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\windows\system32\drivers\MSKSSRV.sys 00:19:26.0645 7372 MSKSSRV - ok 00:19:26.0715 7372 [ E07DEC52FF801841BA9B6878A60304FB ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe 00:19:26.0725 7372 MsMpSvc - ok 00:19:26.0745 7372 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\windows\system32\drivers\MSPCLOCK.sys 00:19:26.0745 7372 MSPCLOCK - ok 00:19:26.0755 7372 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\windows\system32\drivers\MSPQM.sys 00:19:26.0755 7372 MSPQM - ok 00:19:26.0775 7372 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\windows\system32\drivers\MsRPC.sys 00:19:26.0775 7372 MsRPC - ok 00:19:26.0795 7372 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\windows\system32\DRIVERS\mssmbios.sys 00:19:26.0795 7372 mssmbios - ok 00:19:26.0865 7372 MSSQL$MYMOVIES - ok 00:19:26.0945 7372 [ 1D89EB4E2A99CABD4E81225F4F4C4B25 ] MSSQLServerADHelper c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqladhlp90.exe 00:19:26.0945 7372 MSSQLServerADHelper - ok 00:19:26.0955 7372 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\windows\system32\drivers\MSTEE.sys 00:19:26.0965 7372 MSTEE - ok 00:19:26.0975 7372 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\windows\system32\drivers\MTConfig.sys 00:19:26.0975 7372 MTConfig - ok 00:19:26.0995 7372 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\windows\system32\Drivers\mup.sys 00:19:26.0995 7372 Mup - ok 00:19:27.0035 7372 [ F6EA50DBC391F04CA49427010657CCB3 ] MyWiFiDHCPDNS C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe 00:19:27.0035 7372 MyWiFiDHCPDNS - ok 00:19:27.0075 7372 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\windows\system32\qagentRT.dll 00:19:27.0075 7372 napagent - ok 00:19:27.0095 7372 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\windows\system32\DRIVERS\nwifi.sys 00:19:27.0095 7372 NativeWifiP - ok 00:19:27.0145 7372 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\windows\system32\drivers\ndis.sys 00:19:27.0155 7372 NDIS - ok 00:19:27.0165 7372 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\windows\system32\DRIVERS\ndiscap.sys 00:19:27.0175 7372 NdisCap - ok 00:19:27.0185 7372 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\windows\system32\DRIVERS\ndistapi.sys 00:19:27.0185 7372 NdisTapi - ok 00:19:27.0195 7372 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\windows\system32\DRIVERS\ndisuio.sys 00:19:27.0195 7372 Ndisuio - ok 00:19:27.0225 7372 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\windows\system32\DRIVERS\ndiswan.sys 00:19:27.0225 7372 NdisWan - ok 00:19:27.0235 7372 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\windows\system32\drivers\NDProxy.sys 00:19:27.0245 7372 NDProxy - ok 00:19:27.0275 7372 [ D4F51E88C71BF8F06EA1BE320B0BB75B ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll 00:19:27.0275 7372 Net Driver HPZ12 - ok 00:19:27.0285 7372 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\windows\system32\DRIVERS\netbios.sys 00:19:27.0285 7372 NetBIOS - ok 00:19:27.0305 7372 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\windows\system32\DRIVERS\netbt.sys 00:19:27.0305 7372 NetBT - ok 00:19:27.0315 7372 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\windows\system32\lsass.exe 00:19:27.0315 7372 Netlogon - ok 00:19:27.0345 7372 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\windows\System32\netman.dll 00:19:27.0345 7372 Netman - ok 00:19:27.0415 7372 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 00:19:27.0425 7372 NetMsmqActivator - ok 00:19:27.0425 7372 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 00:19:27.0425 7372 NetPipeActivator - ok 00:19:27.0445 7372 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\windows\System32\netprofm.dll 00:19:27.0455 7372 netprofm - ok 00:19:27.0455 7372 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 00:19:27.0455 7372 NetTcpActivator - ok 00:19:27.0455 7372 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 00:19:27.0465 7372 NetTcpPortSharing - ok 00:19:27.0645 7372 [ 98CF53F7B23F77D082805D5DBBD99A4E ] NETwNs64 C:\windows\system32\DRIVERS\Netwsw00.sys 00:19:27.0705 7372 NETwNs64 - ok 00:19:27.0735 7372 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\windows\system32\drivers\nfrd960.sys 00:19:27.0735 7372 nfrd960 - ok 00:19:27.0775 7372 [ 162100E0BC8377710F9D170631921C03 ] NisDrv C:\windows\system32\DRIVERS\NisDrvWFP.sys 00:19:27.0775 7372 NisDrv - ok 00:19:27.0805 7372 [ C6E15F2F95F9C0A6098D43510B604E52 ] NisSrv c:\Program Files\Microsoft Security Client\NisSrv.exe 00:19:27.0815 7372 NisSrv - ok 00:19:27.0845 7372 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\windows\System32\nlasvc.dll 00:19:27.0845 7372 NlaSvc - ok 00:19:28.0005 7372 [ B1EF4686961986DFFB7FE8F18E6FCB5B ] nlsX86cc C:\windows\SysWOW64\nlssrv32.exe 00:19:28.0005 7372 nlsX86cc - ok 00:19:28.0015 7372 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\windows\system32\drivers\Npfs.sys 00:19:28.0015 7372 Npfs - ok 00:19:28.0045 7372 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\windows\system32\nsisvc.dll 00:19:28.0045 7372 nsi - ok 00:19:28.0065 7372 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\windows\system32\drivers\nsiproxy.sys 00:19:28.0065 7372 nsiproxy - ok 00:19:28.0115 7372 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\windows\system32\drivers\Ntfs.sys 00:19:28.0125 7372 Ntfs - ok 00:19:28.0145 7372 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\windows\system32\drivers\Null.sys 00:19:28.0145 7372 Null - ok 00:19:28.0155 7372 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\windows\system32\drivers\nvraid.sys 00:19:28.0155 7372 nvraid - ok 00:19:28.0175 7372 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\windows\system32\drivers\nvstor.sys 00:19:28.0175 7372 nvstor - ok 00:19:28.0195 7372 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\windows\system32\drivers\nv_agp.sys 00:19:28.0195 7372 nv_agp - ok 00:19:28.0355 7372 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE 00:19:28.0355 7372 odserv - ok 00:19:28.0365 7372 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\windows\system32\drivers\ohci1394.sys 00:19:28.0365 7372 ohci1394 - ok 00:19:28.0405 7372 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 00:19:28.0405 7372 ose - ok 00:19:28.0435 7372 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\windows\system32\pnrpsvc.dll 00:19:28.0435 7372 p2pimsvc - ok 00:19:28.0455 7372 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\windows\system32\p2psvc.dll 00:19:28.0455 7372 p2psvc - ok 00:19:28.0475 7372 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\windows\system32\drivers\parport.sys 00:19:28.0475 7372 Parport - ok 00:19:28.0505 7372 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\windows\system32\drivers\partmgr.sys 00:19:28.0505 7372 partmgr - ok 00:19:28.0525 7372 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\windows\System32\pcasvc.dll 00:19:28.0525 7372 PcaSvc - ok 00:19:28.0565 7372 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\windows\system32\drivers\pci.sys 00:19:28.0565 7372 pci - ok 00:19:28.0585 7372 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\windows\system32\drivers\pciide.sys 00:19:28.0585 7372 pciide - ok 00:19:28.0605 7372 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\windows\system32\drivers\pcmcia.sys 00:19:28.0605 7372 pcmcia - ok 00:19:28.0625 7372 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\windows\system32\drivers\pcw.sys 00:19:28.0625 7372 pcw - ok 00:19:28.0645 7372 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\windows\system32\drivers\peauth.sys 00:19:28.0655 7372 PEAUTH - ok 00:19:28.0675 7372 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\windows\SysWow64\perfhost.exe 00:19:28.0675 7372 PerfHost - ok 00:19:28.0725 7372 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\windows\system32\pla.dll 00:19:28.0735 7372 pla - ok 00:19:28.0785 7372 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\windows\system32\umpnpmgr.dll 00:19:28.0795 7372 PlugPlay - ok 00:19:28.0805 7372 [ 9A80707D8B6C1806531BFD7399B3CC76 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll 00:19:28.0805 7372 Pml Driver HPZ12 - ok 00:19:28.0825 7372 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\windows\system32\pnrpauto.dll 00:19:28.0825 7372 PNRPAutoReg - ok 00:19:28.0845 7372 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\windows\system32\pnrpsvc.dll 00:19:28.0845 7372 PNRPsvc - ok 00:19:28.0885 7372 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\windows\System32\ipsecsvc.dll 00:19:28.0885 7372 PolicyAgent - ok 00:19:28.0915 7372 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\windows\system32\umpo.dll 00:19:28.0915 7372 Power - ok 00:19:28.0935 7372 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\windows\system32\DRIVERS\raspptp.sys 00:19:28.0935 7372 PptpMiniport - ok 00:19:28.0955 7372 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\windows\system32\drivers\processr.sys 00:19:28.0955 7372 Processor - ok 00:19:28.0995 7372 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\windows\system32\profsvc.dll 00:19:28.0995 7372 ProfSvc - ok 00:19:29.0005 7372 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\windows\system32\lsass.exe 00:19:29.0005 7372 ProtectedStorage - ok 00:19:29.0015 7372 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\windows\system32\DRIVERS\pacer.sys 00:19:29.0015 7372 Psched - ok 00:19:29.0055 7372 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\windows\system32\drivers\ql2300.sys 00:19:29.0055 7372 ql2300 - ok 00:19:29.0075 7372 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\windows\system32\drivers\ql40xx.sys 00:19:29.0075 7372 ql40xx - ok 00:19:29.0095 7372 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\windows\system32\qwave.dll 00:19:29.0095 7372 QWAVE - ok 00:19:29.0105 7372 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\windows\system32\drivers\qwavedrv.sys 00:19:29.0105 7372 QWAVEdrv - ok 00:19:29.0175 7372 [ A55E7D0D873B2C97585B3B5926AC6ADE ] RapiMgr C:\windows\WindowsMobile\rapimgr.dll 00:19:29.0175 7372 RapiMgr - ok 00:19:29.0195 7372 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\windows\system32\DRIVERS\rasacd.sys 00:19:29.0195 7372 RasAcd - ok 00:19:29.0225 7372 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\windows\system32\DRIVERS\AgileVpn.sys 00:19:29.0225 7372 RasAgileVpn - ok 00:19:29.0235 7372 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\windows\System32\rasauto.dll 00:19:29.0235 7372 RasAuto - ok 00:19:29.0255 7372 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\windows\system32\DRIVERS\rasl2tp.sys 00:19:29.0255 7372 Rasl2tp - ok 00:19:29.0265 7372 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\windows\System32\rasmans.dll 00:19:29.0265 7372 RasMan - ok 00:19:29.0285 7372 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\windows\system32\DRIVERS\raspppoe.sys 00:19:29.0285 7372 RasPppoe - ok 00:19:29.0305 7372 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\windows\system32\DRIVERS\rassstp.sys 00:19:29.0305 7372 RasSstp - ok 00:19:29.0325 7372 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\windows\system32\DRIVERS\rdbss.sys 00:19:29.0325 7372 rdbss - ok 00:19:29.0345 7372 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\windows\system32\drivers\rdpbus.sys 00:19:29.0345 7372 rdpbus - ok 00:19:29.0355 7372 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\windows\system32\DRIVERS\RDPCDD.sys 00:19:29.0355 7372 RDPCDD - ok 00:19:29.0365 7372 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\windows\system32\drivers\rdpencdd.sys 00:19:29.0365 7372 RDPENCDD - ok 00:19:29.0375 7372 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\windows\system32\drivers\rdprefmp.sys 00:19:29.0375 7372 RDPREFMP - ok 00:19:29.0415 7372 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\windows\system32\drivers\rdpvideominiport.sys 00:19:29.0415 7372 RdpVideoMiniport - ok 00:19:29.0465 7372 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\windows\system32\drivers\RDPWD.sys 00:19:29.0475 7372 RDPWD - ok 00:19:29.0495 7372 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\windows\system32\drivers\rdyboost.sys 00:19:29.0495 7372 rdyboost - ok 00:19:29.0545 7372 [ 9276F4D4109FC349925D28E00E533146 ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe 00:19:29.0545 7372 RegSrvc - ok 00:19:29.0565 7372 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\windows\System32\mprdim.dll 00:19:29.0575 7372 RemoteAccess - ok 00:19:29.0605 7372 [ BFA4873CD96D7144DC0059A70E1E358F ] RemoteControl-USBLAN C:\windows\system32\DRIVERS\rcblan.sys 00:19:29.0605 7372 RemoteControl-USBLAN - ok 00:19:29.0625 7372 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\windows\system32\regsvc.dll 00:19:29.0625 7372 RemoteRegistry - ok 00:19:29.0665 7372 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\windows\system32\DRIVERS\rfcomm.sys 00:19:29.0665 7372 RFCOMM - ok 00:19:29.0705 7372 [ 7B04C9843921AB1F695FB395422C5360 ] RimUsb C:\windows\system32\Drivers\RimUsb_AMD64.sys 00:19:29.0705 7372 RimUsb - ok 00:19:29.0725 7372 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\windows\System32\RpcEpMap.dll 00:19:29.0725 7372 RpcEptMapper - ok 00:19:29.0745 7372 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\windows\system32\locator.exe 00:19:29.0745 7372 RpcLocator - ok 00:19:29.0775 7372 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\windows\system32\rpcss.dll 00:19:29.0775 7372 RpcSs - ok 00:19:29.0795 7372 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\windows\system32\DRIVERS\rspndr.sys 00:19:29.0795 7372 rspndr - ok 00:19:29.0825 7372 [ E54A5586A28D0630A79A68BBAB84BFCF ] RSUSBVSTOR C:\windows\system32\Drivers\RtsUVStor.sys 00:19:29.0825 7372 RSUSBVSTOR - ok 00:19:29.0915 7372 [ EE082E06A82FF630351D1E0EBBD3D8D0 ] RTL8167 C:\windows\system32\DRIVERS\Rt64win7.sys 00:19:29.0915 7372 RTL8167 - ok 00:19:29.0965 7372 [ A11AB0AF5C7C2724D493F837C51F1575 ] RtLedService C:\Program Files\Realtek\RtLED\RtLEDService.exe 00:19:29.0965 7372 RtLedService - ok 00:19:30.0035 7372 [ 8E5297D5747A90636D5EFAEC8E466623 ] S6000KNT C:\windows\system32\Drivers\S6000KNT.sys 00:19:30.0045 7372 S6000KNT - ok 00:19:30.0085 7372 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\windows\system32\lsass.exe 00:19:30.0085 7372 SamSs - ok 00:19:30.0105 7372 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\windows\system32\drivers\sbp2port.sys 00:19:30.0105 7372 sbp2port - ok 00:19:30.0205 7372 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe 00:19:30.0215 7372 SBSDWSCService - ok 00:19:30.0245 7372 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\windows\System32\SCardSvr.dll 00:19:30.0245 7372 SCardSvr - ok 00:19:30.0255 7372 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\windows\system32\DRIVERS\scfilter.sys 00:19:30.0255 7372 scfilter - ok 00:19:30.0285 7372 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\windows\system32\schedsvc.dll 00:19:30.0285 7372 Schedule - ok 00:19:30.0305 7372 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\windows\System32\certprop.dll 00:19:30.0305 7372 SCPolicySvc - ok 00:19:30.0325 7372 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\windows\System32\SDRSVC.dll 00:19:30.0335 7372 SDRSVC - ok 00:19:30.0345 7372 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\windows\system32\drivers\secdrv.sys 00:19:30.0345 7372 secdrv - ok 00:19:30.0375 7372 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\windows\system32\seclogon.dll 00:19:30.0375 7372 seclogon - ok 00:19:30.0385 7372 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\windows\system32\sens.dll 00:19:30.0385 7372 SENS - ok 00:19:30.0415 7372 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\windows\system32\sensrsvc.dll 00:19:30.0415 7372 SensrSvc - ok 00:19:30.0435 7372 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\windows\system32\DRIVERS\serenum.sys 00:19:30.0435 7372 Serenum - ok 00:19:30.0445 7372 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\windows\system32\drivers\serial.sys 00:19:30.0445 7372 Serial - ok 00:19:30.0445 7372 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\windows\system32\drivers\sermouse.sys 00:19:30.0445 7372 sermouse - ok 00:19:30.0465 7372 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\windows\system32\sessenv.dll 00:19:30.0465 7372 SessionEnv - ok 00:19:30.0475 7372 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\windows\system32\drivers\sffdisk.sys 00:19:30.0475 7372 sffdisk - ok 00:19:30.0475 7372 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\windows\system32\drivers\sffp_mmc.sys 00:19:30.0475 7372 sffp_mmc - ok 00:19:30.0485 7372 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\windows\system32\drivers\sffp_sd.sys 00:19:30.0485 7372 sffp_sd - ok 00:19:30.0515 7372 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\windows\system32\drivers\sfloppy.sys 00:19:30.0515 7372 sfloppy - ok 00:19:30.0535 7372 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\windows\System32\ipnathlp.dll 00:19:30.0535 7372 SharedAccess - ok 00:19:30.0585 7372 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\windows\System32\shsvcs.dll 00:19:30.0585 7372 ShellHWDetection - ok 00:19:30.0595 7372 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\windows\system32\drivers\SiSRaid2.sys 00:19:30.0595 7372 SiSRaid2 - ok 00:19:30.0615 7372 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\windows\system32\drivers\sisraid4.sys 00:19:30.0615 7372 SiSRaid4 - ok 00:19:30.0645 7372 [ A4FAB5F7818A69DA6E740943CB8F7CA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 00:19:30.0645 7372 SkypeUpdate - ok 00:19:30.0685 7372 [ DD0443BC6CC78A19FD399817F8C51401 ] SmartDefragDriver C:\windows\system32\Drivers\SmartDefragDriver.sys 00:19:30.0685 7372 SmartDefragDriver - ok 00:19:30.0695 7372 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\windows\system32\DRIVERS\smb.sys 00:19:30.0695 7372 Smb - ok 00:19:30.0715 7372 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\windows\System32\snmptrap.exe 00:19:30.0725 7372 SNMPTRAP - ok 00:19:30.0735 7372 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\windows\system32\drivers\spldr.sys 00:19:30.0735 7372 spldr - ok 00:19:30.0785 7372 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\windows\System32\spoolsv.exe 00:19:30.0795 7372 Spooler - ok 00:19:30.0855 7372 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\windows\system32\sppsvc.exe 00:19:30.0865 7372 sppsvc - ok 00:19:30.0885 7372 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\windows\system32\sppuinotify.dll 00:19:30.0885 7372 sppuinotify - ok 00:19:30.0985 7372 [ 86EBD8B1F23E743AAD21F4D5B4D40985 ] SQLBrowser c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe 00:19:30.0995 7372 SQLBrowser - ok 00:19:31.0075 7372 [ 3C432A96363097870995E2A3C8B66ABD ] SQLWriter c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 00:19:31.0075 7372 SQLWriter - ok 00:19:31.0085 7372 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\windows\system32\DRIVERS\srv.sys 00:19:31.0085 7372 srv - ok 00:19:31.0125 7372 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\windows\system32\DRIVERS\srv2.sys 00:19:31.0125 7372 srv2 - ok 00:19:31.0135 7372 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\windows\system32\DRIVERS\srvnet.sys 00:19:31.0135 7372 srvnet - ok 00:19:31.0165 7372 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\windows\System32\ssdpsrv.dll 00:19:31.0165 7372 SSDPSRV - ok 00:19:31.0185 7372 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\windows\system32\sstpsvc.dll 00:19:31.0185 7372 SstpSvc - ok 00:19:31.0205 7372 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\windows\system32\drivers\stexstor.sys 00:19:31.0205 7372 stexstor - ok 00:19:31.0235 7372 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\windows\System32\wiaservc.dll 00:19:31.0245 7372 stisvc - ok 00:19:31.0255 7372 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\windows\system32\DRIVERS\swenum.sys 00:19:31.0255 7372 swenum - ok 00:19:31.0285 7372 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\windows\System32\swprv.dll 00:19:31.0285 7372 swprv - ok 00:19:31.0315 7372 [ 08425CD92972C6430F350A9697F4A553 ] SynTP C:\windows\system32\DRIVERS\SynTP.sys 00:19:31.0325 7372 SynTP - ok 00:19:31.0365 7372 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\windows\system32\sysmain.dll 00:19:31.0375 7372 SysMain - ok 00:19:31.0385 7372 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\windows\System32\TabSvc.dll 00:19:31.0385 7372 TabletInputService - ok 00:19:31.0405 7372 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\windows\System32\tapisrv.dll 00:19:31.0405 7372 TapiSrv - ok 00:19:31.0425 7372 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\windows\System32\tbssvc.dll 00:19:31.0425 7372 TBS - ok 00:19:31.0505 7372 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\windows\system32\drivers\tcpip.sys 00:19:31.0515 7372 Tcpip - ok 00:19:31.0565 7372 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\windows\system32\DRIVERS\tcpip.sys 00:19:31.0575 7372 TCPIP6 - ok 00:19:31.0605 7372 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\windows\system32\drivers\tcpipreg.sys 00:19:31.0605 7372 tcpipreg - ok 00:19:31.0655 7372 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\windows\system32\drivers\tdpipe.sys 00:19:31.0655 7372 TDPIPE - ok 00:19:31.0685 7372 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\windows\system32\drivers\tdtcp.sys 00:19:31.0685 7372 TDTCP - ok 00:19:31.0695 7372 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\windows\system32\DRIVERS\tdx.sys 00:19:31.0695 7372 tdx - ok 00:19:31.0705 7372 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\windows\system32\DRIVERS\termdd.sys 00:19:31.0715 7372 TermDD - ok 00:19:31.0735 7372 [ 2E648163254233755035B46DD7B89123 ] TermService C:\windows\System32\termsrv.dll 00:19:31.0735 7372 TermService - ok 00:19:31.0745 7372 [ F0344071948D1A1FA732231785A0664C ] Themes C:\windows\system32\themeservice.dll 00:19:31.0745 7372 Themes - ok 00:19:31.0765 7372 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\windows\system32\mmcss.dll 00:19:31.0765 7372 THREADORDER - ok 00:19:31.0795 7372 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\windows\System32\trkwks.dll 00:19:31.0805 7372 TrkWks - ok 00:19:31.0875 7372 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe 00:19:31.0875 7372 TrustedInstaller - ok 00:19:31.0885 7372 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\windows\system32\DRIVERS\tssecsrv.sys 00:19:31.0885 7372 tssecsrv - ok 00:19:31.0925 7372 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\windows\system32\drivers\tsusbflt.sys 00:19:31.0925 7372 TsUsbFlt - ok 00:19:31.0955 7372 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\windows\system32\drivers\TsUsbGD.sys 00:19:31.0955 7372 TsUsbGD - ok 00:19:31.0985 7372 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\windows\system32\DRIVERS\tunnel.sys 00:19:31.0985 7372 tunnel - ok 00:19:31.0995 7372 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\windows\system32\drivers\uagp35.sys 00:19:31.0995 7372 uagp35 - ok 00:19:32.0015 7372 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\windows\system32\DRIVERS\udfs.sys 00:19:32.0015 7372 udfs - ok 00:19:32.0045 7372 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\windows\system32\UI0Detect.exe 00:19:32.0045 7372 UI0Detect - ok 00:19:32.0055 7372 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\windows\system32\drivers\uliagpkx.sys 00:19:32.0055 7372 uliagpkx - ok 00:19:32.0085 7372 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\windows\system32\DRIVERS\umbus.sys 00:19:32.0085 7372 umbus - ok 00:19:32.0095 7372 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\windows\system32\DRIVERS\umpass.sys 00:19:32.0095 7372 UmPass - ok 00:19:32.0185 7372 [ 7E5E1603D0FF2D240AE70295C5C3FEFC ] UNS C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe 00:19:32.0195 7372 UNS - ok 00:19:32.0225 7372 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\windows\System32\upnphost.dll 00:19:32.0225 7372 upnphost - ok 00:19:32.0265 7372 [ 43228F8EDD1B0BCDD3145AD246E63D39 ] USBAAPL64 C:\windows\system32\Drivers\usbaapl64.sys 00:19:32.0265 7372 USBAAPL64 - ok 00:19:32.0275 7372 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\windows\system32\DRIVERS\usbccgp.sys 00:19:32.0275 7372 usbccgp - ok 00:19:32.0295 7372 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\windows\system32\drivers\usbcir.sys 00:19:32.0295 7372 usbcir - ok 00:19:32.0315 7372 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\windows\system32\DRIVERS\usbehci.sys 00:19:32.0315 7372 usbehci - ok 00:19:32.0335 7372 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\windows\system32\DRIVERS\usbhub.sys 00:19:32.0335 7372 usbhub - ok 00:19:32.0345 7372 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\windows\system32\drivers\usbohci.sys 00:19:32.0355 7372 usbohci - ok 00:19:32.0355 7372 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\windows\system32\drivers\usbprint.sys 00:19:32.0355 7372 usbprint - ok 00:19:32.0366 7372 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\windows\system32\DRIVERS\USBSTOR.SYS 00:19:32.0376 7372 USBSTOR - ok 00:19:32.0376 7372 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\windows\system32\drivers\usbuhci.sys 00:19:32.0376 7372 usbuhci - ok 00:19:32.0386 7372 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\windows\system32\Drivers\usbvideo.sys 00:19:32.0396 7372 usbvideo - ok 00:19:32.0426 7372 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\windows\System32\uxsms.dll 00:19:32.0426 7372 UxSms - ok 00:19:32.0436 7372 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\windows\system32\lsass.exe 00:19:32.0436 7372 VaultSvc - ok 00:19:32.0446 7372 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\windows\system32\drivers\vdrvroot.sys 00:19:32.0446 7372 vdrvroot - ok 00:19:32.0456 7372 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\windows\System32\vds.exe 00:19:32.0466 7372 vds - ok 00:19:32.0476 7372 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\windows\system32\DRIVERS\vgapnp.sys 00:19:32.0476 7372 vga - ok 00:19:32.0496 7372 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\windows\System32\drivers\vga.sys 00:19:32.0496 7372 VgaSave - ok 00:19:32.0516 7372 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\windows\system32\drivers\vhdmp.sys 00:19:32.0516 7372 vhdmp - ok 00:19:32.0516 7372 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\windows\system32\drivers\viaide.sys 00:19:32.0516 7372 viaide - ok 00:19:32.0536 7372 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\windows\system32\drivers\volmgr.sys 00:19:32.0536 7372 volmgr - ok 00:19:32.0556 7372 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\windows\system32\drivers\volmgrx.sys 00:19:32.0556 7372 volmgrx - ok 00:19:32.0566 7372 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\windows\system32\drivers\volsnap.sys 00:19:32.0576 7372 volsnap - ok 00:19:32.0586 7372 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\windows\system32\drivers\vsmraid.sys 00:19:32.0586 7372 vsmraid - ok 00:19:32.0636 7372 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\windows\system32\vssvc.exe 00:19:32.0646 7372 VSS - ok 00:19:32.0656 7372 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\windows\system32\DRIVERS\vwifibus.sys 00:19:32.0656 7372 vwifibus - ok 00:19:32.0676 7372 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\windows\system32\DRIVERS\vwififlt.sys 00:19:32.0676 7372 vwififlt - ok 00:19:32.0686 7372 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\windows\system32\DRIVERS\vwifimp.sys 00:19:32.0686 7372 vwifimp - ok 00:19:32.0696 7372 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\windows\system32\w32time.dll 00:19:32.0696 7372 W32Time - ok 00:19:32.0726 7372 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\windows\system32\drivers\wacompen.sys 00:19:32.0726 7372 WacomPen - ok 00:19:32.0736 7372 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\windows\system32\DRIVERS\wanarp.sys 00:19:32.0736 7372 WANARP - ok 00:19:32.0736 7372 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\windows\system32\DRIVERS\wanarp.sys 00:19:32.0736 7372 Wanarpv6 - ok 00:19:32.0806 7372 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\windows\system32\Wat\WatAdminSvc.exe 00:19:32.0816 7372 WatAdminSvc - ok 00:19:32.0856 7372 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\windows\system32\wbengine.exe 00:19:32.0866 7372 wbengine - ok 00:19:32.0876 7372 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\windows\System32\wbiosrvc.dll 00:19:32.0876 7372 WbioSrvc - ok 00:19:32.0936 7372 [ 8BDA6DB43AA54E8BB5E0794541DDC209 ] WcesComm C:\windows\WindowsMobile\wcescomm.dll 00:19:32.0936 7372 WcesComm - ok 00:19:32.0976 7372 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\windows\System32\wcncsvc.dll 00:19:32.0986 7372 wcncsvc - ok 00:19:32.0996 7372 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll 00:19:32.0996 7372 WcsPlugInService - ok 00:19:33.0026 7372 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\windows\system32\drivers\wd.sys 00:19:33.0026 7372 Wd - ok 00:19:33.0136 7372 [ 96C4C98FE4866C16FC64E4578A0AA975 ] WDBackup C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe 00:19:33.0136 7372 WDBackup - ok 00:19:33.0186 7372 [ 80F8944EA183004D6EDCBBDCEC166404 ] WDDriveService C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe 00:19:33.0186 7372 WDDriveService - ok 00:19:33.0236 7372 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\windows\system32\drivers\Wdf01000.sys 00:19:33.0246 7372 Wdf01000 - ok 00:19:33.0276 7372 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\windows\system32\wdi.dll 00:19:33.0276 7372 WdiServiceHost - ok 00:19:33.0276 7372 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\windows\system32\wdi.dll 00:19:33.0276 7372 WdiSystemHost - ok 00:19:33.0306 7372 [ 94DC2BF6CBAAA95E369C3756D3115A76 ] wdkmd C:\windows\system32\DRIVERS\WDKMD.sys 00:19:33.0306 7372 wdkmd - ok 00:19:33.0356 7372 [ FD2D1C60CDBDFAB63EF182539D8FFC2D ] WDRulesService C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe 00:19:33.0366 7372 WDRulesService - ok 00:19:33.0406 7372 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\windows\System32\webclnt.dll 00:19:33.0406 7372 WebClient - ok 00:19:33.0416 7372 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\windows\system32\wecsvc.dll 00:19:33.0426 7372 Wecsvc - ok 00:19:33.0436 7372 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\windows\System32\wercplsupport.dll 00:19:33.0436 7372 wercplsupport - ok 00:19:33.0446 7372 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\windows\System32\WerSvc.dll 00:19:33.0456 7372 WerSvc - ok 00:19:33.0466 7372 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\windows\system32\DRIVERS\wfplwf.sys 00:19:33.0466 7372 WfpLwf - ok 00:19:33.0476 7372 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\windows\system32\drivers\wimmount.sys 00:19:33.0476 7372 WIMMount - ok 00:19:33.0506 7372 WinDefend - ok 00:19:33.0516 7372 WinHttpAutoProxySvc - ok 00:19:33.0576 7372 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\windows\system32\wbem\WMIsvc.dll 00:19:33.0586 7372 Winmgmt - ok 00:19:33.0646 7372 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\windows\system32\WsmSvc.dll 00:19:33.0656 7372 WinRM - ok 00:19:33.0706 7372 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\windows\system32\DRIVERS\WinUsb.sys 00:19:33.0706 7372 WinUsb - ok 00:19:33.0736 7372 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\windows\System32\wlansvc.dll 00:19:33.0746 7372 Wlansvc - ok 00:19:33.0816 7372 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 00:19:33.0816 7372 wlcrasvc - ok 00:19:33.0896 7372 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 00:19:33.0906 7372 wlidsvc - ok 00:19:33.0936 7372 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\windows\system32\DRIVERS\wmiacpi.sys 00:19:33.0936 7372 WmiAcpi - ok 00:19:33.0966 7372 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\windows\system32\wbem\WmiApSrv.exe 00:19:33.0966 7372 wmiApSrv - ok 00:19:33.0986 7372 WMPNetworkSvc - ok 00:19:33.0996 7372 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\windows\System32\wpcsvc.dll 00:19:33.0996 7372 WPCSvc - ok 00:19:34.0006 7372 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\windows\system32\wpdbusenum.dll 00:19:34.0016 7372 WPDBusEnum - ok 00:19:34.0046 7372 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\windows\system32\drivers\ws2ifsl.sys 00:19:34.0046 7372 ws2ifsl - ok 00:19:34.0056 7372 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\windows\system32\wscsvc.dll 00:19:34.0056 7372 wscsvc - ok 00:19:34.0096 7372 [ 8D918B1DB190A4D9B1753A66FA8C96E8 ] WSDPrintDevice C:\windows\system32\DRIVERS\WSDPrint.sys 00:19:34.0096 7372 WSDPrintDevice - ok 00:19:34.0106 7372 [ 4A2A5C50DD1A63577D3ACA94269FBC7F ] WSDScan C:\windows\system32\DRIVERS\WSDScan.sys 00:19:34.0106 7372 WSDScan - ok 00:19:34.0106 7372 WSearch - ok 00:19:34.0136 7372 [ 83575C43B2BFE9AB0661A7F957E843C0 ] wsvd C:\windows\system32\DRIVERS\wsvd.sys 00:19:34.0136 7372 wsvd - ok 00:19:34.0206 7372 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\windows\system32\wuaueng.dll 00:19:34.0226 7372 wuauserv - ok 00:19:34.0296 7372 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\windows\system32\drivers\WudfPf.sys 00:19:34.0296 7372 WudfPf - ok 00:19:34.0316 7372 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\windows\system32\DRIVERS\WUDFRd.sys 00:19:34.0316 7372 WUDFRd - ok 00:19:34.0336 7372 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\windows\System32\WUDFSvc.dll 00:19:34.0346 7372 wudfsvc - ok 00:19:34.0376 7372 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\windows\System32\wwansvc.dll 00:19:34.0376 7372 WwanSvc - ok 00:19:34.0396 7372 ================ Scan global =============================== 00:19:34.0426 7372 [ BA0CD8C393E8C9F83354106093832C7B ] C:\windows\system32\basesrv.dll 00:19:34.0456 7372 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\windows\system32\winsrv.dll 00:19:34.0466 7372 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\windows\system32\winsrv.dll 00:19:34.0496 7372 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\windows\system32\sxssrv.dll 00:19:34.0526 7372 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\windows\system32\services.exe 00:19:34.0526 7372 [Global] - ok 00:19:34.0526 7372 ================ Scan MBR ================================== 00:19:34.0536 7372 [ D7AD5AA31A559120C3BA48FD0A1B1636 ] \Device\Harddisk0\DR0 00:19:34.0816 7372 \Device\Harddisk0\DR0 - ok 00:19:34.0816 7372 ================ Scan VBR ================================== 00:19:34.0826 7372 [ 6F39386A1BBD6968327EC29E426DA4F4 ] \Device\Harddisk0\DR0\Partition1 00:19:34.0826 7372 \Device\Harddisk0\DR0\Partition1 - ok 00:19:34.0836 7372 [ AC6D73A827F27D4A615BCF2FF34B9051 ] \Device\Harddisk0\DR0\Partition2 00:19:34.0836 7372 \Device\Harddisk0\DR0\Partition2 - ok 00:19:34.0866 7372 [ 69B5FC3C06143015CAB9779A8068730C ] \Device\Harddisk0\DR0\Partition3 00:19:34.0866 7372 \Device\Harddisk0\DR0\Partition3 - ok 00:19:34.0866 7372 ============================================================ 00:19:34.0866 7372 Scan finished 00:19:34.0866 7372 ============================================================ 00:19:34.0876 4960 Detected object count: 0 00:19:34.0876 4960 Actual detected object count: 0 00:20:34.0882 2004 Deinitialize success
Post #6
I'm not seeing anything in your logs that would raise an alarm. I would suggest trying the password change first and seeing if that stops the emails. If not, we can certainly delve further.

However, it would appear that you have more than one anti-virus solution on your machine. I can see both AVG and Microsoft Security Essentials installed.
Having more than one anti-virus program on your machine, even if only one is running, can cause conflicts and slowdowns in the performance of the machine.
You should completely uninstall one of the programs. The easiest way to do this is to go to your control panel and choose Programs/Features and uninstall the program.

If you have any trouble doing this please let me know.


I can certainly leave this thread open for a few days. Can you please post back and let me know if the emails continue so we know if we need to look deeper with additional tools, or if that resolves the problem?
Post #7
Thank you for your help. I removed one of the malware/antivirus programs. It seemingly is this box causing the troubles, as anytime I add the email address to this laptop, I can watch the smtp relays at godaddy start to fly away… as soon as I remove the address from outlook on this laptop, they stop. Thoughts? Thanks again..
Post #8
Well, I need to ponder that one for a little bit to think in terms of the ins and outs from Outlook to the GoDaddy server, but since no diagnostic tools show us everything, and you definitely have an issue going on that certainly seems like more than just a password issue, let's go ahead and run a more aggressive tool and see if it finds and/or removes anything suspicious.

I'd like you to please leave the email address in the Outlook account while this runs (so that any malicious program that may be picking up and running as a result might be detected) although you DO NOT need to have Outlook open while you run the scan. I just want the email address in there so the possible threat may be a little more detectible (let's cross our fingers).

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
  • Double click on ComboFix.exe & follow the prompts.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Notes:
1. 1. Do not mouse-click anywhere on the screen while it is running. That may cause it to stall. In fact, I suggest you do not do anything else on the computer while Combofix is running as it can cause it to stall. It may appear at times that it isn't doing anything but it is. Just let it run. It may also reboot the machine as a part of what it is doing and that is not unusual. (If your computer requires a login then you WILL need to fill in the login/password for it to continue. If your computer does not have a login then it will continue on it's own..) Then, just sit tight until it finishes. Sometimes it takes 10 minutes, sometimes it takes an hour. Just be patient until the log pops up. If it takes more than an hour and doesn't appear to be doing anything, you can stop it and come back and let me know.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

If you have a problem launching programs after running Combofix, please do not panic! Simply reboot the computer and all should be fine.

After rebooting the computer please open Outlook and see if the problem is persisting. Let me know either way. This may be a bit of a tough one to decipher. Again, while you work on this part, I'll be thinking a little more about it on this end too :)
Post #9
I disabled the catch-all this morning, let's see if that may resolve it before you spend anymore time trying to help me. I appreciate everything from the good people here. Will you keep it open a few days or until I reply? Kindly R
Post #10
Of course, I'll be glad to leave this open until you see if that works, or until we determine if we need to look further at the machine you are using :) Good luck and please let me know if what you do works.
Post #11
Everything is still insane… cannot isolate source machine, if the msgs are even starting from a machine of mine… Is there anyone that could determine anything by a returned Mailer Daemon header with attachments?
Post #12
Why don't you go ahead and PM me the contents of one of the headers. Since I don't know what all it will contain, I'd rather not post it all publicly just to be on the safe side. I'll post back here what (if anything) I can determine. Some headers are easier to read than others. Gmail for instance blocks out almost all useful information, where other mail programs make a lot of information available. So I don't know how much I'll be able to tell from it, but I'll be glad to give it a go.
Post #13
When I trace all the IP addresses shown in the header one stands out. Most of this shows as happening from within the US, but there is one entry that has the Microsoft SMTP (sending server) based in Malaysia which I suspect is not typical for you? So I would suspect that you have a compromised password on one of your machines that is allowing someone to log in remotely and send the spam from your account, or one of your machines has a rootkit on board allowing a remote machine to gain control of the machine. It could be either. And the hard part is this could have been compromised at any time, and the hack is just now showing up. I've had accounts that I haven't used in years all of a sudden start sending spam. I understand your frustration - it's NOT a fun feeling.

Typically, when it's a compromised password, I see spam going out to contacts on the users list, and when it's an infection we see spam going out to unknown users. But that's not always a 100% foolproof way to determine what's going on, it's more a generic determination if you will.

Received: from p3plsmtpa09-08.prod.phx3.secureserver.net ([removed]) by
CO1EHSMHS032.bigfish.com (10.243.66.42) with Microsoft SMTP Server id
14.1.225.23; Tue, 19 Mar 2013 22:18:36 +0000

<—– that part in red is in Malaysia

Now comes the more difficult part. You said that you have several machines that can log into this account on GoDaddy. If you can trace the machine that was logged into your local network IP 10.255.196.35 on March 19th then you probably have your culprit machine. However, if you don't have static IP addresses, and your IP's change daily, that's going to be almost impossible.

Although we didn't run any advanced removal tools on your machine, the initial scans came back clear, so from your work environment, you are the "safe" computer. Let's forumulate a plan of action and then we can move forward with it. First and foremost, I would change your admin password to your GoDaddy account to be safe. I would do that from a known clean computer (perhaps your home computer) so you take the work computers out of the equation. This is important if the hack is coming from GoDaddy back into your Outlook to get control of the account somehow. Having passwords linked obviously complicates things and we want to reset as many of those connections as possible.

1. First, since your machine appears to be free of malware, I would suggest that if possible, you change the password for all users Outlook accounts and access to GoDaddy if they have it, from your machine.
2. Then, run a full antivirus scan on all machines making sure your antivirus definitions are up to date.
3. If you have a main server at work, please check to see you have antivirus installed on it and run a scan there as well, sometimes that is overlooked, the compromise could be there.
3. Install and run Malwarebytes on each of the local machines (a quick scan is fine) removing anything that is found.

If the problem persists, we can do more detailed checks on each machine one at a time to see if there is anything else we can find. Can you tell me if you have an IT department where you work, or are you it? Also, how many machines do you have in your office so I know what we are dealing with?

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI