Spyware / Malware / Virus Removal

Help! Infected With Win32/Small.CA [Solved]

16 min read

Looking for the outcome? Ask AI

genuwine4532 Topic Starter

Post #1March 18, 2013, 7:38 PM UTC

I just got an alert from the Windows 7 Action Center that I have Win32/Small.CA virus on my PC. I did run my Hitman Pro scan and MalwareBytes free that showed Zero threats, but after reading some of the threads on this I think this should not be ignored, please help with cleaning Thanks

Robybel

Post #2March 19, 2013, 2:23 PM UTC

Hi and

genuwine4532

My name is Robybel.

I would be more than happy to take a look at your log and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:

I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
The fixes are specific to your problem and should only be used for the issues on this machine.
Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.

IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.
DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data.

Vista and Windows 7 users:

These tools MUST be run from the executable. (.exe) every time you run them
with Admin Rights (Right click, choose "Run as Administrator")

Stay with this topic until I give you the all clean post.

Having said that….Let's get going!!

==============================

Download Security Check by screen317 from here or here.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

============ Next ==============

Scan with OTL

Download OTL to your desktop.
Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Check the boxes beside LOP Check and Purity Check.
Under Custom Scan paste this in

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
services.exe
/md5stop
%systemroot%\*. /rp /s
%systemdrive%\$Recycle.Bin|@;true;true;true /fp
DRIVES
CREATERESTOREPOINT
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
You may need two posts to fit them both in.

=============================== Next =======================================

Please download aswMBR.exe and save it to your desktop.

Double click aswMBR.exe to start the tool. (Vista/Windows 7 users - right click to run as administrator)
Allow it to update where necessary
Click Scan
Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet.
You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well.

On your next reply please post :
checkup.txt
OTL.txt
Extras.txt
aswMBR log

Let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

genuwine4532

Post #3March 19, 2013, 11:08 PM UTC last edited March 20, 2013, 3:15 AM UTC

Thank you for your help. I was able to run everything fine except aswMBR.exe, it goes through quickly at first while scanning, but then it gets stuck on a Folder I have that has a lot of text and word files in it and then after about 30 minutes stuck on that scanning portion an alert comes up from Windows that says Avast Rootkit has stopped working, and that's the end of it. I tried running it 3 times, and even restarted the PC and still the same issue, I have plenty of RAM, a dual core processor, so not sure how to proceed at this point, send the other logs? Run something else? Thanks

Robybel

Post #4March 20, 2013, 5:00 AM UTC last edited March 20, 2013, 5:01 AM UTC

Hi Genuwine4532

Ok follow this step.

Please read carefully and follow these steps.

Download TDSSKiller and save it to your Desktop.
Extract its contents to your desktop.
Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

🖼Click to load external image (Posted Image)
If an infected file is detected, the default action will be Cure, click on Continue.

🖼Click to load external image (Posted Image)
If a suspicious file is detected, the default action will be Skip, click on Continue.

🖼Click to load external image (Posted Image)
It may ask you to reboot the computer to complete the process. Click on Reboot Now.

🖼Click to load external image (Posted Image)
If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

On your next reply please post :
Other logs
TDSSKiller log

Let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

genuwine4532

Post #5March 20, 2013, 5:21 AM UTC

Okay, here are all the logs

CHECKUP.TXT

Results of screen317's Security Check version 0.99.61
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 9
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Disabled!
avast! Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
MVPS Hosts File
SpywareBlaster 4.6
Spybot - Search & Destroy
Malwarebytes Anti-Malware version 1.70.0.1100
JavaFX 2.1.1
Java 7 Update 11
Java version out of Date!
Adobe Flash Player 11.6.602.180
Adobe Reader 10.1.6 Adobe Reader out of Date!
Mozilla Firefox (19.0.2)
Google Chrome 25.0.1364.152
Google Chrome 25.0.1364.172
````````Process Check: objlist.exe by Laurent````````
Comodo Firewall cmdagent.exe
Comodo Firewall cfp.exe
Alwil Software Avast5 AvastSvc.exe
Alwil Software Avast5 AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 1%
````````````````````End of Log``````````````````````

================================================================================
===================================

OTL.txt

OTL logfile created on: 3/19/2013 2:04:39 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\OLGA\Downloads\VIRUS CLEAN
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.73 Gb Available Physical Memory | 68.22% Memory free
8.00 Gb Paging File | 5.75 Gb Available in Paging File | 71.93% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465.66 Gb Total Space | 226.53 Gb Free Space | 48.65% Space Free | Partition Type: NTFS

Computer Name: OLGA-PC | User Name: OLGA | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\OLGA\Downloads\VIRUS CLEAN\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\TechSmith\Jing\Jing.exe (TechSmith Corporation)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe ()
PRC - C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe ()
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Livedrive\Livedrive.exe (Livedrive Internet Ltd)
PRC - C:\Program Files (x86)\Common Files\DesktopUtil\MCTDUtil.exe (Magic Control Technology Corporation)
PRC - C:\Program Files (x86)\Common Files\DesktopUtil\MCTDesktopSvr.exe ()
PRC - C:\Program Files (x86)\Common Files\DesktopUtil\FDispPos.exe (Magic Control Technology Corporation)
PRC - C:\Windows\SysWOW64\CSHelper.exe ()
PRC - C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtWLan.exe (Realtek Semiconductor Corp.)
PRC - C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtlService.exe (Realtek)

========== Modules (No Company Name) ==========

MOD - C:\Users\OLGA\AppData\Local\Temp\{b0238964-49a9-4709-85ae-c4a483011ca1}\Livedrive.Native.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\64cf6c356be66bb17c4667d6d8aa467b\System.Web.Services.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\cb562e2e4f74ae607f1186f6ec50cec7\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\ba39e27ea796912fce296963622dfbae\WindowsFormsIntegration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\39f4c7717661667c68f9af8c4f6402b9\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\302207b4fa3083899fd8ab4db98cecc5\System.Management.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\01c6cb58745f397c9b7ccf3ab7bfc9cd\System.EnterpriseServices.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\536d704e93ffec9b54e4a0312fb5b996\System.Transactions.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\dd20416f723ee13ffb4173ec1afc4ec4\System.Data.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\abf5f0f6b5d995fb86b0529ac85e14ed\System.DirectoryServices.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f687c43e9fdec031988b33ae722c4613\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\195a77fcc6206f8bb35d419ff2cf0d72\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\866894ebe5258bf9f45d6b063229e990\System.Xaml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b573c6a62bb88df0ee2af59b6a8ca910\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\14f511c47523f19ca591eb207e9e2084\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\5de5d8c1c02e33789e3cf7e3f54c0ec9\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\e10fd15441d278c04a03302880a3e231\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\43cd41484df96d15df949eb17dd88152\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\dfeff31ab1e7cd3480c8942290c92f5d\PresentationFramework.Aero.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\27dcf04ed7a3506045597c02a5a1fc31\System.Core.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\7a9ff5ce3a909d075179a2ac70d8f388\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System\15872842e3e63ddf0f720f406706198e\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3f95a6d480ed1ebe45cf27b770ba94ed\mscorlib.ni.dll ()
MOD - C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe ()
MOD - C:\Program Files (x86)\Livedrive\Livedrive.Localisation.dll ()
MOD - C:\Program Files (x86)\Livedrive\AlphaFS.dll ()
MOD - C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll ()
MOD - C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll ()

========== Services (SafeList) ==========

SRV:64bit: - (!SASCORE) – C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE File not found
SRV:64bit: - (cmdAgent) – C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO)
SRV:64bit: - (avast! Antivirus) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV:64bit: - (GManager) – C:\Windows\SysNative\GManager.exe ()
SRV:64bit: - (ZuneWlanCfgSvc) – C:\Program Files\Zune\ZuneWlanCfgSvc.exe (Microsoft Corporation)
SRV:64bit: - (WMZuneComm) – C:\Program Files\Zune\WMZuneComm.exe (Microsoft Corporation)
SRV:64bit: - (ZuneNetworkSvc) – C:\Program Files\Zune\ZuneNss.exe (Microsoft Corporation)
SRV:64bit: - (L4301_Solar) – C:\Program Files\Logitech\SolarApp\L4301_Solar.exe (Logitech, Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (MozillaMaintenance) – C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AdobeARMservice) – C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (Motorola Device Manager) – C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe ()
SRV - (nvUpdatusService) – C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) – C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (LivedriveVSSService) – C:\Program Files (x86)\Livedrive\VSSService.exe ()
SRV - (SkypeUpdate) – C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (DragonSvc) – C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe (Nuance Communications, Inc.)
SRV - (MCTDesktopSvr) – C:\Program Files (x86)\Common Files\DesktopUtil\MCTDesktopSvr.exe ()
SRV - (CSHelper) – C:\Windows\SysWOW64\CSHelper.exe ()
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (RealtekUSB) – C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtlService.exe (Realtek)
SRV - (EPSON_PM_RPCV4_01) – C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (SEIKO EPSON CORPORATION)

========== Driver Services (SafeList) ==========

DRV:64bit: - (FXDrv32) – C:\Program Files\Foxconn\FOX LiveUpdate\FXDrv64.sys File not found
DRV:64bit: - (FoxAwdWINFLASH64) – C:\Program Files\Foxconn\FOX LiveUpdate\FoxAwdWINFLASH64.SYS File not found
DRV:64bit: - (mctkmd) – C:\Windows\SysNative\drivers\mctkmd64.sys (Magic Control Technology Corporation)
DRV:64bit: - (aswTdi) – C:\Windows\SysNative\drivers\aswTdi.sys (AVAST Software)
DRV:64bit: - (aswSnx) – C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software)
DRV:64bit: - (aswSP) – C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software)
DRV:64bit: - (aswMonFlt) – C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (aswFsBlk) – C:\Windows\SysNative\drivers\aswFsBlk.sys (AVAST Software)
DRV:64bit: - (aswRdr) – C:\Windows\SysNative\drivers\aswRdr2.sys (AVAST Software)
DRV:64bit: - (t1pusb64) – C:\Windows\SysNative\drivers\t1pusb64.sys (Magic Control Technology Corp.)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (vdbus) – C:\Windows\SysNative\drivers\vdbus.sys (COMODO Security Solutions Inc.)
DRV:64bit: - (mctkmdldr) – C:\Windows\SysNative\drivers\mctKmdldr64.sys (Magic Control Technology Corporation)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (CbFs) – C:\Windows\SysNative\drivers\cbfs.sys (EldoS Corporation)
DRV:64bit: - (npf) – C:\Windows\SysNative\drivers\npf.sys (CACE Technologies, Inc.)
DRV:64bit: - (Sftvol) – C:\Windows\SysNative\drivers\Sftvollh.sys (Microsoft Corporation)
DRV:64bit: - (Sftredir) – C:\Windows\SysNative\drivers\Sftredirlh.sys (Microsoft Corporation)
DRV:64bit: - (Sftplay) – C:\Windows\SysNative\drivers\Sftplaylh.sys (Microsoft Corporation)
DRV:64bit: - (Sftfs) – C:\Windows\SysNative\drivers\Sftfslh.sys (Microsoft Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (RTL8187) – C:\Windows\SysNative\drivers\rtl8187.sys (Realtek Semiconductor Corporation )
DRV:64bit: - (RtlProt) – C:\Windows\SysNative\drivers\RtlProt.sys (Windows ® Codename Longhorn DDK provider)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://start.funmoods.com/results.php?f=4&…p;cr=1606821829
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.funmoods.com/?f=1&a;=adknl…p;cr=1606821829
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLM\..\SearchScopes\{6F3D46DB-B736-31BC-428C-36F6EB691F0A}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT2117678
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://start.funmoods.com/results.php?f=4&…p;cr=1606821829

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com/?ocid=OIE9HP
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://us.yahoo.com?fr=fp-comodo
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = D1 E7 9A 93 E5 E3 CB 01 [binary data]
IE - HKCU\..\SearchScopes,Backup.Old.DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://start.funmoods.com/results.php?f=4&…p;cr=1606821829
IE - HKCU\..\SearchScopes\{6F3D46DB-B736-31BC-428C-36F6EB691F0A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{8EEAC88A-079B-4b2c-80C1-7836F79EB40A}: "URL" = http://us.search.yahoo.com/search?p={searc…p;fr=chr-comodo
IE - HKCU\..\SearchScopes\{A9C475D2-0D39-C58A-F73C-57614B472EAC}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;form=ZGAIDF
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT2117678
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;192.168.*.*
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = :

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://yahoo.com"
FF - prefs.js..browser.search.defaultenginename: "Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/"
FF - prefs.js..extensions.enabledAddons: firefox-extension%40shareaholic.com:3.0.1
FF - prefs.js..extensions.enabledAddons: foxmarks%40kei.com:4.1.3
FF - prefs.js..extensions.enabledAddons: plugins%40bf-itservice.de:1.4
FF - prefs.js..extensions.enabledAddons: support%40lastpass.com:2.0.0
FF - prefs.js..extensions.enabledAddons: %7B0545b830-f0aa-4d7e-8820-50a4629a56fe%7D:16.4
FF - prefs.js..extensions.enabledAddons: %7B317B5128-0B0B-49b2-B2DB-1E7560E16C74%7D:2.8.6
FF - prefs.js..extensions.enabledAddons: %7BAE93811A-5C9A-4d34-8462-F7B864FC4696%7D:4.14
FF - prefs.js..extensions.enabledAddons: %7B0b457cAA-602d-484a-8fe7-c1d894a011ba%7D:0.98.28
FF - prefs.js..extensions.enabledAddons: seotoolbar%40seobook.com:1.2.1
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0.2
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.0: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@artistscope.com/ArtistScope DRM plugin 1,version=1.1.0.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npArtistScopeDRM11.dll (ArtistScope)
FF - HKLM\Software\MozillaPlugins\@artistscope.com/ArtistScope plugin 42,version=4.2.0.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npArtistScope42.dll (ArtistScope)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@sun.com/npsopluginmi;version=1.0: C:\Program Files (x86)\OpenOffice.org 3\program [2011/02/11 13:33:47 | 000,000,000 | —D | M]
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@artistscope.com/ArtistScope DRM plugin 1,version=1.1.0.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npArtistScopeDRM11.dll (ArtistScope)
FF - HKCU\Software\MozillaPlugins\@artistscope.com/ArtistScope plugin 42,version=4.2.0.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npArtistScope42.dll (ArtistScope)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\OLGA\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\OLGA\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\Alwil Software\Avast5\WebRep\FF [2012/11/16 15:33:22 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/03/07 17:16:20 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013/03/08 22:29:28 | 000,000,000 | —D | M]

[2012/06/27 20:37:32 | 000,000,000 | —D | M] (No name found) – C:\Users\OLGA\AppData\Roaming\Mozilla\Extensions
[2010/10/15 08:42:19 | 000,000,000 | —D | M] (No name found) – C:\Users\OLGA\AppData\Roaming\Mozilla\Extensions\[removed]
[2013/02/18 13:02:36 | 000,000,000 | —D | M] (No name found) – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions
[2013/01/03 15:45:09 | 000,000,000 | —D | M] (FireShot) – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2012/08/19 11:13:55 | 000,000,000 | —D | M] (SeoQuake) – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74}
[2012/09/20 22:34:28 | 000,000,000 | —D | M] ("Xmarks") – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\[removed]
[2012/06/27 21:00:52 | 000,000,000 | —D | M] (LastPass) – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\[removed]
[2012/12/03 01:16:43 | 000,576,122 | —- | M] () (No name found) – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\[removed]
[2012/10/12 10:27:21 | 000,066,808 | —- | M] () (No name found) – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\[removed]
[2013/01/09 18:50:16 | 002,151,598 | —- | M] () (No name found) – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\[removed]
[2012/06/27 21:07:49 | 000,161,864 | —- | M] () (No name found) – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\[removed]
[2012/06/27 21:15:07 | 000,044,737 | —- | M] () (No name found) – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\[removed]
[2013/02/18 13:02:36 | 000,223,014 | —- | M] () (No name found) – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\[removed]
[2012/11/27 20:03:01 | 000,018,202 | —- | M] () (No name found) – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\{04426594-bce6-4705-b811-bcdba2fd9c7b}.xpi
[2012/10/12 10:27:29 | 000,086,475 | —- | M] () (No name found) – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe}.xpi
[2012/08/02 18:20:48 | 000,375,811 | —- | M] () (No name found) – C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\{AE93811A-5C9A-4d34-8462-F7B864FC4696}.xpi
[2013/03/07 17:16:03 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2013/03/07 17:16:19 | 000,263,064 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2009/01/15 10:53:03 | 000,616,448 | —- | M] (ArtistScope) – C:\Program Files (x86)\mozilla firefox\plugins\npArtistScope42.dll
[2009/02/01 22:06:56 | 000,211,456 | —- | M] (ArtistScope) – C:\Program Files (x86)\mozilla firefox\plugins\npArtistScopeDRM11.dll
[2012/09/01 22:15:18 | 000,002,465 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/05/01 20:37:17 | 000,002,143 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\search.xml
[2013/02/23 01:32:54 | 000,002,086 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{g
oogle:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{
google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q;={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://us.yahoo.com/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\OLGA\AppData\Local\Google\Chrome\Application\25.0.1364.172\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\OLGA\AppData\Local\Google\Chrome\Application\25.0.1364.172\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\OLGA\AppData\Local\Google\Chrome\Application\25.0.1364.172\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: ArtistScope plugin 42 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npArtistScope42.dll
CHR - plugin: ArtistScope DRM plugin 1 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npArtistScopeDRM11.dll
CHR - plugin: Java Deployment Toolkit 7.0.50.255 (Enabled) = C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\dtplugin\npDeployJava1.dll
CHR - plugin: Java™ Platform SE 7 U5 (Enabled) = C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Update (Enabled) = C:\Users\OLGA\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - Extension: avast! WebRep = C:\Users\OLGA\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\

O1 HOSTS File: ([2011/05/11 23:16:10 | 000,434,100 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 14938 more lines…
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (BrowserHelper Class) - {EDF48A39-1442-463F-9F4E-F376A78D034A} - C:\Program Files (x86)\Livedrive\LivedriveExplorerExtensions.dll (Livedrive Internet Ltd)
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O4:64bit: - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4:64bit: - HKLM..\Run: [FDispPos] C:\Program Files (x86)\Common Files\DesktopUtil\Util-Desktop.exe ()
O4:64bit: - HKLM..\Run: [Logitech Download Assistant] C:\Windows\SysNative\LogiLDA.dll (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [MCTDUtil] C:\Program Files (x86)\Common Files\DesktopUtil\Util-Desktop.exe ()
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Zune Launcher] C:\Program Files\Zune\ZuneLauncher.exe (Microsoft Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKCU..\Run: [Jing] C:\Program Files (x86)\TechSmith\Jing\Jing.exe (TechSmith Corporation)
O4 - HKCU..\Run: [Livedrive] C:\Program Files (x86)\Livedrive\Livedrive.exe (Livedrive Internet Ltd)
O4 - HKCU..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000 File not found
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16:64bit: - DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{16A8DBC7-3CF0-40C3-AF69-AF889BCAC036}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\guard64.dll) - C:\Windows\SysNative\guard64.dll (COMODO)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\guard32.dll) - C:\Windows\SysWOW64\guard32.dll (COMODO)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{ad4c5f5b-75ac-11e2-8e70-90fba625f1c5}\Shell - "" = AutoRun
O33 - MountPoints2\{ad4c5f5b-75ac-11e2-8e70-90fba625f1c5}\Shell\AutoRun\command - "" = D:\MotoCastSetup.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2013/03/19 13:54:14 | 004,745,728 | —- | C] (AVAST Software) – C:\Users\OLGA\Documents\aswMBR.exe
[2013/03/19 13:52:35 | 004,745,728 | —- | C] (AVAST Software) – C:\Users\OLGA\Desktop\aswMBR.exe.part
[2013/03/19 13:45:22 | 000,000,000 | —D | C] – C:\Users\OLGA\Desktop\A - MY PLR - PROD SITE
[2013/03/18 11:49:11 | 009,565,552 | —- | C] (SurfRight B.V.) – C:\Users\OLGA\Desktop\HitmanPro_x64.exe
[2013/03/18 11:16:12 | 001,700,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gdiplus.dll
[2013/03/16 21:47:13 | 000,000,000 | —D | C] – C:\Windows\SysNative\ms-MY
[2013/03/16 21:45:03 | 000,000,000 | —D | C] – C:\Users\Public\Documents\microsoft
[2013/03/16 21:45:02 | 000,000,000 | R–D | C] – C:\Users\OLGA\Podcasts
[2013/03/16 21:39:51 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zune
[2013/03/16 21:39:32 | 000,000,000 | —D | C] – C:\Program Files\Zune
[2013/03/16 21:11:36 | 000,143,712 | —- | C] (Magic Control Technology Corporation) – C:\Windows\SysWow64\MCTU.dll
[2013/03/16 21:10:57 | 000,917,120 | —- | C] (Magic Control Technology Corporation) – C:\Windows\SysNative\SilentUtility.exe
[2013/03/16 21:10:57 | 000,917,080 | —- | C] (Magic Control Technology Corporation) – C:\Windows\SysNative\MTrigger2.exe
[2013/03/16 21:10:57 | 000,440,320 | —- | C] (Magic Control Technology Corporation) – C:\Windows\SysNative\SU-T2.exe
[2013/03/16 21:10:57 | 000,274,048 | —- | C] (MCT) – C:\Windows\SysNative\MHK2.DLL
[2013/03/16 21:10:56 | 001,113,728 | —- | C] (Magic Control Technology Corporation) – C:\Windows\SysNative\MTri1+64.exe
[2013/03/16 21:10:56 | 000,336,248 | —- | C] (Magic Control Technology Corporation) – C:\Windows\SysNative\mctsetup64.dll
[2013/03/16 21:10:56 | 000,272,760 | —- | C] (MCT) – C:\Windows\SysNative\MCTHOOKKEY.DLL
[2013/03/16 21:10:53 | 000,315,392 | —- | C] (TODO: ) – C:\Windows\SysWow64\mctudll.exe
[2013/03/16 21:10:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\MCT Corp
[2013/03/16 19:40:30 | 000,143,712 | —- | C] (Magic Control Technology Corporation) – C:\Windows\SysWow64\mctu.dllbak
[2013/03/16 19:40:16 | 000,178,656 | —- | C] (Magic Control Technology Corp.) – C:\Windows\SysNative\drivers\t1pusb64.sys
[2013/03/16 19:40:15 | 000,180,576 | —- | C] (Magic Control Technology Corporation) – C:\Windows\SysNative\mctux.dllbak
[2013/03/16 19:40:15 | 000,180,576 | —- | C] (Magic Control Technology Corporation) – C:\Windows\SysNative\mctux.dll
[2013/03/16 19:40:15 | 000,142,176 | —- | C] (Magic Control Technology Corporation) – C:\Windows\SysNative\drivers\mctkmd64.sys
[2013/03/16 19:40:15 | 000,019,584 | —- | C] (Magic Control Technology Corporation) – C:\Windows\SysNative\drivers\mctKmdldr64.sys
[2013/03/16 19:40:13 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\MCTWDDM
[2013/03/16 19:40:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DesktopUtil
[2013/03/10 01:21:58 | 000,000,000 | —D | C] – C:\Program Files (x86)\CurationSoft
[2013/03/07 17:16:01 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Firefox
[2013/03/06 10:34:37 | 000,000,000 | —D | C] – C:\ProgramData\Wi-Fi Connect
[2013/03/06 10:34:37 | 000,000,000 | —D | C] – C:\ProgramData\WEngineLite
[2013/03/06 10:34:14 | 000,000,000 | —D | C] – C:\ProgramData\WiFiTemp
[2013/03/06 10:33:09 | 000,000,000 | —D | C] – C:\Users\OLGA\AppData\Local\SupportSoft
[2013/03/06 10:32:37 | 000,000,000 | —D | C] – C:\Windows\WIFI
[2013/03/06 00:53:49 | 130,846,192 | —- | C] (COMODO) – C:\Users\OLGA\Documents\cfw_installer.exe.part
[2013/03/06 00:49:29 | 016,409,960 | —- | C] (Safer Networking Limited ) – C:\Users\OLGA\Documents\spybotsd162.exe
[2013/03/05 15:30:45 | 000,000,000 | —D | C] – C:\Users\OLGA\AppData\Local\Evernote
[2013/03/05 15:29:54 | 000,000,000 | —D | C] – C:\Program Files (x86)\Evernote
[2013/03/05 14:50:19 | 000,000,000 | -H-D | C] – C:\SkyDriveTemp
[2013/03/05 13:39:31 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft SkyDrive
[2013/03/05 13:39:23 | 000,000,000 | R–D | C] – C:\Users\OLGA\SkyDrive
[2013/03/05 13:38:48 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft SkyDrive
[2013/02/22 21:03:05 | 000,000,000 | —D | C] – C:\Users\OLGA\Desktop\ARTICLE 2 VIDEOS
[2013/02/22 21:01:28 | 000,000,000 | —D | C] – C:\Users\OLGA\Documents\ArticletoVideoConvertor
[2013/02/22 20:59:49 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\66th.net
[2013/02/22 20:59:23 | 000,000,000 | —D | C] – C:\Article2Video
[2013/02/22 15:51:32 | 000,000,000 | —D | C] – C:\Users\OLGA\AppData\Roaming\CurationSoft
[2013/02/22 10:51:31 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2013/02/22 10:51:31 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2013/02/22 10:51:29 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2013/02/22 10:51:29 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2013/02/22 10:51:28 | 000,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2013/02/22 10:51:27 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2013/02/22 10:51:27 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2013/02/22 10:51:27 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2013/02/22 10:51:25 | 001,494,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2013/02/22 10:51:25 | 001,427,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2013/02/22 10:51:24 | 002,312,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2013/02/22 10:51:24 | 000,729,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2013/02/22 10:51:20 | 000,717,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2013/02/22 10:51:18 | 000,816,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2013/02/22 10:51:18 | 000,599,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2013/02/22 10:49:46 | 005,553,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2013/02/22 10:49:45 | 003,967,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2013/02/22 10:49:44 | 003,913,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2013/02/22 10:48:48 | 000,288,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2013/02/22 10:48:41 | 000,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsrv.dll
[2013/02/22 10:48:40 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setup16.exe
[2013/02/22 10:48:39 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntvdm64.dll
[2013/02/22 10:48:39 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\instnm.exe
[2013/02/22 10:48:39 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wow32.dll
[2013/02/22 10:48:36 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\user.exe
[2012/06/27 21:00:52 | 014,690,376 | —- | C] (LastPass) – C:\Program Files (x86)\Common Files\lpuninstall.exe
[5 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/03/19 13:55:46 | 004,745,728 | —- | M] (AVAST Software) – C:\Users\OLGA\Documents\aswMBR.exe
[2013/03/19 13:54:01 | 004,745,728 | —- | M] (AVAST Software) – C:\Users\OLGA\Desktop\aswMBR.exe.part
[2013/03/19 13:50:02 | 000,000,904 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3160179463-1655843702-38658533-1000UA.job
[2013/03/19 13:50:02 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/03/19 10:50:02 | 000,000,852 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3160179463-1655843702-38658533-1000Core.job
[2013/03/18 11:52:18 | 009,565,552 | —- | M] (SurfRight B.V.) – C:\Users\OLGA\Desktop\HitmanPro_x64.exe
[2013/03/18 11:41:37 | 000,014,832 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/03/18 11:41:37 | 000,014,832 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/03/18 11:31:13 | 000,002,804 | —- | M] () – C:\Windows\SysNative\GManager.ini
[2013/03/18 11:31:06 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2013/03/18 11:30:56 | 3220,627,456 | -HS- | M] () – C:\hiberfil.sys
[2013/03/18 11:19:38 | 000,000,251 | —- | M] () – C:\Delself.bat
[2013/03/18 11:16:12 | 001,700,352 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\gdiplus.dll
[2013/03/17 21:34:28 | 000,024,911 | —- | M] () – C:\Users\OLGA\Desktop\Zach-Expenses2.ods
[2013/03/16 22:23:54 | 000,071,619 | —- | M] () – C:\Users\OLGA\Desktop\AFFILIATE PAYMENTS LOG.ods
[2013/03/16 21:39:54 | 000,000,927 | —- | M] () – C:\Users\Public\Desktop\Zune.lnk
[2013/03/16 20:36:15 | 000,787,338 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2013/03/16 20:36:15 | 000,665,720 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2013/03/16 20:36:15 | 000,123,084 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2013/03/13 11:11:28 | 000,145,194 | —- | M] () – C:\Users\OLGA\Desktop\SITE-RANKS-BACKLINKS-LOG-FINAL.ods
[2013/03/13 09:50:22 | 000,693,976 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2013/03/13 09:50:21 | 000,073,432 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/03/13 09:50:08 | 016,486,616 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerInstaller.exe
[2013/03/12 22:14:11 | 000,001,087 | —- | M] () – C:\Windows\BlogHatter.INI
[2013/03/12 22:03:12 | 000,017,002 | —- | M] () – C:\Users\OLGA\AppData\Local\recently-used.xbel
[2013/03/10 01:21:58 | 000,000,911 | —- | M] () – C:\Users\Public\Desktop\CurationSoft.lnk
[2013/03/08 22:36:24 | 000,444,448 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2013/03/06 10:34:38 | 000,001,023 | —- | M] () – C:\Users\Public\Desktop\HotSpot Search.lnk
[2013/03/06 00:55:26 | 110,539,200 | —- | M] () – C:\Users\OLGA\Documents\avast_free_antivirus_setup.exe.part
[2013/03/06 00:54:39 | 130,846,192 | —- | M] (COMODO) – C:\Users\OLGA\Documents\cfw_installer.exe.part
[2013/03/06 00:49:45 | 016,409,960 | —- | M] (Safer Networking Limited ) – C:\Users\OLGA\Documents\spybotsd162.exe
[2013/02/25 21:18:12 | 000,257,533 | —- | M] () – C:\Users\OLGA\Desktop\System Support.pdf
[2013/02/22 21:46:28 | 000,206,388 | -H– | M] () – C:\Windows\SysWow64\mlfcache.dat
[2013/02/22 21:13:12 | 000,000,152 | —- | M] () – C:\Users\OLGA\Documents\article2video.ini
[2013/02/22 21:00:05 | 000,000,671 | —- | M] () – C:\Users\Public\Desktop\articletovideo.lnk
[2013/02/21 11:33:16 | 000,015,091 | —- | M] () – C:\Users\OLGA\Documents\POEM - mine - Brand New Day.odt
[5 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/03/18 11:19:38 | 000,000,251 | —- | C] () – C:\Delself.bat
[2013/03/16 21:39:54 | 000,000,927 | —- | C] () – C:\Users\Public\Desktop\Zune.lnk
[2013/03/16 21:10:57 | 000,272,512 | —- | C] () – C:\Windows\SysNative\U2VT2Svr.exe
[2013/03/16 21:10:57 | 000,272,512 | —- | C] () – C:\Windows\SysNative\U2VSvr.exe
[2013/03/16 21:10:57 | 000,261,760 | —- | C] () – C:\Windows\SysNative\Util-MTrigger2.exe
[2013/03/16 21:10:57 | 000,195,200 | —- | C] () – C:\Windows\SysNative\Util.exe
[2013/03/16 21:10:57 | 000,048,178 | —- | C] () – C:\Windows\SysNative\Mtrigger2.ini
[2013/03/16 21:10:56 | 000,048,170 | —- | C] () – C:\Windows\SysNative\MTri1+.ini
[2013/03/16 21:10:53 | 000,430,080 | —- | C] () – C:\Windows\SysWow64\UDLL.dll
[2013/03/16 21:10:53 | 000,045,056 | —- | C] () – C:\Windows\SysWow64\mctudll.dll
[2013/03/16 19:40:28 | 000,002,804 | —- | C] () – C:\Windows\SysNative\GManager.ini
[2013/03/16 19:40:15 | 000,313,432 | —- | C] () – C:\Windows\SysNative\GManager.exe
[2013/03/16 19:40:15 | 000,013,440 | —- | C] () – C:\Windows\SysNative\drivers\u3hpatch64.sys
[2013/03/12 22:03:12 | 000,017,002 | —- | C] () – C:\Users\OLGA\AppData\Local\recently-used.xbel
[2013/03/06 10:34:38 | 000,001,023 | —- | C] () – C:\Users\Public\Desktop\HotSpot Search.lnk
[2013/03/06 10:34:26 | 007,640,576 | —- | C] () – C:\Windows\WiFi_Connect.msi
[2013/03/06 00:54:46 | 110,539,200 | —- | C] () – C:\Users\OLGA\Documents\avast_free_antivirus_setup.exe.part
[2013/02/25 21:18:09 | 000,257,533 | —- | C] () – C:\Users\OLGA\Desktop\System Support.pdf
[2013/02/22 21:46:28 | 000,206,388 | -H– | C] () – C:\Windows\SysWow64\mlfcache.dat
[2013/02/22 21:01:28 | 000,000,152 | —- | C] () – C:\Users\OLGA\Documents\article2video.ini
[2013/02/22 21:00:05 | 000,000,671 | —- | C] () – C:\Users\Public\Desktop\articletovideo.lnk
[2013/02/22 15:51:26 | 000,000,923 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CurationSoft.lnk
[2013/02/22 15:51:26 | 000,000,911 | —- | C] () – C:\Users\Public\Desktop\CurationSoft.lnk
[2013/02/21 11:33:14 | 000,015,091 | —- | C] () – C:\Users\OLGA\Documents\POEM - mine - Brand New Day.odt
[2013/02/15 00:03:30 | 000,000,220 | -HS- | C] () – C:\Windows\dwin.sys
[2012/06/17 21:55:11 | 000,000,000 | —- | C] () – C:\Users\OLGA\.gtk-bookmarks
[2012/05/02 00:08:21 | 000,001,087 | —- | C] () – C:\Windows\BlogHatter.INI
[2012/05/01 21:27:02 | 000,000,305 | —- | C] () – C:\Windows\BlogHatterDemo.INI
[2012/04/01 23:21:17 | 000,022,285 | —- | C] () – C:\Windows\cscmondump.bin
[2012/04/01 01:05:12 | 000,007,619 | —- | C] () – C:\Users\OLGA\AppData\Local\resmon.resmoncfg
[2012/01/16 22:08:02 | 000,000,600 | —- | C] () – C:\Users\OLGA\AppData\Local\PUTTY.RND
[2011/11/26 01:45:05 | 000,001,355 | —- | C] () – C:\Users\OLGA\AppData\Roaming\SAS7_000.DAT
[2010/11/24 18:20:29 | 000,060,304 | —- | C] () – C:\Users\OLGA\g2mdlhlpx.exe
[2010/10/15 08:52:34 | 000,409,524 | —- | C] () – C:\Users\OLGA\.ranktracker.properties
[2010/10/14 18:22:52 | 000,000,161 | —- | C] () – C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
[2010/07/28 09:36:23 | 000,000,219 | —- | C] () – C:\Users\OLGA\AppData\Local\TheBestSpinner_Export.dat
[2010/03/23 11:05:20 | 000,581,120 | —- | C] () – C:\Users\OLGA\lame.exe
[2010/03/23 11:05:18 | 000,495,104 | —- | C] () – C:\Users\OLGA\lame_enc.dll
[2010/03/22 21:28:14 | 000,098,526 | —- | C] () – C:\Users\OLGA\history.html
[2010/02/28 11:29:20 | 000,042,860 | —- | C] () – C:\Users\OLGA\switchs.html
[2010/02/28 11:29:20 | 000,008,252 | —- | C] () – C:\Users\OLGA\id3.html
[2008/06/26 12:26:38 | 000,002,113 | —- | C] () – C:\Users\OLGA\index.html
[2008/06/22 20:42:14 | 000,003,920 | —- | C] () – C:\Users\OLGA\contributors.html
[2005/07/28 15:05:08 | 000,004,764 | —- | C] () – C:\Users\OLGA\basic.html
[2005/07/28 15:05:08 | 000,001,661 | —- | C] () – C:\Users\OLGA\examples.html
[2004/08/19 21:36:08 | 000,002,240 | —- | C] () – C:\Users\OLGA\modes.html
[2001/10/24 14:44:34 | 000,006,835 | —- | C] () – C:\Users\OLGA\node6.html
[2000/12/04 00:00:12 | 000,000,708 | —- | C] () – C:\Users\OLGA\lame.css

========== ZeroAccess Check ==========

[2009/07/13 21:55:00 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll – [2012/06/08 22:43:10 | 014,172,672 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2012/06/08 21:41:00 | 012,873,728 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll – [2009/07/13 18:40:51 | 000,909,312 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2010/11/20 05:19:02 | 000,606,208 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll – [2009/07/13 18:41:56 | 000,505,856 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2010/12/28 19:50:11 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Acoustica
[2012/03/15 21:20:42 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Archon Media
[2012/04/02 08:49:32 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\AVG
[2010/07/11 18:45:55 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\BitZipper
[2010/08/02 12:29:27 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\CherryPickerLive
[2010/10/27 08:31:52 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Clipdiary
[2012/01/16 13:55:18 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\CoffeeCup Software
[2013/01/18 01:54:30 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\com.amazon.music.uploader
[2012/04/23 16:47:16 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\com.pageone.Curator
[2012/07/26 10:51:56 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\com.pageone.GuestPostHunter
[2012/11/26 19:05:16 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\ConverterLite
[2011/07/04 06:58:29 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\CoreFTP
[2013/02/22 15:51:32 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\CurationSoft
[2013/03/07 15:53:04 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\FileZilla
[2011/10/25 20:25:54 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\FireShot
[2011/01/01 17:31:10 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Free Audio Editor
[2012/12/01 04:57:25 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\gtk-2.0
[2012/03/18 23:14:33 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\IBP
[2010/07/11 18:12:57 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Inspyder Rank Reporter
[2011/12/08 23:13:18 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\JonathanLeger.com
[2012/09/14 13:41:42 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Livedrive Internet Limited
[2013/03/08 22:11:18 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Motorola
[2013/02/15 23:34:20 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Motorola Mobility
[2011/01/01 17:32:56 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\NCH Swift Sound
[2011/11/26 01:04:35 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Nuance
[2010/07/11 10:40:35 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\OpenOffice.org
[2012/12/11 22:31:03 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\PrimoPDF
[2012/08/11 00:55:35 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\SEO Elite
[2013/01/03 16:27:54 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Sick Marketing
[2012/03/19 01:37:17 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Sick Submitter
[2010/12/14 19:48:32 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\SoftGrid Client
[2010/10/26 12:25:27 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Software Inspection Library
[2010/12/06 17:40:18 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\stickies
[2010/12/28 19:56:46 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\SynthMaker
[2010/12/14 17:48:26 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\TP
[2011/11/27 02:01:01 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\ubot
[2012/12/08 00:13:57 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\UBot Studio
[2010/10/15 20:45:36 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\ViralSubmitter
[2010/11/27 02:54:06 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Web2Mayhem
[2012/05/01 22:16:30 | 000,000,000 | —D | M] – C:\Users\OLGA\AppData\Roaming\Windows Live Writer

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >
[2007/11/07 09:44:20 | 000,855,040 | —- | M] (Microsoft Corporation) – C:\install.exe

< MD5 for: EXPLORER.EXE >
[2011/02/25 23:23:14 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011/02/25 22:19:21 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009/07/13 18:14:20 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011/02/25 22:51:13 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2009/10/30 22:45:39 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011/02/25 22:33:07 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011/02/24 23:19:30 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\explorer.exe
[2011/02/24 23:19:30 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/25 23:14:34 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 05:17:09 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009/08/02 23:19:07 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011/02/24 22:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\SysWOW64\explorer.exe
[2011/02/24 22:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2009/10/30 23:34:59 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009/08/02 22:49:47 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010/11/20 06:24:45 | 002,872,320 | —- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009/10/30 23:38:38 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009/08/02 22:35:50 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/13 18:39:10 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009/10/30 23:00:51 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011/02/25 23:26:45 | 002,870,784 | —- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2009/08/02 23:17:37 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: SERVICES.EXE >
[2009/07/13 18:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\SysNative\services.exe
[2009/07/13 18:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SVCHOST.EXE >
[2012/12/14 17:49:28 | 000,216,424 | —- | M] () MD5=22101A85B3CA2FE2BE05FE9A61A7A83D – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2009/07/13 18:14:41 | 000,020,992 | —- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 – C:\Windows\SysWOW64\svchost.exe
[2009/07/13 18:14:41 | 000,020,992 | —- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 – C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2009/07/13 18:39:46 | 000,027,136 | —- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D – C:\Windows\SysNative\svchost.exe
[2009/07/13 18:39:46 | 000,027,136 | —- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D – C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: USERINIT.EXE >
[2010/11/20 05:17:48 | 000,026,624 | —- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 – C:\Windows\SysWOW64\userinit.exe
[2010/11/20 05:17:48 | 000,026,624 | —- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 – C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/13 18:14:43 | 000,026,112 | —- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 – C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009/07/13 18:39:48 | 000,030,208 | —- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE – C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010/11/20 06:25:24 | 000,030,720 | —- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 – C:\Windows\SysNative\userinit.exe
[2010/11/20 06:25:24 | 000,030,720 | —- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 – C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010/11/20 06:25:30 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\SysNative\winlogon.exe
[2010/11/20 06:25:30 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009/07/13 18:39:52 | 000,389,120 | —- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2012/12/14 17:49:28 | 000,216,424 | —- | M] () MD5=22101A85B3CA2FE2BE05FE9A61A7A83D – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2009/10/28 00:01:57 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009/10/27 23:24:40 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< %systemroot%\*. /rp /s >

< %systemdrive%\$Recycle.Bin|@;true;true;true /fp >

========== Drive Information ==========

Physical Drives
—————

Drive: \\\\.\\PHYSICALDRIVE0 - Fixed hard disk media
Interface type: IDE
Media Type: Fixed hard disk media
Model: WDC WD5000AAKS-08V0A0 ATA Device
Partitions: 2
Status: OK
Status Info: 0

Drive: \\\\.\\PHYSICALDRIVE1 -
Interface type: USB
Media Type:
Model: Generic- Compact Flash USB Device
Partitions: 0
Status: OK
Status Info: 0

Drive: \\\\.\\PHYSICALDRIVE2 -
Interface type: USB
Media Type:
Model: Generic- SM/xD-Picture USB Device
Partitions: 0
Status: OK
Status Info: 0

Drive: \\\\.\\PHYSICALDRIVE3 -
Interface type: USB
Media Type:
Model: Generic- SD/MMC USB Device
Partitions: 0
Status: OK
Status Info: 0

Drive: \\\\.\\PHYSICALDRIVE4 -
Interface type: USB
Media Type:
Model: Generic- MS/MS-Pro USB Device
Partitions: 0
Status: OK
Status Info: 0

Partitions
—————

DeviceID: Disk #0, Partition #0
PartitionType: Installable File System
Bootable: True
BootPartition: True
PrimaryPartition: True
Size: 100.00MB
Starting Offset: 1048576
Hidden sectors: 0

DeviceID: Disk #0, Partition #1
PartitionType: Installable File System
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 466.00GB
Starting Offset: 105906176
Hidden sectors: 0

========== Alternate Data Streams ==========

@Alternate Data Stream - 235 bytes -> C:\ProgramData\Temp:0FF263E8
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:0B4227B4
@Alternate Data Stream - 105 bytes -> C:\ProgramData\Temp:5C321E34

< End of report >

================================================================================
======================

EXTRAS.txt

OTL Extras logfile created on: 3/19/2013 2:04:39 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\OLGA\Downloads\VIRUS CLEAN
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.73 Gb Available Physical Memory | 68.22% Memory free
8.00 Gb Paging File | 5.75 Gb Available in Paging File | 71.93% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465.66 Gb Total Space | 226.53 Gb Free Space | 48.65% Space Free | Partition Type: NTFS

Computer Name: OLGA-PC | User Name: OLGA | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{068DFB5E-DAB7-456A-842B-AC6BC9ABD1A9}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{0DD619F6-CAE0-4749-AD04-2CAEB2AA8C01}" = lport=445 | protocol=6 | dir=in | app=system |
"{120A2862-421C-460E-A35D-456F929DD2A6}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{286B43C0-F0D5-48D3-B805-94EC0D052DD9}" = lport=2869 | protocol=6 | dir=in | app=system |
"{2C44A65E-AD7B-44DA-90F9-C4C21DDCEC81}" = lport=137 | protocol=17 | dir=in | app=system |
"{3037B404-9DE2-4D79-8AE1-B3A589693F56}" = rport=10243 | protocol=6 | dir=out | app=system |
"{38C601BF-C6B5-4ABA-BE70-8AC6F9D10495}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3A983D15-9ED4-4DC2-9424-0A8572681121}" = rport=139 | protocol=6 | dir=out | app=system |
"{42D70513-FB61-4630-B2F8-3B1F37ED7CA3}" = rport=445 | protocol=6 | dir=out | app=system |
"{4E8559D5-F81E-4372-8836-86963061D2A9}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{55487A94-A583-4429-8EDA-F0DE984D5359}" = lport=138 | protocol=17 | dir=in | app=system |
"{7408FF1C-C94F-422F-9933-5D2AB337B52D}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{776448F7-8324-4F8B-9447-520EF0068AD9}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{79969C36-38E6-4409-854B-05A910F75D73}" = rport=138 | protocol=17 | dir=out | app=system |
"{7AEFCFA3-169E-45B1-AE5B-CE6F7DC0F164}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{807841AE-6D0A-4554-8C66-C09FE578BDF3}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8939ED87-A5CA-4ABB-933A-C8D999FBA720}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{8DFB00DA-65B0-4CF0-8E8D-823E07719CE0}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{9B32E45A-3F43-4F82-B5E9-A786D61FC5E1}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{ABE26194-4A65-42C5-8DE2-D94ACBAD5AAA}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C59320DE-F3DA-4C70-BACB-253000AE730C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{D39641A4-CF16-4FD0-9FC0-5694689C2081}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{D93C910A-561B-49C9-9974-9C5B8F67F5E1}" = rport=137 | protocol=17 | dir=out | app=system |
"{EC508BA1-05DD-4B60-BCD1-3C253A0B83A3}" = lport=10243 | protocol=6 | dir=in | app=system |
"{FDF36097-A74E-4F99-AADE-8C3763970B2C}" = lport=139 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{043EC9A9-B1EF-44F8-B460-59AA8923BF54}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{050521DC-C0FC-4538-88FD-07FFE05DD955}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{2030B295-E9C7-4CFC-9C99-18BCBB6AB8A5}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{210E4F95-6B7D-4060-8D33-1B2E9EB492EE}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{26E759DE-3955-44FE-8B26-CFC789F61F42}" = protocol=6 | dir=in | app=c:\users\olga\appdata\roaming\sick submitter\sickrun.exe |
"{272B9B18-4A01-4905-A1BF-556023CB0695}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{30B1ADFC-6DEF-4E50-98DB-5229D7DAD9B9}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{35AECF6F-221C-4802-8DB4-CCC0396A0C27}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{40FAB968-4945-4DC5-AA9E-268B3E24EF3C}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{419CED0C-8440-4E48-BADA-D82408E6F5C0}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{419DAB6F-D5D2-4360-8A10-413A72C7B9BE}" = protocol=17 | dir=in | app=c:\users\olga\appdata\roaming\sick submitter\submitter.exe |
"{4D949ACD-EA3A-490E-BC2C-A73FBD85BEC0}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{5AB7ED89-3831-4EF3-BB50-6AEC76E32401}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{5AF042F4-6A7D-4728-8E37-EA0A0AA99160}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{5B0C3B3E-9600-405C-83BD-E0ABEC5F1CDE}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{5C7D01F4-F9C1-416E-8057-E4BAB377F15E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{68A4F191-B02F-42AB-B7DB-D5F06F5DC962}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{8A99585A-3292-42DE-9E58-DE973D6CC678}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{903CE32A-DE00-4F5E-9C68-F8969B30B3D0}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{927BAFDB-A298-432C-B20C-F7BCBEF919A4}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{92A8D25C-9F25-4A6A-8989-23EDFD509F10}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{99D4ECEF-26B9-46B0-9528-3624E5F3A383}" = protocol=17 | dir=in | app=c:\users\olga\appdata\roaming\sick submitter\sickrun.exe |
"{9ED71D3D-BD3F-414A-8982-740448C06FDF}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{AFBB200F-326A-430E-BC8E-7C3853C8ECB3}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{B1EF9F46-2766-4F1C-8327-CDEB22F04899}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B40DFAC8-93AF-4044-9E28-49C1043AEACC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B80C0546-3E98-46C4-90F8-8A254E773852}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C4837494-6BCF-44C0-B939-AF2771E32895}" = protocol=6 | dir=in | app=c:\users\olga\appdata\roaming\sick submitter\submitter.exe |
"{D0ED7B9D-FF75-4C26-8F7A-83439B01899A}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd8\powerdvd8.exe |
"{D6B12C97-F9C0-48E4-98B1-99AD3E4BCD3D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{E6A7AF5D-0E2E-435A-915A-05D6B5E53430}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{F4A6B6DB-E1E5-40D3-AB86-EAF3049D0296}" = protocol=6 | dir=out | app=system |
"TCP Query User{7C48127B-47EB-4A66-AD25-7247989E2B77}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe |
"UDP Query User{0976425B-F627-49DE-9DFD-C7FA62A342B8}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07EEE598-5F21-4B57-B40B-46592625B3D9}" = Zune Language Pack (PTB)
"{1493B2AE-0261-47D2-B1AA-F4DAD0F6C48B}" = iTunes
"{2A9DFFD8-4E09-4B91-B957-454805B0D7C4}" = Zune Language Pack (CHS)
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{3589A659-F732-4E65-A89A-5438C332E59D}" = Zune Language Pack (ELL)
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{4A5A427F-BA39-4BF0-7777-9A47FBE60C9F}" = Visual C++ 9.0 Runtime for Dragon NaturallySpeaking 64bit (x64)
"{51C839E1-2BE4-4E77-A1BA-CCEA5DAFA741}" = Zune Language Pack (KOR)
"{57C51D56-B287-4C11-9192-EC3C46EF76A4}" = Zune Language Pack (RUS)
"{5C93E291-A1CC-4E51-85C6-E194209FCDB4}" = Zune Language Pack (PTG)
"{5DEFD397-4012-46C3-B6DA-E8013E660772}" = Zune Language Pack (NOR)
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6740BCB0-5863-47F4-80F4-44F394DE4FE2}" = Zune Language Pack (NLD)
"{6B33492E-FBBC-4EC3-8738-09E16E395A10}" = Zune Language Pack (ESP)
"{6CF54C7E-35D9-40A7-9D78-A13B3C7DB5C0}" = Livedrive
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{6EB931CD-A7DA-4A44-B74A-89C8EB50086F}" = Zune Language Pack (SVE)
"{76BA306B-2AA0-47C0-AB6B-F313AB56C136}" = Zune Language Pack (MSL)
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8960A0A1-BB5A-479E-92CF-65AB9D684B43}" = Zune Language Pack (PLK)
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B112338-2B08-4851-AF84-E7CAD74CEB32}" = Zune Language Pack (DAN)
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-006D-0409-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010
"{92ECE3F9-591E-4C12-8A62-B9FCE38BF646}" = Zune Language Pack (IND)
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B75648B-6C30-4A0D-9DE6-0D09D20AF5A5}" = Zune
"{A5A53EA8-A11E-49F0-BDF5-AE536426A31A}" = Zune Language Pack (CHT)
"{A8F2E50B-86E2-4D96-9BD2-9758BCC6F9B3}" = Zune Language Pack (CSY)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 306.97
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B4870774-5F3A-46D9-9DFE-06FB5599E26B}" = Zune Language Pack (FIN)
"{BE236D9A-52EC-4A17-82DA-84B5EAD31E3E}" = Zune Language Pack (DEU)
"{C5D37FFA-7483-410B-982B-91E93FD3B7DA}" = Zune Language Pack (ITA)
"{C68D33B1-0204-4EBE-BC45-A6E432B1D13A}" = Zune Language Pack (FRA)
"{C6BE19C6-B102-4038-B2A6-1C313872DBB4}" = Zune Language Pack (HUN)
"{CE52672C-A0E9-4450-8875-88A221D5CD50}" = Windows Live ID Sign-in Assistant
"{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}" = Microsoft SQL Server Compact 3.5 SP2 x64 ENU
"{D6AB1F5B-FED6-49A9-9747-327BD28FB3C7}" = COMODO Internet Security
"{D8A781C9-3892-4E2E-9320-480CF896CFBB}" = Zune Language Pack (JPN)
"{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F2CB8C3C-9C9E-4FAB-9067-655601C5F748}" = Windows Mobile Device Updater Component
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"EPSON Printer and Utilities" = EPSON Printer Software
"GIMP-2_is1" = GIMP 2.8.2
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"SolarApp" = Logitech Solar App 1.0
"Zune" = Zune

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = LG CyberLink YouCam
"{04179174-F3AC-4CE6-BBBE-83B46D5041CB}" = SocialBot
"{0454BB9A-2A7A-4214-BDFF-937F7A711A44}" = Windows Live Communications Platform
"{0C2C2CEB-BD86-40B4-ABC7-53510CBF2381}" = Encoder
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{108404C7-6C48-4F2F-84C5-654F2597A20F}_is1" = BlogHatter Pro 2010 v3.3
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{18272881-CFC0-434D-A975-E5BE44206AA0}" = Windows Live UX Platform Language Pack
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1A238924-45D4-4673-912C-808A4FF72B4C}" = Insert Video
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = LG Power Tools
"{22800204-9E53-45C7-B6F3-5BB0F1C1A147}" = Jing
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 11
"{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = LG CyberLink PowerDVD
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{30F99474-EBE3-4134-A02B-F6CD38CFE243}" = Photo Gallery
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{3E171899-0175-47CC-84C4-562ACDD4C021}" = OpenOffice.org 3.3
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = LG CyberLink Power2Go
"{43523FEF-9D8E-4572-BB11-0E914D366E0A}" = LightScribe Template Labeler
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CCBD1F4-CEEC-452A-9CB8-46564B501315}" = Windows Live UX Platform
"{5AF4B3C4-C393-48D7-AC7E-8E7615579548}" = Adobe AIR
"{5BABDA39-61CF-41EE-992D-4054B6649A9B}" = Movie Maker
"{5F1AB799-8AA1-B9EC-AB44-D995612BDA73}" = CurationSoft
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{63EC2120-1742-4625-AA47-C6A8AEC9C64C}" = Apple Application Support
"{6A8DB215-7BCD-4377-B015-2E4541A3E7C6}" = Windows Live PIMT Platform
"{70217FBC-0A7F-4FCE-819E-F17D265A2099}" = Microsoft Visual Round Trip Analyzer v3.0.0253.1024
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{81C5AD1D-C7C6-48AC-AC85-8F04293B1780}" = SEE2 Xtreme UV150 / UV250 12.01.1108.1177
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{8A642ACD-CE3A-4A23-A8B1-A0F7EB12B214}" = Windows Live SOXE Definitions
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{97C82B44-D408-4F14-9252-47FC1636D23E}_is1" = IZArc 4.0 beta 1
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A85CDBC3-BEDF-4243-A107-4BF81351F84B}" = Magic Article Submitter
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.6)
"{ADD5DB49-72CF-11D8-9D75-000129760D75}" = LG CyberLink PowerBackup
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = LG CyberLink PowerProducer
"{BE686891-3C56-4714-AFEF-341A7867BA80}" = REALTEK RTL8187 Wireless LAN Driver and Utility
"{BE7E6C3D-A42B-4BA3-9767-124EB8ED27E3}" = LightScribe System Software
"{C034A6F9-6569-491B-B3BF-F5D15221A708}" = Windows Live Essentials
"{C174E89D-E899-C7A2-310A-47A04A585D4A}" = GuestPostHunter
"{C424CD5E-EA05-4D3E-B5DA-F9F149E1D3AC}" = Windows Live Installer
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LG CyberLink LabelPrint
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"{C9B6EFD0-4F01-4BBA-8374-39AD99A3ED72}" = Windows Live Photo Common
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240B2}" = WinZip 11.2
"{D888F114-7537-4D48-AF03-5DA9C82D7540}" = Photo Common
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218
"{ED6C77F9-4D7E-447C-9EC0-9A212D075535}" = Movie Maker
"{EDEA8AB7-7683-4ED2-AA19-E6C078064C0D}" = Microsoft WSE 3.0
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{EFFA53BC-8C04-2E21-3D90-A13B1697B0CA}" = Dragon NaturallySpeaking 11
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FAE96E6F-E6D1-4F1F-A544-07A6471437E1}" = CommentKahuna
"{FC6C7107-7D72-41A1-A031-3CE751159BAB}" = Photo Gallery
"{FE7C0B3D-50B9-4951-BE78-A321CBF86552}" = Windows Live SOXE
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Allscoop RSS Submit Pro 1.0" = Allscoop RSS Submit Pro 1.0
"Article_0" = Article2Video 1.3
"ArtistScope Plugin FX4.2.0.3" = ArtistScope Plugin FX
"ASIO4ALL" = ASIO4ALL
"avast" = avast! Free Antivirus
"CamStudio" = CamStudio
"CoffeeCup HTML Editor" = CoffeeCup HTML Editor
"com.pageone.GuestPostHunter" = GuestPostHunter
"conduitEngine" = Conduit Engine
"ConverterLite" = ConverterLite 1.6.1
"CurationSoft" = CurationSoft
"eBook Cover Maker Pro 1_is1" = eBook Cover Maker Pro Version 1
"EPSON Scanner" = EPSON Scan
"FaceDub" = FaceDub
"FileZilla Client" = FileZilla Client 3.6.0.2
"Free Audio Editor" = Free Audio Editor
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = LG CyberLink YouCam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = LG Power Tools
"InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = LG CyberLink PowerDVD
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = LG CyberLink Power2Go
"InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = LG CyberLink PowerProducer
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LG CyberLink LabelPrint
"LastPass" = LastPass (uninstall only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.70.0.1100
"Micro Niche Finder 5.0_is1" = Micro Niche Finder 5.0
"MixPad" = MixPad Audio Mixer
"Mozilla Firefox 19.0.2 (x86 en-US)" = Mozilla Firefox 19.0.2 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"PhotoPad" = PhotoPad Image Editor
"SMPlayer" = SMPlayer 0.6.9
"SpywareBlaster_is1" = SpywareBlaster 4.6
"Submitter" = Submitter
"TheBestSpinner" = TheBestSpinner
"TheBestSpinner3" = TheBestSpinner3
"VideoPad" = VideoPad Video Editor
"WavePad" = WavePad Sound Editor
"WinLiveSuite" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1.1
"Xenu's Link Sleuth" = Xenu's Link Sleuth

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"GoToMeeting" = GoToMeeting 5.0.0.799

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 1/29/2013 3:11:12 AM | Computer Name = OLGA-PC | Source = MsiInstaller | ID = 11606
Description =

Error - 1/29/2013 3:11:12 AM | Computer Name = OLGA-PC | Source = MsiInstaller | ID = 11606
Description =

Error - 1/29/2013 3:11:12 AM | Computer Name = OLGA-PC | Source = MsiInstaller | ID = 1023
Description =

Error - 1/29/2013 3:25:52 AM | Computer Name = OLGA-PC | Source = Application Hang | ID = 1002
Description = The program firefox.exe version 18.0.1.4764 stopped interacting with
Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 1748 Start
Time: 01cdfdeedc72b8ad Termination Time: 16 Application Path: C:\Program Files (x86)\Mozilla
Firefox\firefox.exe Report Id: 154077c1-69e5-11e2-9359-90fba625f1c5

Error - 1/30/2013 7:54:12 PM | Computer Name = OLGA-PC | Source = Application Hang | ID = 1002
Description = The program Explorer.EXE version 6.1.7601.17567 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: c80 Start
Time: 01cdfe0a80690822 Termination Time: 446 Application Path: C:\Windows\Explorer.EXE

Report
Id: 4f19b39e-6b38-11e2-b2f2-90fba625f1c5

Error - 2/5/2013 5:53:16 PM | Computer Name = OLGA-PC | Source = Application Hang | ID = 1002
Description = The program soffice.bin version 3.3.9556.500 stopped interacting with
Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 116c Start
Time: 01ce00b87822c164 Termination Time: 7995 Application Path: C:\Program Files
(x86)\OpenOffice.org 3\program\soffice.bin Report Id: 32e0cb0c-6fde-11e2-ab24-90fba625f1c5

Error - 2/8/2013 5:27:20 PM | Computer Name = OLGA-PC | Source = Application Error | ID = 1000
Description = Faulting application name: EXCEL.EXE, version: 12.0.6665.5003, time
stamp: 0x5061d2a8 Faulting module name: EXCEL.EXE, version: 12.0.6665.5003, time
stamp: 0x5061d2a8 Exception code: 0xc0000005 Fault offset: 0x0004e160 Faulting process
id: 0xb40 Faulting application start time: 0x01ce06430ad1d581 Faulting application
path: C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE Faulting module path: C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE
Report
Id: 5147dd4a-7236-11e2-b879-90fba625f1c5

Error - 2/9/2013 3:12:05 AM | Computer Name = OLGA-PC | Source = Application Error | ID = 1000
Description = Faulting application name: BlogHatter.exe, version: 3.4.0.0, time
stamp: 0x00000000 Faulting module name: KERNELBASE.dll, version: 6.1.7601.18015,
time stamp: 0x50b83c8a Exception code: 0x0eedfade Fault offset: 0x0000c41f Faulting
process id: 0x15b8 Faulting application start time: 0x01ce0683c68a672f Faulting application
path: C:\Program Files (x86)\BlogHatterPro\BlogHatter.exe Faulting module path:
C:\Windows\syswow64\KERNELBASE.dll Report Id: 019d90d5-7288-11e2-b879-90fba625f1c5

Error - 2/9/2013 3:12:20 AM | Computer Name = OLGA-PC | Source = Application Error | ID = 1000
Description = Faulting application name: BlogHatter.exe, version: 3.4.0.0, time
stamp: 0x00000000 Faulting module name: KERNELBASE.dll, version: 6.1.7601.18015,
time stamp: 0x50b83c8a Exception code: 0x0eedfade Fault offset: 0x0000c41f Faulting
process id: 0x15b8 Faulting application start time: 0x01ce0683c68a672f Faulting application
path: C:\Program Files (x86)\BlogHatterPro\BlogHatter.exe Faulting module path:
C:\Windows\syswow64\KERNELBASE.dll Report Id: 0a7d1e78-7288-11e2-b879-90fba625f1c5

Error - 2/11/2013 5:26:47 PM | Computer Name = OLGA-PC | Source = Application Hang | ID = 1002
Description = The program firefox.exe version 18.0.2.4780 stopped interacting with
Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: bb0 Start
Time: 01ce0640bfb4e9d6 Termination Time: 2292 Application Path: C:\Program Files
(x86)\Mozilla Firefox\firefox.exe Report Id:

Error - 2/12/2013 4:36:05 AM | Computer Name = OLGA-PC | Source = Application Error | ID = 1000
Description = Faulting application name: wmprph.exe, version: 12.0.7600.16385, time
stamp: 0x4a5bd018 Faulting module name: wmp.dll, version: 12.0.7601.17514, time
stamp: 0x4ce7ca81 Exception code: 0xc0000005 Fault offset: 0x00000000004af490 Faulting
process id: 0x1234 Faulting application start time: 0x01ce08dcc38335c9 Faulting application
path: C:\Program Files\Windows Media Player\wmprph.exe Faulting module path: C:\Windows\system32\wmp.dll
Report
Id: 3ccbc4db-74ef-11e2-8a11-90fba625f1c5

Error - 2/12/2013 8:36:40 PM | Computer Name = OLGA-PC | Source = Application Error | ID = 1000
Description = Faulting application name: wmprph.exe, version: 12.0.7600.16385, time
stamp: 0x4a5bd018 Faulting module name: wmp.dll, version: 12.0.7601.17514, time
stamp: 0x4ce7ca81 Exception code: 0xc0000005 Fault offset: 0x00000000004af490 Faulting
process id: 0x131c Faulting application start time: 0x01ce097f6d36f488 Faulting application
path: C:\Program Files\Windows Media Player\wmprph.exe Faulting module path: C:\Windows\system32\wmp.dll
Report
Id: 6df491d0-7575-11e2-8afd-90fba625f1c5

Error - 2/16/2013 12:55:37 PM | Computer Name = OLGA-PC | Source = Application Hang | ID = 1002
Description = The program firefox.exe version 18.0.2.4780 stopped interacting with
Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 11f8 Start
Time: 01ce09b9c8aa963e Termination Time: 16017 Application Path: C:\Program Files
(x86)\Mozilla Firefox\firefox.exe Report Id: 9c11a139-7859-11e2-8e70-90fba625f1c5

Error - 2/19/2013 7:07:02 PM | Computer Name = OLGA-PC | Source = Application Hang | ID = 1002
Description = The program BlogHatter.exe version 3.4.0.0 stopped interacting with
Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 1220 Start
Time: 01ce0ef53a4b1727 Termination Time: 245 Application Path: C:\Program Files (x86)\BlogHatterPro\BlogHatter.exe

Report
Id: 06bac749-7ae9-11e2-9565-90fba625f1c5

[ System Events ]
Error - 3/18/2013 2:24:02 PM | Computer Name = OLGA-PC | Source = Service Control Manager | ID = 7038
Description = The nvUpdatusService service was unable to log on as .\UpdatusUser
with the currently configured password due to the following error: %%1330 To ensure
that the service is configured properly, use the Services snap-in in Microsoft
Management Console (MMC).

Error - 3/18/2013 2:24:02 PM | Computer Name = OLGA-PC | Source = Service Control Manager | ID = 7000
Description = The NVIDIA Update Service Daemon service failed to start due to the
following error: %%1069

Error - 3/18/2013 2:28:05 PM | Computer Name = OLGA-PC | Source = Service Control Manager | ID = 7022
Description = The Windows Update service hung on starting.

Error - 3/18/2013 2:31:10 PM | Computer Name = OLGA-PC | Source = Service Control Manager | ID = 7000
Description = The SAS Core Service service failed to start due to the following
error: %%2

Error - 3/18/2013 2:31:12 PM | Computer Name = OLGA-PC | Source = Service Control Manager | ID = 7001
Description = The Client Virtualization Handler service depends on the Application
Virtualization Client service which failed to start because of the following error:
%%1058

Error - 3/18/2013 2:31:42 PM | Computer Name = OLGA-PC | Source = Service Control Manager | ID = 7000
Description = The Sftfs service failed to start due to the following error: %%2

Error - 3/18/2013 2:32:13 PM | Computer Name = OLGA-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the SBSD
Security Center Service service to connect.

Error - 3/18/2013 2:32:13 PM | Computer Name = OLGA-PC | Source = Service Control Manager | ID = 7000
Description = The SBSD Security Center Service service failed to start due to the
following error: %%1053

Error - 3/18/2013 2:34:27 PM | Computer Name = OLGA-PC | Source = Service Control Manager | ID = 7038
Description = The nvUpdatusService service was unable to log on as .\UpdatusUser
with the currently configured password due to the following error: %%1330 To ensure
that the service is configured properly, use the Services snap-in in Microsoft
Management Console (MMC).

Error - 3/18/2013 2:34:27 PM | Computer Name = OLGA-PC | Source = Service Control Manager | ID = 7000
Description = The NVIDIA Update Service Daemon service failed to start due to the
following error: %%1069

< End of report >

================================================================================
=================================================================================
======

KASPERSKY REPORT

22:14:36.0202 4776 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
22:14:36.0873 4776 ============================================================
22:14:36.0873 4776 Current date / time: 2013/03/19 22:14:36.0873
22:14:36.0873 4776 SystemInfo:
22:14:36.0873 4776
22:14:36.0873 4776 OS Version: 6.1.7601 ServicePack: 1.0
22:14:36.0873 4776 Product type: Workstation
22:14:36.0873 4776 ComputerName: OLGA-PC
22:14:36.0873 4776 UserName: OLGA
22:14:36.0873 4776 Windows directory: C:\Windows
22:14:36.0873 4776 System windows directory: C:\Windows
22:14:36.0873 4776 Running under WOW64
22:14:36.0873 4776 Processor architecture: Intel x64
22:14:36.0873 4776 Number of processors: 2
22:14:36.0873 4776 Page size: 0x1000
22:14:36.0873 4776 Boot type: Normal boot
22:14:36.0873 4776 ============================================================
22:14:38.0370 4776 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
22:14:38.0417 4776 ============================================================
22:14:38.0417 4776 \Device\Harddisk0\DR0:
22:14:38.0417 4776 MBR partitions:
22:14:38.0417 4776 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
22:14:38.0417 4776 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x3A353030
22:14:38.0417 4776 ============================================================
22:14:38.0511 4776 C: <-> \Device\Harddisk0\DR0\Partition2
22:14:38.0511 4776 ============================================================
22:14:38.0511 4776 Initialize success
22:14:38.0511 4776 ============================================================
22:15:03.0096 3020 ============================================================
22:15:03.0096 3020 Scan started
22:15:03.0096 3020 Mode: Manual;
22:15:03.0096 3020 ============================================================
22:15:04.0282 3020 ================ Scan services =============================
22:15:04.0329 3020 !SASCORE - ok
22:15:04.0453 3020 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
22:15:04.0469 3020 1394ohci - ok
22:15:04.0500 3020 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
22:15:04.0500 3020 ACPI - ok
22:15:04.0547 3020 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
22:15:04.0547 3020 AcpiPmi - ok
22:15:04.0625 3020 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
22:15:04.0625 3020 AdobeARMservice - ok
22:15:04.0750 3020 [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
22:15:04.0750 3020 AdobeFlashPlayerUpdateSvc - ok
22:15:04.0781 3020 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
22:15:04.0781 3020 adp94xx - ok
22:15:04.0812 3020 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
22:15:04.0812 3020 adpahci - ok
22:15:04.0828 3020 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
22:15:04.0828 3020 adpu320 - ok
22:15:04.0859 3020 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
22:15:04.0859 3020 AeLookupSvc - ok
22:15:04.0906 3020 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
22:15:04.0906 3020 AFD - ok
22:15:04.0937 3020 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
22:15:04.0937 3020 agp440 - ok
22:15:04.0953 3020 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
22:15:04.0953 3020 ALG - ok
22:15:04.0968 3020 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
22:15:04.0968 3020 aliide - ok
22:15:04.0984 3020 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
22:15:04.0984 3020 amdide - ok
22:15:05.0015 3020 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
22:15:05.0015 3020 AmdK8 - ok
22:15:05.0031 3020 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
22:15:05.0031 3020 AmdPPM - ok
22:15:05.0062 3020 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
22:15:05.0062 3020 amdsata - ok
22:15:05.0093 3020 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
22:15:05.0093 3020 amdsbs - ok
22:15:05.0109 3020 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
22:15:05.0109 3020 amdxata - ok
22:15:05.0140 3020 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
22:15:05.0140 3020 AppID - ok
22:15:05.0155 3020 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
22:15:05.0155 3020 AppIDSvc - ok
22:15:05.0187 3020 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
22:15:05.0202 3020 Appinfo - ok
22:15:05.0202 3020 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
22:15:05.0202 3020 arc - ok
22:15:05.0218 3020 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
22:15:05.0218 3020 arcsas - ok
22:15:05.0358 3020 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
22:15:05.0374 3020 aspnet_state - ok
22:15:05.0389 3020 [ 4FCAEF0C5BE7629AEB878998E0FE959B ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
22:15:05.0389 3020 aswFsBlk - ok
22:15:05.0421 3020 [ B50CDD87772D6A11CB90924AAD399DF8 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
22:15:05.0421 3020 aswMonFlt - ok
22:15:05.0467 3020 [ 57768C7DB4681F2510F247F82EF31D4F ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys
22:15:05.0467 3020 aswRdr - ok
22:15:05.0514 3020 [ E71D826A1F3CE9C9DE3E77F2D02AFFBF ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
22:15:05.0530 3020 aswSnx - ok
22:15:05.0561 3020 [ 538A32E2C99BF073D4CA76C30BEDAA60 ] aswSP C:\Windows\system32\drivers\aswSP.sys
22:15:05.0577 3020 aswSP - ok
22:15:05.0623 3020 [ 6EDC79D73745FD44C41B55B2D13D0B70 ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
22:15:05.0623 3020 aswTdi - ok
22:15:05.0639 3020 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
22:15:05.0639 3020 AsyncMac - ok
22:15:05.0686 3020 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
22:15:05.0686 3020 atapi - ok
22:15:05.0733 3020 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
22:15:05.0733 3020 AudioEndpointBuilder - ok
22:15:05.0764 3020 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
22:15:05.0764 3020 AudioSrv - ok
22:15:05.0811 3020 [ 8FA553E9AE69808D99C164733A0F9590 ] avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
22:15:05.0811 3020 avast! Antivirus - ok
22:15:05.0857 3020 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
22:15:05.0857 3020 AxInstSV - ok
22:15:05.0889 3020 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
22:15:05.0889 3020 b06bdrv - ok
22:15:05.0920 3020 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
22:15:05.0935 3020 b57nd60a - ok
22:15:05.0967 3020 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
22:15:05.0967 3020 BDESVC - ok
22:15:05.0967 3020 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
22:15:05.0982 3020 Beep - ok
22:15:06.0029 3020 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
22:15:06.0045 3020 BFE - ok
22:15:06.0091 3020 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
22:15:06.0107 3020 BITS - ok
22:15:06.0107 3020 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
22:15:06.0123 3020 blbdrive - ok
22:15:06.0169 3020 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
22:15:06.0169 3020 Bonjour Service - ok
22:15:06.0216 3020 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
22:15:06.0216 3020 bowser - ok
22:15:06.0232 3020 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
22:15:06.0232 3020 BrFiltLo - ok
22:15:06.0247 3020 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
22:15:06.0247 3020 BrFiltUp - ok
22:15:06.0294 3020 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
22:15:06.0294 3020 Browser - ok
22:15:06.0310 3020 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
22:15:06.0310 3020 Brserid - ok
22:15:06.0325 3020 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
22:15:06.0325 3020 BrSerWdm - ok
22:15:06.0357 3020 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
22:15:06.0357 3020 BrUsbMdm - ok
22:15:06.0372 3020 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
22:15:06.0372 3020 BrUsbSer - ok
22:15:06.0388 3020 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
22:15:06.0388 3020 BTHMODEM - ok
22:15:06.0403 3020 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
22:15:06.0419 3020 bthserv - ok
22:15:06.0450 3020 [ D8466DF7629A7ACD2BED0CDE206E5DF9 ] CbFs C:\Windows\system32\drivers\cbfs.sys
22:15:06.0466 3020 CbFs - ok
22:15:06.0481 3020 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
22:15:06.0481 3020 cdfs - ok
22:15:06.0497 3020 [ 83D2D75E1EFB81B3450C18131443F7DB ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
22:15:06.0513 3020 cdrom - ok
22:15:06.0559 3020 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
22:15:06.0559 3020 CertPropSvc - ok
22:15:06.0575 3020 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
22:15:06.0575 3020 circlass - ok
22:15:06.0606 3020 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
22:15:06.0606 3020 CLFS - ok
22:15:06.0637 3020 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:15:06.0653 3020 clr_optimization_v2.0.50727_32 - ok
22:15:06.0669 3020 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
22:15:06.0669 3020 clr_optimization_v2.0.50727_64 - ok
22:15:06.0715 3020 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:15:06.0731 3020 clr_optimization_v4.0.30319_32 - ok
22:15:06.0778 3020 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
22:15:06.0793 3020 clr_optimization_v4.0.30319_64 - ok
22:15:06.0825 3020 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
22:15:06.0825 3020 CmBatt - ok
22:15:06.0918 3020 [ 65FB5097D9EE7E3A99E932CFA0E4B344 ] cmdAgent C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
22:15:06.0965 3020 cmdAgent - ok
22:15:07.0012 3020 [ 919ACCC22ABDC1C3CA68326C0E5DEAF9 ] cmdGuard C:\Windows\system32\DRIVERS\cmdguard.sys
22:15:07.0012 3020 cmdGuard - ok
22:15:07.0027 3020 [ F8FECE0F1D44C4A58778083B00EEADAC ] cmdHlp C:\Windows\system32\DRIVERS\cmdhlp.sys
22:15:07.0027 3020 cmdHlp - ok
22:15:07.0059 3020 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
22:15:07.0074 3020 cmdide - ok
22:15:07.0105 3020 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
22:15:07.0105 3020 CNG - ok
22:15:07.0137 3020 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
22:15:07.0137 3020 Compbatt - ok
22:15:07.0168 3020 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
22:15:07.0168 3020 CompositeBus - ok
22:15:07.0168 3020 COMSysApp - ok
22:15:07.0199 3020 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
22:15:07.0199 3020 crcdisk - ok
22:15:07.0230 3020 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
22:15:07.0230 3020 CryptSvc - ok
22:15:07.0324 3020 [ AEFB8558199BD5212B268B09BFA1D71A ] CSHelper C:\Windows\SysWOW64\CSHelper.exe
22:15:07.0324 3020 CSHelper - ok
22:15:07.0402 3020 cvhsvc - ok
22:15:07.0449 3020 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
22:15:07.0464 3020 DcomLaunch - ok
22:15:07.0495 3020 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
22:15:07.0495 3020 defragsvc - ok
22:15:07.0527 3020 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
22:15:07.0542 3020 DfsC - ok
22:15:07.0573 3020 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
22:15:07.0589 3020 Dhcp - ok
22:15:07.0589 3020 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
22:15:07.0605 3020 discache - ok
22:15:07.0636 3020 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
22:15:07.0636 3020 Disk - ok
22:15:07.0667 3020 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
22:15:07.0667 3020 Dnscache - ok
22:15:07.0698 3020 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
22:15:07.0698 3020 dot3svc - ok
22:15:07.0714 3020 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
22:15:07.0714 3020 DPS - ok
22:15:07.0776 3020 [ D5761DD586C54BF710174E992FA83EAA ] DragonSvc C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe
22:15:07.0776 3020 DragonSvc - ok
22:15:07.0792 3020 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
22:15:07.0792 3020 drmkaud - ok
22:15:07.0854 3020 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
22:15:07.0885 3020 DXGKrnl - ok
22:15:07.0885 3020 EagleX64 - ok
22:15:07.0932 3020 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
22:15:07.0932 3020 EapHost - ok
22:15:07.0995 3020 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
22:15:08.0041 3020 ebdrv - ok
22:15:08.0073 3020 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
22:15:08.0073 3020 EFS - ok
22:15:08.0119 3020 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
22:15:08.0135 3020 ehRecvr - ok
22:15:08.0151 3020 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
22:15:08.0166 3020 ehSched - ok
22:15:08.0197 3020 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
22:15:08.0197 3020 elxstor - ok
22:15:08.0291 3020 [ 000598EAA293D5139F3DBC68516F901E ] EPSON_PM_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
22:15:08.0291 3020 EPSON_PM_RPCV4_01 - ok
22:15:08.0322 3020 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
22:15:08.0322 3020 ErrDev - ok
22:15:08.0369 3020 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
22:15:08.0369 3020 EventSystem - ok
22:15:08.0400 3020 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
22:15:08.0400 3020 exfat - ok
22:15:08.0431 3020 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
22:15:08.0431 3020 fastfat - ok
22:15:08.0478 3020 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
22:15:08.0494 3020 Fax - ok
22:15:08.0525 3020 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
22:15:08.0525 3020 fdc - ok
22:15:08.0541 3020 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
22:15:08.0541 3020 fdPHost - ok
22:15:08.0572 3020 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
22:15:08.0572 3020 FDResPub - ok
22:15:08.0587 3020 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
22:15:08.0587 3020 FileInfo - ok
22:15:08.0587 3020 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
22:15:08.0587 3020 Filetrace - ok
22:15:08.0619 3020 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
22:15:08.0619 3020 flpydisk - ok
22:15:08.0650 3020 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
22:15:08.0650 3020 FltMgr - ok
22:15:08.0697 3020 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
22:15:08.0697 3020 FontCache - ok
22:15:08.0759 3020 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
22:15:08.0759 3020 FontCache3.0.0.0 - ok
22:15:08.0775 3020 FoxAwdWINFLASH64 - ok
22:15:08.0790 3020 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
22:15:08.0806 3020 FsDepends - ok
22:15:08.0821 3020 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
22:15:08.0821 3020 Fs_Rec - ok
22:15:08.0884 3020 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
22:15:08.0884 3020 fvevol - ok
22:15:08.0899 3020 FXDrv32 - ok
22:15:08.0915 3020 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
22:15:08.0915 3020 gagp30kx - ok
22:15:08.0962 3020 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
22:15:08.0962 3020 GEARAspiWDM - ok
22:15:09.0040 3020 [ 57888A823873B256786D88C8E5999093 ] GManager C:\Windows\system32\GManager.exe
22:15:09.0040 3020 GManager - ok
22:15:09.0087 3020 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
22:15:09.0102 3020 gpsvc - ok
22:15:09.0118 3020 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
22:15:09.0118 3020 hcw85cir - ok
22:15:09.0165 3020 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
22:15:09.0180 3020 HdAudAddService - ok
22:15:09.0211 3020 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
22:15:09.0211 3020 HDAudBus - ok
22:15:09.0243 3020 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
22:15:09.0243 3020 HidBatt - ok
22:15:09.0274 3020 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
22:15:09.0274 3020 HidBth - ok
22:15:09.0305 3020 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
22:15:09.0305 3020 HidIr - ok
22:15:09.0336 3020 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
22:15:09.0336 3020 hidserv - ok
22:15:09.0352 3020 [ B3BF6B5B50006DEF50B66306D99FCF6F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
22:15:09.0352 3020 HidUsb - ok
22:15:09.0383 3020 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
22:15:09.0399 3020 hkmsvc - ok
22:15:09.0430 3020 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
22:15:09.0430 3020 HomeGroupListener - ok
22:15:09.0477 3020 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
22:15:09.0492 3020 HomeGroupProvider - ok
22:15:09.0508 3020 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
22:15:09.0508 3020 HpSAMD - ok
22:15:09.0555 3020 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
22:15:09.0570 3020 HTTP - ok
22:15:09.0586 3020 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
22:15:09.0601 3020 hwpolicy - ok
22:15:09.0633 3020 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
22:15:09.0633 3020 i8042prt - ok
22:15:09.0648 3020 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
22:15:09.0664 3020 iaStorV - ok
22:15:09.0695 3020 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
22:15:09.0695 3020 idsvc - ok
22:15:09.0804 3020 [ A87261EF1546325B559374F5689CF5BC ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
22:15:09.0929 3020 igfx - ok
22:15:09.0960 3020 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
22:15:09.0960 3020 iirsp - ok
22:15:09.0991 3020 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
22:15:09.0991 3020 IKEEXT - ok
22:15:10.0023 3020 [ C4E67D3037DC79E39D7136581A947F50 ] inspect C:\Windows\system32\DRIVERS\inspect.sys
22:15:10.0023 3020 inspect - ok
22:15:10.0085 3020 [ A0EAB13A78CC5FB960EC76E3D6408DA3 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
22:15:10.0132 3020 IntcAzAudAddService - ok
22:15:10.0179 3020 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
22:15:10.0179 3020 intelide - ok
22:15:10.0194 3020 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
22:15:10.0194 3020 intelppm - ok
22:15:10.0225 3020 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
22:15:10.0241 3020 IPBusEnum - ok
22:15:10.0272 3020 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:15:10.0288 3020 IpFilterDriver - ok
22:15:10.0335 3020 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
22:15:10.0350 3020 iphlpsvc - ok
22:15:10.0381 3020 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
22:15:10.0381 3020 IPMIDRV - ok
22:15:10.0397 3020 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
22:15:10.0397 3020 IPNAT - ok
22:15:10.0475 3020 [ 6E50CFA46527B39015B750AAD161C5CC ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
22:15:10.0491 3020 iPod Service - ok
22:15:10.0506 3020 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
22:15:10.0506 3020 IRENUM - ok
22:15:10.0537 3020 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
22:15:10.0553 3020 isapnp - ok
22:15:10.0584 3020 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
22:15:10.0584 3020 iScsiPrt - ok
22:15:10.0615 3020 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
22:15:10.0615 3020 kbdclass - ok
22:15:10.0631 3020 [ 6DEF98F8541E1B5DCEB2C822A11F7323 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
22:15:10.0631 3020 kbdhid - ok
22:15:10.0647 3020 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
22:15:10.0647 3020 KeyIso - ok
22:15:10.0678 3020 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
22:15:10.0693 3020 KSecDD - ok
22:15:10.0709 3020 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
22:15:10.0709 3020 KSecPkg - ok
22:15:10.0725 3020 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
22:15:10.0725 3020 ksthunk - ok
22:15:10.0740 3020 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
22:15:10.0756 3020 KtmRm - ok
22:15:10.0818 3020 [ CAEAA16039485B2D3BB069C1107442A5 ] L4301_Solar C:\Program Files\Logitech\SolarApp\L4301_Solar.exe
22:15:10.0834 3020 L4301_Solar - ok
22:15:10.0865 3020 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
22:15:10.0865 3020 LanmanServer - ok
22:15:10.0912 3020 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
22:15:10.0912 3020 LanmanWorkstation - ok
22:15:10.0959 3020 [ 6E7B4E75E8A226EDC8A9A8B1C3510F9B ] LightScribeService C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
22:15:10.0959 3020 LightScribeService - ok
22:15:11.0037 3020 [ C51D41A17256A6128B7D6C601AF3AEB5 ] LivedriveVSSService C:\Program Files (x86)\Livedrive\VSSService.exe
22:15:11.0037 3020 LivedriveVSSService - ok
22:15:11.0068 3020 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
22:15:11.0068 3020 lltdio - ok
22:15:11.0099 3020 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
22:15:11.0099 3020 lltdsvc - ok
22:15:11.0115 3020 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
22:15:11.0115 3020 lmhosts - ok
22:15:11.0146 3020 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
22:15:11.0146 3020 LSI_FC - ok
22:15:11.0177 3020 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
22:15:11.0177 3020 LSI_SAS - ok
22:15:11.0193 3020 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
22:15:11.0193 3020 LSI_SAS2 - ok
22:15:11.0224 3020 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
22:15:11.0224 3020 LSI_SCSI - ok
22:15:11.0239 3020 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
22:15:11.0255 3020 luafv - ok
22:15:11.0395 3020 [ 3E23A0792D5EE0A072961E9E9F347368 ] MCTDesktopSvr C:\Program Files (x86)\Common Files\DesktopUtil\MCTDesktopSvr.exe
22:15:11.0395 3020 MCTDesktopSvr - ok
22:15:11.0473 3020 [ 6EC296743133C26E29F43E7338531EEF ] mctkmd C:\Windows\system32\drivers\mctkmd64.sys
22:15:11.0473 3020 mctkmd - ok
22:15:11.0505 3020 [ 7E622C16CA2798B352C0B31DBB208CBD ] mctkmdldr C:\Windows\system32\drivers\mctkmdldr64.sys
22:15:11.0520 3020 mctkmdldr - ok
22:15:11.0551 3020 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
22:15:11.0551 3020 Mcx2Svc - ok
22:15:11.0583 3020 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
22:15:11.0583 3020 megasas - ok
22:15:11.0614 3020 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
22:15:11.0614 3020 MegaSR - ok
22:15:11.0629 3020 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
22:15:11.0645 3020 MMCSS - ok
22:15:11.0661 3020 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
22:15:11.0661 3020 Modem - ok
22:15:11.0707 3020 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
22:15:11.0707 3020 monitor - ok
22:15:11.0785 3020 [ AC9D6E3629E4388A9EA9B4172493AAEE ] Motorola Device Manager C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
22:15:11.0801 3020 Motorola Device Manager - ok
22:15:11.0832 3020 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
22:15:11.0848 3020 mouclass - ok
22:15:11.0879 3020 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
22:15:11.0879 3020 mouhid - ok
22:15:11.0910 3020 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
22:15:11.0910 3020 mountmgr - ok
22:15:11.0957 3020 [ 8A7C8F4C713E70D73946833D76B77035 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
22:15:11.0973 3020 MozillaMaintenance - ok
22:15:12.0004 3020 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
22:15:12.0004 3020 mpio - ok
22:15:12.0035 3020 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
22:15:12.0035 3020 mpsdrv - ok
22:15:12.0082 3020 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
22:15:12.0097 3020 MpsSvc - ok
22:15:12.0144 3020 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
22:15:12.0144 3020 MRxDAV - ok
22:15:12.0175 3020 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
22:15:12.0175 3020 mrxsmb - ok
22:15:12.0222 3020 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:15:12.0222 3020 mrxsmb10 - ok
22:15:12.0253 3020 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:15:12.0253 3020 mrxsmb20 - ok
22:15:12.0269 3020 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
22:15:12.0269 3020 msahci - ok
22:15:12.0316 3020 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
22:15:12.0316 3020 msdsm - ok
22:15:12.0347 3020 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
22:15:12.0347 3020 MSDTC - ok
22:15:12.0378 3020 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
22:15:12.0378 3020 Msfs - ok
22:15:12.0409 3020 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
22:15:12.0409 3020 mshidkmdf - ok
22:15:12.0425 3020 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
22:15:12.0425 3020 msisadrv - ok
22:15:12.0456 3020 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
22:15:12.0456 3020 MSiSCSI - ok
22:15:12.0472 3020 msiserver - ok
22:15:12.0487 3020 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
22:15:12.0487 3020 MSKSSRV - ok
22:15:12.0503 3020 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
22:15:12.0503 3020 MSPCLOCK - ok
22:15:12.0534 3020 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
22:15:12.0534 3020 MSPQM - ok
22:15:12.0565 3020 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
22:15:12.0565 3020 MsRPC - ok
22:15:12.0597 3020 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
22:15:12.0612 3020 mssmbios - ok
22:15:12.0612 3020 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
22:15:12.0628 3020 MSTEE - ok
22:15:12.0643 3020 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
22:15:12.0643 3020 MTConfig - ok
22:15:12.0659 3020 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
22:15:12.0659 3020 Mup - ok
22:15:12.0690 3020 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
22:15:12.0706 3020 napagent - ok
22:15:12.0737 3020 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
22:15:12.0737 3020 NativeWifiP - ok
22:15:12.0784 3020 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
22:15:12.0799 3020 NDIS - ok
22:15:12.0815 3020 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
22:15:12.0815 3020 NdisCap - ok
22:15:12.0831 3020 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
22:15:12.0831 3020 NdisTapi - ok
22:15:12.0862 3020 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
22:15:12.0877 3020 Ndisuio - ok
22:15:12.0909 3020 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
22:15:12.0909 3020 NdisWan - ok
22:15:12.0940 3020 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
22:15:12.0940 3020 NDProxy - ok
22:15:12.0940 3020 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
22:15:12.0940 3020 NetBIOS - ok
22:15:12.0971 3020 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
22:15:12.0971 3020 NetBT - ok
22:15:12.0987 3020 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
22:15:13.0002 3020 Netlogon - ok
22:15:13.0018 3020 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
22:15:13.0033 3020 Netman - ok
22:15:13.0065 3020 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:15:13.0065 3020 NetMsmqActivator - ok
22:15:13.0065 3020 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:15:13.0080 3020 NetPipeActivator - ok
22:15:13.0096 3020 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
22:15:13.0096 3020 netprofm - ok
22:15:13.0096 3020 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:15:13.0111 3020 NetTcpActivator - ok
22:15:13.0111 3020 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:15:13.0111 3020 NetTcpPortSharing - ok
22:15:13.0158 3020 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
22:15:13.0158 3020 nfrd960 - ok
22:15:13.0205 3020 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
22:15:13.0221 3020 NlaSvc - ok
22:15:13.0252 3020 [ C31FA031335EFF434B2D94278E74BCCE ] npf C:\Windows\system32\drivers\npf.sys
22:15:13.0252 3020 npf - ok
22:15:13.0267 3020 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
22:15:13.0267 3020 Npfs - ok
22:15:13.0283 3020 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
22:15:13.0299 3020 nsi - ok
22:15:13.0299 3020 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
22:15:13.0299 3020 nsiproxy - ok
22:15:13.0408 3020 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
22:15:13.0439 3020 Ntfs - ok
22:15:13.0455 3020 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
22:15:13.0486 3020 Null - ok
22:15:13.0735 3020 [ 5104BAC2DA2A5BDD86AC6B0708B00F06 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
22:15:13.0969 3020 nvlddmkm - ok
22:15:14.0016 3020 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
22:15:14.0016 3020 nvraid - ok
22:15:14.0032 3020 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
22:15:14.0032 3020 nvstor - ok
22:15:14.0079 3020 [ DDFAFCE89A5C93D04712B86F94E9FCBA ] nvsvc C:\Windows\system32\nvvsvc.exe
22:15:14.0110 3020 nvsvc - ok
22:15:14.0203 3020 [ 84E035225474E48CD3A6A3CE52332095 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
22:15:14.0219 3020 nvUpdatusService - ok
22:15:14.0250 3020 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
22:15:14.0250 3020 nv_agp - ok
22:15:14.0281 3020 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
22:15:14.0281 3020 ohci1394 - ok
22:15:14.0328 3020 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
22:15:14.0328 3020 ose - ok
22:15:14.0453 3020 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
22:15:14.0562 3020 osppsvc - ok
22:15:14.0593 3020 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
22:15:14.0593 3020 p2pimsvc - ok
22:15:14.0625 3020 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
22:15:14.0625 3020 p2psvc - ok
22:15:14.0640 3020 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
22:15:14.0640 3020 Parport - ok
22:15:14.0671 3020 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
22:15:14.0687 3020 partmgr - ok
22:15:14.0703 3020 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
22:15:14.0703 3020 PcaSvc - ok
22:15:14.0718 3020 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
22:15:14.0734 3020 pci - ok
22:15:14.0749 3020 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
22:15:14.0749 3020 pciide - ok
22:15:14.0765 3020 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
22:15:14.0781 3020 pcmcia - ok
22:15:14.0812 3020 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
22:15:14.0812 3020 pcw - ok
22:15:14.0843 3020 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
22:15:14.0843 3020 PEAUTH - ok
22:15:14.0905 3020 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
22:15:14.0921 3020 PerfHost - ok
22:15:14.0983 3020 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
22:15:14.0999 3020 pla - ok
22:15:15.0061 3020 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
22:15:15.0061 3020 PlugPlay - ok
22:15:15.0077 3020 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
22:15:15.0093 3020 PNRPAutoReg - ok
22:15:15.0108 3020 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
22:15:15.0108 3020 PNRPsvc - ok
22:15:15.0139 3020 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
22:15:15.0155 3020 PolicyAgent - ok
22:15:15.0186 3020 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
22:15:15.0186 3020 Power - ok
22:15:15.0249 3020 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
22:15:15.0249 3020 PptpMiniport - ok
22:15:15.0280 3020 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
22:15:15.0280 3020 Processor - ok
22:15:15.0311 3020 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
22:15:15.0311 3020 ProfSvc - ok
22:15:15.0327 3020 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
22:15:15.0327 3020 ProtectedStorage - ok
22:15:15.0358 3020 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
22:15:15.0373 3020 Psched - ok
22:15:15.0420 3020 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
22:15:15.0451 3020 ql2300 - ok
22:15:15.0483 3020 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
22:15:15.0498 3020 ql40xx - ok
22:15:15.0514 3020 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
22:15:15.0529 3020 QWAVE - ok
22:15:15.0561 3020 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
22:15:15.0576 3020 QWAVEdrv - ok
22:15:15.0592 3020 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
22:15:15.0592 3020 RasAcd - ok
22:15:15.0607 3020 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
22:15:15.0607 3020 RasAgileVpn - ok
22:15:15.0639 3020 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
22:15:15.0639 3020 RasAuto - ok
22:15:15.0685 3020 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
22:15:15.0685 3020 Rasl2tp - ok
22:15:15.0732 3020 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
22:15:15.0732 3020 RasMan - ok
22:15:15.0748 3020 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
22:15:15.0763 3020 RasPppoe - ok
22:15:15.0779 3020 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
22:15:15.0779 3020 RasSstp - ok
22:15:15.0810 3020 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
22:15:15.0810 3020 rdbss - ok
22:15:15.0841 3020 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
22:15:15.0841 3020 rdpbus - ok
22:15:15.0857 3020 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
22:15:15.0857 3020 RDPCDD - ok
22:15:15.0873 3020 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
22:15:15.0888 3020 RDPENCDD - ok
22:15:15.0904 3020 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
22:15:15.0904 3020 RDPREFMP - ok
22:15:15.0935 3020 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
22:15:15.0951 3020 RDPWD - ok
22:15:15.0997 3020 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
22:15:15.0997 3020 rdyboost - ok
22:15:16.0044 3020 [ E30CB0629029E985E2DD11DF254F0860 ] RealtekUSB C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtlService.exe
22:15:16.0044 3020 RealtekUSB - ok
22:15:16.0075 3020 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
22:15:16.0075 3020 RemoteAccess - ok
22:15:16.0107 3020 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
22:15:16.0107 3020 RemoteRegistry - ok
22:15:16.0169 3020 [ 8CFCA7E2FD4B57C2BEF929C1C1A4C56E ] RichVideo C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
22:15:16.0169 3020 RichVideo - ok
22:15:16.0185 3020 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
22:15:16.0200 3020 RpcEptMapper - ok
22:15:16.0216 3020 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
22:15:16.0216 3020 RpcLocator - ok
22:15:16.0263 3020 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
22:15:16.0263 3020 RpcSs - ok
22:15:16.0278 3020 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
22:15:16.0278 3020 rspndr - ok
22:15:16.0309 3020 [ 4B42BC58294E83A6A92EC8B88C14C4A3 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
22:15:16.0325 3020 RTL8167 - ok
22:15:16.0341 3020 [ 1C546EA56A06B773A52EE48E0205072D ] RTL8187 C:\Windows\system32\DRIVERS\RTL8187.sys
22:15:16.0341 3020 RTL8187 - ok
22:15:16.0356 3020 [ D1664991A07ACF2703D4A4E5BE4B6C80 ] RtlProt C:\Windows\system32\DRIVERS\rtlprot.sys
22:15:16.0356 3020 RtlProt - ok
22:15:16.0372 3020 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
22:15:16.0372 3020 SamSs - ok
22:15:16.0419 3020 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
22:15:16.0419 3020 sbp2port - ok
22:15:16.0465 3020 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
22:15:16.0481 3020 SBSDWSCService - ok
22:15:16.0481 3020 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
22:15:16.0497 3020 SCardSvr - ok
22:15:16.0528 3020 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
22:15:16.0528 3020 scfilter - ok
22:15:16.0575 3020 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
22:15:16.0590 3020 Schedule - ok
22:15:16.0637 3020 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
22:15:16.0637 3020 SCPolicySvc - ok
22:15:16.0668 3020 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
22:15:16.0684 3020 SDRSVC - ok
22:15:16.0715 3020 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
22:15:16.0715 3020 secdrv - ok
22:15:16.0746 3020 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
22:15:16.0762 3020 seclogon - ok
22:15:16.0777 3020 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
22:15:16.0777 3020 SENS - ok
22:15:16.0793 3020 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
22:15:16.0793 3020 SensrSvc - ok
22:15:16.0809 3020 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
22:15:16.0809 3020 Serenum - ok
22:15:16.0824 3020 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
22:15:16.0824 3020 Serial - ok
22:15:16.0871 3020 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
22:15:16.0871 3020 sermouse - ok
22:15:16.0918 3020 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
22:15:16.0918 3020 SessionEnv - ok
22:15:16.0949 3020 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
22:15:16.0949 3020 sffdisk - ok
22:15:16.0965 3020 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
22:15:16.0965 3020 sffp_mmc - ok
22:15:16.0980 3020 [ 178298F767FE638C9FEDCBDEF58BB5E4 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
22:15:16.0980 3020 sffp_sd - ok
22:15:17.0011 3020 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
22:15:17.0011 3020 sfloppy - ok
22:15:17.0043 3020 [ D5183ED285D2795491DC15BDDCBEE5AD ] Sftfs C:\Windows\system32\DRIVERS\Sftfslh.sys
22:15:17.0058 3020 Sftfs - ok
22:15:17.0089 3020 sftlist - ok
22:15:17.0121 3020 [ 00F118B68C50D2206DD51634F9142B83 ] Sftplay C:\Windows\system32\DRIVERS\Sftplaylh.sys
22:15:17.0121 3020 Sftplay - ok
22:15:17.0152 3020 [ 76A827DF5640BFE16A0CDBB4108ADECA ] Sftredir C:\Windows\system32\DRIVERS\Sftredirlh.sys
22:15:17.0152 3020 Sftredir - ok
22:15:17.0167 3020 [ 1B4C9701645086BAB8CAFFFCE30ED284 ] Sftvol C:\Windows\system32\DRIVERS\Sftvollh.sys
22:15:17.0167 3020 Sftvol - ok
22:15:17.0183 3020 sftvsa - ok
22:15:17.0199 3020 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
22:15:17.0199 3020 SharedAccess - ok
22:15:17.0245 3020 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
22:15:17.0245 3020 ShellHWDetection - ok
22:15:17.0277 3020 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
22:15:17.0277 3020 SiSRaid2 - ok
22:15:17.0292 3020 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
22:15:17.0292 3020 SiSRaid4 - ok
22:15:17.0339 3020 [ A37740568718F245E818D0C5575B9AA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
22:15:17.0339 3020 SkypeUpdate - ok
22:15:17.0386 3020 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
22:15:17.0386 3020 Smb - ok
22:15:17.0417 3020 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
22:15:17.0433 3020 SNMPTRAP - ok
22:15:17.0433 3020 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
22:15:17.0433 3020 spldr - ok
22:15:17.0464 3020 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
22:15:17.0479 3020 Spooler - ok
22:15:17.0557 3020 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
22:15:17.0620 3020 sppsvc - ok
22:15:17.0682 3020 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
22:15:17.0698 3020 sppuinotify - ok
22:15:17.0729 3020 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
22:15:17.0745 3020 srv - ok
22:15:17.0776 3020 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
22:15:17.0776 3020 srv2 - ok
22:15:17.0807 3020 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
22:15:17.0823 3020 srvnet - ok
22:15:17.0838 3020 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
22:15:17.0838 3020 SSDPSRV - ok
22:15:17.0854 3020 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
22:15:17.0869 3020 SstpSvc - ok
22:15:17.0916 3020 [ F0359F7CE712D69ACEF0886BDB4792ED ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
22:15:17.0932 3020 Stereo Service - ok
22:15:17.0963 3020 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
22:15:17.0963 3020 stexstor - ok
22:15:18.0010 3020 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
22:15:18.0025 3020 stisvc - ok
22:15:18.0072 3020 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
22:15:18.0072 3020 swenum - ok
22:15:18.0103 3020 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
22:15:18.0119 3020 swprv - ok
22:15:18.0166 3020 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
22:15:18.0213 3020 SysMain - ok
22:15:18.0259 3020 [ D71B5F0CCE5B99BECDD487E67A63465B ] t1pusb64 C:\Windows\system32\drivers\t1pusb64.sys
22:15:18.0259 3020 t1pusb64 - ok
22:15:18.0306 3020 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
22:15:18.0322 3020 TabletInputService - ok
22:15:18.0353 3020 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
22:15:18.0353 3020 TapiSrv - ok
22:15:18.0384 3020 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
22:15:18.0384 3020 TBS - ok
22:15:18.0447 3020 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
22:15:18.0478 3020 Tcpip - ok
22:15:18.0509 3020 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
22:15:18.0525 3020 TCPIP6 - ok
22:15:18.0571 3020 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
22:15:18.0571 3020 tcpipreg - ok
22:15:18.0603 3020 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
22:15:18.0603 3020 TDPIPE - ok
22:15:18.0634 3020 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
22:15:18.0634 3020 TDTCP - ok
22:15:18.0665 3020 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
22:15:18.0681 3020 tdx - ok
22:15:18.0712 3020 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
22:15:18.0712 3020 TermDD - ok
22:15:18.0759 3020 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
22:15:18.0774 3020 TermService - ok
22:15:18.0790 3020 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
22:15:18.0805 3020 Themes - ok
22:15:18.0821 3020 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
22:15:18.0821 3020 THREADORDER - ok
22:15:18.0837 3020 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
22:15:18.0837 3020 TrkWks - ok
22:15:18.0883 3020 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
22:15:18.0899 3020 TrustedInstaller - ok
22:15:18.0930 3020 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
22:15:18.0930 3020 tssecsrv - ok
22:15:18.0961 3020 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
22:15:18.0961 3020 TsUsbFlt - ok
22:15:19.0024 3020 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
22:15:19.0024 3020 tunnel - ok
22:15:19.0039 3020 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
22:15:19.0039 3020 uagp35 - ok
22:15:19.0086 3020 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
22:15:19.0086 3020 udfs - ok
22:15:19.0117 3020 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
22:15:19.0117 3020 UI0Detect - ok
22:15:19.0133 3020 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
22:15:19.0149 3020 uliagpkx - ok
22:15:19.0164 3020 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
22:15:19.0164 3020 umbus - ok
22:15:19.0180 3020 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
22:15:19.0195 3020 UmPass - ok
22:15:19.0211 3020 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
22:15:19.0211 3020 upnphost - ok
22:15:19.0242 3020 [ AF1B9474D67897D0C2CFF58E0ACEACCC ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
22:15:19.0258 3020 USBAAPL64 - ok
22:15:19.0289 3020 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
22:15:19.0289 3020 usbaudio - ok
22:15:19.0305 3020 [ B26AFB54A534D634523C4FB66765B026 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
22:15:19.0305 3020 usbccgp - ok
22:15:19.0351 3020 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
22:15:19.0351 3020 usbcir - ok
22:15:19.0383 3020 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
22:15:19.0398 3020 usbehci - ok
22:15:19.0414 3020 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
22:15:19.0414 3020 usbhub - ok
22:15:19.0445 3020 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
22:15:19.0445 3020 usbohci - ok
22:15:19.0461 3020 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
22:15:19.0461 3020 usbprint - ok
22:15:19.0492 3020 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
22:15:19.0492 3020 usbscan - ok
22:15:19.0523 3020 [ 080D3820DA6C046BE82FC8B45A893E83 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:15:19.0539 3020 USBSTOR - ok
22:15:19.0570 3020 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
22:15:19.0570 3020 usbuhci - ok
22:15:19.0617 3020 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
22:15:19.0617 3020 usbvideo - ok
22:15:19.0648 3020 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
22:15:19.0663 3020 UxSms - ok
22:15:19.0679 3020 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
22:15:19.0679 3020 VaultSvc - ok
22:15:19.0726 3020 [ D277EEFAE695BB4BE7DE1B4325368FAB ] vdbus C:\Windows\system32\DRIVERS\vdbus.sys
22:15:19.0741 3020 vdbus - ok
22:15:19.0741 3020 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
22:15:19.0741 3020 vdrvroot - ok
22:15:19.0788 3020 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
22:15:19.0788 3020 vds - ok
22:15:19.0851 3020 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
22:15:19.0851 3020 vga - ok
22:15:19.0866 3020 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
22:15:19.0866 3020 VgaSave - ok
22:15:19.0913 3020 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
22:15:19.0913 3020 vhdmp - ok
22:15:19.0944 3020 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
22:15:19.0944 3020 viaide - ok
22:15:19.0960 3020 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
22:15:19.0960 3020 volmgr - ok
22:15:20.0007 3020 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
22:15:20.0007 3020 volmgrx - ok
22:15:20.0038 3020 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
22:15:20.0038 3020 volsnap - ok
22:15:20.0069 3020 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
22:15:20.0069 3020 vsmraid - ok
22:15:20.0131 3020 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
22:15:20.0163 3020 VSS - ok
22:15:20.0178 3020 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
22:15:20.0178 3020 vwifibus - ok
22:15:20.0209 3020 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
22:15:20.0209 3020 W32Time - ok
22:15:20.0303 3020 w4shwdrv - ok
22:15:20.0334 3020 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
22:15:20.0334 3020 WacomPen - ok
22:15:20.0365 3020 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
22:15:20.0365 3020 WANARP - ok
22:15:20.0381 3020 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
22:15:20.0381 3020 Wanarpv6 - ok
22:15:20.0443 3020 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
22:15:20.0459 3020 WatAdminSvc - ok
22:15:20.0521 3020 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
22:15:20.0553 3020 wbengine - ok
22:15:20.0584 3020 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
22:15:20.0599 3020 WbioSrvc - ok
22:15:20.0646 3020 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
22:15:20.0646 3020 wcncsvc - ok
22:15:20.0677 3020 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
22:15:20.0677 3020 WcsPlugInService - ok
22:15:20.0709 3020 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
22:15:20.0709 3020 Wd - ok
22:15:20.0740 3020 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
22:15:20.0755 3020 Wdf01000 - ok
22:15:20.0787 3020 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
22:15:20.0787 3020 WdiServiceHost - ok
22:15:20.0802 3020 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
22:15:20.0802 3020 WdiSystemHost - ok
22:15:20.0849 3020 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
22:15:20.0865 3020 WebClient - ok
22:15:20.0896 3020 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
22:15:20.0896 3020 Wecsvc - ok
22:15:20.0911 3020 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
22:15:20.0911 3020 wercplsupport - ok
22:15:20.0943 3020 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
22:15:20.0958 3020 WerSvc - ok
22:15:20.0989 3020 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
22:15:21.0005 3020 WfpLwf - ok
22:15:21.0036 3020 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
22:15:21.0036 3020 WIMMount - ok
22:15:21.0052 3020 WinDefend - ok
22:15:21.0067 3020 WinHttpAutoProxySvc - ok
22:15:21.0130 3020 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
22:15:21.0130 3020 Winmgmt - ok
22:15:21.0208 3020 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
22:15:21.0239 3020 WinRM - ok
22:15:21.0286 3020 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
22:15:21.0301 3020 WinUsb - ok
22:15:21.0317 3020 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
22:15:21.0333 3020 Wlansvc - ok
22:15:21.0457 3020 [ 357CABBF155AFD1D3926E62539D2A3A7 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
22:15:21.0489 3020 wlidsvc - ok
22:15:21.0535 3020 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
22:15:21.0535 3020 WmiAcpi - ok
22:15:21.0567 3020 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
22:15:21.0567 3020 wmiApSrv - ok
22:15:21.0598 3020 WMPNetworkSvc - ok
22:15:21.0738 3020 [ 83B6CA03C846FCD47F9883D77D1EB27B ] WMZuneComm C:\Program Files\Zune\WMZuneComm.exe
22:15:21.0754 3020 WMZuneComm - ok
22:15:21.0785 3020 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
22:15:21.0785 3020 WPCSvc - ok
22:15:21.0832 3020 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
22:15:21.0832 3020 WPDBusEnum - ok
22:15:21.0863 3020 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
22:15:21.0863 3020 ws2ifsl - ok
22:15:21.0879 3020 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
22:15:21.0879 3020 wscsvc - ok
22:15:21.0894 3020 WSearch - ok
22:15:21.0957 3020 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
22:15:22.0004 3020 wuauserv - ok
22:15:22.0035 3020 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
22:15:22.0035 3020 WudfPf - ok
22:15:22.0050 3020 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
22:15:22.0066 3020 WUDFRd - ok
22:15:22.0097 3020 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
22:15:22.0097 3020 wudfsvc - ok
22:15:22.0128 3020 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
22:15:22.0128 3020 WwanSvc - ok
22:15:22.0284 3020 [ 67B787C34FB2888D01B130AE007042D8 ] ZuneNetworkSvc C:\Program Files\Zune\ZuneNss.exe
22:15:22.0425 3020 ZuneNetworkSvc - ok
22:15:22.0472 3020 [ 4D89FC1C20CF655739EFAC5DA81A67BC ] ZuneWlanCfgSvc C:\Program Files\Zune\ZuneWlanCfgSvc.exe
22:15:22.0487 3020 ZuneWlanCfgSvc - ok
22:15:22.0503 3020 ================ Scan global ===============================
22:15:22.0534 3020 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
22:15:22.0550 3020 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
22:15:22.0565 3020 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
22:15:22.0596 3020 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
22:15:22.0628 3020 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
22:15:22.0628 3020 [Global] - ok
22:15:22.0628 3020 ================ Scan MBR ==================================
22:15:22.0628 3020 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
22:15:22.0846 3020 \Device\Harddisk0\DR0 - ok
22:15:22.0846 3020 ================ Scan VBR ==================================
22:15:22.0862 3020 [ 93CF74300B91755E9A385F893F4BEB76 ] \Device\Harddisk0\DR0\Partition1
22:15:22.0862 3020 \Device\Harddisk0\DR0\Partition1 - ok
22:15:22.0877 3020 [ 1EA6E95139E14EC8C119DDD359BC5E2F ] \Device\Harddisk0\DR0\Partition2
22:15:22.0877 3020 \Device\Harddisk0\DR0\Partition2 - ok
22:15:22.0877 3020 ============================================================
22:15:22.0877 3020 Scan finished
22:15:22.0877 3020 ============================================================
22:15:22.0893 5044 Detected object count: 0
22:15:22.0893 5044 Actual detected object count: 0
22:20:24.0046 3460 ============================================================
22:20:24.0046 3460 Scan started
22:20:24.0046 3460 Mode: Manual;
22:20:24.0046 3460 ============================================================
22:20:24.0280 3460 ================ Scan services =============================
22:20:24.0280 3460 !SASCORE - ok
22:20:24.0405 3460 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
22:20:24.0405 3460 1394ohci - ok
22:20:24.0467 3460 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
22:20:24.0467 3460 ACPI - ok
22:20:24.0498 3460 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
22:20:24.0498 3460 AcpiPmi - ok
22:20:24.0561 3460 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
22:20:24.0561 3460 AdobeARMservice - ok
22:20:24.0654 3460 [ 424877CB9D5517F980FF7BACA2EB379D ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
22:20:24.0654 3460 AdobeFlashPlayerUpdateSvc - ok
22:20:24.0686 3460 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
22:20:24.0686 3460 adp94xx - ok
22:20:24.0701 3460 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
22:20:24.0701 3460 adpahci - ok
22:20:24.0717 3460 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
22:20:24.0717 3460 adpu320 - ok
22:20:24.0732 3460 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
22:20:24.0732 3460 AeLookupSvc - ok
22:20:24.0779 3460 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
22:20:24.0779 3460 AFD - ok
22:20:24.0810 3460 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
22:20:24.0810 3460 agp440 - ok
22:20:24.0826 3460 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
22:20:24.0826 3460 ALG - ok
22:20:24.0842 3460 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
22:20:24.0842 3460 aliide - ok
22:20:24.0842 3460 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
22:20:24.0857 3460 amdide - ok
22:20:24.0873 3460 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
22:20:24.0873 3460 AmdK8 - ok
22:20:24.0888 3460 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
22:20:24.0888 3460 AmdPPM - ok
22:20:24.0920 3460 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
22:20:24.0920 3460 amdsata - ok
22:20:24.0951 3460 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
22:20:24.0951 3460 amdsbs - ok
22:20:24.0966 3460 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
22:20:24.0966 3460 amdxata - ok
22:20:24.0998 3460 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
22:20:24.0998 3460 AppID - ok
22:20:25.0013 3460 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
22:20:25.0013 3460 AppIDSvc - ok
22:20:25.0044 3460 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
22:20:25.0060 3460 Appinfo - ok
22:20:25.0076 3460 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys
22:20:25.0076 3460 arc - ok
22:20:25.0091 3460 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
22:20:25.0091 3460 arcsas - ok
22:20:25.0169 3460 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
22:20:25.0169 3460 aspnet_state - ok
22:20:25.0185 3460 [ 4FCAEF0C5BE7629AEB878998E0FE959B ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
22:20:25.0200 3460 aswFsBlk - ok
22:20:25.0200 3460 [ B50CDD87772D6A11CB90924AAD399DF8 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
22:20:25.0200 3460 aswMonFlt - ok
22:20:25.0247 3460 [ 57768C7DB4681F2510F247F82EF31D4F ] aswRdr C:\Windows\System32\Drivers\aswrdr2.sys
22:20:25.0247 3460 aswRdr - ok
22:20:25.0278 3460 [ E71D826A1F3CE9C9DE3E77F2D02AFFBF ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
22:20:25.0294 3460 aswSnx - ok
22:20:25.0310 3460 [ 538A32E2C99BF073D4CA76C30BEDAA60 ] aswSP C:\Windows\system32\drivers\aswSP.sys
22:20:25.0310 3460 aswSP - ok
22:20:25.0325 3460 [ 6EDC79D73745FD44C41B55B2D13D0B70 ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
22:20:25.0325 3460 aswTdi - ok
22:20:25.0341 3460 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
22:20:25.0341 3460 AsyncMac - ok
22:20:25.0388 3460 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
22:20:25.0388 3460 atapi - ok
22:20:25.0434 3460 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
22:20:25.0434 3460 AudioEndpointBuilder - ok
22:20:25.0466 3460 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
22:20:25.0466 3460 AudioSrv - ok
22:20:25.0512 3460 [ 8FA553E9AE69808D99C164733A0F9590 ] avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
22:20:25.0512 3460 avast! Antivirus - ok
22:20:25.0544 3460 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
22:20:25.0544 3460 AxInstSV - ok
22:20:25.0590 3460 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys
22:20:25.0590 3460 b06bdrv - ok
22:20:25.0622 3460 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
22:20:25.0622 3460 b57nd60a - ok
22:20:25.0637 3460 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
22:20:25.0637 3460 BDESVC - ok
22:20:25.0653 3460 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
22:20:25.0653 3460 Beep - ok
22:20:25.0715 3460 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
22:20:25.0715 3460 BFE - ok
22:20:25.0762 3460 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
22:20:25.0778 3460 BITS - ok
22:20:25.0793 3460 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
22:20:25.0793 3460 blbdrive - ok
22:20:25.0824 3460 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
22:20:25.0840 3460 Bonjour Service - ok
22:20:25.0871 3460 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
22:20:25.0871 3460 bowser - ok
22:20:25.0887 3460 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
22:20:25.0902 3460 BrFiltLo - ok
22:20:25.0902 3460 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
22:20:25.0902 3460 BrFiltUp - ok
22:20:25.0949 3460 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
22:20:25.0949 3460 Browser - ok
22:20:25.0965 3460 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
22:20:25.0965 3460 Brserid - ok
22:20:25.0996 3460 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
22:20:25.0996 3460 BrSerWdm - ok
22:20:26.0012 3460 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
22:20:26.0012 3460 BrUsbMdm - ok
22:20:26.0027 3460 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
22:20:26.0027 3460 BrUsbSer - ok
22:20:26.0043 3460 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
22:20:26.0043 3460 BTHMODEM - ok
22:20:26.0074 3460 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
22:20:26.0074 3460 bthserv - ok
22:20:26.0105 3460 [ D8466DF7629A7ACD2BED0CDE206E5DF9 ] CbFs C:\Windows\system32\drivers\cbfs.sys
22:20:26.0105 3460 CbFs - ok
22:20:26.0121 3460 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
22:20:26.0121 3460 cdfs - ok
22:20:26.0152 3460 [ 83D2D75E1EFB81B3450C18131443F7DB ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
22:20:26.0152 3460 cdrom - ok
22:20:26.0183 3460 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
22:20:26.0183 3460 CertPropSvc - ok
22:20:26.0199 3460 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys
22:20:26.0199 3460 circlass - ok
22:20:26.0230 3460 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
22:20:26.0230 3460 CLFS - ok
22:20:26.0261 3460 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:20:26.0277 3460 clr_optimization_v2.0.50727_32 - ok
22:20:26.0292 3460 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
22:20:26.0292 3460 clr_optimization_v2.0.50727_64 - ok
22:20:26.0339 3460 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
22:20:26.0355 3460 clr_optimization_v4.0.30319_32 - ok
22:20:26.0370 3460 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
22:20:26.0370 3460 clr_optimization_v4.0.30319_64 - ok
22:20:26.0386 3460 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
22:20:26.0386 3460 CmBatt - ok
22:20:26.0495 3460 [ 65FB5097D9EE7E3A99E932CFA0E4B344 ] cmdAgent C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
22:20:26.0511 3460 cmdAgent - ok
22:20:26.0558 3460 [ 919ACCC22ABDC1C3CA68326C0E5DEAF9 ] cmdGuard C:\Windows\system32\DRIVERS\cmdguard.sys
22:20:26.0558 3460 cmdGuard - ok
22:20:26.0573 3460 [ F8FECE0F1D44C4A58778083B00EEADAC ] cmdHlp C:\Windows\system32\DRIVERS\cmdhlp.sys
22:20:26.0573 3460 cmdHlp - ok
22:20:26.0620 3460 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
22:20:26.0620 3460 cmdide - ok
22:20:26.0651 3460 [ 9AC4F97C2D3E93367E2148EA940CD2CD ] CNG C:\Windows\system32\Drivers\cng.sys
22:20:26.0651 3460 CNG - ok
22:20:26.0682 3460 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
22:20:26.0682 3460 Compbatt - ok
22:20:26.0714 3460 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
22:20:26.0714 3460 CompositeBus - ok
22:20:26.0729 3460 COMSysApp - ok
22:20:26.0760 3460 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
22:20:26.0760 3460 crcdisk - ok
22:20:26.0792 3460 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
22:20:26.0792 3460 CryptSvc - ok
22:20:26.0885 3460 [ AEFB8558199BD5212B268B09BFA1D71A ] CSHelper C:\Windows\SysWOW64\CSHelper.exe
22:20:26.0885 3460 CSHelper - ok
22:20:26.0963 3460 cvhsvc - ok
22:20:27.0010 3460 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
22:20:27.0010 3460 DcomLaunch - ok
22:20:27.0041 3460 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
22:20:27.0057 3460 defragsvc - ok
22:20:27.0088 3460 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
22:20:27.0088 3460 DfsC - ok
22:20:27.0119 3460 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
22:20:27.0119 3460 Dhcp - ok
22:20:27.0135 3460 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
22:20:27.0135 3460 discache - ok
22:20:27.0150 3460 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys
22:20:27.0150 3460 Disk - ok
22:20:27.0182 3460 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
22:20:27.0197 3460 Dnscache - ok
22:20:27.0228 3460 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
22:20:27.0228 3460 dot3svc - ok
22:20:27.0244 3460 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
22:20:27.0244 3460 DPS - ok
22:20:27.0275 3460 [ D5761DD586C54BF710174E992FA83EAA ] DragonSvc C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe
22:20:27.0275 3460 DragonSvc - ok
22:20:27.0291 3460 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
22:20:27.0291 3460 drmkaud - ok
22:20:27.0338 3460 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
22:20:27.0338 3460 DXGKrnl - ok
22:20:27.0353 3460 EagleX64 - ok
22:20:27.0384 3460 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
22:20:27.0384 3460 EapHost - ok
22:20:27.0447 3460 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys
22:20:27.0478 3460 ebdrv - ok
22:20:27.0494 3460 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
22:20:27.0509 3460 EFS - ok
22:20:27.0540 3460 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
22:20:27.0540 3460 ehRecvr - ok
22:20:27.0556 3460 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
22:20:27.0556 3460 ehSched - ok
22:20:27.0587 3460 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
22:20:27.0587 3460 elxstor - ok
22:20:27.0650 3460 [ 000598EAA293D5139F3DBC68516F901E ] EPSON_PM_RPCV4_01 C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
22:20:27.0650 3460 EPSON_PM_RPCV4_01 - ok
22:20:27.0681 3460 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
22:20:27.0681 3460 ErrDev - ok
22:20:27.0712 3460 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
22:20:27.0728 3460 EventSystem - ok
22:20:27.0743 3460 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
22:20:27.0743 3460 exfat - ok
22:20:27.0759 3460 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
22:20:27.0759 3460 fastfat - ok
22:20:27.0790 3460 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
22:20:27.0806 3460 Fax - ok
22:20:27.0821 3460 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys
22:20:27.0821 3460 fdc - ok
22:20:27.0852 3460 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
22:20:27.0852 3460 fdPHost - ok
22:20:27.0868 3460 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
22:20:27.0868 3460 FDResPub - ok
22:20:27.0884 3460 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
22:20:27.0884 3460 FileInfo - ok
22:20:27.0899 3460 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
22:20:27.0899 3460 Filetrace - ok
22:20:27.0915 3460 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
22:20:27.0915 3460 flpydisk - ok
22:20:27.0946 3460 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
22:20:27.0946 3460 FltMgr - ok
22:20:27.0977 3460 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
22:20:27.0993 3460 FontCache - ok
22:20:28.0040 3460 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
22:20:28.0040 3460 FontCache3.0.0.0 - ok
22:20:28.0055 3460 FoxAwdWINFLASH64 - ok
22:20:28.0086 3460 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
22:20:28.0086 3460 FsDepends - ok
22:20:28.0118 3460 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
22:20:28.0118 3460 Fs_Rec - ok
22:20:28.0164 3460 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
22:20:28.0164 3460 fvevol - ok
22:20:28.0164 3460 FXDrv32 - ok
22:20:28.0180 3460 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
22:20:28.0196 3460 gagp30kx - ok
22:20:28.0227 3460 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
22:20:28.0227 3460 GEARAspiWDM - ok
22:20:28.0289 3460 [ 57888A823873B256786D88C8E5999093 ] GManager C:\Windows\system32\GManager.exe
22:20:28.0289 3460 GManager - ok
22:20:28.0352 3460 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
22:20:28.0352 3460 gpsvc - ok
22:20:28.0383 3460 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
22:20:28.0383 3460 hcw85cir - ok
22:20:28.0430 3460 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
22:20:28.0430 3460 HdAudAddService - ok
22:20:28.0461 3460 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
22:20:28.0461 3460 HDAudBus - ok
22:20:28.0476 3460 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
22:20:28.0476 3460 HidBatt - ok
22:20:28.0508 3460 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
22:20:28.0508 3460 HidBth - ok
22:20:28.0539 3460 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
22:20:28.0539 3460 HidIr - ok
22:20:28.0554 3460 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
22:20:28.0570 3460 hidserv - ok
22:20:28.0570 3460 [ B3BF6B5B50006DEF50B66306D99FCF6F ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
22:20:28.0570 3460 HidUsb - ok
22:20:28.0601 3460 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
22:20:28.0601 3460 hkmsvc - ok
22:20:28.0632 3460 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
22:20:28.0632 3460 HomeGroupListener - ok
22:20:28.0664 3460 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
22:20:28.0679 3460 HomeGroupProvider - ok
22:20:28.0679 3460 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
22:20:28.0695 3460 HpSAMD - ok
22:20:28.0726 3460 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
22:20:28.0726 3460 HTTP - ok
22:20:28.0757 3460 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
22:20:28.0757 3460 hwpolicy - ok
22:20:28.0788 3460 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
22:20:28.0788 3460 i8042prt - ok
22:20:28.0804 3460 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
22:20:28.0820 3460 iaStorV - ok
22:20:28.0851 3460 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
22:20:28.0851 3460 idsvc - ok
22:20:28.0991 3460 [ A87261EF1546325B559374F5689CF5BC ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
22:20:29.0022 3460 igfx - ok
22:20:29.0038 3460 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
22:20:29.0038 3460 iirsp - ok
22:20:29.0085 3460 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
22:20:29.0100 3460 IKEEXT - ok
22:20:29.0132 3460 [ C4E67D3037DC79E39D7136581A947F50 ] inspect C:\Windows\system32\DRIVERS\inspect.sys
22:20:29.0132 3460 inspect - ok
22:20:29.0178 3460 [ A0EAB13A78CC5FB960EC76E3D6408DA3 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
22:20:29.0178 3460 IntcAzAudAddService - ok
22:20:29.0194 3460 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
22:20:29.0194 3460 intelide - ok
22:20:29.0210 3460 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
22:20:29.0210 3460 intelppm - ok
22:20:29.0241 3460 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
22:20:29.0241 3460 IPBusEnum - ok
22:20:29.0272 3460 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
22:20:29.0272 3460 IpFilterDriver - ok
22:20:29.0319 3460 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
22:20:29.0334 3460 iphlpsvc - ok
22:20:29.0350 3460 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
22:20:29.0350 3460 IPMIDRV - ok
22:20:29.0366 3460 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
22:20:29.0366 3460 IPNAT - ok
22:20:29.0412 3460 [ 6E50CFA46527B39015B750AAD161C5CC ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
22:20:29.0412 3460 iPod Service - ok
22:20:29.0428 3460 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
22:20:29.0428 3460 IRENUM - ok
22:20:29.0459 3460 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
22:20:29.0459 3460 isapnp - ok
22:20:29.0475 3460 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
22:20:29.0475 3460 iScsiPrt - ok
22:20:29.0506 3460 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
22:20:29.0506 3460 kbdclass - ok
22:20:29.0522 3460 [ 6DEF98F8541E1B5DCEB2C822A11F7323 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
22:20:29.0522 3460 kbdhid - ok
22:20:29.0537 3460 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
22:20:29.0537 3460 KeyIso - ok
22:20:29.0568 3460 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
22:20:29.0568 3460 KSecDD - ok
22:20:29.0584 3460 [ 26C43A7C2862447EC59DEDA188D1DA07 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
22:20:29.0584 3460 KSecPkg - ok
22:20:29.0600 3460 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
22:20:29.0600 3460 ksthunk - ok
22:20:29.0615 3460 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
22:20:29.0631 3460 KtmRm - ok
22:20:29.0662 3460 [ CAEAA16039485B2D3BB069C1107442A5 ] L4301_Solar C:\Program Files\Logitech\SolarApp\L4301_Solar.exe
22:20:29.0662 3460 L4301_Solar - ok
22:20:29.0693 3460 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
22:20:29.0709 3460 LanmanServer - ok
22:20:29.0740 3460 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
22:20:29.0740 3460 LanmanWorkstation - ok
22:20:29.0756 3460 [ 6E7B4E75E8A226EDC8A9A8B1C3510F9B ] LightScribeService C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
22:20:29.0756 3460 LightScribeService - ok
22:20:29.0818 3460 [ C51D41A17256A6128B7D6C601AF3AEB5 ] LivedriveVSSService C:\Program Files (x86)\Livedrive\VSSService.exe
22:20:29.0818 3460 LivedriveVSSService - ok
22:20:29.0834 3460 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
22:20:29.0834 3460 lltdio - ok
22:20:29.0849 3460 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
22:20:29.0865 3460 lltdsvc - ok
22:20:29.0865 3460 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
22:20:29.0865 3460 lmhosts - ok
22:20:29.0896 3460 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
22:20:29.0896 3460 LSI_FC - ok
22:20:29.0912 3460 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
22:20:29.0912 3460 LSI_SAS - ok
22:20:29.0943 3460 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
22:20:29.0943 3460 LSI_SAS2 - ok
22:20:29.0958 3460 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
22:20:29.0958 3460 LSI_SCSI - ok
22:20:29.0974 3460 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
22:20:29.0974 3460 luafv - ok
22:20:30.0036 3460 [ 3E23A0792D5EE0A072961E9E9F347368 ] MCTDesktopSvr C:\Program Files (x86)\Common Files\DesktopUtil\MCTDesktopSvr.exe
22:20:30.0036 3460 MCTDesktopSvr - ok
22:20:30.0099 3460 [ 6EC296743133C26E29F43E7338531EEF ] mctkmd C:\Windows\system32\drivers\mctkmd64.sys
22:20:30.0099 3460 mctkmd - ok
22:20:30.0114 3460 [ 7E622C16CA2798B352C0B31DBB208CBD ] mctkmdldr C:\Windows\system32\drivers\mctkmdldr64.sys
22:20:30.0114 3460 mctkmdldr - ok
22:20:30.0146 3460 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
22:20:30.0146 3460 Mcx2Svc - ok
22:20:30.0177 3460 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
22:20:30.0177 3460 megasas - ok
22:20:30.0192 3460 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
22:20:30.0192 3460 MegaSR - ok
22:20:30.0208 3460 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
22:20:30.0208 3460 MMCSS - ok
22:20:30.0224 3460 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
22:20:30.0224 3460 Modem - ok
22:20:30.0270 3460 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
22:20:30.0270 3460 monitor - ok
22:20:30.0348 3460 [ AC9D6E3629E4388A9EA9B4172493AAEE ] Motorola Device Manager C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe
22:20:30.0348 3460 Motorola Device Manager - ok
22:20:30.0380 3460 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
22:20:30.0380 3460 mouclass - ok
22:20:30.0395 3460 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
22:20:30.0395 3460 mouhid - ok
22:20:30.0426 3460 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
22:20:30.0426 3460 mountmgr - ok
22:20:30.0473 3460 [ 8A7C8F4C713E70D73946833D76B77035 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
22:20:30.0473 3460 MozillaMaintenance - ok
22:20:30.0504 3460 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
22:20:30.0504 3460 mpio - ok
22:20:30.0520 3460 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
22:20:30.0520 3460 mpsdrv - ok
22:20:30.0567 3460 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
22:20:30.0567 3460 MpsSvc - ok
22:20:30.0614 3460 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
22:20:30.0614 3460 MRxDAV - ok
22:20:30.0645 3460 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
22:20:30.0645 3460 mrxsmb - ok
22:20:30.0692 3460 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
22:20:30.0692 3460 mrxsmb10 - ok
22:20:30.0707 3460 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
22:20:30.0723 3460 mrxsmb20 - ok
22:20:30.0738 3460 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
22:20:30.0738 3460 msahci - ok
22:20:30.0754 3460 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
22:20:30.0770 3460 msdsm - ok
22:20:30.0785 3460 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
22:20:30.0785 3460 MSDTC - ok
22:20:30.0801 3460 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
22:20:30.0801 3460 Msfs - ok
22:20:30.0816 3460 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
22:20:30.0816 3460 mshidkmdf - ok
22:20:30.0832 3460 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
22:20:30.0832 3460 msisadrv - ok
22:20:30.0848 3460 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
22:20:30.0848 3460 MSiSCSI - ok
22:20:30.0863 3460 msiserver - ok
22:20:30.0879 3460 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
22:20:30.0879 3460 MSKSSRV - ok
22:20:30.0894 3460 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
22:20:30.0894 3460 MSPCLOCK - ok
22:20:30.0910 3460 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
22:20:30.0910 3460 MSPQM - ok
22:20:30.0941 3460 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
22:20:30.0941 3460 MsRPC - ok
22:20:30.0972 3460 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
22:20:30.0972 3460 mssmbios - ok
22:20:30.0988 3460 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
22:20:30.0988 3460 MSTEE - ok
22:20:31.0004 3460 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
22:20:31.0004 3460 MTConfig - ok
22:20:31.0019 3460 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
22:20:31.0019 3460 Mup - ok
22:20:31.0050 3460 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
22:20:31.0066 3460 napagent - ok
22:20:31.0082 3460 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
22:20:31.0082 3460 NativeWifiP - ok
22:20:31.0128 3460 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
22:20:31.0144 3460 NDIS - ok
22:20:31.0160 3460 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
22:20:31.0160 3460 NdisCap - ok
22:20:31.0175 3460 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
22:20:31.0175 3460 NdisTapi - ok
22:20:31.0206 3460 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
22:20:31.0206 3460 Ndisuio - ok
22:20:31.0238 3460 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
22:20:31.0238 3460 NdisWan - ok
22:20:31.0269 3460 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
22:20:31.0269 3460 NDProxy - ok
22:20:31.0269 3460 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
22:20:31.0269 3460 NetBIOS - ok
22:20:31.0316 3460 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
22:20:31.0316 3460 NetBT - ok
22:20:31.0331 3460 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
22:20:31.0331 3460 Netlogon - ok
22:20:31.0362 3460 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
22:20:31.0362 3460 Netman - ok
22:20:31.0394 3460 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:20:31.0394 3460 NetMsmqActivator - ok
22:20:31.0409 3460 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:20:31.0409 3460 NetPipeActivator - ok
22:20:31.0425 3460 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
22:20:31.0425 3460 netprofm - ok
22:20:31.0440 3460 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:20:31.0440 3460 NetTcpActivator - ok
22:20:31.0440 3460 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
22:20:31.0440 3460 NetTcpPortSharing - ok
22:20:31.0472 3460 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
22:20:31.0472 3460 nfrd960 - ok
22:20:31.0518 3460 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
22:20:31.0518 3460 NlaSvc - ok
22:20:31.0550 3460 [ C31FA031335EFF434B2D94278E74BCCE ] npf C:\Windows\system32\drivers\npf.sys
22:20:31.0550 3460 npf - ok
22:20:31.0565 3460 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
22:20:31.0565 3460 Npfs - ok
22:20:31.0581 3460 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
22:20:31.0581 3460 nsi - ok
22:20:31.0581 3460 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
22:20:31.0581 3460 nsiproxy - ok
22:20:31.0643 3460 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
22:20:31.0643 3460 Ntfs - ok
22:20:31.0659 3460 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
22:20:31.0659 3460 Null - ok
22:20:31.0877 3460 [ 5104BAC2DA2A5BDD86AC6B0708B00F06 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
22:20:32.0064 3460 nvlddmkm - ok
22:20:32.0096 3460 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
22:20:32.0096 3460 nvraid - ok
22:20:32.0111 3460 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
22:20:32.0111 3460 nvstor - ok
22:20:32.0158 3460 [ DDFAFCE89A5C93D04712B86F94E9FCBA ] nvsvc C:\Windows\system32\nvvsvc.exe
22:20:32.0158 3460 nvsvc - ok
22:20:32.0220 3460 [ 84E035225474E48CD3A6A3CE52332095 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
22:20:32.0252 3460 nvUpdatusService - ok
22:20:32.0283 3460 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
22:20:32.0283 3460 nv_agp - ok
22:20:32.0314 3460 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
22:20:32.0314 3460 ohci1394 - ok
22:20:32.0345 3460 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
22:20:32.0361 3460 ose - ok
22:20:32.0470 3460 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
22:20:32.0532 3460 osppsvc - ok
22:20:32.0564 3460 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
22:20:32.0579 3460 p2pimsvc - ok
22:20:32.0595 3460 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
22:20:32.0610 3460 p2psvc - ok
22:20:32.0610 3460 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys
22:20:32.0626 3460 Parport - ok
22:20:32.0657 3460 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
22:20:32.0657 3460 partmgr - ok
22:20:32.0673 3460 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
22:20:32.0673 3460 PcaSvc - ok
22:20:32.0688 3460 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
22:20:32.0688 3460 pci - ok
22:20:32.0704 3460 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
22:20:32.0704 3460 pciide - ok
22:20:32.0735 3460 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
22:20:32.0735 3460 pcmcia - ok
22:20:32.0751 3460 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
22:20:32.0751 3460 pcw - ok
22:20:32.0766 3460 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
22:20:32.0782 3460 PEAUTH - ok
22:20:32.0829 3460 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
22:20:32.0829 3460 PerfHost - ok
22:20:32.0891 3460 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
22:20:32.0922 3460 pla - ok
22:20:32.0954 3460 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
22:20:32.0969 3460 PlugPlay - ok
22:20:32.0985 3460 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
22:20:32.0985 3460 PNRPAutoReg - ok
22:20:33.0000 3460 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
22:20:33.0000 3460 PNRPsvc - ok
22:20:33.0016 3460 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
22:20:33.0032 3460 PolicyAgent - ok
22:20:33.0047 3460 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
22:20:33.0063 3460 Power - ok
22:20:33.0094 3460 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
22:20:33.0094 3460 PptpMiniport - ok
22:20:33.0110 3460 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys
22:20:33.0125 3460 Processor - ok
22:20:33.0156 3460 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
22:20:33.0156 3460 ProfSvc - ok
22:20:33.0172 3460 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
22:20:33.0188 3460 ProtectedStorage - ok
22:20:33.0219 3460 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
22:20:33.0219 3460 Psched - ok
22:20:33.0250 3460 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
22:20:33.0281 3460 ql2300 - ok
22:20:33.0312 3460 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
22:20:33.0312 3460 ql40xx - ok
22:20:33.0344 3460 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
22:20:33.0344 3460 QWAVE - ok
22:20:33.0375 3460 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
22:20:33.0375 3460 QWAVEdrv - ok
22:20:33.0390 3460 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
22:20:33.0390 3460 RasAcd - ok
22:20:33.0406 3460 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
22:20:33.0406 3460 RasAgileVpn - ok
22:20:33.0422 3460 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
22:20:33.0422 3460 RasAuto - ok
22:20:33.0453 3460 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
22:20:33.0453 3460 Rasl2tp - ok
22:20:33.0500 3460 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
22:20:33.0515 3460 RasMan - ok
22:20:33.0531 3460 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
22:20:33.0531 3460 RasPppoe - ok
22:20:33.0546 3460 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
22:20:33.0546 3460 RasSstp - ok
22:20:33.0578 3460 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
22:20:33.0578 3460 rdbss - ok
22:20:33.0593 3460 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
22:20:33.0593 3460 rdpbus - ok
22:20:33.0609 3460 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
22:20:33.0609 3460 RDPCDD - ok
22:20:33.0609 3460 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
22:20:33.0609 3460 RDPENCDD - ok
22:20:33.0624 3460 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
22:20:33.0624 3460 RDPREFMP - ok
22:20:33.0671 3460 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
22:20:33.0671 3460 RDPWD - ok
22:20:33.0702 3460 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
22:20:33.0718 3460 rdyboost - ok
22:20:33.0749 3460 [ E30CB0629029E985E2DD11DF254F0860 ] RealtekUSB C:\Program Files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtlService.exe
22:20:33.0749 3460 RealtekUSB - ok
22:20:33.0780 3460 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
22:20:33.0780 3460 RemoteAccess - ok
22:20:33.0796 3460 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
22:20:33.0796 3460 RemoteRegistry - ok
22:20:33.0858 3460 [ 8CFCA7E2FD4B57C2BEF929C1C1A4C56E ] RichVideo C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
22:20:33.0858 3460 RichVideo - ok
22:20:33.0874 3460 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
22:20:33.0874 3460 RpcEptMapper - ok
22:20:33.0905 3460 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
22:20:33.0905 3460 RpcLocator - ok
22:20:33.0936 3460 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
22:20:33.0936 3460 RpcSs - ok
22:20:33.0952 3460 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
22:20:33.0952 3460 rspndr - ok
22:20:33.0983 3460 [ 4B42BC58294E83A6A92EC8B88C14C4A3 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
22:20:33.0999 3460 RTL8167 - ok
22:20:34.0014 3460 [ 1C546EA56A06B773A52EE48E0205072D ] RTL8187 C:\Windows\system32\DRIVERS\RTL8187.sys
22:20:34.0014 3460 RTL8187 - ok
22:20:34.0030 3460 [ D1664991A07ACF2703D4A4E5BE4B6C80 ] RtlProt C:\Windows\system32\DRIVERS\rtlprot.sys
22:20:34.0030 3460 RtlProt - ok
22:20:34.0046 3460 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
22:20:34.0046 3460 SamSs - ok
22:20:34.0092 3460 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
22:20:34.0092 3460 sbp2port - ok
22:20:34.0124 3460 [ 794D4B48DFB6E999537C7C3947863463 ] SBSDWSCService C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
22:20:34.0139 3460 SBSDWSCService - ok
22:20:34.0155 3460 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
22:20:34.0155 3460 SCardSvr - ok
22:20:34.0186 3460 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
22:20:34.0186 3460 scfilter - ok
22:20:34.0233 3460 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
22:20:34.0248 3460 Schedule - ok
22:20:34.0280 3460 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
22:20:34.0280 3460 SCPolicySvc - ok
22:20:34.0326 3460 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
22:20:34.0326 3460 SDRSVC - ok
22:20:34.0358 3460 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
22:20:34.0358 3460 secdrv - ok
22:20:34.0389 3460 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
22:20:34.0389 3460 seclogon - ok
22:20:34.0404 3460 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
22:20:34.0404 3460 SENS - ok
22:20:34.0404 3460 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
22:20:34.0420 3460 SensrSvc - ok
22:20:34.0436 3460 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
22:20:34.0436 3460 Serenum - ok
22:20:34.0451 3460 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys
22:20:34.0451 3460 Serial - ok
22:20:34.0482 3460 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
22:20:34.0498 3460 sermouse - ok
22:20:34.0529 3460 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
22:20:34.0529 3460 SessionEnv - ok
22:20:34.0560 3460 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
22:20:34.0560 3460 sffdisk - ok
22:20:34.0592 3460 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
22:20:34.0592 3460 sffp_mmc - ok
22:20:34.0607 3460 [ 178298F767FE638C9FEDCBDEF58BB5E4 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
22:20:34.0607 3460 sffp_sd - ok
22:20:34.0623 3460 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
22:20:34.0623 3460 sfloppy - ok
22:20:34.0654 3460 [ D5183ED285D2795491DC15BDDCBEE5AD ] Sftfs C:\Windows\system32\DRIVERS\Sftfslh.sys
22:20:34.0670 3460 Sftfs - ok
22:20:34.0701 3460 sftlist - ok
22:20:34.0732 3460 [ 00F118B68C50D2206DD51634F9142B83 ] Sftplay C:\Windows\system32\DRIVERS\Sftplaylh.sys
22:20:34.0748 3460 Sftplay - ok
22:20:34.0763 3460 [ 76A827DF5640BFE16A0CDBB4108ADECA ] Sftredir C:\Windows\system32\DRIVERS\Sftredirlh.sys
22:20:34.0763 3460 Sftredir - ok
22:20:34.0763 3460 [ 1B4C9701645086BAB8CAFFFCE30ED284 ] Sftvol C:\Windows\system32\DRIVERS\Sftvollh.sys
22:20:34.0779 3460 Sftvol - ok
22:20:34.0779 3460 sftvsa - ok
22:20:34.0794 3460 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
22:20:34.0810 3460 SharedAccess - ok
22:20:34.0841 3460 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
22:20:34.0857 3460 ShellHWDetection - ok
22:20:34.0872 3460 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
22:20:34.0872 3460 SiSRaid2 - ok
22:20:34.0888 3460 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
22:20:34.0888 3460 SiSRaid4 - ok
22:20:34.0919 3460 [ A37740568718F245E818D0C5575B9AA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
22:20:34.0935 3460 SkypeUpdate - ok
22:20:34.0966 3460 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
22:20:34.0966 3460 Smb - ok
22:20:34.0997 3460 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
22:20:35.0013 3460 SNMPTRAP - ok
22:20:35.0013 3460 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
22:20:35.0013 3460 spldr - ok
22:20:35.0044 3460 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
22:20:35.0060 3460 Spooler - ok
22:20:35.0138 3460 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
22:20:35.0153 3460 sppsvc - ok
22:20:35.0169 3460 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
22:20:35.0169 3460 sppuinotify - ok
22:20:35.0216 3460 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
22:20:35.0216 3460 srv - ok
22:20:35.0247 3460 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
22:20:35.0247 3460 srv2 - ok
22:20:35.0294 3460 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
22:20:35.0294 3460 srvnet - ok
22:20:35.0309 3460 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
22:20:35.0325 3460 SSDPSRV - ok
22:20:35.0340 3460 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
22:20:35.0340 3460 SstpSvc - ok
22:20:35.0387 3460 [ F0359F7CE712D69ACEF0886BDB4792ED ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
22:20:35.0387 3460 Stereo Service - ok
22:20:35.0403 3460 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
22:20:35.0403 3460 stexstor - ok
22:20:35.0450 3460 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
22:20:35.0450 3460 stisvc - ok
22:20:35.0496 3460 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
22:20:35.0496 3460 swenum - ok
22:20:35.0512 3460 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
22:20:35.0528 3460 swprv - ok
22:20:35.0574 3460 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
22:20:35.0590 3460 SysMain - ok
22:20:35.0621 3460 [ D71B5F0CCE5B99BECDD487E67A63465B ] t1pusb64 C:\Windows\system32\drivers\t1pusb64.sys
22:20:35.0621 3460 t1pusb64 - ok
22:20:35.0668 3460 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
22:20:35.0668 3460 TabletInputService - ok
22:20:35.0699 3460 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
22:20:35.0715 3460 TapiSrv - ok
22:20:35.0730 3460 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
22:20:35.0746 3460 TBS - ok
22:20:35.0793 3460 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
22:20:35.0808 3460 Tcpip - ok
22:20:35.0855 3460 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
22:20:35.0855 3460 TCPIP6 - ok
22:20:35.0902 3460 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
22:20:35.0902 3460 tcpipreg - ok
22:20:35.0918 3460 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
22:20:35.0918 3460 TDPIPE - ok
22:20:35.0949 3460 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
22:20:35.0949 3460 TDTCP - ok
22:20:35.0980 3460 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
22:20:35.0996 3460 tdx - ok
22:20:35.0996 3460 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
22:20:35.0996 3460 TermDD - ok
22:20:36.0042 3460 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
22:20:36.0042 3460 TermService - ok
22:20:36.0058 3460 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
22:20:36.0058 3460 Themes - ok
22:20:36.0089 3460 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
22:20:36.0089 3460 THREADORDER - ok
22:20:36.0105 3460 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
22:20:36.0105 3460 TrkWks - ok
22:20:36.0152 3460 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
22:20:36.0152 3460 TrustedInstaller - ok
22:20:36.0198 3460 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
22:20:36.0198 3460 tssecsrv - ok
22:20:36.0230 3460 [ D11C783E3EF9A3C52C0EBE83CC5000E9 ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
22:20:36.0230 3460 TsUsbFlt - ok
22:20:36.0261 3460 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
22:20:36.0261 3460 tunnel - ok
22:20:36.0292 3460 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
22:20:36.0292 3460 uagp35 - ok
22:20:36.0323 3460 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
22:20:36.0323 3460 udfs - ok
22:20:36.0339 3460 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
22:20:36.0354 3460 UI0Detect - ok
22:20:36.0370 3460 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
22:20:36.0370 3460 uliagpkx - ok
22:20:36.0386 3460 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\drivers\umbus.sys
22:20:36.0386 3460 umbus - ok
22:20:36.0417 3460 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
22:20:36.0417 3460 UmPass - ok
22:20:36.0432 3460 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
22:20:36.0432 3460 upnphost - ok
22:20:36.0479 3460 [ AF1B9474D67897D0C2CFF58E0ACEACCC ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
22:20:36.0479 3460 USBAAPL64 - ok
22:20:36.0510 3460 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
22:20:36.0510 3460 usbaudio - ok
22:20:36.0526 3460 [ B26AFB54A534D634523C4FB66765B026 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
22:20:36.0542 3460 usbccgp - ok
22:20:36.0573 3460 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
22:20:36.0573 3460 usbcir - ok
22:20:36.0604 3460 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
22:20:36.0604 3460 usbehci - ok
22:20:36.0635 3460 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
22:20:36.0635 3460 usbhub - ok
22:20:36.0651 3460 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
22:20:36.0651 3460 usbohci - ok
22:20:36.0682 3460 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
22:20:36.0682 3460 usbprint - ok
22:20:36.0713 3460 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
22:20:36.0713 3460 usbscan - ok
22:20:36.0744 3460 [ 080D3820DA6C046BE82FC8B45A893E83 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
22:20:36.0744 3460 USBSTOR - ok
22:20:36.0760 3460 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
22:20:36.0760 3460 usbuhci - ok
22:20:36.0807 3460 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
22:20:36.0807 3460 usbvideo - ok
22:20:36.0822 3460 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
22:20:36.0838 3460 UxSms - ok
22:20:36.0838 3460 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
22:20:36.0838 3460 VaultSvc - ok
22:20:36.0885 3460 [ D277EEFAE695BB4BE7DE1B4325368FAB ] vdbus C:\Windows\system32\DRIVERS\vdbus.sys
22:20:36.0885 3460 vdbus - ok
22:20:36.0900 3460 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
22:20:36.0900 3460 vdrvroot - ok
22:20:36.0932 3460 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
22:20:36.0947 3460 vds - ok
22:20:36.0963 3460 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
22:20:36.0963 3460 vga - ok
22:20:36.0994 3460 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
22:20:36.0994 3460 VgaSave - ok
22:20:37.0010 3460 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
22:20:37.0010 3460 vhdmp - ok
22:20:37.0041 3460 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
22:20:37.0041 3460 viaide - ok
22:20:37.0041 3460 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
22:20:37.0041 3460 volmgr - ok
22:20:37.0072 3460 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
22:20:37.0072 3460 volmgrx - ok
22:20:37.0088 3460 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
22:20:37.0088 3460 volsnap - ok
22:20:37.0119 3460 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
22:20:37.0119 3460 vsmraid - ok
22:20:37.0166 3460 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
22:20:37.0181 3460 VSS - ok
22:20:37.0197 3460 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
22:20:37.0197 3460 vwifibus - ok
22:20:37.0212 3460 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
22:20:37.0212 3460 W32Time - ok
22:20:37.0306 3460 w4shwdrv - ok
22:20:37.0337 3460 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
22:20:37.0337 3460 WacomPen - ok
22:20:37.0353 3460 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
22:20:37.0353 3460 WANARP - ok
22:20:37.0353 3460 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
22:20:37.0353 3460 Wanarpv6 - ok
22:20:37.0400 3460 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
22:20:37.0400 3460 WatAdminSvc - ok
22:20:37.0462 3460 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
22:20:37.0478 3460 wbengine - ok
22:20:37.0493 3460 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
22:20:37.0509 3460 WbioSrvc - ok
22:20:37.0540 3460 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
22:20:37.0540 3460 wcncsvc - ok
22:20:37.0556 3460 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
22:20:37.0556 3460 WcsPlugInService - ok
22:20:37.0571 3460 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys
22:20:37.0571 3460 Wd - ok
22:20:37.0602 3460 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
22:20:37.0602 3460 Wdf01000 - ok
22:20:37.0618 3460 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
22:20:37.0618 3460 WdiServiceHost - ok
22:20:37.0634 3460 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
22:20:37.0634 3460 WdiSystemHost - ok
22:20:37.0665 3460 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
22:20:37.0680 3460 WebClient - ok
22:20:37.0696 3460 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
22:20:37.0696 3460 Wecsvc - ok
22:20:37.0712 3460 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
22:20:37.0712 3460 wercplsupport - ok
22:20:37.0727 3460 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
22:20:37.0727 3460 WerSvc - ok
22:20:37.0743 3460 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
22:20:37.0743 3460 WfpLwf - ok
22:20:37.0758 3460 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
22:20:37.0758 3460 WIMMount - ok
22:20:37.0774 3460 WinDefend - ok
22:20:37.0790 3460 WinHttpAutoProxySvc - ok
22:20:37.0836 3460 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
22:20:37.0836 3460 Winmgmt - ok
22:20:37.0899 3460 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
22:20:37.0930 3460 WinRM - ok
22:20:37.0977 3460 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
22:20:37.0977 3460 WinUsb - ok
22:20:37.0992 3460 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
22:20:38.0008 3460 Wlansvc - ok
22:20:38.0117 3460 [ 357CABBF155AFD1D3926E62539D2A3A7 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
22:20:38.0133 3460 wlidsvc - ok
22:20:38.0164 3460 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
22:20:38.0164 3460 WmiAcpi - ok
22:20:38.0195 3460 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
22:20:38.0195 3460 wmiApSrv - ok
22:20:38.0211 3460 WMPNetworkSvc - ok
22:20:38.0320 3460 [ 83B6CA03C846FCD47F9883D77D1EB27B ] WMZuneComm C:\Program Files\Zune\WMZuneComm.exe
22:20:38.0320 3460 WMZuneComm - ok
22:20:38.0351 3460 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
22:20:38.0367 3460 WPCSvc - ok
22:20:38.0398 3460 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
22:20:38.0398 3460 WPDBusEnum - ok
22:20:38.0414 3460 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
22:20:38.0429 3460 ws2ifsl - ok
22:20:38.0429 3460 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
22:20:38.0429 3460 wscsvc - ok
22:20:38.0429 3460 WSearch - ok
22:20:38.0507 3460 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
22:20:38.0523 3460 wuauserv - ok
22:20:38.0554 3460 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
22:20:38.0554 3460 WudfPf - ok
22:20:38.0570 3460 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
22:20:38.0585 3460 WUDFRd - ok
22:20:38.0616 3460 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
22:20:38.0616 3460 wudfsvc - ok
22:20:38.0632 3460 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
22:20:38.0648 3460 WwanSvc - ok
22:20:38.0804 3460 [ 67B787C34FB2888D01B130AE007042D8 ] ZuneNetworkSvc C:\Program Files\Zune\ZuneNss.exe
22:20:38.0866 3460 ZuneNetworkSvc - ok
22:20:38.0913 3460 [ 4D89FC1C20CF655739EFAC5DA81A67BC ] ZuneWlanCfgSvc C:\Program Files\Zune\ZuneWlanCfgSvc.exe
22:20:38.0928 3460 ZuneWlanCfgSvc - ok
22:20:38.0928 3460 ================ Scan global ===============================
22:20:38.0944 3460 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
22:20:38.0975 3460 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
22:20:38.0991 3460 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
22:20:39.0006 3460 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
22:20:39.0038 3460 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
22:20:39.0038 3460 [Global] - ok
22:20:39.0038 3460 ================ Scan MBR ==================================
22:20:39.0053 3460 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
22:20:39.0240 3460 \Device\Harddisk0\DR0 - ok
22:20:39.0240 3460 ================ Scan VBR ==================================
22:20:39.0240 3460 [ 93CF74300B91755E9A385F893F4BEB76 ] \Device\Harddisk0\DR0\Partition1
22:20:39.0256 3460 \Device\Harddisk0\DR0\Partition1 - ok
22:20:39.0256 3460 [ 1EA6E95139E14EC8C119DDD359BC5E2F ] \Device\Harddisk0\DR0\Partition2
22:20:39.0272 3460 \Device\Harddisk0\DR0\Partition2 - ok
22:20:39.0272 3460 ============================================================
22:20:39.0272 3460 Scan finished
22:20:39.0272 3460 ============================================================
22:20:39.0272 4796 Detected object count: 0
22:20:39.0272 4796 Actual detected object count: 0

Robybel

Post #6March 20, 2013, 5:46 AM UTC

Hi Genuwine

Good job

AdwCleaner

Please download AdwCleaner by Xplode onto your desktop.
Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Delete.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the content of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

============ Next ==============

[external image: Posted Image] Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

============ Next ==============

Download RogueKiller and save it to your desktop.
Quit all other programs
Start RogueKiller.exe
Wait until the Prescan has finished …
Click on Scan
[external image: Posted Image]
Wait for the end of the scan
A report will be created on your desktop.
Click on the Delete button
[external image: Posted Image]
Next click on the ShortcutsFix
[external image: Posted Image]
another report will be created on your desktop.

Please post: All RKreport.txt text files located on your desktop.

On your next reply please post :
AdwCleaner log
JRT report
All RKreport.txt

Let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

genuwine4532

Post #7March 20, 2013, 7:31 PM UTC

Okay, done, here are the logs, the RK actually gave 3 reports, so I pasted all of them, thank you

AdwCleaner log

# AdwCleaner v2.115 - Logfile created 03/20/2013 at 11:47:47
# Updated 17/03/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : OLGA - OLGA-PC
# Boot Mode : Normal
# Running from : C:\Users\OLGA\Downloads\VIRUS CLEAN\AdwCleaner.exe
# Option [Delete]

***** [Services] *****

***** [Files / Folders] *****

File Deleted : C:\Windows\SysWOW64\conduitEngine.tmp
Folder Deleted : C:\Program Files (x86)\ConduitEngine
Folder Deleted : C:\Program Files (x86)\IZArc\OpenCandy
Folder Deleted : C:\ProgramData\blekko toolbars
Folder Deleted : C:\Users\OLGA\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\OLGA\AppData\LocalLow\ConduitEngine

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\conduitEngine
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\Ask&Record;
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Zugo
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\conduitEngine
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsSetup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsSetup_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4C0573DC-0CF0-4EBE-B694-909D691EA03B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16464

Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.funmoods.com/?f=1&a;=adknlg&chnl;=adknlg&cd;=2XzuyEtN2Y1L1QzuzytD0F0B0AyCtByD0FtC0CyDtAtBzzzytN0D0Tzu0CtByDyBtN1L2Xzut
BtFtCtFtCtFtAtCtB&cr;=1606821829 –> hxxp://www.google.com

-\\ Mozilla Firefox v19.0.2 (en-US)

File : C:\Users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\prefs.js

Deleted : user_pref("extensions.s4fToolbar.si-blekko-domainlinks", true);
Deleted : user_pref("extensions.s4fToolbar.si-blekko-pagelinks", true);
Deleted : user_pref("extensions.s4fToolbar.si-blekko-rank", false);

-\\ Google Chrome v25.0.1364.172

File : C:\Users\OLGA\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[S1].txt - [4719 octets] - [20/03/2013 11:47:47]

########## EOF - C:\AdwCleaner[S1].txt - [4779 octets] ##########

================================================================================
====================================================================

JRT report

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.7.2 (03.15.2013:1)
OS: Windows 7 Home Premium x64
Ran by [removed] on Wed 03/20/2013 at 11:58:52.07
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully repaired: [Registry Value] hkey_current_user\software\microsoft\internet explorer\searchscopes\{0633ee93-d776-472f-a0ff-e1416b8b2e3a}\\DisplayName
Successfully repaired: [Registry Value] hkey_current_user\software\microsoft\internet explorer\searchscopes\{0633ee93-d776-472f-a0ff-e1416b8b2e3a}\\URL

~~~ Registry Keys

Successfully deleted: [Registry Key] hkey_classes_root\clsid\{70dd86e8-b5bc-4e4a-9d5c-b6234c24323c}

~~~ Files

Successfully deleted: [File] C:\eula.1028.txt
Successfully deleted: [File] C:\eula.1031.txt
Successfully deleted: [File] C:\eula.1033.txt
Successfully deleted: [File] C:\eula.1036.txt
Successfully deleted: [File] C:\eula.1040.txt
Successfully deleted: [File] C:\eula.1041.txt
Successfully deleted: [File] C:\eula.1042.txt
Successfully deleted: [File] C:\eula.2052.txt
Successfully deleted: [File] C:\install.res.1028.dll
Successfully deleted: [File] C:\install.res.1031.dll
Successfully deleted: [File] C:\install.res.1033.dll
Successfully deleted: [File] C:\install.res.1036.dll
Successfully deleted: [File] C:\install.res.1040.dll
Successfully deleted: [File] C:\install.res.1041.dll
Successfully deleted: [File] C:\install.res.1042.dll
Successfully deleted: [File] C:\install.res.2052.dll
Successfully deleted: [File] C:\install.res.3082.dll

~~~ Folders

Successfully deleted: [Folder] "C:\Windows\freecorder"

~~~ FireFox

Successfully deleted: [File] "C:\Program Files (x86)\Mozilla Firefox\searchplugins\search.xml"
Successfully deleted the following from C:\Users\OLGA\AppData\Roaming\mozilla\firefox\profiles\pflznupt.default\prefs.js

user_pref("extensions.seoquake.disable-baidu", true);
user_pref("extensions.seoquake.params.320.disable-baidu", false);
user_pref("extensions.seoquake.params.370.icon", "AAABAAEAEBAAAAAAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAQAQAAAAAAAAAAAAAAAA
AAAAAAAD///8B////Af///wHp6en/ubm5/4ODg/+JiYn/YmJi/
user_pref("extensions.seoquake.params.700.disable-baidu", true);
user_pref("extensions.seoquake.params.710.disable-baidu", true);
Emptied folder: C:\Users\OLGA\AppData\Roaming\mozilla\firefox\profiles\pflznupt.default\minidumps [16 files]

~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 03/20/2013 at 12:12:00.87
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

================================================================================
==============================================================================

RKreport #1

RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Website : http://tigzy.geekstogo.com/roguekiller.php
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : OLGA [Admin rights]
Mode : Scan – Date : 03/20/2013 12:18:38
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 18 ¤¤¤
[TASK][SUSP PATH] {2EA2C0A4-F060-4A56-92DB-75E05E5B872D} : C:\Users\OLGA\AppData\Roaming\Sick Marketing\Submitter.exe [-] -> FOUND
[TASK][SUSP PATH] {33AD3484-4D44-4002-81B9-5152F1FD1612} : C:\Users\OLGA\AppData\Roaming\Sick Marketing\Submitter.exe [-] -> FOUND
[TASK][SUSP PATH] {49627A41-9600-42BE-A92A-9475A17E30CD} : C:\Users\OLGA\Desktop\PlatformReader\Platform Reader.exe [x] -> FOUND
[TASK][SUSP PATH] {549BAE3B-2497-4525-9D42-EEF4A12B186A} : C:\Users\OLGA\Desktop\PlatformReader\Platform Reader.exe [x] -> FOUND
[TASK][SUSP PATH] {71825975-C17D-4408-9D98-E597170EBFEC} : C:\Users\OLGA\AppData\Roaming\Sick Marketing\Submitter.exe [-] -> FOUND
[TASK][SUSP PATH] {A2B8960D-DAF6-410E-8F0D-D6650A0EB775} : C:\Users\OLGA\Desktop\PlatformReader\Platform Reader.exe [x] -> FOUND
[TASK][SUSP PATH] {B61E4B37-5366-4C6B-B0FB-8D94172F89F3} : C:\Users\OLGA\Desktop\PlatformReader\Platform Reader.exe [x] -> FOUND
[TASK][SUSP PATH] {C0132771-A37C-41A3-B1C1-BF04C261C5F6} : C:\Users\OLGA\Desktop\setup.exe [x] -> FOUND
[TASK][SUSP PATH] {CB96B25A-EAC0-407C-A552-73530F22B00E} : C:\Users\OLGA\Desktop\setup.exe [x] -> FOUND
[PROXY IE] HKCU\[…]\Internet Settings : ProxyServer (:) -> FOUND
[HJPOL] HKCU\[…]\System : DisableTaskMgr (0) -> FOUND
[HJPOL] HKCU\[…]\System : DisableRegistryTools (0) -> FOUND
[HJ DESK] HKCU\[…]\ClassicStartMenu : {59031A47-3F72-44A7-89C5-5595FE6B30EE} (1) -> FOUND
[HJ DESK] HKCU\[…]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKCU\[…]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[HJ DESK] HKCU\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[HJ DESK] HKLM\[…]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
–> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
[…]

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: WDC WD5000AAKS-08V0A0 ATA Device +++++
— User —
[MBR] 4485694422203b629556218490174ffe
[BSP] 7b39f2f1599e9363f6fa18b1ecf58153 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 476838 Mo
User = LL1 … OK!
User = LL2 … OK!

Finished : << RKreport[1]_S_03202013_02d1218.txt >>
RKreport[1]_S_03202013_02d1218.txt

================================================================================
=================================================================================
============

RKreport #2

RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Website : http://tigzy.geekstogo.com/roguekiller.php
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : OLGA [Admin rights]
Mode : Remove – Date : 03/20/2013 12:21:22
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 18 ¤¤¤
[TASK][SUSP PATH] {2EA2C0A4-F060-4A56-92DB-75E05E5B872D} : C:\Users\OLGA\AppData\Roaming\Sick Marketing\Submitter.exe [-] -> DELETED
[TASK][SUSP PATH] {33AD3484-4D44-4002-81B9-5152F1FD1612} : C:\Users\OLGA\AppData\Roaming\Sick Marketing\Submitter.exe [-] -> DELETED
[TASK][SUSP PATH] {49627A41-9600-42BE-A92A-9475A17E30CD} : C:\Users\OLGA\Desktop\PlatformReader\Platform Reader.exe [x] -> DELETED
[TASK][SUSP PATH] {549BAE3B-2497-4525-9D42-EEF4A12B186A} : C:\Users\OLGA\Desktop\PlatformReader\Platform Reader.exe [x] -> DELETED
[TASK][SUSP PATH] {71825975-C17D-4408-9D98-E597170EBFEC} : C:\Users\OLGA\AppData\Roaming\Sick Marketing\Submitter.exe [-] -> DELETED
[TASK][SUSP PATH] {A2B8960D-DAF6-410E-8F0D-D6650A0EB775} : C:\Users\OLGA\Desktop\PlatformReader\Platform Reader.exe [x] -> DELETED
[TASK][SUSP PATH] {B61E4B37-5366-4C6B-B0FB-8D94172F89F3} : C:\Users\OLGA\Desktop\PlatformReader\Platform Reader.exe [x] -> DELETED
[TASK][SUSP PATH] {C0132771-A37C-41A3-B1C1-BF04C261C5F6} : C:\Users\OLGA\Desktop\setup.exe [x] -> DELETED
[TASK][SUSP PATH] {CB96B25A-EAC0-407C-A552-73530F22B00E} : C:\Users\OLGA\Desktop\setup.exe [x] -> DELETED
[PROXY IE] HKCU\[…]\Internet Settings : ProxyServer (:) -> NOT REMOVED, USE PROXYFIX
[HJPOL] HKCU\[…]\System : DisableTaskMgr (0) -> DELETED
[HJPOL] HKCU\[…]\System : DisableRegistryTools (0) -> DELETED
[HJ DESK] HKCU\[…]\ClassicStartMenu : {59031A47-3F72-44A7-89C5-5595FE6B30EE} (1) -> REPLACED (0)
[HJ DESK] HKCU\[…]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK] HKCU\[…]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[HJ DESK] HKCU\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[HJ DESK] HKLM\[…]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK] HKLM\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
–> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
[…]

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: WDC WD5000AAKS-08V0A0 ATA Device +++++
— User —
[MBR] 4485694422203b629556218490174ffe
[BSP] 7b39f2f1599e9363f6fa18b1ecf58153 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 476838 Mo
User = LL1 … OK!
User = LL2 … OK!

Finished : << RKreport[2]_D_03202013_02d1221.txt >>
RKreport[1]_S_03202013_02d1218.txt ; RKreport[2]_D_03202013_02d1221.txt

================================================================================
=================================================================================
===========================

RKreport #3

RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Website : http://tigzy.geekstogo.com/roguekiller.php
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : OLGA [Admin rights]
Mode : Shortcuts HJfix – Date : 03/20/2013 12:23:46
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ File attributes restored: ¤¤¤
Desktop: Success 1 / Fail 0
Quick launch: Success 1 / Fail 0
Programs: Success 23 / Fail 0
Start menu: Success 1 / Fail 0
User folder: Success 424 / Fail 0
My documents: Success 625 / Fail 625
My favorites: Success 0 / Fail 0
My pictures: Success 0 / Fail 0
My music: Success 16 / Fail 0
My videos: Success 0 / Fail 0
Local drives: Success 130 / Fail 0
Backup: [NOT FOUND]

Drives:
[C:] \Device\HarddiskVolume2 – 0x3 –> Restored
[E:] \Device\CdRom0 – 0x5 –> Skipped
[F:] \Device\HarddiskVolume3 – 0x2 –> Restored
[G:] \Device\HarddiskVolume4 – 0x2 –> Restored
[H:] \Device\HarddiskVolume5 – 0x2 –> Restored
[I:] \Device\HarddiskVolume6 – 0x2 –> Restored

Finished : << RKreport[3]_SC_03202013_02d1223.txt >>
RKreport[1]_S_03202013_02d1218.txt ; RKreport[2]_D_03202013_02d1221.txt ; RKreport[3]_SC_03202013_02d1223.txt

Robybel

Post #8March 20, 2013, 7:51 PM UTC

Hi Genuwine

OK!! Good

Please read through these instructions to familarize yourself with what to expect when this tool runs

Refer to the ComboFix User's Guide

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT- Save ComboFix.exe to your Desktop

====================================================

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs

====================================================

Double click on combofix.exe & follow the prompts.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply for further review.

genuwine4532

Post #9March 20, 2013, 8:10 PM UTC

I am having problems saving ComboFix to desktop, get the message below. I have gotten it before when trying to save files to desktop, so I usually save to downloads folder or my documents, but your instructions specifically said desktop?

Download Error

ComoboFix could not be saved, because you cannot change the contents of that folder. Change the folder properties and try again or try saving to a different location

Robybel

Post #10March 20, 2013, 8:42 PM UTC

Hi Genuwine

To save Combofix to your desktop.

Click the link to download Combofix, Click on the drop-down menu of the Save button, and then click Save As, On the next screen select Desktop, then click Save

genuwine4532

Post #11March 20, 2013, 9:01 PM UTC

Hi Genuwine

To save Combofix to your desktop.

Click the link to download Combofix, Click on the drop-down menu of the Save button, and then click Save As, On the next screen select Desktop, then click Save

I do not have a drop down on my PC, what happens is I click the link, then I get a box that says, You Have Chose To Open ComboFix, would you like to Save The File?, then only available buttons are Save and Cancel, when I click Save, my Win 7 Computer Interface Opens where I can choose Folders on the menu on left or at the top, when I choose desktop, I get same message.

I went ahead and used Chrome, when I right clicked and then Saved As the Combo link I was able to save it to the desktop, is that okay to do it that way?

I can see ComboFix with the icon on the desktop.

Robybel

Post #12March 20, 2013, 9:09 PM UTC

is that okay to do it that way?

Yes good!

genuwine4532

Post #13March 20, 2013, 9:45 PM UTC

Okay, I went ahead and ran Combo from the desktop when saved from Chrome, here is the log: ComboFix 13-03-20.02 - OLGA 03/20/2013 14:14:02.1.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4095.2502 [GMT -7:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} FW: COMODO Firewall *Disabled* {7DB03214-694B-060B-1600-BD4715C36DBB} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: COMODO Defense+ *Disabled/Updated* {FEEA52D5-051E-08DD-07EF-2F009097607D} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . C:\install.exe c:\users\OLGA\AppData\Local\Temp\{b0238964-49a9-4709-85ae-c4a483011ca1}\Livedrive.Native.dll c:\users\OLGA\AppData\Roaming\ubot c:\users\OLGA\g2mdlhlpx.exe c:\users\OLGA\lame.exe c:\users\OLGA\lame_enc.dll c:\windows\SysWow64\Packet.dll c:\windows\SysWow64\pthreadVC.dll c:\windows\SysWow64\wpcap.dll . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . ——-\Legacy_NPF ——-\Service_npf . . ((((((((((((((((((((((((( Files Created from 2013-02-20 to 2013-03-20 ))))))))))))))))))))))))))))))) . . 2013-03-20 18:58 . 2013-03-20 18:58 ——– d—–w- c:\windows\ERUNT 2013-03-20 18:58 . 2013-03-20 18:58 ——– d—–w- C:\JRT 2013-03-20 05:27 . 2013-03-20 05:27 95648 —-a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2013-03-18 18:19 . 2013-03-18 18:19 251 —-a-w- C:\Delself.bat 2013-03-18 18:16 . 2013-03-18 18:16 1700352 —-a-w- c:\windows\SysWow64\gdiplus.dll 2013-03-17 04:47 . 2013-03-17 04:47 ——– d—–w- c:\windows\system32\ms-MY 2013-03-17 04:45 . 2013-03-17 04:45 ——– d—–r- c:\users\OLGA\Podcasts 2013-03-17 04:42 . 2013-03-17 04:42 ——– d—–w- c:\windows\system32\drivers\UMDF\nl-NL 2013-03-17 04:42 . 2013-03-17 04:42 ——– d—–w- c:\windows\system32\drivers\UMDF\it-IT 2013-03-17 04:42 . 2013-03-17 04:42 ——– d—–w- c:\windows\system32\drivers\UMDF\de-DE 2013-03-17 04:42 . 2013-03-17 04:42 ——– d—–w- c:\windows\system32\drivers\UMDF\fr-FR 2013-03-17 04:42 . 2013-03-17 04:42 ——– d—–w- c:\windows\system32\drivers\UMDF\es-ES 2013-03-17 04:39 . 2013-03-17 04:43 ——– d—–w- c:\program files\Zune 2013-03-17 04:11 . 2012-11-09 03:34 143712 —-a-w- c:\windows\SysWow64\MCTU.dll 2013-03-17 02:40 . 2012-11-09 03:34 143712 —-a-w- c:\windows\SysWow64\mctu.dllbak 2013-03-17 02:40 . 2012-09-28 20:48 178656 —-a-w- c:\windows\system32\drivers\t1pusb64.sys 2013-03-17 02:40 . 2012-11-09 03:34 180576 —-a-w- c:\windows\system32\mctux.dll 2013-03-17 02:40 . 2012-11-09 01:57 142176 —-a-w- c:\windows\system32\drivers\mctkmd64.sys 2013-03-17 02:40 . 2012-08-28 21:20 313432 —-a-w- c:\windows\system32\GManager.exe 2013-03-17 02:40 . 2012-03-02 22:49 13440 —-a-w- c:\windows\system32\drivers\u3hpatch64.sys 2013-03-17 02:40 . 2011-04-08 23:38 19584 —-a-w- c:\windows\system32\drivers\mctKmdldr64.sys 2013-03-17 02:40 . 2013-03-17 02:40 ——– d—–w- c:\program files (x86)\Common Files\MCTWDDM 2013-03-17 02:40 . 2013-03-17 04:11 ——– d—–w- c:\program files (x86)\Common Files\DesktopUtil 2013-03-15 18:51 . 2013-02-19 11:57 9162192 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F3C8F6BA-F40E-4E13-BFD1-674222E33CB9}\mpengine.dll 2013-03-10 08:21 . 2013-03-10 08:21 ——– d—–w- c:\program files (x86)\CurationSoft 2013-03-09 05:09 . 2013-03-09 05:09 5 —-a-w- c:\windows\SysWow64\lMMLDeleteUserData42107612FX.tmp 2013-03-06 17:34 . 2013-03-09 05:17 ——– d—–w- c:\programdata\Wi-Fi Connect 2013-03-06 17:34 . 2013-03-09 05:17 ——– d—–w- c:\programdata\WEngineLite 2013-03-06 17:34 . 2009-10-16 19:52 7640576 —-a-w- c:\windows\WiFi_Connect.msi 2013-03-06 17:34 . 2013-03-06 17:34 ——– d—–w- c:\programdata\WiFiTemp 2013-03-06 17:33 . 2013-03-06 17:35 ——– d—–w- c:\users\OLGA\AppData\Local\SupportSoft 2013-03-06 17:32 . 2013-03-06 17:36 ——– d—–w- c:\windows\WIFI 2013-03-05 22:30 . 2013-03-05 22:30 ——– d—–w- c:\users\OLGA\AppData\Local\Evernote 2013-03-05 22:29 . 2013-03-05 22:29 ——– d—–w- c:\program files (x86)\Evernote 2013-03-05 21:50 . 2013-03-05 21:50 ——– d—–w- C:\SkyDriveTemp 2013-03-05 20:39 . 2013-03-05 20:39 ——– d—–w- c:\program files (x86)\Microsoft SkyDrive 2013-03-05 20:39 . 2013-03-05 22:06 ——– d—–r- c:\users\OLGA\SkyDrive 2013-03-05 20:38 . 2013-03-05 20:38 ——– d—–w- c:\programdata\Microsoft SkyDrive 2013-02-23 03:59 . 2013-02-23 04:00 ——– d—–w- C:\Article2Video 2013-02-22 22:51 . 2013-02-22 22:51 ——– d—–w- c:\users\OLGA\AppData\Roaming\CurationSoft 2013-02-22 17:53 . 2013-01-09 01:10 996352 —-a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll 2013-02-22 17:53 . 2013-01-08 22:01 768000 —-a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll 2013-02-22 17:49 . 2013-01-05 05:53 5553512 —-a-w- c:\windows\system32\ntoskrnl.exe 2013-02-22 17:49 . 2013-01-05 05:00 3967848 —-a-w- c:\windows\SysWow64\ntkrnlpa.exe 2013-02-22 17:49 . 2013-01-05 05:00 3913064 —-a-w- c:\windows\SysWow64\ntoskrnl.exe 2013-02-22 17:48 . 2013-01-03 06:00 1913192 —-a-w- c:\windows\system32\drivers\tcpip.sys 2013-02-22 17:48 . 2013-01-03 06:00 288088 —-a-w- c:\windows\system32\drivers\FWPKCLNT.SYS 2013-02-22 17:48 . 2013-01-04 03:26 3153408 —-a-w- c:\windows\system32\win32k.sys 2013-02-22 17:48 . 2013-01-04 05:46 215040 —-a-w- c:\windows\system32\winsrv.dll 2013-02-22 17:48 . 2013-01-04 02:47 25600 —-a-w- c:\windows\SysWow64\setup16.exe 2013-02-22 17:48 . 2013-01-04 04:51 5120 —-a-w- c:\windows\SysWow64\wow32.dll 2013-02-22 17:48 . 2013-01-04 02:47 7680 —-a-w- c:\windows\SysWow64\instnm.exe 2013-02-22 17:48 . 2013-01-04 02:47 14336 —-a-w- c:\windows\SysWow64\ntvdm64.dll 2013-02-22 17:48 . 2013-01-04 02:47 2048 —-a-w- c:\windows\SysWow64\user.exe . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-03-20 05:26 . 2012-06-28 03:32 861088 —-a-w- c:\windows\SysWow64\npDeployJava1.dll 2013-03-20 05:26 . 2010-06-23 22:48 782240 —-a-w- c:\windows\SysWow64\deployJava1.dll 2013-03-13 16:50 . 2012-10-22 07:15 693976 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-03-13 16:50 . 2012-10-22 07:15 73432 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-03-13 16:50 . 2012-04-10 20:41 16486616 —-a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe 2013-02-22 17:58 . 2010-03-16 18:05 70004024 —-a-w- c:\windows\system32\MRT.exe 2013-01-17 09:28 . 2010-03-16 17:31 273840 ——w- c:\windows\system32\MpSigStub.exe 2013-01-04 04:43 . 2013-02-22 17:48 44032 —-a-w- c:\windows\apppatch\acwow64.dll 2012-06-28 04:00 . 2012-06-28 04:00 14690376 —-a-w- c:\program files (x86)\Common Files\lpuninstall.exe . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Jing"="c:\program files (x86)\TechSmith\Jing\Jing.exe" [2013-01-07 2909640] "Livedrive"="c:\program files (x86)\Livedrive\Livedrive.exe" [2012-08-21 1848832] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-28 59280] "avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2012-10-30 4297136] "COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2012-11-07 9577680] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-02-22 10081312] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-18 946352] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) "AppInit_DLLs"=c:\windows\SysWOW64\guard32.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys] @="" . R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE64.EXE [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944] R3 DragonSvc;Dragon Service;c:\program files (x86)\Common Files\Nuance\dgnsvc.exe [2011-06-06 296808] R3 RTL8187;Realtek RTL8187 Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8187.sys [2008-06-27 399360] R3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2009-12-03 721768] R3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2009-12-03 25960] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-07-09 52736] R3 w4shwdrv;w4shwdrv;c:\users\OLGA\AppData\Local\Temp\w4s703E.tmp [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-04-12 1255736] R4 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x] R4 FoxAwdWINFLASH64;FoxAwdWINFLASH64;c:\program files\Foxconn\FOX LiveUpdate\FoxAwdWINFLASH64.SYS [x] R4 FXDrv32;FXDrv32;c:\program files\Foxconn\FOX LiveUpdate\FXDrv64.sys [x] R4 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x] R4 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x] S0 mctkmdldr;mctkmdldr;c:\windows\system32\drivers\mctkmdldr64.sys [2011-04-08 19584] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 CbFs;CbFs;c:\windows\system32\drivers\cbfs.sys [2010-02-16 191960] S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2012-11-07 584056] S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2012-11-07 38144] S1 RtlProt;Realtke RtlProt WLAN Utility Protocol Driver;c:\windows\system32\DRIVERS\rtlprot.sys [2007-04-23 31016] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-10-30 71600] S2 CSHelper;CopySafe Helper Service;c:\windows\SysWOW64\CSHelper.exe [2010-09-04 266240] S2 GManager;GManager;c:\windows\system32\GManager.exe [2012-08-28 313432] S2 L4301_Solar;Logitech Solar Keyboard Service;c:\program files\Logitech\SolarApp\L4301_Solar.exe [2010-10-26 403536] S2 LivedriveVSSService;Livedrive VSS Service;c:\program files (x86)\Livedrive\VSSService.exe [2012-08-21 210144] S2 MCTDesktopSvr;MCTDesktopSvr;c:\program files (x86)\Common Files\DesktopUtil\MCTDesktopSvr.exe [2011-05-04 199296] S2 Motorola Device Manager;Motorola Device Manager Service;c:\program files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [2012-10-23 120728] S2 RealtekUSB;RealtekUSB;c:\program files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtlService.exe [2007-07-27 36864] S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824] S3 mctkmd;mctkmd;c:\windows\system32\drivers\mctkmd64.sys [2012-11-09 142176] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-06-23 344680] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2009-12-03 269672] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2009-12-03 22376] S3 t1pusb64;Trigger 1+ Graphics Card;c:\windows\system32\drivers\t1pusb64.sys [2012-09-28 178656] S3 vdbus;Virtual Disk Bus Enumerator;c:\windows\system32\DRIVERS\vdbus.sys [2011-06-02 632384] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\AutorunsDisabled\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2010-09-16 21:11 451872 —-a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe . Contents of the 'Scheduled Tasks' folder . 2013-03-20 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-22 19:01] . 2013-03-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3160179463-1655843702-38658533-1000Core.job - c:\users\OLGA\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-03 00:33] . 2013-03-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3160179463-1655843702-38658533-1000UA.job - c:\users\OLGA\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-03 00:33] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2012-10-30 23:50 133400 —-a-w- c:\program files\Alwil Software\Avast5\ashShA64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\BackupOverlay] @="{B44A5D93-1351-41A1-BD91-5E92435D8ECD}" [HKEY_CLASSES_ROOT\CLSID\{B44A5D93-1351-41A1-BD91-5E92435D8ECD}] 2012-08-21 22:58 1245920 —-a-w- c:\program files (x86)\Livedrive\LivedriveExtensions.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\LivedriveDownloadOverlay] @="{CBCDB610-6B68-4EE9-B7A2-1282FD0C9292}" [HKEY_CLASSES_ROOT\CLSID\{CBCDB610-6B68-4EE9-B7A2-1282FD0C9292}] 2012-08-21 22:58 1245920 —-a-w- c:\program files (x86)\Livedrive\LivedriveExtensions.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\LivedriveSharedOverlay] @="{84CEF1E4-1356-4063-845F-05047F4DD52C}" [HKEY_CLASSES_ROOT\CLSID\{84CEF1E4-1356-4063-845F-05047F4DD52C}] 2012-08-21 22:58 1245920 —-a-w- c:\program files (x86)\Livedrive\LivedriveExtensions.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\LivedriveSyncedOverlay] @="{42058329-2FBF-4B33-8E52-3BE5754DE0C1}" [HKEY_CLASSES_ROOT\CLSID\{42058329-2FBF-4B33-8E52-3BE5754DE0C1}] 2012-08-21 22:58 1245920 —-a-w- c:\program files (x86)\Livedrive\LivedriveExtensions.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\LivedriveUploadOverlay] @="{39A1715A-E4CD-4F1E-B5C4-36B5DB80124E}" [HKEY_CLASSES_ROOT\CLSID\{39A1715A-E4CD-4F1E-B5C4-36B5DB80124E}] 2012-08-21 22:58 1245920 —-a-w- c:\program files (x86)\Livedrive\LivedriveExtensions.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2011-08-05 163552] "FDispPos"="c:\program files (x86)\Common Files\DesktopUtil\Util-Desktop.exe" [2011-05-04 195200] "MCTDUtil"="c:\program files (x86)\Common Files\DesktopUtil\Util-Desktop.exe" [2011-05-04 195200] "Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1832760] "COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2012-11-07 9577680] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-02-22 10081312] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=c:\windows\System32\guard64.dll . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://us.yahoo.com?fr=fp-comodo mStart Page = hxxp://www.google.com mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local;192.168.*.* IE: E&xport to Microsoft Excel - c:\progra~2\MIF5BA~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.1 FF - ProfilePath - c:\users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/ FF - ExtSQL: 2013-02-18 12:02; [removed]; c:\users\OLGA\AppData\Roaming\Mozilla\Firefox\Profiles\pflznupt.default\extensions\[removed] . - - - - ORPHANS REMOVED - - - - . SafeBoot-BsBhvScan SafeBoot-BsScanner ShellIconOverlayIdentifiers-{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} - c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll ShellIconOverlayIdentifiers-{62CCD8E3-9C21-41E1-B55E-1E26DFC68511} - c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll ShellIconOverlayIdentifiers-{A759AFF6-5851-457D-A540-F4ECED148351} - c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll ShellIconOverlayIdentifiers-{1574C9EF-7D58-488F-B358-8B78C1538F51} - c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll AddRemove-Allscoop RSS Submit Pro 1.0 - c:\windows\system32\ss2uinst.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\w4shwdrv] "ImagePath"="\??\c:\users\OLGA\AppData\Local\Temp\w4s703E.tmp" . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ———————— Other Running Processes ———————— . c:\program files\Alwil Software\Avast5\AvastSvc.exe c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files (x86)\Realtek\RTL8187 Wireless LAN Utility\RtWlan.exe c:\program files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe . ************************************************************************** . Completion time: 2013-03-20 14:31:26 - machine was rebooted ComboFix-quarantined-files.txt 2013-03-20 21:31 . Pre-Run: 244,212,023,296 bytes free Post-Run: 243,844,444,160 bytes free . - - End Of File - - 9574143A8535ADECC4909B79977D50EE

Robybel

Post #14March 21, 2013, 5:35 AM UTC

Hi Genuwine

Please open your MalwareBytes AntiMalware Program
Click the Update Tab and search for updates
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish, so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected. <– very important
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.

Extra Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

=============================== Next =======================================

ESET Online Scanner
I'd like us to scan your machine with ESET OnlineScan

Note: If you are using Windows Vista/7, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.

Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
Click the [external image: Posted Image] button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
- Double click on the [external image: Posted Image] icon on your desktop.
Check [external image: Posted Image]
Click the [external image: Posted Image] button.
Accept any security warnings from your browser.
Check [external image: Posted Image]
Make sure that the option "Remove found threats" is Unchecked
Push the Start button.
ESET will then download updates for itself, install itself, and begin
scanning your computer. Please be patient as this can take some time.
When the scan completes, push [external image: Posted Image]
Push [external image: Posted Image], and save the file to your desktop using a unique name, such as MyEsetScan. Alternatively, look for report in C:\Program Files\ESET\ESET Online Scanner\log.txt. Include the contents of this report in your next reply.
Push the Back button.
Select Uninstall application on close check box and push [external image: Posted Image]

Please let me know how your machine is running and if there are any outstanding issues

On your next reply please post :
MBAM log
Eset report

Let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

genuwine4532

Post #15March 21, 2013, 3:14 PM UTC

My machine seems fine, the only issue I see is that start up is very slow, used to be much faster, and in the last 2 days, I noticed that at start up it gets stuck for about 3 minutes on a blue screen right after the Logging Into Windows screen comes up, and right before the Desktop actually appears, but the desktop does appear.

The Mbytes log is below.

The Eset log does not exist because the scan showed NO THREATS FOUND, so no log was created.

Also, the Win action center message about the Win32 CA Virus is no longer showing up.

MBYTES LOG

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Database version: v2013.03.21.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
OLGA :: OLGA-PC [administrator]

3/21/2013 12:20:28 AM
mbam-log-2013-03-21 (00-20-28).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 243197
Time elapsed: 3 minute(s), 36 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Help! Infected With Win32/Small.CA [Solved]

✨ Ask AI

Ask AI