Hi,
Sometime today I logged into my PC and found it had restarted. My Wndows 7 said there had been a BSOD; the cause of it was unclear. Soon I got a warning from the Action Center saying I had a Win32/Smal.CA virus, and that it was responsible for the BSOD. I ran a full scan by MalwareBytes (after updating, of course), then by my resident AV, AVG, which is fully up to date. They found nothing; I tried Windows own virus removal utility, MSERT.exe, which found some harmless adware apparently unrelated to the virus reported by the Action Center. So far I have had no further problems of any type aside from the AC's warning, which keeps appearing there. Since I have had a few BSOD problems with it before, I should mention I recently updated my NVIDIA videocard drivers. DDS.txt log follows….
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by [removed] at 14:27:28,81 on 21/03/2013
Internet Explorer: 9.10.9200.16521 BrowserJavaVersion: 10.13.2
Microsoft Windows 7 Professional 6.1.7601.1.1252.57.1033.18.8053.5812 [GMT -5:00]
.
AV: AVG AntiVirus Free Edition 2013 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AVG AntiVirus Free Edition 2013 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
.
============== Running Processes ===============
.
C:\PROGRA~2\AVG\AVG2013\avgrsa.exe
C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\LogonUI.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\APC\PowerChute Personal Edition\mainserv.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
C:\Windows\system32\IProsetMonitor.exe
C:\Program Files (x86)\Kilgray\memoQ40\AUClient.exe
C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files (x86)\Nero\Update\NASvc.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\rdpclip.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files (x86)\SpiderOak\SpiderOak.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\BOINC\boinctray.exe
C:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files (x86)\SpiderOak\SpiderOak.exe
C:\Program Files (x86)\APC\PowerChute Personal Edition\apcsystray.exe
C:\Program Files (x86)\SpiderOak\windows_dir_watcher.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\caie\Downloads\dds.scr
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyServer = http=localhost:8118
uInternet Settings,ProxyOverride = *.local;127.0.01
mWinlogon: Userinit=userinit.exe,
BHO: ContributeBHO Class: {074c1dc5-9320-4a9a-947d-c042949c6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
TB: Contribute Toolbar: {517bdde4-e3a7-4570-b21e-2b52b6139fc7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [SpiderOak] C:\Program Files (x86)\SpiderOak\SpiderOak.exe –windows_startup
uRun: [AdobeBridge]
uRun: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
uRun: []
mRun: [boincmgr] "C:\Program Files (x86)\BOINC\boincmgr.exe" /a /s
mRun: [boinctray] "C:\Program Files (x86)\BOINC\boinctray.exe"
mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
mRun: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
mRun: [Adobe_ID0ENQBO] C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: []
mRun: [Display] C:\Program Files (x86)\APC\PowerChute Personal Edition\DataCollectionLauncher.exe
mRun: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
mRun: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\APCUPS~1.LNK - C:\Program Files (x86)\APC\PowerChute Personal Edition\Display.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
mASetup: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\25.0.1364.172\Installer\chrmstp.exe" –configure-user-settings –verbose-logging –system-level –multi-install –chrome
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
mRun-x64: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
mRun-x64: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\caie\AppData\Roaming\Mozilla\Firefox\Profiles\jnmta5d6.default\
FF - prefs.js: keyword.URL - hxxp://kl.startnow.com/s/?src=addrbar&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=876&affiliate_id=&channel=&toolbar_id=-1&toolbar_version=&install_country=EC&install_date=20130216&user_guid=855C4729698B45B29D7C5809386A443C&machine_id=b7ebb247d4044df3e88a295e545f163f&browser=FF&os=win&os_version=6.1-x64-SP1&q=
FF - prefs.js: network.proxy.http - localhost
FF - prefs.js: network.proxy.http_port - 8118
FF - prefs.js: network.proxy.ssl - localhost
FF - prefs.js: network.proxy.ssl_port - 8118
FF - prefs.js: network.proxy.type - 0
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll
FF - plugin: C:\Windows\SysWOW64\npDeployJava1.dll
FF - plugin: C:\Windows\SysWOW64\npmproxy.dll
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHA;AVGIDSHA;C:\Windows\System32\drivers\avgidsha.sys [2012-10-15 63328]
R0 Avgloga;AVG Logging Driver;C:\Windows\System32\drivers\avgloga.sys [2012-9-21 225120]
R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\System32\drivers\avgmfx64.sys [2012-11-15 111968]
R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\System32\drivers\avgrkx64.sys [2012-9-14 40800]
R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2011-12-1 55280]
R1 AVGIDSDriver;AVGIDSDriver;C:\Windows\System32\drivers\avgidsdrivera.sys [2012-10-22 154464]
R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\System32\drivers\avgldx64.sys [2012-10-2 185696]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\System32\drivers\dtsoftbus01.sys [2013-2-14 283200]
R2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service;C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [2007-12-6 660768]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 APC Data Service;APC Data Service;C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe [2012-1-24 21880]
R2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-15 5814904]
R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664]
R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;C:\Windows\System32\IPROSetMonitor.exe [2012-9-6 170824]
R2 Kilgray: memoQ update permissions manager. 979430.;Kilgray: memoQ update permissions manager. 979430.;C:\Program Files (x86)\Kilgray\memoQ40\AUClient.exe -PermissionManagerRun –> C:\Program Files (x86)\Kilgray\memoQ40\AUClient.exe -PermissionManagerRun [?]
R2 NAUpdate;Nero Update;C:\Program Files (x86)\Nero\Update\NASvc.exe [2012-7-13 769432]
R2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-2-23 1266464]
R2 Skype C2C Service;Skype C2C Service;C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-1-31 3289208]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-2-9 383264]
R3 DKRtWrt;DKRtWrt;C:\Windows\System32\drivers\DKRtWrt.sys [2011-11-22 44624]
R3 e1kexpress;Intel® PRO/1000 PCI Express Network Connection Driver K;C:\Windows\System32\drivers\e1k62x64.sys [2012-7-11 509104]
R3 HECIx64;Intel® Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2009-9-17 56344]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\System32\drivers\nvhda64v.sys [2013-3-12 194488]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Servicio (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-15 116648]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]
S3 Adobe Version Cue CS4;Adobe Version Cue CS4;C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-8-15 284016]
S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2011-4-12 71168]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-12-1 1038088]
S3 gupdatem;Google Update Servicio (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-15 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service;C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-5-6 115168]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2012-11-14 19456]
S3 RTCore64;RTCore64;C:\Program Files (x86)\EVGA Precision X\RTCore64.sys [2012-10-17 15176]
S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 27136]
S3 SwitchBoard;SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2012-11-14 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2012-11-14 30208]
S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
S3 VBoxUSB;VirtualBox USB;C:\Windows\System32\drivers\VBoxUSB.sys [2011-12-19 117040]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-8-26 1255736]
.
=============== Created Last 30 ================
.
2013-03-21 16:07:27 ——– d-sh–w- C:\found.000
2013-03-19 02:11:59 ——– d—–w- C:\Program Files\iTunes
2013-03-19 02:11:59 ——– d—–w- C:\Program Files\iPod
2013-03-19 02:11:59 ——– d—–w- C:\Program Files (x86)\iTunes
2013-03-19 02:11:59 ——– d—–w- C:\PROGRA~3\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-03-13 01:02:55 2776576 —-a-w- C:\Windows\System32\msmpeg2vdec.dll
2013-03-13 00:59:58 19968 —-a-w- C:\Windows\System32\drivers\usb8023.sys
2013-03-08 15:51:50 ——– d—–w- C:\MATS
2013-02-24 22:19:11 25600 —-a-w- C:\Windows\System32\drivers\pccsmcfdx64.sys
2013-02-24 22:19:07 ——– d—–w- C:\Program Files (x86)\PC Connectivity Solution
.
==================== Find3M ====================
.
2013-03-03 02:12:19 101184 —-a-w- C:\Windows\System32\stkMonitor.dll
2013-02-14 17:40:17 283200 —-a-w- C:\Windows\System32\drivers\dtsoftbus01.sys
2013-02-14 17:27:48 564824 —-a-w- C:\Windows\System32\drivers\sptd.sys
2013-02-14 17:01:00 95648 —-a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
2013-02-14 17:01:00 861088 —-a-w- C:\Windows\SysWow64\npDeployJava1.dll
2013-02-14 17:01:00 782240 —-a-w- C:\Windows\SysWow64\deployJava1.dll
2013-02-12 05:45:24 135168 —-a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll
2013-02-12 05:45:22 350208 —-a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll
2013-02-12 05:45:22 308736 —-a-w- C:\Windows\apppatch\AppPatch64\AcGenral.dll
2013-02-12 05:45:22 111104 —-a-w- C:\Windows\apppatch\AppPatch64\acspecfc.dll
2013-02-12 04:48:31 474112 —-a-w- C:\Windows\apppatch\AcSpecfc.dll
2013-02-12 04:48:26 2176512 —-a-w- C:\Windows\apppatch\AcGenral.dll
2013-02-10 01:04:31 6393120 —-a-w- C:\Windows\System32\nvcpl.dll
2013-02-10 01:04:31 3472672 —-a-w- C:\Windows\System32\nvsvc64.dll
2013-02-10 01:04:29 877856 —-a-w- C:\Windows\System32\nvvsvc.exe
2013-02-10 01:04:29 63776 —-a-w- C:\Windows\System32\nvshext.dll
2013-02-10 01:04:29 237856 —-a-w- C:\Windows\System32\nvmctray.dll
2013-02-09 23:43:52 555808 —-a-w- C:\Windows\SysWow64\nvStreaming.exe
2013-01-13 21:17:03 9728 —ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-01-13 21:17:02 2560 —ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-01-13 21:16:42 10752 —ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-01-13 21:12:46 3584 —ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-01-13 21:11:21 4096 —ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-01-13 21:11:08 5632 —ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-01-13 21:11:07 5632 —ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-01-13 21:11:07 3072 —ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
2013-01-13 21:11:07 3072 —ha-w- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-01-13 20:35:31 9728 —ha-w- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-01-13 20:35:31 2560 —ha-w- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-01-13 20:35:18 10752 —ha-w- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-01-13 20:32:07 3584 —ha-w- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-01-13 20:31:48 4096 —ha-w- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-01-13 20:31:41 5632 —ha-w- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-01-13 20:31:40 5632 —ha-w- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-01-13 20:31:40 3072 —ha-w- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
2013-01-13 20:31:40 3072 —ha-w- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-01-13 20:31:00 1247744 —-a-w- C:\Windows\SysWow64\DWrite.dll
2013-01-13 20:22:22 1988096 —-a-w- C:\Windows\SysWow64\d3d10warp.dll
2013-01-13 20:20:31 293376 —-a-w- C:\Windows\SysWow64\dxgi.dll
2013-01-13 20:09:00 249856 —-a-w- C:\Windows\SysWow64\d3d10_1core.dll
2013-01-13 20:08:43 220160 —-a-w- C:\Windows\SysWow64\d3d10core.dll
2013-01-13 20:08:35 1504768 —-a-w- C:\Windows\SysWow64\d3d11.dll
2013-01-13 19:59:04 1643520 —-a-w- C:\Windows\System32\DWrite.dll
2013-01-13 19:58:28 1175552 —-a-w- C:\Windows\System32\FntCache.dll
2013-01-13 19:54:01 604160 —-a-w- C:\Windows\SysWow64\d3d10level9.dll
2013-01-13 19:53:58 207872 —-a-w- C:\Windows\SysWow64\WindowsCodecsExt.dll
2013-01-13 19:53:14 187392 —-a-w- C:\Windows\SysWow64\UIAnimation.dll
2013-01-13 19:51:30 2565120 —-a-w- C:\Windows\System32\d3d10warp.dll
2013-01-13 19:49:17 363008 —-a-w- C:\Windows\System32\dxgi.dll
2013-01-13 19:48:47 161792 —-a-w- C:\Windows\SysWow64\d3d10_1.dll
2013-01-13 19:46:25 1080832 —-a-w- C:\Windows\SysWow64\d3d10.dll
2013-01-13 19:43:21 1230336 —-a-w- C:\Windows\SysWow64\WindowsCodecs.dll
2013-01-13 19:38:39 333312 —-a-w- C:\Windows\System32\d3d10_1core.dll
2013-01-13 19:38:32 1887232 —-a-w- C:\Windows\System32\d3d11.dll
2013-01-13 19:38:21 296960 —-a-w- C:\Windows\System32\d3d10core.dll
2013-01-13 19:37:57 3419136 —-a-w- C:\Windows\SysWow64\d2d1.dll
2013-01-13 19:25:04 245248 —-a-w- C:\Windows\System32\WindowsCodecsExt.dll
2013-01-13 19:24:33 648192 —-a-w- C:\Windows\System32\d3d10level9.dll
2013-01-13 19:24:30 221184 —-a-w- C:\Windows\System32\UIAnimation.dll
2013-01-13 19:20:42 194560 —-a-w- C:\Windows\System32\d3d10_1.dll
2013-01-13 19:20:04 1238528 —-a-w- C:\Windows\System32\d3d10.dll
2013-01-13 19:15:40 1424384 —-a-w- C:\Windows\System32\WindowsCodecs.dll
2013-01-13 19:10:36 3928064 —-a-w- C:\Windows\System32\d2d1.dll
2013-01-13 19:02:06 417792 —-a-w- C:\Windows\SysWow64\WMPhoto.dll
2013-01-13 18:34:58 364544 —-a-w- C:\Windows\SysWow64\XpsGdiConverter.dll
2013-01-13 18:32:43 465920 —-a-w- C:\Windows\System32\WMPhoto.dll
2013-01-13 18:09:52 522752 —-a-w- C:\Windows\System32\XpsGdiConverter.dll
2013-01-13 17:26:42 1158144 —-a-w- C:\Windows\SysWow64\XpsPrint.dll
2013-01-13 17:05:09 1682432 —-a-w- C:\Windows\System32\XpsPrint.dll
2013-01-05 05:53:43 5553512 —-a-w- C:\Windows\System32\ntoskrnl.exe
2013-01-05 05:00:15 3967848 —-a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2013-01-05 05:00:11 3913064 —-a-w- C:\Windows\SysWow64\ntoskrnl.exe
2013-01-04 06:11:21 2284544 —-a-w- C:\Windows\SysWow64\msmpeg2vdec.dll
2013-01-04 05:46:09 215040 —-a-w- C:\Windows\System32\winsrv.dll
2013-01-04 04:51:16 5120 —-a-w- C:\Windows\SysWow64\wow32.dll
2013-01-04 04:43:21 44032 —-a-w- C:\Windows\apppatch\acwow64.dll
2013-01-04 03:26:48 3153408 —-a-w- C:\Windows\System32\win32k.sys
2013-01-04 02:47:35 25600 —-a-w- C:\Windows\SysWow64\setup16.exe
2013-01-04 02:47:34 7680 —-a-w- C:\Windows\SysWow64\instnm.exe
2013-01-04 02:47:34 2048 —-a-w- C:\Windows\SysWow64\user.exe
2013-01-04 02:47:33 14336 —-a-w- C:\Windows\SysWow64\ntvdm64.dll
2013-01-03 06:00:54 1913192 —-a-w- C:\Windows\System32\drivers\tcpip.sys
2013-01-03 06:00:42 288088 —-a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS
.
============= FINISH: 14:27:53,68 ===============
Hi and Welcome!!
My name is
Jeff . I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
The fixes are specific to your problem and should only be used for the issues on this machine. It's often worth reading through these instructions and printing them for ease of reference. If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry. Please reply to this thread. Do not start a new topic. If you happen to have a flash drive/thumb drive please have that ready in the event that we need to use it. Please be sure to subscribe to the topic if you have not already done so. IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so. DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your operating system and losing all your programs and data.
Having said that….
[external image: Posted Image] Let's get going !!
———-
Are you aware that your system is set to run from a proxy server or do you connect to work or business with this system?
—————–
[external image: Posted Image] Please download
aswMBR to your desktop.
Double click the aswMBR icon to run it. Click the Scan button to start scan. If you are asked to update the Avast Virus database please allow it to do so. When it finishes, press the save log button, save the logfile to your desktop and attach its contents in your next reply. [external image: Posted Image] Click the image to enlarge it [external image: Posted Image] AdwCleaner
Close all open programs and internet browsers. Double click on adwcleaner.exe to run the tool. Click on Delete . Confirm each time with Ok . You will be prompted to restart your computer. A text file will open after the restart. Please post the contents of that logfile with your next reply. You can find the logfile at C:\AdwCleaner[S1].txt as well.
Ok, as requested I am attaching the aswMBR log as a file (update: I pasted it at the end just in case); the other log I have posted further below. By the way, after running chkdsk I found that there are 4K of bad clusters in my windows volume. After chkdsk repaired it there have been no further errors related to that in Event Viewer/Windows Logs/System, but the following does appear there at least twice after each reboot:
The ScRegSetValueExW call failed for FailureActions with the following error:
Access is denied.
Here's a more detailed view from the EventViewer':
-
-
7006
0
2
0
0
0x8080000000000000
135221
System
XXXXXX
-
ScRegSetValueExW
FailureActions
%%5
I googled it up and It seems it has something to do with my AVG resident AV. But…
Going further back into the same log, i noticed that before monday 18 of last week, most errors were almost excluisvely of this type: "The RDP protocol component X.224 detected an error in the protocol stream and has disconnected the client." (I do use the Remote Desktop Client to connect to this PC). Buf after that day, I start getting this almost every day: "The driver detected a controller error on \Device\Ide\IdePort2." And only after this does the ScRegSetValueExW error described above start appearing, together with others related to system file and volume structure corruption (the latter having disappeared since running chkdsk). Here's the XML report on the IdePort2 error:
-
-
11
2
0
0x80000000000000
133137
System
XXXXXX
-
\Device\Ide\IdePort2
0000100001000000000000000B0004C002000000850100C000000000000000000000000000000
00000000000000000000000000004100000
Anyway, here's the other log your requested:
# AdwCleaner v2.115 - Logfile created 03/23/2013 at 11:16:16
# Updated 17/03/2013 by Xplode
# Operating system : Windows 7 Professional Service Pack 1 (64 bits)
# User : caie - CONCERT_HALL
# Boot Mode : Normal
# Running from : C:\Users\caie\Downloads\AdwCleaner.exe
# Option [Delete]
***** [Services] *****
***** [Files / Folders] *****
File Deleted : C:\Users\caie\AppData\Roaming\Mozilla\Firefox\Profiles\jnmta5d6.default\searchplugins\yahoo-zugo.xml
Folder Deleted : C:\Users\caie\AppData\Local\OpenCandy
***** [Registry] *****
Key Deleted : HKCU\Software\Zugo
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
***** [Internet Browsers] *****
-\\ Internet Explorer v10.0.9200.16521
[OK] Registry is clean.
-\\ Mozilla Firefox v16.0.2 (en-US)
File : C:\Users\caie\AppData\Roaming\Mozilla\Firefox\Profiles\jnmta5d6.default\prefs.js
Deleted : user_pref("keyword.URL", "hxxp://kl.startnow.com/s/?src=addrbar&provider=&provider_name=yahoo&provid[…]
-\\ Google Chrome v25.0.1364.172
File : C:\Users\caie\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
*************************
AdwCleaner[S1].txt - [1536 octets] - [23/03/2013 11:16:16]
########## EOF - C:\AdwCleaner[S1].txt - [1596 octets] ##########
Update: I don't see a link to the asw log after originally posting this, so I am pasting it here:
aswMBR version 0.9.9.1771 Copyright© 2011 AVAST Software
Run date: 2013-03-23 11:08:05
—————————–
11:08:05.948 OS Version: Windows x64 6.1.7601 Service Pack 1
11:08:05.948 Number of processors: 4 586 0x2502
11:08:05.948 ComputerName: CONCERT_HALL UserName: caie
11:08:06.045 Initialze error 1
11:11:26.073 AVAST engine defs: 13032301
11:12:29.468 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4
11:12:29.472 Disk 0 Vendor: SAMSUNG_HD103SJ 1AJ10001 Size: 953869MB BusType: 11
11:12:29.476 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP5T0L0-7
11:12:29.480 Disk 1 Vendor: SAMSUNG_HD502IJ 1AA01118 Size: 476940MB BusType: 11
11:12:29.491 Disk 0 MBR read successfully
11:12:29.495 Disk 0 MBR scan
11:12:29.500 Disk 0 unknown MBR code
11:12:29.503 Disk 0 Partition 1 00 EE GPT 2097151 MB offset 1
11:12:29.509 Disk 0 scanning C:\Windows\system32\drivers
11:12:29.512 Service scanning
11:12:30.200 Modules scanning
11:12:30.207 Disk 0 trace - called modules:
11:12:30.216 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys >>UNKNOWN [0xfffffa800755d2c0]< \Device\Harddisk0\DR0[0xfffffa8007d5b060]
11:12:30.560 3 CLASSPNP.SYS[fffff88001a4343f] -> nt!IofCallDriver -> [0xfffffa80079f0320]
11:12:30.565 5 ACPI.sys[fffff88000f127a1] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-4[0xfffffa80079fd060]
11:12:30.570 \Driver\atapi[0xfffffa80079e58f0] -> IRP_MJ_CREATE -> 0xfffffa800755d2c0
11:12:30.576 AVAST engine scan C:\Windows
11:12:30.581 AVAST engine scan C:\Windows\system32
11:12:30.587 AVAST engine scan C:\Windows\system32\drivers
11:12:30.591 AVAST engine scan C:\Users\caie
11:12:30.595 AVAST engine scan C:\ProgramData
11:12:30.598 Scan finished successfully
11:14:59.429 Disk 0 MBR has been saved successfully to "C:\Users\caie\Desktop\MBR.dat"
11:14:59.435 The log file has been saved successfully to "C:\Users\caie\Desktop\aswMBR.txt"
Thanks for letting me know about your system.
After seeing that aswMBR log I would like to do one more scan before we begin cleaning…
[external image: Posted Image] Please download
TDSSKiller
Double click TDSSKiller.exe Press Start Scan If Malicious objects are found, select Skip Do Not Attempt To Fix Anything Now. We just need to look over the report and be sure we are removing the correct items. Attach the log in your next reply A copy of the log will be saved automatically to the root of the drive (typically C:\)
12:13:05.0139 4296 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
12:13:05.0139 4296 UEFI system
12:13:05.0524 4296 ============================================================
12:13:05.0524 4296 Current date / time: 2013/03/23 12:13:05.0524
12:13:05.0524 4296 SystemInfo:
12:13:05.0524 4296
12:13:05.0524 4296 OS Version: 6.1.7601 ServicePack: 1.0
12:13:05.0524 4296 Product type: Workstation
12:13:05.0524 4296 ComputerName: CONCERT_HALL
12:13:05.0524 4296 UserName: caie
12:13:05.0524 4296 Windows directory: C:\Windows
12:13:05.0524 4296 System windows directory: C:\Windows
12:13:05.0524 4296 Running under WOW64
12:13:05.0524 4296 Processor architecture: Intel x64
12:13:05.0524 4296 Number of processors: 4
12:13:05.0524 4296 Page size: 0x1000
12:13:05.0525 4296 Boot type: Normal boot
12:13:05.0525 4296 ============================================================
12:13:06.0580 4296 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
12:13:06.0585 4296 Drive \Device\Harddisk1\DR1 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
12:13:06.0590 4296 ============================================================
12:13:06.0590 4296 \Device\Harddisk0\DR0:
12:13:06.0590 4296 GPT partitions:
12:13:06.0591 4296 \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {A4A382DA-2AF5-402F-B858-D3037836B318}, Name: EFI system partition, StartLBA 0x800, BlocksNum 0x32000
12:13:06.0591 4296 \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {8BFF813D-67A8-409F-BFF5-D9D477AA0637}, Name: Microsoft reserved partition, StartLBA 0x32800, BlocksNum 0x40000
12:13:06.0591 4296 \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {BA4B836E-CC93-40C5-B3EE-25EDE8B961DA}, Name: Basic data partition, StartLBA 0x72800, BlocksNum 0x12638000
12:13:06.0591 4296 \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {5DF0AF69-2B12-4905-A458-898163E776B4}, Name: Basic data partition, StartLBA 0x126AA800, BlocksNum 0x6205B800
12:13:06.0591 4296 MBR partitions:
12:13:06.0591 4296 \Device\Harddisk1\DR1:
12:13:06.0591 4296 MBR partitions:
12:13:06.0591 4296 \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A385FB2
12:13:06.0591 4296 ============================================================
12:13:06.0632 4296 C: <-> \Device\Harddisk0\DR0\Partition3
12:13:06.0667 4296 F: <-> \Device\Harddisk0\DR0\Partition4
12:13:06.0701 4296 D: <-> \Device\Harddisk1\DR1\Partition1
12:13:06.0701 4296 ============================================================
12:13:06.0701 4296 Initialize success
12:13:06.0701 4296 ============================================================
12:13:48.0623 2340 ============================================================
12:13:48.0623 2340 Scan started
12:13:48.0623 2340 Mode: Manual;
12:13:48.0623 2340 ============================================================
12:13:48.0830 2340 ================ Scan system memory ========================
12:13:48.0830 2340 System memory - ok
12:13:48.0831 2340 ================ Scan services =============================
12:13:49.0779 2340 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
12:13:49.0785 2340 1394ohci - ok
12:13:49.0923 2340 [ 2A5E5246F22530E351C9F3F2C1CD63B9 ] ABBYY.Licensing.FineReader.Professional.9.0 C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
12:13:49.0930 2340 ABBYY.Licensing.FineReader.Professional.9.0 - ok
12:13:49.0960 2340 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
12:13:49.0963 2340 ACPI - ok
12:13:49.0977 2340 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
12:13:49.0979 2340 AcpiPmi - ok
12:13:50.0016 2340 [ 2F0683FD2DF1D92E891CACA14B45A8C1 ] adfs C:\Windows\system32\drivers\adfs.sys
12:13:50.0017 2340 adfs - ok
12:13:50.0105 2340 [ 57A3B9A69F14414ACE12AFD6BA701773 ] Adobe Version Cue CS4 C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
12:13:50.0110 2340 Adobe Version Cue CS4 - ok
12:13:50.0198 2340 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
12:13:50.0199 2340 AdobeARMservice - ok
12:13:50.0246 2340 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
12:13:50.0252 2340 adp94xx - ok
12:13:50.0271 2340 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
12:13:50.0276 2340 adpahci - ok
12:13:50.0288 2340 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
12:13:50.0291 2340 adpu320 - ok
12:13:50.0318 2340 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
12:13:50.0319 2340 AeLookupSvc - ok
12:13:50.0359 2340 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
12:13:50.0365 2340 AFD - ok
12:13:50.0374 2340 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
12:13:50.0376 2340 agp440 - ok
12:13:50.0390 2340 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
12:13:50.0392 2340 ALG - ok
12:13:50.0404 2340 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
12:13:50.0406 2340 aliide - ok
12:13:50.0416 2340 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
12:13:50.0429 2340 amdide - ok
12:13:50.0477 2340 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
12:13:50.0479 2340 AmdK8 - ok
12:13:50.0489 2340 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
12:13:50.0491 2340 AmdPPM - ok
12:13:50.0517 2340 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
12:13:50.0520 2340 amdsata - ok
12:13:50.0529 2340 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
12:13:50.0532 2340 amdsbs - ok
12:13:50.0562 2340 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
12:13:50.0563 2340 amdxata - ok
12:13:50.0619 2340 [ 107AB19CC1D40B9D04537F6EEAAC34C9 ] APC Data Service C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe
12:13:50.0620 2340 APC Data Service - ok
12:13:50.0661 2340 [ C7F8C8080B055B3DE9A8141DFD8E308A ] APC UPS Service C:\Program Files (x86)\APC\PowerChute Personal Edition\mainserv.exe
12:13:50.0665 2340 APC UPS Service - ok
12:13:50.0678 2340 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
12:13:50.0680 2340 AppID - ok
12:13:50.0702 2340 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
12:13:50.0704 2340 AppIDSvc - ok
12:13:50.0732 2340 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
12:13:50.0734 2340 Appinfo - ok
12:13:50.0808 2340 [ 4FE5C6D40664AE07BE5105874357D2ED ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
12:13:50.0810 2340 Apple Mobile Device - ok
12:13:50.0866 2340 [ 4ABA3E75A76195A3E38ED2766C962899 ] AppMgmt C:\Windows\System32\appmgmts.dll
12:13:50.0870 2340 AppMgmt - ok
12:13:50.0883 2340 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
12:13:50.0886 2340 arc - ok
12:13:50.0914 2340 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
12:13:50.0917 2340 arcsas - ok
12:13:51.0037 2340 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
12:13:51.0039 2340 aspnet_state - ok
12:13:51.0061 2340 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
12:13:51.0064 2340 AsyncMac - ok
12:13:51.0069 2340 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
12:13:51.0070 2340 atapi - ok
12:13:51.0089 2340 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
12:13:51.0093 2340 AudioEndpointBuilder - ok
12:13:51.0104 2340 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
12:13:51.0109 2340 AudioSrv - ok
12:13:51.0276 2340 [ 4AFC14AFA58878FAA1D249E7E90EA54B ] AVGIDSAgent C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe
12:13:51.0312 2340 AVGIDSAgent - ok
12:13:51.0334 2340 [ 388056EBD5FE6718FE669078DBE37897 ] AVGIDSDriver C:\Windows\system32\DRIVERS\avgidsdrivera.sys
12:13:51.0336 2340 AVGIDSDriver - ok
12:13:51.0371 2340 [ 550E981747D6A6C55078C77346FFC2C6 ] AVGIDSHA C:\Windows\system32\DRIVERS\avgidsha.sys
12:13:51.0372 2340 AVGIDSHA - ok
12:13:51.0396 2340 [ 5989592A91A17587799792A81E1541D4 ] Avgldx64 C:\Windows\system32\DRIVERS\avgldx64.sys
12:13:51.0398 2340 Avgldx64 - ok
12:13:51.0439 2340 [ 3FC43AA02545FCDDC22817829114DEC8 ] Avgloga C:\Windows\system32\DRIVERS\avgloga.sys
12:13:51.0442 2340 Avgloga - ok
12:13:51.0465 2340 [ 841C40C193889730848849AC220D9242 ] Avgmfx64 C:\Windows\system32\DRIVERS\avgmfx64.sys
12:13:51.0466 2340 Avgmfx64 - ok
12:13:51.0498 2340 [ FE4F444DBE4BBBDFD8FECF49398DEFC7 ] Avgrkx64 C:\Windows\system32\DRIVERS\avgrkx64.sys
12:13:51.0499 2340 Avgrkx64 - ok
12:13:51.0523 2340 [ 6B72E1E329C4E98C6B6FDD2D265E3BA3 ] avgwd C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
12:13:51.0525 2340 avgwd - ok
12:13:51.0548 2340 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
12:13:51.0550 2340 AxInstSV - ok
12:13:51.0573 2340 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
12:13:51.0579 2340 b06bdrv - ok
12:13:51.0603 2340 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
12:13:51.0607 2340 b57nd60a - ok
12:13:51.0627 2340 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
12:13:51.0630 2340 BDESVC - ok
12:13:51.0642 2340 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
12:13:51.0643 2340 Beep - ok
12:13:51.0675 2340 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
12:13:51.0683 2340 BFE - ok
12:13:51.0741 2340 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
12:13:51.0754 2340 BITS - ok
12:13:51.0776 2340 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
12:13:51.0777 2340 blbdrive - ok
12:13:51.0909 2340 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
12:13:51.0915 2340 Bonjour Service - ok
12:13:51.0943 2340 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
12:13:51.0944 2340 bowser - ok
12:13:51.0952 2340 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
12:13:51.0954 2340 BrFiltLo - ok
12:13:51.0966 2340 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
12:13:51.0967 2340 BrFiltUp - ok
12:13:52.0000 2340 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
12:13:52.0002 2340 Browser - ok
12:13:52.0015 2340 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
12:13:52.0019 2340 Brserid - ok
12:13:52.0033 2340 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
12:13:52.0035 2340 BrSerWdm - ok
12:13:52.0057 2340 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
12:13:52.0059 2340 BrUsbMdm - ok
12:13:52.0064 2340 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
12:13:52.0066 2340 BrUsbSer - ok
12:13:52.0081 2340 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
12:13:52.0083 2340 BTHMODEM - ok
12:13:52.0110 2340 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
12:13:52.0112 2340 bthserv - ok
12:13:52.0145 2340 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
12:13:52.0148 2340 cdfs - ok
12:13:52.0177 2340 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
12:13:52.0179 2340 cdrom - ok
12:13:52.0193 2340 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
12:13:52.0194 2340 CertPropSvc - ok
12:13:52.0211 2340 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
12:13:52.0213 2340 circlass - ok
12:13:52.0236 2340 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
12:13:52.0239 2340 CLFS - ok
12:13:52.0287 2340 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
12:13:52.0290 2340 clr_optimization_v2.0.50727_32 - ok
12:13:52.0327 2340 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
12:13:52.0329 2340 clr_optimization_v2.0.50727_64 - ok
12:13:52.0391 2340 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
12:13:52.0395 2340 clr_optimization_v4.0.30319_32 - ok
12:13:52.0406 2340 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
12:13:52.0408 2340 clr_optimization_v4.0.30319_64 - ok
12:13:52.0421 2340 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
12:13:52.0422 2340 CmBatt - ok
12:13:52.0447 2340 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
12:13:52.0448 2340 cmdide - ok
12:13:52.0475 2340 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys
12:13:52.0478 2340 CNG - ok
12:13:52.0506 2340 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
12:13:52.0507 2340 Compbatt - ok
12:13:52.0527 2340 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
12:13:52.0528 2340 CompositeBus - ok
12:13:52.0532 2340 COMSysApp - ok
12:13:52.0545 2340 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
12:13:52.0547 2340 crcdisk - ok
12:13:52.0579 2340 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
12:13:52.0581 2340 CryptSvc - ok
12:13:52.0606 2340 [ 54DA3DFD29ED9F1619B6F53F3CE55E49 ] CSC C:\Windows\system32\drivers\csc.sys
12:13:52.0612 2340 CSC - ok
12:13:52.0635 2340 [ 3AB183AB4D2C79DCF459CD2C1266B043 ] CscService C:\Windows\System32\cscsvc.dll
12:13:52.0638 2340 CscService - ok
12:13:52.0675 2340 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
12:13:52.0678 2340 DcomLaunch - ok
12:13:52.0708 2340 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
12:13:52.0711 2340 defragsvc - ok
12:13:52.0720 2340 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
12:13:52.0722 2340 DfsC - ok
12:13:52.0748 2340 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
12:13:52.0750 2340 Dhcp - ok
12:13:52.0759 2340 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
12:13:52.0760 2340 discache - ok
12:13:52.0790 2340 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
12:13:52.0791 2340 Disk - ok
12:13:52.0891 2340 [ E50664F505D80FC2BED3186807609C22 ] Diskeeper C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
12:13:52.0918 2340 Diskeeper - ok
12:13:52.0949 2340 [ 20C394C80113D77406DF8F1ADC720B01 ] DKRtWrt C:\Windows\system32\DRIVERS\DKRtWrt.sys
12:13:52.0950 2340 DKRtWrt - ok
12:13:52.0977 2340 [ 5DB085A8A6600BE6401F2B24EECB5415 ] dmvsc C:\Windows\system32\drivers\dmvsc.sys
12:13:52.0979 2340 dmvsc - ok
12:13:53.0001 2340 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
12:13:53.0002 2340 Dnscache - ok
12:13:53.0040 2340 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
12:13:53.0043 2340 dot3svc - ok
12:13:53.0054 2340 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
12:13:53.0055 2340 DPS - ok
12:13:53.0088 2340 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
12:13:53.0090 2340 drmkaud - ok
12:13:53.0124 2340 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
12:13:53.0126 2340 dtsoftbus01 - ok
12:13:53.0167 2340 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
12:13:53.0172 2340 DXGKrnl - ok
12:13:53.0211 2340 [ 324FCD2DD8A4229DDEF3CC954FF12FA5 ] e1kexpress C:\Windows\system32\DRIVERS\e1k62x64.sys
12:13:53.0214 2340 e1kexpress - ok
12:13:53.0239 2340 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
12:13:53.0241 2340 EapHost - ok
12:13:53.0294 2340 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
12:13:53.0328 2340 ebdrv - ok
12:13:53.0366 2340 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
12:13:53.0368 2340 EFS - ok
12:13:53.0423 2340 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
12:13:53.0434 2340 ehRecvr - ok
12:13:53.0451 2340 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
12:13:53.0454 2340 ehSched - ok
12:13:53.0475 2340 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
12:13:53.0481 2340 elxstor - ok
12:13:53.0490 2340 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
12:13:53.0491 2340 ErrDev - ok
12:13:53.0511 2340 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
12:13:53.0514 2340 EventSystem - ok
12:13:53.0538 2340 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
12:13:53.0541 2340 exfat - ok
12:13:53.0560 2340 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
12:13:53.0561 2340 fastfat - ok
12:13:53.0575 2340 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
12:13:53.0577 2340 fdc - ok
12:13:53.0592 2340 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
12:13:53.0593 2340 fdPHost - ok
12:13:53.0607 2340 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
12:13:53.0608 2340 FDResPub - ok
12:13:53.0623 2340 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
12:13:53.0624 2340 FileInfo - ok
12:13:53.0638 2340 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
12:13:53.0639 2340 Filetrace - ok
12:13:53.0693 2340 [ 1F63900E2EB00101B9ACA2B7A870704E ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
12:13:53.0701 2340 FLEXnet Licensing Service - ok
12:13:53.0758 2340 [ 1C3FB052A0BB72EDAED90785C34D6EED ] FLEXnet Licensing Service 64 C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
12:13:53.0773 2340 FLEXnet Licensing Service 64 - ok
12:13:53.0785 2340 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
12:13:53.0787 2340 flpydisk - ok
12:13:53.0801 2340 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
12:13:53.0803 2340 FltMgr - ok
12:13:53.0847 2340 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll
12:13:53.0854 2340 FontCache - ok
12:13:53.0895 2340 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
12:13:53.0897 2340 FontCache3.0.0.0 - ok
12:13:53.0906 2340 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
12:13:53.0909 2340 FsDepends - ok
12:13:53.0944 2340 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
12:13:53.0945 2340 Fs_Rec - ok
12:13:54.0004 2340 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
12:13:54.0006 2340 fvevol - ok
12:13:54.0029 2340 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
12:13:54.0032 2340 gagp30kx - ok
12:13:54.0059 2340 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
12:13:54.0060 2340 GEARAspiWDM - ok
12:13:54.0092 2340 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
12:13:54.0098 2340 gpsvc - ok
12:13:54.0175 2340 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
12:13:54.0177 2340 gupdate - ok
12:13:54.0198 2340 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
12:13:54.0200 2340 gupdatem - ok
12:13:54.0221 2340 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
12:13:54.0223 2340 hcw85cir - ok
12:13:54.0256 2340 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
12:13:54.0261 2340 HdAudAddService - ok
12:13:54.0300 2340 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
12:13:54.0303 2340 HDAudBus - ok
12:13:54.0344 2340 [ B6AC71AAA2B10848F57FC49D55A651AF ] HECIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
12:13:54.0345 2340 HECIx64 - ok
12:13:54.0361 2340 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
12:13:54.0363 2340 HidBatt - ok
12:13:54.0374 2340 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
12:13:54.0377 2340 HidBth - ok
12:13:54.0385 2340 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
12:13:54.0387 2340 HidIr - ok
12:13:54.0400 2340 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
12:13:54.0401 2340 hidserv - ok
12:13:54.0429 2340 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
12:13:54.0431 2340 HidUsb - ok
12:13:54.0454 2340 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
12:13:54.0456 2340 hkmsvc - ok
12:13:54.0470 2340 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
12:13:54.0472 2340 HomeGroupListener - ok
12:13:54.0493 2340 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
12:13:54.0495 2340 HomeGroupProvider - ok
12:13:54.0517 2340 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
12:13:54.0518 2340 HpSAMD - ok
12:13:54.0540 2340 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
12:13:54.0543 2340 HTTP - ok
12:13:54.0551 2340 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
12:13:54.0551 2340 hwpolicy - ok
12:13:54.0575 2340 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
12:13:54.0578 2340 i8042prt - ok
12:13:54.0609 2340 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
12:13:54.0614 2340 iaStorV - ok
12:13:54.0650 2340 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
12:13:54.0659 2340 idsvc - ok
12:13:54.0671 2340 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
12:13:54.0673 2340 iirsp - ok
12:13:54.0693 2340 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
12:13:54.0702 2340 IKEEXT - ok
12:13:54.0776 2340 [ 5F6A3EA5BD7CA861863A3A06CECC115C ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
12:13:54.0798 2340 IntcAzAudAddService - ok
12:13:54.0837 2340 [ 8C90FA99363E2BC4938CCA3A487100E9 ] Intel® PROSet Monitoring Service C:\Windows\system32\IProsetMonitor.exe
12:13:54.0838 2340 Intel® PROSet Monitoring Service - ok
12:13:54.0850 2340 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
12:13:54.0852 2340 intelide - ok
12:13:54.0888 2340 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
12:13:54.0889 2340 intelppm - ok
12:13:54.0905 2340 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
12:13:54.0906 2340 IPBusEnum - ok
12:13:54.0922 2340 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
12:13:54.0924 2340 IpFilterDriver - ok
12:13:54.0955 2340 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
12:13:54.0961 2340 iphlpsvc - ok
12:13:54.0976 2340 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
12:13:54.0978 2340 IPMIDRV - ok
12:13:54.0994 2340 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
12:13:54.0997 2340 IPNAT - ok
12:13:55.0043 2340 [ 4EFFC8FF6D349E971E94B1C670C0C66A ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
12:13:55.0048 2340 iPod Service - ok
12:13:55.0065 2340 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
12:13:55.0067 2340 IRENUM - ok
12:13:55.0074 2340 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
12:13:55.0076 2340 isapnp - ok
12:13:55.0100 2340 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
12:13:55.0103 2340 iScsiPrt - ok
12:13:55.0132 2340 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
12:13:55.0133 2340 kbdclass - ok
12:13:55.0156 2340 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
12:13:55.0158 2340 kbdhid - ok
12:13:55.0180 2340 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
12:13:55.0182 2340 KeyIso - ok
12:13:55.0231 2340 Kilgray: memoQ update permissions manager. 979430. - ok
12:13:55.0264 2340 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
12:13:55.0265 2340 KSecDD - ok
12:13:55.0291 2340 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
12:13:55.0293 2340 KSecPkg - ok
12:13:55.0301 2340 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
12:13:55.0303 2340 ksthunk - ok
12:13:55.0324 2340 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
12:13:55.0329 2340 KtmRm - ok
12:13:55.0353 2340 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
12:13:55.0356 2340 LanmanServer - ok
12:13:55.0373 2340 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
12:13:55.0376 2340 LanmanWorkstation - ok
12:13:55.0400 2340 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
12:13:55.0401 2340 lltdio - ok
12:13:55.0421 2340 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
12:13:55.0426 2340 lltdsvc - ok
12:13:55.0450 2340 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
12:13:55.0452 2340 lmhosts - ok
12:13:55.0479 2340 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
12:13:55.0481 2340 LSI_FC - ok
12:13:55.0501 2340 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
12:13:55.0504 2340 LSI_SAS - ok
12:13:55.0514 2340 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
12:13:55.0516 2340 LSI_SAS2 - ok
12:13:55.0531 2340 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
12:13:55.0533 2340 LSI_SCSI - ok
12:13:55.0551 2340 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
12:13:55.0553 2340 luafv - ok
12:13:55.0582 2340 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
12:13:55.0587 2340 Mcx2Svc - ok
12:13:55.0600 2340 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
12:13:55.0602 2340 megasas - ok
12:13:55.0622 2340 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
12:13:55.0626 2340 MegaSR - ok
12:13:55.0708 2340 [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe
12:13:55.0710 2340 Microsoft Office Groove Audit Service - ok
12:13:55.0728 2340 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
12:13:55.0730 2340 MMCSS - ok
12:13:55.0742 2340 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
12:13:55.0744 2340 Modem - ok
12:13:55.0782 2340 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
12:13:55.0783 2340 monitor - ok
12:13:55.0795 2340 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
12:13:55.0796 2340 mouclass - ok
12:13:55.0823 2340 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
12:13:55.0825 2340 mouhid - ok
12:13:55.0849 2340 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
12:13:55.0850 2340 mountmgr - ok
12:13:55.0894 2340 [ 8BE15F71DE6FF33FC56DCDE7B2B9EFE8 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
12:13:55.0897 2340 MozillaMaintenance - ok
12:13:55.0910 2340 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
12:13:55.0913 2340 mpio - ok
12:13:55.0931 2340 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
12:13:55.0932 2340 mpsdrv - ok
12:13:55.0955 2340 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
12:13:55.0961 2340 MpsSvc - ok
12:13:55.0976 2340 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
12:13:55.0978 2340 MRxDAV - ok
12:13:56.0002 2340 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
12:13:56.0003 2340 mrxsmb - ok
12:13:56.0015 2340 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
12:13:56.0016 2340 mrxsmb10 - ok
12:13:56.0041 2340 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
12:13:56.0042 2340 mrxsmb20 - ok
12:13:56.0064 2340 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
12:13:56.0065 2340 msahci - ok
12:13:56.0082 2340 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
12:13:56.0085 2340 msdsm - ok
12:13:56.0099 2340 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
12:13:56.0102 2340 MSDTC - ok
12:13:56.0112 2340 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
12:13:56.0115 2340 Msfs - ok
12:13:56.0134 2340 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
12:13:56.0135 2340 mshidkmdf - ok
12:13:56.0150 2340 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
12:13:56.0150 2340 msisadrv - ok
12:13:56.0195 2340 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
12:13:56.0199 2340 MSiSCSI - ok
12:13:56.0202 2340 msiserver - ok
12:13:56.0221 2340 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
12:13:56.0222 2340 MSKSSRV - ok
12:13:56.0243 2340 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
12:13:56.0244 2340 MSPCLOCK - ok
12:13:56.0250 2340 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
12:13:56.0252 2340 MSPQM - ok
12:13:56.0275 2340 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
12:13:56.0278 2340 MsRPC - ok
12:13:56.0294 2340 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
12:13:56.0295 2340 mssmbios - ok
12:13:56.0304 2340 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
12:13:56.0306 2340 MSTEE - ok
12:13:56.0315 2340 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
12:13:56.0316 2340 MTConfig - ok
12:13:56.0328 2340 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
12:13:56.0329 2340 Mup - ok
12:13:56.0374 2340 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
12:13:56.0382 2340 napagent - ok
12:13:56.0422 2340 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
12:13:56.0426 2340 NativeWifiP - ok
12:13:56.0504 2340 [ E0E4A1F81A7D69C595A8A9DDAD084C19 ] NAUpdate C:\Program Files (x86)\Nero\Update\NASvc.exe
12:13:56.0513 2340 NAUpdate - ok
12:13:56.0563 2340 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
12:13:56.0569 2340 NDIS - ok
12:13:56.0619 2340 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
12:13:56.0632 2340 NdisCap - ok
12:13:56.0655 2340 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
12:13:56.0657 2340 NdisTapi - ok
12:13:56.0667 2340 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
12:13:56.0669 2340 Ndisuio - ok
12:13:56.0686 2340 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
12:13:56.0689 2340 NdisWan - ok
12:13:56.0706 2340 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
12:13:56.0708 2340 NDProxy - ok
12:13:56.0724 2340 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
12:13:56.0728 2340 NetBIOS - ok
12:13:56.0751 2340 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
12:13:56.0755 2340 NetBT - ok
12:13:56.0778 2340 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
12:13:56.0779 2340 Netlogon - ok
12:13:56.0824 2340 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
12:13:56.0829 2340 Netman - ok
12:13:56.0870 2340 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:13:56.0874 2340 NetMsmqActivator - ok
12:13:56.0880 2340 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:13:56.0883 2340 NetPipeActivator - ok
12:13:56.0903 2340 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
12:13:56.0909 2340 netprofm - ok
12:13:56.0914 2340 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:13:56.0915 2340 NetTcpActivator - ok
12:13:56.0919 2340 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
12:13:56.0921 2340 NetTcpPortSharing - ok
12:13:56.0939 2340 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
12:13:56.0940 2340 nfrd960 - ok
12:13:56.0953 2340 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
12:13:56.0955 2340 NlaSvc - ok
12:13:56.0999 2340 [ 5FE6F8C05F0769BBB74AFAC11453B182 ] nmwcd C:\Windows\system32\drivers\ccdcmbx64.sys
12:13:57.0000 2340 nmwcd - ok
12:13:57.0038 2340 [ 73C929945C0850B8D1FE2FEA05FDF05D ] nmwcdc C:\Windows\system32\drivers\ccdcmbox64.sys
12:13:57.0040 2340 nmwcdc - ok
12:13:57.0052 2340 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
12:13:57.0053 2340 Npfs - ok
12:13:57.0077 2340 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
12:13:57.0078 2340 nsi - ok
12:13:57.0082 2340 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
12:13:57.0083 2340 nsiproxy - ok
12:13:57.0130 2340 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
12:13:57.0141 2340 Ntfs - ok
12:13:57.0153 2340 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
12:13:57.0154 2340 Null - ok
12:13:57.0197 2340 [ B4F53BCA4C688FF47F04FA90098F896E ] NVHDA C:\Windows\system32\drivers\nvhda64v.sys
12:13:57.0199 2340 NVHDA - ok
12:13:57.0357 2340 [ 0A2F27B5BCC45B64E152DD6AE0815198 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
12:13:57.0402 2340 nvlddmkm - ok
12:13:57.0431 2340 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
12:13:57.0433 2340 nvraid - ok
12:13:57.0442 2340 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
12:13:57.0444 2340 nvstor - ok
12:13:57.0482 2340 [ 574087EA9105F23FB522A4FDDD5292D9 ] nvsvc C:\Windows\system32\nvvsvc.exe
12:13:57.0487 2340 nvsvc - ok
12:13:57.0587 2340 [ ABA5A88740635D37A2B6CEB27DBC738A ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
12:13:57.0600 2340 nvUpdatusService - ok
12:13:57.0611 2340 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
12:13:57.0614 2340 nv_agp - ok
12:13:57.0675 2340 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
12:13:57.0682 2340 odserv - ok
12:13:57.0702 2340 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
12:13:57.0705 2340 ohci1394 - ok
12:13:57.0750 2340 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
12:13:57.0753 2340 ose - ok
12:13:57.0800 2340 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
12:13:57.0807 2340 p2pimsvc - ok
12:13:57.0826 2340 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
12:13:57.0832 2340 p2psvc - ok
12:13:57.0845 2340 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
12:13:57.0848 2340 Parport - ok
12:13:57.0876 2340 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
12:13:57.0877 2340 partmgr - ok
12:13:57.0889 2340 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
12:13:57.0891 2340 PcaSvc - ok
12:13:57.0930 2340 [ BC0018C2D29F655188A0ED3FA94FDB24 ] pccsmcfd C:\Windows\system32\DRIVERS\pccsmcfdx64.sys
12:13:57.0943 2340 pccsmcfd - ok
12:13:57.0971 2340 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
12:13:57.0973 2340 pci - ok
12:13:57.0984 2340 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
12:13:57.0985 2340 pciide - ok
12:13:58.0003 2340 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
12:13:58.0007 2340 pcmcia - ok
12:13:58.0031 2340 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
12:13:58.0033 2340 pcw - ok
12:13:58.0057 2340 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
12:13:58.0061 2340 PEAUTH - ok
12:13:58.0109 2340 [ B9B0A4299DD2D76A4243F75FD54DC680 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
12:13:58.0124 2340 PeerDistSvc - ok
12:13:58.0185 2340 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
12:13:58.0187 2340 PerfHost - ok
12:13:58.0226 2340 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
12:13:58.0242 2340 pla - ok
12:13:58.0286 2340 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
12:13:58.0289 2340 PlugPlay - ok
12:13:58.0296 2340 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
12:13:58.0299 2340 PNRPAutoReg - ok
12:13:58.0305 2340 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
12:13:58.0307 2340 PNRPsvc - ok
12:13:58.0328 2340 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
12:13:58.0334 2340 PolicyAgent - ok
12:13:58.0384 2340 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
12:13:58.0386 2340 Power - ok
12:13:58.0403 2340 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
12:13:58.0405 2340 PptpMiniport - ok
12:13:58.0418 2340 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
12:13:58.0421 2340 Processor - ok
12:13:58.0444 2340 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
12:13:58.0446 2340 ProfSvc - ok
12:13:58.0459 2340 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
12:13:58.0460 2340 ProtectedStorage - ok
12:13:58.0486 2340 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
12:13:58.0488 2340 Psched - ok
12:13:58.0527 2340 [ 4712CC14E720ECCCC0AA16949D18AAF1 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys
12:13:58.0528 2340 PxHlpa64 - ok
12:13:58.0562 2340 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
12:13:58.0577 2340 ql2300 - ok
12:13:58.0590 2340 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
12:13:58.0592 2340 ql40xx - ok
12:13:58.0615 2340 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
12:13:58.0618 2340 QWAVE - ok
12:13:58.0633 2340 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
12:13:58.0635 2340 QWAVEdrv - ok
12:13:58.0650 2340 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
12:13:58.0651 2340 RasAcd - ok
12:13:58.0691 2340 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
12:13:58.0692 2340 RasAgileVpn - ok
12:13:58.0707 2340 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
12:13:58.0711 2340 RasAuto - ok
12:13:58.0729 2340 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
12:13:58.0731 2340 Rasl2tp - ok
12:13:58.0753 2340 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
12:13:58.0758 2340 RasMan - ok
12:13:58.0770 2340 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
12:13:58.0772 2340 RasPppoe - ok
12:13:58.0787 2340 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
12:13:58.0789 2340 RasSstp - ok
12:13:58.0814 2340 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
12:13:58.0818 2340 rdbss - ok
12:13:58.0831 2340 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
12:13:58.0832 2340 rdpbus - ok
12:13:58.0843 2340 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
12:13:58.0844 2340 RDPCDD - ok
12:13:58.0874 2340 [ 1B6163C503398B23FF8B939C67747683 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
12:13:58.0876 2340 RDPDR - ok
12:13:58.0889 2340 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
12:13:58.0890 2340 RDPENCDD - ok
12:13:58.0906 2340 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
12:13:58.0907 2340 RDPREFMP - ok
12:13:58.0956 2340 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
12:13:58.0958 2340 RdpVideoMiniport - ok
12:13:58.0983 2340 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
12:13:58.0988 2340 RDPWD - ok
12:13:59.0000 2340 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
12:13:59.0001 2340 rdyboost - ok
12:13:59.0020 2340 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
12:13:59.0023 2340 RemoteAccess - ok
12:13:59.0043 2340 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
12:13:59.0046 2340 RemoteRegistry - ok
12:13:59.0101 2340 [ 4AAFFFA67AC4DFA3D9985D78573887E2 ] RimVSerPort C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys
12:13:59.0102 2340 RimVSerPort - ok
12:13:59.0127 2340 [ 388D3DD1A6457280F3BADBA9F3ACD6B1 ] ROOTMODEM C:\Windows\system32\Drivers\RootMdm.sys
12:13:59.0129 2340 ROOTMODEM - ok
12:13:59.0151 2340 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
12:13:59.0153 2340 RpcEptMapper - ok
12:13:59.0165 2340 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
12:13:59.0167 2340 RpcLocator - ok
12:13:59.0184 2340 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
12:13:59.0188 2340 RpcSs - ok
12:13:59.0202 2340 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
12:13:59.0203 2340 rspndr - ok
12:13:59.0244 2340 [ D63C9C1A427A134461258B7B8742858F ] RTCore64 C:\Program Files (x86)\EVGA Precision X\RTCore64.sys
12:13:59.0257 2340 RTCore64 - ok
12:13:59.0276 2340 [ E60C0A09F997826C7627B244195AB581 ] s3cap C:\Windows\system32\drivers\vms3cap.sys
12:13:59.0278 2340 s3cap - ok
12:13:59.0283 2340 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
12:13:59.0285 2340 SamSs - ok
12:13:59.0301 2340 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
12:13:59.0304 2340 sbp2port - ok
12:13:59.0319 2340 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
12:13:59.0322 2340 SCardSvr - ok
12:13:59.0335 2340 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
12:13:59.0337 2340 scfilter - ok
12:13:59.0382 2340 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
12:13:59.0391 2340 Schedule - ok
12:13:59.0429 2340 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
12:13:59.0430 2340 SCPolicySvc - ok
12:13:59.0496 2340 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
12:13:59.0522 2340 SDRSVC - ok
12:13:59.0549 2340 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
12:13:59.0550 2340 secdrv - ok
12:13:59.0572 2340 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
12:13:59.0575 2340 seclogon - ok
12:13:59.0591 2340 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
12:13:59.0592 2340 SENS - ok
12:13:59.0602 2340 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
12:13:59.0605 2340 SensrSvc - ok
12:13:59.0627 2340 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys
12:13:59.0629 2340 Serenum - ok
12:13:59.0646 2340 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys
12:13:59.0648 2340 Serial - ok
12:13:59.0661 2340 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
12:13:59.0662 2340 sermouse - ok
12:13:59.0776 2340 [ F31E9531AF225CA25350D5E87E999B31 ] ServiceLayer C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
12:13:59.0784 2340 ServiceLayer - ok
12:13:59.0807 2340 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
12:13:59.0810 2340 SessionEnv - ok
12:13:59.0819 2340 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
12:13:59.0821 2340 sffdisk - ok
12:13:59.0834 2340 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
12:13:59.0836 2340 sffp_mmc - ok
12:13:59.0840 2340 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
12:13:59.0841 2340 sffp_sd - ok
12:13:59.0857 2340 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
12:13:59.0859 2340 sfloppy - ok
12:13:59.0885 2340 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
12:13:59.0890 2340 SharedAccess - ok
12:13:59.0905 2340 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
12:13:59.0909 2340 ShellHWDetection - ok
12:13:59.0932 2340 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
12:13:59.0934 2340 SiSRaid2 - ok
12:13:59.0950 2340 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
12:13:59.0952 2340 SiSRaid4 - ok
12:14:00.0112 2340 [ 23E3C83DFF7B09A97B01A85ED8A44478 ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
12:14:00.0133 2340 Skype C2C Service - ok
12:14:00.0192 2340 [ A37740568718F245E818D0C5575B9AA9 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
12:14:00.0193 2340 SkypeUpdate - ok
12:14:00.0213 2340 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
12:14:00.0216 2340 Smb - ok
12:14:00.0232 2340 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
12:14:00.0234 2340 SNMPTRAP - ok
12:14:00.0270 2340 [ 12583AF6CBE0050651EAF2723B3AD7B3 ] speedfan C:\Windows\syswow64\speedfan.sys
12:14:00.0271 2340 speedfan - ok
12:14:00.0303 2340 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
12:14:00.0304 2340 spldr - ok
12:14:00.0336 2340 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
12:14:00.0340 2340 Spooler - ok
12:14:00.0439 2340 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
12:14:00.0475 2340 sppsvc - ok
12:14:00.0488 2340 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
12:14:00.0491 2340 sppuinotify - ok
12:14:00.0540 2340 [ D6AB7C13FCDD2E4CAC35244D2C172D9A ] sptd C:\Windows\System32\Drivers\sptd.sys
12:14:00.0546 2340 sptd - ok
12:14:00.0574 2340 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
12:14:00.0580 2340 srv - ok
12:14:00.0596 2340 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
12:14:00.0601 2340 srv2 - ok
12:14:00.0620 2340 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
12:14:00.0622 2340 srvnet - ok
12:14:00.0651 2340 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
12:14:00.0654 2340 SSDPSRV - ok
12:14:00.0675 2340 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
12:14:00.0677 2340 SstpSvc - ok
12:14:00.0725 2340 [ 78216A10BF8B200890A88D8820F33F14 ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
12:14:00.0728 2340 Stereo Service - ok
12:14:00.0739 2340 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
12:14:00.0741 2340 stexstor - ok
12:14:00.0790 2340 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
12:14:00.0795 2340 stisvc - ok
12:14:00.0818 2340 [ 7785DC213270D2FC066538DAF94087E7 ] storflt C:\Windows\system32\drivers\vmstorfl.sys
12:14:00.0819 2340 storflt - ok
12:14:00.0834 2340 [ C40841817EF57D491F22EB103DA587CC ] StorSvc C:\Windows\system32\storsvc.dll
12:14:00.0837 2340 StorSvc - ok
12:14:00.0860 2340 [ D34E4943D5AC096C8EDEEBFD80D76E23 ] storvsc C:\Windows\system32\drivers\storvsc.sys
12:14:00.0861 2340 storvsc - ok
12:14:00.0878 2340 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
12:14:00.0880 2340 swenum - ok
12:14:00.0958 2340 [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
12:14:00.0964 2340 SwitchBoard - ok
12:14:00.0995 2340 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
12:14:01.0003 2340 swprv - ok
12:14:01.0045 2340 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
12:14:01.0057 2340 SysMain - ok
12:14:01.0071 2340 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
12:14:01.0074 2340 TabletInputService - ok
12:14:01.0080 2340 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
12:14:01.0084 2340 TapiSrv - ok
12:14:01.0110 2340 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
12:14:01.0114 2340 TBS - ok
12:14:01.0162 2340 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
12:14:01.0172 2340 Tcpip - ok
12:14:01.0197 2340 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
12:14:01.0205 2340 TCPIP6 - ok
12:14:01.0234 2340 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
12:14:01.0235 2340 tcpipreg - ok
12:14:01.0240 2340 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
12:14:01.0241 2340 TDPIPE - ok
12:14:01.0263 2340 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
12:14:01.0264 2340 TDTCP - ok
12:14:01.0279 2340 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
12:14:01.0282 2340 tdx - ok
12:14:01.0290 2340 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
12:14:01.0291 2340 TermDD - ok
12:14:01.0317 2340 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
12:14:01.0324 2340 TermService - ok
12:14:01.0332 2340 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
12:14:01.0333 2340 Themes - ok
12:14:01.0341 2340 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
12:14:01.0342 2340 THREADORDER - ok
12:14:01.0361 2340 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
12:14:01.0363 2340 TrkWks - ok
12:14:01.0399 2340 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
12:14:01.0402 2340 TrustedInstaller - ok
12:14:01.0424 2340 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
12:14:01.0426 2340 tssecsrv - ok
12:14:01.0455 2340 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
12:14:01.0456 2340 TsUsbFlt - ok
12:14:01.0488 2340 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
12:14:01.0489 2340 TsUsbGD - ok
12:14:01.0520 2340 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
12:14:01.0522 2340 tunnel - ok
12:14:01.0539 2340 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
12:14:01.0541 2340 uagp35 - ok
12:14:01.0556 2340 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
12:14:01.0560 2340 udfs - ok
12:14:01.0576 2340 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
12:14:01.0579 2340 UI0Detect - ok
12:14:01.0589 2340 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
12:14:01.0591 2340 uliagpkx - ok
12:14:01.0604 2340 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
12:14:01.0606 2340 umbus - ok
12:14:01.0615 2340 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys
12:14:01.0616 2340 UmPass - ok
12:14:01.0634 2340 [ A293DCD756D04D8492A750D03B9A297C ] UmRdpService C:\Windows\System32\umrdp.dll
12:14:01.0639 2340 UmRdpService - ok
12:14:01.0659 2340 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
12:14:01.0665 2340 upnphost - ok
12:14:01.0704 2340 [ 34AFB83C7BBA370E404E52CC2290350C ] upperdev C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys
12:14:01.0705 2340 upperdev - ok
12:14:01.0742 2340 [ C9E9D59C0099A9FF51697E9306A44240 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
12:14:01.0753 2340 USBAAPL64 - ok
12:14:01.0808 2340 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
12:14:01.0811 2340 usbaudio - ok
12:14:01.0839 2340 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
12:14:01.0842 2340 usbccgp - ok
12:14:01.0855 2340 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
12:14:01.0857 2340 usbcir - ok
12:14:01.0880 2340 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys
12:14:01.0882 2340 usbehci - ok
12:14:01.0908 2340 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
12:14:01.0913 2340 usbhub - ok
12:14:01.0936 2340 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
12:14:01.0938 2340 usbohci - ok
12:14:01.0949 2340 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\drivers\usbprint.sys
12:14:01.0951 2340 usbprint - ok
12:14:01.0992 2340 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
12:14:01.0994 2340 usbscan - ok
12:14:02.0030 2340 [ 4ACEE387FA8FD39F83564FCD2FC234F2 ] usbser C:\Windows\system32\drivers\usbser.sys
12:14:02.0033 2340 usbser - ok
12:14:02.0065 2340 [ AA75E1EFBEE7186B4CBAAACF1F15E6CA ] UsbserFilt C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys
12:14:02.0066 2340 UsbserFilt - ok
12:14:02.0091 2340 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
12:14:02.0093 2340 USBSTOR - ok
12:14:02.0108 2340 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
12:14:02.0110 2340 usbuhci - ok
12:14:02.0128 2340 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
12:14:02.0132 2340 usbvideo - ok
12:14:02.0147 2340 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
12:14:02.0150 2340 UxSms - ok
12:14:02.0159 2340 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
12:14:02.0161 2340 VaultSvc - ok
12:14:02.0196 2340 [ 72EC34F9999A5A48CFD43F5E6BD779E4 ] VBoxDrv C:\Windows\system32\DRIVERS\VBoxDrv.sys
12:14:02.0198 2340 VBoxDrv - ok
12:14:02.0232 2340 [ A2FE818D7F930C51ADA37C04DBCB015D ] VBoxNetAdp C:\Windows\system32\DRIVERS\VBoxNetAdp.sys
12:14:02.0234 2340 VBoxNetAdp - ok
12:14:02.0246 2340 [ CD37A9264C404E48BCE162D37B117B45 ] VBoxNetFlt C:\Windows\system32\DRIVERS\VBoxNetFlt.sys
12:14:02.0248 2340 VBoxNetFlt - ok
12:14:02.0288 2340 [ BCFE50247FBE5C8CB2E22FA5938EA6F7 ] VBoxUSB C:\Windows\system32\Drivers\VBoxUSB.sys
12:14:02.0291 2340 VBoxUSB - ok
12:14:02.0312 2340 [ F649B3D30C6F40B04BDCCD0D11A43481 ] VBoxUSBMon C:\Windows\system32\DRIVERS\VBoxUSBMon.sys
12:14:02.0313 2340 VBoxUSBMon - ok
12:14:02.0341 2340 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
12:14:02.0342 2340 vdrvroot - ok
12:14:02.0367 2340 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
12:14:02.0375 2340 vds - ok
12:14:02.0385 2340 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
12:14:02.0388 2340 vga - ok
12:14:02.0404 2340 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
12:14:02.0405 2340 VgaSave - ok
12:14:02.0422 2340 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
12:14:02.0425 2340 vhdmp - ok
12:14:02.0441 2340 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
12:14:02.0442 2340 viaide - ok
12:14:02.0468 2340 [ 86EA3E79AE350FEA5331A1303054005F ] vmbus C:\Windows\system32\drivers\vmbus.sys
12:14:02.0473 2340 vmbus - ok
12:14:02.0487 2340 [ 7DE90B48F210D29649380545DB45A187 ] VMBusHID C:\Windows\system32\drivers\VMBusHID.sys
12:14:02.0489 2340 VMBusHID - ok
12:14:02.0504 2340 vmci - ok
12:14:02.0509 2340 VMnetAdapter - ok
12:14:02.0527 2340 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
12:14:02.0529 2340 volmgr - ok
12:14:02.0542 2340 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
12:14:02.0545 2340 volmgrx - ok
12:14:02.0562 2340 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
12:14:02.0564 2340 volsnap - ok
12:14:02.0576 2340 vserial - ok
12:14:02.0589 2340 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
12:14:02.0592 2340 vsmraid - ok
12:14:02.0640 2340 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
12:14:02.0664 2340 VSS - ok
12:14:02.0677 2340 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
12:14:02.0679 2340 vwifibus - ok
12:14:02.0710 2340 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
12:14:02.0716 2340 W32Time - ok
12:14:02.0726 2340 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
12:14:02.0728 2340 WacomPen - ok
12:14:02.0741 2340 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
12:14:02.0743 2340 WANARP - ok
12:14:02.0746 2340 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
12:14:02.0747 2340 Wanarpv6 - ok
12:14:02.0794 2340 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
12:14:02.0807 2340 WatAdminSvc - ok
12:14:02.0837 2340 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
12:14:02.0853 2340 wbengine - ok
12:14:02.0862 2340 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
12:14:02.0866 2340 WbioSrvc - ok
12:14:02.0879 2340 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
12:14:02.0884 2340 wcncsvc - ok
12:14:02.0894 2340 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
12:14:02.0897 2340 WcsPlugInService - ok
12:14:02.0915 2340 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
12:14:02.0916 2340 Wd - ok
12:14:02.0948 2340 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
12:14:02.0952 2340 Wdf01000 - ok
12:14:02.0966 2340 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
12:14:02.0968 2340 WdiServiceHost - ok
12:14:02.0971 2340 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
12:14:02.0973 2340 WdiSystemHost - ok
12:14:02.0986 2340 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
12:14:02.0991 2340 WebClient - ok
12:14:03.0003 2340 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
12:14:03.0007 2340 Wecsvc - ok
12:14:03.0022 2340 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
12:14:03.0024 2340 wercplsupport - ok
12:14:03.0037 2340 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
12:14:03.0040 2340 WerSvc - ok
12:14:03.0068 2340 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
12:14:03.0070 2340 WfpLwf - ok
12:14:03.0078 2340 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
12:14:03.0079 2340 WIMMount - ok
12:14:03.0100 2340 WinDefend - ok
12:14:03.0108 2340 WinHttpAutoProxySvc - ok
12:14:03.0210 2340 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
12:14:03.0213 2340 Winmgmt - ok
12:14:03.0264 2340 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
12:14:03.0286 2340 WinRM - ok
12:14:03.0324 2340 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
12:14:03.0326 2340 WinUsb - ok
12:14:03.0364 2340 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
12:14:03.0373 2340 Wlansvc - ok
12:14:03.0533 2340 [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
12:14:03.0557 2340 wlidsvc - ok
12:14:03.0565 2340 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
12:14:03.0566 2340 WmiAcpi - ok
12:14:03.0584 2340 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
12:14:03.0588 2340 wmiApSrv - ok
12:14:03.0601 2340 WMPNetworkSvc - ok
12:14:03.0612 2340 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
12:14:03.0615 2340 WPCSvc - ok
12:14:03.0635 2340 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
12:14:03.0638 2340 WPDBusEnum - ok
12:14:03.0656 2340 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
12:14:03.0658 2340 ws2ifsl - ok
12:14:03.0686 2340 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
12:14:03.0690 2340 wscsvc - ok
12:14:03.0694 2340 WSearch - ok
12:14:03.0762 2340 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
12:14:03.0788 2340 wuauserv - ok
12:14:03.0816 2340 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
12:14:03.0818 2340 WudfPf - ok
12:14:03.0837 2340 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
12:14:03.0840 2340 WUDFRd - ok
12:14:03.0855 2340 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
12:14:03.0858 2340 wudfsvc - ok
12:14:03.0876 2340 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
12:14:03.0881 2340 WwanSvc - ok
12:14:03.0892 2340 ================ Scan global ===============================
12:14:03.0912 2340 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
12:14:03.0937 2340 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
12:14:03.0944 2340 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
12:14:03.0968 2340 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
12:14:03.0993 2340 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
12:14:03.0996 2340 [Global] - ok
12:14:03.0996 2340 ================ Scan MBR ==================================
12:14:04.0021 2340 [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
12:14:04.0026 2340 \Device\Harddisk0\DR0 - ok
12:14:04.0031 2340 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1
12:14:04.0194 2340 \Device\Harddisk1\DR1 - ok
12:14:04.0195 2340 ================ Scan VBR ==================================
12:14:04.0201 2340 [ B2E85A7CDCAE6FA328E83448CADDFF3A ] \Device\Harddisk0\DR0\Partition1
12:14:04.0203 2340 \Device\Harddisk0\DR0\Partition1 - ok
12:14:04.0215 2340 [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition2
12:14:04.0216 2340 \Device\Harddisk0\DR0\Partition2 - ok
12:14:04.0219 2340 [ 5640C43C07034632B633989BD4E8864C ] \Device\Harddisk0\DR0\Partition3
12:14:04.0220 2340 \Device\Harddisk0\DR0\Partition3 - ok
12:14:04.0233 2340 [ CB0484ACDC3C412DF9FF96B8AC3EB245 ] \Device\Harddisk0\DR0\Partition4
12:14:04.0234 2340 \Device\Harddisk0\DR0\Partition4 - ok
12:14:04.0237 2340 [ 00CEBD30B2278E409F2EFFF55EBC2BCA ] \Device\Harddisk1\DR1\Partition1
12:14:04.0239 2340 \Device\Harddisk1\DR1\Partition1 - ok
12:14:04.0239 2340 ============================================================
12:14:04.0239 2340 Scan finished
12:14:04.0239 2340 ============================================================
12:14:04.0249 2396 Detected object count: 0
12:14:04.0249 2396 Actual detected object count: 0
ComboFix
Download
Combofix from the link below, and save it to your desktop.
Link
**Note: It is important that it is saved directly to your desktop**
If you get a message saying "
Illegal operation attempted on a registry key that has been marked for deletion ", please restart your computer.
——————————————————————–
IMPORTANT -
Disable your AntiVirus and AntiSpyware applications , usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
——————————————————————–
Right-Click and Run as Administrator on
ComboFix.exe & follow the prompts.
When finished, it will produce a report for you. Please post the C:\ComboFix.txt for further review.
———-
ComboFix 13-03-23.01 - caie 23/03/2013 15:07:02.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.57.1033.18.8053.5600 [GMT -5:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\INSTALL.LOG
c:\users\caie\ResourceReader.dll
D:\install.exe
.
.
((((((((((((((((((((((((( Files Created from 2013-02-23 to 2013-03-23 )))))))))))))))))))))))))))))))
.
.
2013-03-21 16:07 . 2013-03-21 16:07 ——– d—–w- C:\found.000
2013-03-19 02:11 . 2013-03-19 02:12 ——– d—–w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-03-19 02:11 . 2013-03-19 02:12 ——– d—–w- c:\program files\iTunes
2013-03-19 02:11 . 2013-03-19 02:12 ——– d—–w- c:\program files (x86)\iTunes
2013-03-19 02:11 . 2013-03-19 02:11 ——– d—–w- c:\program files\iPod
2013-03-13 03:36 . 2013-03-13 03:36 ——– d—–w- c:\program files (x86)\AGEIA Technologies
2013-03-13 01:02 . 2013-01-13 19:53 187392 —-a-w- c:\windows\SysWow64\UIAnimation.dll
2013-03-13 00:59 . 2013-02-12 04:12 19968 —-a-w- c:\windows\system32\drivers\usb8023.sys
2013-03-08 15:51 . 2013-03-08 15:51 ——– d—–w- C:\MATS
2013-02-24 22:19 . 2008-08-28 16:44 25600 —-a-w- c:\windows\system32\drivers\pccsmcfdx64.sys
2013-02-24 22:19 . 2013-02-24 22:19 ——– d—–w- c:\program files (x86)\PC Connectivity Solution
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-13 01:10 . 2011-08-26 18:56 72013344 —-a-w- c:\windows\system32\MRT.exe
2013-03-03 02:12 . 2012-05-04 21:21 101184 —-a-w- c:\windows\system32\stkMonitor.dll
2013-02-14 17:40 . 2013-02-14 17:40 283200 —-a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-02-14 17:27 . 2011-08-27 16:03 564824 —-a-w- c:\windows\system32\drivers\sptd.sys
2013-02-14 17:01 . 2013-02-14 17:01 95648 —-a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-02-14 17:01 . 2012-08-05 14:06 861088 —-a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-02-14 17:01 . 2011-08-27 14:50 782240 —-a-w- c:\windows\SysWow64\deployJava1.dll
2013-02-12 05:45 . 2013-03-13 01:00 135168 —-a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-02-12 05:45 . 2013-03-13 01:00 350208 —-a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-02-12 05:45 . 2013-03-13 01:00 308736 —-a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-02-12 05:45 . 2013-03-13 01:00 111104 —-a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-02-12 04:48 . 2013-03-13 01:00 474112 —-a-w- c:\windows\apppatch\AcSpecfc.dll
2013-02-12 04:48 . 2013-03-13 01:00 2176512 —-a-w- c:\windows\apppatch\AcGenral.dll
2013-02-10 03:25 . 2012-02-23 20:01 15038296 —-a-w- c:\windows\SysWow64\nvd3dum.dll
2013-02-10 03:25 . 2011-11-06 22:11 15275744 —-a-w- c:\windows\system32\nvwgf2umx.dll
2013-02-10 03:25 . 2011-11-06 22:11 7964680 —-a-w- c:\windows\SysWow64\nvcuda.dll
2013-02-10 03:25 . 2011-11-06 22:11 2854344 —-a-w- c:\windows\system32\nvapi64.dll
2013-02-10 03:25 . 2011-11-06 22:11 2528840 —-a-w- c:\windows\SysWow64\nvapi.dll
2013-02-10 01:04 . 2011-11-06 22:39 6393120 —-a-w- c:\windows\system32\nvcpl.dll
2013-02-10 01:04 . 2011-11-06 22:39 3472672 —-a-w- c:\windows\system32\nvsvc64.dll
2013-02-10 01:04 . 2011-11-06 22:39 63776 —-a-w- c:\windows\system32\nvshext.dll
2013-02-10 01:04 . 2011-11-06 22:39 877856 —-a-w- c:\windows\system32\nvvsvc.exe
2013-02-10 01:04 . 2011-11-06 22:39 237856 —-a-w- c:\windows\system32\nvmctray.dll
2013-02-09 23:43 . 2013-02-09 23:43 555808 —-a-w- c:\windows\SysWow64\nvStreaming.exe
2013-01-05 05:53 . 2013-02-14 16:59 5553512 —-a-w- c:\windows\system32\ntoskrnl.exe
2013-01-05 05:00 . 2013-02-14 16:59 3967848 —-a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-01-05 05:00 . 2013-02-14 16:59 3913064 —-a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-01-04 05:46 . 2013-02-14 16:59 215040 —-a-w- c:\windows\system32\winsrv.dll
2013-01-04 04:51 . 2013-02-14 16:59 5120 —-a-w- c:\windows\SysWow64\wow32.dll
2013-01-04 04:43 . 2013-02-14 16:59 44032 —-a-w- c:\windows\apppatch\acwow64.dll
2013-01-04 03:26 . 2013-02-14 16:59 3153408 —-a-w- c:\windows\system32\win32k.sys
2013-01-04 02:47 . 2013-02-14 16:59 25600 —-a-w- c:\windows\SysWow64\setup16.exe
2013-01-04 02:47 . 2013-02-14 16:59 7680 —-a-w- c:\windows\SysWow64\instnm.exe
2013-01-04 02:47 . 2013-02-14 16:59 2048 —-a-w- c:\windows\SysWow64\user.exe
2013-01-04 02:47 . 2013-02-14 16:59 14336 —-a-w- c:\windows\SysWow64\ntvdm64.dll
2013-01-03 06:00 . 2013-02-14 16:58 1913192 —-a-w- c:\windows\system32\drivers\tcpip.sys
2013-01-03 06:00 . 2013-02-14 16:58 288088 —-a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"SpiderOak"="c:\program files (x86)\SpiderOak\SpiderOak.exe" [2013-01-14 53760]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-01-08 3674320]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"AdobeCS4ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5.5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" [2011-01-12 1523360]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-10-24 421888]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-01-28 59720]
"Display"="c:\program files (x86)\APC\PowerChute Personal Edition\DataCollectionLauncher.exe" [2012-01-24 284024]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]
"AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2012-12-11 3147384]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-02-20 152392]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
APC UPS Status.lnk - c:\program files (x86)\APC\PowerChute Personal Edition\Display.exe [2012-1-24 271736]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-16 5814904]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-01-31 3289208]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 Adobe Version Cue CS4;Adobe Version Cue CS4;c:\program files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-12-02 1038088]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 RTCore64;RTCore64;c:\program files (x86)\EVGA Precision X\RTCore64.sys [2012-10-17 15176]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-12-13 54784]
R3 VBoxUSB;VirtualBox USB;c:\windows\system32\Drivers\VBoxUSB.sys [2011-12-19 117040]
R3 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-08-26 1255736]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-10-15 63328]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys [2012-09-21 225120]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2012-11-16 111968]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-09-14 40800]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2009-07-09 55280]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2012-10-22 154464]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-10-02 185696]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-02-14 283200]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2012-10-27 237400]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2012-10-26 119640]
S2 ABBYY.Licensing.FineReader.Professional.9.0;ABBYY FineReader 9.0 PE Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [2007-12-07 660768]
S2 APC Data Service;APC Data Service;c:\program files (x86)\APC\PowerChute Personal Edition\dataserv.exe [2012-01-24 21880]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664]
S2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe [2012-09-06 170824]
S2 Kilgray: memoQ update permissions manager. 979430.;Kilgray: memoQ update permissions manager. 979430.;c:\program files (x86)\Kilgray\memoQ40\AUClient.exe [2011-11-08 696320]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2012-07-13 769432]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-02-09 383264]
S3 DKRtWrt;DKRtWrt;c:\windows\system32\DRIVERS\DKRtWrt.sys [2011-02-14 44624]
S3 e1kexpress;Intel® PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys [2012-02-02 509104]
S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-18 56344]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2012-10-27 131416]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2012-10-26 146264]
.
.
— Other Services/Drivers In Memory —
.
*NewlyCreated* - 70092458
*Deregistered* - 70092458
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-03-14 21:17 1629648 —-a-w- c:\program files (x86)\Google\Chrome\Application\25.0.1364.172\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-03-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-15 17:07]
.
2013-03-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-10-15 17:07]
.
.
——— X64 Entries ———–
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-03-07 21:31 776144 —-a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-03-07 21:31 776144 —-a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-03-07 21:31 776144 —-a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-03-07 21:31 776144 —-a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-03-27 12459112]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
——- Supplementary Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyServer = http=localhost:8118
uInternet Settings,ProxyOverride = *.local;127.0.01
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\caie\AppData\Roaming\Mozilla\Firefox\Profiles\jnmta5d6.default\
FF - prefs.js: network.proxy.http - localhost
FF - prefs.js: network.proxy.http_port - 8118
FF - prefs.js: network.proxy.ssl - localhost
FF - prefs.js: network.proxy.ssl_port - 8118
FF - prefs.js: network.proxy.type - 0
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKLM-Run-RIMBBLaunchAgent.exe - c:\program files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
Wow6432Node-HKLM-Run- - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
"ImagePath"="%SystemRoot%\system32\lsass.exe"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Kilgray: memoQ update permissions manager. 979430.]
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-03-23 15:14:19
ComboFix-quarantined-files.txt 2013-03-23 20:14
.
Pre-Run: 37.038.743.552 bytes free
Post-Run: 38.079.504.384 bytes free
.
- - End Of File - - FA9B111E2DED72D532B5417716CF6ECF
Maybe I overlooked your answer to this…
Are you aware that your system is set to run from a proxy server or do you connect to work or business with this system?
I did use a proxy, adblocker Privoxy, but I stopped using it some weeks ago. But I don't use a VPN in any way. I sometimes connect to this PC using RDC, but mostly I log in physically.
Ok…I am going to remove those setting for now in case they might be causing part of the problems. Will you be able to reestablish these later when we are done?
Given that all of the virus scans didn't come up with anything more serious than adware, I assumed it was the hard disk with its bad sectors that was the cause of the trouble. And, after all I haven't had any accounts hijacked, though it was nearly two days before I noticed something was wrong. So I just reinstalled windows on another HDD… I haven't had any trouble since then. Thanks for the help though.
So you don't need help any longer? I just want to clarify before closing the topic.
Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.
Everyone else please follow the instructions here
http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.
![[external image: Posted Image]](http://i1224.photobucket.com/albums/ee380/jeffce74/aswmbrscan.jpg){kind=link}