Spyware / Malware / Virus Removal

small.ca Virus [Closed]

45 min read

Looking for the outcome? Ask AI

Robybel

Post #16February 27, 2013, 11:44 AM UTC

Hi keperref

Please re-try this

Drag the Combofix icon (Robybel.exe) into the trash

Download Combofix from any of the links below but rename it to WTT.exe before saving it to your desktop.

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop

==================================

Double click on the renamed ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply for further review.

Notes:

1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please tell your helper.
4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

keeperref

Post #17February 27, 2013, 9:40 PM UTC

Tried running it as WTT.exe; the first time I did, it went through the same steps as before of extracting and saving files, then disappeared without the warning message. However, there was also no text file in my C:/ drive, so I tried running again and now am getting the same old windows 32 bit only message. This time, however, I also got a message saying "iexplorer.exe has stopped working. Windows is searching for a solution to the problem". What now, fearless IT leader?

Robybel

Post #18February 28, 2013, 5:20 AM UTC

Hi keeperref

[external image: Posted Image] Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

=============================== Next =======================================

Please download Malwarebytes' Anti-Malware to your desktop.

Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform quick scan, then click Scan.
[external image: Posted Image]
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected .
When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.

=============================== Next =======================================

ESET Online Scanner
I'd like us to scan your machine with ESET OnlineScan

Note: If you are using Windows Vista/7, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.

Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
Click the [external image: Posted Image] button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
- Double click on the [external image: Posted Image] icon on your desktop.
Check [external image: Posted Image]
Click the [external image: Posted Image] button.
Accept any security warnings from your browser.
Check [external image: Posted Image]
Make sure that the option "Remove found threats" is Unchecked
Push the Start button.
ESET will then download updates for itself, install itself, and begin
scanning your computer. Please be patient as this can take some time.
When the scan completes, push [external image: Posted Image]
Push [external image: Posted Image], and save the file to your desktop using a unique name, such as MyEsetScan. Alternatively, look for report in C:\Program Files\ESET\ESET Online Scanner\log.txt. Include the contents of this report in your next reply.
Push the Back button.
Select Uninstall application on close check box and push [external image: Posted Image]

On your next reply please post :
JRT report
MBAM log
Eset report

Let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

keeperref

Post #19March 1, 2013, 10:30 PM UTC

here are the three logs requested: 📎ESET.txt 📎JRT.txt 📎mbam_log_2013_03_01__10_44_42_.txt

Robybel

Post #20March 2, 2013, 5:50 AM UTC last edited March 2, 2013, 5:55 AM UTC

Hi keperref

Please re-try this now

Drag the Combofix icon (WTT.exe) into the trash

Please read through these instructions to familarize yourself with what to expect when this tool runs

Refer to the ComboFix User's Guide

Download ComboFix from one of these locations, but rename it to Good.exe before saving it to your desktop.

Link 1
Link 2

* IMPORTANT- Save ComboFix.exe to your Desktop

====================================================

Disable your AntiVirus and AntiSpyware applications as they will interfere with our tools and the removal. If you are unsure how to do this, please refer to our sticky topic How to disable your security applications

====================================================

Double click on ComboFix.exe & follow the prompts.

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply for further review.

Robybel

Post #21March 5, 2013, 4:23 AM UTC

Still with me?

Robybel

Post #22March 6, 2013, 4:30 AM UTC

Due to inactivity this topic will be closed.
If you need help please start a new thread

New members follow the instructions here and start a new topic

Robybel

Post #23March 6, 2013, 4:31 AM UTC

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html and start a new topic

keeperref

Post #24March 31, 2013, 9:53 PM UTC

I was previously being helped here
but had some personal issues limit the amount of time I had for troubleshooting, and the thread was closed.

Now that I'm back to it, I reinstalled combofix using "good.exe" as it's download name and am receiving the same errors. It seemed to me that with the link I gave I shouldn't need to repost any logs, but if so, please let me know.

Robybel

Post #25April 1, 2013, 7:55 PM UTC

Hi keperref

Welcome back

Clean up with OTL:

Double-click OTL.exe to start the program.
Close all other programs apart from OTL as this step will require a reboot
On the OTL main screen, press the CLEANUP button
Say Yes to the prompt and then allow the program to reboot your computer.

Next

Scan with OTL

Download OTL to your desktop.
Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Check the boxes beside LOP Check and Purity Check.
Under Custom Scan paste this in

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
services.exe
/md5stop
%systemroot%\*. /rp /s
%systemdrive%\$Recycle.Bin|@;true;true;true /fp
DRIVES
CREATERESTOREPOINT
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
You may need two posts to fit them both in.

Next

Please read carefully and follow these steps.

Download TDSSKiller and save it to your Desktop.
Extract its contents to your desktop.
Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

🖼Click to load external image (Posted Image)
If an infected file is detected, the default action will be Cure, click on Continue.

🖼Click to load external image (Posted Image)
If a suspicious file is detected, the default action will be Skip, click on Continue.

🖼Click to load external image (Posted Image)
It may ask you to reboot the computer to complete the process. Click on Reboot Now.

🖼Click to load external image (Posted Image)
If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

keeperref

Post #26April 4, 2013, 3:36 AM UTC last edited April 4, 2013, 3:40 AM UTC

After doing the OTL cleanup, Google Chrome will not load any webpages. If I type google.com into the address bar, for example, Google instant starts to suggest completions, and when I hit enter after typing out the full "google.com", it converts to "www.google.com", the window is completely blank, the name of the tab says untitled, and there is no loading happening (the refresh button is a cycle, not the X). Refreshing and hard refreshing does nothing. other websites do the same thing. 📎OTL.Txt 📎Extras.Txt 23:32:13.0326 8576 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42 23:32:14.0123 8576 ============================================================ 23:32:14.0123 8576 Current date / time: 2013/04/03 23:32:14.0123 23:32:14.0123 8576 SystemInfo: 23:32:14.0123 8576 23:32:14.0124 8576 OS Version: 6.1.7601 ServicePack: 1.0 23:32:14.0124 8576 Product type: Workstation 23:32:14.0124 8576 ComputerName: ANDREW-HP 23:32:14.0124 8576 UserName: Andrew 23:32:14.0124 8576 Windows directory: C:\Windows 23:32:14.0124 8576 System windows directory: C:\Windows 23:32:14.0124 8576 Running under WOW64 23:32:14.0124 8576 Processor architecture: Intel x64 23:32:14.0124 8576 Number of processors: 4 23:32:14.0124 8576 Page size: 0x1000 23:32:14.0124 8576 Boot type: Normal boot 23:32:14.0124 8576 ============================================================ 23:32:15.0054 8576 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 23:32:15.0060 8576 ============================================================ 23:32:15.0060 8576 \Device\Harddisk0\DR0: 23:32:15.0061 8576 MBR partitions: 23:32:15.0061 8576 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800 23:32:15.0061 8576 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x5582D800 23:32:15.0061 8576 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x55891800, BlocksNum 0x1C81000 23:32:15.0061 8576 \Device\Harddisk0\DR0\Partition4: MBR, Type 0xC, StartLBA 0x57512800, BlocksNum 0x336F0 23:32:15.0061 8576 ============================================================ 23:32:15.0072 8576 C: <-> \Device\Harddisk0\DR0\Partition2 23:32:15.0127 8576 D: <-> \Device\Harddisk0\DR0\Partition3 23:32:15.0143 8576 F: <-> \Device\Harddisk0\DR0\Partition4 23:32:15.0143 8576 ============================================================ 23:32:15.0143 8576 Initialize success 23:32:15.0143 8576 ============================================================ 23:33:47.0219 8212 ============================================================ 23:33:47.0219 8212 Scan started 23:33:47.0219 8212 Mode: Manual; 23:33:47.0219 8212 ============================================================ 23:33:47.0894 8212 ================ Scan system memory ======================== 23:33:47.0894 8212 System memory - ok 23:33:47.0895 8212 ================ Scan services ============================= 23:33:48.0096 8212 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 23:33:48.0100 8212 1394ohci - ok 23:33:48.0169 8212 [ 5C368F4B04ED2A923E6AFCA2D37BAFF5 ] Accelerometer C:\Windows\system32\DRIVERS\Accelerometer.sys 23:33:48.0170 8212 Accelerometer - ok 23:33:48.0240 8212 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys 23:33:48.0248 8212 ACPI - ok 23:33:48.0283 8212 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 23:33:48.0284 8212 AcpiPmi - ok 23:33:48.0404 8212 [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe 23:33:48.0407 8212 AdobeARMservice - ok 23:33:48.0543 8212 [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe 23:33:48.0548 8212 AdobeFlashPlayerUpdateSvc - ok 23:33:48.0595 8212 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys 23:33:48.0602 8212 adp94xx - ok 23:33:48.0646 8212 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys 23:33:48.0651 8212 adpahci - ok 23:33:48.0683 8212 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys 23:33:48.0686 8212 adpu320 - ok 23:33:48.0709 8212 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 23:33:48.0711 8212 AeLookupSvc - ok 23:33:48.0772 8212 [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters C:\Program Files\IDT\WDM\AESTSr64.exe 23:33:48.0774 8212 AESTFilters - ok 23:33:48.0814 8212 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys 23:33:48.0821 8212 AFD - ok 23:33:48.0855 8212 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys 23:33:48.0856 8212 agp440 - ok 23:33:48.0896 8212 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe 23:33:48.0898 8212 ALG - ok 23:33:48.0938 8212 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys 23:33:48.0939 8212 aliide - ok 23:33:48.0960 8212 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys 23:33:48.0961 8212 amdide - ok 23:33:48.0988 8212 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys 23:33:48.0989 8212 AmdK8 - ok 23:33:49.0019 8212 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys 23:33:49.0021 8212 AmdPPM - ok 23:33:49.0057 8212 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys 23:33:49.0058 8212 amdsata - ok 23:33:49.0088 8212 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys 23:33:49.0089 8212 amdsbs - ok 23:33:49.0102 8212 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys 23:33:49.0102 8212 amdxata - ok 23:33:49.0130 8212 [ 7D9E301AB3247765702D0B65E2E47E50 ] AMPPAL C:\Windows\system32\DRIVERS\AMPPAL.sys 23:33:49.0131 8212 AMPPAL - ok 23:33:49.0137 8212 [ 7D9E301AB3247765702D0B65E2E47E50 ] AMPPALP C:\Windows\system32\DRIVERS\amppal.sys 23:33:49.0138 8212 AMPPALP - ok 23:33:49.0229 8212 [ 576134E43169810B560F0BB6FDEE13F5 ] AMPPALR3 C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe 23:33:49.0254 8212 AMPPALR3 - ok 23:33:49.0297 8212 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys 23:33:49.0298 8212 AppID - ok 23:33:49.0333 8212 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll 23:33:49.0334 8212 AppIDSvc - ok 23:33:49.0367 8212 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll 23:33:49.0368 8212 Appinfo - ok 23:33:49.0781 8212 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 23:33:49.0784 8212 Apple Mobile Device - ok 23:33:49.0881 8212 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys 23:33:49.0883 8212 arc - ok 23:33:49.0939 8212 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys 23:33:49.0941 8212 arcsas - ok 23:33:50.0111 8212 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 23:33:50.0112 8212 aspnet_state - ok 23:33:50.0146 8212 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 23:33:50.0146 8212 AsyncMac - ok 23:33:50.0163 8212 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys 23:33:50.0163 8212 atapi - ok 23:33:50.0205 8212 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 23:33:50.0208 8212 AudioEndpointBuilder - ok 23:33:50.0217 8212 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll 23:33:50.0221 8212 AudioSrv - ok 23:33:50.0262 8212 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll 23:33:50.0263 8212 AxInstSV - ok 23:33:50.0292 8212 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys 23:33:50.0294 8212 b06bdrv - ok 23:33:50.0320 8212 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 23:33:50.0321 8212 b57nd60a - ok 23:33:50.0398 8212 [ 9E84A931DBEE0292E38ED672F6293A99 ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl664.sys 23:33:50.0424 8212 BCM43XX - ok 23:33:50.0445 8212 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll 23:33:50.0446 8212 BDESVC - ok 23:33:50.0474 8212 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys 23:33:50.0474 8212 Beep - ok 23:33:50.0509 8212 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll 23:33:50.0517 8212 BFE - ok 23:33:50.0549 8212 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll 23:33:50.0559 8212 BITS - ok 23:33:50.0580 8212 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys 23:33:50.0581 8212 blbdrive - ok 23:33:50.0626 8212 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 23:33:50.0631 8212 Bonjour Service - ok 23:33:50.0661 8212 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 23:33:50.0663 8212 bowser - ok 23:33:50.0688 8212 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys 23:33:50.0688 8212 BrFiltLo - ok 23:33:50.0704 8212 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys 23:33:50.0705 8212 BrFiltUp - ok 23:33:50.0752 8212 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys 23:33:50.0754 8212 BridgeMP - ok 23:33:50.0812 8212 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll 23:33:50.0814 8212 Browser - ok 23:33:50.0840 8212 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys 23:33:50.0843 8212 Brserid - ok 23:33:50.0871 8212 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 23:33:50.0872 8212 BrSerWdm - ok 23:33:50.0893 8212 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 23:33:50.0894 8212 BrUsbMdm - ok 23:33:50.0922 8212 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 23:33:50.0923 8212 BrUsbSer - ok 23:33:50.0940 8212 BTCFilterService - ok 23:33:50.0971 8212 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys 23:33:50.0973 8212 BTHMODEM - ok 23:33:51.0007 8212 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll 23:33:51.0008 8212 bthserv - ok 23:33:51.0040 8212 [ 9E2AF97302B9F4BF97E952A865EB31AE ] BTHSSecurityMgr C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe 23:33:51.0042 8212 BTHSSecurityMgr - ok 23:33:51.0074 8212 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 23:33:51.0075 8212 cdfs - ok 23:33:51.0114 8212 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys 23:33:51.0116 8212 cdrom - ok 23:33:51.0158 8212 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll 23:33:51.0160 8212 CertPropSvc - ok 23:33:51.0188 8212 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys 23:33:51.0189 8212 circlass - ok 23:33:51.0206 8212 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys 23:33:51.0210 8212 CLFS - ok 23:33:51.0273 8212 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 23:33:51.0275 8212 clr_optimization_v2.0.50727_32 - ok 23:33:51.0323 8212 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 23:33:51.0326 8212 clr_optimization_v2.0.50727_64 - ok 23:33:51.0392 8212 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 23:33:51.0396 8212 clr_optimization_v4.0.30319_32 - ok 23:33:51.0421 8212 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 23:33:51.0425 8212 clr_optimization_v4.0.30319_64 - ok 23:33:51.0468 8212 [ 50F92C943F18B070F166D019DFAB3D9A ] clwvd C:\Windows\system32\DRIVERS\clwvd.sys 23:33:51.0469 8212 clwvd - ok 23:33:51.0501 8212 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys 23:33:51.0502 8212 CmBatt - ok 23:33:51.0514 8212 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys 23:33:51.0515 8212 cmdide - ok 23:33:51.0577 8212 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys 23:33:51.0586 8212 CNG - ok 23:33:51.0623 8212 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys 23:33:51.0624 8212 Compbatt - ok 23:33:51.0671 8212 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 23:33:51.0672 8212 CompositeBus - ok 23:33:51.0791 8212 COMSysApp - ok 23:33:52.0079 8212 [ 20C701DCBA0704E9D38829BD510CD186 ] CoordinatorServiceHost C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe 23:33:52.0081 8212 CoordinatorServiceHost - ok 23:33:52.0116 8212 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys 23:33:52.0117 8212 crcdisk - ok 23:33:52.0171 8212 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll 23:33:52.0176 8212 CryptSvc - ok 23:33:52.0257 8212 [ F02D7FD231AF76C69A8F09C619DEE384 ] ctxusbm C:\Windows\system32\DRIVERS\ctxusbm.sys 23:33:52.0259 8212 ctxusbm - ok 23:33:52.0307 8212 [ BD99D714062029904E11E3BCC32D1E35 ] cxbu0x64 C:\Windows\system32\DRIVERS\cxbu0x64.sys 23:33:52.0308 8212 cxbu0x64 - ok 23:33:52.0353 8212 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll 23:33:52.0359 8212 DcomLaunch - ok 23:33:52.0376 8212 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll 23:33:52.0378 8212 defragsvc - ok 23:33:52.0397 8212 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 23:33:52.0398 8212 DfsC - ok 23:33:52.0421 8212 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll 23:33:52.0424 8212 Dhcp - ok 23:33:52.0434 8212 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys 23:33:52.0434 8212 discache - ok 23:33:52.0481 8212 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys 23:33:52.0484 8212 Disk - ok 23:33:52.0499 8212 dlcx_device - ok 23:33:52.0548 8212 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll 23:33:52.0553 8212 Dnscache - ok 23:33:52.0578 8212 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll 23:33:52.0582 8212 dot3svc - ok 23:33:52.0621 8212 [ B42ED0320C6E41102FDE0005154849BB ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys 23:33:52.0623 8212 Dot4 - ok 23:33:52.0657 8212 [ E9F5969233C5D89F3C35E3A66A52A361 ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys 23:33:52.0659 8212 Dot4Print - ok 23:33:52.0682 8212 [ FD05A02B0370BC3000F402E543CA5814 ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys 23:33:52.0683 8212 dot4usb - ok 23:33:52.0715 8212 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll 23:33:52.0719 8212 DPS - ok 23:33:52.0758 8212 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 23:33:52.0759 8212 drmkaud - ok 23:33:52.0829 8212 [ 46571ED73AE84469DCA53081D33CF3C8 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys 23:33:52.0836 8212 dtsoftbus01 - ok 23:33:52.0873 8212 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 23:33:52.0880 8212 DXGKrnl - ok 23:33:52.0918 8212 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll 23:33:52.0922 8212 EapHost - ok 23:33:53.0017 8212 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys 23:33:53.0100 8212 ebdrv - ok 23:33:53.0125 8212 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe 23:33:53.0126 8212 EFS - ok 23:33:53.0170 8212 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys 23:33:53.0173 8212 elxstor - ok 23:33:53.0202 8212 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys 23:33:53.0203 8212 ErrDev - ok 23:33:53.0245 8212 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll 23:33:53.0249 8212 EventSystem - ok 23:33:53.0314 8212 [ E3A96D5AE6E5C7B5472011BA77353368 ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe 23:33:53.0341 8212 EvtEng - ok 23:33:53.0378 8212 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys 23:33:53.0379 8212 exfat - ok 23:33:53.0401 8212 ezSharedSvc - ok 23:33:53.0414 8212 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys 23:33:53.0416 8212 fastfat - ok 23:33:53.0443 8212 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys 23:33:53.0443 8212 fdc - ok 23:33:53.0462 8212 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll 23:33:53.0463 8212 fdPHost - ok 23:33:53.0474 8212 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll 23:33:53.0475 8212 FDResPub - ok 23:33:53.0497 8212 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 23:33:53.0499 8212 FileInfo - ok 23:33:53.0508 8212 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 23:33:53.0509 8212 Filetrace - ok 23:33:53.0614 8212 [ 73081CF28F0AE20A52CA4F67CEE6E6B0 ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe 23:33:53.0630 8212 FLEXnet Licensing Service - ok 23:33:53.0727 8212 [ 5CEE6CD43AE5844C49300EA0B1E557EE ] FLEXnet Licensing Service 64 C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe 23:33:53.0749 8212 FLEXnet Licensing Service 64 - ok 23:33:53.0790 8212 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys 23:33:53.0791 8212 flpydisk - ok 23:33:53.0999 8212 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 23:33:54.0112 8212 FltMgr - ok 23:33:54.0187 8212 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll 23:33:54.0205 8212 FontCache - ok 23:33:54.0247 8212 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 23:33:54.0248 8212 FontCache3.0.0.0 - ok 23:33:54.0375 8212 [ 6929B09CE438E83BBAFC7BF033FF4A02 ] FPLService C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe 23:33:54.0379 8212 FPLService - ok 23:33:54.0403 8212 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 23:33:54.0404 8212 FsDepends - ok 23:33:54.0448 8212 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 23:33:54.0448 8212 Fs_Rec - ok 23:33:54.0474 8212 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 23:33:54.0477 8212 fvevol - ok 23:33:54.0510 8212 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys 23:33:54.0510 8212 gagp30kx - ok 23:33:54.0557 8212 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 23:33:54.0558 8212 GEARAspiWDM - ok 23:33:54.0599 8212 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll 23:33:54.0612 8212 gpsvc - ok 23:33:54.0699 8212 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 23:33:54.0703 8212 gupdate - ok 23:33:54.0722 8212 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 23:33:54.0725 8212 gupdatem - ok 23:33:54.0744 8212 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 23:33:54.0745 8212 hcw85cir - ok 23:33:54.0783 8212 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 23:33:54.0789 8212 HdAudAddService - ok 23:33:54.0855 8212 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys 23:33:54.0858 8212 HDAudBus - ok 23:33:54.0873 8212 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys 23:33:54.0874 8212 HidBatt - ok 23:33:54.0892 8212 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys 23:33:54.0894 8212 HidBth - ok 23:33:54.0913 8212 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys 23:33:54.0914 8212 HidIr - ok 23:33:54.0936 8212 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll 23:33:54.0938 8212 hidserv - ok 23:33:54.0977 8212 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys 23:33:54.0978 8212 HidUsb - ok 23:33:55.0006 8212 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll 23:33:55.0008 8212 hkmsvc - ok 23:33:55.0024 8212 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll 23:33:55.0029 8212 HomeGroupListener - ok 23:33:55.0061 8212 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 23:33:55.0066 8212 HomeGroupProvider - ok 23:33:55.0161 8212 [ BB1FC298BE53AAB1E110F6E786BD8AC5 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe 23:33:55.0164 8212 HP Support Assistant Service - ok 23:33:55.0193 8212 [ 6A181452D4E240B8ECC7614B9A19BDE9 ] HPClientSvc C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe 23:33:55.0201 8212 HPClientSvc - ok 23:33:55.0242 8212 [ 4E0BEC0F78096FFD6D3314B497FC49D3 ] hpdskflt C:\Windows\system32\DRIVERS\hpdskflt.sys 23:33:55.0243 8212 hpdskflt - ok 23:33:55.0387 8212 [ 1DAE5C46D42B02A6D5862E1482EFB390 ] hpqcxs08 C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll 23:33:55.0392 8212 hpqcxs08 - ok 23:33:55.0465 8212 [ 99E8EEF42FE2F4AF29B08C3355DD7685 ] hpqddsvc C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll 23:33:55.0469 8212 hpqddsvc - ok 23:33:55.0553 8212 [ 9B7EDD3FE7C211C36E921D34D18A3A0A ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe 23:33:55.0558 8212 hpqwmiex - ok 23:33:55.0583 8212 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 23:33:55.0583 8212 HpSAMD - ok 23:33:55.0601 8212 [ FC7C13B5A9E9BE23B7AE72BBC7FDB278 ] hpsrv C:\Windows\system32\Hpservice.exe 23:33:55.0602 8212 hpsrv - ok 23:33:55.0657 8212 [ 491CE9B6321FB74E4B37AF2C47F98434 ] HPWMISVC C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe 23:33:55.0659 8212 HPWMISVC - ok 23:33:55.0697 8212 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys 23:33:55.0710 8212 HTTP - ok 23:33:55.0729 8212 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 23:33:55.0731 8212 hwpolicy - ok 23:33:55.0775 8212 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys 23:33:55.0776 8212 i8042prt - ok 23:33:55.0844 8212 [ 2FDAEC4B02729C48C0FD1B0B4695995B ] iaStor C:\Windows\system32\DRIVERS\iaStor.sys 23:33:55.0853 8212 iaStor - ok 23:33:55.0964 8212 [ D41861E56E7552C13674D7F147A02464 ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe 23:33:55.0967 8212 IAStorDataMgrSvc - ok 23:33:56.0345 8212 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 23:33:56.0352 8212 iaStorV - ok 23:33:56.0478 8212 [ D72BF0AE484F88399E8343E821C10D6A ] IconMan_R C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe 23:33:56.0507 8212 IconMan_R - ok 23:33:56.0565 8212 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 23:33:56.0571 8212 idsvc - ok 23:33:56.0801 8212 [ 6383899C5F964D71B0F96B81FBE59BB8 ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys 23:33:57.0009 8212 igfx - ok 23:33:57.0031 8212 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys 23:33:57.0032 8212 iirsp - ok 23:33:57.0062 8212 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll 23:33:57.0070 8212 IKEEXT - ok 23:33:57.0122 8212 [ FC727061C0F47C8059E88E05D5C8E381 ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys 23:33:57.0128 8212 IntcDAud - ok 23:33:57.0156 8212 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys 23:33:57.0157 8212 intelide - ok 23:33:57.0178 8212 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 23:33:57.0180 8212 intelppm - ok 23:33:57.0209 8212 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll 23:33:57.0213 8212 IPBusEnum - ok 23:33:57.0241 8212 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 23:33:57.0243 8212 IpFilterDriver - ok 23:33:57.0292 8212 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 23:33:57.0305 8212 iphlpsvc - ok 23:33:57.0333 8212 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 23:33:57.0334 8212 IPMIDRV - ok 23:33:57.0360 8212 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 23:33:57.0362 8212 IPNAT - ok 23:33:57.0473 8212 [ 0F261EC4F514926177C70C1832374231 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 23:33:57.0486 8212 iPod Service - ok 23:33:57.0537 8212 [ 02DEF37AB75E0032C50724646F708DE8 ] iPodDrv C:\Windows\system32\drivers\iPodDrv.sys 23:33:57.0540 8212 iPodDrv - ok 23:33:57.0588 8212 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 23:33:57.0589 8212 IRENUM - ok 23:33:57.0624 8212 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys 23:33:57.0625 8212 isapnp - ok 23:33:57.0658 8212 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 23:33:57.0659 8212 iScsiPrt - ok 23:33:57.0685 8212 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys 23:33:57.0685 8212 kbdclass - ok 23:33:57.0732 8212 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys 23:33:57.0734 8212 kbdhid - ok 23:33:57.0758 8212 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe 23:33:57.0760 8212 KeyIso - ok 23:33:57.0800 8212 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 23:33:57.0802 8212 KSecDD - ok 23:33:57.0854 8212 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 23:33:57.0858 8212 KSecPkg - ok 23:33:57.0881 8212 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 23:33:57.0883 8212 ksthunk - ok 23:33:57.0934 8212 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll 23:33:57.0942 8212 KtmRm - ok 23:33:57.0984 8212 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll 23:33:57.0990 8212 LanmanServer - ok 23:33:58.0008 8212 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 23:33:58.0013 8212 LanmanWorkstation - ok 23:33:58.0049 8212 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 23:33:58.0050 8212 lltdio - ok 23:33:58.0085 8212 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll 23:33:58.0089 8212 lltdsvc - ok 23:33:58.0103 8212 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll 23:33:58.0105 8212 lmhosts - ok 23:33:58.0159 8212 [ D7E0BED3EA21D7BDDD410ADE51708D90 ] LMS C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe 23:33:58.0165 8212 LMS - ok 23:33:58.0216 8212 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys 23:33:58.0218 8212 LSI_FC - ok 23:33:58.0252 8212 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys 23:33:58.0254 8212 LSI_SAS - ok 23:33:58.0373 8212 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys 23:33:58.0375 8212 LSI_SAS2 - ok 23:33:58.0510 8212 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys 23:33:58.0513 8212 LSI_SCSI - ok 23:33:58.0531 8212 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys 23:33:58.0534 8212 luafv - ok 23:33:58.0541 8212 MCSTRM - ok 23:33:58.0567 8212 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys 23:33:58.0568 8212 megasas - ok 23:33:58.0595 8212 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys 23:33:58.0597 8212 MegaSR - ok 23:33:58.0634 8212 [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64 C:\Windows\system32\DRIVERS\HECIx64.sys 23:33:58.0635 8212 MEIx64 - ok 23:33:58.0709 8212 [ 9547F37D0E899FD71B52B2AFD4437C79 ] MemeoBackgroundService C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe 23:33:58.0710 8212 MemeoBackgroundService - ok 23:33:58.0762 8212 Microsoft SharePoint Workspace Audit Service - ok 23:33:58.0786 8212 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll 23:33:58.0788 8212 MMCSS - ok 23:33:58.0815 8212 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys 23:33:58.0816 8212 Modem - ok 23:33:58.0840 8212 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys 23:33:58.0841 8212 monitor - ok 23:33:58.0859 8212 motccgp - ok 23:33:58.0867 8212 motccgpfl - ok 23:33:58.0874 8212 motmodem - ok 23:33:58.0885 8212 MotoSwitchService - ok 23:33:58.0893 8212 Motousbnet - ok 23:33:58.0901 8212 motusbdevice - ok 23:33:58.0926 8212 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 23:33:58.0926 8212 mouclass - ok 23:33:58.0976 8212 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 23:33:58.0977 8212 mouhid - ok 23:33:59.0019 8212 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 23:33:59.0022 8212 mountmgr - ok 23:33:59.0080 8212 [ 9C3758018DED02F4AE53CCA1C5F084A2 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 23:33:59.0082 8212 MozillaMaintenance - ok 23:33:59.0114 8212 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys 23:33:59.0117 8212 mpio - ok 23:33:59.0134 8212 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 23:33:59.0137 8212 mpsdrv - ok 23:33:59.0185 8212 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll 23:33:59.0201 8212 MpsSvc - ok 23:33:59.0227 8212 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 23:33:59.0228 8212 MRxDAV - ok 23:33:59.0252 8212 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 23:33:59.0255 8212 mrxsmb - ok 23:33:59.0275 8212 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 23:33:59.0280 8212 mrxsmb10 - ok 23:33:59.0299 8212 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 23:33:59.0301 8212 mrxsmb20 - ok 23:33:59.0323 8212 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys 23:33:59.0325 8212 msahci - ok 23:33:59.0351 8212 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys 23:33:59.0352 8212 msdsm - ok 23:33:59.0381 8212 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe 23:33:59.0384 8212 MSDTC - ok 23:33:59.0422 8212 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys 23:33:59.0423 8212 Msfs - ok 23:33:59.0441 8212 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 23:33:59.0442 8212 mshidkmdf - ok 23:33:59.0457 8212 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 23:33:59.0458 8212 msisadrv - ok 23:33:59.0473 8212 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 23:33:59.0475 8212 MSiSCSI - ok 23:33:59.0479 8212 msiserver - ok 23:33:59.0506 8212 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 23:33:59.0506 8212 MSKSSRV - ok 23:33:59.0520 8212 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 23:33:59.0521 8212 MSPCLOCK - ok 23:33:59.0531 8212 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 23:33:59.0532 8212 MSPQM - ok 23:33:59.0556 8212 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 23:33:59.0561 8212 MsRPC - ok 23:33:59.0589 8212 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 23:33:59.0590 8212 mssmbios - ok 23:33:59.0623 8212 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 23:33:59.0623 8212 MSTEE - ok 23:33:59.0649 8212 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys 23:33:59.0650 8212 MTConfig - ok 23:33:59.0663 8212 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys 23:33:59.0664 8212 Mup - ok 23:33:59.0714 8212 [ 8F57DB74BF5407A4CDA6C8B005DC8DD0 ] MyWiFiDHCPDNS C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe 23:33:59.0720 8212 MyWiFiDHCPDNS - ok 23:33:59.0765 8212 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll 23:33:59.0770 8212 napagent - ok 23:33:59.0824 8212 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 23:33:59.0828 8212 NativeWifiP - ok 23:33:59.0912 8212 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys 23:33:59.0931 8212 NDIS - ok 23:33:59.0945 8212 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 23:33:59.0946 8212 NdisCap - ok 23:33:59.0973 8212 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 23:33:59.0974 8212 NdisTapi - ok 23:34:00.0001 8212 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 23:34:00.0003 8212 Ndisuio - ok 23:34:00.0016 8212 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 23:34:00.0017 8212 NdisWan - ok 23:34:00.0034 8212 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 23:34:00.0035 8212 NDProxy - ok 23:34:00.0102 8212 [ 2334DC48997BA203B794DF3EE70521DB ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll 23:34:00.0106 8212 Net Driver HPZ12 - ok 23:34:00.0128 8212 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 23:34:00.0130 8212 NetBIOS - ok 23:34:00.0154 8212 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 23:34:00.0159 8212 NetBT - ok 23:34:00.0180 8212 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe 23:34:00.0182 8212 Netlogon - ok 23:34:00.0211 8212 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll 23:34:00.0217 8212 Netman - ok 23:34:00.0285 8212 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 23:34:00.0382 8212 NetMsmqActivator - ok 23:34:00.0642 8212 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 23:34:00.0645 8212 NetPipeActivator - ok 23:34:00.0692 8212 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll 23:34:00.0704 8212 netprofm - ok 23:34:00.0731 8212 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 23:34:00.0733 8212 NetTcpActivator - ok 23:34:00.0738 8212 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 23:34:00.0739 8212 NetTcpPortSharing - ok 23:34:00.0901 8212 [ 50AD7F7040C22BB7CAA59A0880875A21 ] NETwNs64 C:\Windows\system32\DRIVERS\NETwNs64.sys 23:34:01.0058 8212 NETwNs64 - ok 23:34:01.0088 8212 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys 23:34:01.0088 8212 nfrd960 - ok 23:34:01.0116 8212 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll 23:34:01.0120 8212 NlaSvc - ok 23:34:01.0186 8212 [ 1E8281A0BC4358CF816754E0A195D329 ] NovacomD C:\Program Files\Palm, Inc\novacomd\amd64\novacomd.exe 23:34:01.0189 8212 NovacomD - ok 23:34:01.0215 8212 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys 23:34:01.0216 8212 Npfs - ok 23:34:01.0246 8212 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll 23:34:01.0249 8212 nsi - ok 23:34:01.0262 8212 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 23:34:01.0263 8212 nsiproxy - ok 23:34:01.0340 8212 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 23:34:01.0361 8212 Ntfs - ok 23:34:01.0389 8212 NTPASp50a64 - ok 23:34:01.0414 8212 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys 23:34:01.0415 8212 Null - ok 23:34:01.0455 8212 [ 9A33100AC62A0463C49E47EE8E77083A ] nusb3hub C:\Windows\system32\DRIVERS\nusb3hub.sys 23:34:01.0457 8212 nusb3hub - ok 23:34:01.0467 8212 [ 87C321F7BEE646B7EC6EEDD6EB725741 ] nusb3xhc C:\Windows\system32\DRIVERS\nusb3xhc.sys 23:34:01.0469 8212 nusb3xhc - ok 23:34:01.0507 8212 [ A85B4F2EF3A7304A5399EF0526423040 ] NVENETFD C:\Windows\system32\DRIVERS\nvm62x64.sys 23:34:01.0511 8212 NVENETFD - ok 23:34:01.0531 8212 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys 23:34:01.0533 8212 nvraid - ok 23:34:01.0558 8212 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys 23:34:01.0560 8212 nvstor - ok 23:34:01.0591 8212 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 23:34:01.0592 8212 nv_agp - ok 23:34:01.0623 8212 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 23:34:01.0624 8212 ohci1394 - ok 23:34:01.0688 8212 [ 4965B005492CBA7719E82B71E3245495 ] ose64 C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 23:34:01.0692 8212 ose64 - ok 23:34:01.0851 8212 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 23:34:01.0937 8212 osppsvc - ok 23:34:01.0959 8212 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 23:34:01.0962 8212 p2pimsvc - ok 23:34:01.0981 8212 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll 23:34:01.0987 8212 p2psvc - ok 23:34:02.0003 8212 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys 23:34:02.0004 8212 Parport - ok 23:34:02.0045 8212 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys 23:34:02.0046 8212 partmgr - ok 23:34:02.0066 8212 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll 23:34:02.0068 8212 PcaSvc - ok 23:34:02.0087 8212 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys 23:34:02.0089 8212 pci - ok 23:34:02.0099 8212 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys 23:34:02.0100 8212 pciide - ok 23:34:02.0118 8212 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys 23:34:02.0119 8212 pcmcia - ok 23:34:02.0142 8212 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys 23:34:02.0143 8212 pcw - ok 23:34:02.0166 8212 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys 23:34:02.0172 8212 PEAUTH - ok 23:34:02.0248 8212 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe 23:34:02.0251 8212 PerfHost - ok 23:34:02.0325 8212 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll 23:34:02.0353 8212 pla - ok 23:34:02.0391 8212 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 23:34:02.0396 8212 PlugPlay - ok 23:34:02.0447 8212 [ AC78DF349F0E4CFB8B667C0CFFF83CCE ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll 23:34:02.0452 8212 Pml Driver HPZ12 - ok 23:34:02.0476 8212 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 23:34:02.0479 8212 PNRPAutoReg - ok 23:34:02.0639 8212 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 23:34:02.0647 8212 PNRPsvc - ok 23:34:02.0782 8212 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 23:34:02.0792 8212 PolicyAgent - ok 23:34:02.0819 8212 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll 23:34:02.0824 8212 Power - ok 23:34:02.0853 8212 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 23:34:02.0855 8212 PptpMiniport - ok 23:34:02.0874 8212 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys 23:34:02.0876 8212 Processor - ok 23:34:02.0920 8212 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll 23:34:02.0924 8212 ProfSvc - ok 23:34:02.0937 8212 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe 23:34:02.0938 8212 ProtectedStorage - ok 23:34:02.0969 8212 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys 23:34:02.0970 8212 Psched - ok 23:34:03.0055 8212 [ EA735BF6DF13A857A83C99BF27A422AD ] PST Service C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe 23:34:03.0058 8212 PST Service - ok 23:34:03.0098 8212 [ 24DD667D22DBD29618947C804E23AA03 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys 23:34:03.0100 8212 PxHlpa64 - ok 23:34:03.0160 8212 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys 23:34:03.0179 8212 ql2300 - ok 23:34:03.0194 8212 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys 23:34:03.0195 8212 ql40xx - ok 23:34:03.0215 8212 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll 23:34:03.0218 8212 QWAVE - ok 23:34:03.0246 8212 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 23:34:03.0246 8212 QWAVEdrv - ok 23:34:03.0258 8212 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 23:34:03.0258 8212 RasAcd - ok 23:34:03.0287 8212 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 23:34:03.0287 8212 RasAgileVpn - ok 23:34:03.0316 8212 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll 23:34:03.0317 8212 RasAuto - ok 23:34:03.0332 8212 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 23:34:03.0334 8212 Rasl2tp - ok 23:34:03.0345 8212 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll 23:34:03.0349 8212 RasMan - ok 23:34:03.0357 8212 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 23:34:03.0358 8212 RasPppoe - ok 23:34:03.0388 8212 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 23:34:03.0389 8212 RasSstp - ok 23:34:03.0410 8212 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 23:34:03.0412 8212 rdbss - ok 23:34:03.0423 8212 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys 23:34:03.0423 8212 rdpbus - ok 23:34:03.0432 8212 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 23:34:03.0432 8212 RDPCDD - ok 23:34:03.0461 8212 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 23:34:03.0461 8212 RDPENCDD - ok 23:34:03.0474 8212 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 23:34:03.0474 8212 RDPREFMP - ok 23:34:03.0520 8212 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys 23:34:03.0521 8212 RdpVideoMiniport - ok 23:34:03.0559 8212 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 23:34:03.0563 8212 RDPWD - ok 23:34:03.0606 8212 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 23:34:03.0611 8212 rdyboost - ok 23:34:03.0697 8212 [ FD11C1287D38A46FB72353E14D50089C ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe 23:34:03.0714 8212 RegSrvc - ok 23:34:03.0814 8212 [ BC0DB8AE78ADA06E54EB442932AF6CFD ] Remote Solver for Flow Simulation 2011 C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\StandAloneSlv.exe 23:34:03.0817 8212 Remote Solver for Flow Simulation 2011 - ok 23:34:03.0844 8212 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll 23:34:03.0848 8212 RemoteAccess - ok 23:34:03.0875 8212 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll 23:34:03.0881 8212 RemoteRegistry - ok 23:34:03.0902 8212 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 23:34:03.0907 8212 RpcEptMapper - ok 23:34:03.0935 8212 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe 23:34:03.0938 8212 RpcLocator - ok 23:34:03.0970 8212 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll 23:34:03.0981 8212 RpcSs - ok 23:34:04.0010 8212 [ 1F5E7AF59B390261A85F5BEDB1BB88B3 ] RSPCIESTOR C:\Windows\system32\DRIVERS\RtsPStor.sys 23:34:04.0014 8212 RSPCIESTOR - ok 23:34:04.0029 8212 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 23:34:04.0031 8212 rspndr - ok 23:34:04.0069 8212 [ ED5873F7DFB2F96D37F13322211B6BDC ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys 23:34:04.0071 8212 RTL8167 - ok 23:34:04.0081 8212 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe 23:34:04.0082 8212 SamSs - ok 23:34:04.0182 8212 [ 26A05F8833938BD989199E8681B53B86 ] SAVAdminService C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe 23:34:04.0188 8212 SAVAdminService - ok 23:34:04.0234 8212 [ 2192AE4D310ADB821B38595150F5A384 ] SAVOnAccess C:\Windows\system32\DRIVERS\savonaccess.sys 23:34:04.0237 8212 SAVOnAccess - ok 23:34:04.0284 8212 [ B8A272D4E91EFB366E16BEA0FA42D7EE ] SAVService C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe 23:34:04.0288 8212 SAVService - ok 23:34:04.0322 8212 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 23:34:04.0325 8212 sbp2port - ok 23:34:04.0359 8212 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll 23:34:04.0366 8212 SCardSvr - ok 23:34:04.0391 8212 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 23:34:04.0393 8212 scfilter - ok 23:34:04.0439 8212 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll 23:34:04.0463 8212 Schedule - ok 23:34:04.0481 8212 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll 23:34:04.0482 8212 SCPolicySvc - ok 23:34:04.0510 8212 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys 23:34:04.0511 8212 sdbus - ok 23:34:04.0558 8212 [ 7D67AEABEB597C602EDB5B3AE316E96A ] sdcfilter C:\Windows\system32\DRIVERS\sdcfilter.sys 23:34:04.0560 8212 sdcfilter - ok 23:34:04.0583 8212 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll 23:34:04.0589 8212 SDRSVC - ok 23:34:04.0814 8212 [ 16B44D246835EAC156F8DAF0AA4F530C ] SeagateDashboardService C:\Program Files (x86)\Seagate\Seagate Dashboard\SeagateDashboardService.exe 23:34:04.0926 8212 SeagateDashboardService - ok 23:34:04.0953 8212 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 23:34:04.0955 8212 secdrv - ok 23:34:04.0987 8212 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll 23:34:04.0992 8212 seclogon - ok 23:34:05.0009 8212 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll 23:34:05.0013 8212 SENS - ok 23:34:05.0065 8212 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll 23:34:05.0067 8212 SensrSvc - ok 23:34:05.0083 8212 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys 23:34:05.0084 8212 Serenum - ok 23:34:05.0115 8212 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys 23:34:05.0116 8212 Serial - ok 23:34:05.0152 8212 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys 23:34:05.0152 8212 sermouse - ok 23:34:05.0166 8212 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll 23:34:05.0168 8212 SessionEnv - ok 23:34:05.0190 8212 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 23:34:05.0191 8212 sffdisk - ok 23:34:05.0214 8212 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 23:34:05.0214 8212 sffp_mmc - ok 23:34:05.0227 8212 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 23:34:05.0228 8212 sffp_sd - ok 23:34:05.0241 8212 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys 23:34:05.0241 8212 sfloppy - ok 23:34:05.0284 8212 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll 23:34:05.0293 8212 SharedAccess - ok 23:34:05.0318 8212 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll 23:34:05.0325 8212 ShellHWDetection - ok 23:34:05.0361 8212 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys 23:34:05.0362 8212 SiSRaid2 - ok 23:34:05.0384 8212 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys 23:34:05.0385 8212 SiSRaid4 - ok 23:34:05.0410 8212 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys 23:34:05.0412 8212 Smb - ok 23:34:05.0454 8212 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 23:34:05.0456 8212 SNMPTRAP - ok 23:34:05.0502 8212 [ 4945020BC094C322571184A6E8056B3A ] SolidWorks Licensing Service C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe 23:34:05.0504 8212 SolidWorks Licensing Service - ok 23:34:05.0569 8212 [ 8A12AB5DE877B8F97D5EE70E16A5C9B2 ] Sophos AutoUpdate Service C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe 23:34:05.0575 8212 Sophos AutoUpdate Service - ok 23:34:05.0638 8212 [ 69FBE35A8165ADBC313AA7F64B868CA1 ] SophosBootDriver C:\Windows\system32\DRIVERS\SophosBootDriver.sys 23:34:05.0640 8212 SophosBootDriver - ok 23:34:05.0722 8212 [ 5FA669007BD7874FBB70199211FFF64D ] SplashtopRemoteService C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe 23:34:05.0733 8212 SplashtopRemoteService - ok 23:34:05.0783 8212 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys 23:34:05.0785 8212 spldr - ok 23:34:05.0836 8212 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe 23:34:05.0850 8212 Spooler - ok 23:34:05.0965 8212 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe 23:34:06.0025 8212 sppsvc - ok 23:34:06.0050 8212 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll 23:34:06.0052 8212 sppuinotify - ok 23:34:06.0073 8212 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys 23:34:06.0078 8212 srv - ok 23:34:06.0093 8212 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 23:34:06.0097 8212 srv2 - ok 23:34:06.0130 8212 [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL6.SYS 23:34:06.0132 8212 SrvHsfHDA - ok 23:34:06.0162 8212 [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV6.SYS 23:34:06.0175 8212 SrvHsfV92 - ok 23:34:06.0203 8212 [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT6.SYS 23:34:06.0206 8212 SrvHsfWinac - ok 23:34:06.0232 8212 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 23:34:06.0234 8212 srvnet - ok 23:34:06.0250 8212 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 23:34:06.0253 8212 SSDPSRV - ok 23:34:06.0264 8212 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll 23:34:06.0265 8212 SstpSvc - ok 23:34:06.0320 8212 [ 1CFA4A1F3C7BB4C8F299E00428EB8677 ] SSUService C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe 23:34:06.0324 8212 SSUService - ok 23:34:06.0388 8212 [ 20E27AA5BCC01C2149830C05FE22F675 ] STacSV C:\Program Files\IDT\WDM\STacSV64.exe 23:34:06.0394 8212 STacSV - ok 23:34:06.0416 8212 Steam Client Service - ok 23:34:06.0438 8212 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys 23:34:06.0439 8212 stexstor - ok 23:34:06.0493 8212 [ BEB37CE4E7456F5EFA52D783D1E06D8C ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys 23:34:06.0502 8212 STHDA - ok 23:34:06.0550 8212 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll 23:34:06.0560 8212 stisvc - ok 23:34:06.0581 8212 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys 23:34:06.0582 8212 swenum - ok 23:34:06.0718 8212 [ B3379659D773BFDD3B631F5FEE2FF2B3 ] swi_service C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe 23:34:06.0746 8212 swi_service - ok 23:34:07.0158 8212 [ F6A5E474ED27BA7938A1D0CA19F7008B ] swi_update_64 C:\ProgramData\Sophos\Web Intelligence\swi_update_64.exe 23:34:07.0173 8212 swi_update_64 - ok 23:34:07.0204 8212 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll 23:34:07.0207 8212 swprv - ok 23:34:07.0255 8212 [ AC3CC98B1BDB6540021D3FFB105AC2B9 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys 23:34:07.0257 8212 SynTP - ok 23:34:07.0300 8212 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll 23:34:07.0318 8212 SysMain - ok 23:34:07.0336 8212 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll 23:34:07.0338 8212 TabletInputService - ok 23:34:07.0373 8212 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll 23:34:07.0380 8212 TapiSrv - ok 23:34:07.0397 8212 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll 23:34:07.0402 8212 TBS - ok 23:34:07.0472 8212 [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 23:34:07.0497 8212 Tcpip - ok 23:34:07.0543 8212 [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 23:34:07.0552 8212 TCPIP6 - ok 23:34:07.0584 8212 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 23:34:07.0585 8212 tcpipreg - ok 23:34:07.0610 8212 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 23:34:07.0611 8212 TDPIPE - ok 23:34:07.0632 8212 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 23:34:07.0634 8212 TDTCP - ok 23:34:07.0656 8212 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 23:34:07.0658 8212 tdx - ok 23:34:07.0676 8212 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys 23:34:07.0679 8212 TermDD - ok 23:34:07.0710 8212 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll 23:34:07.0721 8212 TermService - ok 23:34:07.0739 8212 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll 23:34:07.0741 8212 Themes - ok 23:34:07.0776 8212 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll 23:34:07.0778 8212 THREADORDER - ok 23:34:07.0801 8212 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll 23:34:07.0804 8212 TrkWks - ok 23:34:07.0889 8212 [ F7DFF9C646DD48885EC55B16C0EAE1A4 ] TrueService C:\Program Files\Common Files\AuthenTec\TrueService.exe 23:34:07.0921 8212 TrueService - ok 23:34:07.0958 8212 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 23:34:07.0959 8212 TrustedInstaller - ok 23:34:07.0978 8212 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 23:34:07.0978 8212 tssecsrv - ok 23:34:08.0031 8212 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 23:34:08.0031 8212 TsUsbFlt - ok 23:34:08.0050 8212 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys 23:34:08.0051 8212 TsUsbGD - ok 23:34:08.0075 8212 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 23:34:08.0078 8212 tunnel - ok 23:34:08.0105 8212 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys 23:34:08.0106 8212 uagp35 - ok 23:34:08.0125 8212 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 23:34:08.0128 8212 udfs - ok 23:34:08.0154 8212 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe 23:34:08.0155 8212 UI0Detect - ok 23:34:08.0175 8212 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 23:34:08.0176 8212 uliagpkx - ok 23:34:08.0195 8212 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys 23:34:08.0196 8212 umbus - ok 23:34:08.0221 8212 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 23:34:08.0222 8212 UmPass - ok 23:34:08.0337 8212 [ A678E5DDD974903DD71F503BDCACA218 ] UNS C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe 23:34:08.0360 8212 UNS - ok 23:34:08.0387 8212 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll 23:34:08.0391 8212 upnphost - ok 23:34:08.0433 8212 [ 82E8F44688E6FAC57B5B7C6FC7ADBC2A ] usbaudio C:\Windows\system32\drivers\usbaudio.sys 23:34:08.0435 8212 usbaudio - ok 23:34:08.0468 8212 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 23:34:08.0471 8212 usbccgp - ok 23:34:08.0507 8212 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys 23:34:08.0509 8212 usbcir - ok 23:34:08.0538 8212 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\drivers\usbehci.sys 23:34:08.0539 8212 usbehci - ok 23:34:08.0569 8212 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 23:34:08.0573 8212 usbhub - ok 23:34:08.0588 8212 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys 23:34:08.0589 8212 usbohci - ok 23:34:08.0610 8212 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 23:34:08.0611 8212 usbprint - ok 23:34:08.0642 8212 [ AAA2513C8AED8B54B189FD0C6B1634C0 ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys 23:34:08.0644 8212 usbscan - ok 23:34:08.0673 8212 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 23:34:08.0675 8212 USBSTOR - ok 23:34:08.0691 8212 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 23:34:08.0693 8212 usbuhci - ok 23:34:08.0723 8212 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys 23:34:08.0726 8212 usbvideo - ok 23:34:08.0766 8212 [ 70D05EE263568A742D14E1876DF80532 ] usb_rndisx C:\Windows\system32\DRIVERS\usb8023x.sys 23:34:08.0767 8212 usb_rndisx - ok 23:34:08.0788 8212 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll 23:34:08.0790 8212 UxSms - ok 23:34:08.0804 8212 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe 23:34:08.0805 8212 VaultSvc - ok 23:34:08.0817 8212 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 23:34:08.0818 8212 vdrvroot - ok 23:34:08.0836 8212 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe 23:34:08.0843 8212 vds - ok 23:34:08.0863 8212 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 23:34:08.0863 8212 vga - ok 23:34:08.0872 8212 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys 23:34:08.0872 8212 VgaSave - ok 23:34:08.0905 8212 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 23:34:08.0907 8212 vhdmp - ok 23:34:08.0926 8212 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys 23:34:08.0928 8212 viaide - ok 23:34:08.0958 8212 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys 23:34:08.0960 8212 volmgr - ok 23:34:08.0976 8212 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 23:34:08.0982 8212 volmgrx - ok 23:34:09.0133 8212 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys 23:34:09.0246 8212 volsnap - ok 23:34:09.0486 8212 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys 23:34:09.0489 8212 vsmraid - ok 23:34:09.0539 8212 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe 23:34:09.0561 8212 VSS - ok 23:34:09.0580 8212 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 23:34:09.0580 8212 vwifibus - ok 23:34:09.0616 8212 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 23:34:09.0616 8212 vwififlt - ok 23:34:09.0639 8212 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys 23:34:09.0641 8212 vwifimp - ok 23:34:09.0681 8212 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll 23:34:09.0690 8212 W32Time - ok 23:34:09.0711 8212 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys 23:34:09.0712 8212 WacomPen - ok 23:34:09.0755 8212 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 23:34:09.0757 8212 WANARP - ok 23:34:09.0761 8212 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 23:34:09.0763 8212 Wanarpv6 - ok 23:34:09.0820 8212 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe 23:34:09.0832 8212 WatAdminSvc - ok 23:34:09.0896 8212 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe 23:34:09.0917 8212 wbengine - ok 23:34:09.0928 8212 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 23:34:09.0931 8212 WbioSrvc - ok 23:34:09.0948 8212 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll 23:34:09.0951 8212 wcncsvc - ok 23:34:09.0981 8212 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 23:34:09.0982 8212 WcsPlugInService - ok 23:34:10.0005 8212 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys 23:34:10.0007 8212 Wd - ok 23:34:10.0065 8212 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 23:34:10.0079 8212 Wdf01000 - ok 23:34:10.0106 8212 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll 23:34:10.0109 8212 WdiServiceHost - ok 23:34:10.0113 8212 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll 23:34:10.0116 8212 WdiSystemHost - ok 23:34:10.0151 8212 [ 5E1640435DD54D00451156CA5340B109 ] wdkmd C:\Windows\system32\DRIVERS\WDKMD.sys 23:34:10.0152 8212 wdkmd - ok 23:34:10.0177 8212 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll 23:34:10.0181 8212 WebClient - ok 23:34:10.0221 8212 [ D5BA7D43FA2EF656BF7E98A188391E40 ] Wecsvc C:\Windows\system32\wecsvc.dll 23:34:10.0224 8212 Wecsvc - ok 23:34:10.0248 8212 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll 23:34:10.0251 8212 wercplsupport - ok 23:34:10.0277 8212 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll 23:34:10.0280 8212 WerSvc - ok 23:34:10.0297 8212 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 23:34:10.0298 8212 WfpLwf - ok 23:34:10.0312 8212 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys 23:34:10.0313 8212 WIMMount - ok 23:34:10.0323 8212 WinDefend - ok 23:34:10.0336 8212 WinHttpAutoProxySvc - ok 23:34:10.0407 8212 [ 136760C1E9697BAF4ECDEAE5590A0806 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 23:34:10.0412 8212 Winmgmt - ok 23:34:10.0486 8212 [ 3BB6B401A780BF434C8F58137DE10BF7 ] WinRM C:\Windows\system32\WsmSvc.dll 23:34:10.0510 8212 WinRM - ok 23:34:10.0546 8212 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUSB.sys 23:34:10.0547 8212 WinUsb - ok 23:34:10.0583 8212 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll 23:34:10.0592 8212 Wlansvc - ok 23:34:10.0623 8212 [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc C:\Program Files\Windows Live\Mesh\wlcrasvc.exe 23:34:10.0624 8212 wlcrasvc - ok 23:34:10.0729 8212 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 23:34:10.0756 8212 wlidsvc - ok 23:34:10.0782 8212 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 23:34:10.0782 8212 WmiAcpi - ok 23:34:10.0818 8212 [ 4DF841632B62A7CF19A79A05046A8AB1 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 23:34:10.0821 8212 wmiApSrv - ok 23:34:10.0850 8212 WMPNetworkSvc - ok 23:34:10.0869 8212 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll 23:34:10.0871 8212 WPCSvc - ok 23:34:10.0887 8212 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 23:34:10.0891 8212 WPDBusEnum - ok 23:34:10.0912 8212 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 23:34:10.0913 8212 ws2ifsl - ok 23:34:10.0951 8212 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll 23:34:10.0956 8212 wscsvc - ok 23:34:11.0007 8212 [ 8D918B1DB190A4D9B1753A66FA8C96E8 ] WSDPrintDevice C:\Windows\system32\DRIVERS\WSDPrint.sys 23:34:11.0008 8212 WSDPrintDevice - ok 23:34:11.0015 8212 WSearch - ok 23:34:11.0087 8212 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll 23:34:11.0109 8212 wuauserv - ok 23:34:11.0142 8212 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 23:34:11.0143 8212 WudfPf - ok 23:34:11.0156 8212 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 23:34:11.0157 8212 WUDFRd - ok 23:34:11.0173 8212 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 23:34:11.0175 8212 wudfsvc - ok 23:34:11.0195 8212 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll 23:34:11.0197 8212 WwanSvc - ok 23:34:11.0222 8212 ================ Scan global =============================== 23:34:11.0238 8212 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll 23:34:11.0390 8212 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 23:34:11.0404 8212 [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll 23:34:11.0435 8212 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll 23:34:11.0593 8212 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe 23:34:11.0601 8212 [Global] - ok 23:34:11.0602 8212 ================ Scan MBR ================================== 23:34:11.0620 8212 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0 23:34:11.0881 8212 \Device\Harddisk0\DR0 - ok 23:34:11.0882 8212 ================ Scan VBR ================================== 23:34:11.0887 8212 [ BF2E0BC5398AAE3C0401ABCEB5D0BFFE ] \Device\Harddisk0\DR0\Partition1 23:34:11.0890 8212 \Device\Harddisk0\DR0\Partition1 - ok 23:34:11.0909 8212 [ 896D9FE3F1F7950E217A795410437691 ] \Device\Harddisk0\DR0\Partition2 23:34:11.0911 8212 \Device\Harddisk0\DR0\Partition2 - ok 23:34:11.0943 8212 [ 530061D38A61009830F5DCBCBA86B190 ] \Device\Harddisk0\DR0\Partition3 23:34:11.0947 8212 \Device\Harddisk0\DR0\Partition3 - ok 23:34:11.0964 8212 [ A398505398BD0BE58B7C7B64E1280C04 ] \Device\Harddisk0\DR0\Partition4 23:34:11.0966 8212 \Device\Harddisk0\DR0\Partition4 - ok 23:34:11.0967 8212 ============================================================ 23:34:11.0967 8212 Scan finished 23:34:11.0967 8212 ============================================================ 23:34:11.0987 8168 Detected object count: 0 23:34:11.0987 8168 Actual detected object count: 0

Robybel

Post #27April 4, 2013, 4:32 AM UTC

Hi keeperref

P2P Programs:

P2P programs are a major source of Malware infections.
From your log I see you have BitTorrent We do not pass judgment on file-sharing, however we must inform you that engaging in this activity and having this kind of software installed on your system will always make you more susceptible to Malware infections.
The use of P2P programs may be contributing to your current situation, and you would certainly be doing yourself a favour by removing them.
If you wish to keep the program(s), please do not use them until your computer is cleaned.

Information regarding the risk of using these programs can be found from here and here

AdwCleaner

Please download AdwCleaner by Xplode onto your desktop.
Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Delete.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the content of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

Download RogueKiller and save it to your desktop.
Quit all other programs
Start RogueKiller.exe
Wait until the Prescan has finished …
Click on Scan
[external image: Posted Image]
Wait for the end of the scan
A report will be created on your desktop.
Click on the Delete button
[external image: Posted Image]
Next click on the ShortcutsFix
[external image: Posted Image]
another report will be created on your desktop.

Please post: All RKreport.txt text files located on your desktop.

On your next reply please post :
AdwCleaner[S1].txt
All RKreport.txt

Let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

Please do not attach the log but Copy/paste their contents

keeperref

Post #28April 6, 2013, 10:49 PM UTC

Note: this showed up as [S2] since you had me run adwcleaner previously.

# AdwCleaner v2.200 - Logfile created 04/06/2013 at 18:23:51
# Updated 02/04/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Andrew - ANDREW-HP
# Boot Mode : Normal
# Running from : C:\Users\Andrew\Desktop\adwcleaner.exe
# Option [Delete]

***** [Services] *****

***** [Files / Folders] *****

***** [Registry] *****

***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16521

[OK] Registry is clean.

-\\ Mozilla Firefox v18.0.1 (en-US)

File : C:\Users\Andrew\AppData\Roaming\Mozilla\Firefox\Profiles\xkuob079.default\prefs.js

[OK] File is clean.

-\\ Google Chrome v26.0.1410.43

File : C:\Users\Andrew\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

-\\ Opera v11.61.1250.0

File : C:\Users\Andrew\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] File is clean.

*************************

AdwCleaner[S1].txt - [2099 octets] - [16/02/2013 21:51:00]
AdwCleaner[S2].txt - [995 octets] - [06/04/2013 18:23:51]

########## EOF - C:\AdwCleaner[S2].txt - [1054 octets] ##########

RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Website : http://tigzy.geekstogo.com/roguekiller.php
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Andrew [Admin rights]
Mode : Scan – Date : 04/06/2013 18:35:50
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 5 ¤¤¤
[HJPOL] HKCU\[…]\System : disableregistrytools (0) -> FOUND
[HJ DESK] HKCU\[…]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[HJ DESK] HKCU\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
[HJ DESK] HKLM\[…]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
–> C:\Windows\system32\drivers\etc\hosts

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: Hitachi HTS547575A9E384 +++++
— User —
[MBR] 4ec1307a748e252b82286d7204878e8c
[BSP] 020c9e162599a6e0ef6bf64a048703f7 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 199 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 409600 | Size: 700507 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 1435047936 | Size: 14594 Mo
3 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 1464936448 | Size: 102 Mo
User = LL1 … OK!
User != LL2 … KO!
— LL2 —
[MBR] 1a6b56e3b8874dbce1e7ab81e4003acf
[BSP] 020c9e162599a6e0ef6bf64a048703f7 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 409600 | Size: 77824 Mo
1 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 159793152 | Size: 400 Mo

Finished : << RKreport[1]_S_04062013_02d1835.txt >>
RKreport[1]_S_04062013_02d1835.txt

RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Website : http://tigzy.geekstogo.com/roguekiller.php
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Andrew [Admin rights]
Mode : Remove – Date : 04/06/2013 18:37:15
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 5 ¤¤¤
[HJPOL] HKCU\[…]\System : disableregistrytools (0) -> DELETED
[HJ DESK] HKCU\[…]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[HJ DESK] HKCU\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
[HJ DESK] HKLM\[…]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK] HKLM\[…]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
–> C:\Windows\system32\drivers\etc\hosts

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: Hitachi HTS547575A9E384 +++++
— User —
[MBR] 4ec1307a748e252b82286d7204878e8c
[BSP] 020c9e162599a6e0ef6bf64a048703f7 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 199 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 409600 | Size: 700507 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 1435047936 | Size: 14594 Mo
3 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 1464936448 | Size: 102 Mo
User = LL1 … OK!
User != LL2 … KO!
— LL2 —
[MBR] 1a6b56e3b8874dbce1e7ab81e4003acf
[BSP] 020c9e162599a6e0ef6bf64a048703f7 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 409600 | Size: 77824 Mo
1 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 159793152 | Size: 400 Mo

Finished : << RKreport[2]_D_04062013_02d1837.txt >>
RKreport[1]_S_04062013_02d1835.txt ; RKreport[2]_D_04062013_02d1837.txt

RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy
mail : tigzyRKgmailcom
Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/
Website : http://tigzy.geekstogo.com/roguekiller.php
Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Andrew [Admin rights]
Mode : Shortcuts HJfix – Date : 04/06/2013 18:42:19
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ File attributes restored: ¤¤¤
Desktop: Success 2 / Fail 0
Quick launch: Success 1 / Fail 0
Programs: Success 15 / Fail 0
Start menu: Success 0 / Fail 0
User folder: Success 665 / Fail 0
My documents: Success 694 / Fail 694
My favorites: Success 0 / Fail 0
My pictures: Success 0 / Fail 0
My music: Success 1254 / Fail 0
My videos: Success 0 / Fail 0
Local drives: Success 115 / Fail 0
Backup: [NOT FOUND]

Drives:
[C:] \Device\HarddiskVolume2 – 0x3 –> Restored
[D:] \Device\HarddiskVolume3 – 0x3 –> Restored
[E:] \Device\CdRom0 – 0x5 –> Skipped
[F:] \Device\HarddiskVolume4 – 0x3 –> Restored
[G:] \Device\CdRom1 – 0x5 –> Skipped

Finished : << RKreport[3]_SC_04062013_02d1842.txt >>
RKreport[1]_S_04062013_02d1835.txt ; RKreport[2]_D_04062013_02d1837.txt ; RKreport[3]_SC_04062013_02d1842.txt

Note: I have a number of things in my documents that I have hidden since that is where a particular program automatically installs and reads from, but I don't want to see 20 folders in my docs.

keeperref

Post #29April 6, 2013, 10:52 PM UTC

Also, per your advice, I uninstalled BitTorrent. Thanks for the heads up.

Robybel

Post #30April 7, 2013, 3:54 PM UTC

Hi keeperref

Very good job
Drag your Combofix icon into the trash

Please read through these instructions to familarize yourself with what to expect when this tool runs

Refer to the ComboFix User's Guide

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT- Save ComboFix.exe to your Desktop

====================================================

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs

====================================================

Double click on combofix.exe & follow the prompts.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply for further review.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

small.ca Virus [Closed]

✨ Ask AI

Ask AI